- Discuss - lists.centos.org

Re: [CentOS] CentOS 5 sshd does not log IP address of reverse mapping failure
by Tilman Schmidt 08 Mar '13

08 Mar '13

Am 08.03.2013 17:40, schrieb Reindl Harald: > but you can not tell me that such attempts would not be logged > maybe you have fucked your syslog-configuration or whatever Tsk, tsk. Language! > Mar 8 17:35:13 openvas sshd[10017]: Invalid user donotexist from 10.0.0.241 > Mar 8 17:35:13 openvas sshd[10018]: input_userauth_request: invalid user donotexist > > Mar 8 17:37:38 openvas sshd[10172]: User vnstat from 10.0.0.241 not allowed because not listed in AllowUsers > Mar 8 17:37:38 openvas sshd[10173]: input_userauth_request: invalid user vnstat If you had actually read the thread before replying you might have noticed that it is not about these messages at all. These are messages about invalid users. I already wrote that I get these too, complete with IP addresses, even before putting in "UseDNS no". My question is about these: Feb 10 13:32:41 dns01 sshd[16161]: Disconnecting: Too many authentication failures for root Feb 10 13:32:45 dns01 sshd[16163]: Disconnecting: Too many authentication failures for root Feb 10 13:32:48 dns01 sshd[16165]: Disconnecting: Too many authentication failures for root Feb 10 13:32:53 dns01 sshd[16167]: Disconnecting: Too many authentication failures for root Feb 10 13:32:55 dns01 sshd[16169]: Disconnecting: Too many authentication failures for root Feb 10 13:32:59 dns01 sshd[16171]: Disconnecting: Too many authentication failures for root Feb 10 13:33:02 dns01 sshd[16173]: Disconnecting: Too many authentication failures for root Feb 10 13:33:05 dns01 sshd[16175]: Disconnecting: Too many authentication failures for root Feb 10 13:33:08 dns01 sshd[16177]: Disconnecting: Too many authentication failures for root Feb 10 13:33:11 dns01 sshd[16179]: Disconnecting: Too many authentication failures for root Do you have log entries with IP addresses for these? Oh, before you ask, the sshd which logged these runs of course with PermitRootLogin no PasswordAuthentication no > cat /etc/redhat-release > CentOS release 6.3 (Final) Notice the subject line? How it says "CentOS 5"? That was deliberate. -- Tilman Schmidt Phoenix Software GmbH Bonn, Germany

1 0

Webinar server, installable on CentOS6
by Mihamina Rakotomandimby 08 Mar '13

08 Mar '13

Hi all, I'm looking for an opensource solution for hosting webinars on a remote dedicated server running CentOS6. I would like to use FOSS, and it would be perfect if it's packaged, or at least easealy packageable. Please let me know if you have some suggestion. -- RMA.

2 1

Re: [CentOS] CentOS 5 sshd does not log IP address of reverse mapping failure
by Tilman Schmidt 08 Mar '13

08 Mar '13

Am 08.03.2013 15:50, schrieb Reindl Harald: > Am 08.03.2013 15:01, schrieb Tilman Schmidt: >> Am 07.03.2013 19:49, schrieb Les Mikesell: [...] >>> Does it work if you set >>> UseDNS no >>> in /etc/ssh/sshd_config? >> >> Not really. That seems to remove the "reverse mapping checking failed" >> messages (assuming there were the usual number of such attempts after >> I set that option), but IP addresses for failed logins to existing >> users are never logged. The log contains just: >> >> sshd[27912]: Disconnecting: Too many authentication failures for root > > not true, How do you know? I saw no logon from you on the machine I tested this on. :-) > i have "UseDNS no" on ANY machine since a long time > and /var/log/secure contains ip-addresses as also logwatch For failed login attempts to existing usernames? Can you share a log entry? That would give me hope that it's just a configuration issue. Thanks, Tilman -- Tilman Schmidt Abteilungsleiter Technik ---------------------------------------------------------------- Phoenix Software GmbH Tel. +49 228 97199 0 Geschäftsführer: W. Grießl Fax +49 228 97199 99 Adolf-Hombitzer-Str. 12 www.phoenixsoftware.de 53227 Bonn, Germany Amtsgericht Bonn HRB 2934 ----------------------------------------------------------------

1 0

setroubleshoot bug returns?
by m.roth＠5-cent.us 08 Mar '13

08 Mar '13

I just updated a system to the latest 6.3 (no CR), and I'm seeing setroubleshoot: [avc.ERROR] Plugin Exception catchall_boolean #012Traceback (most recent call last):#012 File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 191, in analyze_avc#012 report = plugin.analyze(avc)#012 File "/usr/share/setroubleshoot/plugins/catchall_boolean.py", line 90, in analyze#012 man_page = self.check_for_man(b)#012 File "/usr/share/setroubleshoot/plugins/catchall_boolean.py", line 76, in check_for_man#012 man_page = name.split("_")[0] + "_selinux"#012AttributeError: 'tuple' object has no attribute 'split' which appears to be *exactly* Red Hat Bugzilla – Bug 518232, closed in rawhide on 2009-08-19. Has this crept back in? mark

1 0

CentOS-announce Digest, Vol 97, Issue 4
by centos-announce-request＠centos.org 08 Mar '13

08 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0611 Moderate CentOS 5 ruby Update (Johnny Hughes) 2. CESA-2013:0608 Important CentOS 5 kvm Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 8 Mar 2013 00:25:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0611 Moderate CentOS 5 ruby Update To: centos-announce(a)centos.org Message-ID: <20130308002553.GA6956(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0611 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ef322fc87fd653cc2d0fccce4aa0ead352de83b9a3af1d3450da03d9fe2c8d02 ruby-1.8.5-29.el5_9.i386.rpm f15afe0f535a2ef6ee7b2b6337e3d3f4a82b361ecb3c6d9120b922afd9c2e7fc ruby-devel-1.8.5-29.el5_9.i386.rpm 76f84f99e4c3317d408b087ddd580d887560af49f68ab653ae0492eca8078fdd ruby-docs-1.8.5-29.el5_9.i386.rpm 7b562c8003021f3b625d14f6bb50f017989ea038c3d97c410613fb906680fe06 ruby-irb-1.8.5-29.el5_9.i386.rpm f86766db583b6eb3f2d98965e9b66d2962ddfca7d5bdfbedf5e3ea8b43e2ec29 ruby-libs-1.8.5-29.el5_9.i386.rpm 1e9c018e1d942b04a8528a89113b48f30bfb2898d37e1322e68f382409ebcaec ruby-mode-1.8.5-29.el5_9.i386.rpm 6c22e87a39bac6e60df524999688a0a3e9235066df297c15fe347ae09110d3f7 ruby-rdoc-1.8.5-29.el5_9.i386.rpm 50979e4a78b935db5ed2638a0e7417c617b644ae7bd117d81468abe5c6be8d14 ruby-ri-1.8.5-29.el5_9.i386.rpm f6fc258288f78572d5f6f8bdc319ab7f0023c55b5397fd2ae79921fe618a28b4 ruby-tcltk-1.8.5-29.el5_9.i386.rpm x86_64: f4c9027ce39339a538c0d024f0e5916d2303aa93590aaa9f9c5c434f826e763d ruby-1.8.5-29.el5_9.x86_64.rpm f15afe0f535a2ef6ee7b2b6337e3d3f4a82b361ecb3c6d9120b922afd9c2e7fc ruby-devel-1.8.5-29.el5_9.i386.rpm d37b1f84958d5f31e1840bb93fac1ad0e013a684e31d9cde95302ed2259045a4 ruby-devel-1.8.5-29.el5_9.x86_64.rpm 6a3f538d47173f9211bdb7e9679a8d5accdca0771affbca5040d2e1994a6ca48 ruby-docs-1.8.5-29.el5_9.x86_64.rpm a2faab996c4d842252cadd4f43a65780ed90efd0438ea94cfd1b14b04e5d6efd ruby-irb-1.8.5-29.el5_9.x86_64.rpm f86766db583b6eb3f2d98965e9b66d2962ddfca7d5bdfbedf5e3ea8b43e2ec29 ruby-libs-1.8.5-29.el5_9.i386.rpm 24b87e3014c9e4de3ac094cf327a656c06d85e41e608dd4d996fa88dd94bc9ca ruby-libs-1.8.5-29.el5_9.x86_64.rpm c843bf9d5dc3799574600ba3e5e1f79443afa7ba658fc2cb596691439f00de77 ruby-mode-1.8.5-29.el5_9.x86_64.rpm d206914003dd63cff6c0444be5899ae39aec6bdc95e1743f7008d8bdb982a8a5 ruby-rdoc-1.8.5-29.el5_9.x86_64.rpm f00de1c27f3e5c25555b9fba74cbdb53bffd1b5a79061a3867e6729aa45edfae ruby-ri-1.8.5-29.el5_9.x86_64.rpm 0676c1b89c15e2848fbe7bae350372b4e6c9a1e144de71c655d4da99dd045ea8 ruby-tcltk-1.8.5-29.el5_9.x86_64.rpm Source: e45f2bf3958f6697ffbec648f3d687284efa1e2c12d99f2d89646f16e973baaa ruby-1.8.5-29.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 8 Mar 2013 00:28:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0608 Important CentOS 5 kvm Update To: centos-announce(a)centos.org Message-ID: <20130308002836.GA7091(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0608 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0608.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f84197e4bf90b42dda0aa7a7a911a8a401bc8b64141ec160c01e5253d01a5f99 kmod-kvm-83-262.el5.centos.1.x86_64.rpm 2cd9c16054366da95d0e0913d5d6b18ff7106dc303556103aac60c1caf15d858 kmod-kvm-debug-83-262.el5.centos.1.x86_64.rpm 68a91efa039e84ef5a0753268f3d994ba03883ef08dd166061def06454f27133 kvm-83-262.el5.centos.1.x86_64.rpm 3f9a9749a02b670a38af2705b963d85feb366edce5e6e178eb681f7a1c97c388 kvm-qemu-img-83-262.el5.centos.1.x86_64.rpm 35a85b39f363b49e41a137d7bff7d982031b268daed90cdeb7b4e6b89b3783fc kvm-tools-83-262.el5.centos.1.x86_64.rpm Source: 74394e61e0d18b3a415fab15560d964dc74f80bd8f878d6940ddd342891a47ea kvm-83-262.el5.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 4 **********************************************

1 0

nc not working as advertised
by Robert Moskowitz 08 Mar '13

08 Mar '13

I can't get nc to do anything worthwhile. In fact I can't even get the examples in the manpage to work. From either my C6 servers or my F17 notebooks. For example: echo -n "GET / HTTP/1.0\r\n\r\n" | nc medon.htt-consult.com 80 Gets no response. And looking into the access.log of medon shows no access by my client. I have tried the client/server on both -4 and -6 on a port I have enabled on my firewall. The server looks to be listening, but the client seems to never connect. what I typed in eventually gets played to the terminal session and of course bash says no such command. Say I have port 5902 open (for vncserver, and vncserver is not running). So on server foo, in a su session (because of the port range) I type: nc -4l 5902 seems to be listening. Then on bar, also in an su session: nc -4 foo.domain 5902 hello world After some time nc terminates and "hello world" gets sent to the su session and of course is not a valid command... So what am I missing here? Doesn't matter if I use -4, -6, or neither. It does not work.

5 6

netcat or netcat6 for Centos 6.3
by Robert Moskowitz 07 Mar '13

07 Mar '13

In my testing of HIP, there is reference to use 'nc6' for a simple TCP character echo server. No such animal in Centos, and after a bit of digging I find this refers to Netcat6 which seems to be a dead app? Is it available as an rpm somewhere for Centos? My searching is coming up empty. Or just about any service that I can start on one system and connect from another that would perform this simple echo test.

4 5

HIPHOP for Php
by Rodrigo Pichiñual Norin 07 Mar '13

07 Mar '13

Hi all, someone have installed hiphop for php?? thanks

1 0

Replacing Multiple Servers with One
by Tim Evans 07 Mar '13

07 Mar '13

We are replacing four servers, running mail, web, ftp, and dns, respectively, with a single server to run all four services. The new server will have a new IP address. It seems fairly straightforward to redirect mail, web, and ftp services to the new server via DNS CNAMES, but I'm not quite sure about how to do the change for the DNS service itself. Is there a need to maintain the old DNS server's IP address during a transition, or longer? Via a virtual IP with the old DNS server's IP address on the new machine, perhaps? Or a second NIC with the old address? Or just have the router redirect incoming DNS requests? Thanks. -- Tim Evans | 5 Chestnut Court Linux/UNIX Consulting | Owings Mills, MD 21117 http://www.tkevans.com/ | 443-394-3864 tkevans(a)tkevans.com

4 3

CentOS-announce Digest, Vol 97, Issue 3
by centos-announce-request＠centos.org 07 Mar '13

07 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0594 Low CentOS 5 kernel Update (Johnny Hughes) 2. CESA-2013:0599 Important CentOS 5 xen Update (Johnny Hughes) 3. CESA-2013:0604 Important CentOS 5 java-1.6.0-openjdk Update (Johnny Hughes) 4. CESA-2013:0603 Important CentOS 5 java-1.7.0-openjdk Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 6 Mar 2013 16:59:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0594 Low CentOS 5 kernel Update To: centos-announce(a)centos.org Message-ID: <20130306165950.GA8409(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0594 Low Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0594.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cefdb7a757f1969636b70ee04d4a81cf3e979358944d2e1629847bc639a86d20 kernel-2.6.18-348.2.1.el5.i686.rpm 418abeed53c568f3d4fbabdac6728bfdf44ab42a96bd39a71709ecdd658e27bf kernel-debug-2.6.18-348.2.1.el5.i686.rpm 40d16a9efc269a3c245ea26ff976cbffa92359129b23dbc960b76098835726cd kernel-debug-devel-2.6.18-348.2.1.el5.i686.rpm 54093d35bc327bf9c99c34ed14608aaec9e9ae2cef9f41d8e35c3c036b72b2b4 kernel-devel-2.6.18-348.2.1.el5.i686.rpm a85275d677eeda78e805cd6f8322c49a88c68c8808fae9ac6de791109f8c9df5 kernel-doc-2.6.18-348.2.1.el5.noarch.rpm 23915d3577177c15cfc390496dd9b180b850da715b6917e0f63142d9a1488fde kernel-headers-2.6.18-348.2.1.el5.i386.rpm 3204ce3e9bdaf854b5ca5cf8c21d69fb24f3049d8c58ea20c1bd672b72b70a44 kernel-PAE-2.6.18-348.2.1.el5.i686.rpm 488e6ba7fa76673fbad4a2d25f8327a72b712393aca9fb48a5a08ac4d365fad4 kernel-PAE-devel-2.6.18-348.2.1.el5.i686.rpm 97f962ac7454245b18cbf455d7e815665346d18f86522523573b05f079f96365 kernel-xen-2.6.18-348.2.1.el5.i686.rpm bf29952485281f824cd5f0ad1eb654927c3b66a4328c89f3173205e2cc52a24d kernel-xen-devel-2.6.18-348.2.1.el5.i686.rpm x86_64: 8ccc7416be8ddef84894ef2df598375410eb81408ec33f85100a7bfcc673fd57 kernel-2.6.18-348.2.1.el5.x86_64.rpm efec14a102e162699e9ce8e99b51cd66ce68924f734f37a2545063a1c8d9dc34 kernel-debug-2.6.18-348.2.1.el5.x86_64.rpm 744c33a014bbba45af1f4eac4cf7b58947dac6be625cd09d0cf01f262f1d0e1f kernel-debug-devel-2.6.18-348.2.1.el5.x86_64.rpm bfb03f15e3d186a7146ff4e90e66e8985836699b96957b437f16d9e6070634d7 kernel-devel-2.6.18-348.2.1.el5.x86_64.rpm a85275d677eeda78e805cd6f8322c49a88c68c8808fae9ac6de791109f8c9df5 kernel-doc-2.6.18-348.2.1.el5.noarch.rpm 05f218b7b51feadcbe9d08903ab495ce1ebc8a328f7e3b4a710ac2a9417efade kernel-headers-2.6.18-348.2.1.el5.x86_64.rpm 4e5f7935392f90a46a7fdda5ae6bc6727bbc7b846f7b80a125029ce32359811b kernel-xen-2.6.18-348.2.1.el5.x86_64.rpm df2eda13fe10264980f25dca687cf1661a104db4995f1c4a8cf49081404a8e76 kernel-xen-devel-2.6.18-348.2.1.el5.x86_64.rpm Source: 51d8f1326965884808c9d639e3cf0a080233e079dac63eecf68fdf98b4305ff1 kernel-2.6.18-348.2.1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 6 Mar 2013 19:54:46 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0599 Important CentOS 5 xen Update To: centos-announce(a)centos.org Message-ID: <20130306195446.GA19097(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0599 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0599.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b3ffbf68a1ef9d3b3f7f9d9436ed876031748bd82dddc7ff570b0f8bfbe71ff4 xen-3.0.3-142.el5_9.2.i386.rpm 4b369ecd0eedb47ef9a8129f8c4f0cca424773a19ad955cb5face9642989004e xen-devel-3.0.3-142.el5_9.2.i386.rpm a22c2f5a5ba0e98fcf92047005fa8d039ba94c632b92e1eccbc930fd6f8548f2 xen-libs-3.0.3-142.el5_9.2.i386.rpm x86_64: 764e0cdf3881bf1302638bcf3f22a50480ecebc023495211eeed588915720d1a xen-3.0.3-142.el5_9.2.x86_64.rpm 4b369ecd0eedb47ef9a8129f8c4f0cca424773a19ad955cb5face9642989004e xen-devel-3.0.3-142.el5_9.2.i386.rpm 010d796268614c4c7129e52c2cbef5e3315ab091d42f0854356312195cf6fb58 xen-devel-3.0.3-142.el5_9.2.x86_64.rpm a22c2f5a5ba0e98fcf92047005fa8d039ba94c632b92e1eccbc930fd6f8548f2 xen-libs-3.0.3-142.el5_9.2.i386.rpm d02d144eeec0fbf47e123e918fc2887a579c98e09de7f9f05400dc914901e064 xen-libs-3.0.3-142.el5_9.2.x86_64.rpm Source: db77d39f3370d75b0c119dbcb5bba46889502fad7684b786098ad7dc41ec3577 xen-3.0.3-142.el5_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 6 Mar 2013 21:15:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0604 Important CentOS 5 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20130306211503.GA24595(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0604 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0604.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 406e74135b4f3259be39452d9c8fb7ce87413360df85ede2df2a78c64f1d29ae java-1.6.0-openjdk-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm 325fb93b2cb6856c1a984075aa3b13f0120801c58b87d249d345fd8c02837a07 java-1.6.0-openjdk-demo-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm ef349dc86d2d8da31151d2f1dbff7bce4488c01f5b127234441321eb2be2b84e java-1.6.0-openjdk-devel-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm ca98194668425496a529391ec01a0d5a3e24af9bbc958f37964b86aa99a5878f java-1.6.0-openjdk-javadoc-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm 7b55f7fe045e3e3e7b91335e661cb518e700da5d799354f9ba2b690202286ed2 java-1.6.0-openjdk-src-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm x86_64: 827277133e3da04648edbe38339b28de20d88fd09333be091a78c2e58da9f8fe java-1.6.0-openjdk-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm 51ce968d7ff5d821e8bea9595aaa58cb3d41fa6eab3d7693d49de62773117be6 java-1.6.0-openjdk-demo-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm ace2341f357703e53fdfad6b8991a3cd9e7fad60518744e3fc30c19f424c46da java-1.6.0-openjdk-devel-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm e96fe84ee2a6af2696cc3e03f0bbdea9c55bdac8dbeb32aad6e9acab62a11940 java-1.6.0-openjdk-javadoc-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm 53212f7310503cb0ae63af155e6643a837e4f5efca9863c13f18dcfbfcefbf4c java-1.6.0-openjdk-src-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm Source: 8cf4357a96c9438eac2605d5e22bff356df2ac5c9c5bc9b58abb9fac39b9cb3c java-1.6.0-openjdk-1.6.0.0-1.36.1.11.9.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 6 Mar 2013 21:16:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0603 Important CentOS 5 java-1.7.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20130306211637.GA24649(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0603 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0603.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0f0a21614483015e4d1d138ed9045ae13c32512c46a9ce2d872bfca4267b7f92 java-1.7.0-openjdk-1.7.0.9-2.3.8.0.el5_9.i386.rpm d54f262d3c98609fcb240ff5aa207e5a77066096c969cd1df447f991f8c30891 java-1.7.0-openjdk-demo-1.7.0.9-2.3.8.0.el5_9.i386.rpm b95983b9909387b8fba942953762c69f582a2c5635ac027c74dd5e04e5f91177 java-1.7.0-openjdk-devel-1.7.0.9-2.3.8.0.el5_9.i386.rpm 9b0c09391ebcb872ed13e994c08a48aa303ae14dcd147495067ccbd45091d4ca java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.8.0.el5_9.i386.rpm 09a4c8cee8bb36423eacc165e2847af21a45e59ac39f185e951d5f04ccc602a3 java-1.7.0-openjdk-src-1.7.0.9-2.3.8.0.el5_9.i386.rpm x86_64: 20177a704047ca30e1ffbaddfad8e000ba9c6f117e8fe09c8ea14f52551d04b1 java-1.7.0-openjdk-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 241b5808c1104883a767441a7874fa7fb0efcb9c71bb6d537febbb2bd11b8a55 java-1.7.0-openjdk-demo-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 5c6b21e367c4f152ccbd16f39221d26d218f4587754e70fb877aad9aea1ce18f java-1.7.0-openjdk-devel-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 1f1156860def7ef715986588cf7e0459edd6ef682ac185bcd6a4d8bb5b2d7fe5 java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 49f55d6dd6de510144e7d2eae0acf5e05b65cfeaefc3cfc444d6d305927d32c5 java-1.7.0-openjdk-src-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm Source: 1a30f338e1348d5bd5709bd7d7c3a8ae38baaacb811ef00281c66345c1fd573e java-1.7.0-openjdk-1.7.0.9-2.3.8.0.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 3 **********************************************

1 0

Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

I have been reading about software raid. I configured my first software raid system about a month ago. I have 4 500 Gig drives configured in RAID 5 configuration with a total of 1.5TB. Currently I configured the complete individual drivers as software raid, then created a /dev/md0 with the drives I then created a /file_storage partition on /dev/md0. I created my /boot / and swap partitions on a non raid drive in my system. Is the the proper way to configure software raid?

8 17

Centos 6.3 - unsupported video hardware
by Robert Moskowitz 06 Mar '13

06 Mar '13

I pulled one of my old OQO model 2 out of the junk bin and installed Centos 6.3 over Centos 5.3. The internal video does not work in graphics mode (text works fine), though a monitor attacked to the VGA port works fine. Although my intension is to use this as a portable test server, it would be nice if the video was available. How might I go about figuring out the Xorg magic to get it working?

3 6

Apache attacks - you can't stop them, or can you?
by Robert Moskowitz 06 Mar '13

06 Mar '13

So I have this nice, simple web server up running. Its purpose is to allow me external testing with HIP, and to provide some files for external distribution. Of course, there it is sitting on port 80 and the attacks are coming in per logwatch report. Examples from the report include: Requests with error response codes 404 Not Found //phpMyAdmin-2.5.1/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.4/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.5-pl1/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.5-rc1/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.5-rc2/scripts/setup.php: 1 Time(s) /muieblackcat: 1 Time(s) /myadmin/scripts/setup.php: 2 Time(s) /mysql-admin/scripts/setup.php: 1 Time(s) /mysql/scripts/setup.php: 1 Time(s) /mysqladmin/scripts/setup.php: 2 Time(s) /mysqlmanager/scripts/setup.php: 1 Time(s) Now these are only a few, though I am probably not being hit as hard as others out there. My question is: Is there a way to shut this nonsense down? Or because I am sending the 404, I am doing all that is reasonable to do? I am wondering that if this list starts getting long, that is a lot of logging and I probably don't need to log 404s?

6 5

Google Earth on EL6.x x86_64
by Fred Smith 06 Mar '13

06 Mar '13

Has anyone gotten 64-bit google earth to run on el6 x86_64? It dies almost immediately, complaining for lack of ld-lsb.so.3. Perusing user forums at google I see a few others with the problem, but no (working) solutions. Thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For the word of God is living and active. Sharper than any double-edged sword, it penetrates even to dividing soul and spirit, joints and marrow; it judges the thoughts and attitudes of the heart." ---------------------------- Hebrews 4:12 (niv) ------------------------------

5 7

Re: [CentOS] Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

Im not so much concerned about the os not being on a raid system. I am really concerned about my data, music, pictures,docs, etc. I run a minimum os centos 5.9 install anyway so it would take long to reload the os if i had to. -----Original Message----- From: John R Pierce Sent: 3/5/2013 6:45 PM To: centos(a)centos.org Subject: Re: [CentOS] Software RAID complete drives or individual partitions On 3/5/2013 4:27 PM, Mark LaPierre wrote: > The question is why are you using raid at all? indeed. the primary justification for the "R" in RAID, Redundant, is high availability. having the OS on a non-raid volume completely violates this. RAID is most definitely NOT a substitute for backups. -- john r pierce 37N 122W somewhere on the middle of the left coast _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

CentOS-announce Digest, Vol 97, Issue 2
by centos-announce-request＠centos.org 06 Mar '13

06 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0588 Moderate CentOS 5 gnutls Update (Johnny Hughes) 2. CEBA-2013:0591 CentOS 5 libxml2 Update (Johnny Hughes) 3. CESA-2013:0587 Moderate CentOS 5 openssl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 5 Mar 2013 13:43:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0588 Moderate CentOS 5 gnutls Update To: centos-announce(a)centos.org Message-ID: <20130305134303.GA27307(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0588 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0588.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d406c1625f60d19b757d3a3b1c3755e8b3d512f39c6b62405c3dfb40e407e106 gnutls-1.4.1-10.el5_9.1.i386.rpm b545ba0216af79f830a203ecb36f56c18a4d8f1b3114c680096a1999b428f9e5 gnutls-devel-1.4.1-10.el5_9.1.i386.rpm 938cad7cb143172b6190a97e4c36f6ec508d86efdac3b6bc8121cd8e958c09c6 gnutls-utils-1.4.1-10.el5_9.1.i386.rpm x86_64: d406c1625f60d19b757d3a3b1c3755e8b3d512f39c6b62405c3dfb40e407e106 gnutls-1.4.1-10.el5_9.1.i386.rpm bb64f014b99389f570571c073312fca6f07db748a19d8a5f8e9734493fd0329b gnutls-1.4.1-10.el5_9.1.x86_64.rpm b545ba0216af79f830a203ecb36f56c18a4d8f1b3114c680096a1999b428f9e5 gnutls-devel-1.4.1-10.el5_9.1.i386.rpm 023bf23e98b902bbe2a0f8899d9e567f5f892f0ee355dc321464d5df264ab23e gnutls-devel-1.4.1-10.el5_9.1.x86_64.rpm 54eef63f0b8d0d21847a1798ac1322917f33f0e5f1c3a6668793b776469574bc gnutls-utils-1.4.1-10.el5_9.1.x86_64.rpm Source: 8549aa07932fdfb2eaaabfad862ec66f74f1dc153dee55591297b00b86bebb2f gnutls-1.4.1-10.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 5 Mar 2013 13:44:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0591 CentOS 5 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20130305134417.GA27439(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0591 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0591.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 65bb89c8944962636db78141830c7f69aa4426a2a6e6113cc2b02458074b5a66 libxml2-2.6.26-2.1.21.el5_9.2.i386.rpm 85a25609b42b0d9d43508c0b636318f19f77e75f84ff2f5e7f547693798cc1a6 libxml2-devel-2.6.26-2.1.21.el5_9.2.i386.rpm 0e01f0682cfdf5cd0f963895bc3ad90809fd3a6b4e94503d4e3f7e84e8955ffc libxml2-python-2.6.26-2.1.21.el5_9.2.i386.rpm x86_64: 65bb89c8944962636db78141830c7f69aa4426a2a6e6113cc2b02458074b5a66 libxml2-2.6.26-2.1.21.el5_9.2.i386.rpm 0d35a2642461ef969c648b17c8975a853e3a5e9645600fb124d51122dd62a719 libxml2-2.6.26-2.1.21.el5_9.2.x86_64.rpm 85a25609b42b0d9d43508c0b636318f19f77e75f84ff2f5e7f547693798cc1a6 libxml2-devel-2.6.26-2.1.21.el5_9.2.i386.rpm 20c1e1ae776ac266e279bd1067087cccdd4cfb53400f4dc47d05fb1a7da33b62 libxml2-devel-2.6.26-2.1.21.el5_9.2.x86_64.rpm 51fd9ad1f3d74f426f1af7c1c5d813bbe819d15b9d07d27cb1f3f8a7b1b70e3b libxml2-python-2.6.26-2.1.21.el5_9.2.x86_64.rpm Source: 5c100afcfbde58be99b2c4ef94ed959ee163de55f8e3e0379ec174cb2320e767 libxml2-2.6.26-2.1.21.el5_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 5 Mar 2013 13:45:27 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0587 Moderate CentOS 5 openssl Update To: centos-announce(a)centos.org Message-ID: <20130305134527.GA27575(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0587 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0587.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b3c9e6759e2b6b562b9d8d7edb48a83ade73d041376f32b223249f7e4bb5db8a openssl-0.9.8e-26.el5_9.1.i386.rpm e04c5bcf1b3a72831df27f7d089a5698c889acafc8225584d8234b84ad204cd1 openssl-0.9.8e-26.el5_9.1.i686.rpm 3a8e98ce86754ab28bb9dea2938dd5d4a958cfc87606dbe7518b92c6e785084f openssl-devel-0.9.8e-26.el5_9.1.i386.rpm e062413c195abe8387e58aaaa0fbcaad830d2b6ba48ccefad5f67c0281cead80 openssl-perl-0.9.8e-26.el5_9.1.i386.rpm x86_64: e04c5bcf1b3a72831df27f7d089a5698c889acafc8225584d8234b84ad204cd1 openssl-0.9.8e-26.el5_9.1.i686.rpm 6301afe0afe607925b8a2264cb287e9acdc91bf67e01df80e0fa8a56d622bbef openssl-0.9.8e-26.el5_9.1.x86_64.rpm 3a8e98ce86754ab28bb9dea2938dd5d4a958cfc87606dbe7518b92c6e785084f openssl-devel-0.9.8e-26.el5_9.1.i386.rpm 6b9f38a6c7fa5dd9756550e536da72492eeabe4e641f680a5e4e86834c911b6d openssl-devel-0.9.8e-26.el5_9.1.x86_64.rpm 8741963c8aeefb148cfcfb92b0c6baa52b513c7503223f8b55cf5a75faf8f6bb openssl-perl-0.9.8e-26.el5_9.1.x86_64.rpm Source: 61018d7eb0442320a0175a1e1bd9863eee5fd3c9334c47631dce14973203a590 openssl-0.9.8e-26.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 2 **********************************************

1 0

fencing nodes with drac under 5.9
by Adam Wead 06 Mar '13

06 Mar '13

Hi all, A recent update to CentOS 5.9 has broken my cluster's ability to fence nodes. I have two Dell's which are both fenced via their DRAC6 cards. The current configuration in cluster.conf for the fencing devices is: <fencedevice agent="fence_drac5" cmd_prompt="admin1->" ipaddr="192.168.251.11" login="fencer" name="ms1-drac" passwd="[omitted]" secure="1"/> After the updates, when one of the two systems comes online and starts the cman service, it will startup fencing. At that point it contacts the other node and reboots it repeatedly, never allowing the system to come back online. If I disable the cman service and renable it after both systems come back online, when cman starts up, it reboots the other and the process starts over again. Fencing with DRAC devices is not terribly well-documented, so I immagine there was something in the update that changed the way this worked. I originally used system-config-cluster to created the configuration file, but that had to tweak it adding the fence_drac5 agent manually because the configuration tool didn't support it. I also tried recreating the cluster with conga, via luci and ricci, but no success there either. Is anyone out there doing clustering with Dells and DRAC6 cards under CentOS 5.9? Or under CentOS 6 for that matter... I'm willing to update if it fixes this. thanks in advance, ...adam ____________________________________________ Adam Wead Systems and Digital Collections Librarian Rock and Roll Hall of Fame and Museum 216.515.1960 (t) 215.515.1964 (f)

2 5

Re: [CentOS] Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

Im in the process of configuring my data to be backed up to external devices. -----Original Message----- From: John R Pierce Sent: 3/5/2013 6:45 PM To: centos(a)centos.org Subject: Re: [CentOS] Software RAID complete drives or individual partitions On 3/5/2013 4:27 PM, Mark LaPierre wrote: > The question is why are you using raid at all? indeed. the primary justification for the "R" in RAID, Redundant, is high availability. having the OS on a non-raid volume completely violates this. RAID is most definitely NOT a substitute for backups. -- john r pierce 37N 122W somewhere on the middle of the left coast _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

I essentially configured the software raid to create a home server and not have to worry about individual drives. I've built a collection of several several gigs of music and pictures. Enough to look into a raid system. Plus it is alot cheaper than a hardware raid setup. Plus I want to do testing with it to possible use it for some of the clients that the business I work for do work for for basic file server services -----Original Message----- From: Mark LaPierre Sent: 3/5/2013 6:27 PM To: centos(a)centos.org Subject: Re: [CentOS] Software RAID complete drives or individual partitions On 03/04/2013 10:53 PM, Chris Weisiger wrote: > I have been reading about software raid. I configured my first software raid system about a month ago. > > I have 4 500 Gig drives configured in RAID 5 configuration with a total of 1.5TB. > > Currently I configured the complete individual drivers as software raid, then created a /dev/md0 with the drives > > I then created a /file_storage partition on /dev/md0. > > I created my /boot / and swap partitions on a non raid drive in my system. > > Is the the proper way to configure software raid? > _______________________________________________ Hey Chris, What you have done is a totally acceptable way of building a raid array. Software raid on Linux is amazingly flexible. It is able to build arrays on individual matching drives as you have done, drives of different physical sizes, a combination physical drives and partitions on other drives, or a combination of partitions on different drives. It can even build a raid array on several partitions on one physical drive, not that you would ever want to do that. In other words, if you can dream it up, software raid can probably build it. The question is why are you using raid at all? If you are trying to increase access speed or data security then raid makes sense. The appropriate configuration depends on your available resources and the nature of your intent. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ **** _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

New java update?
by m.roth＠5-cent.us 05 Mar '13

05 Mar '13

I see there's a release today or so from Oracle of a new zero-day vulnerability. Any idea how soon we'll have an update? <https://threatpost.com/en_us/blogs/oracle-rushes-emergency-java-update-patc…> mark

8 34

network connectivity lost after reboot/upgrade
by Kai Schaetzl 05 Mar '13

05 Mar '13

I upgraded one of my old machines running 5.x to the latest kernel (from 308.24.1 to 348.1.1). After rebooting network connectivity was gone. I rebooted with the old kernel, I also tried the one before it (308.20.1) still no luck. So I assume it's got nothing to do with the kernel or even CentOS. But a hardware failure seems also unlikely, see below. ethtool shows the link as up and if I remove the cable as down. I attached a laptop via crossover cable, it detects the link, but same problem. I disabled iptables and set selinux to disabled. No change. There's a Xen VM running on that machine and I can ping it from the hardware. So, internal networking seems to be ok. I'm using bridged networking for Xen connectivity, setup by normal Red Hat means, not via Xen. Never had a problem. There are no errors in the logs, except for dhcpd telling network is down and named is also giving some weird errors. This is my only dhcpd, so I would like to have it up ASAP :-( Is there anything else besides a weird hardware failure that I could check? I'm going to get a new card tomorrow and see if that changes the situation. This is mobo internal networking based on nforce-MCP61. Has anyone seen such a hardware failure where the link goes up but no packets go over the wire? It seems a bit unlikely that this hardware failure (and nothing else) should happen on a reboot after an upgrade. Thanks. Kai

6 10

ProLiant ML110 G7
by Juan De Mola 05 Mar '13

05 Mar '13

How I can set up CentOS 5 on it if it don't see the drives. -- Juan Pablo De Mola Rodríguez

4 6

Centos6 ipsec troubles
by Riccardo Veraldi 05 Mar '13

05 Mar '13

Hello, it looks like the usual way to do ipsec on centos5 won't work anymore on centos6 I installed ipsec-tools but an interface type IPsec is not recognized by the kernel ifup ipsec0 Device does not seem to be present, delaying initialization. I am not planning to use the awful OpenSwan, I Want to sue the Kame implementation which was working fine on CentOS5 any hints ? thank you Rick

4 5

CUPS halts when no Internet
by Juan De Mola 05 Mar '13

05 Mar '13

Hi. I have CentOS 6 on a HP ProLiant ML110 G7. We have a cobol invoicing system that prints to LPD printers on Windows hosts via CUPS. All works great until the ADSL service goes down. The printers stop working and the service restart gives a connection error. What will be happening here and how I can solve it? Our previous server was on CentOS 5 and worked OK. Thanks. -- Juan Pablo De Mola Rodríguez

4 5

Finding matching words in a word game
by Alexander Farber 05 Mar '13

05 Mar '13

Hello, is there maybe a clever way of finding all possible words from a given set of letters by means of PostgreSQL (i.e. inside the database vs. scanning all database rows by a PHP script, which would take too long) - if the dictionary is kept in a simple table like: create table good_words ( word varchar(16) primary key, stamp timestamp default current_timestamp ); I could add a column above, where same letters as in "word" would be sorted alphabetically... but then I don't know. I've described my question in more detail at http://stackoverflow.com/questions/15220072/postgresql-and-word-games Thank you for any suggestions Alex

1 1

Re: [CentOS] acrobat reader for x86_64?
by Fred Smith 05 Mar '13

05 Mar '13

On Mon, Mar 04, 2013 at 08:45:40AM +0100, Sorin Srbu wrote: > > -----Original Message----- > > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > > Behalf Of Fred Smith > > Sent: Saturday, March 02, 2013 5:03 AM > > To: centos(a)centos.org > > Subject: [CentOS] acrobat reader for x86_64? > > > > Adobe doesn't seem to have acroread for x86_64 linux, or at least I > > don't > > see it anywhere. > > > > Anybody know otherwise? > > > > Evince and other tools work pretty well, but I have always liked having > > the "real thing" around for those occasions when they don't. > > What would be the advantage running having this software in 64b? the "advantage" would be the diff between having it and not, as opposed to having it in 64-bit versus 32-bit. Modern 64-bit installs do not install all the 32-bit runtimes needed to run 32-bit programs, so having to use a 32-bit program can be painful, give you'd need to install a bazillion other files just to accommodate that one proggy. -- ------------------------------------------------------------------------------- .---- Fred Smith / ( /__ ,__. __ __ / __ : / / / / /__) / / /__) .+' Home: fredex(a)fcshome.stoneham.ma.us / / (__ (___ (__(_ (___ / :__ 781-438-5471 -------------------------------- Jude 1:24,25 ---------------------------------

5 4

Please shed a light: when sssd will return from offline to online?
by Gelen James 05 Mar '13

05 Mar '13

Hi all, I'm new to sssd configs and debugging. Recently we have encountered some problems with sssd. Basically 6 out of 50 servers has 'getent passwd' lost all userIDs from LDAP backend, while others are OK. My sssd is at version 1.8.0-32. the related error messages are attached below. The sssd_nss seems got killed by temporarily network connection problems to backend openLDAP servers. Wonder why? and can we change the backend retry check interval? (see the timestamps for log entries in sssd_nss.log). [root@testbox sssd]# cat sssd_nss.log (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector [root@testbox sssd]# cat sssd_pam.log (Sat Mar 2 02:30:09 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could not reconnect to ldap provider. (Sat Mar 2 02:30:39 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could not reconnect to ldap provider. [root@testbox sssd]# cat sssd_ldap.log (Sat Mar 2 02:30:53 2013) [sssd[be[ldap]]] [id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply] [root@testbox sssd]# cat sssd.log (Sat Mar 2 02:30:41 2013) [sssd] [mt_svc_exit_handler] (0x0010): Process [nss], definitely stopped! [root@testbox sssd]# Please shed a light. Thanks a lot. --Gelen

1 0

what does the strange sssd log mesages mean?
by Gelen James 05 Mar '13

05 Mar '13

Hi all, I have a few centos 6 boxes running sssd, they are talking to OpenLDAP server still runs on centos 5. Today I enabled sssd debugging and found the following lines of messages in logs: ... (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [get_naming_context] (0x0200): Using value from [namingContexts] as naming context. (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): No known USN scheme is supported by this server! (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): Will use modification timestamp as usn! ... what does the above messages mean: why it uses modification timestamp as usn? does that have some harmful effects, if time drifts /time zone difference exists in a network? Please shed a light. Thanks. --Gelen

1 0

Re: [CentOS] preventing apache from being a mail relay
by Robert Moskowitz 04 Mar '13

04 Mar '13

On 03/03/2013 05:39 PM, Reindl Harald wrote: > > Am 03.03.2013 22:49, schrieb Robert Moskowitz: >> On 03/03/2013 04:33 PM, Reindl Harald wrote: >>> Am 03.03.2013 22:30, schrieb Robert Moskowitz: >>>> I am trying to recall back at least 2 years, and my notes are poor, and >>>> my searching appears to be worst... >>>> >>>> Seems I recall that last when I set up my apache server, the spammers >>>> were posting to it so it would send out the spam on port 25. There was >>>> some conf that I did to block this, but I did not document it, and I >>>> can't find any reference to this >>> what are you speaking about? >>> apache is a WEBSERVER and has NOTHING to do with email >> There was an attack, and if you search you will find references to it, where the spammers post to your web server >> in such a way that they relay out port 25. They send to your port 80, but you send out port 25. For example: >> >> http://forums.fedoraforum.org/archive/index.php/t-173601.html > only if you are so stupid and enable prxy-requests and load > any useless module becuse it exists - in other words: this > only affects poorly wrong configured setups which have way > larger problems as this one Once upon a time, it worked this way out of the box. I did NOT set up proxy, and I was being pounded, and found I had to turn it off. Now knowing what to look for, I found my notes and it was back on my '07 server. There is no reason for a general web server to function as a proxy, so for some time it has come with that part commented out. I looked a another '10 box (Centos 5.5) that had apache installed but never used and the proxy part was commented out. So yes, anyone turning on proxy today without care gets what they set up. But again, who needs proxying on a general web server?

3 3

RAID MD10
by m.roth＠5-cent.us 04 Mar '13

04 Mar '13

I'm going to rebuild my system at home soon, and was planning to mirror two drives. However, I was just looking up something about RAID, and on wikipedia found some information about the Linux MD driver, and "near" and "far" RAID10. Anyone have some opinions about them? mark "or should that be how many opinions do folks have about them?"

6 8

GUI volume control/mixer in C6??
by Fred 04 Mar '13

04 Mar '13

Just bringing up a Centos-6 (x86_64, FWIW) and I can't find the mixer app... on my C5 box(es), double click on the speaker icon in the top panel and I get a mixer app appears on the screen. My new C6 box doesn't do that. I've installed all the PULSEAUDIO RPMS I can find, but still nothing. what am I missing here? thanks! Fred

8 15

problems with .forward
by Robert Moskowitz 04 Mar '13

04 Mar '13

My old Centos 5.5 servers had a /root/.forward to send things like logwatch to this email account. It did not take any special configuration in sendmail for this to work. Now Centos 6.3 is using postfix (as we well know, and generally I am happy for this) and I have set up the /root/.forward as always, but it seems like postfix is ignoring it. I have restarted postfix with no difference in behaviour. /root/.forward contains the single line without ending in <cr> (I have tested with <cr> at the end as well: rgm(a)htt-consult.com 'host htt-consult.com' responses with: htt-consult.com mail is handled by 10 klovia.htt-consult.com. For the testing from my regular account I run: mail -s Test root < /dev/null /var/log/maillog shows: Mar 4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=<rgm> Mar 4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE: message-id=<20130304151604.911731400CE(a)onlo.htt-consult.com> Mar 4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: from=<rgm(a)onlo.htt-consult.com>, size=471, nrcpt=1 (queue active) Mar 4 10:16:04 onlo postfix/local[30528]: 911731400CE: to=<root(a)onlo.htt-consult.com>, orig_to=<root>, relay=local, delay=0.15, delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox) Mar 4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed You have mail in /var/spool/mail/root Does anyone else use the .forward file? This should work. Of course I can modify the alias file for postfix, but .forward was always 'easier' to configure. If I have to plow through the postfix docs for this, I will, but I would think this should work.

6 12

Re: [CentOS] Centos6 ipsec troubles
by Leon Fauster 04 Mar '13

04 Mar '13

Am 04.03.2013 um 17:41 schrieb Steve Clark <sclark(a)netwolves.com>: > On 03/04/2013 10:45 AM, Riccardo Veraldi wrote: >> Hello, >> it looks like the usual way to do ipsec on centos5 won't work anymore on >> centos6 >> >> I installed ipsec-tools but an interface type IPsec is not recognized by >> the kernel >> >> ifup ipsec0 >> Device does not seem to be present, delaying initialization. >> >> >> I am not planning to use the awful OpenSwan, I Want to sue the Kame >> implementation which was working fine on CentOS5 >> >> any hints ? >> >> thank you >> >> Rick >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > Hmm... > > I have been using ipsec-tools on linux for a long time and was never had it create and ipsec0 device. > > Only when I was using FreeSwan years ago, did I see and ipsec device. this is specific to rhel5 - they have /etc/sysconfig/network-scripts/ifup-ipsec for that. in rhel6 this possibility was replaced https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/h… -- LF

1 0

OT? : Big Yellow Cursor
by Beartooth 04 Mar '13

04 Mar '13

Last time I had a machine running CentOS (6.2 iirc) I had managed to get a big yellow arrow to show the mouse cursor. It was wonderful. Now I have machines running Fedora (17 & 18) and Puppy (5.0) -- and I need cursor symbols that my antiquated eyeballs can spot even through trifocals. Can anyone tell me a way to get my arrow back?? -- Beartooth Sciurivore, Curmudgeon On Line Viruses, trojans, and spyware, Oh My!

3 3

Re: [CentOS] Not installing avahi in a kickstart install
by Robert Moskowitz 04 Mar '13

04 Mar '13

On 03/03/2013 04:39 PM, Reindl Harald wrote: > > Am 03.03.2013 22:35, schrieb Robert Moskowitz: >> In the packages section of my kickstart I have: >> >> -avahi >> >> and I am still getting avahi and all of its rpms installed. I don't >> want avahi on my servers, how do I specify in a kickstart to NOT install it? > do not install packages which requires avahi? > which they are? > > try "yum remove avahi" and see what it lists after install.... > The list is too long. It includes firstboot! Easier just to disable it after install as I have been doing. Just thought I could prevent it from installing in the first place. I can put a %post in to turn it off at least.

3 3

Re: [CentOS] preventing apache from being a mail relay
by James B. Byrne 04 Mar '13

04 Mar '13

On Sun, March 3, 2013 18:57, Eddie G. O'Connor Jr. wrote: > If / when I get the guts to build my own Apache web server...I would > think that the ONLY way to do it would be to document > EVERYTHING....sort > of as a "Just-In-Case" policy?....or is it only after you've built > it?...and when you make CHANGES to your server....THAT'S when you > document everything?.... > The workflow I have adopted with respect to system administration is to use a project management application, such as Trac (originally) or Redmine/ChileProject (currently), and to open an issue for each activity that I perform on any of my servers. Therein I record the motivation for the activity, the desired and intended result, and log my time. I also record each problem that is encountered, solutions as they are found, and insights as they are revealed. I attach configuration files, copies of related email messages, and make any notes right on the issue. As Redmine allows full-text case-insensitive searches I can usually find in fairly short order the details about anything I have done that I can at least dimly recall doing. I add subsequent maintenance events either directly to the original issue or create a new issue and link that to the original. While hardly perfect this practice has saved my behind on several occasions. In fact I would recommend that one document each package install from the initial selection of the software and go on from there. I have had occasion where the question asked of me was "why was this package selected instead of that package?" Having the answer to hand along with the evidence has short-circuited the blame-game on at least one occasion. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Tomcat query from complete newbie
by Timothy Murphy 04 Mar '13

04 Mar '13

I'm a complete tomcat beginner - (I installed it on my CentOS-6.3 server this morning.) According to the web-interface on port 8080 tomcat is running fine. Basically, I want to allow a Java program I have written (which works well) to be run over the internet. This is to test students understanding of Turing machines. The student has to enter a short "program" (consisting of 20-80 "quadruples"). My program will then test if the program does what it is meant to do. So the student enters his program (about 1k), eg by pasting from a file - the program should then run, and the student should see what it outputs. I'm looking for advice on the best way to set this up. As I understand it, tomcat can either be run "standalone" or "behind apache". I am running httpd on the server, so either method should be available. It seems that the standalone option is simpler, so I would probably prefer that. Any and all suggestions gratefully received.

3 3

acrobat reader for x86_64?
by Fred Smith 04 Mar '13

04 Mar '13

Adobe doesn't seem to have acroread for x86_64 linux, or at least I don't see it anywhere. Anybody know otherwise? Evince and other tools work pretty well, but I have always liked having the "real thing" around for those occasions when they don't. -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

7 9

preventing apache from being a mail relay
by Robert Moskowitz 04 Mar '13

04 Mar '13

I am trying to recall back at least 2 years, and my notes are poor, and my searching appears to be worst... Seems I recall that last when I set up my apache server, the spammers were posting to it so it would send out the spam on port 25. There was some conf that I did to block this, but I did not document it, and I can't find any reference to this. I don't think my memory is that bad, but it IS sunday... I don't want to put up this new server and have it flooding the world with spam and then get the server blocked. So do I remember correctly that this was a problem? Is it still, and how is this prevented? Thanks. Am putting up better notes this time around.

5 7

Centos6.4 via CR-repo; boot problems
by jvermeulen 04 Mar '13

04 Mar '13

Dear All, after updating to Centos6.4 via cr-repo, my laptop hangs on: starting crond : ok I booted in single user mode but I'm not sure what to change .... The laptop is an older MSI, hardware details attached. what could be the issue here? greetings, J.

7 13

Re: [CentOS] preventing apache from being a mail relay
by Robert Moskowitz 03 Mar '13

03 Mar '13

On 03/03/2013 04:33 PM, Reindl Harald wrote: > > Am 03.03.2013 22:30, schrieb Robert Moskowitz: >> I am trying to recall back at least 2 years, and my notes are poor, and >> my searching appears to be worst... >> >> Seems I recall that last when I set up my apache server, the spammers >> were posting to it so it would send out the spam on port 25. There was >> some conf that I did to block this, but I did not document it, and I >> can't find any reference to this > what are you speaking about? > apache is a WEBSERVER and has NOTHING to do with email There was an attack, and if you search you will find references to it, where the spammers post to your web server in such a way that they relay out port 25. They send to your port 80, but you send out port 25. For example: http://forums.fedoraforum.org/archive/index.php/t-173601.html My old server has been running smoothly for over two years, but it is time to bring the software current. I did all the work on this back then, or maybe before and copied from my earlier server. This time I am trying to build everything clean and document every change I make.

4 5

Strange behavior from software RAID
by Harold Pritchett 03 Mar '13

03 Mar '13

Somewhere, mdadm is cacheing information. Here is my /etc/mdadm.conf file: more /etc/mdadm.conf # mdadm.conf written out by anaconda DEVICE partitions MAILADDR root ARRAY /dev/md0 level=raid1 num-devices=4 metadata=0.90 UUID=55ff58b2:0abb5bad:42911890:5950dfce ARRAY /dev/md1 level=raid1 num-devices=2 metadata=0.90 UUID=315eaf5c:776c85bd:5fa8189c:68a99382 ARRAY /dev/md2 level=raid1 num-devices=2 metadata=0.90 UUID=5b017f95:b7e266cc:f17a7611:8b752a02 ARRAY /dev/md3 level=raid1 num-devices=2 metadata=0.90 UUID=4cc310ee:60201e16:c7017bd4:9feea350 ARRAY /dev/md4 level=raid1 num-devices=2 metadata=0.90 UUID=ea205046:3c6e78c6:ab84faa4:0da53c7c After a system re-boot, here is the contents of /proc/mdstat # cat /proc/mdstat Personalities : [raid1] md125 : active raid1 sdc3[0] 455482816 blocks [2/1] [U_] md0 : active raid1 sdd1[3] sdc1[0] sdb1[1] sda1[2] 1000320 blocks [4/4] [UUUU] md127 : active raid1 sdd3[1] sdb3[0] 971747648 blocks [2/2] [UU] md3 : active raid1 sdf1[1] sde1[0] 1003904 blocks [2/2] [UU] md4 : active raid1 sdf3[1] sde3[0] 1948491648 blocks [2/2] [UU] md1 : active raid1 sda3[1] 455482816 blocks [2/1] [_U] unused devices: <none> There are six physical disks in this system: Disk /dev/sda: 500.1 GB, 500107862016 bytes Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes Disk /dev/sdc: 500.1 GB, 500107862016 bytes Disk /dev/sdd: 1000.2 GB, 1000204886016 bytes Disk /dev/sde: 2000.3 GB, 2000398934016 bytes Disk /dev/sdf: 2000.3 GB, 2000398934016 bytes I used mdadm --examine /dev/sda1 to find the internal UUID for each of the physical volumes making up these volume groups /dev/sda1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdb1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdc1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdd1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sda3: Magic : a92b4efc Version : 0.90.00 UUID : 315eaf5c:776c85bd:5fa8189c:68a99382 /dev/sdc3: Magic : a92b4efc Version : 0.90.00 UUID : 315eaf5c:776c85bd:5fa8189c:68a99382 /dev/sdb3: Magic : a92b4efc Version : 0.90.00 UUID : 5b017f95:b7e266cc:f17a7611:8b752a02 /dev/sdd3: Magic : a92b4efc Version : 0.90.00 UUID : 5b017f95:b7e266cc:f17a7611:8b752a02 /dev/sde1: Magic : a92b4efc Version : 0.90.00 UUID : 4cc310ee:60201e16:c7017bd4:9feea350 /dev/sdf1: Magic : a92b4efc Version : 0.90.00 UUID : 4cc310ee:60201e16:c7017bd4:9feea350 /dev/sde3: Magic : a92b4efc Version : 0.90.00 UUID : ea205046:3c6e78c6:ab84faa4:0da53c7c /dev/sdf3: Magic : a92b4efc Version : 0.90.00 UUID : ea205046:3c6e78c6:ab84faa4:0da53c7c As you can see, the UUID on the various PVs match the values in the /etc/mdadm.conf file. My question is What the heck is going on. When I boot the system, I end up with two unexpected, unconfigured volume groups. Where the heck are /dev/md125 and /dev/md127 coming from? They don't appear in /etc/mdadm.conf and if I re-boot they keep coming back. It appears that somewhere mdadm is keeping information. How can I get rid of it so the mdadm.conf file is used. Harold

3 2

Not installing avahi in a kickstart install
by Robert Moskowitz 03 Mar '13

03 Mar '13

In the packages section of my kickstart I have: -avahi and I am still getting avahi and all of its rpms installed. I don't want avahi on my servers, how do I specify in a kickstart to NOT install it?

1 0

Re: [CentOS] Strange behavior from software RAID
by Harold Pritchett 03 Mar '13

03 Mar '13

Here I am following up on my own post... It occurred to me that all of this stuff must be magic. How does it work when the mdadm.conf file is on a raid/LVM volume which is not available at boot time? I looked in the /boot filesystem, the only one which is available at boot time and there is nothing there, unless this data is actually saved in one of the kernel modules or other binary files... Harold

2 1

EDNS support
by Robert Moskowitz 03 Mar '13

03 Mar '13

I am having problems with EDNS support on a few Centos 6.3 bind servers. I am trying to determine if the problem is my Juniper SSG5 firewall of Centos. All the servers have firewall enabled, though I have tested with stopping iptables and ip6tables. I am using tests from: https://www.dns-oarc.net/oarc/services/replysizetest dig @localhost +short rs.dns-oarc.net txt gets: ;; Truncated, retrying in TCP mode. Is anyone here running bind on their server and can run this command from the server? If you are not getting this truncation, then my problem is the firewall. If you are, then either you have figured out the majic for Centos or something like that...

3 5

installaing CentOS 6.3
by Daniel Robinson 03 Mar '13

03 Mar '13

I have a question about which ISO to use to install CentOS 6.3. I have installed it before from a USB stick, and when I did, I got a installation package selection menu. I overwrote that USB with something else, and I work out which ISO is the with that configuration option. When I installed it before, I had the opportunity to select from among the options listed here. http://unix.stackexchange.com/questions/20379/centos-6-default-installation… Yes, I know that I can just use yum to get the things I want, but I would like to set up a USB stick like the one I had before that can be used for multiple installations. One thing that changed is that when I installed it before, I set it up on a 350 GB partition, and I have it now on a 100 GB partition. I don't know if the install script is looking at partition size to decide the options available. I would think not. Any help would be appreciated. Thanks, Dan -- ----------------------- daniel g. robinson www.bornlivelovedie.com bornlivelovedie.tumblr.com @daguro

2 1

Please help: Any way to query host membership in nested ldap groups?
by Gelen James 02 Mar '13

02 Mar '13

Hi all, I have a openldap server setup with netsted netgruops,. Say the netgroups are: ngA: (host1, -, - ), (host2, -, - ) ngB: ngA, (host3, - - ) ngc: ngB, (host4, -, -) Is there a way to find host1's membership? so that I can return: ngA, ngB, ngC? Thanks a lot. --Rob

2 1

LDAP users/groups not showing up with nis, pam, & ldap
by Wes Modes 02 Mar '13

02 Mar '13

I am trying to configure NIS, PAM, & LDAP on a CentOS 6.2 host. I've previously installed a similar configuration on RHEL4, but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations are a little different. Currently, local users and groups are showing up but not LDAP users. When I do a /getent passwd/ and/getent group/ I don't get LDAP users. When I do a listing of a share directory that should have user and group ownership determined by LDAP, I get the uidNumbers and gidNumbers rather than the UIDs and GIDs. [root@edgar2 openldap]# ls -l /data/home | tail drwx------. 2 30634 30080 4096 Mar 18 2009 userdir1 drwx------. 33 30548 30075 4096 Jan 29 15:20 userdir2 drwx------. 3 30554 30075 4096 Jan 26 2009 userdir3 drwx------. 12 30467 30075 4096 Jun 21 2012 userdir4 drwx------. 4 30543 30075 4096 Oct 21 2008 userdir5 drwx------. 8 30555 30075 4096 Oct 31 10:36 userdir5 Other details: centos 6.2, smbldap-tools 0.9.6, openldap 2.4.23 I've fussed with /etc/nsswitch.conf, /etc/pam_ldap.conf, /etc/nslcd.conf, /etc/pam.d/system-auth, and /etc/sysconfig/authconfig. And selinux is off. I know the machine is successfully connecting to LDAP. An ldapsearch works from this machine, and I can even connect to a samba share with an ldap login through smbclient. Relevant parts of /etc/nsswitch: passwd: files ldap shadow: files ldap group: files ldap #hosts: db files nisplus nis dns hosts: files dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files ldap rpc: files services: files ldap netgroup: nisplus ldap #netgroup: ldap publickey: nisplus automount: files nisplus ldap #automount: files ldap aliases: files nisplus Relevant parts of /etc/pam_ldap.conf (everything else is commented out): host dir1.ourdomain.com base dc=.ourdomain,dc=com #uri ldaps://dir1.ourdomain.com uri ldap://dir1.ourdomain.com # basic auth config binddn cn=admin,dc=ourdomain,dc=com rootbinddn cn=admin,dc=ourdomain,dc=com # random stuff #timelimit 120 #bind_timelimit 120 #bind_policy hard # brought these times down wmodes Aug 11, 2008 timelimit 30 bind_timelimit 30 bind_policy soft idle_timelimit 3600 nss_initgroups_ignoreusers root,ldap # pam config #pam_password md5 pam_password md5 # config for nss nss_base_passwd ou=people,dc=ourdomain,dc=com?one nss_base_shadow ou=people,dc=ourdomain,dc=com?one nss_base_group ou=group,dc=ourdomain,dc=com?one # OpenLDAP SSL mechanism # start_tls mechanism uses the normal LDAP port, LDAPS typically 636 ssl no # OpenLDAP SSL options # Require and verify server certificate (yes/no) #tls_checkpeer yes # CA certificates for server certificate verification tls_cacertfile /etc/openldap/cacerts/cacert.pem tls_cacertdir /etc/openldap/cacerts # Client certificate and key tls_cert /etc/openldap/cacerts/servercert.pem tls_key /etc/openldap/cacerts/serverkey.pem Relevant parts of /etc/pam.d/system-auth: auth required pam_env.so auth sufficient pam_fprintd.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_ldap.so use_first_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_ldap.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_ldap.so session optional pam_mkhomedir.so skel=/etc/skel umask=077 And the only line in /etc/sysconfig/authconfig I changed was: USELDAP=yes Any thoughts? For those who are experienced with nis and pam, I'm sure this is a no brainer, but I could sure use the little bit of your brain that knows how to fix this. Wes -- Wes Modes Systems Designer, Developer, and Administrator University Library ITS University of California, Santa Cruz

4 4

running yum update on remote servers
by Robert Moskowitz 02 Mar '13

02 Mar '13

I have read a couple old threads here on updates for servers, and I am looking for some mechanics to getting the actual updates done. I don't want automatic updates; I want to control when and what gets updated. First I have to determine that a particular server needs updates. I suppose a daily script that would run "yum check-updates' and emails me the results could work, but then I would only want the email IF there was something to update, at my limited use of this option does not show anything to trigger a notify on changes. Does anyone know of a script that would do this? Then there is the actual update. I learned long ago NOT to run yum over an SSH connection, as WHEN that connection breaks in the middle of an update, you can have quite a problem to clean up. All I have done todate is to start vncserver and connect via vnc to then run yum. I can even drop the vnc connection and come back later to check results. I have considered running yum disconnected (? when you end a command with &) and log the results to a file that you check later. What are practical approaches to this? I only have a few servers here to manage.

13 24

can not login to server (use ssh)
by mcclnx mcc 02 Mar '13

02 Mar '13

we have CENTOS 5.6 on DELL server. I tried to use ssh login to server and failed: ssh oracle@ora10 oracle@ora10's password: Read from remote host ora10: Connection reset by peer Connection to ora10 closed. I have not problem login as "root" or other users. Is it possible too many processes run by "oracle" and don't allow me login. I check server current have 2000 oracle processes running. $ ps -ef|grep oracle|wc -l 2000 anyone know how to fix this issue? Thanks.

4 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss