- Discuss - lists.centos.org

Host Machine and Iptables problem
by Cbulist 01 May '12

01 May '12

Hi, I experienced some problems with my VM's and NetworkManager. Then I decided to remove NetworkManager on the VM's and the Host machine and everything is working well now. After that I stopped the Iptables on the Host machine and I lost external connectivity on my VM's. The only way that I found that VM machine works again is restarting the Host Machine. (Start Iptables service again on the Host didn't work) I'm using CentOS 6.2: 2.6.32-220.7.1.el6.x86_64 The host's iptables is the default, I didn't add anything. Why the Iptables is stopping the connectivity of VM when I stop it? Thanks in advance!

4 8

SELinux is preventing /usr/libexec/postfix/pickup from module_request
by David McGuffey 30 Apr '12

30 Apr '12

Getting module_request errors from SELinux. Errors being thrown by metacity sendmail.postfix cleanup trivial-rewarite local postdrop pickup All errors are essentially the same System was working well until I began to apply some basic security hardening configuration. Postfix started complaining when I made /tmp noexec, nodev, nosuid, and then did a mount --bind of /var/tmp under /tmp. Backed that out the remount of /var/tmp and those errors went away. But then these errors started showing up. Here is an example of a postfix pickup error. What is going on? I could allow the module to load, but I want to understand what is going on and the dangers of making the mod before I do it. SELinux is preventing /usr/libexec/postfix/pickup from module_request access on the system Unknown. ***** Plugin catchall_boolean (89.3 confidence) suggests ******************* If you want to allow all domains to have the kernel load modules Then you must tell SELinux about this by enabling the 'domain_kernel_load_modules' boolean. Do setsebool -P domain_kernel_load_modules 1 ***** Plugin catchall (11.6 confidence) suggests *************************** If you believe that pickup should be allowed module_request access on the Unknown system by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep pickup /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:postfix_pickup_t:s0 Target Context system_u:system_r:kernel_t:s0 Target Objects Unknown [ system ] Source pickup Source Path /usr/libexec/postfix/pickup Port <Unknown> Host desk.localdomain Source RPM Packages postfix-2.6.6-2.2.el6_1 Target RPM Packages Policy RPM selinux-policy-3.7.19-126.el6_2.10 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name desk.localdomain Platform Linux desk.localdomain 2.6.32-220.13.1.el6.x86_64 #1 SMP Tue Apr 17 23:56:34 BST 2012 x86_64 x86_64 Alert Count 24 First Seen Fri 27 Apr 2012 02:46:55 PM MDT Last Seen Sun 29 Apr 2012 05:10:32 AM MDT Local ID 4b8e5292-93f1-4e69-8bb4-4ea70bc5232e Raw Audit Messages type=AVC msg=audit(1335697832.612:34911): avc: denied { module_request } for pid=24226 comm="pickup" kmod="net-pf-10" scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system type=SYSCALL msg=audit(1335697832.612:34911): arch=x86_64 syscall=socket success=no exit=EAFNOSUPPORT a0=a a1=1 a2=0 a3=7fff3ca82190 items=0 ppid=1925 pid=24226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=pickup exe=/usr/libexec/postfix/pickup subj=system_u:system_r:postfix_pickup_t:s0 key=(null) Hash: pickup,postfix_pickup_t,kernel_t,system,module_request audit2allow #============= postfix_pickup_t ============== #!!!! This avc can be allowed using the boolean 'domain_kernel_load_modules' allow postfix_pickup_t kernel_t:system module_request; audit2allow -R #============= postfix_pickup_t ============== #!!!! This avc can be allowed using the boolean 'domain_kernel_load_modules' allow postfix_pickup_t kernel_t:system module_request;

3 2

error 24 attempt to access block outside of partition
by Phil Savoie 30 Apr '12

30 Apr '12

Hi All, After updating to the latest kernel, I get subject error at grub. I have no idea as to how to fix this. Booting of the previous kernel is fine. Could someone please help sort this out? Thank you in advance!! Phil Relative info: grub.conf # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You do not have a /boot partition. This means that # all kernel and initrd paths are relative to /, eg. # root (hd0,0) # kernel /boot/vmlinuz-version ro root=/dev/sdb1 # initrd /boot/initrd-[generic-]version.img #boot=/dev/sdb default=1 timeout=5 splashimage=(hd0,0)/boot/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-220.13.1.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-220.13.1.el6.x86_64 ro root=UUID=b9245ece-994f-44c8-9831-ec24cf865b6e nomodeset rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us LANG=en_US.UTF-8 rd_NO_MD quiet SYSFONT=latarcyrheb-sun16 rhgb crashkernel=auto rd_NO_LVM selinux=0 rd_NO_DM nouveau.modeset=0 rdblacklist=nouveau initrd /boot/initramfs-2.6.32-220.13.1.el6.x86_64.img title CentOS (2.6.32-220.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-220.el6.x86_64 ro root=UUID=b9245ece-994f-44c8-9831-ec24cf865b6e nomodeset rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us LANG=en_US.UTF-8 rd_NO_MD quiet SYSFONT=latarcyrheb-sun16 rhgb crashkernel=auto rd_NO_LVM selinux=0 rd_NO_DM nouveau.modeset=0 rdblacklist=nouveau initrd /boot/initramfs-2.6.32-220.el6.x86_64.img Output of fdisk -cul: [root@cc ~]# fdisk -cul Disk /dev/sda: 1500.3 GB, 1500301910016 bytes 255 heads, 63 sectors/track, 182401 cylinders, total 2930277168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0x00042630 Device Boot Start End Blocks Id System /dev/sda1 * 2048 2921889791 1460943872 83 Linux /dev/sda2 2921889792 2930276351 4193280 82 Linux swap / Solaris WARNING: GPT (GUID Partition Table) detected on '/dev/sdb'! The util fdisk doesn't support GPT. Use GNU Parted. Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders, total 1953525168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0xb77be37a Device Boot Start End Blocks Id System /dev/sdb1 * 2048 206847 102400 7 HPFS/NTFS /dev/sdb2 206848 1953521663 976657408 7 HPFS/NTFS [root@cc ~]#

3 3

yum yum or not?
by Shaun 30 Apr '12

30 Apr '12

Hi all, I'm a bit of a newbie to CentOS though not Linux in general. I come from an apt-get package management mentality and I've had a few issues where package management actions haven't quite done what I'd expect. So I'm guessing it's user error! :) I installed GNOME and then decided that I wanted to install Xfce to try it out. I decided to then remove it with just 'yum remove' after playing with it a bit. It seemed to uninstall a lot of GNOME stuff (presumably that they had in common) and so the next time I tried to use GNOME it looked different and was missing a few components. Should I have just reverted the install of Xfce to undo it so that those dependencies would've have been touched or is this just how yum works?

8 20

(no subject)
by nxbtch 30 Apr '12

30 Apr '12

1 0

NTLMv2 compatibility in Samba 3.0.33 standard packages
by Andrew Reis 28 Apr '12

28 Apr '12

Good afternoon/morning/evening everyone, I've been running into the problem of clients using Windows 7 with CentOS 5.X and file/printer sharing. Correct me if I'm wrong, but the stand samba-3.0.33-x.x.x packages DO NOT provide compatibility with Windows Vista/7. I've had to manually compile samba from source or use the samba3x packages to fix the problem. Just wondering if we're ever going to have the NTLMv2 subroutines compiled into the update/centosplus repo packages. Thanks, -- _ANDREW REIS_ MCTS, Network+ Software/Networking Microsoft Windows Support/Webmaster DBMS Inc. Email: areis(a)dbmsinc.com [1] Direct Line: (888) 862-0662 ext. 307 Emergency # ONLY: (218) 833-2508 __ Links: ------ [1] mailto:areis@dbmsinc.com

4 3

iptables drop on virtual host
by Bob Hoffman 28 Apr '12

28 Apr '12

Does this work? adding DROP to iptables on the virtual host's iptables, before the phys bridge....will it prevent those ips from getting to the bridged part of iptables? Or would a different syntax be used? -A INPUT -s 66.77.65.128/26 -j DROP -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT

2 3

imagemagick convert/display eps file no decode delegate
by Tony Schreiner 27 Apr '12

27 Apr '12

I am finding on all my CentOS 5.8 systems (all fully updated but a variety of package mixes) that the display or convert commands from ImageMagick are unable to handle eps files. I get error output as follows, curious if anyone else sees this $ convert rna.eps rna.epi convert rna.eps rna.epi Error: /undefinedfilename in (72x72) Operand stack: Execution stack: %interp_exit .runexec2 --nostringval-- --nostringval-- --nostringval-- 2 %stopped_push --nostringval-- --nostringval-- --nostringval-- false 1 %stopped_push Dictionary stack: --dict:1154/1684(ro)(G)-- --dict:0/20(G)-- --dict:70/200(L)-- Current allocation mode is local Last OS error: 2 GPL Ghostscript 8.70: Unrecoverable error, exit code 1 Error: /undefinedfilename in (72x72) Operand stack: Execution stack: %interp_exit .runexec2 --nostringval-- --nostringval-- --nostringval-- 2 %stopped_push --nostringval-- --nostringval-- --nostringval-- false 1 %stopped_push Dictionary stack: --dict:1154/1684(ro)(G)-- --dict:0/20(G)-- --dict:70/200(L)-- Current allocation mode is local Last OS error: 2 GPL Ghostscript 8.70: Unrecoverable error, exit code 1 convert: no decode delegate for this image format `rna.eps'. convert: Postscript delegate failed `rna.eps'. convert: missing an image filename `rna.epi'. ImageMagick 5.2.8.0-12.el5 ghostcript-8.0-14.el5 the equivalent GraphicsMagick command gm convert does work This is a recent development, but I can't say how recent Tony Schreiner

1 0

Virt-manager requires stdin to run?
by Jason Pyeron 27 Apr '12

27 Apr '12

Anyone have any ideas on this? $ ssh root(a)x.y.z.a virt-manager & $ Warning: untrusted X11 forwarding setup failed: xauth key data not generated Warning: No xauth data; using fake authentication data for X11 forwarding. [2]+ Stopped ssh root(a)x.y.z.a virt-manager $ bg [2]+ ssh root(a)x.y.z.a virt-manager & $ [2]+ Stopped ssh root(a)x.y.z.a virt-manager -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 0

Help with software raid + LVM on Centos 6
by aurfalien 27 Apr '12

27 Apr '12

Hi all, Please excuse the many posts. Wondering if any one can help me with the the setup. I have 2x2TBdisks. I would like to mirror them. I would like to create two LVMs so that I can snap shot from one to the other. During Centos 6 install, how would I go about this as its confusing? So far I am here; 1) Created the following raid devices; md0 500MB (use it for /boot) md1 4000MB (use it for swap) md2 All remaining space (use it for /) 2) Created two physical LVMs, one on md0, the other on md1. 3) ? This is were I am confused, do I create two LVM volume groups? I was thinking that my primary LVM can be ~1TB and that my other LVM which I snapshot to can also be ~1TB. Anyways, I am very green on this topic as I usually do hardware raids but I don't have that option. Thanks in advance, - aurf

2 2

Re: [CentOS] yum yum or not?
by James B. Byrne 27 Apr '12

27 Apr '12

On Fri, April 27, 2012 04:15, Shaun wrote: > Well this is it. I've used both 'remove' and 'history undo' and had > better success (system not having something important removed) with > the latter. I have only this suspicion. It may be that yum history undo only rolls back the changes actually made by the previous yum update/install since it 'knows' that the system environment has not changed in the interim. Whereas yum history remove, since it has to cherry-pick packages from a possibly changed environment, instead removes rpm dependencies based on the package specs of the items directly added by the original yum command, whether these were installed in that transaction or not. But, this is only a guess. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Centos 6 - Create raid 1 + LVM during gui install
by aurfalien 27 Apr '12

27 Apr '12

Hi all, Does any one know of a how to for creating raid 1 + LVMs during install for Centos 6? Do I create the physical LVM first and then raid or vise versa? Its seems diff then doing it for Centos 5. - aurf

2 2

More on the ATA sense error
by m.roth＠5-cent.us 27 Apr '12

27 Apr '12

AFAIK, no one's responded to me about whether I should just turn off smartd. At any rate, here's more info: this server only started spitting Apr 25 07:47:50 <server> kernel: sda: Current [descriptor]: sense key: Recovered Err ror Apr 25 07:47:50 <server> kernel: Add. Sense: ATA pass through information availl able Apr 25 07:47:50 <server> kernel: Apr 25 07:47:50 <server> kernel: Descriptor sense data with sense descriptors (in hh ex): Apr 25 07:47:50 <server> kernel: 72 01 00 1d 00 00 00 0e 09 0c 00 00 00 00 00 00 Apr 25 07:47:50 <server> kernel: 00 4f 00 c2 40 50 for every drive - and it has four - right after updated to the most current kernel 2.6.18-308.4.1.el5 #1 SMP and rebooted. So one question becomes three: a) should I turn off smartd? b) should I reboot to the previous kernel, and see if it keeps up? c) is this a known bug? mark

1 0

fail2ban logrotate failure
by Bob Hoffman 27 Apr '12

27 Apr '12

I got the fail2ban from epel. There were a number of issues relating to using a log file... logwatch was looking for both fail2ban and fail2ban.log logrotate file fail2ban added looked for fail2ban.log and then reset itself to syslog fail2ban itself went to syslog, over riding its fail2ban.log. took a while, but I use /var/log/fail2ban now, that finally worked through logrotates and logwatch. Problem with centos variant of fail2ban: logrotate causes all 'ban' actions to stop happening. I am pretty sure it stops reading the logs but still functions. Unban actions still keep showing up in the log, but the 'ban' actions just stop. Program is running, but no longer working. Long searches online show a million others with the same issue. Only way to prevent it seems to be to add a reload or restart in the syslog file. This is undesired due to losing all banned ips listed. It happens as part of the logrotate. The logrotate file I have changed a few times and recently tried this postrotate /usr/bin/fail2ban-client set logtarget /var/log/fail2ban 1>/dev/null || true endscript setting the logtarget, which the original called for changing it to syslog and 2>dev/null || true so what would you do? I imagine when logrotate happens and syslog restarts something is causing fail2ban to stop working properly, but still timing 'unbans'. This is apparently a bug/problem for almost everyone of all distros. Other than just uninstalling, the only way to make it work would be a restart around 4 every morning, making any long term bans useless. My last thought is to just throw the /var/log/fail2ban to be rotated by syslog like maillog and the others..and not doing anything special. Maybe it would just work. I write here because I know there are hundreds of you and someone must have figured out how to make fail2ban work for more than 24 hours without a restart....

2 2

High load
by Kaushal Shriyan 27 Apr '12

27 Apr '12

Hi Is there a way to nail down the issue of high load on a server basically trying to understand the reason behind high load at a specific time period. I use top command but it does not have history. Nagios reports saying "*[04-25-2012 10:11:00] SERVICE ALERT: dev;LOAD;WARNING;HARD;3;WARNING - load average: 6.88, 6.36, 5.71"* * * Please help me understand. Regards Kaushal

4 3

High load averages copying USB
by Lists 27 Apr '12

27 Apr '12

Problem as follows: 1) Plug in an external USB drive. 2) Mount it anywhere. Doesn't matter how. 3) Copy a few GB of data to the drive from a non-USB disk. 4) Watch the load average "climb" to 5.x, sometimes 10.x or more. Why? This on an otherwise unloaded system. Doesn't matter how many cores, how much RAM, 32/64 bit, etc. Why should copying some files to a USB drive cause load averages to climb so high? (and network monitors to freak out?)

5 7

Re: [CentOS] LibreOffice rpm's vs Centos testing repo
by Johan Vermeulen 27 Apr '12

27 Apr '12

This time in the "normal" repo or also in testing? Greetings, j. verzonden m.b.v Android vandaar de beknoptheid. Nux! <nux(a)li.nux.ro>schreef: >On 19.03.2012 11:43, Jake Shipton wrote: >> On Mon, 19 Mar 2012 09:50:21 +0000 >> nux(a)li.nux.ro wrote: >> >>> Jake, >>> >>> Sure, 3.5 is on the to do list. >>> I see this trend a lot, to make repos out of official rpms (at least >>> Ljubomir is also doing it). Maybe it's worth doing this on a bigger >>> scale. Care to share what exactly you are doing? Are you using any >>> "meta" packages? >> Hi, >> >> The setup is pretty basic (imo) because the repo is used only in a >> LAN >> and never used outside of this LAN, I do not worry about generating >> delta's or stuff like that. I don't even GPG sign them. >> >> The local repo is also used for other self compiled RPM's. These >> would >> usually be tagged with a ".hr" tag (ie, >> <packagename>-<version>.el6.hr.x86_64) for easy removal. >> >> But as far as I am aware to do that, with official RPM's it would >> require a rebuild. >> >> So what I tend to do is just open up filezilla, ftp to a libreoffice >> mirror, browse my way to libreoffice stable RPM's, and download them >> to >> "/var/www/html/repository/<arch>" (Which is actually just a link >> to /home/<username>/rpmbuild/RPMS) >> >> Obviously the repository it's self is pre-setup because of the other >> packages, so as my normal user next up I would just run: >> >> createrepo --update ~/rpmbuild/RPMS/<arch> >> createrepo --update ~/rpmbuild/RPMS/SRPMS >> >> A quick check for SELinux permission's and it's good to go :-). Now >> from local machines on the LAN I would just use "yum install >> libobasis* >> libreoffice*" etc, then pick and remove the unnecessary extra >> packages. >> and "yum update" takes care of updates :-) (after I have redone the >> above..) >> >> This is something most user could easily do them selves, and it could >> also be done publicly, however it is still a "messy" method even if >> somebody else does it for you (and you just enable/add the repo). >> >> I would still prefer to be able to have RPM's built specifically for >> EL6. >> >> I guess that raises the question of "You have the repo, rpmbuild >> etc setup, why don't you build them your self?", and to answer it: >> >> Because I do not have the CPU Power :-) (Still got a Single core >> here....) >> >> But yeah.. that's basically all I do :-). > >And that's what I did as well. Check this out: >http://www.nux.ro/archive/2012/04/LibreOffice_org_RPMs_in_a_yum_friendly_fo… >I'll spam this in a separate message on the usual places. > >Also, more good news comes from Redhat as RHEL 6.3 will contains >Libreoffice 3.4.5! > >-- >Sent from the Delta quadrant using Borg technology! > >Nux! >www.nux.ro >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

2 1

OpenOffice.org3 Error after Software Update
by Mark LaPierre 27 Apr '12

27 Apr '12

Hey Y'all, I just installed the updates recommended by Software Update. Apr 25 19:04:43 Updated: xulrunner-10.0.4-1.el6.centos.i686 Apr 25 19:04:53 Updated: firefox-10.0.4-1.el6.centos.i686 Apr 25 19:05:03 Updated: thunderbird-10.0.4-1.el6.centos.i686 Apr 25 19:05:05 Updated: matahari-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:06 Updated: matahari-agent-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:09 Updated: matahari-broker-0.4.4-12.el6_2.i686 Apr 25 19:05:10 Updated: matahari-network-0.4.4-12.el6_2.i686 Apr 25 19:05:11 Updated: matahari-sysconfig-0.4.4-12.el6_2.i686 Apr 25 19:05:12 Updated: matahari-service-0.4.4-12.el6_2.i686 Apr 25 19:05:13 Updated: matahari-host-0.4.4-12.el6_2.i686 Apr 25 19:05:14 Updated: 2:libpng-1.2.49-1.el6_2.i686 Apr 25 19:05:17 Updated: openssl-1.0.0-20.el6_2.4.i686 Apr 25 19:05:21 Updated: openssl-devel-1.0.0-20.el6_2.4.i686 Apr 25 19:05:22 Updated: 2:libpng-devel-1.2.49-1.el6_2.i686 Apr 25 19:05:23 Updated: matahari-0.4.4-12.el6_2.i686 I also installed Virtual Box. Apr 25 19:23:55 Installed: VirtualBox-4.1-4.1.12_77245_rhel6-1.i686 Now open office will not start. It complains about not being able to load a library. The application cannot be started. loading component library failed: file:///usr/lib/openoffice.org3/program/../basis-link/program/i18npool.uno.so I checked for the existence of i18npool.uno.so in the directory indicated. It is there. 1. Has anyone else experienced any problems with the latest software update? 2. What course of action would you recommend to restore the operation of openoffice.org? CentOS release 6.2 (Final) Linux mushroom.patch 2.6.32-220.13.1.el6.i686 #1 SMP Tue Apr 17 22:09:08 BST 2012 i686 i686 i386 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

2 3

Re: [CentOS] CentOS-announce Digest, Vol 84, Issue 14
by Johan Vermeulen 26 Apr '12

26 Apr '12

Maybe this came out wrong. What I meant is: I was told RHEL doesn't do major application upgrades in one version, so we would end op with Firefox 3.6.x in CentOs 6.x in a few years from now. Apparently this is not true. So now I,m wondering if a move to LO within CentOs 6 is imaginable. Grt. J. verzonden m.b.v Android vandaar de beknoptheid. Johan Vermeulen <jvermeulen(a)cawdekempen.be>schreef: >If Rhel/CentOs goes from Firefox3.6 to Firefox 10, could they go from OpenOffice to LibreOffice as wel? > >Greetings, James > >verzonden m.b.v Android >vandaar de beknoptheid. > >centos-announce-request(a)centos.orgschreef: > >>Send CentOS-announce mailing list submissions to >> centos-announce(a)centos.org >> >>To subscribe or unsubscribe via the World Wide Web, visit >> http://lists.centos.org/mailman/listinfo/centos-announce >>or, via email, send a message with subject or body 'help' to >> centos-announce-request(a)centos.org >> >>You can reach the person managing the list at >> centos-announce-owner(a)centos.org >> >>When replying, please edit your Subject line so it is more specific >>than "Re: Contents of CentOS-announce digest..." >> >> >>Today's Topics: >> >> 1. CEEA-2012:0327 CentOS 6 firefox Update (Johnny Hughes) >> 2. CEBA-2012:0337 CentOS 6 nss Update (Johnny Hughes) >> 3. CEEA-2012:0329 CentOS 6 thunderbird Update (Johnny Hughes) >> 4. CEBA-2012:0339 CentOS 6 openswan Update (Johnny Hughes) >> 5. CEBA-2012:0338 CentOS 6 selinux-policy Update (Johnny Hughes) >> 6. CEBA-2012:0335 CentOS 6 iptables Update (Johnny Hughes) >> >> >>---------------------------------------------------------------------- >> >>Message: 1 >>Date: Sat, 25 Feb 2012 05:17:37 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEEA-2012:0327 CentOS 6 firefox Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225051737.GA11681(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Enhancement Advisory 2012:0327 >> >>Upstream details at : http://rhn.redhat.com/errata/RHEA-2012-0327.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>d2599a661b132aa2ddd7392eae5685646cf3c635d0ef0267599b8740f09c12e2 firefox-10.0.1-1.el6.centos.i686.rpm >>77de9c554ac1f16ba2520f07cee4c15d4e1e2979cf740c7c002fea07c34faf96 xulrunner-10.0.1-2.el6.centos.i686.rpm >>fcd332a2aeb56279601acf6494a33a2983344f5b9982f37c6800cb9e3aa4f663 xulrunner-devel-10.0.1-2.el6.centos.i686.rpm >>6461e5d96c34674c8d429155b071ef03f770951c296667b9fe481b4bbafa78b5 yelp-2.28.1-13.el6_2.i686.rpm >> >>x86_64: >>d2599a661b132aa2ddd7392eae5685646cf3c635d0ef0267599b8740f09c12e2 firefox-10.0.1-1.el6.centos.i686.rpm >>22976c0f8338775d7407b9239c3f9f32ec7ca88faa10c94f437772ae9b380137 firefox-10.0.1-1.el6.centos.x86_64.rpm >>77de9c554ac1f16ba2520f07cee4c15d4e1e2979cf740c7c002fea07c34faf96 xulrunner-10.0.1-2.el6.centos.i686.rpm >>b3441c386c20957faa6130d8bed19875ac5d1494f3a385ed12249191792e1fa2 xulrunner-10.0.1-2.el6.centos.x86_64.rpm >>fcd332a2aeb56279601acf6494a33a2983344f5b9982f37c6800cb9e3aa4f663 xulrunner-devel-10.0.1-2.el6.centos.i686.rpm >>8d92e10fba11d7b9300d13244f49e6fb1ce97bdde46ee197447af2dcbf4d9699 xulrunner-devel-10.0.1-2.el6.centos.x86_64.rpm >>a839b1a862c44fa07ce558f0f4a81a254abda5ad7cacef7f41fa6c6c591fe04f yelp-2.28.1-13.el6_2.x86_64.rpm >> >>Source: >>1a53d0a7664910c65c00711815fcfd8a87f965b5529d6135099d989454251231 firefox-10.0.1-1.el6.centos.src.rpm >>385d3e038296c9ca12d13bc5c3396049d70f4f8a879fc2468b6ce9c3a93ec96b xulrunner-10.0.1-2.el6.centos.src.rpm >>dc668b084f356b2049f8e724476ff665876bea6b8abbe533aa5555d7cea42c07 yelp-2.28.1-13.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 2 >>Date: Sat, 25 Feb 2012 05:20:36 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0337 CentOS 6 nss Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052036.GA11839(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0337 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0337.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>96a9433b9cfb6009dcc4e4b61168752313ab925cc72d9cf2bd104136bd1770f5 nspr-4.8.9-3.el6_2.i686.rpm >>e1e90d9135b4087a9f97ea2ba0b6025e8d6a812e98a1743fe897474d8ec719e5 nspr-devel-4.8.9-3.el6_2.i686.rpm >>cbefa7c87e5dc51dab0a433f47c0cd4f6b06ca0c9c3f2579f32141d9b3d30998 nss-3.13.1-6.el6_2.i686.rpm >>a495226e3abee7423caa069e2b8a1749ee63543800b37b5e3cbd7afcf05d65e1 nss-devel-3.13.1-6.el6_2.i686.rpm >>54c94e1640a123d70b4ae4446f750432c47ba0e786237791695ce47289312020 nss-pkcs11-devel-3.13.1-6.el6_2.i686.rpm >>440a26179856dc203924ae31147056bfda9a11e35826c23cacb06dbe5a520a95 nss-sysinit-3.13.1-6.el6_2.i686.rpm >>ff4640259883bd7d9d9fb33d3a295328023c06d5b3865dce69839657d0202761 nss-tools-3.13.1-6.el6_2.i686.rpm >>1b1f933409d29705c281e800769c5610811a65d6568674ddda7dace5e9db76f9 nss-util-3.13.1-3.el6_2.i686.rpm >>89039a389f73a99561ba3629dfb0eac27f031e59c209ea4eaee9fcea5141a632 nss-util-devel-3.13.1-3.el6_2.i686.rpm >> >>x86_64: >>96a9433b9cfb6009dcc4e4b61168752313ab925cc72d9cf2bd104136bd1770f5 nspr-4.8.9-3.el6_2.i686.rpm >>0555f49bb513bb0e7188f5a894898e3650c8d8472b990f283749254e59ce8d16 nspr-4.8.9-3.el6_2.x86_64.rpm >>e1e90d9135b4087a9f97ea2ba0b6025e8d6a812e98a1743fe897474d8ec719e5 nspr-devel-4.8.9-3.el6_2.i686.rpm >>9ce858d877be449049d136db3167fe7775151861886ac9a728a94411613c3d35 nspr-devel-4.8.9-3.el6_2.x86_64.rpm >>cbefa7c87e5dc51dab0a433f47c0cd4f6b06ca0c9c3f2579f32141d9b3d30998 nss-3.13.1-6.el6_2.i686.rpm >>e0b350fc3c83e8fa088a64e97e308c0ac254c07836b5d2c1b1abf651550ac433 nss-3.13.1-6.el6_2.x86_64.rpm >>a495226e3abee7423caa069e2b8a1749ee63543800b37b5e3cbd7afcf05d65e1 nss-devel-3.13.1-6.el6_2.i686.rpm >>d5b1fb57fe5c17ba10057de8ffa632f963b813e5de576d152c18b2708f627c6d nss-devel-3.13.1-6.el6_2.x86_64.rpm >>54c94e1640a123d70b4ae4446f750432c47ba0e786237791695ce47289312020 nss-pkcs11-devel-3.13.1-6.el6_2.i686.rpm >>1266afcedd753ef7b93d722782367fd5f12962dfcf6bee8093861b9587f243c4 nss-pkcs11-devel-3.13.1-6.el6_2.x86_64.rpm >>a2d7acdca92b38c0daab5713413cb97ccadf28e186494c87fff905120d8921bf nss-sysinit-3.13.1-6.el6_2.x86_64.rpm >>e82cd7c4c577721da6698a3b20cb90203ee5a6240181eb4ebf877ed8e86c173b nss-tools-3.13.1-6.el6_2.x86_64.rpm >>1b1f933409d29705c281e800769c5610811a65d6568674ddda7dace5e9db76f9 nss-util-3.13.1-3.el6_2.i686.rpm >>b90b050163b1605b8d7bd002955899fe4dd43f865462edfb5470de461906fbb7 nss-util-3.13.1-3.el6_2.x86_64.rpm >>89039a389f73a99561ba3629dfb0eac27f031e59c209ea4eaee9fcea5141a632 nss-util-devel-3.13.1-3.el6_2.i686.rpm >>41e31d4aad5ad08ada416aa0d5c8ea4121ab3171ba211f45f06f5b6fbb213793 nss-util-devel-3.13.1-3.el6_2.x86_64.rpm >> >>Source: >>e528dee7d721d3a621e883a2ea7df3befc8f3a4cc19fa37c3f97f773bccab2ae nspr-4.8.9-3.el6_2.src.rpm >>05b8b089f4dd7cca6c022e900a52ca1d2e036d716847c4cc4d8fa2eb89b3a049 nss-3.13.1-6.el6_2.src.rpm >>f0273a41ba5b4459ad0247611cfa473345886f21bab6dcb096e84d82f588a464 nss-util-3.13.1-3.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 3 >>Date: Sat, 25 Feb 2012 05:22:40 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEEA-2012:0329 CentOS 6 thunderbird Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052240.GA11930(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Enhancement Advisory 2012:0329 >> >>Upstream details at : http://rhn.redhat.com/errata/RHEA-2012-0329.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>0deb275c3241a3943572cab3b6c01515525ad42a679df5dabe66206a4f5f4441 thunderbird-10.0.1-3.el6.centos.i686.rpm >> >>x86_64: >>3b1a148fddacd067db594fde1b86bf3448d6cf1079b38438d7432a4764e1db29 thunderbird-10.0.1-3.el6.centos.x86_64.rpm >> >>Source: >>fba41db75d164461c9603a4735a0f670dcf29d9daf6520611c0806e4ca7965a9 thunderbird-10.0.1-3.el6.centos.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 4 >>Date: Sat, 25 Feb 2012 05:23:10 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0339 CentOS 6 openswan Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052310.GA12010(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0339 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0339.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>2ad5574961178d92774023258d278131c83acfa0bfa1d2584d06fd9e64d16d78 openswan-2.6.32-10.el6_2.i686.rpm >>ba280a99b04ca752185ff05289ba1f7e429a26186baf68eaf579cbcdea93e5d1 openswan-doc-2.6.32-10.el6_2.i686.rpm >> >>x86_64: >>dec60d50e94a8e644d1f92e44ec8ee8770e5ab69073f39e914c8efbd47ac0fb6 openswan-2.6.32-10.el6_2.x86_64.rpm >>fd82468d39d724dbe68cb8a63f72217a6c3aaefbd368739c8b9fa7c30ba66d2e openswan-doc-2.6.32-10.el6_2.x86_64.rpm >> >>Source: >>901e69b53004c2c736e4d863c4583563f83ed8f9c6ae6a9bf185eb3797100272 openswan-2.6.32-10.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 5 >>Date: Sat, 25 Feb 2012 05:23:47 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0338 CentOS 6 selinux-policy >> Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052347.GA12114(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0338 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0338.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>a6af66e794daab711544237711fc60a877d6a766117abe9be5404262f6688446 selinux-policy-3.7.19-126.el6_2.9.noarch.rpm >>c7d4083b26698968559660235c43bb10a97751ebfff7dc3b64abc9462db76c39 selinux-policy-doc-3.7.19-126.el6_2.9.noarch.rpm >>9863d5eb132e9d24874f17018afec339347c59ac29dd76440944b433554994d7 selinux-policy-minimum-3.7.19-126.el6_2.9.noarch.rpm >>26968984b4a1a1eb3910193f7bcfea6d70d615c7be5cc53523c2b9d96f44a575 selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm >>fc4da222ceb175ab2f72862084a68f5e818e452457666b7e85f37795f8f8f010 selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm >> >>x86_64: >>71d4b96c4ac6ea7f5e9327da9e54be5d9d88774cae563c793a5063dbe94d51c9 selinux-policy-3.7.19-126.el6_2.9.noarch.rpm >>f75088e18583cf323f24696131ac3567ac9aa992b04c1cb2761938cff4cab69c selinux-policy-doc-3.7.19-126.el6_2.9.noarch.rpm >>9d89b2389cca275c4f1e23ad55ae6d0b24802ec7545957f4c2bc46a9954deff4 selinux-policy-minimum-3.7.19-126.el6_2.9.noarch.rpm >>6ff9803ed6ec2393aa3a65b161ec76ed1162922754c804370229ae701976f8a5 selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm >>c4edce76d8f801df40d83ed88e28690d7719614920b6b68bc81b196324953aad selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm >> >>Source: >>ddbb5765611d2fa274c41cc42b0731f3ce56eb5cba1bd5bc5fd23beff49a44c7 selinux-policy-3.7.19-126.el6_2.9.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 6 >>Date: Sat, 25 Feb 2012 10:41:06 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0335 CentOS 6 iptables Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225104106.GA27872(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0335 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0335.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>6a7d7caa6fbee984d04f36138cad2c8c423348d96f7d631f26ef465b102bcb54 iptables-1.4.7-5.1.el6_2.i686.rpm >>78c572e6d1922558eae95995ea36858d43a33d9c956dd67fc62f393d7f0a26c3 iptables-devel-1.4.7-5.1.el6_2.i686.rpm >>91627a7f937e8e5c7a4904ba4b30c20cccfc707e43e86eef59d19acf2d68e4e8 iptables-ipv6-1.4.7-5.1.el6_2.i686.rpm >> >>x86_64: >>6a7d7caa6fbee984d04f36138cad2c8c423348d96f7d631f26ef465b102bcb54 iptables-1.4.7-5.1.el6_2.i686.rpm >>31caf99ebbbc8db11957b1b910bbac0367828338fe07982f7c31c744416415bc iptables-1.4.7-5.1.el6_2.x86_64.rpm >>78c572e6d1922558eae95995ea36858d43a33d9c956dd67fc62f393d7f0a26c3 iptables-devel-1.4.7-5.1.el6_2.i686.rpm >>9da9193de62224271ec2340d171c3282b3d226185f8f34dfb4410d22ff45be47 iptables-devel-1.4.7-5.1.el6_2.x86_64.rpm >>36511e71182583c5775d442f02f5aaab115252c3eaf343890d151440b06ceb02 iptables-ipv6-1.4.7-5.1.el6_2.x86_64.rpm >> >>Source: >>0e7eb17349dd0543c4e817c8f5025d9f2ddeffc70a6f165528ebb3a4a3b86aaf iptables-1.4.7-5.1.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>_______________________________________________ >>CentOS-announce mailing list >>CentOS-announce(a)centos.org >>http://lists.centos.org/mailman/listinfo/centos-announce >> >> >>End of CentOS-announce Digest, Vol 84, Issue 14 >>*********************************************** >>_______________________________________________ >>CentOS mailing list >>CentOS(a)centos.org >>http://lists.centos.org/mailman/listinfo/centos >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

13 23

Re: [CentOS] Not Quite Minimal CentOS 6.2
by James B. Byrne 26 Apr '12

26 Apr '12

On Thu, April 26, 2012 08:55, Johnny Hughes wrote: >> It has the network stack ... you must configure it during the install. >> >> If you do not configure and enable the ethernet card then it does not >> turn on by default ... but it is in the installer to be able to do: >> >> http://wiki.centos.org/FAQ/CentOS6#head-b67e85d98f0e9f1b599358105c551632c6f… >> > > Don't get the wrong idea here ... I think it is a very silly way to do > installs to not default with the network turned on. It should be turned > on ... but upstream decided it differently and I do not get to be the > decider :D I used to think the same thing. However, on reflection I think that the decision to keep the network down until deliberately enabled is a sensible and prudent security choice. This leaves up to the operator the decision as to whether or not a given system is sufficiently hardened against Internet attacks before connecting. Now, consider upstream's decision to enable network-manager by default on an enterprise distro. THAT I both understand and fundamentally disagree with. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 6

CentOS-announce Digest, Vol 86, Issue 15
by centos-announce-request＠centos.org 26 Apr '12

26 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0524 CentOS 5 cmirror Update (Johnny Hughes) 2. CEBA-2012:0525 CentOS 6 libvirt-qmf Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 26 Apr 2012 13:31:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0524 CentOS 5 cmirror Update To: centos-announce(a)centos.org Message-ID: <20120426133150.GA16368(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0524 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0524.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6e7c19773229d2bea54b66f9e6531a500be84e1acd499ba5a590527fac33a300 cmirror-1.1.39-13.el5_8.1.1.i386.rpm x86_64: 45f9ce129859bac0227954f72f69a1dc5e6ec5eb95c0bc805f6b928578052eee cmirror-1.1.39-13.el5_8.1.1.x86_64.rpm Source: ff96e198ad67477356b10aa36879448f36c4a6ecb0214eb389f1838799fe9989 cmirror-1.1.39-13.el5_8.1.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 26 Apr 2012 13:55:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0525 CentOS 6 libvirt-qmf Update To: centos-announce(a)centos.org Message-ID: <20120426135504.GA16629(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0525 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0525.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fa16888103bb2243159f81124ccb59385f30342c4cd92e9522fa3a0eac662c97 libvirt-qmf-0.3.0-7.el6_2.i686.rpm x86_64: 496f469fee6a6f5d073405964e1458d7e5dbfa504bacc250de127e9c768a771a libvirt-qmf-0.3.0-7.el6_2.x86_64.rpm Source: 2ddbe9d375c6b9e5f81d2850c412021b62a7b3f891bd32ff3f078eff1ce28fbb libvirt-qmf-0.3.0-7.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 15 ***********************************************

1 0

Not Quite Minimal CentOS 6.2
by listmail 26 Apr '12

26 Apr '12

Hi All, I a working on configuring a not-quite minimal installation of CentOS 6.2. I tried doing the "minimal" installation available with the installer, but it's a bit too minimal to be useful. So I'm cutting down from a less minimal starting place. I'm pretty familiar with 5.x, but what I'm finding in 6.2 is a lot of new stuff, and a lot of odd behavior. For example, cups is starting at boot time, despite being disabled by chkconfig. And I'm finding things like qpidd, matahari, messagebus, and portreserve that really don't belong in a minimal setup. To clarify, I'm shooting for a simple config, like one would use for a dedicated DNS server. Can anyone point me to an up-to-date list of daemon processes that indicates what they do and whether they can be safely disabled? Also, any ideas as to what would be launching cups would be appreciated. Thanks, --Bill

5 7

restorecon and sudo
by Philippe Naudin 26 Apr '12

26 Apr '12

Hello, On CentOS-6.2, these two commands (on the same machine) give me different results : # restorecon -r /var/www/html/Centos/ # (as root) $ sudo restorecon -r /var/www/html/Centos/ # (as an unprivileged user) /var/www/html/Centos/ is a symlink to /mnt/packages/Centos/ In the first case, I get : # ls -Z /var/www/html/Centos/ drwxr-xr-x. naudin biom system_u:object_r:httpd_sys_content_t 6 and in the second case : $ ls -Z /var/www/html/Centos/ drwxr-xr-x. naudin biom system_u:object_r:unlabeled_t:s0 6 Is this the expected behavior, or is there something I have missed ? -- Philippe Naudin UMR MISTEA : Mathématiques, Informatique et STatistique pour l'Environnement et l'Agronomie INRA, bâtiment 29 - 2 place Viala - 34060 Montpellier cedex 2 tél: 04.99.61.26.34, fax: 04.99.61.29.03, mél: naudin(a)supagro.inra.fr

1 0

OpenOffice.org3 Error after Software Update
by Mark LaPierre 25 Apr '12

25 Apr '12

Hey Y'all, I just installed the updates recommended by Software Update. Apr 25 19:04:43 Updated: xulrunner-10.0.4-1.el6.centos.i686 Apr 25 19:04:53 Updated: firefox-10.0.4-1.el6.centos.i686 Apr 25 19:05:03 Updated: thunderbird-10.0.4-1.el6.centos.i686 Apr 25 19:05:05 Updated: matahari-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:06 Updated: matahari-agent-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:09 Updated: matahari-broker-0.4.4-12.el6_2.i686 Apr 25 19:05:10 Updated: matahari-network-0.4.4-12.el6_2.i686 Apr 25 19:05:11 Updated: matahari-sysconfig-0.4.4-12.el6_2.i686 Apr 25 19:05:12 Updated: matahari-service-0.4.4-12.el6_2.i686 Apr 25 19:05:13 Updated: matahari-host-0.4.4-12.el6_2.i686 Apr 25 19:05:14 Updated: 2:libpng-1.2.49-1.el6_2.i686 Apr 25 19:05:17 Updated: openssl-1.0.0-20.el6_2.4.i686 Apr 25 19:05:21 Updated: openssl-devel-1.0.0-20.el6_2.4.i686 Apr 25 19:05:22 Updated: 2:libpng-devel-1.2.49-1.el6_2.i686 Apr 25 19:05:23 Updated: matahari-0.4.4-12.el6_2.i686 I also installed Virtual Box. Apr 25 19:23:55 Installed: VirtualBox-4.1-4.1.12_77245_rhel6-1.i686 Now open office will not start. It complains about not being able to load a library. The application cannot be started. loading component library failed: file:///usr/lib/openoffice.org3/program/../basis-link/program/i18npool.uno.so I checked for the existence of i18npool.uno.so in the directory indicated. It is there. 1. Has anyone else experienced any problems with the latest software update? 2. What course of action would you recommend to restore the operation of openoffice.org? CentOS release 6.2 (Final) Linux mushroom.patch 2.6.32-220.13.1.el6.i686 #1 SMP Tue Apr 17 22:09:08 BST 2012 i686 i686 i386 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

1 0

ATA errors
by m.roth＠5-cent.us 25 Apr '12

25 Apr '12

We just started seeing the errors described in <http://bugs.centos.org/print_bug_page.php?bug_id=5575> The question is, given that we're not seeing DRDY errors, and this is showing on all four drives, and there's no RAID, should we just turn off SMART, or is this telling us something important, other than the bug? mark

1 0

pcscd fails due to hal not running - CentOS 6.2
by Rob Kampen 25 Apr '12

25 Apr '12

Hi list, I have a fully updated 6.2 laptop that gives the following log message upon startup: <snip> Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:506:main() pcsc-lite 1.5.2 daemon ready. Apr 26 08:30:38 robsasus pcscd: hotplug_libhal.c:490:HPRegisterForHotplugEvents() Could not initialise connection to hald. Apr 26 08:30:38 robsasus pcscd: hotplug_libhal.c:491:HPRegisterForHotplugEvents() Normally this means the HAL daemon (hald) is not running or not ready. Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:525:main() SVCServiceRunLoop returned Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:531:at_exit() cleaning /var/run </snip> so I check the /etc/rcX.d/ init files and find that pcscd is set at start 25 but haldaemon is start 26 - thus I guess this is why I get the failure message - hal does not get started until after pcscd. if I start pcscd manually after boot all is well. the pscsd init.d script claims it will start hal - thus I am confused - and at the limit of my knowledge. If someone could enlighten me. TIA

1 0

forwarding packets to service in same host without using loopback network
by Arif Hossain 25 Apr '12

25 Apr '12

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible solutions can be more accurate and robust. The following code describes the core functionality of the application: #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <netinet/in.h> #include <linux/types.h> #include <linux/netfilter.h> /* for NF_ACCEPT */ #include <errno.h> #include <libnetfilter_queue/libnetfilter_queue.h> #define PREROUTING 0 #define POSTROUTING 4 #define OUTPUT 3 /* returns packet id */ static u_int32_t print_pkt (struct nfq_data *tb) { int id = 0; struct nfqnl_msg_packet_hdr *ph; struct nfqnl_msg_packet_hw *hwph; u_int32_t mark, ifi; int ret; unsigned char *data; ph = nfq_get_msg_packet_hdr (tb); if (ph) { id = ntohl (ph->packet_id); printf ("hw_protocol=0x%04x hook=%u id=%u ", ntohs (ph->hw_protocol), ph->hook, id); } hwph = nfq_get_packet_hw (tb); if (hwph) { int i, hlen = ntohs (hwph->hw_addrlen); printf ("hw_src_addr="); for (i = 0; i < hlen - 1; i++) printf ("%02x:", hwph->hw_addr[i]); printf ("%02x ", hwph->hw_addr[hlen - 1]); } mark = nfq_get_nfmark (tb); if (mark) printf ("mark=%u ", mark); ifi = nfq_get_indev (tb); if (ifi) printf ("indev=%u ", ifi); ifi = nfq_get_outdev (tb); if (ifi) printf ("outdev=%u ", ifi); ifi = nfq_get_physindev (tb); if (ifi) printf ("physindev=%u ", ifi); ifi = nfq_get_physoutdev (tb); if (ifi) printf ("physoutdev=%u ", ifi); ret = nfq_get_payload (tb, &data); if (ret >= 0) printf ("payload_len=%d ", ret); fputc ('\n', stdout); return id; } static int cb (struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct nfq_data *nfa, void *data) { uint32_t ip_src, ip_dst; struct in_addr s_ip; struct in_addr d_ip; uint16_t src_port; uint16_t dst_port; int verdict; int id; int ret; unsigned char *buffer; struct nfqnl_msg_packet_hdr *ph = nfq_get_msg_packet_hdr (nfa); if (ph) { id = ntohl (ph->packet_id); printf ("received packet with id %d", id); } ret = nfq_get_payload (nfa, &buffer); ip_src = *((uint32_t *) (buffer + 12)); ip_dst = *((uint32_t *) (buffer + 16)); src_port = *((uint16_t *) (buffer + 20)); dst_port = *((uint16_t *) (buffer + 22)); s_ip.s_addr = (uint32_t) ip_src; d_ip.s_addr = (uint32_t) ip_dst; *(buffer + 26) = 0x00; *(buffer + 27) = 0x00; printf ( "source IP %s", inet_ntoa (s_ip)); printf ( "destination IP %s", inet_ntoa (d_ip)); printf ( "source port %d", src_port); printf ( "destination port %d", dst_port); if (ret) { switch (ph->hook) { case PREROUTING: printf ( "inbound packet"); //my_mangling_fun(); break; case OUTPUT: printf ( "outbound packet"); //my_mangling_fun(); break; } } verdict = nfq_set_verdict (qh, id, NF_ACCEPT, ret, buffer); if (verdict) printf ( "verdict ok"); return verdict; } int main (int argc, char **argv) { struct nfq_handle *h; struct nfq_q_handle *qh; struct nfnl_handle *nh; int fd; int rv; char buf[4096] __attribute__ ((aligned)); printf ("opening library handle\n"); h = nfq_open (); if (!h) { fprintf (stderr, "error during nfq_open()\n"); exit (1); } printf ("unbinding existing nf_queue handler for AF_INET (if any)\n"); if (nfq_unbind_pf (h, AF_INET) < 0) { fprintf (stderr, "error during nfq_unbind_pf()\n"); exit (1); } printf ("binding nfnetlink_queue as nf_queue handler for AF_INET\n"); if (nfq_bind_pf (h, AF_INET) < 0) { fprintf (stderr, "error during nfq_bind_pf()\n"); exit (1); } printf ("binding this socket to queue '0'\n"); qh = nfq_create_queue (h, 0, &cb, NULL); if (!qh) { fprintf (stderr, "error during nfq_create_queue()\n"); exit (1); } printf ("setting copy_packet mode\n"); if (nfq_set_mode (qh, NFQNL_COPY_PACKET, 0xffff) < 0) { fprintf (stderr, "can't set packet_copy mode\n"); exit (1); } fd = nfq_fd (h); for (;;) { if ((rv = recv (fd, buf, sizeof (buf), 0)) >= 0) { printf ("pkt received\n"); nfq_handle_packet (h, buf, rv); continue; } /* if your application is too slow to digest the packets that * are sent from kernel-space, the socket buffer that we use * to enqueue packets may fill up returning ENOBUFS. Depending * on your application, this error may be ignored. Please, see * the doxygen documentation of this library on how to improve * this situation. */ if (rv < 0 && errno == ENOBUFS) { printf ("losing packets!\n"); continue; } perror ("recv failed"); break; } printf ("unbinding from queue 0\n"); nfq_destroy_queue (qh); #ifdef INSANE /* normally, applications SHOULD NOT issue this command, since * it detaches other programs/sockets from AF_INET, too ! */ printf ("unbinding from AF_INET\n"); nfq_unbind_pf (h, AF_INET); #endif printf ("closing library handle\n"); nfq_close (h); exit (0); } Notice in the callback function two calls to my_mangling_fun() is commented out. This is where i mangle the incoming and outgoing packet. I think this code would be sufficient to describe my case. If further clarification is need please ask, i will post further details. Lets say accompanying iptables rules are following : $iptables -t mangle -A PREROUTING -p udp --dport 5000 -j NFQUEUE $iptables -t mangle -A OUTPUT -p udp --sport 5000 -j NFQUEUE lets compile and fire udp the thing. $gcc -g3 nfq_test.c -lnfnetlink -lnetfilter_queue $./a.out (should be as root) now we can feed garbage udp payload to this thing by netcat both client and server mode $nc -ul 5000 $nc -uvv <IP> 5000 This will print the packet from my netfilter_queue app in stdout. Now that the development environment is set up, we can move to the next thing. What we are trying to achieve is following : Our server is listening on 5000 port. Now all incoming packet destined to udp port 5000 will be queued by kernel. And the handle to this queue will be given to user application we listed earlier. This queue mechanism works like this: When a packet is available, the callback function(cb() in our code) is called. after processing, the callback function calls nfq_set_verdict(). after a **verdict** is returned, next packet will pop from the queue. notice that a packet will not pop from queue if its preceding packet has not been issued a verdict. This verdict values are NF_ACCEPT for accepting packet, NF_DROP for dropping the packet. Now what if i want to concatenate the udp payloads of the incoming and outgoing packet without touching client and server side code? If i want to concatenate udp payloads from our app this very app, then we need to have multiple packets at hand. But we have seen that a packet does not pops from queue before a verdict is issued to its preceding one. So how can this be done? One possible solution is issue a NF_DROP to every packet and save those packets in an intermediate data structure. Let's say we have done it. But how can this packet can be delivered to the service listening on 5000 port? We can't use network stack for delivering the packet, because if we do, then packets will end up in NFQUEUE again. Another problem is, the server is totally agnostic about this app. That means it should not see any difference in the packets. It should see packets as if it came from the original client. I have heard that a application can send data to a server in the same host without using network layer(ip,port) by writing some files. I do not know the validity of this statement. But if anyone knows anything about it , it will be wonderful. Another possible solution proposed to me is : 1.store packets in the application and return verdict NF_DROP 2.re-inject packets into the network stack using RAW sockets 3.tag concatenated UDP packets with a DSCP (see IP packet format) 4.in iptables, add a rule to match on this DSCP (--dscp) and ACCEPT the packet directly, without it passing through your netfilter application 5.If the provider already tags some packets with DSCP, you can add some iptables rules to clear them, like: $iptables -t mangle -A INPUT -j DSCP --set-dscp 0 -- -aft

2 4

Windows 2008R2 AD, kerberos, NFSv4
by janice.psyop 25 Apr '12

25 Apr '12

Hi, I'm trying to set up NFSv4 on two boxes (centos 5.5) and have it authenticate against our Windows 2008R2 AD server acting as the KDC. (samba/winbind is running ok with "idmap config MYCOMPANY: backend = rid" so we have identical ids across the servers.) I can mount my test directory fine via NFSv4 *without* the sec=krb5 option. However, once I put the sec=krb5 option in, then I get a mount error: "mount.nfs4: Permission denied" and rpc.gssd reports: "Failed to obtain machine credentials for connection to server" The computers have an AD computer account and for the service-principal, I created an AD user account "nfsHostname" and mapped the UPN e.g. NFS/ hostname.mycompany.tv(a)MYCOMPANY.TV to it using ktpass. This is the closest post similar to my issue I could find: http://lists.centos.org/pipermail/centos/2010-July/096378.html However, I'm trying not to run the createupn command via smbutils. Side note: Eventually we will also be using a HDS nas which doesn't provide us with samba net utils (e.g. net ads join createupn) only their proprietary webadmin/cli. When that nas joined our AD domain, it created a computer account with SPNs of HOST/HOSTNAME, HOST/hostname.MYCOMPANY.TV and a UPN of HOST/hostname.mycompany.tv(a)MYCOMPANY.TV And the HDS nas only wants encryption type: des-cbc-crc:normal. This is why on my test nfs server (nas002), I'm trying to use the same limited commands as I would if I were using the HDS nas. Any suggestions where to look next or get more verbose info from kerberos/KDC or the nfs server? (nothing shows up in either syslog -- plus, I'm not all that familiar with kerberos.) thanks in advance! JA. info: 10.100.1.11 KDC server (Windows 2008 R2, AD) 10.100.1.35 bk001 (nfsv4 client, kernel 2.6.18-194.32.1.el5) 10.100.1.82 nas002 (nfsv4 server, kernel 2.6.18-194.32.1.el5) 10.100.1.99 monitoring server intsalled on both nfsv4 client and server: nfs-utils.x86_64 1.0.9-60.el5 nfs-utils-lib.x86_64 1.0.8-7.9.el5 nfs4-acl-tools.x86_64 0.3.3-3.el5 krb5-workstation.x86_64 1.6.1-70.el5 samba (nas002) 3.3.8-0.52.el5_5.2 samba (bk001) 3.5.10-0.107.el5 [root@bk001 ~]# net ads testjoin Join is OK [root@bk001 ~]# kinit administrator(a)MYCOMPANY.TV Password for administrator(a)MYCOMPANY.TV: [root@bk001 ~]# kinit nfs/nas002.mycompany.tv(a)MYCOMPANY.TV Password for nfs/nas002.mycompany.tv(a)MYCOMPANY.TV: [root@bk001 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: nfs/nas002.mycompany.tv(a)MYCOMPANY.TV Valid starting Expires Service principal 04/13/12 16:08:51 04/14/12 02:08:51 krbtgt/MYCOMPANY.TV(a)MYCOMPANY.TV renew until 04/16/12 16:08:51 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached [root@bk001 ~]# showmount -e nas002.mycompany.tv Export list for nas002.mycompany.tv: /array gss/krb5,* [root@bk001 ~]# mount -v -t nfs4 -o proto=tcp,sec=krb5 nas002.mycompany.tv:/ /mnt/nfs4test Warning: rpc.idmapd appears not to be running. All uids will be mapped to the nobody uid. Warning: rpc.gssd appears not to be running. mount: pinging: prog 100003 vers 4 prot tcp port 2049 mount.nfs4: Permission denied [root@bk001 ~]# ps -elf | egrep 'gss|idmap' 1 S root 2498 1 0 75 0 - 8016 - Apr12 ? 00:00:00 rpc.gssd -rrrvvvv 1 S root 4575 1 0 76 0 - 14833 - Apr12 ? 00:00:00 rpc.idmapd -vvv [root@bk001 ~]# tail /var/log/messages Apr 13 16:09:09 bk001 rpc.idmapd[4575]: New client: 16 Apr 13 16:09:09 bk001 rpc.gssd[2498]: handling krb5 upcall Apr 13 16:09:09 bk001 rpc.idmapd[4575]: New client: 17 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Opened /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap Apr 13 16:09:09 bk001 rpc.gssd[2498]: Using keytab file '/etc/krb5.keytab' Apr 13 16:09:09 bk001 rpc.gssd[2498]: WARNING: Failed to obtain machine credentials for connection to server nas002.mycompany.tv Apr 13 16:09:09 bk001 rpc.gssd[2498]: doing error downcall Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Stale client: 16 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: -> closed /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Stale client: 17 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: -> closed /var/lib/nfs/rpc_pipefs/nfs/clnt17/idmap Apr 13 16:09:09 bk001 rpc.gssd[2498]: destroying client clnt17 Apr 13 16:09:09 bk001 rpc.gssd[2498]: destroying client clnt16 tshark capture of commands I performed (above): [root@bk001 ~]# cat /var/tmp/tshark_041312-1608.out 366 9.948504 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86719599 TSER=0 WS=7 367 9.948813 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396813568 TSER=86719599 368 9.948824 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86719599 TSER=396813568 369 9.948849 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 370 9.949976 10.100.1.11 -> 10.100.1.35 KRB5 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED 371 9.949982 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [ACK] Seq=181 Ack=154 Win=6432 Len=0 TSV=86719600 TSER=396813568 372 9.950031 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [FIN, ACK] Seq=181 Ack=154 Win=6432 Len=0 TSV=86719600 TSER=396813568 373 9.950288 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [ACK] Seq=154 Ack=182 Win=65160 Len=0 TSV=396813568 TSER=86719600 374 9.950297 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [RST, ACK] Seq=154 Ack=182 Win=0 Len=0 444 11.840921 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86721491 TSER=0 WS=7 446 11.841178 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396813757 TSER=86721491 447 11.841185 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86721491 TSER=396813757 448 11.841206 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 449 11.842812 10.100.1.11 -> 10.100.1.35 TCP [TCP segment of a reassembled PDU] 450 11.842817 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=259 Ack=1449 Win=8688 Len=0 TSV=86721493 TSER=396813757 451 11.842819 10.100.1.11 -> 10.100.1.35 KRB5 AS-REP 452 11.842822 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=259 Ack=1518 Win=8688 Len=0 TSV=86721493 TSER=396813757 453 11.842852 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [FIN, ACK] Seq=259 Ack=1518 Win=8688 Len=0 TSV=86721493 TSER=396813757 454 11.843043 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [ACK] Seq=1518 Ack=260 Win=65160 Len=0 TSV=396813758 TSER=86721493 455 11.843050 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [RST, ACK] Seq=1518 Ack=260 Win=0 Len=0 827 21.821693 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86731472 TSER=0 WS=7 828 21.821920 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396814755 TSER=86731472 829 21.821930 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86731472 TSER=396814755 830 21.821958 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 831 21.822968 10.100.1.11 -> 10.100.1.35 KRB5 AS-REP 832 21.822974 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [ACK] Seq=191 Ack=618 Win=6787 Len=0 TSV=86731473 TSER=396814756 833 21.823003 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [FIN, ACK] Seq=191 Ack=618 Win=6787 Len=0 TSV=86731473 TSER=396814756 835 21.823278 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [ACK] Seq=618 Ack=192 Win=65160 Len=0 TSV=396814756 TSER=86731473 836 21.823287 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [RST, ACK] Seq=618 Ack=192 Win=0 Len=0 1472 39.980317 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86749629 TSER=0 WS=7 1473 39.980491 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=3789493491 TSER=86749629 WS=7 1474 39.980498 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=86749631 TSER=3789493491 1475 39.980533 10.100.1.35 -> 10.100.1.82 NFS V4 NULL Call 1476 39.980701 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [ACK] Seq=1 Ack=45 Win=5888 Len=0 TSV=3789493492 TSER=86749631 1477 39.980705 10.100.1.82 -> 10.100.1.35 NFS V4 NULL Reply (Call In 1475) 1478 39.980707 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1479 39.980733 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [FIN, ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1480 39.980896 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [FIN, ACK] Seq=29 Ack=46 Win=5888 Len=0 TSV=3789493492 TSER=86749631 1481 39.980901 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=46 Ack=30 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1482 40.001039 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86749651 TSER=0 WS=7 1483 40.001210 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=3789493512 TSER=86749651 WS=7 1484 40.001221 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=86749651 TSER=3789493512 1485 40.001244 10.100.1.35 -> 10.100.1.82 NFS V4 NULL Call 1486 40.001409 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [ACK] Seq=1 Ack=45 Win=5888 Len=0 TSV=3789493512 TSER=86749651 1487 40.001414 10.100.1.82 -> 10.100.1.35 NFS V4 NULL Reply (Call In 1485) 1488 40.001418 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749652 TSER=3789493512 1489 40.002363 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [FIN, ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749653 TSER=3789493512 1490 40.002526 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [FIN, ACK] Seq=29 Ack=46 Win=5888 Len=0 TSV=3789493513 TSER=86749653 1491 40.002532 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=46 Ack=30 Win=5888 Len=0 TSV=86749653 TSER=3789493513 1493 40.002880 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: New client: 16\n 1497 40.003611 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: handling krb5 upcall \n 1498 40.004069 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: New client: 17\n 1499 40.004489 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Opened /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap\n 1500 40.004949 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: Using keytab file '/etc/krb5.keytab' \n 1501 40.005369 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: WARNING: Failed to obtain machine credentials for connection to server nas002.mycompany.tv \n 1502 40.005829 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: doing error downcall \n 1503 40.012862 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Stale client: 16\n 1504 40.013326 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: \t-> closed /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap\n 1505 40.013740 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Stale client: 17\n 1506 40.014157 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: \t-> closed /var/lib/nfs/rpc_pipefs/nfs/clnt17/idmap\n 1507 40.014621 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: destroying client clnt17 \n 1508 40.015082 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: destroying client clnt16 \n [root@bk001 ~]#

2 2

CentOS, XFS, VirtualBox - can they just get along?
by Boris Epstein 25 Apr '12

25 Apr '12

Hello all, I am running VirtualBox 4.1 on CentOS 6 and I got this warning that putting your VM's into an XFS filesystem is risky. I have also heard some rumors on the net to this effect. Does anyone know in more detail what's behind those rumors? Thanks. Boris.

2 1

Does SMTP Connection Drop When Posfix Reload is Issued ?
by Prabhpal S. Mavi 25 Apr '12

25 Apr '12

Dear Community Friends Greetings, i work with ISP, we host email service for almost 500+ companies and 200+ mail servers relay through my smart host. i implemented something that when our smart host would become blacklisted. It will automatic switch to next available smart host (which is ready sitting). that mean it will start relaying message through another smart host automatically. i think i must tell little background as well. it is actually php script that perform blacklist check every minute through cron. if it found that IP is blacklisted. It will then insert "relay host =" value in main.cf and reload postfix service. When IP is no more blacklisted it will then remove the same directive from main.cf and reload postfix. everything is working as expected. i have one question, when we reload postfix does it drop active SMTP session? for example lets say that remote SMTP server is delivering message to my postfix that has 8MB attachment. message was not fully transferred. lets say that 4MB was transferred. and i issued "postfix reload". will that connection drop or continue to deliver the mail? Thanks / Regards Prabhpal S. Mavi

7 10

CentOS-announce Digest, Vol 86, Issue 14
by centos-announce-request＠centos.org 25 Apr '12

25 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0518 Important CentOS 5 openssl Update (Johnny Hughes) 2. CESA-2012:0515 Critical CentOS 5 firefox Update (Johnny Hughes) 3. CESA-2012:0516 Critical CentOS 5 firefox Update (Johnny Hughes) 4. CESA-2012:0516 Critical CentOS 5 thunderbird Update (Johnny Hughes) 5. CESA-2012:0518 Important CentOS 6 openssl Update (Johnny Hughes) 6. CESA-2012:0515 Critical CentOS 6 firefox Update (Johnny Hughes) 7. CEBA-2012:0511 CentOS 6 matahari Update (Johnny Hughes) 8. CEBA-2012:0512 CentOS 6 aide Update (Johnny Hughes) 9. CESA-2012:0516 Critical CentOS 6 thunderbird Update (Johnny Hughes) 10. CESA-2012:0523 Moderate CentOS 5 libpng Update (Johnny Hughes) 11. CESA-2012:0523 Moderate CentOS 6 libpng Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 25 Apr 2012 01:22:21 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0518 Important CentOS 5 openssl Update To: centos-announce(a)centos.org Message-ID: <20120425012221.GA5708(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0518 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0518.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d8e4fe4b31be6324ed03ad70d86156a3168efc55c5b06ffd4fde486feb9fe2d6 openssl097a-0.9.7a-11.el5_8.2.i386.rpm c65df6dec7b008e84ab414c6970fb2c409a5e00cba23a4a4350b1a716b229559 openssl-0.9.8e-22.el5_8.3.i386.rpm 586a15a6bc19278bee19a2572bd1bc788003ff4c198431d0f4663adbb1b3184c openssl-0.9.8e-22.el5_8.3.i686.rpm 639974e459e9f6c0403360fc41067f48394f512d0ba5e579ea45b8992d2da168 openssl-devel-0.9.8e-22.el5_8.3.i386.rpm 92a492519329325336183c23929df620c8f8ddfd0e82b10c57664ec6d55e7bad openssl-perl-0.9.8e-22.el5_8.3.i386.rpm x86_64: d8e4fe4b31be6324ed03ad70d86156a3168efc55c5b06ffd4fde486feb9fe2d6 openssl097a-0.9.7a-11.el5_8.2.i386.rpm 7fa89e3ca44626a62c98bc84be77959f66a9b8eba6bbb9fd98365e74e6e103aa openssl097a-0.9.7a-11.el5_8.2.x86_64.rpm 586a15a6bc19278bee19a2572bd1bc788003ff4c198431d0f4663adbb1b3184c openssl-0.9.8e-22.el5_8.3.i686.rpm a5492f5973452f6193a3fb6cd3249f2791c52cebd1e1d12560d2d64b256c2784 openssl-0.9.8e-22.el5_8.3.x86_64.rpm 639974e459e9f6c0403360fc41067f48394f512d0ba5e579ea45b8992d2da168 openssl-devel-0.9.8e-22.el5_8.3.i386.rpm f2bd64faebbd7b5dc0124cca14b217ace539e04913f9eb266e8c2274b7dc94b8 openssl-devel-0.9.8e-22.el5_8.3.x86_64.rpm 75c9372cf9aa77e8d245254b3696b56d6bed262f3245e8c95278a07e74ffb42c openssl-perl-0.9.8e-22.el5_8.3.x86_64.rpm Source: d152bcff32227dd08cc0495718cfd19ad3ca2e1c15011ae41dc9ef0f434d4176 openssl097a-0.9.7a-11.el5_8.2.src.rpm 63492a08a2e0cd5277925dc88d34a85a381bd4c087787715e57645008a5bbace openssl-0.9.8e-22.el5_8.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 25 Apr 2012 01:27:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0515 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20120425012720.GA5926(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0515 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0515.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c2e589aadfac0a7c5977431242a268743d4a223c4da6cab73919c0af8cba3278 firefox-10.0.4-1.el5.centos.i386.rpm eaa1f4d40f40f2c20310a7234a80d643dfd3cf6124a38466dfe700581f166304 xulrunner-10.0.4-1.el5_8.i386.rpm 67a66eb67a74646e261340123f32fc604ae072feb475674a86532b30deaec4e4 xulrunner-devel-10.0.4-1.el5_8.i386.rpm x86_64: c2e589aadfac0a7c5977431242a268743d4a223c4da6cab73919c0af8cba3278 firefox-10.0.4-1.el5.centos.i386.rpm 9f1a1179d341db3846865cb0c7e39a2a9e23c3e06067760ebeb07090f20ba9c0 firefox-10.0.4-1.el5.centos.x86_64.rpm eaa1f4d40f40f2c20310a7234a80d643dfd3cf6124a38466dfe700581f166304 xulrunner-10.0.4-1.el5_8.i386.rpm aa76e67d4a67b6c919176f37906b224ef0bcf4217ec2995b121528c594557cd3 xulrunner-10.0.4-1.el5_8.x86_64.rpm 67a66eb67a74646e261340123f32fc604ae072feb475674a86532b30deaec4e4 xulrunner-devel-10.0.4-1.el5_8.i386.rpm f34186000619626cb784b3f7a916bddd1b7416e6b731ef04842788ca797e64fd xulrunner-devel-10.0.4-1.el5_8.x86_64.rpm Source: 1fbc0bd8c0045baeb7e75a8a5162752b0b4c0253e96cacc22cc426f5351a3b33 firefox-10.0.4-1.el5.centos.src.rpm be2954b3d1a4f9309fb097188d0bcd684985f2c62801bcaf4b0ed224f672abcb xulrunner-10.0.4-1.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 25 Apr 2012 01:30:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0516 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20120425013017.GA7324(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0516 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0516.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f9867946d381c189979c309151f633bc51596909c160dbc03e5324582d664c20 thunderbird-10.0.4-1.el5.centos.i386.rpm x86_64: e67a3cc7f4319d39d9b23e59b03113224bd9ffaec8ed7ac76081211ce16a27c0 thunderbird-10.0.4-1.el5.centos.x86_64.rpm Source: be26754c255f7058be311dad0c8b0a7d515f6b20b6f0d50f4372a796db682d53 thunderbird-10.0.4-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 24 Apr 2012 20:39:28 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0516 Critical CentOS 5 thunderbird Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4F9755D0.7020105(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2012:0516 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0516.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f9867946d381c189979c309151f633bc51596909c160dbc03e5324582d664c20 thunderbird-10.0.4-1.el5.centos.i386.rpm x86_64: e67a3cc7f4319d39d9b23e59b03113224bd9ffaec8ed7ac76081211ce16a27c0 thunderbird-10.0.4-1.el5.centos.x86_64.rpm Source: be26754c255f7058be311dad0c8b0a7d515f6b20b6f0d50f4372a796db682d53 thunderbird-10.0.4-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net

1 0

Latest 6.2 kernel is broken
by Lars Hecking 25 Apr '12

25 Apr '12

I just kickstarted a new machine with the latest CentOS 6.2 files, including kernel 2.6.32-220.13.1.el6.x86_64. It came up without network interfaces. dmesg says: bnx2: Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.2.1 (Dec 18, 2011) alloc irq_desc for 36 on node -1 alloc kstat_irqs on node -1 bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 bnx2 0000:01:00.0: setting latency timer to 64 bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1b.fw bnx2: Can't load firmware file "bnx2/bnx2-mips-09-6.2.1b.fw" bnx2 0000:01:00.0: PCI INT A disabled bnx2: probe of 0000:01:00.0 failed with error -2 The firmware file is missing from /lib/firmware and the kernel-firmware rpm. I found a copy of it on a Fedora site and dumped it into the right location, but it wasn't found after a reboot. Yet, it was found after a second reboot. Why is that? Is a rebuild of initramfs triggered somehow? What I don't understand is: I have an identical machine that I installed under 6.2 a while back, and kept up to date, and it doesn't have this problem. However, it tells me it uses version v2.1.11 (July 20, 2011) of the driver, how is that possible? # grep bnx2 /var/log/messages Apr 23 17:10:03 localhost kernel: bnx2: Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.1.11 (July 20, 2011) Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1a.fw Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-rv2p-09-6.0.17.fw Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: eth0: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express found at mem da000000, IRQ 36, node addr 78:2b:cb:67:3f:b6 [...] # modinfo /lib/modules/2.6.32-220.13.1.el6.x86_64/kernel/drivers/net/bnx2.ko filename: /lib/modules/2.6.32-220.13.1.el6.x86_64/kernel/drivers/net/bnx2.ko firmware: bnx2/bnx2-rv2p-09ax-6.0.17.fw firmware: bnx2/bnx2-rv2p-09-6.0.17.fw firmware: bnx2/bnx2-mips-09-6.2.1a.fw firmware: bnx2/bnx2-rv2p-06-6.0.15.fw firmware: bnx2/bnx2-mips-06-6.2.1.fw version: 2.1.11 license: GPL description: Broadcom NetXtreme II BCM5706/5708/5709/5716 Driver [...] # lspci -v -s 01:00.1 01:00.1 Ethernet controller: Broadcom Corporation NetXtreme II BCM5716 Gigabit Ethernet (rev 20) Subsystem: Dell PowerEdge R410 BCM5716 Gigabit Ethernet Flags: bus master, fast devsel, latency 0, IRQ 48 Memory at dc000000 (64-bit, non-prefetchable) [size=32M] Capabilities: [48] Power Management version 3 Capabilities: [50] Vital Product Data Capabilities: [58] MSI: Enable- Count=1/16 Maskable- 64bit+ Capabilities: [a0] MSI-X: Enable+ Count=9 Masked- Capabilities: [ac] Express Endpoint, MSI 00 Capabilities: [100] Device Serial Number 78-2b-cb-ff-fe-67-3f-b7 Capabilities: [110] Advanced Error Reporting Capabilities: [150] Power Budgeting <?> Capabilities: [160] Virtual Channel <?> Kernel driver in use: bnx2 Kernel modules: bnx2

4 13

ldap, 2.3 primary, 2.4 secondary
by aurfalien 25 Apr '12

25 Apr '12

Hi all, Is it possible to use a 2.3 OpenLDAP primary while having a 2.4 OpenLDAP secondary? Currently I have all at 2.3 (Centos 5) but am needing to up a remote facility to Centos 6 before doing the main facility to 6. Hoping I can mix and match but it looks like I may not be able to. My LDAP secondaries pull the DB over pretty frequently so I would be doing the same thing here. I would have asked the OpenLDAP list but you are much nicer to an order of magnitude, seriously. Thanks in advance, - aurf

2 2

strange partitioning problem
by Boris Epstein 25 Apr '12

25 Apr '12

Hello listmates, Here's I am, trying to install Centos 6.2 64-bit on a server with 24 TB of disk RAIDed as RAID 6. So I get this 18 TB disk (the RAID is recognized as one disk) where I am trying to put my OS. And I can create a couple of partitions - let us say I defiine a 150 GB swap, a 150 GB "/", a 100 GB "/var". So far so good. Then I try to define the next one, say, a 100 GB "/tmp" and get a message stating there is not enough disk space whereas I still have over 18 TB free and the installation interface reflects that accurately! I am at a loss. Is that something related to the sheer size of the disk? Why would this happen - especially at so basic a stage of the process? At any rate, any help or advice would be greatly appreciated. Regards, Boris.

9 28

Re: [CentOS] [CentOS-announce] CESA-2012:0465 Critical CentOS 5 samba Update
by James A. Peltier 24 Apr '12

24 Apr '12

Any idea about samba3x packages? Are they vulnerable? ----- Original Message ----- | | CentOS Errata and Security Advisory 2012:0465 Critical | | Upstream details at : | http://rhn.redhat.com/errata/RHSA-2012-0465.html | | The following updated files have been uploaded and are currently | syncing to the mirrors: ( sha256sum Filename ) | | i386: | 50fc234754d886f8147c22ed2b034d1f7be84dd78c10a8280699265a9c542cfa | libsmbclient-3.0.33-3.39.el5_8.i386.rpm | 62c20ba55a5213be09a2250454274f1fbf6aa854e84d78aaa1f75aec5d2a1920 | libsmbclient-devel-3.0.33-3.39.el5_8.i386.rpm | 294d346782344d32018a02ac25c9def811cbaced00ce19c0ca7c193d4f68d0c0 | samba-3.0.33-3.39.el5_8.i386.rpm | b792d801b4d57882b7c3f398d44b378446d6be48a07b12b265f07dc25564db13 | samba-client-3.0.33-3.39.el5_8.i386.rpm | 77a3666353bbc27ff71b1d4e34882459c5b440f783f21bb3c0adc3898ef501fb | samba-common-3.0.33-3.39.el5_8.i386.rpm | 1bea83056056c3da0dc568f13655c61c6b14f56957e7180aaaa4d6d8f26f7c82 | samba-swat-3.0.33-3.39.el5_8.i386.rpm | | x86_64: | 50fc234754d886f8147c22ed2b034d1f7be84dd78c10a8280699265a9c542cfa | libsmbclient-3.0.33-3.39.el5_8.i386.rpm | 61b5237a09f59a445730e994517ad565fb24da1e9bf07b5e6b7b8c80ac6ca588 | libsmbclient-3.0.33-3.39.el5_8.x86_64.rpm | 62c20ba55a5213be09a2250454274f1fbf6aa854e84d78aaa1f75aec5d2a1920 | libsmbclient-devel-3.0.33-3.39.el5_8.i386.rpm | 5c973b1c9c0a986989805afe6f600a48a76d9d6175e92896065591795516a157 | libsmbclient-devel-3.0.33-3.39.el5_8.x86_64.rpm | 55ee35ca8dc332e0bea6299ce2eed90d7b9460ae312a8abf42822cd0a737c555 | samba-3.0.33-3.39.el5_8.x86_64.rpm | 70200f37cfe741d94e9bb9060f9f2128d08a90ac6b6674f97a9adb474ea3f41b | samba-client-3.0.33-3.39.el5_8.x86_64.rpm | 77a3666353bbc27ff71b1d4e34882459c5b440f783f21bb3c0adc3898ef501fb | samba-common-3.0.33-3.39.el5_8.i386.rpm | 16e9165d7d3f3099d45f6389a58f7ebc87642856414506728e5d8f0466e343a3 | samba-common-3.0.33-3.39.el5_8.x86_64.rpm | e4f6f354d8a38ffb4f17af0be3736be3a9e055ba3e6ddff5f21a547fb8924d4f | samba-swat-3.0.33-3.39.el5_8.x86_64.rpm | | Source: | 4e4b6d761aed021020fe8ac82340ba78f835fc4610516ee8564da347ac735e22 | samba-3.0.33-3.39.el5_8.src.rpm | | | | -- | Johnny Hughes | CentOS Project { http://www.centos.org/ } | irc: hughesjr, #centos(a)irc.freenode.net | | _______________________________________________ | CentOS-announce mailing list | CentOS-announce(a)centos.org | http://lists.centos.org/mailman/listinfo/centos-announce | -- James A. Peltier Manager, IT Services - Research Computing Group Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax : 778-782-3045 E-Mail : jpeltier(a)sfu.ca Website : http://www.sfu.ca/itservices http://blogs.sfu.ca/people/jpeltier Success is to be measured not so much by the position that one has reached in life but as by the obstacles they have overcome. - Booker T. Washington

3 2

"rename3" ethernet NIC?
by Boris Epstein 24 Apr '12

24 Apr '12

Hello listmates, Bizarrely enough, I ended up with what I intended to be called "eth1" being called "rename3". Would anybody have any idea what the cause could be of this? Thanks. Boris.

2 1

CentOS-announce Digest, Vol 86, Issue 13
by centos-announce-request＠centos.org 24 Apr '12

24 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0509 Moderate CentOS 6 wireshark Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 24 Apr 2012 14:27:48 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0509 Moderate CentOS 6 wireshark Update To: centos-announce(a)centos.org Message-ID: <20120424142748.GA3076(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0509 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0509.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 12b6fefeaee07dc4f84110f2ff66e66bb6774126dcecc5e0e672c4d9ba64b077 wireshark-1.2.15-2.el6_2.1.i686.rpm 0a85aa2c82986479e5eb55e6918d84d664c8af4bab6fe921f28e2e59fc590f56 wireshark-devel-1.2.15-2.el6_2.1.i686.rpm 8ab9026910b899d1e2071d97dea4a15dd3ee1868121defa8c0f6bd5441c7455b wireshark-gnome-1.2.15-2.el6_2.1.i686.rpm x86_64: 12b6fefeaee07dc4f84110f2ff66e66bb6774126dcecc5e0e672c4d9ba64b077 wireshark-1.2.15-2.el6_2.1.i686.rpm f3353c8677ccb128eb06be6ebbb1ea5dfc3084c176daa0ef558a1b2f35dae9aa wireshark-1.2.15-2.el6_2.1.x86_64.rpm 0a85aa2c82986479e5eb55e6918d84d664c8af4bab6fe921f28e2e59fc590f56 wireshark-devel-1.2.15-2.el6_2.1.i686.rpm 3fc3a7e6bff12511b4dbca45d502123951fe668e90caee7518ea0493265183cd wireshark-devel-1.2.15-2.el6_2.1.x86_64.rpm b9e73d61563e32d94f4bd73d139aba9986796ee6f25bb40887854be7b64e95ab wireshark-gnome-1.2.15-2.el6_2.1.x86_64.rpm Source: fcec8718aa049adbb5d3071754f19dc0ab494b3d9e359e7c460c33c86800f08d wireshark-1.2.15-2.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 13 ***********************************************

1 0

About audit2allow generated rules
by Min Wang 24 Apr '12

24 Apr '12

HI I have something in /var/log/audit/audit.log like: avc: denied { write } for pid=23739 comm="httpd" name="renderd.sock" dev=dm-0 ino=1183752 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file use audit2allow it generates something like this: allow httpd_t var_run_t:sock_file write; Is the rule too liberal? that means httpd_t can write any var_run_t 's sock_file? Or I miss-understand something? Should it only allow httpd_t to write this specific render.sock file? If so, what's the right way to do? Thanks. min

1 0

problems with PV snapshots
by Riccardo Veraldi 24 Apr '12

24 Apr '12

Hello, I have a Centos 6.2 clsuter with a CLVM partition on which I have a GFS2 file system. The problem rises when I make a snapshot from my FC NetAPP FAS2020. After I make the snapshot (it is a rw snapshot) of my LUN, I am not able to mount it from any of my cluster nodes, because the Physical Volume is seen two times one time on the standard LVM partition and the other time on the snapshot partition so te PV is foudn to be duplicate and I cannot mount it. > pvs Found duplicate PV 5ZTDCmWHDH6M04nl58Wyyi3nYG8BOCRo: using /dev/mapper/mpathl not /dev/mapper/mpathi PV VG Fmt Attr PSize PFree /dev/mapper/mpathk NetCluster0 lvm2 a-- 1.67t 1020.00m I need a hint on how to fix this problem. I need to access the snaphot volume to backup my data but I am unable to do it... thank you very much Rick

3 4

Centos 6.2 Nvidia drivers from elrepo - kmod-nvidia
by aurfalien 23 Apr '12

23 Apr '12

Hi all, Having issues with the Nvidia drives on Centos 6.2. So after I do yum install kmod-nvidia and rebooting, I get no screen. My errors; /var/log/messages; kernel: NVRM: The NVIDIA GeForce4 MX 4000 GPU installed in this system is kernel: NVRM: supported through the NVIDIA 96.43.xx Legacy drivers. Please kernel: NVRM: visit http://www.nvidia.com/object/unix.html for more kernel: NVRM: information. The 295.40 NVIDIA driver will ignore kernel: NVRM: this GPU. Continuing probe... kernel: NVRM: No NVIDIA graphics adapter found! gdm-binary[2013]: WARNING: GdmDisplay: display lasted 0.548291 seconds gdm-binary[2013]: WARNING: GdmLocalDisplayFactory: maximum number of X display failures reached: check X server log for errors /var/log/Xorg.0.log; [ 37.145] (EE) NVIDIA: Failed to load the NVIDIA kernel module. Please check your [ 37.145] (EE) NVIDIA: system's kernel log for additional error messages. [ 37.145] (II) UnloadModule: "nvidia" [ 37.145] (II) Unloading nvidia [ 37.145] (EE) Failed to load module "nvidia" (module-specific error, 0) [ 37.145] (EE) No drivers available. [ 37.145] Fatal server error: [ 37.145] no screens found [ 37.145] I also tried to install the Nvidia driver from there site by first disabling nouveau and running there installer but that one seemed rather unstable. Any ideas? Thanks in adance. - aurf

3 4

Cisco AnyConnect on 6.2 32-bit?
by Rhugga Harper 23 Apr '12

23 Apr '12

Grr.. I'm pulling my hair out trying to get the Cisco AnyConnect client to work under 6.2 32-bit. Seems like there is always 1 thing preventing my from using the latest centos release as my sole workstation. It was actually working on a new install for about half a day. I rebooted and now it won't connect. If I boot another vm (ubuntu or oel 5.7) the same client works. Im using version 2.5.0217. This version works fine on Ubuntu 12.04, 11.10 and 10.04. Anyone have any suggestions? /var/log/messages shows these errors: Apr 22 14:53:50 keyhole vpnui[3122]: Function: setCatalog File: i18n/MsgCatalog.cpp Line: 427 Invoked Function: setCatalog Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Message translation catalog <AnyConnect> not in use. Apr 22 14:53:50 keyhole vpnui[3122]: Function: ClientIfcBase File: ClientIfcBase.cpp Line: 134 Invoked Function: vpnapi Return Code: 0 (0x00000000) Description: vpnapi version 2.5.0217 () Initializing. Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element UseStartBeforeLogon Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element AutomaticCertSelection Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element AutoReconnectBehavior Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element RSASecurIDIntegration Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element EnableAutomaticServerSelection Apr 22 14:53:50 keyhole vpnui[3122]: Available preferences updated due to secure gateway configuration. Apr 22 14:53:50 keyhole vpnui[3122]: Current Preference Settings: CertificateStoreOverride: false CertificateStore: All ShowPreConnectMessage: false AutoConnectOnStart: true MinimizeOnConnect: true LocalLanAccess: false AutoReconnect: true AutoUpdate: true ProxySettings: Native PPPExclusion: Disable PPPExclusionServerIP: EnableScripting: false TerminateScriptOnNextEvent: false Apr 22 14:53:50 keyhole vpnui[3122]: Function: loadLibs File: Certificates/NSSCertUtils.cpp Line: 1348 Invoked Function: getNSSDllPath Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Unable to locate library libplc4.so Apr 22 14:53:50 keyhole vpnui[3122]: Function: CNSSCertUtils File: Certificates/NSSCertUtils.cpp Line: 281 Invoked Function: CNSSCertUtils::loadLibs Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: CNSSCertStore File: Certificates/NSSCertStore.cpp Line: 55 Invoked Function: CNSSCertUtils Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: addNSSStore File: Certificates/CollectiveCertStore.cpp Line: 999 Invoked Function: CNSSCertStore::CNSSCertStore Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: OpenStores File: Certificates/CollectiveCertStore.cpp Line: 248 Invoked Function: CCollectiveCertStore::addNSSStore Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: OnNegotiateMessageTypesComplete File: ApiIpc.cpp Line: 534 Master Agent Connection started. Apr 22 14:53:50 keyhole vpnui[3122]: Function: setStateInfo File: VPNStatsBase.cpp Line: 339 Invoked Function: CStateTlv::GetMUSHostAddr Return Code: -32374768 (0xFE120010) Description: TLV_ERROR_NO_ATTRIBUTE Apr 22 14:53:50 keyhole vpnui[3122]: Function: processState File: ApiIpc.cpp Line: 1412 VPN state: Disconnected Network state: Network Accessible Network control state: Available Network type: Undefined Apr 22 14:53:50 keyhole vpnui[3122]: Function: setState File: ClientIfcBase.cpp Line: 1224 Disconnected Apr 22 14:53:50 keyhole vpnui[3122]: Function: attach File: ClientIfcBase.cpp Line: 424 Client successfully attached. Apr 22 14:53:50 keyhole vpnui[3122]: Function: attach File: ClientIfcBase.cpp Line: 439 Event detection implemented in client program. Apr 22 14:53:50 keyhole vpnui[3122]: Function: autoConnectIfEnabled File: ClientIfcBase.cpp Line: 555 Auto connect on start enabled. Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: loadPreferences File: PreferenceMgr.cpp Line: 820 User: (empty) Apr 22 14:53:50 keyhole vpnui[3122]: Loading preferences from profile /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Available preferences updated due to secure gateway configuration. Apr 22 14:53:50 keyhole vpnui[3122]: Current Preference Settings: CertificateStoreOverride: false CertificateStore: All ShowPreConnectMessage: false AutoConnectOnStart: true MinimizeOnConnect: true LocalLanAccess: false AutoReconnect: true AutoUpdate: true ProxySettings: Native PPPExclusion: Disable PPPExclusionServerIP: EnableScripting: false TerminateScriptOnNextEvent: false Apr 22 14:53:50 keyhole vpnui[3122]: Function: connect File: ClientIfcBase.cpp Line: 834 Connect requested Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: enumerateCert File: Certificates/FileCertStore.cpp Line: 162 Invoked Function: enumerateCert Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND The /home/ccarson/.cisco/certificates/client/ directory was not found. Apr 22 14:53:50 keyhole vpnui[3122]: Function: Enumerate File: Certificates/FileCertStore.cpp Line: 123 Invoked Function: Enumerate Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: enumerateCert File: Certificates/FileCertStore.cpp Line: 162 Invoked Function: enumerateCert Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND The /opt/.cisco/certificates/client/ directory was not found. Apr 22 14:53:50 keyhole vpnui[3122]: Function: Enumerate File: Certificates/FileCertStore.cpp Line: 123 Invoked Function: Enumerate Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: getCertList File: ApiCert.cpp Line: 231 Invoked Function: ApiCert :: getCertList Return Code: 0 (0x00000000) Description: Number of certificates found: 0 Apr 22 14:53:50 keyhole vpnui[3122]: Function: initiateConnect File: ConnectMgr.cpp Line: 536 Initiating connection to: https://myaccess.oraclevpn.com/ Apr 22 14:53:55 keyhole ntpd[2042]: synchronized to 149.20.68.17, stratum 2 Apr 22 14:53:55 keyhole ntpd[2042]: time reset +1.123565 s Apr 22 14:54:06 keyhole vpnui[3122]: Function: SendRequest File: CTransportCurlStatic.cpp Line: 1467 Invoked Function: curl_easy_perform Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT error Apr 22 14:54:06 keyhole vpnui[3122]: Function: connect File: ConnectIfc.cpp Line: 334 Invoked Function: CTransport::SendRequest Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT Apr 22 14:54:06 keyhole vpnui[3122]: Function: TranslateStatusCode File: ConnectIfc.cpp Line: 2375 Invoked Function: TranslateStatusCode Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT timeout Apr 22 14:54:06 keyhole vpnui[3122]: Function: doConnectIfcConnect File: ConnectMgr.cpp Line: 1178 Invoked Function: ConnectIfc::connect Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT Apr 22 14:54:06 keyhole vpnui[3122]: Function: processIfcData File: ConnectMgr.cpp Line: 1449 Invoked Function: ConnectMgr :: processIfcData Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Unrecognized content type (Unknown) received. Apr 22 14:54:06 keyhole vpnui[3122]: Function: processIfcData File: ConnectMgr.cpp Line: 1475 Unable to process response from myaccess.oraclevpn.com. Apr 22 14:54:06 keyhole vpnui[3122]: Function: processIfcData File: ConnectMgr.cpp Line: 1564 Invoked Function: processIfcData Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Unable to contact myaccess.oraclevpn.com. Apr 22 14:54:06 keyhole vpnui[3122]: Function: initiateConnect File: ConnectMgr.cpp Line: 541 Connection failed. Apr 22 14:54:06 keyhole vpnui[3122]: Function: setState File: ClientIfcBase.cpp Line: 1224 Disconnected Apr 22 14:54:06 keyhole vpnui[3122]: Function: run File: ConnectMgr.cpp Line: 379 Invoked Function: ConnectMgr::initiateConnect Return Code: -29556727 (0xFE3D0009) Description: CONNECTMGR_ERROR_UNEXPECTED

4 5

iso size?
by Beartooth 23 Apr '12

23 Apr '12

I've been being told, over and over, by K3B, Brasero, and Isomaster, on two machines, with three different downloads of 6.0, that the file is too large for the medium. Nautilus and the browser that die each download all say it's 4.4 GB; I've tried with two +R and an RW DVD, all of which are labelled 4.7 GB Two of the files are 32-bit, and one is 64 What is going wrong?? -- Beartooth Staffwright, Not Quite Clueless Power User I have precious (very precious!) little idea where up is.

11 23

Networking issue, C6.2 LiveDVD x86_64
by Lamar Owen 23 Apr '12

23 Apr '12

Good afternoon, CentOS list. I am beginning triage of a rather wierd issue I experienced Saturday with CentOS 6.2 LiveDVD, x86_64. I'm posting this information in hope that someone may have seen something similar. I use a USB key with CentOS 6.2 LiveDVD loaded, with an encrypted home filesystem, built using the instructions on the CentOS wiki for a LiveUSB build, and it was built by a CentOS 6.2 x86_64 system with the livecd-iso-to-disk.sh tool. It has worked fine for general usage for a while, now. I began a disk image backup of a Dell Inspiron 1420 laptop Saturday, using dd piped into ssh to a file, on an RHEL6 server (RHEL6.2, i686 dist, fully updated). The command line used on the laptop, booted into the C6 LiveDVD environment, was: dd if=/dev/sda |ssh root(a)rhel6-server-used.local cat \>/opt/backups/sda.img which I have used before, on this specific laptop, without incident, booted into Fedora 14 Security LiveCD 32-bit. Something, however, in this particular combination is creating an issue. After approximately 3MB or so of the image is transferred, no network traffic at all can flow, causing the transfer to hang. And I mean hang, with unresponsive terminals in GNOME, and a non-killable ssh process. It seems to disrupt the server as well, but, like I said, I'm just beginning triage of the problem, so am still gathering data. Now, I booted my trusty Fedora 14 i686 Security Live CD (which boots into LXDE), and the transfer to the same server, using the same cable, same switch, and same hardware all the way around is going smoothly (25GB into a 500GB transfer so far). So I tend to think that it is not a hardware problem. I'm going to next try a CentOS 6.2 LiveUSB using the 32-bit LiveDVD instead of the 64-bit one, hopefully set up as identically as possible to the 64-bit one I've been using, and then see if it's a 32-bit versus 64-bit NIC driver issue or similar. Incidentally, the ethernet device gets a 'p3p1' device name instead of 'eth0.' I'm somewhat concerned by this, since I'm upgrading the laptop in question to CentOS 6.2 as part of this process, so I want to track down the problem so that if I need to install the 32-bit version instead of the 64-bit version I can. So, if anyone has had specific experience with a Dell Inspiron 1420n (came with Ubuntu pre-installed, incidentally) and CentOS 6 64-bit, I'd be interested in hearing it.

2 3

Centos 4 repos help me!
by Gustavo Lacoste 23 Apr '12

23 Apr '12

Dear CentOS Community Is totally clear there's no support to Centos 4 platform today, but I need to install some packages -ideally- from repositories, so I'll be glad if someone can provide me still working ones, (obviously non-official). If isn't possible I'll move on CentOS5, but (initially) keeping current PHP and MySQL versions. In both cases, I'll need working CentOS4 repos, hopefully the following ones: - CentOS Base.repo - CentOS-Debuginfo.repo - CentOS-Media.repo - CentOS-Testing.repo - CentOS-Vault.repo - mirrors-rpmforge - mirrors-rpmforge-extras - mirrors-rpmforge-testing - openwebmail.repo - rpmforge.repo Thanks in advance to anyone who can guide me With Kind Regards, Gustavo A. Lacoste Z. Curacautín - Chile Skype: knxroot Msn & Gtalk: knx.root [at] gmail.com Home page: http://www.lacosox.org - - *Por favor, evite enviarme documentos adjuntos en formato Word o PowerPoint. Lea http://www.gnu.org/philosophy/no-word-attachments.es.html*

9 13

LVM: PV on 2 external USB drives
by Mihamina Rakotomandimby 23 Apr '12

23 Apr '12

Hi all, I have a box, until warranty (I may not open it) and 2 external USB hard drives. My perfect solution is to open the box, plug the drives on the SATA slots, and use them. Unfortunately, I'll have to fall back to the cheap solution: I would like to use each external drive as physical volume (PV) and then "join" them as a VG in order to use a LVM composed by internal drives and the externals. This is not for a "very secure" storage, just for a low reliability quantity temporary one: I just need it to work for 3-4 weeks with potential power cycles. How to get the USB external drives to be detected in always the same order, so that they always get the same "name"? /dev/sdX fixed to them? That way, the LVM wont be messed... Thank you. -- RMA.

6 7

Centos 5 live cd?
by Jason Pyeron 23 Apr '12

23 Apr '12

It seems that the live cd for 5 is no longer in existence. Is this an oversight or by design? http://wiki.centos.org/Manuals/ReleaseNotes/CentOSLiveCD5.6 -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

4 5

Missing dependency
by Mark LaPierre 23 Apr '12

23 Apr '12

Hey all, Anyone know where I can find source packages for X86-64 CentOS 6.2: dev86 is needed by my project iasl is needed by my project spice-server-devel >= 0.8.2-4.el6 is needed by my project I can't seem to find them in the source repositories. Thanks. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

4 4

CentOS stresstest - what to use?
by Rafał Radecki 21 Apr '12

21 Apr '12

Hi all. I currently have a CentOS 5.8 x64 host. I have some info that it is "slow" for end users. I would like to use some tools to make tests of proc/memory/disks. Is there a program suite which you could recommend? Best regards, Rafal.

2 1

CentOS-announce Digest, Vol 86, Issue 12
by centos-announce-request＠centos.org 21 Apr '12

21 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0502 CentOS 6 device-mapper-multipath Update (Johnny Hughes) 2. CEEA-2012:0503 CentOS 6 cnic Update (Johnny Hughes) 3. CEEA-2012:0503 CentOS 6 bnx2 Update (Johnny Hughes) 4. CEEA-2012:0503 CentOS 6 bnx2i Update (Johnny Hughes) 5. CEEA-2012:0503 CentOS 6 bnx2x Update (Johnny Hughes) 6. CEEA-2012:0503 CentOS 6 bnx2fc Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 20 Apr 2012 15:53:25 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0502 CentOS 6 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20120420155325.GA7651(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0502 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0502.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b9421fc335bb90b024fdddc34ce6f9d0dfed8bc4c67a7eb507d03f77f3e82fc0 device-mapper-multipath-0.4.9-46.el6_2.2.i686.rpm d08f573ce1de7a05154a89f723c587b6db9ef5d52cdccb33f90eea58755af29c device-mapper-multipath-libs-0.4.9-46.el6_2.2.i686.rpm 3f73d8ed7e0ca73b6a4db81ae5df4f5c1c51be9cf601ba0ac87af2d1a1be7a53 kpartx-0.4.9-46.el6_2.2.i686.rpm x86_64: 3d904319a986939dbc10ac8d831dec2cddfd2d96176573f216142d1fad9dc177 device-mapper-multipath-0.4.9-46.el6_2.2.x86_64.rpm 202ec5988cf2f62dfdfa399af03dcdb06d8673eaf777569585c1e22a6cf8d94b device-mapper-multipath-libs-0.4.9-46.el6_2.2.x86_64.rpm da8ba1502391984adb6bd5df711d55e67f94324e0891af56c2d1bff39a25699c kpartx-0.4.9-46.el6_2.2.x86_64.rpm Source: aa9ef20d729a9155415d3d6f9d89e0133ca1a4602d2927727e987733de570d88 device-mapper-multipath-0.4.9-46.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 20 Apr 2012 15:58:42 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 cnic Update To: centos-announce(a)centos.org Message-ID: <20120420155842.GA7798(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7a7472e17c1c1bb7a1dba21b4f9299848c7cc24d9f3d6b1d962a9d61bbea2699 kmod-cnic-2.5.9-1.el6_2.i686.rpm x86_64: fb094609d0dd814b84564e3cf965b18cc699a2f31569bcbcdb7f51f2fc34d373 kmod-cnic-2.5.9-1.el6_2.x86_64.rpm Source: d3eef44bc7a865cc214bb2b218de81fd56ca9aa9f7314b397b1f04604da034c2 cnic-2.5.9-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 20 Apr 2012 15:59:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2 Update To: centos-announce(a)centos.org Message-ID: <20120420155904.GA7872(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f3e5f2464668879f1ef68d69583cfbe2552a99d51aa30da285938144a3c4ba2a kmod-bnx2-2.2.1-1.el6_2.i686.rpm x86_64: 3c2a7bf5365319f0ef9e38c43985a46558bd81ffad4b97b2541ab3e190da26a4 kmod-bnx2-2.2.1-1.el6_2.x86_64.rpm Source: dbd2526dcdc2177af1b99e804b2ef614af681b244a64f84e848fff9c401146d9 bnx2-2.2.1-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 20 Apr 2012 15:59:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2i Update To: centos-announce(a)centos.org Message-ID: <20120420155920.GA7943(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 52e641abb5b51b55f1a3bb3316016a48d205ccfb1e888cb027430c1d87c50368 kmod-bnx2i-2.7.2.1-1.el6_2.i686.rpm x86_64: 41fa70898af17df938951ed101fb642aa3d07d4e10a7d3596204f46c5e242025 kmod-bnx2i-2.7.2.1-1.el6_2.x86_64.rpm Source: 444ddc2d937e3cee34cfb93b809409d4b04cc82daccc771101d3faa5e39cf8cf bnx2i-2.7.2.1-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 20 Apr 2012 15:59:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2x Update To: centos-announce(a)centos.org Message-ID: <20120420155950.GA8021(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a4b398a40ee45a0faee9fd00ce348dc966fd84374f8220f90342b7265d368278 kmod-bnx2x-1.72.00_0-1.el6_2.i686.rpm 84e2834304e3ece9c445c647796bdf9732fcd012935151d6f53cdc75631ae2e4 kmod-bnx2x-firmware-1.72.00_0-1.el6_2.i686.rpm x86_64: 3ac059fbcdb4e8c613cb7a419508ce4dc190e70d2fafb1dc125cf7c7cae1b9d8 kmod-bnx2x-1.72.00_0-1.el6_2.x86_64.rpm 918782e8952b411d0b757123580d2f6bb253a0c7d7dad978f1386dd3f545382a kmod-bnx2x-firmware-1.72.00_0-1.el6_2.x86_64.rpm Source: 05483755d3fb090bb3c1d974dabe6edaaf56f7c3d436da0de664ebb229217579 bnx2x-1.72.00_0-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 20 Apr 2012 16:00:16 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2fc Update To: centos-announce(a)centos.org Message-ID: <20120420160016.GA9378(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: da5572309aa34dd5105a2337045ed1eb1aac711ab7d666f83a5e276b02c1b79f kmod-bnx2fc-1.0.10-1.el6_2.i686.rpm x86_64: 77bf45b63b585769cccdc7e3476d5bedd7f48647fcdf590764c78790886c88a4 kmod-bnx2fc-1.0.10-1.el6_2.x86_64.rpm Source: 9f3b64e89a452c38887c9e4bbcb29616cf1b2d04c290cc6871ec7752fe62231e bnx2fc-1.0.10-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 12 ***********************************************

1 0

LVM vs Physical Disk Encryption
by Steven Buehler 21 Apr '12

21 Apr '12

I have a couple of question about Disk Encryption during an OS install. I want to setup encryption on a system where I might have to enlarge the LVM's by either adding another disk or by enlarging the disk size at a later date. This is a VMware VM so just increasing the size of an individual disk is pretty simple and then expanding the LVM on it. Should I use LVM or just Physical Disk Encryption? What are the benefits and drawbacks of them? Should I do both? In setting this up for the first time, I did both. Will that slow down the system because it is actually encrypting everything twice? If using LVM encryption and I add another drive to the LVM is it automatically encrypted? Thank You Steve

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss