- Discuss - lists.centos.org

Clustering solutions - mail, www, storage.
by Rafał Radecki 11 Jan '12

11 Jan '12

Hi all. I am currently working for a hosting provider in a 100+ linux hosts' environment. We have www, mail HA solutions, as storage we mainly use NFS at the moment. We are also using DRBD, Heartbeat, Corosync. I am now gathering info to make a cluster with: - two virtualization nodes (active master and passive slave); - two storage nodes (for vm files) used by mentioned virtualization nodes (also active/passive). For virtualization I am thinking to use OpenVZ or KVM. For storage NFS or iSCSI. Could you please share your experiences with these technologies? Which one would you use and why? Are there any good alternatives in CentOS? Thanks for the info, Rafal.

4 3

EPEL not working ... is it just me?
by Alan McKay 11 Jan '12

11 Jan '12

This is very strange - has been happening the last few days. I just upgraded this system from 5.3 to 5.7 on Monday and the problem started some time after that (but not immediately because I know I used yum Monday evening after the upgrade) I get the following error from yum, but it goes away if I --disablerepo=epel The funny thing is that the listed xml file I can easily wget from this system. Also having the issue with other 5.7 systems that were upgraded from 5.3 several weeks ago and had been working fine since. I did some googling and found some things to try like "yum clean all" and I even deleted the rpm database based on advice from one site, and then rebuilt it from scratch. But nothing. [root@solexa-db varlog]# yum -y install hddtemp Loaded plugins: downloadonly, rhnplugin, security http://fedora.mirror.nexicom.net/epel/5/x86_64/repodata/repomd.xml: [Errno 4] IOError: <urlopen error (111, 'Connection refused')> Trying other mirror. Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Please verify its path and try again -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 3

SELinux blocking cgi script from "writing to socket (httpd_t)"
by Bennett Haselton 11 Jan '12

11 Jan '12

Is this really supposed to get easier over time? :) Now my audit.log file shows that SELinux is blocking my cgi script, index.cgi (which is what's actually served when the user visits the front page of one of our proxy sites like sugarsurfer.com) from having '"read write" to socket (httpd_t)'. I have no idea what that means, except that I thought that cgi scripts were supposed to be able to write to stdout so that the web server could send the data via a socket connection to the end user's browser, so I don't know why a CGI script would be blocked from writing to a socket with security context httpd_t. The only clue that might narrow it down is the line "Target Objects socket [ udp_socket ]". The sockets that the cgi scripts usually send output to are of course tcp sockets, so why would it say udp? The only time one of my cgi scripts might use udp would be if it were doing a hostname lookup via dns, but the index.cgi script doesn't do that at any point. What would the pros do at this point? *** Summary: SELinux is preventing index.cgi (httpd_sys_script_t) "read write" to socket (httpd_t). Detailed Description: [SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.] SELinux denied access requested by index.cgi. It is not expected that this access is required by index.cgi and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. Additional Information: Source Context system_u:system_r:httpd_sys_script_t Target Context system_u:system_r:httpd_t Target Objects socket [ udp_socket ] Source index.cgi Source Path <Unknown> Port <Unknown> Host <Unknown> Source RPM Packages Target RPM Packages Policy RPM selinux-policy-2.4.6-316.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name catchall Host Name g6950-21025.securedservers.com Platform Linux g6950-21025.securedservers.com 2.6.18-274.12.1.el5 #1 SMP Tue Nov 29 13:37:46 EST 2011 x86_64 x86_64 Alert Count 1 First Seen Wed Jan 11 09:34:13 2012 Last Seen Wed Jan 11 09:34:13 2012 Local ID 2adcd43d-7b8b-4e17-bb93-ad11a35f378a Line Numbers 1 Raw Audit Messages type=AVC msg=audit(1326303253.473:3626): avc: denied { read write } for pid=6668 comm="index.cgi" path="socket:[415055]" dev=sockfs ino=415055 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=udp_socket

3 4

gabber/jabber for centos 5.7?
by ken 11 Jan '12

11 Jan '12

I used to use jabber for chats. But I don't find it in centos 5.7 anymore. Is it still around? Or has something else taken its place? What do people using 5.7 use these days? Is there anything which handles MSN? tia.

3 3

Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH
by Giles Coochey 11 Jan '12

11 Jan '12

Hi All, I have set up three servers in a development environment. Via CR they're updated to Centos 6.2 It appears that these servers have postfix installed on them by default, which unfortunately I'm not very well acquainted with. All I want is a quick and dirty way to enable these hosts to send email through my own SMTP host. My (sendmail) SMTP host uses SMTP AUTH on a non-standard port and my dev (virtual env) runs off my laptop, so a dynamic IP. Does anyone have a quick and dirty configuration for setting up postfix to forward all remote mail through my smarthost? I'm guessing that I can put the hostname, the port, and the username and password somewhere in the postfix configuration and it will just work... Many Thanks in Advance, Giles

4 7

Re: [CentOS] USB install annoyances (not OT)[SOLVED]
by m.roth＠5-cent.us 10 Jan '12

10 Jan '12

Yet another denial - it's as though it's also blocking me based on the relationship of included text vs. new text. blah, blah, blah. Let's see if this is enough new text to get through. Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote: >> Behalf Of m.roth(a)5-cent.us <snip> >> >> I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as >> /mnt/isolinux. >> > >> > Unless you specifically need the DVD contents, maybe try with the ISOs instead... <snip> > And when you get towards package selection, anaconda fails indicating > ' that it can't find "image# 1".' > > The "image# 1" it is looking for is the .iso which could have been burnt to a DVD for doing the install, i.e., not something from the images directory from THAT iso. <snip> Thank you, Todd, that was the answer. So, in RHEL 6, they're protecting us against ourselves (we might not have copied everything). So with the FAT32 partition as it was, I then deleted everything on the second partition, and copied both DVDs onto it... and it's installing even as we speak. I suppose I need to submit a revised "how to build a USB key" for CentOS 6. mark

2 1

Re: [CentOS] USB install annoyances (not OT)[SOLVED] (mostly)
by m.roth＠5-cent.us 10 Jan '12

10 Jan '12

Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote: >> Behalf Of m.roth(a)5-cent.us <snip> >> >> I've retried again, and it still fails. I see that it's mounted /dev/sda2, which is where I've got the contents of a DVD, as >> /mnt/isolinux. >> > >> > Unless you specifically need the DVD contents, maybe try with the ISOs instead... <snip> > And when you get towards package selection, anaconda fails indicating > ' that it can't find "image# 1".' > > The "image# 1" it is looking for is the .iso which could have been burnt to a DVD for doing the install, i.e., not something from the images directory from THAT iso. <snip> Thank you, Todd, that was the answer. So, in RHEL 6, they're protecting us against ourselves (we might not have copied everything). So with the FAT32 partition as it was, I then deleted everything on the second partition, and copied both DVDs onto it... and it's installing even as we speak. I suppose I need to submit a revised "how to build a USB key" for CentOS 6. And then there's the bug report I need to file: my only question being whether it's with CentOS, or upstream. Given this stupid bios, I had to make the USB key /dev/sda, so I told it not to install the bootloader. Went to reboot with linux rescue to install grub... and the same program that mounts the iso for the install, will *not* do that for linux rescue, and it wants images/install.img in the directory.... mark "ah, consistancy"

1 0

centos6.2, parted and alignment
by John R Pierce 10 Jan '12

10 Jan '12

I have a large raid (lsi megaraid sas2 9261-8i card) and when I use parted to initialize it as the one big partition I want, it gives me a warning. # parted /dev/sda "mklabel gpt" Warning: The existing disk label on /dev/sda will be destroyed and all data on this disk will be lost. Do you want to continue? Yes/No? yes # parted -a optimal /dev/sda "mkpart primary 128s -1s" Warning: You requested a partition from 65.5kB to 81.0TB. The closest location we can manage is 65.5kB to 81.0TB. Is this still acceptable to you? Yes/No? yes Warning: The resulting partition is not properly aligned for best performance. Ignore/Cancel? i Information: You may need to update /etc/fstab. The sector size is 512b actual, the raid stripe size is 64kB, hence starting the partition on sector 128. I've tried various combinations of -a, nothing seems to help here. -- john r pierce N 37, W 122 santa cruz ca mid-left coast

5 7

CentOS-announce Digest, Vol 83, Issue 4
by centos-announce-request＠centos.org 10 Jan '12

10 Jan '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0008 CentOS 5 gnome-screensaver Update (Johnny Hughes) 2. CEBA-2012:0009 CentOS 6 bind Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 Jan 2012 14:51:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0008 CentOS 5 gnome-screensaver Update To: centos-announce(a)centos.org Message-ID: <20120110145120.GA5914(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0008 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0008.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ea48a7e44c4d147177b900cc46338d3ca544f9b333cfcc235dc6544f27deb13a gnome-screensaver-2.16.1-8.el5_7.5.i386.rpm x86_64: 81830f4a846ed33c5ea9e3b23295b39950ab81a29c0a94f0dedb90b76cb1baa4 gnome-screensaver-2.16.1-8.el5_7.5.x86_64.rpm Source: 97165f207769fb6222d35179017359e2e7b62a374d2e0fec72268a4063ec950b gnome-screensaver-2.16.1-8.el5_7.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 10 Jan 2012 15:51:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0009 CentOS 6 bind Update To: centos-announce(a)centos.org Message-ID: <20120110155133.GA8803(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0009 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0009.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5e336743367a5824ee075ee94cd55f7e84e106131cff72eb8549bd52bab580d8 bind-9.7.3-8.P3.el6_2.2.i686.rpm 0a2e1e34f8fff5e0eee35f1959d599e9d5523ceade4ec147552d63417e0b2b8b bind-chroot-9.7.3-8.P3.el6_2.2.i686.rpm 1551d76b2d3a564df94e2e368e7ce9c1cf7e47245f9cba70bdf0ebd7288fbe9f bind-devel-9.7.3-8.P3.el6_2.2.i686.rpm b91bf00604644abd34e832ac2865918f502bceccb451b413b69fedd4af5bdb7d bind-libs-9.7.3-8.P3.el6_2.2.i686.rpm eea16fe13180d0a59344ea4d556bef303baa2a326d72e90a4bc91027815dbf2e bind-sdb-9.7.3-8.P3.el6_2.2.i686.rpm 3c7d503016a1be8e52466f78f0cdd77c787cc0fce5234f3d4b430823abca82db bind-utils-9.7.3-8.P3.el6_2.2.i686.rpm x86_64: 7ad821ac2594ba27639b7dc9b326948acae335964553f3922222862881943c0b bind-9.7.3-8.P3.el6_2.2.x86_64.rpm 3c5c06e5625c91edcbbfa38524607c5067d7d810fd3041e72b6bf7f23bace352 bind-chroot-9.7.3-8.P3.el6_2.2.x86_64.rpm 1551d76b2d3a564df94e2e368e7ce9c1cf7e47245f9cba70bdf0ebd7288fbe9f bind-devel-9.7.3-8.P3.el6_2.2.i686.rpm 4d9001cccce4021cbca87d5661a36470c73ecfba01afb09ab2f95b29ca8f5558 bind-devel-9.7.3-8.P3.el6_2.2.x86_64.rpm b91bf00604644abd34e832ac2865918f502bceccb451b413b69fedd4af5bdb7d bind-libs-9.7.3-8.P3.el6_2.2.i686.rpm 1cc972496a4a69afcca02da38253b78c24b5b6eff7c3e7782780fa6071c876fc bind-libs-9.7.3-8.P3.el6_2.2.x86_64.rpm 13496bff1649e4928c17776920b7ff8e324d8dcfd29fab48bc2282f0f7ccb57c bind-sdb-9.7.3-8.P3.el6_2.2.x86_64.rpm 24c1795e60d1766d88cc472b259e87cd650f1f7f5b1e379fe64c8e44035ef4f4 bind-utils-9.7.3-8.P3.el6_2.2.x86_64.rpm Source: b926065d9775d45835bda078bd448e50d2712606c517ac58da029931ea976682 bind-9.7.3-8.P3.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 83, Issue 4 **********************************************

1 0

vmware player CentOS 6 2-button 3-button touch pad with pointing device Lenovo ThinkPad
by Igor Furlan 10 Jan '12

10 Jan '12

Hi All, Question: What (how, where) I need to set (configure) to make 'middle' button on the touch pad acting as a '__paste__' button when I run LINUX (CentOS 6.2) as guest on MS Windows 7 Home premium ? Details: LENOVO T520 laptop touch pad with 3 buttons pointing device (red small mushroom) between GHB keys vmware host: MS Windows 7 Home Premium edition 64-bit vmware guest: CentoOS 6.2 64-bit vmware player version: 4.01 As you all know, on UNIX/LINUX the copy/paste function works slightly different than on MS Windows-ware. When one would like to copy&paste a text, he/she needs to do: A) press left button and move the cursor to highlight the text of interest, B) release left button and finally C) paste the contents of buffer(clipboard) with click on the middle button. Unfortunately, this function does not work on CentoOS 6 as a guest OS running on vmware player on WIN 7. In order for me to do the copy/paste, I need to A) highlight the text, B) click on right button and select 'copy' to move the highlighted text into the buffer(clipboard), C) move the cursor to the destination position, D) click the right button again and select the 'paste' function. In other words, 'copy&paste' on CentOS 6.2 works like 'copy&paste' on MS WINDOWS-ware. Is there a way to revert the 'copy&paste' functionality back to the traditional UNIX way of doing it, highlight the text with left mouse/touchpad button and paste it with the middle mouse/touchpad button. Any hint | solution | RTFM pointer | advice is more than welcome Thanks in advance Igor -- "You can't run an economy where the financial sector is making 40 percent of the profits." former Fed Chairman Paul Volcker 2009

2 1

Re: [CentOS] missing email
by m.roth＠5-cent.us 10 Jan '12

10 Jan '12

I *loathe* dnsorbs.... Maybe this one will get through its crap. Maybe if I add a few more words.... John R. Dennison wrote: > On Mon, Jan 09, 2012 at 12:49:31PM -0500, m.roth(a)5-cent.us wrote: >> I haven't gotten anything from the list since my email of 09:34 EST. Do I have a problem, or is the list quiet? >> >> Please cc me offlist, if this goes through. > > I hope you get 20,000 replies :) Nope, jes' one, so far. <snip> > You _could_ just have checked the archive. Actually, I went to the archives, and at least saw something from *sigh* Bennett that was dated 12:34 or so today; that was why I asked. Dunno if someone (NOT my hosting co - I don't have any filtering turned on) is delaying, or filtering, or if I'd been dropped for some reason, or.... Thanks, though. mark

3 5

Re: [CentOS] USB install annoyances
by m.roth＠5-cent.us 10 Jan '12

10 Jan '12

Again, I *HATE* dnsorbs.... This was bounced, which makes twice today. <snip> more text, add a few more words, we'll see if this makes it. John R Pierce wrote: > On 01/09/12 12:05 PM, m.roth(a)5-cent.us wrote: >> John R Pierce wrote: >>> > On 01/09/12 11:11 AM,m.roth(a)5-cent.us wrote: >>>> >> They are? I dunno - ours are labelled where they're intended to be mounted, like / or /boot >>> > >>> > don't plug one of those into a different system for repair or you'll have all kinda grief. $HOSTNAME_root would be the sane way to do >>> it... >>> > >> I'm trying to figure out why I'd plug one into a different system for repair. Either the drive's bad, or I'm re-embodying a server that died, but left good drives. If it's going bad, the*only* thing I'm going to do is plug it into a hot-swap bay (just about all of ours have those, love them) to recover some data, then wipe it. > > exactly. and if you put that drive in a hotswap bay of another system > that is using the same label, thats a potential for a big mess. same <snip> Why? If I shove it into another system, I'm *not* rebooting using it, just putting it into a spare bay; then I'll mount /dev/sd<whatever> /mnt. No problem. But this thread's gotten way OT: *does* anyone have any idea what the .img file is that the running o/s from install.img is looking for, after the partitioning, when it's ready to install? mark

5 13

SOCKS server other than ss5?
by Florin Andrei 10 Jan '12

10 Jan '12

Anyone here using a SOCKS server? I'm using ss5 but there seems to be a strange disconnect issue with it and openvpn. While I'm trying to figure out whether ss5 is at fault, or openvpn, I'd like to try a different SOCKS server. Could you recommend one that works well on CentOS? Thanks. -- Florin Andrei http://florin.myip.org/

4 7

Was Re: USB install annoyances, is, OT, hosting providers
by m.roth＠5-cent.us 09 Jan '12

09 Jan '12

I've changed the subject line. It has nothing to do with my question with my original post, that no one seems to have any answer to, what file "image# 1" is looking for. This bloody email has now been blocked *twice*. Ljubomir Ljubojevic wrote: > On 01/09/2012 10:43 PM, m.roth(a)5-cent.us wrote: >> Ljubomir Ljubojevic wrote: >>> On 01/09/2012 10:13 PM, m.roth(a)5-cent.us wrote: >> <snip> >>>> Who here is *not* using a work email? Who here posts from their own hosting site? Has this ever happened to you? >>> >>> I own my own domain/server/subnet. My WISP customers can only send mail So, you're your own hosting, as well as personal, provider. >>> via my server, with all the prevention's I could think of. I have never been hit with this (but I do have small customer base), but I have had regular domains (like one local Bank!!!) blocked to deliver to my server because they do not have proper FQDN. Please - I can't email some of my Congresscritters or Senators, here in the US, because the idiot who's in charge of the Congress' webservers hasn't discovered that top-level country codes exist and are valid. >> >> As I noted in another email, I don't have a commercial site. Buying a static IP from Verizon, to run a server from home, is a *lot* more expensive than just a 'Net connection and an inexpensive hosting provider. > > It is OK. You asked who, and I answered, that is all. If I was not on the semi-reliable 150Km Wireless link, I would be able to provide quality service. I appreciate your response. There's also a slight distance... and I figure that the CIA and the FBI would have the successor to Carnivore staring at my every email if I used you as a hosting provider. <g> > > Believe it or not, I am one of the *very* *very* rare hosting providers in Serbia (local mostly) that provide SSL POP3/SMTP connection via port 995 and 465. There is maybe one or two providers on 7 million citizens. > > And yes, I forgot to write about reverse DNS, I have that too. You're doing a really professional job. There's way too many over here who don't have a clue, other than "I'll get rich!!!" mark

4 5

USB install annoyances
by m.roth＠5-cent.us 09 Jan '12

09 Jan '12

I tried to boot from my 6.0 USB key, no joy. Updated it to 6.2. Still no joy: it gets started, I do the disk layout, it formats the drives, and then fails, saying that it can't find "image# 1". Over in the log, I see a lot of it not finding any drive at all, yet all the h/d drives and sda2, which is what the USB key is, and where the linux partition is, are mounted. Guys, any idea what "image# 1" is, or what configuration file is telling it to look in a wrong place? Thanks in advance. mark

4 12

Re: [CentOS] suppressing openssh server identification
by Александр Кириллов 09 Jan '12

09 Jan '12

> With all of the discussions regarding getting p3wned, I am feeling > paranoid and can't seem to figure out how to suppress this... > > telnet $SOME_CENTOS_5_SERVER 22 > Trying $SOME_IP_ADDRESS... > Connected to $SOME_CENTOS_5_SERVER. > Escape character is '^]'. > SSH-2.0-OpenSSH_4.3 > > 'Banner no' doesn't do it. Is it possible to suppress the version? http://www.openssh.org/faq.html#2.14

2 1

monitoring space in directories
by Alan McKay 09 Jan '12

09 Jan '12

Hey folks, Is there a Linux tool that will monitor a disk and tell me which directories are growing over time? I could cobble something together myself of course, but if there is already a good off-the-shelf solution, why bother? Even if it only checks once per day that would be fine. Graphs would be pretty too :-) cheers, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

4 7

missing email
by m.roth＠5-cent.us 09 Jan '12

09 Jan '12

I haven't gotten anything from the list since my email of 09:34 EST. Do I have a problem, or is the list quiet? Please cc me offlist, if this goes through. mark

2 1

Re: [CentOS] USB install annoyances
by Darr247 09 Jan '12

09 Jan '12

> I tried to boot from my 6.0 USB key, no joy. Updated it to > 6.2. Still no joy: it gets started, I do the disk layout, it formats > the drives, and then fails, saying that it can't find "image# 1". Can you tell us how you're making the bootable USB key? e.g. the source .iso file[s] and all commands used.

1 0

LUKS full disk Encryption question
by Ljubomir Ljubojevic 08 Jan '12

08 Jan '12

From RHEL docs: "The default implementation of LUKS in Red Hat Enterprise Linux is AES 128 with a SHA256 hashing. Ciphers that are available are: AES - Advanced Encryption Standard - FIPS PUB 197 Twofish (A 128-bit Block Cipher) Serpent cast5 - RFC 2144 cast6 - RFC 2612" My question is: What will be the performance impact on my Celeron 1.73 GHz CPU and/or hdd speed? -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe Google is the Mother, Google is the Father, and traceroute is your trusty Spiderman... StarOS, Mikrotik and CentOS/RHEL/Linux consultant

4 7

upgrade of 32bit to 64 bit CentOS 5.7
by Rob Kampen 08 Jan '12

08 Jan '12

Hi List, Early in dec I was forced to upgrade one of my server systems - initially built in 2004 on an intel server mb it finally failed. Under some time pressure, I replaced the mb etc with a 64 bit asus system and did a repair of the linux system upon reboot with a 64 bit DVD. As one can imagine there were some headaches as the kernel was now 64 bit, but yum and friends were still 32 bit. I managed to upgrade the required packages to 64 bit, rebooted the server a few times and all appeared to function ok. BTW the server runs bind, apache, postfix, dovecot, mysql, php and related stuff. I have now relocated the server in a lights off situation and myself to the other side of the planet. Why all the history - well as I ssh into the box and do my weekly yum updates, I find that there have been no updates, however all my other servers have had multiple updates. Thus I did a rpm -qa and find there are only 65 rpm files listed - they are all 64 bit or noarch - none of the core server files are present. How do I systematically update all the files from 32 bit to 64 bit? As I am unable to physically get in front of this machine, I have zero room for error - and need the machine to be up and operating each business day. My google searches have not given me any hits that help. Any help, directions, things to be aware off etc - appreciated. TIA

2 2

suppressing openssh server identification
by Craig White 08 Jan '12

08 Jan '12

With all of the discussions regarding getting p3wned, I am feeling paranoid and can't seem to figure out how to suppress this... telnet $SOME_CENTOS_5_SERVER 22 Trying $SOME_IP_ADDRESS... Connected to $SOME_CENTOS_5_SERVER. Escape character is '^]'. SSH-2.0-OpenSSH_4.3 'Banner no' doesn't do it. Is it possible to suppress the version? -- Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.white(a)ttiltd.com 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com Need help communicating between generations at work to achieve your desired success? Let us help!

2 1

Advice sought: Virtual Win7 on Centos 6.2
by david 07 Jan '12

07 Jan '12

Folks I have a new laptop running Centos 6.2 64-bit. I'd like to put a virtual machine running Windows 7 (licensed), with full audio/video functions, and good response. Which virtual system would you recommend? I can think of KVM, or VirtualBox, or ...? The "good response" requirement pretty much excludes a web-style video presentation. Opinions solicited. David Kurn

9 10

Problems with AWUS036H usb wirless nic under CentOS 6.2
by carlopmart 07 Jan '12

07 Jan '12

Hi all, I have problems with a wireless usb adapter (AWUS036H) under CentOS 6.2 x86_64 machine. Sometimes, randomly, it loses wireless connection and never back. I need to do an ifdown and then an ifup, but sometimes works and sometimes not. If I am not wrong this adapter uses rtl8187 chip ... Somebody knows what can I do?? Under Windows 2008 R2 server works perfect ... Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

2 1

CentOS-announce Digest, Vol 83, Issue 3
by centos-announce-request＠centos.org 07 Jan '12

07 Jan '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0005 CentOS 6 libxklavier Update (Johnny Hughes) 2. CEBA-2012:0004 CentOS 6 ksh Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 6 Jan 2012 17:28:28 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0005 CentOS 6 libxklavier Update To: centos-announce(a)centos.org Message-ID: <20120106172828.GA30490(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0005 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0005.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0cd376281395fbbcff6c59d65a73e21a8421a5399b848515197d33ca05ca7e4c libxklavier-4.0-7.el6_2.1.i686.rpm 9366922ec4a38c9069def329928cf3e96790e591983ea47b5a5b58857cb310dc libxklavier-devel-4.0-7.el6_2.1.i686.rpm x86_64: 0cd376281395fbbcff6c59d65a73e21a8421a5399b848515197d33ca05ca7e4c libxklavier-4.0-7.el6_2.1.i686.rpm bbd24a12b71055aa127267afff2d5f0ae3880dd4b75a8301d47e4bab222bd10f libxklavier-4.0-7.el6_2.1.x86_64.rpm 9366922ec4a38c9069def329928cf3e96790e591983ea47b5a5b58857cb310dc libxklavier-devel-4.0-7.el6_2.1.i686.rpm cb33c9ef41c4cf6148fe02670b3fc96e37f4ef86885244cbfa0e10f1a7153dc1 libxklavier-devel-4.0-7.el6_2.1.x86_64.rpm Source: 0906e25fc9a6d6584f8eaf664959f621dfc52b46efc7919f4c2f0025c329fb5f libxklavier-4.0-7.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 6 Jan 2012 17:28:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0004 CentOS 6 ksh Update To: centos-announce(a)centos.org Message-ID: <20120106172851.GA30570(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0004 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9bf476cf5af0de3b41c175c27a9b8f2c953d41a6bd088977bb11956dd0422c87 ksh-20100621-12.el6_2.1.i686.rpm x86_64: 9939804685f9437d7899a44fb054823e9f8e619cec3b84a6622221dc8d6b295f ksh-20100621-12.el6_2.1.x86_64.rpm Source: b9b6a9c5f1a292060600354237bba428fec8df38bf2e878340d80ea5e26749ec ksh-20100621-12.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 83, Issue 3 **********************************************

1 0

Need help in writing a shell/bash script
by ankush grover 07 Jan '12

07 Jan '12

Hi Friends, I am trying to write a shell script which can merge the 2 columns into 3rd one on Centos 5. The file is very long around 31200 rows having around 1370 unique groups and around 12000 unique user-names. The 1st column is the groupname and then 2nd column is the user-name. 1st Column (Groupname) 2nd Column (username) admin ankush admin amit powerusers dinesh powerusers jitendra The desired output should be like this admin: ankush, amit powerusers: dinesh, jitendra There are commands available but not able to use it properly to get the desired output. Please help me Thanks & Regards Ankush

10 19

fcron scheduler
by Kaushal Shriyan 07 Jan '12

07 Jan '12

Hi, Is fcron scheduler available in CentOS 5.6 Server ? I did yum search fcron and it does not return anything. As per http://fcron.free.fr/description.php Fcron is a scheduler. It *aims at replacing Vixie Cron*, so it implements most of its functionalities. But contrary to Vixie Cron, fcron *does not need your system to be up 7 days a week, 24 hours a day* : it also works well with systems which are not running neither all the time nor regularly (contrary to anacrontab). In other words, fcron does both the job of Vixie Cron and anacron, but does even more and better :)) ... Any clue, Regards, Kaushal

1 0

an actual hacked machine, in a preserved state
by Bennett Haselton 06 Jan '12

06 Jan '12

(Sorry, third time -- last one, promise, just giving it a subject line!) OK, a second machine hosted at the same hosting company has also apparently been hacked. Since 2 of out of 3 machines hosted at that company have now been hacked, but this hasn't happened to any of the other 37 dedicated servers that I've got hosted at other hosting companies (also CentOS, same version or almost), this makes me wonder if there's a security breach at this company, like if they store customers' passwords in a place that's been hacked. (Of course it could also be that whatever attacker found an exploit, was just scanning that company's address space for hackable machines, and didn't happen to scan the address space of the other hosting companies.) So, following people's suggestions, the machine is disconnected and hooked up to a KVM so I can still examine the files. I've found this file: -rw-r--r-- 1 root root 1358 Oct 21 17:40 /home/file.pl which appears to be a copy of this exploit script: http://archive.cert.uni-stuttgart.de/bugtraq/2006/11/msg00302.html Note the last-mod date of October 21. No other files on the system were last modified on October 21st. However there was a security advisory dated October 20th which affected httpd: http://mailinglist-archive.com/centos-announce/2011-10/00035-CentOSannounce… https://rhn.redhat.com/errata/RHSA-2011-1392.html and a large number of files on the machine, including lots of files in */ usr/lib64/httpd/modules/* and */lib/modules/2.6.18-274.7.1.el5/kernel/* , have a last-mod date of October 20th. So I assume that these are files which were updated automatically by yum as a result of the patch that goes with this advisory -- does that sound right? So a couple of questions that I could use some help with: 1) The last patch affecting httpd was released on October 20th, and the earliest evidence I can find of the machine being hacked is a file dated October 21st. This could be just a coincidence, but could it also suggest that the patch on October 20th introduced a new exploit, which the attacker then used to get in on October 21st? (Another possibility: I think that when yum installs updates, it doesn't actually restart httpd. So maybe even after the patch was installed, my old httpd instance kept running and was still vulnerable? As for why it got hacked the very next day, maybe the attacker looked at the newly released patch and reverse-engineered it to figure out where the vulnerabilities were, that the patch fixed?) 2) Since the */var/log/httpd/* and /var/log/secure* logs only go back 4-5 weeks by default, it looks like any log entries related to how the attacker would have gotten in on or before October 21st, are gone. (The secure* logs do show multiple successful logins as "root" within the last 4 weeks, mostly from IP addresses in Asia, but that's to be expected once the machine was compromised -- it doesn't help track down how they originally got in.) Anywhere else that the logs would contain useful data?

26 93

Yum Group Desktop shows rhn-setup-info
by david 06 Jan '12

06 Jan '12

Folks In Centos 6 (updated as of last night), the command yum groupinfo Desktop shows the package "rhn-setup-info" as one of its default packages, yet it appears that the package does not exist. Is this an inconsistency in the YUM data? or what? Thanks David Kurn

2 1

swap labeling annoyance
by m.roth＠5-cent.us 06 Jan '12

06 Jan '12

I just upgraded a blade server via rsync from another server. Rebuilt the initrd. It boots fine... except that it won't turn on the swap partition. Several times, I've made sure swap was off, then mkswap -L SWAP-sda3 /dev/sda3, but when I do swapon -L SWAP-sda3, it complains it can't find the device for the label. The only thing I find while googling, other than redoing what I've done several times now, is an old bug from CentOS 4, 0001399, which affected *only* blade enclosures: the reporter says that all of his IBM blades were affected (this isn't an IBM). His workaround was to make an ext2 fs, label it, and turn that into swap. Has anyone seen this recently, with 6.2? mark

4 4

yum warning...
by John Doe 06 Jan '12

06 Jan '12

Hey, From time to time I catch a yum warning. Last time it was today: # yum update ... Downloading Packages: vsftpd-2.2.2-6.el6_2.1.x86_64.rpm | 149 kB 00:01 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction Warning: RPMDB altered outside of yum. Updating : vsftpd-2.2.2-6.el6_2.1.x86_64 1/2 Cleanup : vsftpd-2.2.2-6.el6_0.1.x86_64 2/2 Updated: vsftpd.x86_64 0:2.2.2-6.el6_2.1 Complete! How come a simple update of a a single package from CentOS update would "alter RPMDB outside of yum"...? Could that be a plugin? yum-3.2.29-22.el6.centos.noarch yum-metadata-parser-1.1.2-16.el6.x86_64 yum-plugin-fastestmirror-1.1.30-10.el6.noarch yum-plugin-priorities-1.1.30-10.el6.noarch yum-utils-1.1.30-10.el6.noarch Anyone else? Thx, JD

7 10

CentOS 6 and screenshot of website
by Jani Ollikainen 06 Jan '12

06 Jan '12

Hi, How one is supposed to do screenshots of a website with CentOS 6? The usual and normal ways I know doing it is: http://www.coderholic.com/pywebshot-generate-website-thumbnails-using-pytho… https://github.com/AdamN/python-webkit2png/ But then from some reason RedHat doesn't support them: gnome-python2-extras: * Thu Jul 15 2010 Christopher Aillon <caillon(a)redhat.com> - 2.25.3-20 - Drop the -gtkmozembed subpackage PyQt4: * Tue Jun 01 2010 Than Ngo <than(a)redhat.com> - 4.6.2-8 - Resolves: bz#597271, drop WebKit support in Qt Why-o-why? Any good ideas of going it differently? Noticed that one can take gnome-python2-extras source and add following lines based on el5 package .spec: %package -n gnome-python2-gtkmozembed Summary: Python bindings for interacting with gtkmozembed Group: Development/Languages Requires: gecko-libs >= %{gecko_version} %description -n gnome-python2-gtkmozembed This module contains a wrapper that allows the use of gtkmozembed via Python. %files -n gnome-python2-gtkmozembed %defattr(-,root,root,-) %{python_sitearch}/gtk-2.0/gtkmozembed.so %{_datadir}/gtk-doc/html/pygtkmozembed And get a package which seems to work, but still makes me wonder why have they removed the support work both of those techniques and which would be the way to archive that without need of compile own packages.

8 14

No eth0 on centos 6.2
by Jeff 06 Jan '12

06 Jan '12

Just installed centos 6.2. I run and ifconfig -a I see and em1 em2 and lo interface. If I go to /etc/sysconfig/network-scripts, I don't see an ifcfg-eth0. If I run ifup eth0 it comes back with "Device eth0 does not seem to be present, delaying initialization". Anybody have a clue? Thanks in advance.

4 5

Re: [CentOS] A simplistic parental-control setup
by Marko Vojinovic 06 Jan '12

06 Jan '12

On Wednesday 04 January 2012 18:04:43 Frank Cox wrote: > On Wed, 04 Jan 2012 23:58:17 +0000 Marko Vojinovic wrote: > > The point is that I need a simple, easy-to-implement, easy-to-configure > > and easy-to-maintain solution for this particular usecase. > > Put the disallowed addresses into your /etc/hosts file and associate those > addresses with whatever you want them to resolve to. Hmm... that sure looks simple enough. :-) I'll give it a try, thanks! Best, :-) Marko

4 7

rsyslog server cannot get the logs
by YunQiang Su 06 Jan '12

06 Jan '12

I have an rsyslog server which is running Debian Stable, and its version of rsyslog is 4.6.4-2. All of my Debian Stable server can send log to it now. and run both nc $IP $PORT <<< "HELLO" and echo "HELLO" | nc $IP $PORT on client, I can get log on the server. While for my CentOS 5.7 server, nc $IP $PORT <<< "HELLO" works well, but echo "HELLO" | nc $IP $PORT can not work. tcpdump shows that it can get both of the 2 "HELLO" from server. And I can not get log both by log file or tcpdump. *.* @@IP:PORT

2 2

Kernel panic after install in cento6 before mounting root file system rw
by Jason Pyeron 06 Jan '12

06 Jan '12

I am hopelessly trying to debug a new install of 6.2 x86_64. I used the minimal install with default options. Unfortunately the screen garbles during the kernel panic. Scroll/Num lock lights are blinking. 1. Where can I find debugging steps? (tried rescue and mount to read /var/log, but no values written since it is still in RO mode) 2. Where are the keyboard blink codes documented? -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 1

c6, LSI megaraid drive failure notification
by John R Pierce 05 Jan '12

05 Jan '12

i'm configuring a storage server with CentOS 6.2, it uses a LSI MegaRAID SAS controller, I'm using LSI's megacli to configure the storage... Any ideas on how to get drive failure notifications out of this system? I'm configuring hot spares but I'd still like some sort of notification when a drive has failed so the spare can be replaced. -- john r pierce N 37, W 122 santa cruz ca mid-left coast

3 13

Serial port driver on CentOS 6
by Alfred von Campe 05 Jan '12

05 Jan '12

I installed CentOS 6 on a Dell Optiplex 790 with a StarTech.com dual serial port card, and the serial ports aren't being recognized. According to dmesg, only the built-in serial port is being recognized: # dmesg | fgrep ttyS serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A 00:08: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A And lspci -v doesn't show that any drivers are loaded for it: # lspci -v [snip] 03:00.0 Serial controller: NetMos Technology PCIe 9922 Multi-I/O Controller (prog-if 02 [16550]) Subsystem: Device a000:1000 Flags: fast devsel, IRQ 16 I/O ports at 2010 [size=8] Memory at e1a30000 (32-bit, non-prefetchable) [size=4K] Memory at e1a20000 (32-bit, non-prefetchable) [size=4K] Capabilities: [50] MSI: Enable- Count=1/8 Maskable- 64bit+ Capabilities: [78] Power Management version 3 Capabilities: [80] Express Legacy Endpoint, MSI 00 Capabilities: [100] Virtual Channel <?> Capabilities: [800] Advanced Error Reporting 03:00.1 Serial controller: NetMos Technology PCIe 9922 Multi-I/O Controller (prog-if 02 [16550]) Subsystem: Device a000:1000 Flags: fast devsel, IRQ 17 I/O ports at 2000 [size=8] Memory at e1a10000 (32-bit, non-prefetchable) [size=4K] Memory at e1a00000 (32-bit, non-prefetchable) [size=4K] Capabilities: [50] MSI: Enable- Count=1/8 Maskable- 64bit+ Capabilities: [78] Power Management version 3 Capabilities: [80] Express Legacy Endpoint, MSI 00 Capabilities: [100] Advanced Error Reporting What do I need to do to get these serial ports recognized? On some other CentOS 6 systems with StarTech.com serial cards they were automatically recognized (different hardware and not PCIe based). Thanks, Alfred

4 6

Centos 6.X compatible to ORACLE DB verssion????
by mcclnx mcc 05 Jan '12

05 Jan '12

Does anyone know CENTOS/Redhat 6.X compatible to ORACLE software (X86 and X86_64) version like 9.X, 10GR2, 11G and 11GR2. Any official document say that? Thanks.

11 27

turning off udev for eth0
by James B. Byrne 05 Jan '12

05 Jan '12

I have set up a kvm host and configured a standard clone prototype for generating new guests. One persistent (pun intended) annoyance when cloning is the behaviour of udev with respect to the virtual network interface. The prototype is configured with just eth0 having a dedicated IP addr. When the prototype is cloned udev creates rules for both eth0 and eth1 in the clone. Because eth1 does not exist in the cloned guest one has to manually edit /etc/udev/rules.d/70-persistent-net.rules to get rid of the bogus entries and then restart the clone instance to have the changes take effect. All this does is return the new guest to the prototype eth0 configuration. Is there no way to alter udev's behaviour? Is udev even needed on a server system using virtual hardware? Altering the rules file not a big deal in itself but it adds needless busywork when setting up a new guest. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 11

Corrupt mbr and disk directory map
by Billy Davis 05 Jan '12

05 Jan '12

We are running Centos 5.6. All was fine until yesterday. I attempted to tar a 14KB work file to a USB floppy (/dev/sdb) for transport to another server. Unfortunately, I keyed in 'tar cvf /dev/sda filename' instead of 'tar cvf /dev/sdb filename'. /dev/sda is our main (boot/root/apps) scsi hard drive. I realized my mistake, but it was too late. The system is still powered up and running, but I am sure that I have overlaid (and trashed) the mbr and the disk directory map. When I run the 'fdisk /dev/sda' command, the console displays: "Device contains neither a valid DOS partition table, nor Sun, SGI or OSF disklabel. Building a new DOS disklabel. Changes will remain in memory only, until you decide to write them. After that, of course, the previous content won't be recoverable." When I run grub and enter 'find /grub/stage1', the console displays "Error 15: File not found" I suspect that when I power the system down, it will not reboot. I can reinstall mbr and grub, but I don't have the original partition table start/end values. Since the system is still running, it seems that the partition table must still be available to it from somewhere. Is there any way to easily restore the partition table? The system is completely backed up and can be restored if necessary, but I prefer a quick and simple solution, if possible. Any ideas? Thanks

3 4

selinux context for mm-handler?
by Paul Heinlein 05 Jan '12

05 Jan '12

I've got a Mailman installation running on CentOS 4 that I'd like to migrate to a CentOS 6 box. My big obstacle at present is getting Mailman's mm-handler Perl script to run as a Sendmail local mailer with SELinux enabled. I've tried changing mm-handler's selinux context type a few times, but nothing has resulted in success: context result ------------------- ----------------------------------------- etc_mail_t sendmail can't execute mm-handler mailman_mail_exec_t mm-handler can't load perl modules bin_t mm-handler can't read Mailman data sendmail_exec_t mm-handler can't read Mailman data I'm willing and able to whip up a local policy modification, but I thought I'd ask if there's a standard solution to this problem; my Google searches have so far proven ineffective at providing pointers to an answer. -- Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/

2 5

CentOS-announce Digest, Vol 83, Issue 2
by centos-announce-request＠centos.org 05 Jan '12

05 Jan '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0002 CentOS 5 gnome-screensaver Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 5 Jan 2012 14:28:46 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0002 CentOS 5 gnome-screensaver Update To: centos-announce(a)centos.org Message-ID: <20120105142846.GA21742(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0002 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0002.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3e54b38e91dd4095ec5552733306535d993a51b4678c2a1db5dbbec91b13256f gnome-screensaver-2.16.1-8.el5_7.4.i386.rpm x86_64: 83d89da2e6cb1e777858a981d9dc72244b068d86adb427832325242c063b88ee gnome-screensaver-2.16.1-8.el5_7.4.x86_64.rpm Source: d3efc85e6d01e35f04509fd7986e2433a391020e01f35805cac13b0243287b00 gnome-screensaver-2.16.1-8.el5_7.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 83, Issue 2 **********************************************

1 0

CentOS6 and tilde expansion
by isdtor 05 Jan '12

05 Jan '12

Set up NIS and autofs on this new CentOS6 box, but it seems tilde expansion no longer works in bash? [root@frodo ~]# cd ~john -bash: cd: ~john: No such file or directory [root@frodo ~]# cd /home/john [root@frodo john]# pwd /home/john [root@frodo john]# It still works in t/csh: [root@frodo ~]# /bin/csh [root@frodo ~]# cd ~john [root@frodo ~john]# pwd /home/john [root@frodo ~john]# I couldn't find anything in the bash man page that suggests this feature needs explicit configuration.

3 3

A simplistic parental-control setup
by Marko Vojinovic 05 Jan '12

05 Jan '12

I am looking at the simplest (implementation-wise) solution to the following problem (on CentOS 6.2): I have a list of web addresses (like http://www.example.com, https://1.2.3.4/, etc.) that should be "forbidden" to access from a particular host. On access attempt, the browser should be redirected to a local web page (file on the hard disk) with the explanation that those addresses are forbidden. The possible ways of disallowed access include: * typing www.example.com or http://1.2.3.4/ in the browser * typing www.example.com/anyfolder/somefile.html in the browser * clicking on www.example.com when listed as a link on some other web site (say, Google search results) * nothing else. The last point above assumes that the users will never try any other method of accessing the site. These user's knowledge about computers in general is known to be elementary, so I don't need protection against geniouses who can figure out some obscure way to circumvent the lockdown (and please don't tell me that this is an irrational assumption, I know it is...). If possible, all this should be on a "per user" basis, but if implementing it system-wide would be much simpler, I could live with it. :-) The point is that I need a simple, easy-to-implement, easy-to-configure and easy-to-maintain solution for this particular usecase. What I don't need is some over-engineered solution that covers my usecase along with a whole bunch of stuff I will never need, and takes two months to configure properly. It should also be F/OSS, preferably included in CentOS repos or elsewhere. Or alternatively I could go along with manually setting up a bogus httpd/dns/iptables configuration which would do all this, but I have a feeling that it would not be the easiest thing to maintain... I'd appreciate any suggestions. :-) Best, :-) Marko

3 3

dhcp lease-time
by Timothy Murphy 05 Jan '12

05 Jan '12

Why is the default lease-time set to only 10 minutes (600 seconds) in /etc/dhcp/dhcpd.conf (CentOS-6.2) as distributed? Why is not set to a much longer time? Is there any disadvantage in doing that? Or conversely, is a short lease-time safer in some way? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

5 6

phpmyadmin issue
by Rajagopal Swaminathan 05 Jan '12

05 Jan '12

Greetings, I have installed phpmyadmin on a Centos 6.2 box. When I try to access it through http://localhost/phpmyadmin it is giving me a 403 forbidden error any clues? TIA. -- Regards, Rajagopal

5 11

Cannot use kickstart file to install CentOS 6.2 into a blank harddisk
by lee_yiu_chung＠yahoo.com 05 Jan '12

05 Jan '12

I am trying using a kickstart file to install CentOS 6.2 into a new virtual machine (the MBR sector of the harddisk is all zero), however I found that the installer cannot go through the harddisk partition. It failed after I chose "Use All Space" at harddisk partition option. The error message is: http://anony.ws/i/bMcTJ.png "You have not defined a root partition (/), which is required for installation of CentOS to continue. You have not created a/boot/efi partition (note: I am using BIOS, not (U)EFI) This can happen if there is not enough space on your harddrive(s) for installation." However, if I create a blank MBR partition table before before CentOS installation, then there is no problem. The same kickstart file works for CentOS 6.1 with blank harddisk. (with url parameter changed of course) Below is the kickstart file I used (between dash lines) ------- url --url="http://ftp.twaren.net/Linux/CentOS/6.2/os/i386/" interactive timezone Asia/Hong_Kong firstboot --enable ------- Steps to reproduce: 1. create a new virtual machine with blank harddisk image (or, a real blank harddisk) 2. boot the netinstall iso 3. at boot menu, press tab and append ks=<kickstart_file_location> and press enter to boot 4. go through the boot option as usual until harddisk partition options 5. Choose "Use All Space" at harddisk partition options 6. error occurs

3 5

fail2ban won't die
by Timothy Murphy 05 Jan '12

05 Jan '12

If I lose my broadband connection here (Italy), and try to re-boot the computer (CentOS-6.2), the shutdown hangs at fail2ban. Normally there is no problem re-booting; it only happens if the network has gone down. It may just be an extraordinarily long timeout. Has anyone experienced this? And is there anything one can do about it? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

1 0

ASP running on a Linux Machine
by Jonathan Vomacka 05 Jan '12

05 Jan '12

Good morning all, I currently have a website that was written in ASP back in 1999. The system is currently running Windows 2003 Server with MsSQL. Before everyone flames me for being in the wrong place, I was wondering if there is a way to allow centos to run old ASP code? I know years ago this wasn't possible without a program like ChiliASP, but noow I heard rumor that apache might have a plugin to allow it to read ASP. I am unsure if there is an apache solution, or other solution like nginx/lighttpd that runs ASP. Any information you guys could provide would be great. I do appreciate your help in advance PS. I will need to convert the mssql data to mysql, is there any good program that will convert this? I understand that this question is probably inappropriate for this e-mail thread but maybe someone could shoot me a quick suggestion.

5 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss