- Discuss - lists.centos.org

Re: [CentOS] editing bind (DNS) configuration under CentOS 6
by James B. Byrne 02 May '12

02 May '12

On Wed, May 2, 2012 09:15, Karanbir Singh wrote: > On 05/02/2012 02:09 PM, Nux! wrote: >>> it manually? That is doable, of course, but kind of cumbersome. >>> Does >>> anybody know if there is a tool we are expected to use for that >>> purpose? >> >> If you're afraid of "vi", I can recommend webmin. >> http://dl.nux.ro/rpm/webmin.repo >> > > and then you have 2 problems, one of which is a security hole. > > I've mostly just gone to using nsupdate from the cli for all zone > edits in bind zones. if you ever need the clear zone file, its > easily dumped out with rndc - works, and you can do some fairly > complex things in a clear and simple transaction manner ( plus, > easily automated from other scripts / code for more win ) > For those of us not blessed with either the depth of experience or the time required to master every single idiosyncratic cli for each one of the the very many system daemons we are required to administer Webmin is an excellent alternative to daily trips into the arcane. Any security issue respecting access to Webmin is handled simply and efficiently in three steps: 1. Set IPTables, or whatever firewall you employ, to block all access to webmin's listening port (default 10000) from addresses outside your local lan or from any but a specific host address. Do this first and reload the firewall rules. 2. Install and immediately configure Webmin to use https only. This can be done from the command line using any convenient editor by editing the following three lines in /etc/webmin/miniserv.conf: keyfile=/etc/webmin/miniserv.pem ssl=1 ssl_redirect=1 3. Create a secure tunnel to an address inside your firewall that is permitted access to webmin using whatever means you find convenient. I use SOCKS via "ssh -D 2001 user@host" with RSA certs and Firefox configured to use the SOCKS proxy on my local host. VPN or other techniques will work as well, if not better. But SOCKS over ssh works well enough for my purposes. This will get you up and going without ever having to pass credentials to webmin over the wire enclair. Webmin has the virtue of being remarkably easy to setup and simplifies most abuse configuration issues on a wide variety of services. For one, it usually handles which files require which configuration options. It does not, and cannot, cover every eventuality. But, for basic setup and ongoing control of the main system services running on most mainline Linux distros Webmin works most admirably in my experience. It certainly saves me a great deal of time and frustration. I would not give access to Webmin to anyone that did not already have root access to that server. But, if they already have root then I see no reason to make their work any harder than it needsbe. One caution. Webmin is a powerful tool. If you do not know what you are doing then you can hurt yourself very badly with it. On the other hand I have made serious configuration errors with an editor some of which were just spelling mistakes; a problem that Webmin mostly avoids. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Upgrading PHP and PHP53 on CentOS5 - P.S - Instructions
by Max Pyziur 02 May '12

02 May '12

Greetings, IUS has a set of instructions here; they seem to be fairly detailed: http://iuscommunity.org/Docs/ClientUsageGuide fyi, MP pyz(a)brama.com

1 0

Help with writing a udev rule
by Turnbough, Bradley E. 02 May '12

02 May '12

Can someone please help me with writing a udev rule? I need /dev/ttyUSB0 to automatically have 777 rights when plugged in. I'd like it to only apply to that one specific device. I'm not sure where to start, what files to look at and also what to write to make it work. TIA Brad This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

2 1

editing bind (DNS) configuration under CentOS 6
by Boris Epstein 02 May '12

02 May '12

Hello listmates, It appears that system-config-bind has been phased out. Whatever the reasoning was behind that decision - what are we expected to do now? Edit it manually? That is doable, of course, but kind of cumbersome. Does anybody know if there is a tool we are expected to use for that purpose? Thanks. Boris.

4 6

PHP and PHP53
by Max Pyziur 02 May '12

02 May '12

Greetings, We have someone requesting the use of Wordpress 3.3.1. It requires PHP 5.2 minimum. Currently, our machine is running CentOS 5.7. What are the issues/concerns in upgrading from PHP 5.1 (the current PHP rpms) to PHP53? Much thanks, Max Pyziur pyz(a)brama.com

9 15

giomm-2.4 not found
by john w 02 May '12

02 May '12

Hello, I am trying to install a software from source in a 64 bit centos machine(CentOS release 5.5 (Final)). But I am getting the following error while doing the configure. No package 'giomm-2.4' found I could not find the corresponding package in repositories. Anyone please help me to resolve this issue. Regards John

1 0

update php54 with conflict php53
by fakessh 02 May '12

02 May '12

hello all member hello karanbir how to fix this issue how to update php54 knowing that a conflict exists with php53 what is the rpm or yum to use sincerely -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

3 3

Re: [CentOS] Virt-manager
by Jason Pyeron 02 May '12

02 May '12

> -----Original Message----- > From: Barry L. Kline > Sent: Tuesday, May 01, 2012 15:38 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > For some reason my response to the mailing list was lost in the ether. > > make your command read: > > ssh -X root(a)x.y.a.z virt-manager & > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.5 (GNU/Linux) > > iD8DBQFPoDuVCFu3bIiwtTARAhqJAJwLmHokt/aZ4coYjX+zHOfpypZRYgCcD4wl > u1uRZL7mpapAdeZ64iVWkq8= > =s/0B > -----END PGP SIGNATURE----- > I should have noted that my ~/ssh/config already does that. It suspends waiting for stdin. Ex: cat & -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 0

disconnected NIC under CentOS 6
by Boris Epstein 01 May '12

01 May '12

Hello all, I've got a multi-NIC machine on which I am running Centos 6.2. I am trying to have a NIC configured with an IP address but not connected to anything. The reason for this is to create a network currently only used by VM's residing on the machine, with that NIC configured to have an IP address that is a part of that network, with a view of connecting real machines to the same network in the future. How can I implement that? Currently ifup just refuses to bring that NIC up. Thanks. Boris.

3 7

Re: [CentOS] OT Open Cobol
by James B. Byrne 01 May '12

01 May '12

On Mon, April 30, 2012 19:40, Scott Silva wrote: > on 4/27/2012 8:04 AM m.roth(a)5-cent.us spake the >> It really is past time to migrate to another language, y'know. You >> could >> probably move it to something like perl fairly easily, or even >> *bleah* >> java. >> >> mark > Just think how much money you could earn at Y3K!!! <<DUCKS>> ;) A former IBM programmer analyst who had invested heavily in the dot com bubble and who had realized his millions before the collapse fell deathly ill. Faced with the inevitability of his imminent death he decided to chance the untried technology of cryonics to evade death until a cure be found. Having gambled once and won, given the circumstance, he felt no compunction about doing so again, albeit this time with his life and not his life savings. He awoke in a lighted chamber surrounded by people clothed in strange garb and accoutred even more strangely. Groggily he asked, "What date is it?" He felt, rather than heard, the reply, "9997 CE, or as you might know it, AD 9997." "It took that long to find a cure?" he asked. "No" came the reply. "Then why have you awakened me now?" he asked again. "It says here that you know COBOL." came the reply. . . -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Maintainer for Krita on CentOS
by Dotan Cohen 01 May '12

01 May '12

The Krita [1] mailing list is now discussing making a standalone .tgz package of the latest Krita for CentOS 5.x. After this tarball is created is there anyone interested in making and maintaining a CentOS 5.x RPM package from it? [1] http://krita.org/ -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

4 9

CentOS-announce Digest, Vol 87, Issue 1
by centos-announce-request＠centos.org 01 May '12

01 May '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0537 CentOS 5 vsftpd Update (Karanbir Singh) 2. CESA-2012:0533 Important CentOS 5 samba3x Update (Karanbir Singh) 3. CEEA-2012:0530 CentOS 6 qpid Update (Johnny Hughes) 4. CESA-2012:0533 Important CentOS 6 samba Update (Johnny Hughes) 5. CEBA-2012:0536 CentOS 6 corosync Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Apr 2012 22:20:48 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0537 CentOS 5 vsftpd Update To: centos-announce(a)centos.org Message-ID: <20120430222048.GA5849(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0537 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0537.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f1186a040768af68985671d4571060cec8117458871de974e72d2f3bf44f738b vsftpd-2.0.5-24.el5_8.1.i386.rpm x86_64: f9848c88a9752859d6c9d367c1a4ee4a38f536021ad8e299019379afc6e3b2bd vsftpd-2.0.5-24.el5_8.1.x86_64.rpm Source: 90a37e37b5ee769b636bff896219f4e57fc16df3bb5e7559ed2c757c6f340b33 vsftpd-2.0.5-24.el5_8.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 30 Apr 2012 22:24:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2012:0533 Important CentOS 5 samba3x Update To: centos-announce(a)centos.org Message-ID: <20120430222411.GA6008(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0533 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0533.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 471f54ba5397283d3f5251590236e720589c28103b36630455e431e461d17961 samba3x-3.5.10-0.109.el5_8.i386.rpm 0588014f570618f67967d8fe428ed06945fa76ab80cd6d1a9087f455dd010993 samba3x-client-3.5.10-0.109.el5_8.i386.rpm b3875d65b066326c5d24ba91f2234f52363e40000125f6615a87fc1e5d2b4256 samba3x-common-3.5.10-0.109.el5_8.i386.rpm e2c20c1a9367c9608ec1c8039350a6298ef115851f1d7225a3ede3466418a0ac samba3x-doc-3.5.10-0.109.el5_8.i386.rpm 28b26c5967dfbcf6e53afc7f986c53219981172fca214af008c8633e18d133f6 samba3x-domainjoin-gui-3.5.10-0.109.el5_8.i386.rpm 7fd8f9bddc8db814fd4410fff2810ca579bea49452e7f4479df3f8a44f07a262 samba3x-swat-3.5.10-0.109.el5_8.i386.rpm 3c0f33a4f5c371de88b98104e5a1c64eb077b9698ab2673b435d8753defa1ce6 samba3x-winbind-3.5.10-0.109.el5_8.i386.rpm 6f10201e78c503f3d39f9816bd309a4087bd5a4372d82051ca299293390faaf3 samba3x-winbind-devel-3.5.10-0.109.el5_8.i386.rpm x86_64: c120384e75970424f0688eb3fc33f67412dd94daf220dd5ef968290127f3e647 samba3x-3.5.10-0.109.el5_8.x86_64.rpm f3f98d5d2519dc15e39009a1585ff7de137a694670f74f8d2695c305135036b7 samba3x-client-3.5.10-0.109.el5_8.x86_64.rpm 3bd8b415c711f086c76816ec6bbb4a4ca89dfabf3532a6864a04f60d266b6013 samba3x-common-3.5.10-0.109.el5_8.x86_64.rpm b62603b6158514b30acb264a768154571235437ae21d7038912a995379b65b5f samba3x-doc-3.5.10-0.109.el5_8.x86_64.rpm 2aea847a88837da14619ef08481261fd09d413317f3f9ba53f016d4cb90ab4dc samba3x-domainjoin-gui-3.5.10-0.109.el5_8.x86_64.rpm 82e185183e2e8c4a47afdf5297208202fb3f241a8438948e9750805d742e2d0f samba3x-swat-3.5.10-0.109.el5_8.x86_64.rpm 3c0f33a4f5c371de88b98104e5a1c64eb077b9698ab2673b435d8753defa1ce6 samba3x-winbind-3.5.10-0.109.el5_8.i386.rpm 585e1fea26e04d3ad6ff061e6368f1fe3393b7da7bce7b9f83ca771b0ada7f78 samba3x-winbind-3.5.10-0.109.el5_8.x86_64.rpm 6f10201e78c503f3d39f9816bd309a4087bd5a4372d82051ca299293390faaf3 samba3x-winbind-devel-3.5.10-0.109.el5_8.i386.rpm de3ea0b85f9bb82e6af60e9c9465a91fc0bacd8d9809830977949973c7cdc7ef samba3x-winbind-devel-3.5.10-0.109.el5_8.x86_64.rpm Source: ced91f19035de06a2a90a332ab2b15a788866287bf5fd862dc199c76bc517f98 samba3x-3.5.10-0.109.el5_8.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 1 May 2012 03:23:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0530 CentOS 6 qpid Update To: centos-announce(a)centos.org Message-ID: <20120501032353.GA20708(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0530 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0530.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 53da93638561a35a13a8f47db761d728b2b850b11eccd729c8d071289883d244 python-qpid-0.14-7.el6_2.noarch.rpm cf1ef0b9e96f5ea033858e804f0ed49b44d68a6ea740af6d9314aaebd206d998 python-qpid-qmf-0.14-7.el6_2.i686.rpm 1408dc44390e8f1f41b45166a776433667cd1b189149a6d635ceea83da7095fa qpid-cpp-client-0.14-14.el6_2.i686.rpm ec7456d34af6183054184741dbd0dff10e4470f283489c0f3761d9a524ec8d14 qpid-cpp-client-devel-0.14-14.el6_2.i686.rpm e33620b7a96bbaa9a8b5b94f1d169ec79e91cbdf343ddf463ce8ad2768fe2d30 qpid-cpp-client-devel-docs-0.14-14.el6_2.noarch.rpm 626afed44465c3fe551fd22b2cb53dedf43180a5fcd7a10df7737d974d8c4b92 qpid-cpp-client-rdma-0.14-14.el6_2.i686.rpm 433c3935c6afaf173b0d2fed64562515a43cf9ddc268e035589337e2a3f84ac0 qpid-cpp-client-ssl-0.14-14.el6_2.i686.rpm fa8aba51b1da5ef38e87717473c56737d5daef7d59eeac1023c1d325f5379794 qpid-cpp-server-0.14-14.el6_2.i686.rpm 1a8d1302df9efaf2f392503ac3bce6f58792f76d13d3a381a3651116d3114287 qpid-cpp-server-cluster-0.14-14.el6_2.i686.rpm 74af162ef5b114e9323b85be1445c9bdcb1f3d13781bfab35f7563e78b6aac30 qpid-cpp-server-devel-0.14-14.el6_2.i686.rpm 2f8ea78cc335bd433f6248fcceacdafdfeb46d750d669a8f51057926cee83e79 qpid-cpp-server-rdma-0.14-14.el6_2.i686.rpm ef641ea6dde8693538b65b67979cbdf9b50315c3bc3d3d604593358680cab4b5 qpid-cpp-server-ssl-0.14-14.el6_2.i686.rpm 324e7e75430f62202c393515bc062aeff007e183b69de5d9eb2e10074b0bbff7 qpid-cpp-server-store-0.14-14.el6_2.i686.rpm 84d524a60e83a2f4b3e3bc3cebab4ab17ba1b449714ab2b952e90d03cf3ec570 qpid-cpp-server-xml-0.14-14.el6_2.i686.rpm da0611e15a8f0f81b751b2f8f74e293a3cad97e1c16b47ef02573c5cf2c50ff1 qpid-qmf-0.14-7.el6_2.i686.rpm cee75dbed7c7a913813f57cd18334fe45e2274a8cae2bfe25682c8586953f5bf qpid-qmf-devel-0.14-7.el6_2.i686.rpm ae28b233c12d90e0f2e31382f156996336a42a18abb6f518a9ec0bfb55c7c318 qpid-tests-0.14-1.el6_2.noarch.rpm ded0cb965e1fb06ed3c61e030514feaabc1af108835ff8af4f7ca1c5a9b0be45 qpid-tools-0.14-2.el6_2.noarch.rpm 2f15a43984de4367e85944291b071199e389a7440295d2dc4caa8f566bf1a0c6 rh-qpid-cpp-tests-0.14-14.el6_2.i686.rpm 5b1df39d7475052baca686ac1d74a868dfa779515413f50bca45f16feab2b35c ruby-qpid-qmf-0.14-7.el6_2.i686.rpm x86_64: 53da93638561a35a13a8f47db761d728b2b850b11eccd729c8d071289883d244 python-qpid-0.14-7.el6_2.noarch.rpm a50f0ecd7b27e351203bed61984d017467fa39897e34da5f8e2b543879acc31b python-qpid-qmf-0.14-7.el6_2.x86_64.rpm 1408dc44390e8f1f41b45166a776433667cd1b189149a6d635ceea83da7095fa qpid-cpp-client-0.14-14.el6_2.i686.rpm 07e88414fb6254ce42dfaeb7d97fb102004c6b69d66314dd109f627a5d55296f qpid-cpp-client-0.14-14.el6_2.x86_64.rpm 2c6fe4375735b65216f9487d2d279a0f00b0c4ee71cde9ab60834577ce083df2 qpid-cpp-client-devel-0.14-14.el6_2.x86_64.rpm 245dca90c5597267c036fe82c75ee0a43af7cb4c2b98a2e691ecacb52ea54996 qpid-cpp-client-devel-docs-0.14-14.el6_2.noarch.rpm 3e30838195934164a8415deac33ee93d4a233eefaffbb20f190de2e422146867 qpid-cpp-client-rdma-0.14-14.el6_2.x86_64.rpm 433c3935c6afaf173b0d2fed64562515a43cf9ddc268e035589337e2a3f84ac0 qpid-cpp-client-ssl-0.14-14.el6_2.i686.rpm b1c8f4838734af4ffd58345be345c0c649eabd7b18ddc7c43fb57b66eba3c44d qpid-cpp-client-ssl-0.14-14.el6_2.x86_64.rpm fa8aba51b1da5ef38e87717473c56737d5daef7d59eeac1023c1d325f5379794 qpid-cpp-server-0.14-14.el6_2.i686.rpm 46c1d12939b5861f9f43f090cd70f6ae9fffa821f67a02e560045aa1e2e5d8f9 qpid-cpp-server-0.14-14.el6_2.x86_64.rpm 74c0ce03c8e26d91cb6925abc66210e97497ca1e783e8de5f342a0a1a01629be qpid-cpp-server-cluster-0.14-14.el6_2.x86_64.rpm 0470d953b9d734e057f43026eb46631e533f0e229418482d5be6dca32baa79a6 qpid-cpp-server-devel-0.14-14.el6_2.x86_64.rpm 5107ffc75522c063c37fabd28eecb5241977a02c9720666b425e5feb94ce70b9 qpid-cpp-server-rdma-0.14-14.el6_2.x86_64.rpm 0dc47a276bb89d0c2526b28037699e54e3cb6ceb4dfac9aa9e42d05e1f69dd05 qpid-cpp-server-ssl-0.14-14.el6_2.x86_64.rpm 2b9089c2892a691aa6787397a35c4c353fba88b4e69c73e2680170cfbbb830cb qpid-cpp-server-store-0.14-14.el6_2.x86_64.rpm f46766457fe21537d616b17a7f3abd1cc1ecefc6985bed0e33bf36d776dc12fd qpid-cpp-server-xml-0.14-14.el6_2.x86_64.rpm da0611e15a8f0f81b751b2f8f74e293a3cad97e1c16b47ef02573c5cf2c50ff1 qpid-qmf-0.14-7.el6_2.i686.rpm abcd2a600bb69c7e6588205f8340d642e6e1726caa15b6497a095cf44cf437d4 qpid-qmf-0.14-7.el6_2.x86_64.rpm 8cf78b19523a5049710fbced81b038e536d443ebfd8b8cc31ca9bb02f17c1eda qpid-qmf-devel-0.14-7.el6_2.x86_64.rpm ae28b233c12d90e0f2e31382f156996336a42a18abb6f518a9ec0bfb55c7c318 qpid-tests-0.14-1.el6_2.noarch.rpm ded0cb965e1fb06ed3c61e030514feaabc1af108835ff8af4f7ca1c5a9b0be45 qpid-tools-0.14-2.el6_2.noarch.rpm f8ce0fd09ffe7dc8164a1275af2ea96ff38bd84fdab975f2d29a7ccc45f441fb rh-qpid-cpp-tests-0.14-14.el6_2.x86_64.rpm 31c4b793ee23daf5800bd7ef4327dc7d9b237c1d0886b2f8bb0e4a782b4210a7 ruby-qpid-qmf-0.14-7.el6_2.x86_64.rpm Source: cb26240ad3b2cc4d234c55f457b72fa8f5e3852634c019f6181e4a0a98a9b6aa python-qpid-0.14-7.el6_2.src.rpm c0d27e8f47b65405fb6503bf01d901e4885c944e646aeb87601f2b357db181a8 qpid-cpp-0.14-14.el6_2.src.rpm 69b6a1bd215ca8103ed3179ec8ed32e534e1566d981df307c53790529875a4e8 qpid-qmf-0.14-7.el6_2.src.rpm 308c10a20e9d8d0e988b262a8854aaf29c3e9796cbb37f8ee7b16fbbc5ea8e3f qpid-tests-0.14-1.el6_2.src.rpm a2c8173174d4daebea5e5e3bd3033fcc73fdc25543ae46cfea3d2991911fdb34 qpid-tools-0.14-2.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 1 May 2012 03:24:40 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0533 Important CentOS 6 samba Update To: centos-announce(a)centos.org Message-ID: <20120501032440.GA20844(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0533 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0533.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 63330e547be2fb88da1a76d17be54632c0d24c05936d6066b1b496615f04760f libsmbclient-3.5.10-116.el6_2.i686.rpm 447d0422936180740ca554f4df055b0c6285fbc44bf130ae19e4331ce0c0752e libsmbclient-devel-3.5.10-116.el6_2.i686.rpm 81137e22c093516ced2b4de9083862473d404f0e10210f4169d134ffbab343b3 samba-3.5.10-116.el6_2.i686.rpm dcaada4b792b28b1556539adeeb4c5f0f9ab40ceb54d8fc04e159d7ead9757ed samba-client-3.5.10-116.el6_2.i686.rpm 250941e19d61bfeec2e38f0b717831447e372d8bce7d3d99b76ced3114431cef samba-common-3.5.10-116.el6_2.i686.rpm 1b99788520d31225058fe8f36b9c4d6f0413a34a70198074305717f26967cba6 samba-doc-3.5.10-116.el6_2.i686.rpm f373c28d9a2317c30f96f452f4a72bda4210253ea159ca359cb82445fa7fa3d4 samba-domainjoin-gui-3.5.10-116.el6_2.i686.rpm 386b9a45d50baf8bc2b19ffd80e3dfc5c77ece9ea517f16c38e45e2aac855b6b samba-swat-3.5.10-116.el6_2.i686.rpm 380c19b2c6bb0eebb2d729a1c4e97f3796c7c947481428ed26b390bf5f882aa5 samba-winbind-3.5.10-116.el6_2.i686.rpm 0af5c71092259c490c7edc7effd1159e077ac6739223bd177608a917f4199034 samba-winbind-clients-3.5.10-116.el6_2.i686.rpm c140f4f85f3633817cd198d9a815c3e358ecb146182abd4a181cacc5f73eca6e samba-winbind-devel-3.5.10-116.el6_2.i686.rpm 7b3627f458022e8c1bd6bf146935a0237f839ef3c2b931cf20778bad56cd2b76 samba-winbind-krb5-locator-3.5.10-116.el6_2.i686.rpm x86_64: 63330e547be2fb88da1a76d17be54632c0d24c05936d6066b1b496615f04760f libsmbclient-3.5.10-116.el6_2.i686.rpm 0e5948afefb49cdd728f3d8d58d1628fa9b0f19d5143713dd4735fd08c6332e3 libsmbclient-3.5.10-116.el6_2.x86_64.rpm 447d0422936180740ca554f4df055b0c6285fbc44bf130ae19e4331ce0c0752e libsmbclient-devel-3.5.10-116.el6_2.i686.rpm 6fd435ce71f56e78b67f940fded07d5584a5a63217a69fdae40f6724ef12c8f3 libsmbclient-devel-3.5.10-116.el6_2.x86_64.rpm ed11170e156a0a52028ac0798ce3cf4ca48b908876eb820822e49a8e01fa69d9 samba-3.5.10-116.el6_2.x86_64.rpm 4bdc0ef13e55666a3fcd3832e56a49b91c3211ce1294bb9dce8ccb3096a86ccf samba-client-3.5.10-116.el6_2.x86_64.rpm 250941e19d61bfeec2e38f0b717831447e372d8bce7d3d99b76ced3114431cef samba-common-3.5.10-116.el6_2.i686.rpm 1b8b5acfce521224c8e9b3bf5922f601664f934867c4578f0bd008a3eefbb21b samba-common-3.5.10-116.el6_2.x86_64.rpm 2ebc54357f9da69f54201dc450ee6a8ef9714ec16ed48460533c7920add85f1f samba-doc-3.5.10-116.el6_2.x86_64.rpm 3b1ab1ece64ff17bcac504fe8fae9aabf8fa7702760a0efb1348a25c4f286d4b samba-domainjoin-gui-3.5.10-116.el6_2.x86_64.rpm b513ad5e9d960f62ee86e7417161d4df0a46a0dfd2eda95baf1c75c179060cdd samba-swat-3.5.10-116.el6_2.x86_64.rpm 5ca4721f2f0944cc8fd6aed1c1eeb1d327d21b042963d5b35a9540a900eaf485 samba-winbind-3.5.10-116.el6_2.x86_64.rpm 0af5c71092259c490c7edc7effd1159e077ac6739223bd177608a917f4199034 samba-winbind-clients-3.5.10-116.el6_2.i686.rpm 376c90903d36b11cf56d69d45940dfc7231f7cb289396db061779ad3cee94d07 samba-winbind-clients-3.5.10-116.el6_2.x86_64.rpm c140f4f85f3633817cd198d9a815c3e358ecb146182abd4a181cacc5f73eca6e samba-winbind-devel-3.5.10-116.el6_2.i686.rpm 09099769c9a2bccece5a95e8cd68c441eaf5037be169e5fb67f681fd30bd2966 samba-winbind-devel-3.5.10-116.el6_2.x86_64.rpm ff6b3674cb1e5a2ea1f0b46df6985fc8c4613eb1d0d0c7b4561cc4757d2ec510 samba-winbind-krb5-locator-3.5.10-116.el6_2.x86_64.rpm Source: 3a1e6fcfc693d8f50f6b94d2baf5f86cfbcd7a30cfd8a18cdfc7215e510b2ed6 samba-3.5.10-116.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 1 May 2012 03:25:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0536 CentOS 6 corosync Update To: centos-announce(a)centos.org Message-ID: <20120501032510.GA20929(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0536 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0536.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b3ef842e59dfadc7103df029398c5e2aca0e8162a76213575480ae1eeab7f677 corosync-1.4.1-4.el6_2.2.i686.rpm 265063403a1b8c5eeece189402eab4bf5335a144f4fc2297e7f4dcac0c7a84a6 corosynclib-1.4.1-4.el6_2.2.i686.rpm a01759ef979b948f59397249aebbd215b1f30eb5f0f446b5b4862722c01a5d3e corosynclib-devel-1.4.1-4.el6_2.2.i686.rpm x86_64: 0ba1ae4c2bf74918c7f967a26bd30ad8fbf66661d2b02b119eeeb82dd512f5ae corosync-1.4.1-4.el6_2.2.x86_64.rpm 265063403a1b8c5eeece189402eab4bf5335a144f4fc2297e7f4dcac0c7a84a6 corosynclib-1.4.1-4.el6_2.2.i686.rpm 517b701ab4ac9043cc6dcf656ba6ea7052bf753c6e583defcb62075b5fb6c51a corosynclib-1.4.1-4.el6_2.2.x86_64.rpm a01759ef979b948f59397249aebbd215b1f30eb5f0f446b5b4862722c01a5d3e corosynclib-devel-1.4.1-4.el6_2.2.i686.rpm d7d86da2fa04953468bf1c73b3e89ec76a6803b8ec219ee87381598412b74b4c corosynclib-devel-1.4.1-4.el6_2.2.x86_64.rpm Source: db8bd67a31b6f32c2e81aafdea93b3b408f3e3b9462199b218dea55bba047522 corosync-1.4.1-4.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 87, Issue 1 **********************************************

1 0

Host Machine and Iptables problem
by Cbulist 01 May '12

01 May '12

Hi, I experienced some problems with my VM's and NetworkManager. Then I decided to remove NetworkManager on the VM's and the Host machine and everything is working well now. After that I stopped the Iptables on the Host machine and I lost external connectivity on my VM's. The only way that I found that VM machine works again is restarting the Host Machine. (Start Iptables service again on the Host didn't work) I'm using CentOS 6.2: 2.6.32-220.7.1.el6.x86_64 The host's iptables is the default, I didn't add anything. Why the Iptables is stopping the connectivity of VM when I stop it? Thanks in advance!

4 8

SELinux is preventing /usr/libexec/postfix/pickup from module_request
by David McGuffey 30 Apr '12

30 Apr '12

Getting module_request errors from SELinux. Errors being thrown by metacity sendmail.postfix cleanup trivial-rewarite local postdrop pickup All errors are essentially the same System was working well until I began to apply some basic security hardening configuration. Postfix started complaining when I made /tmp noexec, nodev, nosuid, and then did a mount --bind of /var/tmp under /tmp. Backed that out the remount of /var/tmp and those errors went away. But then these errors started showing up. Here is an example of a postfix pickup error. What is going on? I could allow the module to load, but I want to understand what is going on and the dangers of making the mod before I do it. SELinux is preventing /usr/libexec/postfix/pickup from module_request access on the system Unknown. ***** Plugin catchall_boolean (89.3 confidence) suggests ******************* If you want to allow all domains to have the kernel load modules Then you must tell SELinux about this by enabling the 'domain_kernel_load_modules' boolean. Do setsebool -P domain_kernel_load_modules 1 ***** Plugin catchall (11.6 confidence) suggests *************************** If you believe that pickup should be allowed module_request access on the Unknown system by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep pickup /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:postfix_pickup_t:s0 Target Context system_u:system_r:kernel_t:s0 Target Objects Unknown [ system ] Source pickup Source Path /usr/libexec/postfix/pickup Port <Unknown> Host desk.localdomain Source RPM Packages postfix-2.6.6-2.2.el6_1 Target RPM Packages Policy RPM selinux-policy-3.7.19-126.el6_2.10 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name desk.localdomain Platform Linux desk.localdomain 2.6.32-220.13.1.el6.x86_64 #1 SMP Tue Apr 17 23:56:34 BST 2012 x86_64 x86_64 Alert Count 24 First Seen Fri 27 Apr 2012 02:46:55 PM MDT Last Seen Sun 29 Apr 2012 05:10:32 AM MDT Local ID 4b8e5292-93f1-4e69-8bb4-4ea70bc5232e Raw Audit Messages type=AVC msg=audit(1335697832.612:34911): avc: denied { module_request } for pid=24226 comm="pickup" kmod="net-pf-10" scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system type=SYSCALL msg=audit(1335697832.612:34911): arch=x86_64 syscall=socket success=no exit=EAFNOSUPPORT a0=a a1=1 a2=0 a3=7fff3ca82190 items=0 ppid=1925 pid=24226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=pickup exe=/usr/libexec/postfix/pickup subj=system_u:system_r:postfix_pickup_t:s0 key=(null) Hash: pickup,postfix_pickup_t,kernel_t,system,module_request audit2allow #============= postfix_pickup_t ============== #!!!! This avc can be allowed using the boolean 'domain_kernel_load_modules' allow postfix_pickup_t kernel_t:system module_request; audit2allow -R #============= postfix_pickup_t ============== #!!!! This avc can be allowed using the boolean 'domain_kernel_load_modules' allow postfix_pickup_t kernel_t:system module_request;

3 2

error 24 attempt to access block outside of partition
by Phil Savoie 30 Apr '12

30 Apr '12

Hi All, After updating to the latest kernel, I get subject error at grub. I have no idea as to how to fix this. Booting of the previous kernel is fine. Could someone please help sort this out? Thank you in advance!! Phil Relative info: grub.conf # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You do not have a /boot partition. This means that # all kernel and initrd paths are relative to /, eg. # root (hd0,0) # kernel /boot/vmlinuz-version ro root=/dev/sdb1 # initrd /boot/initrd-[generic-]version.img #boot=/dev/sdb default=1 timeout=5 splashimage=(hd0,0)/boot/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-220.13.1.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-220.13.1.el6.x86_64 ro root=UUID=b9245ece-994f-44c8-9831-ec24cf865b6e nomodeset rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us LANG=en_US.UTF-8 rd_NO_MD quiet SYSFONT=latarcyrheb-sun16 rhgb crashkernel=auto rd_NO_LVM selinux=0 rd_NO_DM nouveau.modeset=0 rdblacklist=nouveau initrd /boot/initramfs-2.6.32-220.13.1.el6.x86_64.img title CentOS (2.6.32-220.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-220.el6.x86_64 ro root=UUID=b9245ece-994f-44c8-9831-ec24cf865b6e nomodeset rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us LANG=en_US.UTF-8 rd_NO_MD quiet SYSFONT=latarcyrheb-sun16 rhgb crashkernel=auto rd_NO_LVM selinux=0 rd_NO_DM nouveau.modeset=0 rdblacklist=nouveau initrd /boot/initramfs-2.6.32-220.el6.x86_64.img Output of fdisk -cul: [root@cc ~]# fdisk -cul Disk /dev/sda: 1500.3 GB, 1500301910016 bytes 255 heads, 63 sectors/track, 182401 cylinders, total 2930277168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0x00042630 Device Boot Start End Blocks Id System /dev/sda1 * 2048 2921889791 1460943872 83 Linux /dev/sda2 2921889792 2930276351 4193280 82 Linux swap / Solaris WARNING: GPT (GUID Partition Table) detected on '/dev/sdb'! The util fdisk doesn't support GPT. Use GNU Parted. Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders, total 1953525168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0xb77be37a Device Boot Start End Blocks Id System /dev/sdb1 * 2048 206847 102400 7 HPFS/NTFS /dev/sdb2 206848 1953521663 976657408 7 HPFS/NTFS [root@cc ~]#

3 3

yum yum or not?
by Shaun 30 Apr '12

30 Apr '12

Hi all, I'm a bit of a newbie to CentOS though not Linux in general. I come from an apt-get package management mentality and I've had a few issues where package management actions haven't quite done what I'd expect. So I'm guessing it's user error! :) I installed GNOME and then decided that I wanted to install Xfce to try it out. I decided to then remove it with just 'yum remove' after playing with it a bit. It seemed to uninstall a lot of GNOME stuff (presumably that they had in common) and so the next time I tried to use GNOME it looked different and was missing a few components. Should I have just reverted the install of Xfce to undo it so that those dependencies would've have been touched or is this just how yum works?

8 20

(no subject)
by nxbtch 30 Apr '12

30 Apr '12

1 0

NTLMv2 compatibility in Samba 3.0.33 standard packages
by Andrew Reis 28 Apr '12

28 Apr '12

Good afternoon/morning/evening everyone, I've been running into the problem of clients using Windows 7 with CentOS 5.X and file/printer sharing. Correct me if I'm wrong, but the stand samba-3.0.33-x.x.x packages DO NOT provide compatibility with Windows Vista/7. I've had to manually compile samba from source or use the samba3x packages to fix the problem. Just wondering if we're ever going to have the NTLMv2 subroutines compiled into the update/centosplus repo packages. Thanks, -- _ANDREW REIS_ MCTS, Network+ Software/Networking Microsoft Windows Support/Webmaster DBMS Inc. Email: areis(a)dbmsinc.com [1] Direct Line: (888) 862-0662 ext. 307 Emergency # ONLY: (218) 833-2508 __ Links: ------ [1] mailto:areis@dbmsinc.com

4 3

iptables drop on virtual host
by Bob Hoffman 28 Apr '12

28 Apr '12

Does this work? adding DROP to iptables on the virtual host's iptables, before the phys bridge....will it prevent those ips from getting to the bridged part of iptables? Or would a different syntax be used? -A INPUT -s 66.77.65.128/26 -j DROP -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT

2 3

imagemagick convert/display eps file no decode delegate
by Tony Schreiner 27 Apr '12

27 Apr '12

I am finding on all my CentOS 5.8 systems (all fully updated but a variety of package mixes) that the display or convert commands from ImageMagick are unable to handle eps files. I get error output as follows, curious if anyone else sees this $ convert rna.eps rna.epi convert rna.eps rna.epi Error: /undefinedfilename in (72x72) Operand stack: Execution stack: %interp_exit .runexec2 --nostringval-- --nostringval-- --nostringval-- 2 %stopped_push --nostringval-- --nostringval-- --nostringval-- false 1 %stopped_push Dictionary stack: --dict:1154/1684(ro)(G)-- --dict:0/20(G)-- --dict:70/200(L)-- Current allocation mode is local Last OS error: 2 GPL Ghostscript 8.70: Unrecoverable error, exit code 1 Error: /undefinedfilename in (72x72) Operand stack: Execution stack: %interp_exit .runexec2 --nostringval-- --nostringval-- --nostringval-- 2 %stopped_push --nostringval-- --nostringval-- --nostringval-- false 1 %stopped_push Dictionary stack: --dict:1154/1684(ro)(G)-- --dict:0/20(G)-- --dict:70/200(L)-- Current allocation mode is local Last OS error: 2 GPL Ghostscript 8.70: Unrecoverable error, exit code 1 convert: no decode delegate for this image format `rna.eps'. convert: Postscript delegate failed `rna.eps'. convert: missing an image filename `rna.epi'. ImageMagick 5.2.8.0-12.el5 ghostcript-8.0-14.el5 the equivalent GraphicsMagick command gm convert does work This is a recent development, but I can't say how recent Tony Schreiner

1 0

Virt-manager requires stdin to run?
by Jason Pyeron 27 Apr '12

27 Apr '12

Anyone have any ideas on this? $ ssh root(a)x.y.z.a virt-manager & $ Warning: untrusted X11 forwarding setup failed: xauth key data not generated Warning: No xauth data; using fake authentication data for X11 forwarding. [2]+ Stopped ssh root(a)x.y.z.a virt-manager $ bg [2]+ ssh root(a)x.y.z.a virt-manager & $ [2]+ Stopped ssh root(a)x.y.z.a virt-manager -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 0

Help with software raid + LVM on Centos 6
by aurfalien 27 Apr '12

27 Apr '12

Hi all, Please excuse the many posts. Wondering if any one can help me with the the setup. I have 2x2TBdisks. I would like to mirror them. I would like to create two LVMs so that I can snap shot from one to the other. During Centos 6 install, how would I go about this as its confusing? So far I am here; 1) Created the following raid devices; md0 500MB (use it for /boot) md1 4000MB (use it for swap) md2 All remaining space (use it for /) 2) Created two physical LVMs, one on md0, the other on md1. 3) ? This is were I am confused, do I create two LVM volume groups? I was thinking that my primary LVM can be ~1TB and that my other LVM which I snapshot to can also be ~1TB. Anyways, I am very green on this topic as I usually do hardware raids but I don't have that option. Thanks in advance, - aurf

2 2

Re: [CentOS] yum yum or not?
by James B. Byrne 27 Apr '12

27 Apr '12

On Fri, April 27, 2012 04:15, Shaun wrote: > Well this is it. I've used both 'remove' and 'history undo' and had > better success (system not having something important removed) with > the latter. I have only this suspicion. It may be that yum history undo only rolls back the changes actually made by the previous yum update/install since it 'knows' that the system environment has not changed in the interim. Whereas yum history remove, since it has to cherry-pick packages from a possibly changed environment, instead removes rpm dependencies based on the package specs of the items directly added by the original yum command, whether these were installed in that transaction or not. But, this is only a guess. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Centos 6 - Create raid 1 + LVM during gui install
by aurfalien 27 Apr '12

27 Apr '12

Hi all, Does any one know of a how to for creating raid 1 + LVMs during install for Centos 6? Do I create the physical LVM first and then raid or vise versa? Its seems diff then doing it for Centos 5. - aurf

2 2

More on the ATA sense error
by m.roth＠5-cent.us 27 Apr '12

27 Apr '12

AFAIK, no one's responded to me about whether I should just turn off smartd. At any rate, here's more info: this server only started spitting Apr 25 07:47:50 <server> kernel: sda: Current [descriptor]: sense key: Recovered Err ror Apr 25 07:47:50 <server> kernel: Add. Sense: ATA pass through information availl able Apr 25 07:47:50 <server> kernel: Apr 25 07:47:50 <server> kernel: Descriptor sense data with sense descriptors (in hh ex): Apr 25 07:47:50 <server> kernel: 72 01 00 1d 00 00 00 0e 09 0c 00 00 00 00 00 00 Apr 25 07:47:50 <server> kernel: 00 4f 00 c2 40 50 for every drive - and it has four - right after updated to the most current kernel 2.6.18-308.4.1.el5 #1 SMP and rebooted. So one question becomes three: a) should I turn off smartd? b) should I reboot to the previous kernel, and see if it keeps up? c) is this a known bug? mark

1 0

fail2ban logrotate failure
by Bob Hoffman 27 Apr '12

27 Apr '12

I got the fail2ban from epel. There were a number of issues relating to using a log file... logwatch was looking for both fail2ban and fail2ban.log logrotate file fail2ban added looked for fail2ban.log and then reset itself to syslog fail2ban itself went to syslog, over riding its fail2ban.log. took a while, but I use /var/log/fail2ban now, that finally worked through logrotates and logwatch. Problem with centos variant of fail2ban: logrotate causes all 'ban' actions to stop happening. I am pretty sure it stops reading the logs but still functions. Unban actions still keep showing up in the log, but the 'ban' actions just stop. Program is running, but no longer working. Long searches online show a million others with the same issue. Only way to prevent it seems to be to add a reload or restart in the syslog file. This is undesired due to losing all banned ips listed. It happens as part of the logrotate. The logrotate file I have changed a few times and recently tried this postrotate /usr/bin/fail2ban-client set logtarget /var/log/fail2ban 1>/dev/null || true endscript setting the logtarget, which the original called for changing it to syslog and 2>dev/null || true so what would you do? I imagine when logrotate happens and syslog restarts something is causing fail2ban to stop working properly, but still timing 'unbans'. This is apparently a bug/problem for almost everyone of all distros. Other than just uninstalling, the only way to make it work would be a restart around 4 every morning, making any long term bans useless. My last thought is to just throw the /var/log/fail2ban to be rotated by syslog like maillog and the others..and not doing anything special. Maybe it would just work. I write here because I know there are hundreds of you and someone must have figured out how to make fail2ban work for more than 24 hours without a restart....

2 2

High load
by Kaushal Shriyan 27 Apr '12

27 Apr '12

Hi Is there a way to nail down the issue of high load on a server basically trying to understand the reason behind high load at a specific time period. I use top command but it does not have history. Nagios reports saying "*[04-25-2012 10:11:00] SERVICE ALERT: dev;LOAD;WARNING;HARD;3;WARNING - load average: 6.88, 6.36, 5.71"* * * Please help me understand. Regards Kaushal

4 3

High load averages copying USB
by Lists 27 Apr '12

27 Apr '12

Problem as follows: 1) Plug in an external USB drive. 2) Mount it anywhere. Doesn't matter how. 3) Copy a few GB of data to the drive from a non-USB disk. 4) Watch the load average "climb" to 5.x, sometimes 10.x or more. Why? This on an otherwise unloaded system. Doesn't matter how many cores, how much RAM, 32/64 bit, etc. Why should copying some files to a USB drive cause load averages to climb so high? (and network monitors to freak out?)

5 7

Re: [CentOS] LibreOffice rpm's vs Centos testing repo
by Johan Vermeulen 27 Apr '12

27 Apr '12

This time in the "normal" repo or also in testing? Greetings, j. verzonden m.b.v Android vandaar de beknoptheid. Nux! <nux(a)li.nux.ro>schreef: >On 19.03.2012 11:43, Jake Shipton wrote: >> On Mon, 19 Mar 2012 09:50:21 +0000 >> nux(a)li.nux.ro wrote: >> >>> Jake, >>> >>> Sure, 3.5 is on the to do list. >>> I see this trend a lot, to make repos out of official rpms (at least >>> Ljubomir is also doing it). Maybe it's worth doing this on a bigger >>> scale. Care to share what exactly you are doing? Are you using any >>> "meta" packages? >> Hi, >> >> The setup is pretty basic (imo) because the repo is used only in a >> LAN >> and never used outside of this LAN, I do not worry about generating >> delta's or stuff like that. I don't even GPG sign them. >> >> The local repo is also used for other self compiled RPM's. These >> would >> usually be tagged with a ".hr" tag (ie, >> <packagename>-<version>.el6.hr.x86_64) for easy removal. >> >> But as far as I am aware to do that, with official RPM's it would >> require a rebuild. >> >> So what I tend to do is just open up filezilla, ftp to a libreoffice >> mirror, browse my way to libreoffice stable RPM's, and download them >> to >> "/var/www/html/repository/<arch>" (Which is actually just a link >> to /home/<username>/rpmbuild/RPMS) >> >> Obviously the repository it's self is pre-setup because of the other >> packages, so as my normal user next up I would just run: >> >> createrepo --update ~/rpmbuild/RPMS/<arch> >> createrepo --update ~/rpmbuild/RPMS/SRPMS >> >> A quick check for SELinux permission's and it's good to go :-). Now >> from local machines on the LAN I would just use "yum install >> libobasis* >> libreoffice*" etc, then pick and remove the unnecessary extra >> packages. >> and "yum update" takes care of updates :-) (after I have redone the >> above..) >> >> This is something most user could easily do them selves, and it could >> also be done publicly, however it is still a "messy" method even if >> somebody else does it for you (and you just enable/add the repo). >> >> I would still prefer to be able to have RPM's built specifically for >> EL6. >> >> I guess that raises the question of "You have the repo, rpmbuild >> etc setup, why don't you build them your self?", and to answer it: >> >> Because I do not have the CPU Power :-) (Still got a Single core >> here....) >> >> But yeah.. that's basically all I do :-). > >And that's what I did as well. Check this out: >http://www.nux.ro/archive/2012/04/LibreOffice_org_RPMs_in_a_yum_friendly_fo… >I'll spam this in a separate message on the usual places. > >Also, more good news comes from Redhat as RHEL 6.3 will contains >Libreoffice 3.4.5! > >-- >Sent from the Delta quadrant using Borg technology! > >Nux! >www.nux.ro >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

2 1

OpenOffice.org3 Error after Software Update
by Mark LaPierre 27 Apr '12

27 Apr '12

Hey Y'all, I just installed the updates recommended by Software Update. Apr 25 19:04:43 Updated: xulrunner-10.0.4-1.el6.centos.i686 Apr 25 19:04:53 Updated: firefox-10.0.4-1.el6.centos.i686 Apr 25 19:05:03 Updated: thunderbird-10.0.4-1.el6.centos.i686 Apr 25 19:05:05 Updated: matahari-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:06 Updated: matahari-agent-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:09 Updated: matahari-broker-0.4.4-12.el6_2.i686 Apr 25 19:05:10 Updated: matahari-network-0.4.4-12.el6_2.i686 Apr 25 19:05:11 Updated: matahari-sysconfig-0.4.4-12.el6_2.i686 Apr 25 19:05:12 Updated: matahari-service-0.4.4-12.el6_2.i686 Apr 25 19:05:13 Updated: matahari-host-0.4.4-12.el6_2.i686 Apr 25 19:05:14 Updated: 2:libpng-1.2.49-1.el6_2.i686 Apr 25 19:05:17 Updated: openssl-1.0.0-20.el6_2.4.i686 Apr 25 19:05:21 Updated: openssl-devel-1.0.0-20.el6_2.4.i686 Apr 25 19:05:22 Updated: 2:libpng-devel-1.2.49-1.el6_2.i686 Apr 25 19:05:23 Updated: matahari-0.4.4-12.el6_2.i686 I also installed Virtual Box. Apr 25 19:23:55 Installed: VirtualBox-4.1-4.1.12_77245_rhel6-1.i686 Now open office will not start. It complains about not being able to load a library. The application cannot be started. loading component library failed: file:///usr/lib/openoffice.org3/program/../basis-link/program/i18npool.uno.so I checked for the existence of i18npool.uno.so in the directory indicated. It is there. 1. Has anyone else experienced any problems with the latest software update? 2. What course of action would you recommend to restore the operation of openoffice.org? CentOS release 6.2 (Final) Linux mushroom.patch 2.6.32-220.13.1.el6.i686 #1 SMP Tue Apr 17 22:09:08 BST 2012 i686 i686 i386 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

2 3

Re: [CentOS] CentOS-announce Digest, Vol 84, Issue 14
by Johan Vermeulen 26 Apr '12

26 Apr '12

Maybe this came out wrong. What I meant is: I was told RHEL doesn't do major application upgrades in one version, so we would end op with Firefox 3.6.x in CentOs 6.x in a few years from now. Apparently this is not true. So now I,m wondering if a move to LO within CentOs 6 is imaginable. Grt. J. verzonden m.b.v Android vandaar de beknoptheid. Johan Vermeulen <jvermeulen(a)cawdekempen.be>schreef: >If Rhel/CentOs goes from Firefox3.6 to Firefox 10, could they go from OpenOffice to LibreOffice as wel? > >Greetings, James > >verzonden m.b.v Android >vandaar de beknoptheid. > >centos-announce-request(a)centos.orgschreef: > >>Send CentOS-announce mailing list submissions to >> centos-announce(a)centos.org >> >>To subscribe or unsubscribe via the World Wide Web, visit >> http://lists.centos.org/mailman/listinfo/centos-announce >>or, via email, send a message with subject or body 'help' to >> centos-announce-request(a)centos.org >> >>You can reach the person managing the list at >> centos-announce-owner(a)centos.org >> >>When replying, please edit your Subject line so it is more specific >>than "Re: Contents of CentOS-announce digest..." >> >> >>Today's Topics: >> >> 1. CEEA-2012:0327 CentOS 6 firefox Update (Johnny Hughes) >> 2. CEBA-2012:0337 CentOS 6 nss Update (Johnny Hughes) >> 3. CEEA-2012:0329 CentOS 6 thunderbird Update (Johnny Hughes) >> 4. CEBA-2012:0339 CentOS 6 openswan Update (Johnny Hughes) >> 5. CEBA-2012:0338 CentOS 6 selinux-policy Update (Johnny Hughes) >> 6. CEBA-2012:0335 CentOS 6 iptables Update (Johnny Hughes) >> >> >>---------------------------------------------------------------------- >> >>Message: 1 >>Date: Sat, 25 Feb 2012 05:17:37 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEEA-2012:0327 CentOS 6 firefox Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225051737.GA11681(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Enhancement Advisory 2012:0327 >> >>Upstream details at : http://rhn.redhat.com/errata/RHEA-2012-0327.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>d2599a661b132aa2ddd7392eae5685646cf3c635d0ef0267599b8740f09c12e2 firefox-10.0.1-1.el6.centos.i686.rpm >>77de9c554ac1f16ba2520f07cee4c15d4e1e2979cf740c7c002fea07c34faf96 xulrunner-10.0.1-2.el6.centos.i686.rpm >>fcd332a2aeb56279601acf6494a33a2983344f5b9982f37c6800cb9e3aa4f663 xulrunner-devel-10.0.1-2.el6.centos.i686.rpm >>6461e5d96c34674c8d429155b071ef03f770951c296667b9fe481b4bbafa78b5 yelp-2.28.1-13.el6_2.i686.rpm >> >>x86_64: >>d2599a661b132aa2ddd7392eae5685646cf3c635d0ef0267599b8740f09c12e2 firefox-10.0.1-1.el6.centos.i686.rpm >>22976c0f8338775d7407b9239c3f9f32ec7ca88faa10c94f437772ae9b380137 firefox-10.0.1-1.el6.centos.x86_64.rpm >>77de9c554ac1f16ba2520f07cee4c15d4e1e2979cf740c7c002fea07c34faf96 xulrunner-10.0.1-2.el6.centos.i686.rpm >>b3441c386c20957faa6130d8bed19875ac5d1494f3a385ed12249191792e1fa2 xulrunner-10.0.1-2.el6.centos.x86_64.rpm >>fcd332a2aeb56279601acf6494a33a2983344f5b9982f37c6800cb9e3aa4f663 xulrunner-devel-10.0.1-2.el6.centos.i686.rpm >>8d92e10fba11d7b9300d13244f49e6fb1ce97bdde46ee197447af2dcbf4d9699 xulrunner-devel-10.0.1-2.el6.centos.x86_64.rpm >>a839b1a862c44fa07ce558f0f4a81a254abda5ad7cacef7f41fa6c6c591fe04f yelp-2.28.1-13.el6_2.x86_64.rpm >> >>Source: >>1a53d0a7664910c65c00711815fcfd8a87f965b5529d6135099d989454251231 firefox-10.0.1-1.el6.centos.src.rpm >>385d3e038296c9ca12d13bc5c3396049d70f4f8a879fc2468b6ce9c3a93ec96b xulrunner-10.0.1-2.el6.centos.src.rpm >>dc668b084f356b2049f8e724476ff665876bea6b8abbe533aa5555d7cea42c07 yelp-2.28.1-13.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 2 >>Date: Sat, 25 Feb 2012 05:20:36 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0337 CentOS 6 nss Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052036.GA11839(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0337 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0337.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>96a9433b9cfb6009dcc4e4b61168752313ab925cc72d9cf2bd104136bd1770f5 nspr-4.8.9-3.el6_2.i686.rpm >>e1e90d9135b4087a9f97ea2ba0b6025e8d6a812e98a1743fe897474d8ec719e5 nspr-devel-4.8.9-3.el6_2.i686.rpm >>cbefa7c87e5dc51dab0a433f47c0cd4f6b06ca0c9c3f2579f32141d9b3d30998 nss-3.13.1-6.el6_2.i686.rpm >>a495226e3abee7423caa069e2b8a1749ee63543800b37b5e3cbd7afcf05d65e1 nss-devel-3.13.1-6.el6_2.i686.rpm >>54c94e1640a123d70b4ae4446f750432c47ba0e786237791695ce47289312020 nss-pkcs11-devel-3.13.1-6.el6_2.i686.rpm >>440a26179856dc203924ae31147056bfda9a11e35826c23cacb06dbe5a520a95 nss-sysinit-3.13.1-6.el6_2.i686.rpm >>ff4640259883bd7d9d9fb33d3a295328023c06d5b3865dce69839657d0202761 nss-tools-3.13.1-6.el6_2.i686.rpm >>1b1f933409d29705c281e800769c5610811a65d6568674ddda7dace5e9db76f9 nss-util-3.13.1-3.el6_2.i686.rpm >>89039a389f73a99561ba3629dfb0eac27f031e59c209ea4eaee9fcea5141a632 nss-util-devel-3.13.1-3.el6_2.i686.rpm >> >>x86_64: >>96a9433b9cfb6009dcc4e4b61168752313ab925cc72d9cf2bd104136bd1770f5 nspr-4.8.9-3.el6_2.i686.rpm >>0555f49bb513bb0e7188f5a894898e3650c8d8472b990f283749254e59ce8d16 nspr-4.8.9-3.el6_2.x86_64.rpm >>e1e90d9135b4087a9f97ea2ba0b6025e8d6a812e98a1743fe897474d8ec719e5 nspr-devel-4.8.9-3.el6_2.i686.rpm >>9ce858d877be449049d136db3167fe7775151861886ac9a728a94411613c3d35 nspr-devel-4.8.9-3.el6_2.x86_64.rpm >>cbefa7c87e5dc51dab0a433f47c0cd4f6b06ca0c9c3f2579f32141d9b3d30998 nss-3.13.1-6.el6_2.i686.rpm >>e0b350fc3c83e8fa088a64e97e308c0ac254c07836b5d2c1b1abf651550ac433 nss-3.13.1-6.el6_2.x86_64.rpm >>a495226e3abee7423caa069e2b8a1749ee63543800b37b5e3cbd7afcf05d65e1 nss-devel-3.13.1-6.el6_2.i686.rpm >>d5b1fb57fe5c17ba10057de8ffa632f963b813e5de576d152c18b2708f627c6d nss-devel-3.13.1-6.el6_2.x86_64.rpm >>54c94e1640a123d70b4ae4446f750432c47ba0e786237791695ce47289312020 nss-pkcs11-devel-3.13.1-6.el6_2.i686.rpm >>1266afcedd753ef7b93d722782367fd5f12962dfcf6bee8093861b9587f243c4 nss-pkcs11-devel-3.13.1-6.el6_2.x86_64.rpm >>a2d7acdca92b38c0daab5713413cb97ccadf28e186494c87fff905120d8921bf nss-sysinit-3.13.1-6.el6_2.x86_64.rpm >>e82cd7c4c577721da6698a3b20cb90203ee5a6240181eb4ebf877ed8e86c173b nss-tools-3.13.1-6.el6_2.x86_64.rpm >>1b1f933409d29705c281e800769c5610811a65d6568674ddda7dace5e9db76f9 nss-util-3.13.1-3.el6_2.i686.rpm >>b90b050163b1605b8d7bd002955899fe4dd43f865462edfb5470de461906fbb7 nss-util-3.13.1-3.el6_2.x86_64.rpm >>89039a389f73a99561ba3629dfb0eac27f031e59c209ea4eaee9fcea5141a632 nss-util-devel-3.13.1-3.el6_2.i686.rpm >>41e31d4aad5ad08ada416aa0d5c8ea4121ab3171ba211f45f06f5b6fbb213793 nss-util-devel-3.13.1-3.el6_2.x86_64.rpm >> >>Source: >>e528dee7d721d3a621e883a2ea7df3befc8f3a4cc19fa37c3f97f773bccab2ae nspr-4.8.9-3.el6_2.src.rpm >>05b8b089f4dd7cca6c022e900a52ca1d2e036d716847c4cc4d8fa2eb89b3a049 nss-3.13.1-6.el6_2.src.rpm >>f0273a41ba5b4459ad0247611cfa473345886f21bab6dcb096e84d82f588a464 nss-util-3.13.1-3.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 3 >>Date: Sat, 25 Feb 2012 05:22:40 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEEA-2012:0329 CentOS 6 thunderbird Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052240.GA11930(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Enhancement Advisory 2012:0329 >> >>Upstream details at : http://rhn.redhat.com/errata/RHEA-2012-0329.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>0deb275c3241a3943572cab3b6c01515525ad42a679df5dabe66206a4f5f4441 thunderbird-10.0.1-3.el6.centos.i686.rpm >> >>x86_64: >>3b1a148fddacd067db594fde1b86bf3448d6cf1079b38438d7432a4764e1db29 thunderbird-10.0.1-3.el6.centos.x86_64.rpm >> >>Source: >>fba41db75d164461c9603a4735a0f670dcf29d9daf6520611c0806e4ca7965a9 thunderbird-10.0.1-3.el6.centos.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 4 >>Date: Sat, 25 Feb 2012 05:23:10 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0339 CentOS 6 openswan Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052310.GA12010(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0339 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0339.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>2ad5574961178d92774023258d278131c83acfa0bfa1d2584d06fd9e64d16d78 openswan-2.6.32-10.el6_2.i686.rpm >>ba280a99b04ca752185ff05289ba1f7e429a26186baf68eaf579cbcdea93e5d1 openswan-doc-2.6.32-10.el6_2.i686.rpm >> >>x86_64: >>dec60d50e94a8e644d1f92e44ec8ee8770e5ab69073f39e914c8efbd47ac0fb6 openswan-2.6.32-10.el6_2.x86_64.rpm >>fd82468d39d724dbe68cb8a63f72217a6c3aaefbd368739c8b9fa7c30ba66d2e openswan-doc-2.6.32-10.el6_2.x86_64.rpm >> >>Source: >>901e69b53004c2c736e4d863c4583563f83ed8f9c6ae6a9bf185eb3797100272 openswan-2.6.32-10.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 5 >>Date: Sat, 25 Feb 2012 05:23:47 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0338 CentOS 6 selinux-policy >> Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052347.GA12114(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0338 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0338.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>a6af66e794daab711544237711fc60a877d6a766117abe9be5404262f6688446 selinux-policy-3.7.19-126.el6_2.9.noarch.rpm >>c7d4083b26698968559660235c43bb10a97751ebfff7dc3b64abc9462db76c39 selinux-policy-doc-3.7.19-126.el6_2.9.noarch.rpm >>9863d5eb132e9d24874f17018afec339347c59ac29dd76440944b433554994d7 selinux-policy-minimum-3.7.19-126.el6_2.9.noarch.rpm >>26968984b4a1a1eb3910193f7bcfea6d70d615c7be5cc53523c2b9d96f44a575 selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm >>fc4da222ceb175ab2f72862084a68f5e818e452457666b7e85f37795f8f8f010 selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm >> >>x86_64: >>71d4b96c4ac6ea7f5e9327da9e54be5d9d88774cae563c793a5063dbe94d51c9 selinux-policy-3.7.19-126.el6_2.9.noarch.rpm >>f75088e18583cf323f24696131ac3567ac9aa992b04c1cb2761938cff4cab69c selinux-policy-doc-3.7.19-126.el6_2.9.noarch.rpm >>9d89b2389cca275c4f1e23ad55ae6d0b24802ec7545957f4c2bc46a9954deff4 selinux-policy-minimum-3.7.19-126.el6_2.9.noarch.rpm >>6ff9803ed6ec2393aa3a65b161ec76ed1162922754c804370229ae701976f8a5 selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm >>c4edce76d8f801df40d83ed88e28690d7719614920b6b68bc81b196324953aad selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm >> >>Source: >>ddbb5765611d2fa274c41cc42b0731f3ce56eb5cba1bd5bc5fd23beff49a44c7 selinux-policy-3.7.19-126.el6_2.9.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 6 >>Date: Sat, 25 Feb 2012 10:41:06 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0335 CentOS 6 iptables Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225104106.GA27872(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0335 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0335.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>6a7d7caa6fbee984d04f36138cad2c8c423348d96f7d631f26ef465b102bcb54 iptables-1.4.7-5.1.el6_2.i686.rpm >>78c572e6d1922558eae95995ea36858d43a33d9c956dd67fc62f393d7f0a26c3 iptables-devel-1.4.7-5.1.el6_2.i686.rpm >>91627a7f937e8e5c7a4904ba4b30c20cccfc707e43e86eef59d19acf2d68e4e8 iptables-ipv6-1.4.7-5.1.el6_2.i686.rpm >> >>x86_64: >>6a7d7caa6fbee984d04f36138cad2c8c423348d96f7d631f26ef465b102bcb54 iptables-1.4.7-5.1.el6_2.i686.rpm >>31caf99ebbbc8db11957b1b910bbac0367828338fe07982f7c31c744416415bc iptables-1.4.7-5.1.el6_2.x86_64.rpm >>78c572e6d1922558eae95995ea36858d43a33d9c956dd67fc62f393d7f0a26c3 iptables-devel-1.4.7-5.1.el6_2.i686.rpm >>9da9193de62224271ec2340d171c3282b3d226185f8f34dfb4410d22ff45be47 iptables-devel-1.4.7-5.1.el6_2.x86_64.rpm >>36511e71182583c5775d442f02f5aaab115252c3eaf343890d151440b06ceb02 iptables-ipv6-1.4.7-5.1.el6_2.x86_64.rpm >> >>Source: >>0e7eb17349dd0543c4e817c8f5025d9f2ddeffc70a6f165528ebb3a4a3b86aaf iptables-1.4.7-5.1.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>_______________________________________________ >>CentOS-announce mailing list >>CentOS-announce(a)centos.org >>http://lists.centos.org/mailman/listinfo/centos-announce >> >> >>End of CentOS-announce Digest, Vol 84, Issue 14 >>*********************************************** >>_______________________________________________ >>CentOS mailing list >>CentOS(a)centos.org >>http://lists.centos.org/mailman/listinfo/centos >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

13 23

Re: [CentOS] Not Quite Minimal CentOS 6.2
by James B. Byrne 26 Apr '12

26 Apr '12

On Thu, April 26, 2012 08:55, Johnny Hughes wrote: >> It has the network stack ... you must configure it during the install. >> >> If you do not configure and enable the ethernet card then it does not >> turn on by default ... but it is in the installer to be able to do: >> >> http://wiki.centos.org/FAQ/CentOS6#head-b67e85d98f0e9f1b599358105c551632c6f… >> > > Don't get the wrong idea here ... I think it is a very silly way to do > installs to not default with the network turned on. It should be turned > on ... but upstream decided it differently and I do not get to be the > decider :D I used to think the same thing. However, on reflection I think that the decision to keep the network down until deliberately enabled is a sensible and prudent security choice. This leaves up to the operator the decision as to whether or not a given system is sufficiently hardened against Internet attacks before connecting. Now, consider upstream's decision to enable network-manager by default on an enterprise distro. THAT I both understand and fundamentally disagree with. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 6

CentOS-announce Digest, Vol 86, Issue 15
by centos-announce-request＠centos.org 26 Apr '12

26 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0524 CentOS 5 cmirror Update (Johnny Hughes) 2. CEBA-2012:0525 CentOS 6 libvirt-qmf Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 26 Apr 2012 13:31:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0524 CentOS 5 cmirror Update To: centos-announce(a)centos.org Message-ID: <20120426133150.GA16368(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0524 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0524.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6e7c19773229d2bea54b66f9e6531a500be84e1acd499ba5a590527fac33a300 cmirror-1.1.39-13.el5_8.1.1.i386.rpm x86_64: 45f9ce129859bac0227954f72f69a1dc5e6ec5eb95c0bc805f6b928578052eee cmirror-1.1.39-13.el5_8.1.1.x86_64.rpm Source: ff96e198ad67477356b10aa36879448f36c4a6ecb0214eb389f1838799fe9989 cmirror-1.1.39-13.el5_8.1.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 26 Apr 2012 13:55:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0525 CentOS 6 libvirt-qmf Update To: centos-announce(a)centos.org Message-ID: <20120426135504.GA16629(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0525 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0525.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fa16888103bb2243159f81124ccb59385f30342c4cd92e9522fa3a0eac662c97 libvirt-qmf-0.3.0-7.el6_2.i686.rpm x86_64: 496f469fee6a6f5d073405964e1458d7e5dbfa504bacc250de127e9c768a771a libvirt-qmf-0.3.0-7.el6_2.x86_64.rpm Source: 2ddbe9d375c6b9e5f81d2850c412021b62a7b3f891bd32ff3f078eff1ce28fbb libvirt-qmf-0.3.0-7.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 15 ***********************************************

1 0

Not Quite Minimal CentOS 6.2
by listmail 26 Apr '12

26 Apr '12

Hi All, I a working on configuring a not-quite minimal installation of CentOS 6.2. I tried doing the "minimal" installation available with the installer, but it's a bit too minimal to be useful. So I'm cutting down from a less minimal starting place. I'm pretty familiar with 5.x, but what I'm finding in 6.2 is a lot of new stuff, and a lot of odd behavior. For example, cups is starting at boot time, despite being disabled by chkconfig. And I'm finding things like qpidd, matahari, messagebus, and portreserve that really don't belong in a minimal setup. To clarify, I'm shooting for a simple config, like one would use for a dedicated DNS server. Can anyone point me to an up-to-date list of daemon processes that indicates what they do and whether they can be safely disabled? Also, any ideas as to what would be launching cups would be appreciated. Thanks, --Bill

5 7

restorecon and sudo
by Philippe Naudin 26 Apr '12

26 Apr '12

Hello, On CentOS-6.2, these two commands (on the same machine) give me different results : # restorecon -r /var/www/html/Centos/ # (as root) $ sudo restorecon -r /var/www/html/Centos/ # (as an unprivileged user) /var/www/html/Centos/ is a symlink to /mnt/packages/Centos/ In the first case, I get : # ls -Z /var/www/html/Centos/ drwxr-xr-x. naudin biom system_u:object_r:httpd_sys_content_t 6 and in the second case : $ ls -Z /var/www/html/Centos/ drwxr-xr-x. naudin biom system_u:object_r:unlabeled_t:s0 6 Is this the expected behavior, or is there something I have missed ? -- Philippe Naudin UMR MISTEA : Mathématiques, Informatique et STatistique pour l'Environnement et l'Agronomie INRA, bâtiment 29 - 2 place Viala - 34060 Montpellier cedex 2 tél: 04.99.61.26.34, fax: 04.99.61.29.03, mél: naudin(a)supagro.inra.fr

1 0

OpenOffice.org3 Error after Software Update
by Mark LaPierre 25 Apr '12

25 Apr '12

Hey Y'all, I just installed the updates recommended by Software Update. Apr 25 19:04:43 Updated: xulrunner-10.0.4-1.el6.centos.i686 Apr 25 19:04:53 Updated: firefox-10.0.4-1.el6.centos.i686 Apr 25 19:05:03 Updated: thunderbird-10.0.4-1.el6.centos.i686 Apr 25 19:05:05 Updated: matahari-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:06 Updated: matahari-agent-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:09 Updated: matahari-broker-0.4.4-12.el6_2.i686 Apr 25 19:05:10 Updated: matahari-network-0.4.4-12.el6_2.i686 Apr 25 19:05:11 Updated: matahari-sysconfig-0.4.4-12.el6_2.i686 Apr 25 19:05:12 Updated: matahari-service-0.4.4-12.el6_2.i686 Apr 25 19:05:13 Updated: matahari-host-0.4.4-12.el6_2.i686 Apr 25 19:05:14 Updated: 2:libpng-1.2.49-1.el6_2.i686 Apr 25 19:05:17 Updated: openssl-1.0.0-20.el6_2.4.i686 Apr 25 19:05:21 Updated: openssl-devel-1.0.0-20.el6_2.4.i686 Apr 25 19:05:22 Updated: 2:libpng-devel-1.2.49-1.el6_2.i686 Apr 25 19:05:23 Updated: matahari-0.4.4-12.el6_2.i686 I also installed Virtual Box. Apr 25 19:23:55 Installed: VirtualBox-4.1-4.1.12_77245_rhel6-1.i686 Now open office will not start. It complains about not being able to load a library. The application cannot be started. loading component library failed: file:///usr/lib/openoffice.org3/program/../basis-link/program/i18npool.uno.so I checked for the existence of i18npool.uno.so in the directory indicated. It is there. 1. Has anyone else experienced any problems with the latest software update? 2. What course of action would you recommend to restore the operation of openoffice.org? CentOS release 6.2 (Final) Linux mushroom.patch 2.6.32-220.13.1.el6.i686 #1 SMP Tue Apr 17 22:09:08 BST 2012 i686 i686 i386 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

1 0

ATA errors
by m.roth＠5-cent.us 25 Apr '12

25 Apr '12

We just started seeing the errors described in <http://bugs.centos.org/print_bug_page.php?bug_id=5575> The question is, given that we're not seeing DRDY errors, and this is showing on all four drives, and there's no RAID, should we just turn off SMART, or is this telling us something important, other than the bug? mark

1 0

pcscd fails due to hal not running - CentOS 6.2
by Rob Kampen 25 Apr '12

25 Apr '12

Hi list, I have a fully updated 6.2 laptop that gives the following log message upon startup: <snip> Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:506:main() pcsc-lite 1.5.2 daemon ready. Apr 26 08:30:38 robsasus pcscd: hotplug_libhal.c:490:HPRegisterForHotplugEvents() Could not initialise connection to hald. Apr 26 08:30:38 robsasus pcscd: hotplug_libhal.c:491:HPRegisterForHotplugEvents() Normally this means the HAL daemon (hald) is not running or not ready. Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:525:main() SVCServiceRunLoop returned Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:531:at_exit() cleaning /var/run </snip> so I check the /etc/rcX.d/ init files and find that pcscd is set at start 25 but haldaemon is start 26 - thus I guess this is why I get the failure message - hal does not get started until after pcscd. if I start pcscd manually after boot all is well. the pscsd init.d script claims it will start hal - thus I am confused - and at the limit of my knowledge. If someone could enlighten me. TIA

1 0

forwarding packets to service in same host without using loopback network
by Arif Hossain 25 Apr '12

25 Apr '12

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible solutions can be more accurate and robust. The following code describes the core functionality of the application: #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <netinet/in.h> #include <linux/types.h> #include <linux/netfilter.h> /* for NF_ACCEPT */ #include <errno.h> #include <libnetfilter_queue/libnetfilter_queue.h> #define PREROUTING 0 #define POSTROUTING 4 #define OUTPUT 3 /* returns packet id */ static u_int32_t print_pkt (struct nfq_data *tb) { int id = 0; struct nfqnl_msg_packet_hdr *ph; struct nfqnl_msg_packet_hw *hwph; u_int32_t mark, ifi; int ret; unsigned char *data; ph = nfq_get_msg_packet_hdr (tb); if (ph) { id = ntohl (ph->packet_id); printf ("hw_protocol=0x%04x hook=%u id=%u ", ntohs (ph->hw_protocol), ph->hook, id); } hwph = nfq_get_packet_hw (tb); if (hwph) { int i, hlen = ntohs (hwph->hw_addrlen); printf ("hw_src_addr="); for (i = 0; i < hlen - 1; i++) printf ("%02x:", hwph->hw_addr[i]); printf ("%02x ", hwph->hw_addr[hlen - 1]); } mark = nfq_get_nfmark (tb); if (mark) printf ("mark=%u ", mark); ifi = nfq_get_indev (tb); if (ifi) printf ("indev=%u ", ifi); ifi = nfq_get_outdev (tb); if (ifi) printf ("outdev=%u ", ifi); ifi = nfq_get_physindev (tb); if (ifi) printf ("physindev=%u ", ifi); ifi = nfq_get_physoutdev (tb); if (ifi) printf ("physoutdev=%u ", ifi); ret = nfq_get_payload (tb, &data); if (ret >= 0) printf ("payload_len=%d ", ret); fputc ('\n', stdout); return id; } static int cb (struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct nfq_data *nfa, void *data) { uint32_t ip_src, ip_dst; struct in_addr s_ip; struct in_addr d_ip; uint16_t src_port; uint16_t dst_port; int verdict; int id; int ret; unsigned char *buffer; struct nfqnl_msg_packet_hdr *ph = nfq_get_msg_packet_hdr (nfa); if (ph) { id = ntohl (ph->packet_id); printf ("received packet with id %d", id); } ret = nfq_get_payload (nfa, &buffer); ip_src = *((uint32_t *) (buffer + 12)); ip_dst = *((uint32_t *) (buffer + 16)); src_port = *((uint16_t *) (buffer + 20)); dst_port = *((uint16_t *) (buffer + 22)); s_ip.s_addr = (uint32_t) ip_src; d_ip.s_addr = (uint32_t) ip_dst; *(buffer + 26) = 0x00; *(buffer + 27) = 0x00; printf ( "source IP %s", inet_ntoa (s_ip)); printf ( "destination IP %s", inet_ntoa (d_ip)); printf ( "source port %d", src_port); printf ( "destination port %d", dst_port); if (ret) { switch (ph->hook) { case PREROUTING: printf ( "inbound packet"); //my_mangling_fun(); break; case OUTPUT: printf ( "outbound packet"); //my_mangling_fun(); break; } } verdict = nfq_set_verdict (qh, id, NF_ACCEPT, ret, buffer); if (verdict) printf ( "verdict ok"); return verdict; } int main (int argc, char **argv) { struct nfq_handle *h; struct nfq_q_handle *qh; struct nfnl_handle *nh; int fd; int rv; char buf[4096] __attribute__ ((aligned)); printf ("opening library handle\n"); h = nfq_open (); if (!h) { fprintf (stderr, "error during nfq_open()\n"); exit (1); } printf ("unbinding existing nf_queue handler for AF_INET (if any)\n"); if (nfq_unbind_pf (h, AF_INET) < 0) { fprintf (stderr, "error during nfq_unbind_pf()\n"); exit (1); } printf ("binding nfnetlink_queue as nf_queue handler for AF_INET\n"); if (nfq_bind_pf (h, AF_INET) < 0) { fprintf (stderr, "error during nfq_bind_pf()\n"); exit (1); } printf ("binding this socket to queue '0'\n"); qh = nfq_create_queue (h, 0, &cb, NULL); if (!qh) { fprintf (stderr, "error during nfq_create_queue()\n"); exit (1); } printf ("setting copy_packet mode\n"); if (nfq_set_mode (qh, NFQNL_COPY_PACKET, 0xffff) < 0) { fprintf (stderr, "can't set packet_copy mode\n"); exit (1); } fd = nfq_fd (h); for (;;) { if ((rv = recv (fd, buf, sizeof (buf), 0)) >= 0) { printf ("pkt received\n"); nfq_handle_packet (h, buf, rv); continue; } /* if your application is too slow to digest the packets that * are sent from kernel-space, the socket buffer that we use * to enqueue packets may fill up returning ENOBUFS. Depending * on your application, this error may be ignored. Please, see * the doxygen documentation of this library on how to improve * this situation. */ if (rv < 0 && errno == ENOBUFS) { printf ("losing packets!\n"); continue; } perror ("recv failed"); break; } printf ("unbinding from queue 0\n"); nfq_destroy_queue (qh); #ifdef INSANE /* normally, applications SHOULD NOT issue this command, since * it detaches other programs/sockets from AF_INET, too ! */ printf ("unbinding from AF_INET\n"); nfq_unbind_pf (h, AF_INET); #endif printf ("closing library handle\n"); nfq_close (h); exit (0); } Notice in the callback function two calls to my_mangling_fun() is commented out. This is where i mangle the incoming and outgoing packet. I think this code would be sufficient to describe my case. If further clarification is need please ask, i will post further details. Lets say accompanying iptables rules are following : $iptables -t mangle -A PREROUTING -p udp --dport 5000 -j NFQUEUE $iptables -t mangle -A OUTPUT -p udp --sport 5000 -j NFQUEUE lets compile and fire udp the thing. $gcc -g3 nfq_test.c -lnfnetlink -lnetfilter_queue $./a.out (should be as root) now we can feed garbage udp payload to this thing by netcat both client and server mode $nc -ul 5000 $nc -uvv <IP> 5000 This will print the packet from my netfilter_queue app in stdout. Now that the development environment is set up, we can move to the next thing. What we are trying to achieve is following : Our server is listening on 5000 port. Now all incoming packet destined to udp port 5000 will be queued by kernel. And the handle to this queue will be given to user application we listed earlier. This queue mechanism works like this: When a packet is available, the callback function(cb() in our code) is called. after processing, the callback function calls nfq_set_verdict(). after a **verdict** is returned, next packet will pop from the queue. notice that a packet will not pop from queue if its preceding packet has not been issued a verdict. This verdict values are NF_ACCEPT for accepting packet, NF_DROP for dropping the packet. Now what if i want to concatenate the udp payloads of the incoming and outgoing packet without touching client and server side code? If i want to concatenate udp payloads from our app this very app, then we need to have multiple packets at hand. But we have seen that a packet does not pops from queue before a verdict is issued to its preceding one. So how can this be done? One possible solution is issue a NF_DROP to every packet and save those packets in an intermediate data structure. Let's say we have done it. But how can this packet can be delivered to the service listening on 5000 port? We can't use network stack for delivering the packet, because if we do, then packets will end up in NFQUEUE again. Another problem is, the server is totally agnostic about this app. That means it should not see any difference in the packets. It should see packets as if it came from the original client. I have heard that a application can send data to a server in the same host without using network layer(ip,port) by writing some files. I do not know the validity of this statement. But if anyone knows anything about it , it will be wonderful. Another possible solution proposed to me is : 1.store packets in the application and return verdict NF_DROP 2.re-inject packets into the network stack using RAW sockets 3.tag concatenated UDP packets with a DSCP (see IP packet format) 4.in iptables, add a rule to match on this DSCP (--dscp) and ACCEPT the packet directly, without it passing through your netfilter application 5.If the provider already tags some packets with DSCP, you can add some iptables rules to clear them, like: $iptables -t mangle -A INPUT -j DSCP --set-dscp 0 -- -aft

2 4

Windows 2008R2 AD, kerberos, NFSv4
by janice.psyop 25 Apr '12

25 Apr '12

Hi, I'm trying to set up NFSv4 on two boxes (centos 5.5) and have it authenticate against our Windows 2008R2 AD server acting as the KDC. (samba/winbind is running ok with "idmap config MYCOMPANY: backend = rid" so we have identical ids across the servers.) I can mount my test directory fine via NFSv4 *without* the sec=krb5 option. However, once I put the sec=krb5 option in, then I get a mount error: "mount.nfs4: Permission denied" and rpc.gssd reports: "Failed to obtain machine credentials for connection to server" The computers have an AD computer account and for the service-principal, I created an AD user account "nfsHostname" and mapped the UPN e.g. NFS/ hostname.mycompany.tv(a)MYCOMPANY.TV to it using ktpass. This is the closest post similar to my issue I could find: http://lists.centos.org/pipermail/centos/2010-July/096378.html However, I'm trying not to run the createupn command via smbutils. Side note: Eventually we will also be using a HDS nas which doesn't provide us with samba net utils (e.g. net ads join createupn) only their proprietary webadmin/cli. When that nas joined our AD domain, it created a computer account with SPNs of HOST/HOSTNAME, HOST/hostname.MYCOMPANY.TV and a UPN of HOST/hostname.mycompany.tv(a)MYCOMPANY.TV And the HDS nas only wants encryption type: des-cbc-crc:normal. This is why on my test nfs server (nas002), I'm trying to use the same limited commands as I would if I were using the HDS nas. Any suggestions where to look next or get more verbose info from kerberos/KDC or the nfs server? (nothing shows up in either syslog -- plus, I'm not all that familiar with kerberos.) thanks in advance! JA. info: 10.100.1.11 KDC server (Windows 2008 R2, AD) 10.100.1.35 bk001 (nfsv4 client, kernel 2.6.18-194.32.1.el5) 10.100.1.82 nas002 (nfsv4 server, kernel 2.6.18-194.32.1.el5) 10.100.1.99 monitoring server intsalled on both nfsv4 client and server: nfs-utils.x86_64 1.0.9-60.el5 nfs-utils-lib.x86_64 1.0.8-7.9.el5 nfs4-acl-tools.x86_64 0.3.3-3.el5 krb5-workstation.x86_64 1.6.1-70.el5 samba (nas002) 3.3.8-0.52.el5_5.2 samba (bk001) 3.5.10-0.107.el5 [root@bk001 ~]# net ads testjoin Join is OK [root@bk001 ~]# kinit administrator(a)MYCOMPANY.TV Password for administrator(a)MYCOMPANY.TV: [root@bk001 ~]# kinit nfs/nas002.mycompany.tv(a)MYCOMPANY.TV Password for nfs/nas002.mycompany.tv(a)MYCOMPANY.TV: [root@bk001 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: nfs/nas002.mycompany.tv(a)MYCOMPANY.TV Valid starting Expires Service principal 04/13/12 16:08:51 04/14/12 02:08:51 krbtgt/MYCOMPANY.TV(a)MYCOMPANY.TV renew until 04/16/12 16:08:51 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached [root@bk001 ~]# showmount -e nas002.mycompany.tv Export list for nas002.mycompany.tv: /array gss/krb5,* [root@bk001 ~]# mount -v -t nfs4 -o proto=tcp,sec=krb5 nas002.mycompany.tv:/ /mnt/nfs4test Warning: rpc.idmapd appears not to be running. All uids will be mapped to the nobody uid. Warning: rpc.gssd appears not to be running. mount: pinging: prog 100003 vers 4 prot tcp port 2049 mount.nfs4: Permission denied [root@bk001 ~]# ps -elf | egrep 'gss|idmap' 1 S root 2498 1 0 75 0 - 8016 - Apr12 ? 00:00:00 rpc.gssd -rrrvvvv 1 S root 4575 1 0 76 0 - 14833 - Apr12 ? 00:00:00 rpc.idmapd -vvv [root@bk001 ~]# tail /var/log/messages Apr 13 16:09:09 bk001 rpc.idmapd[4575]: New client: 16 Apr 13 16:09:09 bk001 rpc.gssd[2498]: handling krb5 upcall Apr 13 16:09:09 bk001 rpc.idmapd[4575]: New client: 17 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Opened /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap Apr 13 16:09:09 bk001 rpc.gssd[2498]: Using keytab file '/etc/krb5.keytab' Apr 13 16:09:09 bk001 rpc.gssd[2498]: WARNING: Failed to obtain machine credentials for connection to server nas002.mycompany.tv Apr 13 16:09:09 bk001 rpc.gssd[2498]: doing error downcall Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Stale client: 16 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: -> closed /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Stale client: 17 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: -> closed /var/lib/nfs/rpc_pipefs/nfs/clnt17/idmap Apr 13 16:09:09 bk001 rpc.gssd[2498]: destroying client clnt17 Apr 13 16:09:09 bk001 rpc.gssd[2498]: destroying client clnt16 tshark capture of commands I performed (above): [root@bk001 ~]# cat /var/tmp/tshark_041312-1608.out 366 9.948504 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86719599 TSER=0 WS=7 367 9.948813 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396813568 TSER=86719599 368 9.948824 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86719599 TSER=396813568 369 9.948849 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 370 9.949976 10.100.1.11 -> 10.100.1.35 KRB5 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED 371 9.949982 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [ACK] Seq=181 Ack=154 Win=6432 Len=0 TSV=86719600 TSER=396813568 372 9.950031 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [FIN, ACK] Seq=181 Ack=154 Win=6432 Len=0 TSV=86719600 TSER=396813568 373 9.950288 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [ACK] Seq=154 Ack=182 Win=65160 Len=0 TSV=396813568 TSER=86719600 374 9.950297 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [RST, ACK] Seq=154 Ack=182 Win=0 Len=0 444 11.840921 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86721491 TSER=0 WS=7 446 11.841178 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396813757 TSER=86721491 447 11.841185 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86721491 TSER=396813757 448 11.841206 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 449 11.842812 10.100.1.11 -> 10.100.1.35 TCP [TCP segment of a reassembled PDU] 450 11.842817 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=259 Ack=1449 Win=8688 Len=0 TSV=86721493 TSER=396813757 451 11.842819 10.100.1.11 -> 10.100.1.35 KRB5 AS-REP 452 11.842822 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=259 Ack=1518 Win=8688 Len=0 TSV=86721493 TSER=396813757 453 11.842852 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [FIN, ACK] Seq=259 Ack=1518 Win=8688 Len=0 TSV=86721493 TSER=396813757 454 11.843043 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [ACK] Seq=1518 Ack=260 Win=65160 Len=0 TSV=396813758 TSER=86721493 455 11.843050 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [RST, ACK] Seq=1518 Ack=260 Win=0 Len=0 827 21.821693 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86731472 TSER=0 WS=7 828 21.821920 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396814755 TSER=86731472 829 21.821930 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86731472 TSER=396814755 830 21.821958 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 831 21.822968 10.100.1.11 -> 10.100.1.35 KRB5 AS-REP 832 21.822974 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [ACK] Seq=191 Ack=618 Win=6787 Len=0 TSV=86731473 TSER=396814756 833 21.823003 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [FIN, ACK] Seq=191 Ack=618 Win=6787 Len=0 TSV=86731473 TSER=396814756 835 21.823278 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [ACK] Seq=618 Ack=192 Win=65160 Len=0 TSV=396814756 TSER=86731473 836 21.823287 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [RST, ACK] Seq=618 Ack=192 Win=0 Len=0 1472 39.980317 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86749629 TSER=0 WS=7 1473 39.980491 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=3789493491 TSER=86749629 WS=7 1474 39.980498 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=86749631 TSER=3789493491 1475 39.980533 10.100.1.35 -> 10.100.1.82 NFS V4 NULL Call 1476 39.980701 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [ACK] Seq=1 Ack=45 Win=5888 Len=0 TSV=3789493492 TSER=86749631 1477 39.980705 10.100.1.82 -> 10.100.1.35 NFS V4 NULL Reply (Call In 1475) 1478 39.980707 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1479 39.980733 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [FIN, ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1480 39.980896 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [FIN, ACK] Seq=29 Ack=46 Win=5888 Len=0 TSV=3789493492 TSER=86749631 1481 39.980901 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=46 Ack=30 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1482 40.001039 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86749651 TSER=0 WS=7 1483 40.001210 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=3789493512 TSER=86749651 WS=7 1484 40.001221 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=86749651 TSER=3789493512 1485 40.001244 10.100.1.35 -> 10.100.1.82 NFS V4 NULL Call 1486 40.001409 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [ACK] Seq=1 Ack=45 Win=5888 Len=0 TSV=3789493512 TSER=86749651 1487 40.001414 10.100.1.82 -> 10.100.1.35 NFS V4 NULL Reply (Call In 1485) 1488 40.001418 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749652 TSER=3789493512 1489 40.002363 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [FIN, ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749653 TSER=3789493512 1490 40.002526 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [FIN, ACK] Seq=29 Ack=46 Win=5888 Len=0 TSV=3789493513 TSER=86749653 1491 40.002532 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=46 Ack=30 Win=5888 Len=0 TSV=86749653 TSER=3789493513 1493 40.002880 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: New client: 16\n 1497 40.003611 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: handling krb5 upcall \n 1498 40.004069 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: New client: 17\n 1499 40.004489 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Opened /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap\n 1500 40.004949 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: Using keytab file '/etc/krb5.keytab' \n 1501 40.005369 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: WARNING: Failed to obtain machine credentials for connection to server nas002.mycompany.tv \n 1502 40.005829 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: doing error downcall \n 1503 40.012862 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Stale client: 16\n 1504 40.013326 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: \t-> closed /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap\n 1505 40.013740 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Stale client: 17\n 1506 40.014157 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: \t-> closed /var/lib/nfs/rpc_pipefs/nfs/clnt17/idmap\n 1507 40.014621 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: destroying client clnt17 \n 1508 40.015082 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: destroying client clnt16 \n [root@bk001 ~]#

2 2

CentOS, XFS, VirtualBox - can they just get along?
by Boris Epstein 25 Apr '12

25 Apr '12

Hello all, I am running VirtualBox 4.1 on CentOS 6 and I got this warning that putting your VM's into an XFS filesystem is risky. I have also heard some rumors on the net to this effect. Does anyone know in more detail what's behind those rumors? Thanks. Boris.

2 1

Does SMTP Connection Drop When Posfix Reload is Issued ?
by Prabhpal S. Mavi 25 Apr '12

25 Apr '12

Dear Community Friends Greetings, i work with ISP, we host email service for almost 500+ companies and 200+ mail servers relay through my smart host. i implemented something that when our smart host would become blacklisted. It will automatic switch to next available smart host (which is ready sitting). that mean it will start relaying message through another smart host automatically. i think i must tell little background as well. it is actually php script that perform blacklist check every minute through cron. if it found that IP is blacklisted. It will then insert "relay host =" value in main.cf and reload postfix service. When IP is no more blacklisted it will then remove the same directive from main.cf and reload postfix. everything is working as expected. i have one question, when we reload postfix does it drop active SMTP session? for example lets say that remote SMTP server is delivering message to my postfix that has 8MB attachment. message was not fully transferred. lets say that 4MB was transferred. and i issued "postfix reload". will that connection drop or continue to deliver the mail? Thanks / Regards Prabhpal S. Mavi

7 10

CentOS-announce Digest, Vol 86, Issue 14
by centos-announce-request＠centos.org 25 Apr '12

25 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0518 Important CentOS 5 openssl Update (Johnny Hughes) 2. CESA-2012:0515 Critical CentOS 5 firefox Update (Johnny Hughes) 3. CESA-2012:0516 Critical CentOS 5 firefox Update (Johnny Hughes) 4. CESA-2012:0516 Critical CentOS 5 thunderbird Update (Johnny Hughes) 5. CESA-2012:0518 Important CentOS 6 openssl Update (Johnny Hughes) 6. CESA-2012:0515 Critical CentOS 6 firefox Update (Johnny Hughes) 7. CEBA-2012:0511 CentOS 6 matahari Update (Johnny Hughes) 8. CEBA-2012:0512 CentOS 6 aide Update (Johnny Hughes) 9. CESA-2012:0516 Critical CentOS 6 thunderbird Update (Johnny Hughes) 10. CESA-2012:0523 Moderate CentOS 5 libpng Update (Johnny Hughes) 11. CESA-2012:0523 Moderate CentOS 6 libpng Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 25 Apr 2012 01:22:21 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0518 Important CentOS 5 openssl Update To: centos-announce(a)centos.org Message-ID: <20120425012221.GA5708(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0518 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0518.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d8e4fe4b31be6324ed03ad70d86156a3168efc55c5b06ffd4fde486feb9fe2d6 openssl097a-0.9.7a-11.el5_8.2.i386.rpm c65df6dec7b008e84ab414c6970fb2c409a5e00cba23a4a4350b1a716b229559 openssl-0.9.8e-22.el5_8.3.i386.rpm 586a15a6bc19278bee19a2572bd1bc788003ff4c198431d0f4663adbb1b3184c openssl-0.9.8e-22.el5_8.3.i686.rpm 639974e459e9f6c0403360fc41067f48394f512d0ba5e579ea45b8992d2da168 openssl-devel-0.9.8e-22.el5_8.3.i386.rpm 92a492519329325336183c23929df620c8f8ddfd0e82b10c57664ec6d55e7bad openssl-perl-0.9.8e-22.el5_8.3.i386.rpm x86_64: d8e4fe4b31be6324ed03ad70d86156a3168efc55c5b06ffd4fde486feb9fe2d6 openssl097a-0.9.7a-11.el5_8.2.i386.rpm 7fa89e3ca44626a62c98bc84be77959f66a9b8eba6bbb9fd98365e74e6e103aa openssl097a-0.9.7a-11.el5_8.2.x86_64.rpm 586a15a6bc19278bee19a2572bd1bc788003ff4c198431d0f4663adbb1b3184c openssl-0.9.8e-22.el5_8.3.i686.rpm a5492f5973452f6193a3fb6cd3249f2791c52cebd1e1d12560d2d64b256c2784 openssl-0.9.8e-22.el5_8.3.x86_64.rpm 639974e459e9f6c0403360fc41067f48394f512d0ba5e579ea45b8992d2da168 openssl-devel-0.9.8e-22.el5_8.3.i386.rpm f2bd64faebbd7b5dc0124cca14b217ace539e04913f9eb266e8c2274b7dc94b8 openssl-devel-0.9.8e-22.el5_8.3.x86_64.rpm 75c9372cf9aa77e8d245254b3696b56d6bed262f3245e8c95278a07e74ffb42c openssl-perl-0.9.8e-22.el5_8.3.x86_64.rpm Source: d152bcff32227dd08cc0495718cfd19ad3ca2e1c15011ae41dc9ef0f434d4176 openssl097a-0.9.7a-11.el5_8.2.src.rpm 63492a08a2e0cd5277925dc88d34a85a381bd4c087787715e57645008a5bbace openssl-0.9.8e-22.el5_8.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 25 Apr 2012 01:27:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0515 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20120425012720.GA5926(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0515 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0515.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c2e589aadfac0a7c5977431242a268743d4a223c4da6cab73919c0af8cba3278 firefox-10.0.4-1.el5.centos.i386.rpm eaa1f4d40f40f2c20310a7234a80d643dfd3cf6124a38466dfe700581f166304 xulrunner-10.0.4-1.el5_8.i386.rpm 67a66eb67a74646e261340123f32fc604ae072feb475674a86532b30deaec4e4 xulrunner-devel-10.0.4-1.el5_8.i386.rpm x86_64: c2e589aadfac0a7c5977431242a268743d4a223c4da6cab73919c0af8cba3278 firefox-10.0.4-1.el5.centos.i386.rpm 9f1a1179d341db3846865cb0c7e39a2a9e23c3e06067760ebeb07090f20ba9c0 firefox-10.0.4-1.el5.centos.x86_64.rpm eaa1f4d40f40f2c20310a7234a80d643dfd3cf6124a38466dfe700581f166304 xulrunner-10.0.4-1.el5_8.i386.rpm aa76e67d4a67b6c919176f37906b224ef0bcf4217ec2995b121528c594557cd3 xulrunner-10.0.4-1.el5_8.x86_64.rpm 67a66eb67a74646e261340123f32fc604ae072feb475674a86532b30deaec4e4 xulrunner-devel-10.0.4-1.el5_8.i386.rpm f34186000619626cb784b3f7a916bddd1b7416e6b731ef04842788ca797e64fd xulrunner-devel-10.0.4-1.el5_8.x86_64.rpm Source: 1fbc0bd8c0045baeb7e75a8a5162752b0b4c0253e96cacc22cc426f5351a3b33 firefox-10.0.4-1.el5.centos.src.rpm be2954b3d1a4f9309fb097188d0bcd684985f2c62801bcaf4b0ed224f672abcb xulrunner-10.0.4-1.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 25 Apr 2012 01:30:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0516 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20120425013017.GA7324(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0516 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0516.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f9867946d381c189979c309151f633bc51596909c160dbc03e5324582d664c20 thunderbird-10.0.4-1.el5.centos.i386.rpm x86_64: e67a3cc7f4319d39d9b23e59b03113224bd9ffaec8ed7ac76081211ce16a27c0 thunderbird-10.0.4-1.el5.centos.x86_64.rpm Source: be26754c255f7058be311dad0c8b0a7d515f6b20b6f0d50f4372a796db682d53 thunderbird-10.0.4-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 24 Apr 2012 20:39:28 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0516 Critical CentOS 5 thunderbird Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4F9755D0.7020105(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2012:0516 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0516.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f9867946d381c189979c309151f633bc51596909c160dbc03e5324582d664c20 thunderbird-10.0.4-1.el5.centos.i386.rpm x86_64: e67a3cc7f4319d39d9b23e59b03113224bd9ffaec8ed7ac76081211ce16a27c0 thunderbird-10.0.4-1.el5.centos.x86_64.rpm Source: be26754c255f7058be311dad0c8b0a7d515f6b20b6f0d50f4372a796db682d53 thunderbird-10.0.4-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net

1 0

Latest 6.2 kernel is broken
by Lars Hecking 25 Apr '12

25 Apr '12

I just kickstarted a new machine with the latest CentOS 6.2 files, including kernel 2.6.32-220.13.1.el6.x86_64. It came up without network interfaces. dmesg says: bnx2: Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.2.1 (Dec 18, 2011) alloc irq_desc for 36 on node -1 alloc kstat_irqs on node -1 bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 bnx2 0000:01:00.0: setting latency timer to 64 bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1b.fw bnx2: Can't load firmware file "bnx2/bnx2-mips-09-6.2.1b.fw" bnx2 0000:01:00.0: PCI INT A disabled bnx2: probe of 0000:01:00.0 failed with error -2 The firmware file is missing from /lib/firmware and the kernel-firmware rpm. I found a copy of it on a Fedora site and dumped it into the right location, but it wasn't found after a reboot. Yet, it was found after a second reboot. Why is that? Is a rebuild of initramfs triggered somehow? What I don't understand is: I have an identical machine that I installed under 6.2 a while back, and kept up to date, and it doesn't have this problem. However, it tells me it uses version v2.1.11 (July 20, 2011) of the driver, how is that possible? # grep bnx2 /var/log/messages Apr 23 17:10:03 localhost kernel: bnx2: Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.1.11 (July 20, 2011) Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1a.fw Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-rv2p-09-6.0.17.fw Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: eth0: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express found at mem da000000, IRQ 36, node addr 78:2b:cb:67:3f:b6 [...] # modinfo /lib/modules/2.6.32-220.13.1.el6.x86_64/kernel/drivers/net/bnx2.ko filename: /lib/modules/2.6.32-220.13.1.el6.x86_64/kernel/drivers/net/bnx2.ko firmware: bnx2/bnx2-rv2p-09ax-6.0.17.fw firmware: bnx2/bnx2-rv2p-09-6.0.17.fw firmware: bnx2/bnx2-mips-09-6.2.1a.fw firmware: bnx2/bnx2-rv2p-06-6.0.15.fw firmware: bnx2/bnx2-mips-06-6.2.1.fw version: 2.1.11 license: GPL description: Broadcom NetXtreme II BCM5706/5708/5709/5716 Driver [...] # lspci -v -s 01:00.1 01:00.1 Ethernet controller: Broadcom Corporation NetXtreme II BCM5716 Gigabit Ethernet (rev 20) Subsystem: Dell PowerEdge R410 BCM5716 Gigabit Ethernet Flags: bus master, fast devsel, latency 0, IRQ 48 Memory at dc000000 (64-bit, non-prefetchable) [size=32M] Capabilities: [48] Power Management version 3 Capabilities: [50] Vital Product Data Capabilities: [58] MSI: Enable- Count=1/16 Maskable- 64bit+ Capabilities: [a0] MSI-X: Enable+ Count=9 Masked- Capabilities: [ac] Express Endpoint, MSI 00 Capabilities: [100] Device Serial Number 78-2b-cb-ff-fe-67-3f-b7 Capabilities: [110] Advanced Error Reporting Capabilities: [150] Power Budgeting <?> Capabilities: [160] Virtual Channel <?> Kernel driver in use: bnx2 Kernel modules: bnx2

4 13

ldap, 2.3 primary, 2.4 secondary
by aurfalien 25 Apr '12

25 Apr '12

Hi all, Is it possible to use a 2.3 OpenLDAP primary while having a 2.4 OpenLDAP secondary? Currently I have all at 2.3 (Centos 5) but am needing to up a remote facility to Centos 6 before doing the main facility to 6. Hoping I can mix and match but it looks like I may not be able to. My LDAP secondaries pull the DB over pretty frequently so I would be doing the same thing here. I would have asked the OpenLDAP list but you are much nicer to an order of magnitude, seriously. Thanks in advance, - aurf

2 2

strange partitioning problem
by Boris Epstein 25 Apr '12

25 Apr '12

Hello listmates, Here's I am, trying to install Centos 6.2 64-bit on a server with 24 TB of disk RAIDed as RAID 6. So I get this 18 TB disk (the RAID is recognized as one disk) where I am trying to put my OS. And I can create a couple of partitions - let us say I defiine a 150 GB swap, a 150 GB "/", a 100 GB "/var". So far so good. Then I try to define the next one, say, a 100 GB "/tmp" and get a message stating there is not enough disk space whereas I still have over 18 TB free and the installation interface reflects that accurately! I am at a loss. Is that something related to the sheer size of the disk? Why would this happen - especially at so basic a stage of the process? At any rate, any help or advice would be greatly appreciated. Regards, Boris.

9 28

Re: [CentOS] [CentOS-announce] CESA-2012:0465 Critical CentOS 5 samba Update
by James A. Peltier 24 Apr '12

24 Apr '12

Any idea about samba3x packages? Are they vulnerable? ----- Original Message ----- | | CentOS Errata and Security Advisory 2012:0465 Critical | | Upstream details at : | http://rhn.redhat.com/errata/RHSA-2012-0465.html | | The following updated files have been uploaded and are currently | syncing to the mirrors: ( sha256sum Filename ) | | i386: | 50fc234754d886f8147c22ed2b034d1f7be84dd78c10a8280699265a9c542cfa | libsmbclient-3.0.33-3.39.el5_8.i386.rpm | 62c20ba55a5213be09a2250454274f1fbf6aa854e84d78aaa1f75aec5d2a1920 | libsmbclient-devel-3.0.33-3.39.el5_8.i386.rpm | 294d346782344d32018a02ac25c9def811cbaced00ce19c0ca7c193d4f68d0c0 | samba-3.0.33-3.39.el5_8.i386.rpm | b792d801b4d57882b7c3f398d44b378446d6be48a07b12b265f07dc25564db13 | samba-client-3.0.33-3.39.el5_8.i386.rpm | 77a3666353bbc27ff71b1d4e34882459c5b440f783f21bb3c0adc3898ef501fb | samba-common-3.0.33-3.39.el5_8.i386.rpm | 1bea83056056c3da0dc568f13655c61c6b14f56957e7180aaaa4d6d8f26f7c82 | samba-swat-3.0.33-3.39.el5_8.i386.rpm | | x86_64: | 50fc234754d886f8147c22ed2b034d1f7be84dd78c10a8280699265a9c542cfa | libsmbclient-3.0.33-3.39.el5_8.i386.rpm | 61b5237a09f59a445730e994517ad565fb24da1e9bf07b5e6b7b8c80ac6ca588 | libsmbclient-3.0.33-3.39.el5_8.x86_64.rpm | 62c20ba55a5213be09a2250454274f1fbf6aa854e84d78aaa1f75aec5d2a1920 | libsmbclient-devel-3.0.33-3.39.el5_8.i386.rpm | 5c973b1c9c0a986989805afe6f600a48a76d9d6175e92896065591795516a157 | libsmbclient-devel-3.0.33-3.39.el5_8.x86_64.rpm | 55ee35ca8dc332e0bea6299ce2eed90d7b9460ae312a8abf42822cd0a737c555 | samba-3.0.33-3.39.el5_8.x86_64.rpm | 70200f37cfe741d94e9bb9060f9f2128d08a90ac6b6674f97a9adb474ea3f41b | samba-client-3.0.33-3.39.el5_8.x86_64.rpm | 77a3666353bbc27ff71b1d4e34882459c5b440f783f21bb3c0adc3898ef501fb | samba-common-3.0.33-3.39.el5_8.i386.rpm | 16e9165d7d3f3099d45f6389a58f7ebc87642856414506728e5d8f0466e343a3 | samba-common-3.0.33-3.39.el5_8.x86_64.rpm | e4f6f354d8a38ffb4f17af0be3736be3a9e055ba3e6ddff5f21a547fb8924d4f | samba-swat-3.0.33-3.39.el5_8.x86_64.rpm | | Source: | 4e4b6d761aed021020fe8ac82340ba78f835fc4610516ee8564da347ac735e22 | samba-3.0.33-3.39.el5_8.src.rpm | | | | -- | Johnny Hughes | CentOS Project { http://www.centos.org/ } | irc: hughesjr, #centos(a)irc.freenode.net | | _______________________________________________ | CentOS-announce mailing list | CentOS-announce(a)centos.org | http://lists.centos.org/mailman/listinfo/centos-announce | -- James A. Peltier Manager, IT Services - Research Computing Group Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax : 778-782-3045 E-Mail : jpeltier(a)sfu.ca Website : http://www.sfu.ca/itservices http://blogs.sfu.ca/people/jpeltier Success is to be measured not so much by the position that one has reached in life but as by the obstacles they have overcome. - Booker T. Washington

3 2

"rename3" ethernet NIC?
by Boris Epstein 24 Apr '12

24 Apr '12

Hello listmates, Bizarrely enough, I ended up with what I intended to be called "eth1" being called "rename3". Would anybody have any idea what the cause could be of this? Thanks. Boris.

2 1

CentOS-announce Digest, Vol 86, Issue 13
by centos-announce-request＠centos.org 24 Apr '12

24 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0509 Moderate CentOS 6 wireshark Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 24 Apr 2012 14:27:48 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0509 Moderate CentOS 6 wireshark Update To: centos-announce(a)centos.org Message-ID: <20120424142748.GA3076(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0509 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0509.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 12b6fefeaee07dc4f84110f2ff66e66bb6774126dcecc5e0e672c4d9ba64b077 wireshark-1.2.15-2.el6_2.1.i686.rpm 0a85aa2c82986479e5eb55e6918d84d664c8af4bab6fe921f28e2e59fc590f56 wireshark-devel-1.2.15-2.el6_2.1.i686.rpm 8ab9026910b899d1e2071d97dea4a15dd3ee1868121defa8c0f6bd5441c7455b wireshark-gnome-1.2.15-2.el6_2.1.i686.rpm x86_64: 12b6fefeaee07dc4f84110f2ff66e66bb6774126dcecc5e0e672c4d9ba64b077 wireshark-1.2.15-2.el6_2.1.i686.rpm f3353c8677ccb128eb06be6ebbb1ea5dfc3084c176daa0ef558a1b2f35dae9aa wireshark-1.2.15-2.el6_2.1.x86_64.rpm 0a85aa2c82986479e5eb55e6918d84d664c8af4bab6fe921f28e2e59fc590f56 wireshark-devel-1.2.15-2.el6_2.1.i686.rpm 3fc3a7e6bff12511b4dbca45d502123951fe668e90caee7518ea0493265183cd wireshark-devel-1.2.15-2.el6_2.1.x86_64.rpm b9e73d61563e32d94f4bd73d139aba9986796ee6f25bb40887854be7b64e95ab wireshark-gnome-1.2.15-2.el6_2.1.x86_64.rpm Source: fcec8718aa049adbb5d3071754f19dc0ab494b3d9e359e7c460c33c86800f08d wireshark-1.2.15-2.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 13 ***********************************************

1 0

About audit2allow generated rules
by Min Wang 24 Apr '12

24 Apr '12

HI I have something in /var/log/audit/audit.log like: avc: denied { write } for pid=23739 comm="httpd" name="renderd.sock" dev=dm-0 ino=1183752 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file use audit2allow it generates something like this: allow httpd_t var_run_t:sock_file write; Is the rule too liberal? that means httpd_t can write any var_run_t 's sock_file? Or I miss-understand something? Should it only allow httpd_t to write this specific render.sock file? If so, what's the right way to do? Thanks. min

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss