- Discuss - lists.centos.org

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Always Learning 17 Jan '14

17 Jan '14

On Tue, 2014-01-07 at 21:09 +0000, Karanbir Singh wrote: > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. Essentially Red Hat is slowly taking over and developing/assisting Centos to be a more regular and structure organisation. The fact that Red Hat now owns the Centos brand worries me but that's life. Absolutely nothing remains static. Centos was created by many ordinary people to whom I am very grateful. Its a really great operating system. I genuinely like it, hence I abandoned M$ completely about 5 years ago and have never regretted it. I just wish I had migrated to Centos many years earlier. Red Hat will gain commercially from their de facto take-over. One of the general beneficial effects will be bringing Linux into the vast mainstream of everyday computing and attracting (or should that be enticing?) M$ business users. Working as a single team with Red Hat will inevitably mean speedier updates for Centos users. I love Linux and want this merger to succeed. I'm patiently waiting for Centos on my Cube (Android) tablet. Happy New Year. -- Paul. England, EU. Our systems are exclusively Linux. No Micro$oft Windoze here. EXIM: chlothar.bnv-bamberg.de = 217.146.130.222 but HELO bnv-bamberg.de has no IP address

5 7

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by m.roth＠5-cent.us 17 Jan '14

17 Jan '14

John R. Dennison wrote: > On Fri, Jan 17, 2014 at 05:55:54PM +0100, Ljubomir Ljubojevic wrote: >> >> Ok, what ever, I am done wasting time on you. > > Excellent. Now if others would stop responding to the trolls it would > be even better. > Can't resist: I think he's trying to get our goat... and everyone knows what happens when a troll runs into a goat.... mark "your folks *did* tell you that story, right?"

1 0

Your opinion about RHCSA certification
by Fabrizio Di Carlo 17 Jan '14

17 Jan '14

Hello to all, I'm currently studying (and collecting notes here https://github.com/fdicarlo/RHCSA_cs) for RHCSA. My plan is to RHCSA -> RHCE and then RHCSS. What I want to ask you is: - What do you think about it? - Did you find it useful? - Do you have any advices? Best regards, Fabrizio -- "The intuitive mind is a sacred gift and the rational mind is a faithful servant. We have created a society that honors the servant and has forgotten the gift." (A. Einstein) "La mente intuitiva è un dono sacro e la mente razionale è un fedele servo. Noi abbiamo creato una società che onora il servo e ha dimenticato il dono." (A. Einstein) Fabrizio Di Carlo

7 9

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Always Learning 17 Jan '14

17 Jan '14

On Tue, 2014-01-07 at 21:09 +0000, Karanbir Singh wrote: > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. But there is more to Red Hat's de facto "take-over" including the imposition of USA's domestic law on citizens all around the world. The compulsory imposition of USA law on all Centos downloaders creates the possibility of being arrested in one's home country and sent to the USA for a criminal trial. A few people in Britain have been extradited to the USA for criminal trials for matters which are not criminal in Britain. Can anyone remember seeing this on the old Centos .... ? http://www.centos.org/legal/ Export Regulations By downloading CentOS software, you acknowledge that you understand all of the following: CentOS software and technical information may be subject to the U.S. Export Administration Regulations (the “EAR”) and other U.S. and foreign laws and may not be exported, re-exported or transferred (a) to any country listed in Country Group E:1 in Supplement No. 1 to part 740 of the EAR (currently, Cuba, Iran, North Korea, Sudan & Syria); (b) to any prohibited destination or to any end user who has been prohibited from participating in U.S. export transactions by any federal agency of the U.S. government; or (c) for use in connection with the design, development or production of nuclear, chemical or biological weapons, or rocket systems, space launch vehicles, or sounding rockets, or unmanned air vehicle systems. You may not download CentOS software or technical information if you are located in one of these countries or otherwise subject to these restrictions. You may not provide CentOS software or technical information to individuals or entities located in one of these countries or otherwise subject to these restrictions. You are also responsible for compliance with foreign law requirements applicable to the import, export and use of CentOS software and technical information. This is a Community mantained site. Red Hat, Inc is not responsible for its content. -------------------------------------- -- Paul. England, EU. Our systems are exclusively Linux. No Micro$oft Windoze here.

9 17

Centos6.5 -- Broadcom BCM4313 -- having trouble connecting
by Johan Vermeulen 17 Jan '14

17 Jan '14

Dear All, I'm having trouble on 2 laptops Lenovo B580 since upgrading to Centos6.5. ( Because it's a Lenovo I cannot switch the network card for a better supported network card. ) There on the latest kernel : root@jac network-scripts]# uname -a Linux jac.cawdekempen 2.6.32-431.1.2.0.1.el6.x86_64 #1 SMP Fri Dec 13 13:06:13 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux With the help of the Elrepo Broadcom page I got the driver and that part works fine. The network card works : # vi /etc/udev/rules.d/70-persistent-net.rules # PCI device 0x14e4:0x4727 (wl) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="c0:14:3d:c1:f6:ef", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" # uname -a eth1 Link encap:Ethernet HWaddr C0:14:3D:C1:F6:EF inet6 addr: fe80::c214:3dff:fec1:f6ef/64 Scope:Link UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:651 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:17 But I cannot connect to any wireless network with neither of the machines. I click on the gnome-nm-applet and type in the password. [root@jac network-scripts]# tail -f /var/log/messages Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'scan_ssid' value '1' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'key_mgmt' value 'WPA-PSK' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'psk' value '<omitted>' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'group' value 'TKIP CCMP' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Activation (eth1) Stage 2 of 5 (Device Configure) complete. Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: set interface ap_scan to 1 Dec 19 11:10:17 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: inactive -> scanning Dec 19 11:10:18 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: scanning -> associating Dec 19 11:10:28 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: associating -> disconnected Dec 19 11:10:28 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: disconnected -> scanning Dec 19 11:10:29 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: scanning -> associating Dec 19 11:10:39 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: associating -> disconnected Dec 19 11:10:39 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: disconnected -> scanning Dec 19 11:10:40 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: scanning -> associating Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Activation (eth1/wireless): association took too long. Dec 19 11:10:42 jac NetworkManager[2148]: <info> (eth1): device state change: 5 -> 6 (reason 0) Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Activation (eth1/wireless): asking for new secrets Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Couldn't disconnect supplicant interface: Method "Disconnect" with signature "" on interface "fi.epitest.hostap.WPASupplicant.Interface" doesn't exist#012. Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Couldn't disconnect supplicant interface: Method "Disconnect" with signature "" on interface "fi.epitest.hostap.WPASupplicant.Interface" doesn't exist#012. Dec 19 11:10:42 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: associating -> disconnected Dec 19 11:10:43 jac NetworkManager[2148]: <info> (eth1): device state change: 6 -> 9 (reason 7) Dec 19 11:10:43 jac NetworkManager[2148]: <warn> Activation (eth1) failed for access point (Clive) Dec 19 11:10:43 jac NetworkManager[2148]: <info> Marking connection 'Auto Clive' invalid. Dec 19 11:10:43 jac NetworkManager[2148]: <warn> Activation (eth1) failed. Dec 19 11:10:43 jac NetworkManager[2148]: <info> (eth1): device state change: 9 -> 3 (reason 0) Dec 19 11:10:43 jac NetworkManager[2148]: <info> (eth1): deactivating device (reason: 0). googling for "centos6 WPASupplicant.Interface" doesn't exist#012" I found this bug: http://bugs.centos.org/view.php?id=5834 could this be the same issue? Greetings, J. -- Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Opensource Software is the future.

2 4

default gw route has gone?
by Rob Kampen 16 Jan '14

16 Jan '14

Weird behaviour. A couple of days ago I installed another DSL router. During the process I have somehow caused the default gw route to disappear - on system start up the interface comes up fine, I can see and connect to the local subnet but not to the internet. [rkampen@timsws network-scripts]$ route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 link-local * 255.255.0.0 U 1002 0 0 eth0 is what I get at startup. I need to add sudo route add default gw 192.168.1.1 to get things working properly. [rkampen@timsws network-scripts]$ route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 link-local * 255.255.0.0 U 1002 0 0 eth0 default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 Google shows me a number of responses that all tell me to add a line to /etc/sysconfig/network which I already had. [rkampen@timsws network-scripts]$ cat /etc/sysconfig/network NETWORKING=yes HOSTNAME=timsws GATEWAY=192.168.1.1 and [rkampen@timsws network-scripts]$ cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE="eth0" NM_CONTROLLED="yes" ONBOOT=yes TYPE=Ethernet BOOTPROTO=dhcp DEFROUTE=no IPV4_FAILURE_FATAL=yes IPV6INIT=no NAME="System eth0" UUID=5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03 HWADDR=00:24:8C:80:0B:15 PEERDNS=yes PEERROUTES=yes LAST_CONNECT=1389583930 So what am I missing? BTW - all other devices are working just fine - just my main CentOS 6.5 WS fails. TIA

5 5

NetworkManger trying to start Supplicant
by david 16 Jan '14

16 Jan '14

Folks In Centos 6.5, I am getting the message in the log file every few minutes: NetworkManager: <info> Trying to start the supplicant... There is no wireless on that computer, but there are two NICs, because it is my home gateway. Is there some tweak that can prevent this message? The installation is a relatively new one, so all packages are "up-to-date". David Kurn

2 1

CentOS on this Laptop
by Steve Clark 16 Jan '14

16 Jan '14

Hi List, Just wondering if anyone has tried CentOS on this laptop. HP ENVY 15-j067cl 15.6 Sam's club is selling it for $699 right now. http://www.samsclub.com/sams/hp-15-6-touch-nb-intel-core-i7-4700qm/prod1161… HP ENVY 15-j067cl 15.6" Touchscreen Laptop Computer, Intel Core i7-4700QM, 8GB Memory, 750GB Hard Drive Thanks, -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

2 2

odd issue with ipmitool
by m.roth＠5-cent.us 16 Jan '14

16 Jan '14

Got an older server running 6.5. I've been fighting it - I have two webcams for surveillance of the room; one works with motion, but it resizes the picture down Adjusting resolution from 640x480 to 360x296 and the video's dark and bad contrast. So I went back to the camer I'd been using before that worked fine... on CentOS 5.x, and then I remembered why I'd gone to the other camera - the bottom 40% of so of the screen is green - no picture, just green. Doing a *lot* of googling, I saw references to this, and a number of folks suggesting problems with USB messages. Now, I've tried plugging it in both front and back of the server, given the possibility that there was a difference in versions of USB support, but no joy. So this morning, I started wondering if there was something going on, hardware-wise, on the box. Installed OpenIPMI and ipmitools, fired it up, and tried to do a simple ipmitool sel list... and get "unspecified error". Ok, I said to myself, I tried ipmitool sel 1, ditto... but 2 gives me Get SDR 0003 command failed: Unspecified error Get SDR 0005 command failed: Unspecified error Get SDR 0009 command failed: Unspecified error Get SDR 0014 command failed: Unspecified error Get SDR 0017 command failed: Unspecified error and then a record. I tried jumping around - 200 (which I've seen as the limit on other machines), nothing, 150, yes, 156 or so, yes. Not some lower numbers. So, now the question is whether something screwy is going on with the hardware... or if just, for some reason, the SEL is screwed up. Note that ipmitool sdr list works fine.... mark

1 0

CentOS-announce Digest, Vol 107, Issue 9
by centos-announce-request＠centos.org 16 Jan '14

16 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:0026 Critical CentOS 6 java-1.7.0-openjdk Update (Johnny Hughes) 2. CESA-2014:0027 Important CentOS 5 java-1.7.0-openjdk Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Jan 2014 11:04:23 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0026 Critical CentOS 6 java-1.7.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20140115110423.GA23069(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0026 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0026.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 23a0398eef38be83195eb0fccc24ebe54b3ca51edd350b09fa6a05d256ee63cc java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el6_5.i686.rpm 64371a3e7b476b95f4bfda3f805f237fa431ef21d3e79f786f2ff8e355dfcb82 java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el6_5.i686.rpm bb0c14e74121c9c2ca9a28d0f2f4aae69ca9efc151d484c5d2f064bf7dcf1d18 java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el6_5.i686.rpm f9099825fd1474021c73792e11f06722ae6d2ccaa0fd44bc63bb88624543edde java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el6_5.noarch.rpm f7290801eeb6a3b01fe36c973fbaa2131c3ae4dad9d01fc542c9d721b37abb67 java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el6_5.i686.rpm x86_64: c4314a7f9938f7beb7d106ecd26844a3d883d91077d4bdeec40ce5e9d086b85e java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm b9d76670ba0dc34bace9c995e6b3dc6c17cc8dade24a862243c2d75d18c0329b java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm 9440abb63aa7a5bb75e61c5a2e58483aeb302a1dbcac50d72290949783830029 java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm f9099825fd1474021c73792e11f06722ae6d2ccaa0fd44bc63bb88624543edde java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el6_5.noarch.rpm dac184e8c4d88dbc5da9db40561d08a75f3424b4e9502141a021f3d54e348de5 java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm Source: e38afbec2f04dfc0982594724a371805b278a431e0ee9d220f003adda5ef348d java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 15 Jan 2014 11:16:34 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0027 Important CentOS 5 java-1.7.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20140115111634.GA11446(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0027 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0027.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 30812d30d8ede7fa1c21174522d59bf12187bd99006475d1fcaf6bb76cf4e8ed java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el5_10.i386.rpm 697b27dabe7ea3d0cc7a7b6ad307ce08c35295064dd09958a5516c5afd3d2afb java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el5_10.i386.rpm b5f7a2a90818e54abde223abf151907d714971dd7fef5d8b19c1c5743b406ffe java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el5_10.i386.rpm 30b3270acfd54ff77e9ad50c76b0eb3443ba97f36b702b5bd8b15fb14cb56d9e java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el5_10.i386.rpm 71acfb7f04742a70a0b905cc677d7cf8b72990b03f0a6f9b27298e78820fc897 java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el5_10.i386.rpm x86_64: 189f7dd3675dc9fb44e3410deae51340fc05b4ff27379715e8c6f5b9f75776c9 java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm 73336ebf7af849ec5e54335793fc651a2444f6e0b5362bbd21e30f157862c6ae java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm 2e8db52d26a53505cb20eac30147543b9ae6cc6aadd32b2801ff1c6725b56a5f java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm d9cc947dd116121bc0ee7e50780e45f4b7ee64f2eb03960c847801473de221cf java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm 0f12680bcb206978475ac6f7b1b724eed7396ec71a04f63ea34177e39e0afdce java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm Source: 7c14457f4849035141a63445e25f650aef4c155e525862117c1bad97ba76725f java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el5_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 9 ***********************************************

1 0

Fwd: HA cluster - strange communication between nodes
by Martin Moravcik 16 Jan '14

16 Jan '14

Hi, For a testing purposes I'm trying to create two node HA environment for running some service (openvpn and haproxy). I installed two CentOS 6.4 KVM guests. I was able to create a cluster and some resources. I followed the document https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux… But my cluster behaves not as expected: After start of cluster sw on both nodes, they can see each other. ---------------------------------------- [root@lb1 ~]# pcs status Cluster name: LB.STK Last updated: Mon Jan 13 15:34:21 2014 Last change: Mon Jan 13 15:24:47 2014 via cibadmin on lb1.asol.local Stack: cman Current DC: lb1.asol.local - partition with quorum Version: 1.1.10-14.el6_5.1-368c726 2 Nodes configured 2 Resources configured Online: [ lb1.asol.local lb2.asol.local ] Full list of resources: Resource Group: LB LAN.VIP (ocf::heartbeat:IPaddr2): Started lb2.asol.local WAN.VIP (ocf::heartbeat:IPaddr2): Started lb2.asol.local ---------------------------------------- After manual shutdown of one node 2 (pcs cluster stop), the node 1 doesn't get this information and still believes node 2 is up and running. In the log of corosync @lb2 these lines are repeating: Jan 13 15:38:43 [1712] lb2.asol.local cib: info: crm_client_new: Connecting 0x25a3810 for uid=0 gid=0 pid=10763 id=2b06a195-11f6-452d-992b-5ea0c69be21a Jan 13 15:38:43 [1712] lb2.asol.local cib: info: cib_process_request: Completed cib_query operation for section 'all': OK (rc=0, origin=local/crm_resource/2, version=0.7.4) Jan 13 15:38:43 [1712] lb2.asol.local cib: info: crm_client_destroy: Destroying 0 events Jan 13 17:24:24 corosync [TOTEM ] Retransmit List: 9a 9b 9c The firewall on both nodes is open for incomming traffic from these nodes and stonith-enabled is set to false. I created keys for root user, so I can make ssh back and forth without using password. The pacemaker's version is 1.1.10-14. Do you have any idea, where might be a problem? thanks martin

6 8

Mock and Mock again
by James B. Byrne 15 Jan '14

15 Jan '14

Question: If I use mock to build package rpmA from tarballA but rpmA has a dependency that can only be satisfied by package rpmB which must also be built from tarballB then how does the rpmB built from the tarballB get pulled into mock when building rpmA? I am trying to build httpd-2.4.7 from Apache and that needs apr-devel and apr-util-devel > 1.4. I can build apr and apr-utils in mock but I cannot find clear instructions on how to get the custom built rpms into the mock build for httpd. I presume that the procedure it is so simple that nobody thinks it necessary to write it out but I cannot figure it out on my own. Do I just build the things in order and leave them in the mock root for the subsequent httpd build to find? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] A question about 7
by m.roth＠5-cent.us 15 Jan '14

15 Jan '14

Warren Young wrote: > On 1/13/2014 07:33, m.roth(a)5-cent.us wrote: <snip> >> Reason for this: at one of my local sf clubs, I've been trying to install Evergreen, F/OSS library software, on a system, and it's a nightmare. >> They seem to have been building it for Ubuntu whateverthelatestanimalis. The >> biggest problem is, IIRC, eventhandler and memchached; oh, and it uses postgresql 9, and nothing else. PGSQL 9 was not a big deal to install, but the other stuff.... Even trying to build it in /usr/local is a royal mess:though I've got the dbi installed, ./configure can't find it. > > Post an actual error message, and someone may be able to help. That's not a problem, well, the issue, as I said, is that configure can't find the interface, even when I've given it the correct paths. Can't really just give it to you, since a) I'm at work, in the DC 'burbs, and b) the clubhouse is up in Baltimore. Not building it at home - I've got other things to build (like xtrackcad).... Thanks for the offer, though. I'm sure there's either some environment variable it isn't happy with, or is missing, or an option isn't right to tell it what path to use. mark

14 30

Advice in Time Sync
by Ku Wei Xiong 15 Jan '14

15 Jan '14

Dear all, I would need some advice as I am a beginner in CentOS. The question is as follows: How to set up timing if NTP was block by ISP? I have try many way such as link the timezone , getting from the hardware clock.However , it is not the solution. Please advice. -- Regards, Ku Wei Xiong 0166365831

8 8

Re: [CentOS] A question about 7
by Les Mikesell 15 Jan '14

15 Jan '14

On Wed, Jan 15, 2014 at 6:05 AM, Steve Clark <sclark(a)netwolves.com> wrote: > On 01/14/2014 08:34 PM, Les Mikesell wrote: > > On Tue, Jan 14, 2014 at 7:17 PM, Warren Young <warren(a)etr-usa.com> wrote: > > I don't know about "less consistent", but I always considered it a > feature in Linux vs the BSDs or big iron Unix that I could always count > on the first network interface being "eth0". > > What does 'first' mean? And the same one isn't consistently first. > > I get that network interfaces can move around on you, but I thought that > was why they started putting the MAC address in the ifcfg-eth? scripts. > What problem did that not solve, that we had to switch to this new system? > > The problem is when you clone a disk and ship it to a location with > 'hands-on' support that doesn't know linux to install in a new chassis > that will arrive there at the same time. Somehow you have to get > someone to put the 4 network cables in the right NICs before anything > can connect. With things tied to MAC addresses that you don't know > ahead of time, nothing will work. > > Now I have to remember which *PCI slot* my Ethernet card is in when I > run "ifconfig" unless I want to dig through the full listing. > > Yes, but that's something you _can_ know. > > How can you know it? And if you know which port is which why isn't in the > instruction > with the drive so the people on site know which port is which? If you insert the card yourself, you obviously know the slot. And you can tell the position from the back just by looking at it. But Centos6 will detect in random order, so knowing the name on one box doesn't help with another. We have to go through contortions plugging on cable in at a time, doing an 'ifconfig up' and checking which interface shows link up. And the people doing that part wish we used more windows instead of Linux. -- Les Mikesell lesmikesell(a)gmail.com

4 6

Dovecot gives hard time in pulling virtual mail box, please help
by Ganesh Hariharan 15 Jan '14

15 Jan '14

I have configured postfix with Virtual mailbox and it works but dovecot is not working I have done the following configured SSL and enabled all the required configurations... and when I pull the mails using CRAM-MD5, (server password is generated in this format) Jan 16 00:18:39 ns dovecot: pop3(info(a)ghhdomain.com): Debug: maildir++: root=/var/spool/mail/ghhdomain.com/info, index=, control=, inbox=/var/spool/mail/ghhdomain.com/info Jan 16 00:18:39 ns dovecot: pop3(info(a)ghhdomain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 16 00:18:40 ns dovecot: auth: Debug: auth client connected (pid=4236) Jan 16 00:18:40 ns dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=10.0.0.12#011rip=10.0.0.12#011lport=995#011rport=50067#011resp=<hidden> Jan 16 00:18:40 ns dovecot: auth: Debug: passwd-file(info(a)ghhdomain.com,10.0.0.12): lookup: user=info(a)ghhdomain.com file=/etc/dovecot/passwd Jan 16 00:18:40 ns dovecot: auth: Debug: client out: OK#0111#011user= info(a)ghhdomain.com Jan 16 00:18:40 ns dovecot: auth: Debug: master in: REQUEST#0112155479041#0114236#0111#011d58c5836d46ea88f7459b06abcd46540 Jan 16 00:18:40 ns dovecot: auth: Debug: passwd(info(a)ghhdomain.com,10.0.0.12): lookup Jan 16 00:18:40 ns dovecot: auth: passwd(info(a)ghhdomain.com,10.0.0.12): unknown user Jan 16 00:18:40 ns dovecot: auth: Debug: passwd-file(info(a)ghhdomain.com,10.0.0.12): lookup: user=info(a)ghhdomain.com file=/etc/dovecot/users Jan 16 00:18:40 ns dovecot: auth: Debug: master out: USER#0112155479041# 011info@ghhdomain.com#011uid=503#011gid=503#011home=/var/spool/mail/ghhdomain.com/info/ Jan 16 00:18:40 ns dovecot: pop3-login: Login: user=<info(a)ghhdomain.com>, method=PLAIN, rip=10.0.0.12, lip=10.0.0.12, mpid=4237, TLS Jan 16 00:18:40 ns dovecot: pop3(info(a)ghhdomain.com): Debug: Effective uid=503, gid=503, home=/var/spool/mail/ghhdomain.com/info/ Jan 16 00:18:40 ns dovecot: pop3(info(a)ghhdomain.com): Debug: maildir++: root=/var/spool/mail/ghhdomain.com/info, index=, control=, inbox=/var/spool/mail/ghhdomain.com/info Jan 16 00:18:40 ns dovecot: pop3(info(a)ghhdomain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 thx ghh

1 0

(no subject)
by Niharika Toppari 15 Jan '14

15 Jan '14

niharika.toppari(a)gmail.com

1 0

Re: [CentOS] A question about 7
by Les Mikesell 15 Jan '14

15 Jan '14

On Wed, Jan 15, 2014 at 6:08 AM, Steve Clark <sclark(a)netwolves.com> wrote: > > On Tue, Jan 14, 2014 at 7:17 PM, Warren Young <warren(a)etr-usa.com> wrote: > Now I have to remember which *PCI slot* my Ethernet card is in when I > run "ifconfig" unless I want to dig through the full listing. > Yes, but that's something you _can_ know. > > So... which PCI/PCI-e slots are associated with the dual gigabit NICs > integrated in/on every ASUS board I've bought over the last 8 years? > > I wouldn't know on the first one, but the important thing is that if > you have 50 identical servers they would all be the same for the same > physical location. The way 6.x works, the motherboard set and the > pair on the card will randomly flip in the initial detection. With > 5.x having the MAC address in the ifcfg-ethx file was enough. With > 6.x you also need a udev rule to nail the name down. These get tied > to MAC addresses in the initial install, but that makes it painful to > clone systems or restore backups into a different box. > > Hmm... we have over a 1000 units in the field and CentOS always enumerates > the 6 ethx interfaces the > same - as they are labeled by the manufacturer of the hardware. This has > continued to be consistent even > when the manufacturer upgraded the MB. > Are these Dells using the bios name conventions? Or maybe it works better if all NICs are the same vendor/model. Ours mostly have onboard Broadcomms's and Intel cards, and they routinely flip pairs of interfaces - the sets on the motherboard and on any particular card will stay in the same order, but the order of the motherboard set and any card will be random during the install. Worse, when you move a drive to a different chassis, the old udev rules keep any of the new set from matching any old name. -- Les Mikesell lesmikesell(a)gmail.com

1 0

CentOS-announce Digest, Vol 107, Issue 8
by centos-announce-request＠centos.org 15 Jan '14

15 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0023 CentOS 6 resource-agents Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Jan 2014 16:13:28 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0023 CentOS 6 resource-agents Update To: centos-announce(a)centos.org Message-ID: <20140114161328.GA7616(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0023 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0023.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 53e9b64590c180ce4d3a0a3fabc3c18d031d5467b3b67fa37a9caf68d30f1d91 resource-agents-3.9.2-40.el6_5.5.i686.rpm b7eca179a40cf55be6fee5bba1c7d70fb7cec3b4edf9b68cccfbf289b1957792 resource-agents-sap-3.9.2-40.el6_5.5.i686.rpm x86_64: 2fcc7e147248a76a3163b86f0cd474047e8dfee524feffa4fd61c76052ecce84 resource-agents-3.9.2-40.el6_5.5.x86_64.rpm 6859ae32a47bb262ce8b8e34257cf6a6beca4657905b6ce5c15fe2c4213f7635 resource-agents-sap-3.9.2-40.el6_5.5.x86_64.rpm Source: c8226fea10675a07fcf7fe3f012efdffbab32595f1765d612c355e879773257b resource-agents-3.9.2-40.el6_5.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 8 ***********************************************

1 0

libapreq2
by Dwayne Hottinger 15 Jan '14

15 Jan '14

Is there no package for libapreq2 anymore? Im trying to get netdisco setup on a new centos 6.5 server and cant find any package that provides this module. ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools

2 1

SSSD and usermod
by Mitja Mihelič 15 Jan '14

15 Jan '14

Hi! How to get usermod working with SSSD/389DS ? We have SSSD set up on our server and it uses 389DS. SSSD was enabled with the following command: authconfig --enablesssd --enablesssdauth --ldapbasedn=dc=example,dc=com --enableshadow --enablemkhomedir --enablelocauthorize --update Running for example "usermod -L username" returns: usermod: user 'username' does not exist in /etc/passwd Each time usermod is executed there is a query logged in 389DS, so SSSD does pass the request to 389DS. Strace (attached) of usermod shows that it gets at least gecos back from SSSD and that it checked the /var/lib/sss/mc/passwd file which contains: username Name Lastname /home/username /bin/bash Soon after that it starts to open /etc/shadow and /etc/passwd. What are we missing? Any insight would be appreciated. Regards, Mitja -- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78

2 4

krb5-1.10.3-10.el6_4.6.src.rpm
by Mahmoud 15 Jan '14

15 Jan '14

Hello, I download krb5-1.10.3-10.el6_4.6.src.rpm<http://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/krb5-…>from http://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/. In Cenos 6.5, I use following instructions: rpm -i krb5-1.10.3-10.el6_4.6.src.rpm rpmbuild -ba /home/mockbuild/rpmbuild/SPECS/krb5.spec The RPMs that has been built are el6.6. I need el6_4.6 RPMs. Could you help me please? Best regards.

3 3

thinking ahead... far ahead
by m.roth＠5-cent.us 14 Jan '14

14 Jan '14

I've been having a problem with motion on one server - the .avi's it produces are dark, low contrast, and it keeps resizing from 642x420 to 296x360 or some such. Trying to figure it out, I was just going through /var/log/dmesg, and found rtc0: alarms up to one year, y3k, 114 bytes nvram I mean, y3k? I think we've got 900 years or so to worry 'bout that.... mark

2 1

A question about 7
by m.roth＠5-cent.us 14 Jan '14

14 Jan '14

I've seen that RHEL 7 beta is out for some time now: is there a CentOS version of that beta? If not, is it likely to be a real pain, once CentOS 7 is released, to upgrade from RHEL 7 beta to CentOS 7? Reason for this: at one of my local sf clubs, I've been trying to install Evergreen, F/OSS library software, on a system, and it's a nightmare. They seem to have been building it for Ubuntu whateverthelatestanimalis. The biggest problem is, IIRC, eventhandler and memchached; oh, and it uses postgresql 9, and nothing else. PGSQL 9 was not a big deal to install, but the other stuff.... Even trying to build it in /usr/local is a royal mess: though I've got the dbi installed, ./configure can't find it. I do see, with a little googling, that everything I need for an older release of Evergreen should be installable without all this mess..... mark

5 6

Re: [CentOS] A question about 7
by m.roth＠5-cent.us 14 Jan '14

14 Jan '14

Les Mikesell wrote: > On Tue, Jan 14, 2014 at 2:27 PM, Warren Young <warren(a)etr-usa.com> wrote: >> >> How bad is the worst case -- reinstall the OS and rebuild the software -- anyway? By doing your initial work on the RHEL 7 beta, you learn what you need to know to quickly redo the work on CentOS 7. > > Is there anything to simplify the process of duplicating the set of installed packages when you didn't pay that much attention the first time around? It seems like taking the list from 'rpm -qa' on a running machine and feeding it to 'yum install ....' on a new minimal install should get pretty close, but then you need to find all of your locally modified config files. Most of that should be under > /etc/sysconfig for an easy diff, but not everything. Interesting note: I just started looking at the docs for 7. and two things: one, of course, preupgrade is in, and second, something that, if I read it correctly, called zstream, which will give you a report of what preupgrade would do, and list things that would have to be done my hand, so you can judge the difficulty of upgrading in place. mark

1 0

Can we trust RedHAt encryption tools?
by James B. Byrne 14 Jan '14

14 Jan '14

Recently I have been deeply troubled by evidence revealing the degree to which U.S. based corporations (well actually all resident in any of the so-called 5-eyes countries) appear to have rolled over and assumed the position with respect to NSA inspired pressure to cripple public key encryption and facilitate intrusions into their software products. This has engendered in me a significant degree of doubt surrounding the integrity of RHEL; and therefore of CentOS since it claims to be a bug for bug, and therefore an exploit for exploit, copy of RHEL. Reinforcing my doubt is the tale surrounding the long outstanding bug report respecting OpenSSL (https://bugzilla.redhat.com/show_bug.cgi?id=319901) opened in October of 2007. This probelm was only recently addressed and then only after a good deal of pointed public questioning by numerous security commentators. RedHat's reference to 'patent' issues surrounding this 'bug' are unsubstantiated by any documented evidence. The only response justifying Redhat's lack of movement is some hand-waving about corporate legal opinion. Despite suggestive language by some RH employees (https://bugzilla.redhat.com/show_bug.cgi?id=612265#c3) the exact nature of the patent legal problem was never specifically laid out for public comment. Equally troubling to me is the complete lack of any information on what patent issue was finally resolved and how it was resolved so that the related bugs could be fixed. As patents (with very,very few exceptions) are by their very nature not secret one wonders if the so-called legal problem was of a fundamentally different nature, no less real but somewhat less savoury from a PR standpoint. In consequence, after a good deal of agonizing over what was within my means to do, I have spent the weekend rebuilding Apache httpd from Apache sources to obtain TLSv1.2. While I still do not have a working copy (yet) I did learn a great deal of how RH back-porting patch policy appears to work. But in the process of researching how to get this package built I ran across a number of discussions respecting OpenSSL, which is the fundamental layer upon which pki rests, and RedHat (http://www.linuxadvocates.com/2013/09/is-openssls-cryptography-broken.html) None of them were very comforting. Where this discourse is leading is to is the question of whether or not CentOS should provide OpenSSL built from clean sources as an extra or plus package and perhaps httpd, sshd and ssh-client and related pki based/reliant packages as well. Similarly, should CentOS.org provide tested spec files that will provide individual system admins a simple method of building these packages from source? I think that CentOS.org probably should provide this but I am afraid that I cannot make a strong public case. Suffice that my belief is informed from personal previous experience with federal agencies investigative techniques and the all too frequent willingness of commercial interests to take the road of least resistance when pressured. Particularly where the spectres of expensive litigation and targeted regulatory enforcement looms in the background. I believe that the issue is of pressing interest to the entire community and I would like to read what others have to say on the matter. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

14 39

apache - upload files bigger than 2Go
by MOKRANI Rachid 14 Jan '14

14 Jan '14

Hi, I need to upload files larger than 4.4Gb (iso DVD) on CentOS (5.5 x64) http server (httpd-2.2.3-43.el5.centos) On the apache server set in my /etc/php.ini upload_max_filesize = 4900M post_max_size = 5000M In my httpd.conf I set : LimitRequestBody 0 I'm using firefox and/or chrome client for upload a file with 4.2gb size on the server. But it doesn't work. Everything work fine and I can upload my file if it's not greater than 2gb. I see that there are a technical apache limitation. http://httpd.apache.org/docs/current/mod/core.html#limitrequestbody how to get around this limitation for upload a DVD iso (4.2Gb)? Regards. __________________________ Avant d'imprimer, pensez à l'environnement ! Please consider the environment before printing ! Ce message et toutes ses pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. IFP Energies nouvelles décline toute responsabilité au titre de ce message. This message and any attachments are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP Energies nouvelles should not be liable for this message. __________________________

4 3

Laptop recommendation
by Todor Petkov 14 Jan '14

14 Jan '14

Hello, I am looking for a laptop with the following specs: Built-in GSM module Trusted platform module Support for these modules, as for the network (Ethernet + WiFi) for RHEL/Centos6. I tested Lenovo W540, and the WiFi is not detected. lspci shows: 03:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 818b I came across http://askubuntu.com/questions/376732/thinkpad-t440p-wireless-network-contr…, so it turns out, this WiFi card is not supported (yet). So, if anyone can recommend a working solution, please contact me, either here or off the list. Thanks in advance,

4 3

Need help with kernel, modules and headers
by Patrick Begou 14 Jan '14

14 Jan '14

I need some help about kernels, modules and so on. I've installed CentOS6.5 (fresh install) on a DELL E7440 laptop. After all the updates I get the latest kernel: kernel-2.6.32-431. But with this config I've a problem: If I close the screen on the keyboard, the laptop hibernate. When I open it the system restart (I connect use ssh to reach the laptop) but the screen remains black (Intel HD Graphics 4400). I've installed a more recent kernel from elrepo-kernel (kernel-lt-3.10.26-1.el6.elrepo.x86_64) and it solves the black screen problem. But now I have several errors about => kdump, Starting kdump: ÉCHOUÉ => vboxdrv Starting VirtualBox kernel modules ÉCHOUÉ (modprobe vboxdrv failed. Please use 'dmesg' to find out why) => dkms (requested for VirtualBox) Démarrage de dkms : Error! Your kernel headers for kernel 3.10.26-1.el6.elrepo.x86_64 cannot be found at /lib/modules/3.10.26-1.el6.elrepo.x86_64/build or /lib/modules/3.10.26-1.el6.elrepo.x86_64/source. but kernel-lt-headers cannot be installed (conflicting with the installed kernel-headers requested by many packages). So what could you suggest me to solve this situation ? -> kernel-2.6.32-431 all is working but if the laptop hibernate it hangs -> kernel 3.10.26-1 video works fine but I get conflicts for some applications Thanks for your advices Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 2

CentOS-announce Digest, Vol 107, Issue 7
by centos-announce-request＠centos.org 14 Jan '14

14 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0021 CentOS 5 lvm2-cluster Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 13 Jan 2014 16:58:44 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0021 CentOS 5 lvm2-cluster Update To: centos-announce(a)centos.org Message-ID: <20140113165844.GA22310(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0021 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0021.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dee70585b7e7455e1a62452b83bffa5e4ef2629193d1a2cf6e1a7cfd15dd8a4a lvm2-cluster-2.02.88-9.el5_10.2.i386.rpm x86_64: 3f044ba3d83f23dc4f0ef9f7f727d258324f0bbcce842faffdeaf097932f004d lvm2-cluster-2.02.88-9.el5_10.2.x86_64.rpm Source: d86eb6d628949f3383e95ba5c303af22243cb771d030cd86f547865f18e07202 lvm2-cluster-2.02.88-9.el5_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 7 ***********************************************

1 0

- manipulation token error
by Paolo De Michele 14 Jan '14

14 Jan '14

hi all, I can't change root password because in my VPS the ssh console gives me: $ ssh -p xxxx2 username@ipaddress username@ipaddress's password: Last login: Thu Jan 9 11:46:58 2014 from dynamic-adsl-xxx.xxx.xx.it WARNING: Your password has expired. You must change your password now and login again! Changing password for username. (current) UNIX password: passwd: Authentication token manipulation error passwd: password unchanged Connection to xxxxxx closed. how I fix this problem? thanks in advance regards

2 4

Email not getting delivered (and a fix)
by Frank Cox 13 Jan '14

13 Jan '14

I just discovered that, ever since I updated this computer to kernel-2.6.32-431.3.1, it hasn't been forwarding outbound email. I found this repeated in /var/log/maillog: "warning: relayhost configuration problem" This computer is set up to relay outbound email via postfix to another computer on my network by name, whose name and IP address is specified in the /etc/hosts file. A bit of reading told me that I have to add this line to /etc/postfix/main.cf: smtp_host_lookup = dns,native Without that line, postfix won't check /etc/hosts to look up an IP address. Oddly, this setup has been working for several months WITHOUT that line in main.cf and it just stopped working when the latest kernel was installed. According to the documentation http://www.postfix.org/postconf.5.html#smtp_host_lookup it appears that it should not have been working before, eithre. Something changed in the new kernel to make it stop working. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

LogScape as a Splunk alternative?
by Rafał Radecki 13 Jan '14

13 Jan '14

Hi All. I searched for a Splunk alternative and found LogScape. Have anyone worked with it? There is no documentation available only some very brief installation instructions and there is almost no information in google about successful deployments in linux environments. From my current perspective it is a quite small and not widely used product, am I right? Also videos about search capabilities show that in comparison with Splunk it gives rather limited search functionality. Overall what do you think about LogScape? Best regards, Rafal.

4 3

Configure wireless USB ethernet
by Ashley M. Kirchner 13 Jan '14

13 Jan '14

I have a system that does *not* have a graphical desktop installed, nor do I ever plan to. I have its wired ethernet working just peachy. Now I want to configure a USB wireless ethernet and scratching my head. Particularly since I don't use NetworkManager, everything is manually configured. That said, if I enable NM, I see this in /var/log/messages: NetworkManager[26900]: <info> rfkill0: found WiFi radio killswitch (at /sys/devices/pci0000:00/0000:00:1d.7/usb1/1-2/1-2:1.0/ieee80211/phy0/rfkill0) (driver rt2800usb) NetworkManager[26900]: <info> WiFi hardware radio set enabled NetworkManager[26900]: <info> WiFi enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> WWAN enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> WiMAX enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> Networking is enabled by state file NetworkManager[26900]: <info> (wlan0): driver supports SSID scans (scan_capa 0x01). NetworkManager[26900]: <info> (wlan0): new 802.11 WiFi device (driver: 'rt2800usb' ifindex: 4) NetworkManager[26900]: <info> (wlan0): exported as /org/freedesktop/NetworkManager/Devices/1 NetworkManager[26900]: <info> (wlan0): now managed NetworkManager[26900]: <info> (wlan0): device state change: 1 -> 2 (reason 2) NetworkManager[26900]: <info> (wlan0): bringing up device. NetworkManager[26900]: <info> (wlan0): preparing device. NetworkManager[26900]: <info> (wlan0): deactivating device (reason: 2). kernel: ADDRCONF(NETDEV_UP): wlan0: link is not ready NetworkManager[26900]: <info> (wlan0): supplicant interface state: starting -> ready NetworkManager[26900]: <info> (wlan0): device state change: 2 -> 3 (reason 42) Looking at 'lsmod | grep rt' I see: rt2800usb 18780 0 rt2800lib 71865 1 rt2800usb crc_ccitt 1717 1 rt2800lib rt2x00usb 12696 1 rt2800usb rt2x00lib 48438 3 rt2800usb,rt2800lib,rt2x00usb mac80211 552581 3 rt2800lib,rt2x00usb,rt2x00lib cfg80211 619515 2 rt2x00lib,mac80211 And lastly ifconfig shows the interface present: lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:1401 errors:0 dropped:0 overruns:0 frame:0 TX packets:1401 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:177957 (173.7 KiB) TX bytes:177957 (173.7 KiB) wlan0 Link encap:Ethernet HWaddr 00:87:35:1C:07:BF UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Great ... now how do I configure this sucker? When I turn NM off, that interface disappears. I'm assuming I can create an 'ifcfg-wlan0' configuration but what do I need to put in there so it knows to connect to my home wireless (with password) and all of that fun and exciting stuff, and continue to do that over a reboot.

5 9

6.5, minor annoyances
by m.roth＠5-cent.us 13 Jan '14

13 Jan '14

I rebuilt my system a couple/three weeks ago, and it's running 6.5, and there's a couple of minor annoyances: first, all my xterms, when I login in from the console, always are in ~/Documents, rather than ~. The other is that, running KDE, I can't find where to turn *off* the stupid login/logout theme music.* Oh, and I get this enTHUsiastic menu, rather than the traditional one. Someone know where I need to go to change this crap? I've already gone through KDE's setting, and system, and no joy. Nor did grep -L Documents /etc/*/* find anything.... mark * Is it just me, or does the logout music sound like the beginning of the original Trek Classic tv show theme?

2 1

Kickstart deploys more packages?
by Darod Zyree 13 Jan '14

13 Jan '14

Hi, Does anyone know why an Anaconda Kickstart installation deploys more rpm packages than a manual "basic" installation? In both cases the following package groups were installed/used according to anaconda-ks.cfg in root home directory: @core, @server-policy, @workstation-policy

7 15

Re: [CentOS] [resolved ]nfs client kerberos cache
by Darod Zyree 13 Jan '14

13 Jan '14

2014/1/6 Darod Zyree <darodzyree(a)gmail.com> > Greetings, > > Not sure if this is the correct mail list. > > I have the following test environment set up: > - 1x ipa master = ipa1.example.com > - 1x nfs server = nfs1.example.com > - 1x nfs client = nfsclient1.example.com > > NFS version 4 is used and the appropriate Kerberos principal has been > created in IPA: > > [root@nfs1 ~]# ipa service-show nfs/nfs1.example.com(a)EXAMPLE.COM > > Principal: nfs/nfs1.example.com(a)EXAMPLE.COM > Keytab: True > Managed by: nfs1.example.com > > > Mounting using krb5p works: > > [root@nfsclient1 ~]# mount -v -t nfs -o sec=krb5p > nfs1.example.com:/exports/homes/ /mnt > > mount.nfs: timeout set for Mon Jan 6 21:25:56 2014 > mount.nfs: trying text-based options > 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' > nfs1.example.com:/exports/homes/ on /mnt type nfs (rw,sec=krb5p) > > rpcgssd created the Kerberos cache file as indicated > in /var/log/messages: > rpc.gssd[2473]: INFO: Credentials in CC > 'FILE:/tmp/krb5cc_machine_EXAMPLE.COM' are good until 1389125973 > > > So far so good, but then: > > 1) I unmount everything from nfs1, remove the nfs1.example.host, its DNS > record(s) and service principcals. > 2) I redeploy the nfs1.example.com and re-create the > nfs/nfs1.example.com(a)EXAMPLE.COM principal > > 3) I try to mount the same NFS share from nfs1 on nfsclient1 I get an > error: > mount.nfs: trying text-based options > 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' > mount.nfs: mount(2): Operation not permitted > > Now I'm not an IPA or Kerberos expert but I am guessing that this > happens because the nfsclient1 still has, and uses, > the /tmp/krb5cc_machine_EXAMPLE.COM cache file? > This file would have the “old” Kerberos credentials?... > > On the NFS server in /var/log/messages this error message is displayed: > "rpc.svcgssd[5983]: ERROR: GSS-API: error in handle_nullreq: > gss_accept_sec_context(): GSS_S_FAILURE (Unspecified GSS failure. Minor > code may provide more information) - Wrong principal in request" > > On the NFS client in /var/log/messages these messages are displayed: > "creating context with server nfs(a)nfs1.example.com" > > "WARNING: Failed to create machine krb5 context with credentials cache > FILE:/tmp/krb5cc_machine_EXAMPLE.COM for server nfs1.example.com" > > "WARNING: Machine cache is prematurely expired or corrupted trying to > recreate cache for server nfs1.example.com" > > Restarting the rpcgssd daemon works, this action removes > the /tmp/krb5cc_machine_EXAMPLE.COM file and upon a mount command it is > recreated. > However restarting the rpcgssd daemon on all NFS clients every time an > NFS server is redeployed doesn't feel right. > > Anyone perhaps have an idea on what I might be doing wrong? > Or is this by design? > > > After dicussing this with Red Hat support the best way to go about this issue is to just restart the rpcgssd deamon on any nfs client that recently had a mount to the re-deployed nfs server. Restarting rpcgssd removes the /tmp/krb5cc_machine_EXAMPLE.COM file so a new one can be created. One other method would be to save various files (things like keytabs) and re-use these after deployment but that turned out to be too much effort to automate.

1 0

Re: [CentOS] CentOS Tshirt ideas
by Johnny King 12 Jan '14

12 Jan '14

How about the CentOS T-shirt wearing penguin with a red fedora cocked on this head. Padre King Sent from my Verizon Wireless 4G LTE DROID Karanbir Singh <mail-lists(a)karan.org> wrote: >hi, > >We have, like in the years past, a table at Fosdem and I'd like to get >some tshirts printed to hand out. In the past, the Linux Ninja's and >Beards ones got quite a bit of attention ( and both were not brand >spammy, which is always nice ). > >Reaching out to the mailing list for ideas on what we can do this year, >with the caveat that I need to finalise by this weekend if we are to get >anything in by Fosdem. > >thanks in advance, > >-- >Karanbir Singh >+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh >GnuPG Key : http://www.karan.org/publickey.asc >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

6 5

Credentials issue
by Fabrizio Di Carlo 12 Jan '14

12 Jan '14

Hello to all, I've a frustrating issue, everytime I'm trying to connect to some website (like Linkedin, VMware, CertCollection, etc etc) I have issue with credentials... Or the website didn't recognize my login (and I'm still in login page) or for example I'm logged in linkedin but I'm not able to see which visit my profile cause it ask me my credentials and when I enter I'm going again to login page. For MVA I solved updating my broswer but for other website nothing. I resetted the factory settings in Chome, disable extensions (AdBlock Plus and Privacy Fix mainly), clear my cache but without results and now the problem is really frustating. Can you help me in troubleshooting it? Fabrizio -- "The intuitive mind is a sacred gift and the rational mind is a faithful servant. We have created a society that honors the servant and has forgotten the gift." (A. Einstein) "La mente intuitiva è un dono sacro e la mente razionale è un fedele servo. Noi abbiamo creato una società che onora il servo e ha dimenticato il dono." (A. Einstein) Fabrizio Di Carlo

3 2

Linux reinstallation without rebooting? Alternative to kickstart and other such tools?
by Rafał Radecki 11 Jan '14

11 Jan '14

Hi All. I am curious if it is possible to reinstall linux distribution to centos (or another distro) if I have a remote linux server with no kvm access (i do not want to use virtualization). I know that for installation pxe, tftpboot and kickstart or a proper iso/cd and kickstart are standard options. But for such operations I would need kvm access. Are there any alternatives which do not need it? For example: I have a centos server, then I add some software, run it, point to a kickstart file available through http remotely or give network parameters and partitioning layout and the software takes care of the rest, no need for kvm access during install. Is something like that possible? :) I know that it may be seen as an "exotic" question but there are many opensource projects starting every day and maybe someone knows an interesting piece of software. Thanks! Best regards, Rafal.

5 6

LVM thinpool snapshots broken in 6.5?
by Dennis Jacobfeuerborn 11 Jan '14

11 Jan '14

Hi, I just installed a CentOS 6.5 System with the intention of using thinly provisioned snapshots. I created the volume group, a thinpool and then a logical volume. All of that works fine but when I create a snapshot "mysnap" then the snapshot volume gets displayed in the "lvs" output with the correct information but apparently no device nodes are created under /dev/mapper/ or /dev/(volumge_group_name). Any ideas what might be going on here? Regards, Dennis

1 1

EL7 mirror: "There is no installed groups file."
by Warren Young 11 Jan '14

11 Jan '14

I installed the RHEL 7 beta here to test while waiting for CentOS 7 to arrive. On noticing that yum didn't work, I decided to set up a local mirror. I rsync'd ftp://ftp.redhat.com/pub/redhat/rhel/beta/7/x86_64/os/Packages/ to a local web server here, then regenerated the repodata directory with createrepo. Now yum works fine, for the most part. "yum search foo" pulls up a plausible list of packages, "yum install bar" chases dependencies as expected, etc. Unfortunately, "yum groupinstall" isn't working, which means I have no easy way to install Gnome on my minimal EL7 installation. Apparently I need some kind of "groups file" to feed to createrepo --groupfile, but I don't know where to get one, or how to construct one. I've dug around on ftp.redhat.com and can't find anything that looks plausible. I've tried manually installing packages to build up this GNOME desktop, but despite installing dozens of things, startx still doesn't give me something usable. I know I could get a GNOME desktop by reinstalling the OS, but that would wipe out a lot of the local work I've done on this VM so far. The only reason I need X in the first place is that system-config-printer no longer runs in text mode. (I'm trying to set up a CUPS server. So yeah, X11 is a prerequisite for installing a printer now. Lovely.)

3 3

Re: [CentOS] Can we trust RedHAt encryption tools?
by James B. Byrne 10 Jan '14

10 Jan '14

On Thu, January 9, 2014 17:52, m.roth(a)5-cent.us wrote: > Robert Moskowitz wrote: >> >> On 01/09/2014 05:28 PM, John R Pierce wrote: >>> On 1/9/2014 2:20 PM, Eero Volotinen wrote: >>>> It might be easier to compromise security of commercial products as >>>> source code is not available. they seem to have succeeded in compromising >>>>> STANDARDS and ALGORITHMS, to heck with implementations. >> >> Only algorithm they compromised was an RNG that got pretty strong thumbs >> down from the real cryptographers. They have not compromised any IETF >> standard; maybe kept quite about a problem, but have not put holes in >> any. Most of our problems with TLS is implementations and backwards >> compatiblity options. > > Not quite - anyone mandated to POSIX standards are effectively mandated to > use the compromised algorithms, as I understand it. > > mark Well, regardless of my thoughts on the ethics of this situation and my opinion about those who do these sorts of things, I have continued to research this issue. I have discovered that there is a great deal of literature respecting the weakness of the RNG and PRNG processes implemented on headless hosts, in particular headless hosts that are virtualised. Given the essential nature of true random number generation to cryptographically secure key creation this represents a significant weak point on such hosts. I am not going to reiterate or summarize any of this here because you can find these discussions easily enough via Google. However, I have developed a small script to alleviate the problem to some degree based on the writings and works of others. This requires the epel repository be enabled: #!/bin/bash cat /proc/sys/kernel/random/entropy_avail yum install dieharder haveged rng-tools -q -y cat /etc/sysconfig/rngd sed -i 's:EXTRAOPTIONS="":EXTRAOPTIONS="-r /dev/urandom":' /etc/sysconfig/rngd cat /etc/sysconfig/rngd chkconfig --level 2345 haveged on ; chkconfig --level 2345 rngd on service haveged start ; service rngd start cat /proc/sys/kernel/random/entropy_avail This increased the mean amount of entropy present in /dev/random on the systems I installed these packages on from ~176 bits to ~2048 bits. I continue to look into other related matters. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Why does 'mysql' user has /bin/bash shell?
by Mihamina Rakotomandimby 10 Jan '14

10 Jan '14

Hello, Default MySQL installation on CentOS sets /bin/bash as shell. I'm on a user cleanup task where I want reduce unneeded privileges to users. What is the "mysql" user shell for? (What will happen if I change it to /bin/false or whatever would disable it's shell?) It's not only a matter of SSH (I'm aware I can AllowUsers in sshd_config for example).

5 7

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?
by Warren Young 10 Jan '14

10 Jan '14

On 1/10/2014 13:09, Reindl Harald wrote: > > > i know that but the question is still WHY I don't think there is a good reason. Someone made a mistake. File a bug report upstream. I've now downloaded and examined the .src.rpm for every 6.x point release plus that for 5.10, and they all do this. On skimming the changelog section of the spec file, I can't see an entry that explains why this was done. However, I might have more success if I knew the first version where this changed -- if indeed it ever did behave differently -- but I haven't found that version yet. I don't think I'm going to spend any more time looking, though, since 6.0 takes me back 3 years. This behavior has been in there for quite a long time.

1 0

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?
by Warren Young 10 Jan '14

10 Jan '14

On 1/10/2014 12:14, Reindl Harald wrote: > > Am 10.01.2014 20:11, schrieb Warren Young: >> >> I just tested here on an EL6 VM that didn't have mysql-server on it before: >> >> # grep mysql /etc/shadow >> mysql:!!:16079:::::: > > in the config file where the users shell is defined you may find more :-) > > grep mysql /etc/passwd You've misunderstood the point of that test. It is proof that John Doe's guess is right: the mysql user's account is locked (!!). This means that only way you can "log in as mysql" and thus make use of the /bin/bash setting is to first be root, then "su - mysql". You can't su to mysql from a non-root account since that would require a password. That's why I guess this is a symptom of a wooly-headed change to the spec file, rather than some nefarious security breach. By the way, vault.centos.org is back. Here's what we find in the spec file: /usr/sbin/useradd -M -N -g mysql -o -r -d /var/lib/mysql -s /bin/bash \ -c "MySQL Server" -u 27 mysql >/dev/null 2>&1 || :

1 0

CentOS on HP DL360e with B120i
by tony＠softins.co.uk 10 Jan '14

10 Jan '14

I am trying to install CentOS5 on a new HP DL360e G8 with B120i disk controller. It appears that a proprietary HP driver is needed for it. I found a useful description at http://www.linuxhelp.in/2013/08/Installing-centos-on-HP-Proliant-DL360e-Gen… I have a pair of hard drives to use as a RAID1 mirror. My question to people who may have been this way already is: is it worth my fiddling around with that procedure to get the RAID controller working, performance-wise, or might I just as well use AHCI mode with kernel mdraid? I normally use Supermicro with AHCI and mdraid quite happily, but the customer wanted HP :( Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

6 8

Recomended Virtual Host setup
by Veljko 10 Jan '14

10 Jan '14

Hello, I want to ditch cPanel I currently have on my server, so I'm thinking of the way to implement virtual hosts with software provided by CentOS/RadHat. I know I can use additional repos to get mod_fastcgi for example, but what is the method recommended by RadHat? I want every virtual host php process to run as owner of that php file. I see that mod_suphp and mod_fastcgi are available on rpmforge, but how to achieve what I want using only RedHat provided software? Regards, Veljko

1 0

FYI: an selinux hack
by m.roth＠5-cent.us 10 Jan '14

10 Jan '14

We've got a website that was written years ago, and maintained by various people since. For some unknown reason, the original person or persons hard-coded, in a number of scripts, for these perl CGI scripts to write to a logfile... in the websites cgi-bin directory. *DUH* And the guy who was more-or-less maintaining it fixed one or two (I don't know how, he probably hardcoded), but the rest still wrote to the same log. No, I can't go in and fix it all. So, to shut up selinux, I moved the logs to /var/log/httpd/website/, and made a symlink from the cgi-bin location to there... and it worked. No garbage from selinux. Of *course* it's a hack, but I figured there are others out there in the same position - aren't allowed to go fix it *right* (as in, they should read a config file in /etc...), have to have selinux at least permissive, and want to cut down the noise in the logs. mark

1 0

Who deletes/edits my resolv.com ?
by Timothy Murphy 10 Jan '14

10 Jan '14

Every now and again the nameservers in /etc/resolv.conf on my CentOS-6.5 server are commented out. I used to think this was the fault of NetworkManager, but I've stopped running that on the server (using the network service instead) and the nameserver removal still occurs. I'm baffled by the motivation for this, as I can't think of any situation where it would be of advantage to have no nameservers listed. -- Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss