- Discuss - lists.centos.org

Anyone recognize "www-mysql"?
by Adam Tauno Williams 07 Mar '12

07 Mar '12

I'm transitioning someone's quite old server [Debian] to a new CentOS6 host. All going pretty well. But they server up some functionality using CGI scripts via Apache that use something referred to on the Debian box as the www-mysql package? This a binary that executes HTML pages containing embedded SQL statements. Anyone know where the source for this can be found or if it has a more specific name? The 'helpfulness' of search engines is getting in the way of finding the provenance of this code. -- System & Network Administrator [ LPI & NCLA ] <http://www.whitemiceconsulting.com> OpenGroupware Developer <http://www.opengroupware.us> Adam Tauno Williams

5 4

Re: [CentOS] md raid 10
by m.roth＠5-cent.us 07 Mar '12

07 Mar '12

Les Mikesell wrote: > On Wed, Mar 7, 2012 at 3:23 PM, <m.roth(a)5-cent.us> wrote: >> >>>> a) You think I, or a *lot* of other folks, are going to do that at home? (Please - I'm trying to get my fiancee to at *least* go from *shudder* Vista to Win7) >>> >>> If you leave them on, add up the power cost of running an old box for years. >> >> Sorry, that doesn't work either: *everything* new seems to need a lot more power than the older stuff. Certainly, last time I upgraded my own system, I had to buy one that was 150% the power of the old one. > > That was probably before power became a big thing for servers - in most cases now power and cooling are the limiting factors for > expansion in a data center. Most of the new servers use 2.5" drives and while they might still use as much power per 1u of space due to using more blades in a chassis or having more CPUs and RAM, we get much more performance from the same space and power consumption. It's not such a big deal for desktops, but you can get small low power systems if you look around - or just use a laptop that will sleep when you close the lid. Heh. Many of the new servers we are getting are all on the order of 48 or 64 cores, and they eat and drink power. The same UPS that would handle six 4 or 8 core boxes can handle *three*, if we're lucky, when a clustering job's running.... mark

1 0

Re: [CentOS] md raid 10
by Les Mikesell 07 Mar '12

07 Mar '12

On Wed, Mar 7, 2012 at 2:09 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > >> If the future continues anything like the past, you'll be be able to >> buy something new with twice the speed and 10x the space by then and >> be better off starting over than allocating more than you need today. > > you are re-installing your servers permanently? For an unfortunately large number, yes. > i do not, i move the VMware-Images to new hosts / SAN storages > without any interruption and if you maintain them well this > works over many years and dist-upgrades Our servers dealing with financial exchange data live on the bleeding edge of capacity and can't afford the overhead of virtualization. So we end up replacing the backend servers wholesale every few years, re-purposing the older generation for less demanding tasks. But, within the realm of hardware with compatible drivers there's not a whole lot of difference in the effort to copy a VM image or a hardware image with clonezilla or a similar approach. I agree that VMware is great where it works, though. -- Les Mikesell lesmikesell(a)gmail.com

1 0

Re: [CentOS] md raid 10
by Miguel Medalha 07 Mar '12

07 Mar '12

> i then have to redo my entire array...and loose space inside the > array. Plus if i raid1 it then i only have two bootable disks..at > least this way i have 4 bootable disks..:) Lose space? 100 or 200MB? Why the heck wouldn't you be able to spare 100 or 200MB of the gigantic size of today's drives?

1 0

hardware issues? driver issues?
by m.roth＠5-cent.us 07 Mar '12

07 Mar '12

Got a bunch of servers from Penguin. Supermicro m/b's H8QG6. We put a 3tb drive in for additional workspace for the users, and some of them won't read, others will go for weeks, then spit out DRDY errors. lshw shows the controller as an ATI SB7x0/SB8x0/SB9x0 SATA. I did notice that it shows *-storage description: SATA controller product: SB7x0/SB8x0/SB9x0 SATA Controller [AHCI mode] vendor: ATI Technologies Inc <snip> width: 32 bits ^^^^^^^^^^^^^^ clock: 66MHz ^^^^^^^^^^^^ capabilities: storage pm ahci_1.0 bus_master cap_list >From /var/log/dmesg: pci 0000:00:0d.0: PME# supported from D0 D3hot D3cold pci 0000:00:0d.0: PME# disabled pci 0000:00:11.0: reg 10 io port: [0xd000-0xd007] pci 0000:00:11.0: reg 14 io port: [0xc000-0xc003] pci 0000:00:11.0: reg 18 io port: [0xb000-0xb007] pci 0000:00:11.0: reg 1c io port: [0xa000-0xa003] pci 0000:00:11.0: reg 20 io port: [0x9000-0x900f] pci 0000:00:11.0: reg 24 32bit mmio: [0xdfefa400-0xdfefa7ff] <...> ahci 0000:00:11.0: version 3.0 alloc irq_desc for 22 on node 0 alloc kstat_irqs on node 0 ahci 0000:00:11.0: PCI INT A -> GSI 22 (level, low) -> IRQ 22 ahci 0000:00:11.0: AHCI 0001.0100 32 slots 4 ports 3 Gbps 0xf impl SATA mode ahci 0000:00:11.0: flags: 64bit ncq sntf ilck pm led clo pmp pio slum part ccc <...> ata1: SATA max UDMA/133 abar m1024@0xdfefa400 port 0xdfefa500 irq 22 ata2: SATA max UDMA/133 abar m1024@0xdfefa400 port 0xdfefa580 irq 22 I've included the above, because I note the 32bit mmio, but the 64bit flag; also the clock speed for the controller. Now, I've been working on one with Penguin. I noticed one thing, that it was set to native IDE. After googling, I saw that the most recent spec, which included EIDE, should be good to petabytes... but I tried resetting it to AHCI anyway. The user ran one job, ok... then another last night, and it's spitting the same errors. In /var/log/messages, I see JBD: detected IO errors while flushing file data: Mar 7 00:53:28 <server> kernel: ata2.00: exception Emask 0x0 SAct 0x3 SErr 0x0 action 0x6 frozen Mar 7 00:53:28 <server> kernel: ata2.00: failed command: WRITE FPDMA QUEUED Mar 7 00:53:28 <server> kernel: ata2.00: cmd 61/08:00:72:4a:a4/00:00:ae:00:00/40 tag 0 ncq 4096 out Mar 7 00:53:28 <server> kernel: res 40/00:04:20:00:00/00:00:00:00:00/40 Emask 0x4 (timeout) Mar 7 00:53:28 <server> kernel: ata2.00: status: { DRDY } <...> Mar 7 00:53:28 <server> kernel: ata2: hard resetting link Mar 7 00:53:33 <server> kernel: ata2: SATA link up 3.0 Gbps (SStatus 123 SControl 300) Mar 7 00:53:33 <server> kernel: ata2.00: configured for UDMA/133 Mar 7 00:53:33 <server> kernel: ata2.00: device reported invalid CHS sector 0 Mar 7 00:53:33 <server> kernel: ata2: EH complete Notice the "device reported invalid CHS sector 0". The drive does have a GPT rather than an MBR. So, has anyone else seen similar problems, or have some suggestions as to something I can try? Penguin's still waiting for a response from Supermicro, and has escalated.... mark

2 2

Recent kernel update vs usb disk
by wwp 07 Mar '12

07 Mar '12

Hello there, since kernel update 2.6.32-220.4.1.el6, one of my USB external SATA drives is not mounting. With kernel 2.6.32-131.21.1.el6, it auto-mounts in GNOME desktop when I plug the disk. When I plug the disk, this wakes it up and I see in /var/log/messages: kernel: usb 2-4.2: USB disconnect, address 11 kernel: usb 2-2: new high speed USB device using ehci_hcd and address 13 kernel: usb 2-2: New USB device found, idVendor=1ca1, idProduct=18a9 kernel: usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 kernel: usb 2-2: Product: Usb Sata Bridge kernel: usb 2-2: Manufacturer: SYMWAVE kernel: usb 2-2: SerialNumber: 3559443452593133 kernel: usb 2-2: configuration #1 chosen from 1 choice kernel: scsi11 : SCSI emulation for USB Mass Storage devices but it's not getting mounted. Any hint where I could grab more information? Regards, -- wwp

2 4

CentOS 6.2 software raid 10 with LVM - Need help with degraded drive and only one MBR
by Jonathan Vomacka 07 Mar '12

07 Mar '12

CentOS Community, I have a dedicated server with 4 hard drives in a RAID 10 software configuration running LVM. My OS is CentOS 6.2. Earlier today, I rebooted my system and my system did not come back online. I opened a ticket with my datacenter who informed me that one of my hard drives is no longer recognized by the bios and has failed. I was told that an OS reinstall was needed. I don't understand why a reinstall would be necessary when the drives are in RAID 10. Apparently when the datacenter did the initial OS install, they ONLY installed the MBR on one drive instead of all 4 leaving the other 3 drives unbootable. Is this a way to salvage this with a liveCD without having to reload the OS? This server is a very important mail server running OpenLDAP and MySQL. I figured maybe I could install the MBR using a liveCD which may fix the system. If an OS reload is the ONLY option, is there a way to reload it without touching the /var or /opt filesystems? (yes they were created as a seperate partition) however I am not sure if OpenLDAP or MySQL installs anything to /usr which I would be completely screwed... Please help

14 29

kickstart partitioning and cylinder boundary
by Erez Zarum 07 Mar '12

07 Mar '12

As I understand anaconda uses parted to partition (starting from centos 6), using this as example (kickstart configuration file): clearpart --all --drives=sda --initlabel part /boot --asprimary --size=200 --fstype=ext2 --ondisk=sda part swap --asprimary --size=16384 --fstype=swap --ondisk=sda part / --asprimary --size=512000 --fstype=ext4 --ondisk=sda part /scratch --asprimary --size=1 --grow --fstype=ext4 --ondisk=sda I can see no problems in parted: GNU Parted 2.1 Using /dev/sda Welcome to GNU Parted! Type 'help' to view a list of commands. (parted) p Model: Adaptec OS (scsi) Disk /dev/sda: 1999GB Sector size (logical/physical): 512B/512B Partition Table: msdos Number Start End Size Type File system Flags 1 1049kB 211MB 210MB primary ext2 boot 2 211MB 537GB 537GB primary ext4 3 537GB 554GB 17.2GB primary linux-swap(v1) 4 554GB 1999GB 1445GB primary ext4 Yet, fdisk –l report: Disk /dev/sda: 1999.3 GB, 1999307276288 bytes 255 heads, 63 sectors/track, 243068 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x0006e122 Device Boot Start End Blocks Id System /dev/sda1 * 1 26 204800 83 Linux Partition 1 does not end on cylinder boundary. /dev/sda2 26 65297 524288000 83 Linux /dev/sda3 65297 67386 16777216 82 Linux swap / Solaris /dev/sda4 67386 243069 1411177472 83 Linux As you can see, /dev/sda1 End at 26 and /dev/sda2 Start at 26. But, fdisk –lu report otherwise: Disk /dev/sda: 1999.3 GB, 1999307276288 bytes 255 heads, 63 sectors/track, 243068 cylinders, total 3904897024 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x0006e122 Device Boot Start End Blocks Id System /dev/sda1 * 2048 411647 204800 83 Linux Partition 1 does not end on cylinder boundary. /dev/sda2 411648 1048987647 524288000 83 Linux /dev/sda3 1048987648 1082542079 16777216 82 Linux swap / Solaris /dev/sda4 1082542080 3904897023 1411177472 83 Linux I assume I can ignore it and it’s a bug on fdisk? This does not happen on 5.7.

2 1

gdm in 6.2 missing keyboard menu?
by James Pearson 07 Mar '12

07 Mar '12

I have a box running 6.0 that gives a keyboard layout menu via gdm when logging in. I've just installed a 6.2 box, but there is no keyboard layout menu I've found a bugzilla entry at: <https://bugzilla.redhat.com/show_bug.cgi?id=746923> which says that with gdm in 6.2, it now only shows keyboard layouts listed in /etc/sysconfig/keyboard However, I've added a list of keyboard layouts as suggested by that BZ, but I still don't get a keyboard menu. Is there anything else I've missed? Thanks James Pearson

2 1

Re: [CentOS] LibreOffice rpm's vs Centos testing repo
by James B. Byrne 07 Mar '12

07 Mar '12

On Mon, February 27, 2012 12:10, nux(a)li.nux.ro wrote: > Ljubomir Ljubojevic writes: > >> Those packages do not need to stay in testing repo. All >> that is >> necessary is for several people use packages from >> testing repo and >> report that they are working without issues to the >> Centos-devel mailing >> list in this thread: >> http://lists.centos.org/pipermail/centos-devel/2011-September/008159.html >> , >> and packages will be moved to Extras repo. > > Hi, > > Several people have tested this successfully. You can even > get slightly > newer packages from here: > http://li.nux.ro/download/nux/libreoffice/el6/x86_64/ that > Karanbir hasn't > yet got around to putting in testing (there's a *-release > rpm there, too). > I would advise against using libeoffice.org supplied RPMs > at this stage as > RHEL are also getting ready to release LO 3.4.5 in EL6 > that will (hopefully) > gracefully upgrade my packages. > For what it is worth, I am running LibreOffice 3.5.0 installed from rpms provided by the document foundation and having no troubles with write or calc. I do not really use the other parts so on those I cannot comment. In fact, the experience is far better than I had with OpenOffice-3.3, which was so bad I went back to the 3.2 version provided with CentOS. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

Software RAID1 with CentOS-6.2
by Kahlil Hodgson 07 Mar '12

07 Mar '12

Hello, Having a problem with software RAID that is driving me crazy. Here's the details: 1. CentOS 6.2 x86_64 install from the minimal iso (via pxeboot). 2. Reasonably good PC hardware (i.e. not budget, but not server grade either) with a pair of 1TB Western Digital SATA3 Drives. 3. Drives are plugged into the SATA3 ports on the mainboard (both drives and cables say they can do 6Gb/s). 4. During the install I set up software RAID1 for the two drives with two raid partitions: md0 - 500M for /boot md1 - "the rest" for a physical volume 5. Setup LVM on md1 in the standard slash, swap, home layout Install goes fine (actually really fast) and I reboot into CentoS 6.2. Next I ran yum update, added a few minor packages and performed some basic configuration. Now I start to get I/O errors on printed on the console. Run 'mdadm -D /dev/md1' and see the array is degraded and /dev/sdb2 has been marked as faulty. Okay, fair enough, I've got at least one bad drive. I boot the system from a live usb and run the short and long SMART tests on both drive. No problems reported but I know that can be misleading, so I'm going to have to gather some evidence before I try to return these drives. I run badblocks in destructive mode on both drives as follows badblocks -w -b 4096 -c 98304 -s /dev/sda badblocks -w -b 4096 -c 98304 -s /dev/sdb Come back the next day and see that no errors are reported. Er thats odd. I check the SMART data in case badblocks activity has triggered something. Nope. Maybe I screwed up the install somehow? So I start again and repeat the install process very carefully. This time I check the raid array straight after boot. mdadm -D /dev/md0 - all is fine. mdadm -D /dev/md1 - the two drives are resyncing. Okay, that is odd. The RAID1 array was created at the start of the install process, before any software was installed. Surely it should be in sync already? Googled a bit and found a post were someone else had seen same thing happen. The advice was to just wait until the drives sync so the 'blocks match exactly' but I'm not really happy with the explanation. At this rate its going to take a whole day to do a single minimal install and I'm sure I would have heard others complaining about the process. Anyway, I leave the system to sync for the rest of the day. When I get back to it I see the same (similar) I/O errors on the console and mdadm shows the RAID array is degraded, /dev/sdb2 has been marked as faulty. This time I notice that the I/O errors all refer to /dev/sda. Have to reboot because the fs is now readonly. When the system comes back up, its trying to resync the drive again. Eh? Any ideas what is going on here? If its bad drives, I really need some confirmation independent of the software raid failing. I thought SMART or badblocks give me that. Perhaps it has nothing to do with the drives. Could a problem with the mainboard or the memory cause this issue? Is it a SATA3 issue? Should I try it on the 3Gb/s channels since there's probably little speed difference with non-SSDs? Cheers, Kal

11 18

Dovecot GUI
by Timothy Murphy 06 Mar '12

06 Mar '12

Is there a web-interface to dovecot under CentOS-6? I want to create a top-level folder (ie at the same level as Inbox) but this doesn't seem to be possible from KMail running on a remote Fedora-6 laptop. I was browsing through the dovecot wiki, and I saw some pictures which seemed to be from a dovecot GUI, but I could not find the name of this program. Alternatively, can I simply create the folder I want on the CentOS dovecot server? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

9 22

cron job not running
by Tim Dunphy 06 Mar '12

06 Mar '12

hello list, I am attempting to backup a centos 5.4 (x86_64) server running mysql with a cron job. Here's how the cron job looks: [root@cloud:/home/bluethundr/backupdb] #crontab -l * 3 * * * /usr/bin/mysqldump jfwiki > /home/bluethundr/backupdb/wiki-$(date +%Y%m%d).sql However if I run the command from the command line it seems to work fine. If I grep syslog for cron this is what I've found: Mar 4 22:12:13 domU-12-31-38-07-49-CC syslog-ng[1174]: Log statistics; processed='center(queued)=16141', processed='center(received)=16141', processed='destination(d_boot)=0', processed='destination(d_auth)=3', processed='destination(d_cron)=131', processed='destination(d_mlal)=0', processed='destination(d_kern)=0', processed='destination(d_mesg)=200', processed='destination(d_cons)=0', processed='destination(d_spol)=0', processed='destination(d_mail)=15807', processed='source(s_sys)=16141' I've tried bouncing the crond service but even if I set the cron job to run every minute the backups don't run. I was hoping someone out there might have some advice n how to solve this problem. thanks -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

6 6

NFS Selinux issues
by Bradley Leonard 06 Mar '12

06 Mar '12

I'm having a strange problem with selinux and the mounting of a nfs directory. I'm specifying the security context as part of the mount command, yet the security context still shows nfs. The mount shows what the security context should be: [root@clienthost ~]# mount serverhost:/usr/local on /usr/local type nfs4 (rw,context="system_u:object_r:usr_t:s0",hard,intr,addr=serverhost,clientaddr=clienthost) yet the directory permissions show the security context of nfs: [root@clienthost ~]# ls -dZ /usr/local drwxr-xr-x. root root system_u:object_r:nfs_t:s0 /usr/local My /etc/fstab entry is: serverhost:/usr/local /usr/local nfs context=system_u:object_r:usr_t:s0,rw,hard,intr 0 0 This is causing some issues with some of my scripts. Both the client and server are 6.2 servers. The client is a virtual image running on the server. The only clue that i have is system logger shows: Mar 6 13:44:39 clienthost kernel: SELinux: initialized (dev 0:14, type nfs4), uses genfs_contexts Mar 6 13:44:39 clienthost kernel: SELinux: initialized (dev 0:15, type nfs4), uses genfs_contexts I can't find any errors anywhere else on either my client or server. There is nothing in the audit logs on either host. Does anybody have any ideas? Brad -- Bradley Leonard EMail: bradley at stygianresearch.com Rob - "The hills are alive with the..the..sound of monkeys?" Bucky - "It's in the key of delicious." Life is simple. Humans make it complicated. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

CentOS 6 connection with sieveshell failed
by Michael Nausch 06 Mar '12

06 Mar '12

Hello, I've some difficulties with my installation, specially with sieveshell. O.K., just have a look on my site: intranet : 10.0.10.0/24 DMZ : 10.0.0.0/24 My IMAP-server is based on DMZ-site on my host vml000070 (10.0.0.70): # netstat -penlut Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 0 137240 25617/cyrus-master tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 0 137252 25617/cyrus-master tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 8777 1314/sshd tcp 0 0 0.0.0.0:24 0.0.0.0:* LISTEN 0 137258 25617/cyrus-master tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 0 8977 1392/master tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 0 137246 25617/cyrus-master I've no problem to connect with sieveshell on my IMAP-host: [django@vml000070 ~]$ sieveshell --user=django --authname=django 127.0.0.1:2000 connecting to 127.0.0.1:2000 Please enter your password: BUT, if I try to connect from an other host inside my DMZ a see this error: [django@vml000090 ~]$ sieveshell --user=django --authname=django 10.0.0.70:2000 connecting to 10.0.0.70:2000 unable to connect to server at /usr/bin/sieveshell line 170. O.K., so far so "good" :( Just look, I can connect with telnet to port 2000 on my IMAP-host: [django@vml000090 ~]$ telnet 10.0.0.70 2000 Trying 10.0.0.70... Connected to 10.0.0.70. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6_1.4" "SASL" "CRAM-MD5 DIGEST-MD5" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK SELinux is deactivated and the personal firewall on my IMAP-Host accepts connections to Port: 143, 993 and 2000: [root@vml000070 ~]# iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:143 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:993 ACCEPT tcp -- 10.0.0.80 0.0.0.0/0 state NEW tcp dpt:24 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2000 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) target prot opt source destination And here comes the strangest thing I can report: If I try to connect from my intranet to my IMAP-Server on port 2000: [django@pml010002 ~]$ sieveshell --user=django --authname=django 10.0.0.70:2000 connecting to 10.0.0.70:2000 Please enter your password: IT WORKS! Im very very confused! :( O.K. all hosts are based on CentOS: DMZ-host: [django@vml000090 ~]$ cat /etc/redhat-release CentOS release 6.2 (Final) [root@vml000090 ~]# yum list cyrus-imapd-utils Installed Packages cyrus-imapd-utils.x86_64 2.3.16-6.el6_1.4 IMAP-host [django@vml000070 ~]$ cat /etc/redhat-release CentOS release 6.2 (Final) [root@vml000070 ~]# yum list cyrus-imapd-utils Installed Packages cyrus-imapd-utils.x86_64 2.3.16-6.el6_1.4 [root@vml000070 ~]# yum list cyrus-imapd Installed Packages cyrus-imapd.x86_64 2.3.16-6.el6_1.4 Intranet-host [django@pml010002 ~]$ cat /etc/redhat-release CentOS release 6.2 (Final) [root@pml010002 ~]# yum list cyrus-imapd-utils Installed Packages cyrus-imapd-utils.x86_64 2.3.16-6.el6_1.4 I'm very confused about that behavior. Why it is possible to connet to Port 2000 from an intranet-host and why it fails inside my DMZ? Any ideas ond/or hints? ttyl Django -- "Bonnie & Clyde der Postmaster-Szene!" approved by Postfix-God http://wetterstation-pliening.info http://dokuwiki.nausch.org http://wiki.piratenpartei.de/Benutzer:Django

1 0

CentOS5 lxc guest under CentOS6 host
by C. L. Martinez 06 Mar '12

06 Mar '12

Hi all, Somebody have tried to run a centos5 lxc guest under centos6 host?? Is it possible?? Thanks.

2 2

restrict postfix to only certain users getting incoming mail
by Bob Hoffman 06 Mar '12

06 Mar '12

Perhaps I am trying to do the impossible. centos6, spamassassin, procmail, dovecot, postfix. Postfix, by default, accepts all incoming mail to any user listed in the shadow/passwd and alias files. I cannot find a way to stop that without manually blocking each non wanted user (like nobody, apache) without killing local delivery. For most of the users listed in those files, who cares. However for one, root, this is a massive issue. Root gets a lot of mail from errors on the system. Preventing local delivery (or through the alias file, delivery through root to another user) makes root never receive those important mails. Not preventing root from incoming mails means root(a)example.com can be slammed with spam. Local and external mail all seem to go through all of the programs (postfix, procmail, spamassassin, dovecot). Local delivery of mails is needed for root. What I would like is to just tell postfix to only allow incoming mail for user1 and user2 and reject all...but only from external sources, not locally sent mail. Postfix does seem to allow you to limit who can send mail out of the server though... I have 2 books on postfix here and spent many days online but I do not see the solution short of /dev/null or reject of all mail, local or external, of root. perplexed.

6 7

Baffled by selinux
by Lars Hecking 06 Mar '12

06 Mar '12

Apache DocumentRoot on an NFS directory: [root@localhost ~]# service httpd start Starting httpd: Warning: DocumentRoot [/home/www/html] does not exist Syntax error on line 292 of /etc/httpd/conf/httpd.conf: DocumentRoot must be a directory [FAILED] [root@localhost ~]# After some research, I found this (dated) link http://www.redhat.com/archives/rhl-list/2005-July/msg02443.html and followed the suggestion, setsebool -P use_nfs_home_dirs=1. But I still can't start httpd. Not sure what to make of the audit log: type=AVC msg=audit(1329395502.678:61926): avc: denied { search } for pid=25674 comm="httpd" name="" dev=0:23 ino=3471615 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=system_u:object_r:nfs_t:s0 tclass=dir type=SYSCALL msg=audit(1329395502.678:61926): arch=c000003e syscall=4 success=no exit=-13 a0=7fef342bc080 a1=7fffaf747370 a2=7fffaf747370 a3=7fef30c65c30 items=0 ppid=25673 pid=25674 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="httpd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null) type=AVC msg=audit(1329395502.681:61927): avc: denied { search } for pid=25674 comm="httpd" name="" dev=0:23 ino=3471615 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=system_u:object_r:nfs_t:s0 tclass=dir type=SYSCALL msg=audit(1329395502.681:61927): arch=c000003e syscall=4 success=no exit=-13 a0=7fef342eae68 a1=7fffaf747630 a2=7fffaf747630 a3=50 items=0 ppid=25673 pid=25674 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="httpd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null)

6 9

routing and virtual machines: how to access dmz if bridged to two networks
by Peter Peltonen 05 Mar '12

05 Mar '12

I am not quite sure if this issue relates to iptables, routing or Xen virtual machines. Too many variables for my simple mind, so I'm asking some advice :) This is my network setup: Internet --- eth2 + CentOS dom0 / firewall / router + eth1 (xenbr1) --- LAN with private IPs --- separate file server and workstations + eth0 (xenbr0) | DMZ network with public IPs --- CentOS6 domU web server Lets assume my dom0's eth2 public ip is 1.2.3.33 and my dmz network 11.22.33.96/255.255.255.224 . I have created NAT from my LAN with iptables. You can see my /etc/sysconfig/iptables here: http://pastebin.com/1FqSTvPH And this is my routing table: # route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 1.2.3.32 0.0.0.0 255.255.255.252 U 0 0 0 eth2 11.22.33.96 0.0.0.0 255.255.255.224 U 0 0 0 xenbr0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 xenbr1 169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 eth2 169.254.0.0 0.0.0.0 255.255.0.0 U 1005 0 0 xenbr0 169.254.0.0 0.0.0.0 255.255.0.0 U 1006 0 0 xenbr1 0.0.0.0 1.2.3.34 0.0.0.0 UG 0 0 0 eth2 My goal: To access NFS shares on a (non-virtualized) file server in the LAN network from the domU web server in the DMZ network. What I tried: I attached the domU to both bridges using this Xen config: vif = [ "mac=00:0c:29:de:3a:fe,bridge=xenbr0","mac=00:0C:29:76:19:85,bridge=xenbr1" ] and then created two eth interfaces inside the domU mapping to the MAC addresses above, giving eth1 an IP from the DMZ (11.22.33.111) and giving eth2 an IP from the LAN (192.168.0.12). After this I mounted the NFS share from the file server (192.168.0.2). My problem: If my domU web server is connected to both LAN and DMZ using the two bridges xenbr0 and xenbr1, I can access the NFS share from the domU web server and everything else works as expected, except for one thing -- my workstations in the LAN cannot anymore access the web server: web pages do not open anymore and from the workstations I cannot ping the domU. If the web server domU is only connected to DMZ via xenbr0, the workstations can access it ok. Any advice what I am doing wrong and I could fix my setup? Regards, Peter

1 0

how to find...
by fred smith 05 Mar '12

05 Mar '12

I'm trying to find out from which repo I got xiphos and its matching sword libraries from, and somehow am not finding it. hints, anyone? thanks! -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

5 7

whcih mailing list for mail server issue?
by Bob Hoffman 05 Mar '12

05 Mar '12

Hello, First of all, thanks for the yum-cron config location, did not see that there. That helped get my yum updates to my root user folder. Second, I am not sure where to go with this one. I want to block emails coming in to the server to root@, etc. But not block the cron jobs (and other internal server setups) that send mail to root to be blocked. I am using postfix/dovecot,spamassassin, and procmail. The file from the logwatch is going through the spamassassin so I figure all 4 are going to deal with any internal and external mail sent to root. I can't see a way to say 'stop incoming mails to root' without killing the internal mail delivery use. In fact, I would really like only a few specified users to get incoming mail period, but allow all internal mail to do as it should. Which mailing list should I hit up. Dovecot does the delivery but is totally hooked up with postfix and the rest using maildir/. not sure where to go with this one.

1 0

CentOS 5.8 Critical Samba Update
by Johnny Hughes 05 Mar '12

05 Mar '12

There is a critical update for samba for centos-5.8 ... we are working on CentOS-5.8 right now and I fully expect it to be released in a week or less. For those of you who can not wait for a week, here is the samba critical update: http://people.centos.org/hughesjr/c58-samba/x8664/critical/ http://people.centos.org/hughesjr/c58-samba/i386/critical/ These may or may not work without the rest of 5.8 ... for those who do try them, please provide feedback here in this thread. Thanks, Johnny Hughes

4 6

getting yum-cron to send a mail
by Bob Hoffman 04 Mar '12

04 Mar '12

Hello, On my old centos 5 system I get updates from yum automatically, it sends a mail to root. on my new centos 6 things have changed and it has a thing called 'yum-cron' I have it on and it is working....except I can find no particular file where mailto might be added. The crontab is going to root, but yum-cron has nothing as far as a variable for this. yum-cron has no man page, no documents...not sure what to do on this one. Thinking about just adding 'mailto=root' in the daily and weekly cron job yum-cron has set. Again, it is definitely updating the server (did so this morning, added stuff to the yum log) but no mails. thanks bob

3 2

OT: Documentation for Mailman
by John J. Boyer 04 Mar '12

04 Mar '12

I have Mailman installed on a VPS running Centos to handle mailing lists for my organization. However, I can't find the documentation. So far, one of our consultants has been handling it, but that costs money. At the moment the problem is that I configured a list with config_list, but the changes have not taken effect. Presumably the list must be restarted in some way, but I can't find out how. Thanks, John -- John J. Boyer; President, Chief Software Developer Abilitiessoft, Inc. http://www.abilitiessoft.com Madison, Wisconsin USA Developing software for people with disabilities

2 1

download.fedora.redhat.com down? moved?
by Rob Del Vecchio 02 Mar '12

02 Mar '12

Hello all, I'm trying to install mod_python from the normal channels via RPM, though it seems that download.fedora.redhat.com is down, or moved? DNS reports it does not exist. I've seen multiple references to this domain name including on the site: http://rpm.pbone.net/index.php3/stat/4/idpl/15286937/dir/redhat_el_6/com/mo… Please help? Thank you, Rob

3 3

Re: [CentOS] network problems
by m.roth＠5-cent.us 02 Mar '12

02 Mar '12

Nataraj wrote: > On 03/01/2012 08:15 AM, m.roth(a)5-cent.us wrote: >> We just moved a user, who deals with a *lot* of data, to a new server, since his old NFS home directory was on a disk that had started showing problems. >> >> Now, i/o is about six times slower, my manager reports. <snip> Ok, more info: at this point, it seems obvious that it's an NFSv4 problem, not a network problem: I've created /scratch/foo, exported it, and mounted it on the same machine at /mnt/foo. I then cd to that directory, and unpack a large file which is located in a user's home directory which is NFSv4 mounted. In a native directory, takes about a minute; when I cd to /mnt/foo and do it, it takes about 6.5 min. I've tried setting wsize and rsize to 1M; I've tried noatime, which someone in a post said helped, and nothing I do makes more than a second or two's difference. Clues for the poor? mark

1 0

VSftp, ssl/tls, slight issue with directory listings
by Bob Hoffman 02 Mar '12

02 Mar '12

Centos 6, stock installation, no additional repos added. vsftp works fine in regular mode, going to ssl I got issues. I get as far as 'directory listing' and it dies. It times out and disconnects. file: /etc/sysconfig/iptables-config added: IPTABLES_MODULES="ip_conntrack_ftp" (without this line, ftp normally fails, afraid it may be causing issues with the ssl) iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT again, normal ftp fine. vsftp file below are the additional commands I entered to get ssl/tls up and running. pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES ssl_enable=YES implicit_ssl=yes <--- tried with and without this and the port 21 below listen_port=21 <-- see above allow_anon_ssl=NO force_local_data_ssl=NO <-- set this to yes so I can still test normal functions force_local_logins_ssl=NO ssl_tlsv1=YES ssl_sslv2=NO ssl_sslv3=NO rsa_cert_file=/etc/pki/tls/certs/vsftpd.pem ssl_ciphers=HIGH <-- this was added as I was using filezilla and it wanted different ciphers. without this it would have a tls fatal error, adding this absolved that issue. Now I have tried playing with the settings and in all cases when it can connect it dies at directory listing. Implicit ssl wants 990, but the listen_port directive can tell it to go to 21. Again, full connect, changes folders, dies at trying to display contents of initial folder. I have redone the pem a few times and even moved it in and out of the vsftpd folder just for kicks, no joy. I tried opening port 990 and that made no difference at all (even changing listen_port or leaving it commented out) so, cannot figure what is up. Most online notes are for non-centos 6 and/or generally follow this same set of commands. Most of the debug threads about this issue deal with plain connections and not tls/ssl. I can find no solution yet, has anyone out there secured their vsftp server and wanna throw me a bone? Only this and two other things prevent me from throwing out a nice video tutorial of how to go from a stock install to a fully armed and operational webserver, ssl everywhere, etc.... all nighter and no where with this one. At least not yet.

3 7

CentOS-announce Digest, Vol 85, Issue 2
by centos-announce-request＠centos.org 02 Mar '12

02 Mar '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0344 CentOS 6 nss Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Mar 2012 20:30:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0344 CentOS 6 nss Update To: centos-announce(a)centos.org Message-ID: <20120301203010.GA14849(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0344 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0344.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4f067da59c4dbda049f7387b8c542f02447611216cfaee1b3694f0cda2ebec6d nss-3.13.1-7.el6_2.i686.rpm 3162125b2e15fd326f339b07775bea7d1137d80653971eb6e56a325b24362845 nss-devel-3.13.1-7.el6_2.i686.rpm aded40a91dce15703060cb2b536415ca3dd0566f430de625ea4bb3a59801278e nss-pkcs11-devel-3.13.1-7.el6_2.i686.rpm ba17aaa1e7c3ae7c44d0eefef7feb1f81b4ce408c8435bb81b35d593c1570c84 nss-sysinit-3.13.1-7.el6_2.i686.rpm facb12db5a66302a33368475e6569c5cee5952692298a0d99e1745eb34987f57 nss-tools-3.13.1-7.el6_2.i686.rpm x86_64: 4f067da59c4dbda049f7387b8c542f02447611216cfaee1b3694f0cda2ebec6d nss-3.13.1-7.el6_2.i686.rpm e3e5c774675d0a783863765e41f7eee92d7b52e5d37f24a224e010172255140f nss-3.13.1-7.el6_2.x86_64.rpm 3162125b2e15fd326f339b07775bea7d1137d80653971eb6e56a325b24362845 nss-devel-3.13.1-7.el6_2.i686.rpm a4829bd18458b86e6581d67efb73337a53fc7079cb28a244ddc2ebecf20bca4a nss-devel-3.13.1-7.el6_2.x86_64.rpm aded40a91dce15703060cb2b536415ca3dd0566f430de625ea4bb3a59801278e nss-pkcs11-devel-3.13.1-7.el6_2.i686.rpm 961e6ae9f5df7ad1dee7e0df0ef28e5c1a6e4545cb5b0985e5955b3141efddf1 nss-pkcs11-devel-3.13.1-7.el6_2.x86_64.rpm 516b592e56833b4d45dd86d3bb251db92db80bb20d6d5291f7b9db67209a904d nss-sysinit-3.13.1-7.el6_2.x86_64.rpm 700f45d8103117620dfa985b8c904f2c839a2358013b065624958a37ecb3d89a nss-tools-3.13.1-7.el6_2.x86_64.rpm Source: 87c2694f3fb82efb3ce744ba7edbfe5bbe61aaa39a13c9984a257e5481745b07 nss-3.13.1-7.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 85, Issue 2 **********************************************

1 0

C6.2 on DELL E6520
by Bernd Bartmann 02 Mar '12

02 Mar '12

Hi, I've installed Centos 6.2 x86_64 on a DELL E6520 and nearly everything works just fine. The only problem is that the system hangs after entering "reboot". I can see that several services get stopped, but after some seconds the screen is just black and nothing happens anymore. The weird thing is that "poweroff" always works just fine. Also, I should note that I'm using the NVIDIA binary graphics driver and have disabled the "Optimus" feature in the BIOS. The problem with "reboot" happens regardless if the NIVIDA driver is installed or not. Any ideas? Best regards, Bernd

5 6

Centos6: Boot from usb 3.0
by Volker Poplawski 02 Mar '12

02 Mar '12

Hi all, I'm booting Centos6 from a usb 3.0 stick. This works fine as long as the usb-stick is connected to a usb 2.0 port. Once I plug the the usb-stick into a blue usb 3.0 port centos fails on mounting the root filesystem. Any hints on that? Regards .....Volker

4 5

IPv6 IPsec on cenots5 and centos6
by Jure Pečar 02 Mar '12

02 Mar '12

Hello, I have a couple of centos5 hosts at various offices connected with ipsec by ipsec-tools (racoon). It's a relatively straightforward configuration on ipv4, however I can't find any information how and even if it works in the same way with ipv6. What I've found is some references that it is better to use openswan on el5 and it indeed is standard on el6. It promises ipv6 support by default, however, I couldn't get it to even do phase 1 on el5 in the limited time I had available to test it. I've also found out that openswan is poorly documented not only on their site, but also in el6 manuals. So ... what are the general expiriences with ipsec on ipv6? Anyone has it running? What software did you use? -- Jure Pečar http://jure.pecar.org http://f5j.eu

1 0

Re: [CentOS] network problems
by m.roth＠5-cent.us 02 Mar '12

02 Mar '12

(Sorry 'bout the screwed-up headers - forwarded to my work email from home, then forwarded back to this account just now....) ---------------------------- Original Message ---------------------------- From: John Doe <jdmls(a)yahoo.com> References: <76baacf79f928a056c17d63f02d53ae7.squirrel(a)mail.5-cent.us> <1330619990.16821.YahooMailNeo(a)web114705.mail.gq1.yahoo.com> <86feb08093663823b4190d6fae1e3a3b.squirrel(a)mail.5-cent.us> From: "m.roth(a)5-cent.us" <m.roth(a)5-cent.us> > Yeah: after I tried to add it, and it gave me the "does not support > options parsing", I began trying to del the mq, but I can't seem to > find the Magical Syntax (tm) that let's me get rid of that. This worked for me... # tc qdisc del dev eth1 root handle 1 That works... but won't get rid of mq. Right now, I'm trying pfifo, unless someone thinks that PRIO might be better. The real question is why *some* of my 6.2 boxen have pfifo_fast, and others have mq. Does anyone know where this is set? mark

1 0

pam and radius config problem
by me＠tdiehl.org 02 Mar '12

02 Mar '12

Hi, I am trying to configure ssh/pam to use freeradius as one of the authentication sources on a C6 box. I have freeradius running on a separate box with 2 factor authentication. Using the radtest utility, I can successfully authenticate. My problem is that I do not understand how to configure pam to use radius as an auth source and be sure I am not opening a security hole in my systems. While googling, I have found several howto's that talk about how to do this using the pam_radius utility but the examples do not match what is found in /etc/pam.d/sshd. What I would like to accomplish is the following: 1. Allow logins using ssh keys. 2. If that fails, Allow login via radius. 3. if not on the local network disallow login via a regular user name and passwd. I think 3 might be able to be accomplished via a match statement in sshd.conf but I am not sure. Does anyone know how to do this in a secure way? If I start modifying the pam.d configuration files, how can I be sure I am not opening up a security hole? Regards, -- Tom me(a)tdiehl.org Spamtrap address me123(a)tdiehl.org

1 0

Is there a way to _remove_ dependencies from an RPM built from source?
by Michael Lampe 02 Mar '12

02 Mar '12

I'm building my own openmpi packages derived from upstream SRPMs. Problem: The ones built with Intel's compiler can only be installed by force, because Intel doesn't register their provided libs with rpm. Any idea how this can be done? (Alternative ideas are appreciated as well -- as long as they don't read as: make Intel fix this.) -Michael

11 23

network problems
by m.roth＠5-cent.us 02 Mar '12

02 Mar '12

We just moved a user, who deals with a *lot* of data, to a new server, since his old NFS home directory was on a disk that had started showing problems. Now, i/o is about six times slower, my manager reports. After a fair bit of googling, I started looking at tc and ip, and found the following: from ip address show, first, on the old home directory server, eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast qlen 1000 then, on the new: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 I've tried tc qdisc add dev eth0 mq pfifo_fast and tc qdisc add dev eth0 pfifo_fast and neither works. I've googled, and seen something about you can't set something with tc, because pfifo_fast is the hardwired default. Anyone know how I can reset this, or is there a package I can reinstall that would do that? mark

3 6

CentOS-5 - Need help sourcing an SQLite-3.6.16 or later rpm
by James B. Byrne 02 Mar '12

02 Mar '12

CentOS-5.7 SQLite-3.6.6 Ruby on Rails 3.1 Ruby-1.8.7 I have a situation wherein the version of SQLite-3 on CentOS-5 is too 'old' for the Ruby language sqlite3 DBMS adapter to successfully build against. I managed to obtain an rpm for ruby-1.8.7 but I cannot find one for sqlite-3.6.16 or later. Does anyone here have a lead on where such a beast, including the sqlite development headers, might be found? I know that CentOS-6 ships with sqlite-3.6.20 but I can find nothing more recent than 3.6.6 for sqlite on CentOS-5 in the various supplemental repos that I generally use (epel and rpmforge). -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] Software RAID1 with CentOS-6.2
by Chuck Munro 01 Mar '12

01 Mar '12

On 03/01/2012 09:00 AM, Mark Roth wrote: > > Miguel Medalha wrote: >> > >> > A few months ago I had an enormous amount of grief trying to understand >> > why a RAID array in a new server kept getting corrupted and suddenly >> > changing configuration. After a lot of despair and head scratching it >> > turned out to be the SATA cables. This was a rack server from Asus with >> > a SATA backplane. The cables, made by Foxconn, came pre-installed. >> > >> > After I replaced the SATA cables with new ones, all problems were gone >> > and the array is now rock solid. > Thanks for this info, Miguel. > <snip> >> > As an additional information, I quote from the Caviar Black range >> > datasheet: >> > >> > "Desktop / Consumer RAID Environments - WD Caviar Black Hard Drives are >> > tested and recommended for use in consumer-type RAID applications >> > (RAID-0 /RAID-1). >> > - Business Critical RAID Environments ? WD Caviar Black Hard Drives are >> > not recommended for and are not warranted for use in RAID environments >> > utilizing Enterprise HBAs and/or expanders and in multi-bay chassis, as >> > they are not designed for, nor tested in, these specific types of RAID >> > applications. For all Business Critical RAID applications, please >> > consider WD?s Enterprise Hard Drives that are specifically designed with >> > RAID-specific, time-limited error recovery (TLER), are tested >> > extensively in 24x7 RAID applications, and include features like >> > enhanced RAFF technology and thermal extended burn-in testing." > Wonderful... NOT. We've got a number of Caviar Green, so I looked up its > datasheet... and it says the same. > > That rebuild of my system at home? I think I'll look at commercial grade > drives.... > > mark > Interesting thread ... I have had problems with SATA cables in the past, and prefer those with the little metal latches. The problem is that you can't easily tell by looking at the connectors whether or not they're flakey. I've had positive experience with Caviar Black and Scorpio Black drives. The WD Green and Blue drives are built more cheaply than the Blacks (which have close to enterprise-grade construction). The dealer I buy drives from has told me that the Blacks have far lower return/defect rates. Of the approximately 30 2TB Blacks I have in RAID-6 service, I've only experienced two failures, which were handled quickly by the WD warranty program. It's interesting to note that while all the drive manufacturers are going back to 1 or 2-year warranties, the WD Black series remains at 5 years. A friend of mine has had a couple of strange problems with the RE (RAID) series of Caviars, which utilize the same mechanics as the non-RE Blacks. For software RAID, I would recommend that you stick with the non-RE versions because of differences in the firmware. It has come down to me buying *only* WD Black-series drives and nothing else. If I could afford them, I'd consider enterprise-grade drives. Having said that, I have a pair of 1TB Green drives in RAID-1 for the TimeMachine backups on my Mac, and they've been spinning 24x7 non-stop for 3 years without failure. I'm almost afraid to switch them off. Now, if WD can just get their post-flood production back in gear so prices can drop. My 2c, FWIW :-) Chuck

2 1

CentOS-announce Digest, Vol 85, Issue 1
by centos-announce-request＠centos.org 01 Mar '12

01 Mar '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS-4 i386 and x86_64 End of Life (EOL) (Johnny Hughes) 2. CEBA-2012:0342 CentOS 6 libvirt Update (Johnny Hughes) 3. CEBA-2012:0346 CentOS 6 nss_db Update (Johnny Hughes) 4. CEBA-2012:0348 CentOS 6 emacs Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 29 Feb 2012 18:37:40 -0600 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CentOS-4 i386 and x86_64 End of Life (EOL) To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4F4EC4D4.6000103(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" This is the notification of the End of Life (EOL) for CentOS 4. The 7-year enterprise lifetime of CentOS-4 ends now. CentOS-4 has been copied to the CentOS Vault. The last released tree is available here: http://vault.centos.org/4.9/ All architectures of CentOS-4 (i386, x86_64, ppc, s390, and s390x) are impacted. Support for the CentOS-4 Cluster Server and the CentOS-4 Global File Server (csgfs) is also ended. The CentOS-4.8 and 4.9 trees will be emptied from the CentOS mirrors in short order. CentOS-4 will remain available in the CentOS Vault, along with CentOS-2 and CentOS-3, indefinitely. You can use the vault in the same way you have used the CentOS mirrors in the past, however no updates will be released for CentOS-4 moving forward. Accordingly, the CentOS Project strongly recommends that you migrate any CentOS-4 installs to a newer version of CentOS (either CentOS-5 or CentOS-6). ================================================ If you have workloads that you can not move to a newer version CentOS, Red Hat, Inc. offers an optional support extension called the "Extended Life-cycle Support (ELS) Add-On Subscription" for their Red Hat Enterprise Linux (RHEL) 4 product. The ELS Subscription provides up to three additional years of limited Software Maintenance (Production 3 Phase) for RHEL 4 with unlimited technical support, critical Security Advisories (RHSAs) and selected Urgent Priority Bug Advisories (RHBAs). This service from Red Hat, Inc. would require both a RHEL 4 subscription and an ELS subscription. Note: The CentOS Project is not affiliated with Red Hat, Inc. CentOS-4 is not, nor does it contain, Red Hat Enterprise Linux 4. However, CentOS-4 is built from publicly available sources released by Red Hat, Inc. Because of these common source files, work loads running on CentOS-4 should be able to be moved to Red Hat Enterprise Linux 4 and allow you to use that platform with ELS for an additional 3 years if you need that service. Please see this link for more details about Red Hat ELS: http://www.redhat.com/products/enterprise-linux-add-ons/extended-lifecycle-… -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net

1 0

(no subject)
by haply rong 01 Mar '12

01 Mar '12

http://lists.centos.org/mailman/listinfo/centos

1 0

build rpm from tar.xz tarball
by fakessh ＠ 29 Feb '12

29 Feb '12

hello centos list hello guys hello master of "Fu" how to create a rpm package for centos 5 with an archive tar.xz. I possess a source rpm of gnutls http://ns.fakessh.eu/rpms/gnutls-2.12.16-1.el5.src.rpm and I would try to compile the latest version of gnutls What is the correct procedure to build an rpm with this type of package tar.xz sincerely -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

4 4

centos4 and rhel4 upstream effective eol
by R - elists 29 Feb '12

29 Feb '12

what exactly is the planned day and time that centos4 will be moved removed from working "yum update" & current mirrored functionality ?? march 1st or a day or two later please? - rh

2 1

OT: Sysadmin position
by Tony Placilla 29 Feb '12

29 Feb '12

Apologies if this is out of line. I have an opening for a full-time Systems Administrator. Please contact me off list for details Tony Placilla <aplacilla(a)jhu.edu> IT Operations & Projects Manager Physics & Astronomy Johns Hopkins University 3400 N. Charles St. Baltimore MD 21218 410-516-0632

4 3

strange cron message
by Michael Schumacher 29 Feb '12

29 Feb '12

Hi, environment: new Centos 6 installation out of the box. somebody has an idea what causes this error mail to be sent? ---8<--- Subject: Cron <root@fileserver1> /usr/local/asc/bin/ascservicemonitor 2>&1 >/dev/null Content-Type: text/plain; charset=UTF-8 Auto-Submitted: auto-generated X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <HOME=/root> X-Cron-Env: <PATH=/usr/bin:/bin> X-Cron-Env: <LOGNAME=root> X-Cron-Env: <USER=root> Message-Id: <20120228122702.1F468101951(a)XXXXXXXXXXX.XXXXX.de> Date: Tue, 28 Feb 2012 13:27:02 +0100 (CET) /bin/sh: /usr/local/asc/bin/ascservicemonitor: No such file or directory ---8<--- This pops up every three minutes. There is no ascservicemonitor on that machine, I cannot find any reference to a file with this name and I cannot find a cron job that would be running every three minutes. any ideas? best regards --- Michael

4 3

Re: [CentOS] Centos 6.x and Freenx issue..Solved!!
by Tom Bishop 29 Feb '12

29 Feb '12

Thanks much to* Christoph *for pointing me in the right direction, appears to be an issue with the latest Vmware -tools, not sure I did a clean install with the opensource ones to see if they had the same issues but applying both of the fixes in the link post solves the problem with running the latest freenx and nx rpms found in the repo. Thanks again :) On Tue, Feb 28, 2012 at 5:36 AM, christoph.galuschka(a)chello.at < christoph.galuschka(a)chello.at> wrote: > Tom, > > take a look at this post, maybe it solves your problem. > > http://lists.centos.org/pipermail/centos-devel/2012-February/008570.html > > cheers > Christoph >

1 0

Re: [CentOS] My Computer
by Dennis Whiterock 28 Feb '12

28 Feb '12

Hello, I have a HP Pavilion p2 1033wb. I has a 3 core Vision AMD E-300 Processor Dual Core runs at 3.2 GHZ. CentOS will run ok with this processor won't it Echolink told me I would have no problem running there program with it. Probably a dumb question but just checking. Thanks, KF7TQV 73.

7 8

strange memory issues with CentOS 6.2 on VPS
by Tomas Vondra 28 Feb '12

28 Feb '12

Hi all, today we've encountered quite strange issues with memory allocation on one of our VPS running CentOS 6.2. So far I've been unable to determine what's causing it - hopefully someone here will know what's up. The VPS is a "small" machine - just 512MB of RAM, 1 CPU, running 6.2. with current kernel (2.6.32-220.4.2.el6.x86_64, but I've tried the 2.6.32-71.el6.x86_64 too). There's a quite common stack installed, i.e. Nainstalován je na něm celkem standardní stack - apache, php, postgresql, postfix, dovecot, memcached and ssh. Basically nothing exotic, everything from official repos (except from postfix and postgresql). The machine is not heavily used. More detailed logs (than posted here) are available here: http://pastebin.com/vYxRUyUX We've been hitting some I/O utilization issues (cause by other VPS instances on the same hw) so we've migrated to a different physical hw. After the migration, the VPS started failing because of memory alloc issues - the services fail either at startup time or when processing the requests - although there's enough free mem: [root@vps audit]# free total used free shared buffers cached Mem: 502728 294224 208504 0 18604 163608 -/+ buffers/cache: 112012 390716 Swap: 0 0 0 i.e. about 200 MB of free memory, but apache fails because of segfaults when forking a child process: [16:49:51 2012] [error] (12)Cannot allocate memory: fork: Unable to fork new process [16:51:17 2012] [notice] child pid 2577 exit signal Segmentation fault (11) or when processing requests: [26 16:30:16 2012] [error] [client 66.249.72.1] PHP Fatal error: Out of memory (allocated 262144) (tried to allocate 523800 bytes) in Unknown on line 0 The memory_limit in PHP is set to 32MB, so it's not the case. Similar issues happen to PostgreSQL: 16:42:01 CET pid=2504 db=xxxxxx-drupal user=xxxxxx FATAL: out of memory 16:42:01 CET pid=2504 db=xxxxxx-drupal user=xxxxxx DETAIL: Failed on request of size 2488. 16:42:01 CET pid=2438 db= user= LOG: could not fork new process for connection: Nelze alokovat paměť 16:42:01 CET pid=2438 db= user= 4f4a5247.986:21 LOG: could not fork new process for connection: cannot allocate memory I have absolutely no clue what's causing this / how to fix it. According to free/vmstat there's about 200MB of free RAM all the time, so I have no idea why the alloc calls fail. What makes is even more puzzling is that after adding a swapfile, all the issues suddenly disappear, although the swapfile is not used at all ... and it's not possible to disable it because of memory alloc. # dd if=/dev/zero of=swap.img bs=1024 count=409600 # mkswap swap.img # swapon swap.img ... now the services are starting fine ... # swapon -s Filename Type Size Used Priority /root/swap.img file 399992 0 -1 # free total used free shared buffers cached Mem: 503412 294192 209220 0 11740 99980 -/+ buffers/cache: 182472 320940 Swap: 399992 0 399992 # swapoff swap.img swapoff: swap.img: swapoff selhal: Nelze alokovat paměť Any ideas what might cause this? The fact that I haven't noticed these issues before the migration are probably caused by a swap file - I've manually added it during a maintenance and forgot to remove it after that, but it disappeared when the machine was rebooted during migration. There's a SELinux enable, but I doubt it's causing the issues - there's nothing in audit logs except for an information that there was a segfault. Nothing suspicious. Otherwise it's just a standard CentOS install, the only thing I had to tune a bit were kernel limits (in sysctl.conf) related to shared memory (because of the database). Currently there's kernel.shmmax = 68719476736 kernel.shmall = 134217728 vm.swappiness = 0 vm.overcommit_memory = 2 which should be fine IMHO ... any ideas? regards Tomáš

2 3

Centos 6.2 install some problems
by admin lewis 28 Feb '12

28 Feb '12

Hi, I have reinstalled centos 6.2 x86_64 because it seems there is not xfs mod on i386. But i have found an orther problem. After the partitioning there is not any prompt to choice the type of server I want (minimal, web etc) So now I have a desktop installation... I want to remove xorg, gnome etc.. and an other bug.. i am unable to setup Eth interface ... with system-config-network-tui i cant see any eth.. I have 4 NIC.. and all works well.. cheers luigi -- Linux Server, Microsoft Windows 2003/2008 Server, Exchange 2007 http://predellino.blogspot.com/

2 1

Centos 6.x and Freenx issue..
by Tom Bishop 28 Feb '12

28 Feb '12

Finally got a chance to install Centos 6.x x86_64 version and having an issue with the latest version of freenx. This is a desktop install on a esxi 5 with all updates and only thing I have installed is the latest vmware tools. When I enable the extras repo and install the nx-3.5.0-1.el6.ay.x86_64.rpm and freenx-0.7.3-8.el6.ay.x86_64.rpm. When I try to logon the desktop pops up but I get the little busy circle and it never completes, I am unable to close the session or do anything to the freenx window. Here is the odd, part, if I install the earlier versions from toracat, freenx-0.7.3-7.el6.ay.x86_64.rpm and nx-3.4.0-7.el6.ay.x86_64.rpm the session comes up and works fine,I can exclude the updates but wondering if anyone has any idea of what I might try to get it to work with the latest, thanks in advance.

2 2

XFS on Centos 6.2 ?
by admin lewis 28 Feb '12

28 Feb '12

Hi, I need of to mount an XFS partition on Centos 6.2 .. but I cant find the kernel module.. it that true the xfs is available only under x86_64 ? -- Linux Server, Microsoft Windows 2003/2008 Server, Exchange 2007 http://predellino.blogspot.com/

5 4

fail2ban and httpd
by Andreas Reschke 28 Feb '12

28 Feb '12

Hello, I've all my services (postfix, dovecot, sasl, ...) secure with fail2ban, but only httpd doesn't work 404 Not Found //%0D/scripts/setup.php: 2 Time(s) //3rdparty/phpMyAdmin/scripts/setup.php: 1 Time(s) //81/phpmyadmin/scripts/setup.php: 1 Time(s) //Admin/: 1 Time(s) //Admin/scripts/setup.php: 1 Time(s) //MyAdmin/: 1 Time(s) //MyAdmin/scripts/setup.php: 1 Time(s) //MySQLAdmin/scripts/setup.php: 1 Time(s) //PHPMYADMIN/scripts/setup.php: 2 Time(s) //PMA/: 1 Time(s) //PMA/scripts/setup.php: 2 Time(s) //PMA2/scripts/setup.php: 1 Time(s) //PMA2009/scripts/setup.php: 2 Time(s) //PMA3/scripts/setup.php: 2 Time(s) //SQL/scripts/setup.php: 2 Time(s) //SSLMySQLAdmin/scripts/setup.php: 1 Time(s) //_PHPMYADMIN/scripts/setup.php: 2 Time(s) //_admin/scripts/setup.php: 1 Time(s) //_pHpMyAdMiN/scripts/setup.php: 2 Time(s) //_phpMyAdmin/scripts/setup.php: 1 Time(s) //_phpmyadmin/scripts/setup.php: 1 Time(s) //admin/: 1 Time(s) //admin/mysql/scripts/setup.php: 2 Time(s) My /etc/fail2ban/filter.d/apache.conf: failregex = [[]client <HOST>[]] (File does not exist|script not found or unable to stat): .*(\.php|\.asp|\.exe|\.pl) Test: [root@web ~]# fail2ban-regex /var/log/httpd/error_log /etc/fail2ban/filter.d/apache.conf /usr/share/fail2ban/server/filter.py:430: DeprecationWarning: the md5 module is deprecated; use hashlib instead import md5 Running tests ============= Use regex file : /etc/fail2ban/filter.d/apache.conf Use log file : /var/log/httpd/error_log Results ======= Failregex |- Regular expressions: | [1] [[]client <HOST>[]] (File does not exist|script not found or unable to stat): .*(\.php|\.asp|\.exe|\.pl) | `- Number of matches: [1] 0 match(es) Ignoreregex |- Regular expressions: | `- Number of matches: Summary ======= Sorry, no match How can I stop such tests? Gruß Andreas Reschke ________________________________________________________________ Unix/Linux-Administration Andreas.Reschke(a)behrgroup.com

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss