- Discuss - lists.centos.org

grabbing ip address from kickstart pre
by Jerry Geis 15 Aug '11

15 Aug '11

I can get the kickstart command line with /proc/cmdline it looks something like xxxxx ks=http://192.168.1.8/ks/ks.cfg xxxxxx in the %pre sections of my ks.cfg I was wanting to extract the IP from the ks= part. I was going to utilize the "tr" command but its not available in %pre. how can I go about extracting the IP address from with in the %pre section I was going to do something like: cat /proc/cmdline | tr ' ' '\n' | grep ks=http | tr '/' ' ' | awk {' print $2'} Since tr isnt available how else can I do it? Thanks, Jerry

5 11

java permission denied
by Tim Dunphy 15 Aug '11

15 Aug '11

Hey guys, I just tried installing jdk 1.0.7 on my centos 5.6 box and I am getting a permission denied error when I try to display the java version. [root@VIRTCENT09:/usr/lib] #ln -s /usr/lib/jdk1.7.0 /etc/alternatives/jdk [root@VIRTCENT09:/usr/lib] #ln -s /usr/lib/jdk1.7.0/bin/java /etc/alternatives/java [root@VIRTCENT09:/usr/lib] #ln -s /etc/alternatives/java /usr/bin/java [root@VIRTCENT09:/usr/lib] #java -version Error: dl failure on line 875 Error: failed /usr/lib/jdk1.7.0/jre/lib/i386/client/libjvm.so, because /usr/lib/jdk1.7.0/jre/lib/i386/client/libjvm.so: cannot restore segment prot after reloc: Permission denied I tried opening up the permissions every step of the way along the path to /usr/lib/jdk1.7.0/jre/lib/i386/client/libjvm.so but no luck so far. I would certainly appreciate any advice you'd be willing to provide! thanks!! tim

5 9

dovecot problem -- not deleting messages from server after downloading them
by Charlie Brune 14 Aug '11

14 Aug '11

I recently installed CentOS 6.0 and Dovecot 2.0. My problem is that, when I download emails to my laptop (running Thunderbird), the emails are NOT deleted from my server. They stay there and are downloaded again and again. 8-( The "Leave messages on server" option in Thunderbird is not checked. I have several laptops that used to work when I ran CentOS 5.6 / Dovecot 1.x. I haven't changed their configuration and they all have the same problem. Here's a sample (personal data removed) of /var/log/maillog when I download messages (note the "del=0/487" on the 2nd line): Aug 13 14:28:54 chasserver dovecot: pop3-login: Login: user=<centos>, method=PLAIN, rip=192.168.0.2, lip=192.168.0.27, mpid=18393, TLS Aug 13 14:29:28 chasserver dovecot: pop3(centos): Disconnected: Logged out top=0/0, retr=487/2134628, del=0/487, size=2126323 My "dovecot -n" output is below. Thanks, Charlie # dovecot -n # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.i686 i686 CentOS Linux release 6.0 (Final) mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd }

2 4

Wireless Problem - no longer able to connect
by Mark Weaver 14 Aug '11

14 Aug '11

Hi all, When I first loaded C6 on my Dell Inspiron laptop the wireless worked flawlessly right out of the box. At the time the wireless access point was a Linksys WAP54G using WPA-2 Personal. In the last two weeks that Access point has been replaced with a Linksys WAP610N, also using WPA-2 Peronal. The problem I'm having is the wireless adapter sees the new WAP just fine, but is unable to connect. I was wondering if there were any control files hidden somewhere that were holding old information from the former WAP that are hindering the connection to the new WAP. thanks, -- Mark Weaver Computer Information Systems & Services, Inc. mweaver(a)compinfosystems.com (717) 512-9718

1 0

Re: [CentOS] hardware isues
by William Warren 14 Aug '11

14 Aug '11

On 8/14/2011 6:39 AM, lists-centos wrote: > did you add the broadcom card, or did it come installed? i'm > wondering if there's some type of conflict between it and the > onboard NICs. > > > ------------ Original Message ------------ >> Date: Saturday, August 13, 2011 11:29:25 PM -0400 >> From: William Warren >> To: lists-centos >> Subject: Re: [CentOS] hardware isues >> >> Well i have also tried the minimal version and the same thing. it >> seems there's something not going well with the t110(and maybe >> higher units) and centos? >> >> On 8/13/2011 9:40 PM, lists-centos wrote: >>> ------------ Original Message ------------ >>>> Date: Saturday, August 13, 2011 09:06:51 PM -0400 >>>> From: William Warren<hescominsoon(a)emmanuelcomputerconsulting.com> >>>> >>>> I have a broadcom bcm5722 and a dual intel pro/1000 pt nic in a >>>> dell t110. The setup sees the cards and i put them into >>>> automatic mode. After the install no cards are detected at all. >>>> Astaro 8.01 detects and utilizes all of these cards just fine. >>>> I have also tried ubuntu server 10.04 lts and they work fine. >>>> I'm curious if this is a bug with Centos 6? >>> I have a new T310 with what I suspect has the same intel dual NIC >>> - the machine is off at the moment and the order detail just says: >>> >>> On-Board Dual Gigabit Network Adapter [430-2008] >>> >>> that I installed centos 6.0 on last week. I only configured first >>> port and it worked fine. The install set up a stub ifcfg-eth1 >>> which looked fine too, but I haven't configured it yet to confirm >>> that it works as expected. >>> >>> >>> - Richard >>> >>> > ------------ End Original Message ------------ > > The broadcom is embedded the intel dual port is the addon. Only centos 6 has this issue i am currently running kvm under ubuntu 10.04 right now. I also did a test install of esxi and astaro and they worked perfectly there. It is something weird with centos.

1 0

Re: [CentOS] instlaling onto mdadm centos 6
by Devin Reade 14 Aug '11

14 Aug '11

--On Saturday, August 13, 2011 08:59:30 AM -0400 William Warren <hescominsoon(a)emmanuelcomputerconsulting.com> wrote: > On 8/13/2011 7:40 AM, B.J. McClure wrote: >> >> boot partition must be raid 1. Grub does not work with 5, 10. etc. > > found out grub will not boot directly off the /boot md device..but i can > make grub put itself on the mbr's of both disks..:) Both steps are necessary for a properly redundant configuration. Depending on the age/interface/BIOS of your machine, if you lose your primary/master hard disk you may have to switch cabling to make your other disk (containing the mirror of /boot) the primary/master. Many modern BIOSes will allow you to select the boot priority order between disks without moving cables. This is something that is best determined empirically before you put your machine into production ... Typically, I do the following: 1. Put /boot onto a mirrored md device based on 200MB partitions. 2. Put the remaining disk space into a second partition using whatever RAID level is appropriate (including 5 or 6) 3. Give the large raid device to LVM 4. Add LVM-based filesystems as necessary. 5. After the system is fully installed, ensure that all boot drives have a copy of the proper MBR. 6. Test by powering down, removing the original boot drive, and powering up again (after ensuring that all RAID sync operations have been completed). This has worked fine for quite a while (CentOS 5.x) and I can verify that RAID1 (/boot) + RAID6 (remainder) work just fine with CentOS 6, including putting an encryption layer between the RAID6 device and LVM. Devin

1 0

hardware isues
by William Warren 14 Aug '11

14 Aug '11

I have a broadcom bcm5722 and a dual intel pro/1000 pt nic in a dell t110. The setup sees the cards and i put them into automatic mode. After the install no cards are detected at all. Astaro 8.01 detects and utilizes all of these cards just fine. I have also tried ubuntu server 10.04 lts and they work fine. I'm curious if this is a bug with Centos 6?

1 0

can't list directories in ftp
by Tim Dunphy 13 Aug '11

13 Aug '11

Hey list, Sorry for all the questions today. But I am trying to wrap up this ftp business and still having some issues. I appreciate your input. SELinux is temporarily disabled (until I can work this all out) and I am now able to log into the FTP server. [root@LCENT05:~] #/usr/bin/ftp localhost Connected to localhost (127.0.0.1). 220 FTP Server ready. Name (localhost:root): bluethundr 331 Password required for bluethundr Password: 230 User bluethundr logged in Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 227 Entering Passive Mode (xx,xx,xx,xxx,255,44). ftp: connect: Invalid argument ftp> I still have DebugLevel set to 10 in the config and this is what I see in the proftpd logs: Aug 13 12:00:39 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): USER bluethundr: Login successful. Aug 13 12:00:39 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'SYST' to mod_tls Aug 13 12:00:39 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'SYST' to mod_core Aug 13 12:00:39 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'SYST' to mod_core Aug 13 12:00:39 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching CMD command 'SYST' to mod_core Aug 13 12:00:39 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching LOG_CMD command 'SYST' to mod_log Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASV' to mod_tls Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASV' to mod_core Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASV' to mod_core Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching CMD command 'PASV' to mod_core Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): in dir_check_full(): path = '/', fullpath = '/'. Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): Entering Passive Mode (71,187,203,194,255,44). Aug 13 12:00:45 LCENT05 proftpd[2922] 192.168.1.48 (127.0.0.1[127.0.0.1]): dispatching LOG_CMD command 'PASV' to mod_log Aug 13 12:05:08 LCENT05 proftpd[2863] 192.168.1.48 (71.187.203.194[71.187.203.194]): Client session idle timeout, disconnected Aug 13 12:05:08 LCENT05 proftpd[2863] 192.168.1.48 (71.187.203.194[71.187.203.194]): ROOT PRIVS at mod_auth_pam.c:173 Aug 13 12:05:08 LCENT05 proftpd[2863] 192.168.1.48 (71.187.203.194[71.187.203.194]): ROOT PRIVS: ID switching disabled Aug 13 12:05:08 LCENT05 proftpd[2863] 192.168.1.48 (71.187.203.194[71.187.203.194]): RELINQUISH PRIVS at mod_auth_pam.c:207 Aug 13 12:05:08 LCENT05 proftpd[2863] 192.168.1.48 (71.187.203.194[71.187.203.194]): RELINQUISH PRIVS: ID switching disabled Aug 13 12:05:08 LCENT05 proftpd[2863] 192.168.1.48 (71.187.203.194[71.187.203.194]): FTP session closed. This is what my proftpd config is looking like at the moment. I have the default root set to this directory: DefaultRoot /var/www/html/jokefire.com And I give access to this directory with this directive: <Directory /var/www/html/jokefire.com> <Limit ALL> AllowAll </Limit> </Directory> I plan to tighten up the security a little bit as I make some more progress. But my immediate goal is just to get this to work. :) Here is the entire config.. just in case it might help! Thanks once again! Tim # This is the ProFTPD configuration file # # See: http://www.proftpd.org/docs/directives/linked/by-name.html # Server Config - config used for anything outside a <VirtualHost> or <Global> context # See: http://www.proftpd.org/docs/howto/Vhost.html ServerName "ProFTPD server" ServerIdent on "FTP Server ready." ServerAdmin root@localhost DefaultServer on # Cause every FTP user except adm to be chrooted into their home directory # Aliasing /etc/security/pam_env.conf into the chroot allows pam_env to # work at session-end time (http://bugzilla.redhat.com/477120) VRootEngine on DefaultRoot /var/www/html/jokefire.com #DefaultRoot ~ !adm VRootAlias etc/security/pam_env.conf /etc/security/pam_env.conf # Masqurade Address MasqueradeAddress xx.xxx.xxx.xxx # Passive Ports PassivePorts 60000 65535 # Use pam to authenticate (default) and be authoritative AuthPAMConfig proftpd AuthOrder mod_auth_pam.c* mod_auth_unix.c # If you use NIS/YP/LDAP you may need to disable PersistentPasswd #PersistentPasswd off # Don't do reverse DNS lookups (hangs on DNS problems) UseReverseDNS off # Set the user and group that the server runs as User nobody Group nobody # To prevent DoS attacks, set the maximum number of child processes # to 20. If you need to allow more than 20 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode; in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd) MaxInstances 20 # Disable sendfile by default since it breaks displaying the download speeds in # ftptop and ftpwho UseSendfile off # Defines debug level DebugLevel 10 # Define the log formats LogFormat default "%h %l %u %t \"%r\" %s %b" LogFormat auth "%v [%P] %h %t \"%r\" %s" # Define a system log SystemLog /var/log/proftpd/proftpd.log # Dynamic Shared Object (DSO) loading # See README.DSO and howto/DSO.html for more details # # General database support (http://www.proftpd.org/docs/contrib/mod_sql.html) # LoadModule mod_sql.c # # Support for base-64 or hex encoded MD5 and SHA1 passwords from SQL tables # (contrib/mod_sql_passwd.html) # LoadModule mod_sql_passwd.c # # Mysql support (requires proftpd-mysql package) # (http://www.proftpd.org/docs/contrib/mod_sql.html) # LoadModule mod_sql_mysql.c # # Postgresql support (requires proftpd-postgresql package) # (http://www.proftpd.org/docs/contrib/mod_sql.html) # LoadModule mod_sql_postgres.c # # Quota support (http://www.proftpd.org/docs/contrib/mod_quotatab.html) # LoadModule mod_quotatab.c # # File-specific "driver" for storing quota table information in files # (http://www.proftpd.org/docs/contrib/mod_quotatab_file.html) # LoadModule mod_quotatab_file.c # # SQL database "driver" for storing quota table information in SQL tables # (http://www.proftpd.org/docs/contrib/mod_quotatab_sql.html) # LoadModule mod_quotatab_sql.c # # LDAP support (requires proftpd-ldap package) # (http://www.proftpd.org/docs/directives/linked/config_ref_mod_ldap.html) # LoadModule mod_ldap.c # # LDAP quota support (requires proftpd-ldap package) # (http://www.proftpd.org/docs/contrib/mod_quotatab_ldap.html) # LoadModule mod_quotatab_ldap.c # # Support for authenticating users using the RADIUS protocol # (http://www.proftpd.org/docs/contrib/mod_radius.html) # LoadModule mod_radius.c # # Retrieve quota limit table information from a RADIUS server # (http://www.proftpd.org/docs/contrib/mod_quotatab_radius.html) # LoadModule mod_quotatab_radius.c # # Administrative control actions for the ftpdctl program # (http://www.proftpd.org/docs/contrib/mod_ctrls_admin.html) # LoadModule mod_ctrls_admin.c # # Execute external programs or scripts at various points in the process # of handling FTP commands # (http://www.castaglia.org/proftpd/modules/mod_exec.html) # LoadModule mod_exec.c # # Support for POSIX ACLs # (http://www.proftpd.org/docs/modules/mod_facl.html) # LoadModule mod_facl.c # # Support for using the GeoIP library to look up geographical information on # the connecting client and using that to set access controls for the server # (http://www.castaglia.org/proftpd/modules/mod_geoip.html) # LoadModule mod_geoip.c # # Configure server availability based on system load # (http://www.proftpd.org/docs/contrib/mod_load.html) # LoadModule mod_load.c # # Limit downloads to a multiple of upload volume (see README.ratio) # LoadModule mod_ratio.c # # Rewrite FTP commands sent by clients on-the-fly, # using regular expression matching and substitution # (http://www.proftpd.org/docs/contrib/mod_rewrite.html) # LoadModule mod_rewrite.c # # Support for the SSH2, SFTP, and SCP protocols, for secure file transfer over # an SSH2 connection (http://www.castaglia.org/proftpd/modules/mod_sftp.html) # LoadModule mod_sftp.c # # Use PAM to provide a 'keyboard-interactive' SSH2 authentication method for # mod_sftp (http://www.castaglia.org/proftpd/modules/mod_sftp_pam.html) # LoadModule mod_sftp_pam.c # # Use SQL (via mod_sql) for looking up authorized SSH2 public keys for user # and host based authentication # (http://www.castaglia.org/proftpd/modules/mod_sftp_sql.html) # LoadModule mod_sftp_sql.c # # Provide data transfer rate "shaping" across the entire server # (http://www.castaglia.org/proftpd/modules/mod_shaper.html) # LoadModule mod_shaper.c # # Support for miscellaneous SITE commands such as SITE MKDIR, SITE SYMLINK, # and SITE UTIME (http://www.proftpd.org/docs/contrib/mod_site_misc.html) # LoadModule mod_site_misc.c # # Provide an external SSL session cache using shared memory # (contrib/mod_tls_shmcache.html) # LoadModule mod_tls_shmcache.c # # Use the /etc/hosts.allow and /etc/hosts.deny files, or other allow/deny # files, for IP-based access control # (http://www.proftpd.org/docs/contrib/mod_wrap.html) # LoadModule mod_wrap.c # # Use the /etc/hosts.allow and /etc/hosts.deny files, or other allow/deny # files, as well as SQL-based access rules, for IP-based access control # (http://www.proftpd.org/docs/contrib/mod_wrap2.html) # LoadModule mod_wrap2.c # # Support module for mod_wrap2 that handles access rules stored in specially # formatted files on disk # (http://www.proftpd.org/docs/contrib/mod_wrap2_file.html) # LoadModule mod_wrap2_file.c # # Support module for mod_wrap2 that handles access rules stored in SQL # database tables (http://www.proftpd.org/docs/contrib/mod_wrap2_sql.html) # LoadModule mod_wrap2_sql.c # # Provide a flexible way of specifying that certain configuration directives # only apply to certain sessions, based on credentials such as connection # class, user, or group membership # (http://www.proftpd.org/docs/contrib/mod_ifsession.html) # LoadModule mod_ifsession.c # TLS (http://www.castaglia.org/proftpd/modules/mod_tls.html) <IfDefine TLS> TLSEngine on TLSRequired on TLSRSACertificateFile /etc/pki/tls/certs/proftpd.pem TLSRSACertificateKeyFile /etc/pki/tls/certs/proftpd.pem TLSCipherSuite ALL:!ADH:!DES TLSOptions NoCertRequest TLSVerifyClient off #TLSRenegotiate ctrl 3600 data 512000 required off timeout 300 TLSLog /var/log/proftpd/tls.log <IfModule mod_tls_shmcache.c> TLSSessionCache shm:/file=/var/run/proftpd/sesscache </IfModule> </IfDefine> # Dynamic ban lists (http://www.proftpd.org/docs/contrib/mod_ban.html) # Enable this with PROFTPD_OPTIONS=-DDYNAMIC_BAN_LISTS in /etc/sysconfig/proftpd <IfDefine DYNAMIC_BAN_LISTS> LoadModule mod_ban.c BanEngine on BanLog /var/log/proftpd/ban.log BanTable /var/run/proftpd/ban.tab # If the same client reaches the MaxLoginAttempts limit 2 times # within 10 minutes, automatically add a ban for that client that # will expire after one hour. BanOnEvent MaxLoginAttempts 2/00:10:00 01:00:00 # Allow the FTP admin to manually add/remove bans BanControlsACLs all allow user ftpadm </IfDefine> # Global Config - config common to Server Config and all virtual hosts # See: http://www.proftpd.org/docs/howto/Vhost.html <Global> # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable Umask 022 # Allow users to overwrite files and change permissions AllowOverwrite yes <Limit ALL SITE_CHMOD> AllowAll </Limit> </Global> # A basic anonymous configuration, with an upload directory # Enable this with PROFTPD_OPTIONS=-DANONYMOUS_FTP in /etc/sysconfig/proftpd <IfDefine ANONYMOUS_FTP> <Anonymous ~ftp> User ftp Group ftp AccessGrantMsg "Anonymous login ok, restrictions apply." # We want clients to be able to login with "anonymous" as well as "ftp" UserAlias anonymous ftp # Limit the maximum number of anonymous logins MaxClients 10 "Sorry, max %m users -- try again later" # Put the user into /pub right after login #DefaultChdir /pub # We want 'welcome.msg' displayed at login, '.message' displayed in # each newly chdired directory and tell users to read README* files. DisplayLogin /welcome.msg DisplayChdir .message DisplayReadme README* # Cosmetic option to make all files appear to be owned by user "ftp" DirFakeUser on ftp DirFakeGroup on ftp # Limit WRITE everywhere in the anonymous chroot <Limit WRITE SITE_CHMOD> DenyAll </Limit> # An upload directory that allows storing files but not retrieving # or creating directories. <Directory uploads/*> AllowOverwrite no <Limit READ> DenyAll </Limit> <Limit STOR> AllowAll </Limit> </Directory> # Don't write anonymous accesses to the system wtmp file (good idea!) WtmpLog off # Logging for the anonymous transfers ExtendedLog /var/log/proftpd/access.log WRITE,READ default ExtendedLog /var/log/proftpd/auth.log AUTH auth </Anonymous> </IfDefine> <Directory /var/www/html/jokefire.com> <Limit ALL> AllowAll </Limit> </Directory>

4 5

proftpd can't login locally
by Tim Dunphy 13 Aug '11

13 Aug '11

Hello list!! I am trying to setup very simple authentication for proftpd under centos 5.6. But for some reason it isn't working and I was hoping to get some advice into how to resolve the issue. Machine info: [code] [root@VIRTCENT07:~] #cat /etc/redhat-release CentOS release 5.6 (Final) [root@VIRTCENT07:~] #uname -a Linux VIRTCENT07 2.6.18-238.el5xen #1 SMP Thu Jan 13 17:49:40 EST 2011 i686 i686 i386 GNU/Linux [/code] Proftpd version [code] ProFTPD Version 1.3.3e [/code] When I try to log into FTP authentication fails even tho the password is typed correctly [code] [root@VIRTCENT07:~] #/usr/bin/ftp localhost Connected to localhost (127.0.0.1). 220 FTP Server ready. Name (localhost:root): bluethundr 331 Password required for bluethundr Password: 530 Login incorrect. Login failed. Remote system type is UNIX. Using binary mode to transfer files. [/code] I've enabled the ExtendedLogs option in the config and this is what I saw as a result [code] 127.0.0.1 UNKNOWN nobody [12/Aug/2011:11:45:00 -0400] "USER bluethundr" 331 - 127.0.0.1 UNKNOWN nobody [12/Aug/2011:11:45:04 -0400] "PASS (hidden)" 530 - 127.0.0.1 UNKNOWN nobody [12/Aug/2011:11:45:04 -0400] "SYST" 215 - [/code] The user account is stored in LDAP [code] [root@VIRTCENT07:~] #getent passwd | grep bluethundr bluethundr:*:1001:1002:That Guy:/home/bluethundr:/bin/bash [/code] The proftpd user runs the 'nobody' account [code] User nobody Group nobody [/code] Which is also stored in LDAP [code] [root@VIRTCENT07:~] #getent passwd | grep nobody nobody:x:99:99:Nobody:/:/sbin/nologin [/code] The user that ProFTPd runs as is using a valid shell [code] [root@VIRTCENT07:~] #cat /etc/shells /bin/sh /bin/bash /sbin/nologin /bin/tcsh /bin/csh /bin/ksh [/code] And this is what my entire ProFTPd config file is looking like [code] # This is the ProFTPD configuration file # # See: http://www.proftpd.org/docs/directives/linked/by-name.html # Server Config - config used for anything outside a <VirtualHost> or <Global> context # See: http://www.proftpd.org/docs/howto/Vhost.html ServerName "ProFTPD server" ServerIdent on "FTP Server ready." ServerAdmin root@localhost DefaultServer on # Cause every FTP user except adm to be chrooted into their home directory # Aliasing /etc/security/pam_env.conf into the chroot allows pam_env to # work at session-end time (http://bugzilla.redhat.com/477120) VRootEngine on DefaultRoot ~ !adm VRootAlias etc/security/pam_env.conf /etc/security/pam_env.conf # Use pam to authenticate (default) and be authoritative AuthPAMConfig proftpd AuthOrder mod_auth_pam.c* mod_auth_unix.c # If you use NIS/YP/LDAP you may need to disable PersistentPasswd PersistentPasswd off # Don't do reverse DNS lookups (hangs on DNS problems) UseReverseDNS off # Set the user and group that the server runs as User nobody Group nobody # To prevent DoS attacks, set the maximum number of child processes # to 20. If you need to allow more than 20 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode; in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd) MaxInstances 20 # Disable sendfile by default since it breaks displaying the download speeds in # ftptop and ftpwho UseSendfile off # Define the log formats LogFormat default "%h %l %u %t \"%r\" %s %b" LogFormat auth "%v [%P] %h %t \"%r\" %s" # Dynamic Shared Object (DSO) loading # See README.DSO and howto/DSO.html for more details # # General database support (http://www.proftpd.org/docs/contrib/mod_sql.html) # LoadModule mod_sql.c # # Support for base-64 or hex encoded MD5 and SHA1 passwords from SQL tables # (contrib/mod_sql_passwd.html) # LoadModule mod_sql_passwd.c # # Mysql support (requires proftpd-mysql package) # (http://www.proftpd.org/docs/contrib/mod_sql.html) # LoadModule mod_sql_mysql.c # # Postgresql support (requires proftpd-postgresql package) # (http://www.proftpd.org/docs/contrib/mod_sql.html) # LoadModule mod_sql_postgres.c # # Quota support (http://www.proftpd.org/docs/contrib/mod_quotatab.html) # LoadModule mod_quotatab.c # # File-specific "driver" for storing quota table information in files # (http://www.proftpd.org/docs/contrib/mod_quotatab_file.html) # LoadModule mod_quotatab_file.c # # SQL database "driver" for storing quota table information in SQL tables # (http://www.proftpd.org/docs/contrib/mod_quotatab_sql.html) # LoadModule mod_quotatab_sql.c # # LDAP support (requires proftpd-ldap package) # (http://www.proftpd.org/docs/directives/linked/config_ref_mod_ldap.html) # LoadModule mod_ldap.c # # LDAP quota support (requires proftpd-ldap package) # (http://www.proftpd.org/docs/contrib/mod_quotatab_ldap.html) # LoadModule mod_quotatab_ldap.c # # Support for authenticating users using the RADIUS protocol # (http://www.proftpd.org/docs/contrib/mod_radius.html) # LoadModule mod_radius.c # # Retrieve quota limit table information from a RADIUS server # (http://www.proftpd.org/docs/contrib/mod_quotatab_radius.html) # LoadModule mod_quotatab_radius.c # # Administrative control actions for the ftpdctl program # (http://www.proftpd.org/docs/contrib/mod_ctrls_admin.html) # LoadModule mod_ctrls_admin.c # # Execute external programs or scripts at various points in the process # of handling FTP commands # (http://www.castaglia.org/proftpd/modules/mod_exec.html) # LoadModule mod_exec.c # # Support for POSIX ACLs # (http://www.proftpd.org/docs/modules/mod_facl.html) # LoadModule mod_facl.c # # Support for using the GeoIP library to look up geographical information on # the connecting client and using that to set access controls for the server # (http://www.castaglia.org/proftpd/modules/mod_geoip.html) # LoadModule mod_geoip.c # # Configure server availability based on system load # (http://www.proftpd.org/docs/contrib/mod_load.html) # LoadModule mod_load.c # # Limit downloads to a multiple of upload volume (see README.ratio) # LoadModule mod_ratio.c # # Rewrite FTP commands sent by clients on-the-fly, # using regular expression matching and substitution # (http://www.proftpd.org/docs/contrib/mod_rewrite.html) # LoadModule mod_rewrite.c # # Support for the SSH2, SFTP, and SCP protocols, for secure file transfer over # an SSH2 connection (http://www.castaglia.org/proftpd/modules/mod_sftp.html) # LoadModule mod_sftp.c # # Use PAM to provide a 'keyboard-interactive' SSH2 authentication method for # mod_sftp (http://www.castaglia.org/proftpd/modules/mod_sftp_pam.html) # LoadModule mod_sftp_pam.c # # Use SQL (via mod_sql) for looking up authorized SSH2 public keys for user # and host based authentication # (http://www.castaglia.org/proftpd/modules/mod_sftp_sql.html) # LoadModule mod_sftp_sql.c # # Provide data transfer rate "shaping" across the entire server # (http://www.castaglia.org/proftpd/modules/mod_shaper.html) # LoadModule mod_shaper.c # # Support for miscellaneous SITE commands such as SITE MKDIR, SITE SYMLINK, # and SITE UTIME (http://www.proftpd.org/docs/contrib/mod_site_misc.html) # LoadModule mod_site_misc.c # # Provide an external SSL session cache using shared memory # (contrib/mod_tls_shmcache.html) # LoadModule mod_tls_shmcache.c # # Use the /etc/hosts.allow and /etc/hosts.deny files, or other allow/deny # files, for IP-based access control # (http://www.proftpd.org/docs/contrib/mod_wrap.html) # LoadModule mod_wrap.c # # Use the /etc/hosts.allow and /etc/hosts.deny files, or other allow/deny # files, as well as SQL-based access rules, for IP-based access control # (http://www.proftpd.org/docs/contrib/mod_wrap2.html) # LoadModule mod_wrap2.c # # Support module for mod_wrap2 that handles access rules stored in specially # formatted files on disk # (http://www.proftpd.org/docs/contrib/mod_wrap2_file.html) # LoadModule mod_wrap2_file.c # # Support module for mod_wrap2 that handles access rules stored in SQL # database tables (http://www.proftpd.org/docs/contrib/mod_wrap2_sql.html) # LoadModule mod_wrap2_sql.c # # Provide a flexible way of specifying that certain configuration directives # only apply to certain sessions, based on credentials such as connection # class, user, or group membership # (http://www.proftpd.org/docs/contrib/mod_ifsession.html) # LoadModule mod_ifsession.c # TLS (http://www.castaglia.org/proftpd/modules/mod_tls.html) <IfDefine TLS> TLSEngine on TLSRequired on TLSRSACertificateFile /etc/pki/tls/certs/proftpd.pem TLSRSACertificateKeyFile /etc/pki/tls/certs/proftpd.pem TLSCipherSuite ALL:!ADH:!DES TLSOptions NoCertRequest TLSVerifyClient off #TLSRenegotiate ctrl 3600 data 512000 required off timeout 300 TLSLog /var/log/proftpd/tls.log <IfModule mod_tls_shmcache.c> TLSSessionCache shm:/file=/var/run/proftpd/sesscache </IfModule> </IfDefine> # Dynamic ban lists (http://www.proftpd.org/docs/contrib/mod_ban.html) # Enable this with PROFTPD_OPTIONS=-DDYNAMIC_BAN_LISTS in /etc/sysconfig/proftpd <IfDefine DYNAMIC_BAN_LISTS> LoadModule mod_ban.c BanEngine on BanLog /var/log/proftpd/ban.log BanTable /var/run/proftpd/ban.tab # If the same client reaches the MaxLoginAttempts limit 2 times # within 10 minutes, automatically add a ban for that client that # will expire after one hour. BanOnEvent MaxLoginAttempts 2/00:10:00 01:00:00 # Allow the FTP admin to manually add/remove bans BanControlsACLs all allow user ftpadm </IfDefine> # Global Config - config common to Server Config and all virtual hosts # See: http://www.proftpd.org/docs/howto/Vhost.html <Global> # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable Umask 022 # Allow users to overwrite files and change permissions AllowOverwrite yes <Limit ALL SITE_CHMOD> AllowAll </Limit> </Global> # A basic anonymous configuration, with an upload directory # Enable this with PROFTPD_OPTIONS=-DANONYMOUS_FTP in /etc/sysconfig/proftpd <IfDefine ANONYMOUS_FTP> <Anonymous ~ftp> User ftp Group ftp AccessGrantMsg "Anonymous login ok, restrictions apply." # We want clients to be able to login with "anonymous" as well as "ftp" UserAlias anonymous ftp # Limit the maximum number of anonymous logins MaxClients 10 "Sorry, max %m users -- try again later" # Put the user into /pub right after login #DefaultChdir /pub # We want 'welcome.msg' displayed at login, '.message' displayed in # each newly chdired directory and tell users to read README* files. DisplayLogin /welcome.msg DisplayChdir .message DisplayReadme README* # Cosmetic option to make all files appear to be owned by user "ftp" DirFakeUser on ftp DirFakeGroup on ftp # Limit WRITE everywhere in the anonymous chroot <Limit WRITE SITE_CHMOD> DenyAll </Limit> # An upload directory that allows storing files but not retrieving # or creating directories. <Directory uploads/*> AllowOverwrite no <Limit READ> DenyAll </Limit> <Limit STOR> AllowAll </Limit> </Directory> # Don't write anonymous accesses to the system wtmp file (good idea!) WtmpLog off # Logging for the anonymous transfers ExtendedLog /var/log/proftpd/access.log WRITE,READ default ExtendedLog /var/log/proftpd/auth.log AUTH auth </Anonymous> </IfDefine> [/code] I have also tried raising the debug level to 10 [code] DebugLevel 10 SystemLog /var/log/proftpd/proftpd.log And this was the info I saw in the log file: Aug 12 15:13:48 VIRTCENT07 proftpd[9959] 192.168.1.29: ProFTPD 1.3.3e (maint) (built Thu Apr 7 2011 14:41:56 UTC) standalone mode STARTUP Aug 12 15:13:53 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): AuthOrder in effect, resetting auth module order Aug 12 15:13:53 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): connected - local : 127.0.0.1:21 Aug 12 15:13:53 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): connected - remote : 127.0.0.1:40875 Aug 12 15:13:53 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): FTP session opened. Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'USER bluethundr' to mod_tls Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'USER bluethundr' to mod_core Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'USER bluethundr' to mod_core Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'USER bluethundr' to mod_delay Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'USER bluethundr' to mod_auth Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching CMD command 'USER bluethundr' to mod_auth Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching POST_CMD command 'USER bluethundr' to mod_delay Aug 12 15:13:55 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching LOG_CMD command 'USER bluethundr' to mod_log Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASS (hidden)' to mod_tls Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASS (hidden)' to mod_core Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASS (hidden)' to mod_core Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASS (hidden)' to mod_vroot Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): mod_vroot/0.8.5: vroot registered Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASS (hidden)' to mod_delay Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'PASS (hidden)' to mod_auth Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching CMD command 'PASS (hidden)' to mod_auth Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): retrieved UID 1001 for user 'bluethundr' Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): retrieved group IDs: 1002, 500 Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): retrieved group name: bluethundr Aug 12 15:13:57 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): ROOT PRIVS at mod_auth_pam.c:312 Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): RELINQUISH PRIVS at mod_auth_pam.c:482 Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): USER bluethundr (Login failed): Incorrect password. Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_vroot Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): mod_vroot/0.8.5: vroot unregistered Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'SYST' to mod_tls Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'SYST' to mod_core Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching PRE_CMD command 'SYST' to mod_core Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching CMD command 'SYST' to mod_core Aug 12 15:13:58 VIRTCENT07 proftpd[9964] 192.168.1.29 (127.0.0.1[127.0.0.1]): dispatching LOG_CMD command 'SYST' to mod_log [/code] I was able to generate some additional debugging information. not sure how much this helps, but here ya go.. [code] - using TCP receive buffer size of 87380 bytes - using TCP send buffer size of 16384 bytes - testing Unix domain socket using S_ISFIFO - testing Unix domain socket using S_ISSOCK - using S_ISSOCK macro for Unix domain socket detection - mod_tls/2.4.2: using OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 - retrieved UID 99 for user 'nobody' - retrieved GID 99 for group 'nobody' - using TCP receive buffer size of 87380 bytes - using TCP send buffer size of 16384 bytes - testing Unix domain socket using S_ISFIFO - testing Unix domain socket using S_ISSOCK - using S_ISSOCK macro for Unix domain socket detection - mod_tls/2.4.2: using OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 - retrieved UID 99 for user 'nobody' - retrieved GID 99 for group 'nobody' - <IfDefine>: skipping 'TLS' section at line 178 - <IfDefine>: skipping 'DYNAMIC_BAN_LISTS' section at line 195 - <IfDefine>: skipping 'ANONYMOUS_FTP' section at line 228 - UseReverseDNS off, returning IP address instead of DNS name 192.168.1.29 - 192.168.1.29 - Config for ProFTPD server: 192.168.1.29 - ServerIdent 192.168.1.29 - DefaultServer 192.168.1.29 - VRootEngine 192.168.1.29 - DefaultRoot 192.168.1.29 - VRootAlias 192.168.1.29 - AuthPAMConfig 192.168.1.29 - AuthOrder 192.168.1.29 - UserID 192.168.1.29 - UserName 192.168.1.29 - GroupID 192.168.1.29 - GroupName 192.168.1.29 - UseSendfile 192.168.1.29 - DebugLevel 192.168.1.29 - ExtendedLog 192.168.1.29 - Limit 192.168.1.29 - AllowAll 192.168.1.29 - Umask 192.168.1.29 - AllowOverwrite 192.168.1.29 - ROOT PRIVS at mod_delay.c:354 192.168.1.29 - RELINQUISH PRIVS at mod_delay.c:359 192.168.1.29 - ROOT PRIVS at mod_ctrls.c:1139 192.168.1.29 - RELINQUISH PRIVS at mod_ctrls.c:1141 192.168.1.29 - mod_lang/0.9: binding to text domain 'proftpd' using locale path '/usr/share/locale' 192.168.1.29 - mod_lang/0.9: using locale files in '/usr/share/locale' 192.168.1.29 - mod_lang/0.9: added the following supported languages: zh_CN, bg_BG, ja_JP, en_US, ru_RU, zh_TW, ko_KR, fr_FR, it_IT 192.168.1.29 - retrieved group ID: 99 192.168.1.29 - setting group ID: 99 192.168.1.29 - SETUP PRIVS at main.c:3131 192.168.1.29 - ROOT PRIVS at main.c:2153 192.168.1.29 - RELINQUISH PRIVS at main.c:2160 192.168.1.29 - ROOT PRIVS at main.c:2488 192.168.1.29 - deleting existing scoreboard '/var/run/proftpd/proftpd.scoreboard' I was hoping someone out there might be able to recognize what the problem may be and have some suggestions that might help resolve the issue.[/code] thanks in advance!! tim

2 1

drop manitu.net
by m.roth＠5-cent.us 13 Aug '11

13 Aug '11

listadmin, Can you PLEASE, PLEASE find *any* other blacklist than manitu? This asshole's method was ok a dozen years ago; these days, with hosting sites hosting tens or hundreds of thousands of domains, with too many running Windows, and so infected and sending out spam. They then send all mail via one mailhost, with the result that those of us with *no* spam coming out are frequently blocked. This ain't the first time for me with this jerk, either. A few years ago, Cogeco in Canada was using him, and on and off for *months* I was blocked from exchanging email with an old friend... because I was mailing from Roadrunner in Chicago (hosting hundreds of thousands of households), until my friend dropped Cogeco. mark, who is wondering if this will be blocked

15 44

instlaling onto mdadm centos 6
by William Warren 13 Aug '11

13 Aug '11

I am attempting to use mdraid for booting my machine but it never does. Does the centos 5 guide for linux software raid work for centos 6?

2 2

smartd and palimpsest
by Frank Cox 13 Aug '11

13 Aug '11

I notice that the smartd service is not running by default on a new installation. But palimpsest seems to get updated statistics every so often as when I check the statistics on a drive it says "last updated" some number of minutes ago. So if smartd isn't running, where does palimpsest get its information from and what is updating it? Second question, what would enabling the smartd service gain me that I don't have right now? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

4 11

setting the screen background with gconftool-2
by Jerry Geis 12 Aug '11

12 Aug '11

I centos 5 I can run this command: su myuser -c "/usr/bin/gconftool-2 -t string --set /desktop/gnome/background/picture_filename /usr/share/backgrounds/images/mypic.png" and this works fine. under centos 6 it does not appear to be working... I can run the similiar --get command and it tells me its set to what I asked for. However the screen is not showing mypic.png I can use gconf-editor to set it manually and it works. I looked to see if gconfd-2 is running and it is. What might be happening that the screen is not changing and showing the actual pic? Thanks, Jerry

1 1

Wrong directory permissions in RPMs build on CentOS6
by Simon Matter 12 Aug '11

12 Aug '11

Hi, I have rebuilt all our source RPMs on CentOS 6 and found they sometimes differ in directory permissions compared to those built on CentOS 3, 4 and 5. The problem is that %defattr overrides %attr on directories. Have a look at this example spec file: --%<--------------------------------- Summary: foo Name: mini Version: 0.1 Release: 1%{?dist} Group: System Environment/Daemons License: GPLv2+ BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-root %description foo %prep %install %{__install} -d %{buildroot}/XXX %files %defattr(0644,root,root,0755) %attr(0730,root,nobody) %dir /XXX --%<--------------------------------- The rpm file list build on EL5 looks like this: drwx-wx--- 2 root nobody 0 Aug 12 14:16 /XXX The same rebuilt on EL6: drwxr-xr-x 2 root nobody 0 Aug 12 14:19 /XXX So the EL6 package seems wrong. Novell has a BZ entry about this bug: https://bugzilla.novell.com/show_bug.cgi?id=629048 Now my questions 1) did I miss the obvious? 2) am I the only one seeing this? 3) is this fixed in EL6.1 (can anyone test this on RHEL6.1?) I've looked up RedHat's bugzilla but couldn't find anything related. Regards, Simon

1 0

CentOs6 - Ltsp
by Johan Vermeulen 12 Aug '11

12 Aug '11

Dear All, I'm sending this mail in relation to a post on the CentOs 6 forum : https://www.centos.org/modules/newbb/viewtopic.php?topic_id=32545&start=0#f… CentOs 6 works great so far, and I do not want to sound impatient, but I'm eager to find out when Ltsp would be available on CentOs6 - or even in Rhel6. We now use Kiwi-Ltsp on OpenSuse and there's a hot debate going on, everyone wants to switch to Ubuntu, I want to switch to CentOs. So any timeline would be very helpfull in this dogfight. Thanks for any advise. greetings, James -- Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Opensource Software is the future.

2 6

OT: headless fanless silent 2 HDs micro server/pc...
by John Doe 11 Aug '11

11 Aug '11

Hey, A bit out of topic but I am looking for a micro server/pc if anyone knows a descent one... I found many nice NAS but I would like to have full access to the OS (install CentOS, etc). Dream one would be - Very quiet (fanless) since it will sit in my bedroom. - Headless - Small. - 2/3 HDs (2.5" are ok) for RAID1 (hardware RAID would be nice, and with BBC even more).- 1 or 2 GB NICs - USB3 or ESATA would be nice... - Price would not be much of a problem (maybe no more than $1000 though). Random thoughts: - a shuttle PC with 2 HDs and a real RAID card (if it fits inside), but maybe too noisy, no headless. - a mac mini server looks very nice (but max budget, need another Mac to install, not sure if easy/possible to install CentOS). - some NAS were I could easily replace the OS (not on a flash chip). So if you know a nice one... Thx, JD

6 9

centos 6 and XFS
by John R Pierce 11 Aug '11

11 Aug '11

What do I need to enable XFS support in CentOS 6? is there a "CentOS Plus" kernel yet that enables this ? -- john r pierce N 37, W 122 santa cruz ca mid-left coast

4 4

ffmpeg
by m.roth＠5-cent.us 11 Aug '11

11 Aug '11

This is annoying. I've been trying to get motion working correctly on CentOS 6. First, there was no ffmpeg rpms. Now, I try to install it, and it's found on rpmfusion... except that it will not install. It insists that libfaad.so.0 is required, and tells me faad2-libs-2.6.1-5 from el5 is available. (I've done some stuff with my repos to try to get what I need for motion.) I installed faad2-libs. It *still* will not install, telling me the same: Error: Package: ffmpeg-libs-0.4.9-0.52.20080908.el5.x86_64 (rpmfusion-free-updates5-testing) Requires: libfaad.so.0()(64bit) Available: 1:faad2-libs-2.6.1-5.el5.x86_64 (rpmfusion-free-updates5-testing) libfaad.so.0()(64bit) I've run into problems with libfaad being missing before. Here's the real question: how were the ffmpeg and ffmpeg-libs *built*, if a libfaad package isn't available in the repository? mark

7 11

How To for IPV6
by Helmut Drodofsky 11 Aug '11

11 Aug '11

Hi, I try to set up - A centos 6 firewall - With proxy-arp (I know: arp is not supported in ipv6) with ipv6. Arp does not exist for ipv6. So I have added: sysctl -w net.ipv6.conf.default.proxy_ndp=1 To use the neighbor proxy facility. How to activate ipv6 forwarding? As far as I have found, this changed in RHEL6 from 6.1 (/etc/sysconfig/network) to 6.2 (/etc/sysctl.conf). CentOS 6? So I have used sysctl -w net.ipv6.conf.all.forwarding=1 as in RHEL 6.2 As in ipv4 I would prefer to proxy the clients behind the firewall. eth0 is WAN, eth1 is LAN. I have read to use ip -6 neigh add proxy <ipv6 address of eth1> dev eth0 but ip -6 neigh show shows nothing. Then I have tried Ip -6 neigh add proxy <ipv6 address of client> dev eth0 Same result. Is there any How To for ipv6 routing and proxying for CentOS? Best regards Helmut

1 0

LDAP - Shadow options
by Johan Vermeulen 11 Aug '11

11 Aug '11

dear All, I'm trying to set Shadow options in Ldap with the help of phpLDAPadmin. This is *what I know : * */Shadowmax : /maximum nr of days a pw can be valid * /ShadowLastchange : /contains the last change of the shadow file * Shadowwarning : nr of days before expiration to warn user. *What I'm trying *to do is have the users 's passwork expire, that works ok. But how can I have them get a warning message? setting Shadowwarning doesn't seem to be doing it. Do I have to set Shadowexpire as well for this? *Also, *how can I have users change the password at first logon? * *I cannot configure the LDAP files themselves, I only have access via phpLDAPadmin. Thanks for any advise. greetings, James -- Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Opensource Software is the future.

2 2

sieveshell fails to start on CentOS 6.0
by Harold Pritchett 11 Aug '11

11 Aug '11

I don't know if this is the right place to report this or not. I am building a new server on a 64 bit CentOS 6.0 platform. [root@newmick ~]# cat /etc/redhat-release CentOS Linux release 6.0 (Final) [root@newmick ~]# uname -a Linux newmick.halshome.net 2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27 19:49:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux Mail subsystem consists of: sendmail spamassassin spamass-milter cyrus-imap All of these appear to be working. Mail sent to the system appears in the inbox of the user it is sent to. My problem: I am unable to get the cyrus sieve to work. Attempting to run sieveshell to load the filter fails as shown below. [harold@newmick ~]$ sieveshell localhost connecting to localhost unable to connect to server at /usr/bin/sieveshell line 170. [harold@newmick ~]$ I have googled the error message and can find entries going back as far as the early 2000's. Nothing recent which seems to apply. Details: [root@newmick etc]# telnet localhost sieve Trying ::1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6" "SASL" "" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK [root@newmick etc]# telnet 127.0.0.1 sieve Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6" "SASL" "" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK The following subsystems are running: [root@newmick ~]# service --status-all | grep running abrtd (pid 2538) is running... acpid (pid 1768) is running... atd (pid 2557) is running... auditd (pid 2604) is running... automount (pid 1894) is running... avahi-daemon (pid 1743) is running... crond (pid 2546) is running... cyrus-imapd (pid 13884) is running... hald (pid 1777) is running... ip6tables: Firewall is not running. iptables: Firewall is not running. irqbalance (pid 1577) is running... mdmonitor (pid 1621) is running... messagebus (pid 1731) is running... rpc.statd (pid 1609) is running... rpcbind (pid 1591) is running... rpc.idmapd (pid 1656) is running... rsyslogd (pid 1536) is running... saslauthd (pid 2472) is running... sendmail (pid 2510) is running... sm-client (pid 2519) is running... slapd (pid 1877) is running... spamass-milter (pid 2528) is running... spamd (pid 9308) is running... openssh-daemon (pid 1912) is running... xinetd (pid 1920) is running... [root@newmick ~]# Notes on the above... Firewall is NOT running. saslauthd is running. slapd is running. No errors in the selinux audit logs. Configuration files look like this: [root@newmick etc]# cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN tls_cert_file: /etc/pki/tls/certs/cyrus.pem tls_key_file: /etc/pki/tls/certs/cyrus.pem tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt # uncomment this if you're operating in a DSCP environment (RFC-4594) # qosmarking: af13 [root@newmick etc]# [root@newmick etc]# cat /etc/cyrus.conf # standard standalone server implementation START { # do not delete this entry! recover cmd="ctl_cyrusdb -r" # this is only necessary if using idled for IMAP IDLE idled cmd="idled" } # UNIX sockets start with a slash and are put into /var/lib/imap/sockets SERVICES { # add or remove based on preferences # imap cmd="imapd" listen="imap" prefork=5 imaps cmd="imapd -s" listen="imaps" prefork=1 # pop3 cmd="pop3d" listen="pop3" prefork=3 # pop3s cmd="pop3d -s" listen="pop3s" prefork=1 sieve cmd="timsieved" listen="sieve" prefork=0 # these are only necessary if receiving/exporting usenet via NNTP # nntp cmd="nntpd" listen="nntp" prefork=3 # nntps cmd="nntpd -s" listen="nntps" prefork=1 # at least one LMTP is required for delivery # lmtp cmd="lmtpd" listen="lmtp" prefork=0 lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1 # this is only necessary if using notifications # notify cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1 } EVENTS { # this is required checkpoint cmd="ctl_cyrusdb -c" period=30 # this is only necessary if using duplicate delivery suppression, # Sieve or NNTP delprune cmd="cyr_expire -E 3" at=0400 # this is only necessary if caching TLS sessions tlsprune cmd="tls_prune" at=0400 } [root@newmick etc]# What other information do you need? Is there something obvious I have missed? and finally, a list of everything installed... [root@newmick etc]# rpm -qa | sort ConsoleKit-0.4.1-3.el6.x86_64 ConsoleKit-libs-0.4.1-3.el6.x86_64 ConsoleKit-x11-0.4.1-3.el6.x86_64 DeviceKit-power-014-1.el6.x86_64 GConf2-2.28.0-6.el6.x86_64 GConf2-gtk-2.28.0-6.el6.x86_64 MAKEDEV-3.24-6.el6.x86_64 MySQL-python-1.2.3-0.3.c1.1.el6.x86_64 NetworkManager-glib-0.8.1-5.el6_0.1.x86_64 ORBit2-2.14.17-3.1.el6.x86_64 PackageKit-0.5.8-13.el6.x86_64 PackageKit-glib-0.5.8-13.el6.x86_64 PackageKit-gstreamer-plugin-0.5.8-13.el6.x86_64 PackageKit-gtk-module-0.5.8-13.el6.x86_64 PackageKit-yum-0.5.8-13.el6.x86_64 PackageKit-yum-plugin-0.5.8-13.el6.x86_64 SDL-1.2.14-2.el6.x86_64 abrt-1.1.13-4.el6.x86_64 abrt-addon-ccpp-1.1.13-4.el6.x86_64 abrt-addon-kerneloops-1.1.13-4.el6.x86_64 abrt-addon-python-1.1.13-4.el6.x86_64 abrt-cli-1.1.13-4.el6.x86_64 abrt-libs-1.1.13-4.el6.x86_64 abrt-plugin-logger-1.1.13-4.el6.x86_64 abrt-plugin-rhtsupport-1.1.13-4.el6.x86_64 abrt-plugin-sosreport-1.1.13-4.el6.x86_64 acl-2.2.49-4.el6.x86_64 acpid-1.0.10-2.1.el6.x86_64 aic94xx-firmware-30-2.el6.noarch alsa-lib-1.0.21-3.el6.x86_64 alsa-utils-1.0.21-3.el6.x86_64 apr-1.3.9-3.el6_0.1.x86_64 apr-util-1.3.9-3.el6_0.1.x86_64 apr-util-ldap-1.3.9-3.el6_0.1.x86_64 at-3.1.10-43.el6.x86_64 at-spi-1.28.1-2.el6.x86_64 atk-1.28.0-2.el6.x86_64 atmel-firmware-1.3-7.el6.noarch attr-2.4.44-4.el6.x86_64 audit-2.0.4-1.el6.x86_64 audit-libs-2.0.4-1.el6.x86_64 audit-libs-python-2.0.4-1.el6.x86_64 authconfig-6.1.4-6.el6.x86_64 authconfig-gtk-6.1.4-6.el6.x86_64 authd-1.4.3-30.el6.x86_64 autofs-5.0.5-23.el6_0.1.x86_64 avahi-0.6.25-8.el6.x86_64 avahi-glib-0.6.25-8.el6.x86_64 avahi-libs-0.6.25-8.el6.x86_64 avahi-ui-0.6.25-8.el6.x86_64 b43-fwcutter-012-2.2.el6.x86_64 b43-openfwwf-5.2-4.el6.noarch basesystem-10.0-4.el6.noarch bash-4.1.2-3.el6.x86_64 bc-1.06.95-1.el6.x86_64 bfa-firmware-2.1.2.1-2.el6.noarch bind-libs-9.7.0-5.P2.el6_0.1.x86_64 bind-utils-9.7.0-5.P2.el6_0.1.x86_64 binutils-2.20.51.0.2-5.11.el6.x86_64 blktrace-1.0.1-3.1.el6.x86_64 bluez-4.66-1.el6.x86_64 bluez-libs-4.66-1.el6.x86_64 boost-filesystem-1.41.0-11.el6.x86_64 boost-system-1.41.0-11.el6.x86_64 brasero-2.28.3-6.el6.x86_64 brasero-libs-2.28.3-6.el6.x86_64 brasero-nautilus-2.28.3-6.el6.x86_64 bridge-utils-1.2-9.el6.x86_64 busybox-1.15.1-10.el6.x86_64 bzip2-1.0.5-7.el6_0.x86_64 bzip2-libs-1.0.5-7.el6_0.x86_64 c-ares-1.7.0-5.el6.x86_64 ca-certificates-2010.63-3.el6.noarch cairo-1.8.8-3.1.el6.x86_64 cairomm-1.8.0-2.1.el6.x86_64 cdparanoia-10.2-5.1.el6.x86_64 cdparanoia-libs-10.2-5.1.el6.x86_64 cdrdao-1.2.3-4.el6.x86_64 centos-indexhtml-6-1.el6.centos.noarch centos-release-6-0.el6.centos.5.x86_64 certmonger-0.24-4.el6.x86_64 checkpolicy-2.0.22-1.el6.x86_64 cheese-2.28.1-7.el6.x86_64 chkconfig-1.3.47-1.el6.x86_64 cifs-utils-4.4-5.el6_0.2.x86_64 compat-db-4.6.21-15.el6.x86_64 compat-db42-4.2.52-15.el6.x86_64 compat-db43-4.3.29-15.el6.x86_64 compat-expat1-1.95.8-8.el6.x86_64 compat-glibc-2.5-46.2.x86_64 compat-glibc-headers-2.5-46.2.x86_64 compat-libcap1-1.10-1.x86_64 compat-libf2c-34-3.4.6-19.el6.x86_64 compat-libgfortran-41-4.1.2-39.el6.x86_64 compat-libstdc++-296-2.96-144.el6.i686 compat-libstdc++-33-3.2.3-69.el6.x86_64 compat-libtermcap-2.0.8-49.el6.x86_64 compat-openldap-2.4.19_2.3.43-15.el6_0.2.x86_64 compiz-0.8.2-24.el6.x86_64 compiz-gnome-0.8.2-24.el6.x86_64 comps-extras-17.8-1.el6.noarch control-center-2.28.1-25.el6.x86_64 control-center-filesystem-2.28.1-25.el6.x86_64 coreutils-8.4-9.el6.x86_64 coreutils-libs-8.4-9.el6.x86_64 cpio-2.10-9.el6.x86_64 cpuspeed-1.5-15.el6.x86_64 cracklib-2.8.16-4.el6.x86_64 cracklib-dicts-2.8.16-4.el6.x86_64 cracklib-python-2.8.16-4.el6.x86_64 crash-5.0.0-23.el6.x86_64 crash-trace-command-1.0-3.el6.x86_64 crda-1.1.1_2009.11.25-3.el6.x86_64 cronie-1.4.4-2.el6.x86_64 cronie-anacron-1.4.4-2.el6.x86_64 crontabs-1.10-32.1.el6.noarch crypto-utils-2.4.1-24.2.el6.x86_64 cryptsetup-luks-1.1.2-2.el6.x86_64 cryptsetup-luks-libs-1.1.2-2.el6.x86_64 cups-libs-1.4.2-35.el6_0.1.x86_64 curl-7.19.7-16.el6.x86_64 cvs-1.11.23-11.el6_0.1.x86_64 cyrus-imapd-2.3.16-6.el6.x86_64 cyrus-imapd-utils-2.3.16-6.el6.x86_64 cyrus-sasl-2.1.23-8.el6.x86_64 cyrus-sasl-devel-2.1.23-8.el6.x86_64 cyrus-sasl-gssapi-2.1.23-8.el6.x86_64 cyrus-sasl-ldap-2.1.23-8.el6.x86_64 cyrus-sasl-lib-2.1.23-8.el6.x86_64 cyrus-sasl-md5-2.1.23-8.el6.x86_64 cyrus-sasl-ntlm-2.1.23-8.el6.x86_64 cyrus-sasl-plain-2.1.23-8.el6.x86_64 cyrus-sasl-sql-2.1.23-8.el6.x86_64 dash-0.5.5.1-3.1.el6.x86_64 db4-4.7.25-16.el6.x86_64 db4-utils-4.7.25-16.el6.x86_64 dbus-1.2.24-4.el6_0.x86_64 dbus-c++-0.5.0-0.10.20090203git13281b3.1.el6.x86_64 dbus-glib-0.86-5.el6.x86_64 dbus-libs-1.2.24-4.el6_0.x86_64 dbus-python-0.83.0-6.1.el6.x86_64 dbus-x11-1.2.24-4.el6_0.x86_64 desktop-effects-0.8.4-7.el6.x86_64 desktop-file-utils-0.15-9.el6.x86_64 device-mapper-1.02.53-8.el6_0.4.x86_64 device-mapper-event-1.02.53-8.el6_0.4.x86_64 device-mapper-event-libs-1.02.53-8.el6_0.4.x86_64 device-mapper-libs-1.02.53-8.el6_0.4.x86_64 dhclient-4.1.1-12.P1.el6_0.4.x86_64 dhcp-4.1.1-12.P1.el6_0.4.x86_64 diffutils-2.8.1-28.el6.x86_64 dmidecode-2.10-1.30.1.el6.x86_64 dmraid-1.0.0.rc16-10.el6.x86_64 dmraid-events-1.0.0.rc16-10.el6.x86_64 dmz-cursor-themes-0.4-4.el6.noarch docbook-dtds-1.0-51.el6.noarch dosfstools-3.0.9-3.el6.x86_64 dracut-004-33.2.el6_0.noarch dracut-kernel-004-33.2.el6_0.noarch dvd+rw-tools-7.1-5.el6.x86_64 e2fsprogs-1.41.12-3.el6.x86_64 e2fsprogs-libs-1.41.12-3.el6.x86_64 ed-1.1-3.3.el6.x86_64 efibootmgr-0.5.4-8.el6.x86_64 eggdbus-0.6-3.el6.x86_64 eject-2.1.5-17.el6.x86_64 ekiga-3.2.6-3.el6.x86_64 elfutils-0.148-1.el6.x86_64 elfutils-libelf-0.148-1.el6.x86_64 elfutils-libs-0.148-1.el6.x86_64 enchant-1.5.0-4.el6.x86_64 ethtool-2.6.33-0.3.el6.x86_64 evince-2.28.2-14.el6_0.1.x86_64 evince-dvi-2.28.2-14.el6_0.1.x86_64 evince-libs-2.28.2-14.el6_0.1.x86_64 evolution-2.28.3-10.el6.x86_64 evolution-data-server-2.28.3-10.el6.x86_64 evolution-help-2.28.3-10.el6.noarch evolution-mapi-0.28.3-6.el6.x86_64 exempi-2.1.0-5.el6.x86_64 expat-2.0.1-9.1.el6.x86_64 farsight2-0.0.16-1.1.el6.x86_64 file-5.04-6.el6.x86_64 file-libs-5.04-6.el6.x86_64 file-roller-2.28.2-6.el6.x86_64 filesystem-2.4.30-2.1.el6.x86_64 findutils-4.4.2-6.el6.x86_64 fipscheck-1.2.0-4.1.el6.x86_64 fipscheck-lib-1.2.0-4.1.el6.x86_64 firefox-3.6.9-2.el6.centos.x86_64 flac-1.2.1-6.1.el6.x86_64 fontconfig-2.8.0-3.el6.x86_64 fprintd-0.1-19.git04fd09cfa.el6.x86_64 fprintd-pam-0.1-19.git04fd09cfa.el6.x86_64 freetype-2.3.11-6.el6_0.2.x86_64 fuse-2.8.3-1.el6.x86_64 fuse-libs-2.8.3-1.el6.x86_64 gamin-0.1.10-9.el6.x86_64 gawk-3.1.7-6.el6.x86_64 gcalctool-5.28.2-3.el6.x86_64 gconfmm26-2.28.0-1.el6.x86_64 gd-2.0.35-10.el6.x86_64 gdb-7.1-29.el6_0.1.x86_64 gdbm-1.8.0-36.el6.x86_64 gedit-2.28.4-3.el6.x86_64 genisoimage-1.1.9-11.el6.x86_64 geoclue-0.11.1.1-0.13.20091026git73b6729.el6.x86_64 gettext-0.17-16.el6.x86_64 ghostscript-8.70-6.el6.x86_64 ghostscript-fonts-5.50-23.1.el6.noarch giflib-4.1.6-3.1.el6.x86_64 glib2-2.22.5-5.el6.x86_64 glibc-2.12-1.7.el6_0.5.i686 glibc-2.12-1.7.el6_0.5.x86_64 glibc-common-2.12-1.7.el6_0.5.x86_64 glibmm24-2.22.1-1.el6.x86_64 glx-utils-7.7-2.el6.x86_64 gmp-4.3.1-7.el6.x86_64 gnome-backgrounds-2.28.0-2.el6.noarch gnome-bluetooth-2.28.6-8.el6.x86_64 gnome-bluetooth-libs-2.28.6-8.el6.x86_64 gnome-desktop-2.28.2-8.el6.centos.x86_64 gnome-disk-utility-2.30.1-2.el6.x86_64 gnome-disk-utility-libs-2.30.1-2.el6.x86_64 gnome-disk-utility-ui-libs-2.30.1-2.el6.x86_64 gnome-doc-utils-stylesheets-0.18.1-1.el6.noarch gnome-icon-theme-2.28.0-2.el6.noarch gnome-keyring-2.28.2-6.el6.x86_64 gnome-media-2.29.91-6.el6.x86_64 gnome-media-libs-2.29.91-6.el6.x86_64 gnome-menus-2.28.0-4.el6.x86_64 gnome-panel-libs-2.30.2-5.el6.x86_64 gnome-pilot-2.0.17-9.el6.x86_64 gnome-power-manager-2.28.3-3.el6.x86_64 gnome-python2-2.28.0-3.el6.x86_64 gnome-python2-canvas-2.28.0-3.el6.x86_64 gnome-python2-desktop-2.28.0-4.el6.x86_64 gnome-python2-gconf-2.28.0-3.el6.x86_64 gnome-python2-gnome-2.28.0-3.el6.x86_64 gnome-python2-gnomevfs-2.28.0-3.el6.x86_64 gnome-session-2.28.0-15.el6.x86_64 gnome-settings-daemon-2.28.2-11.el6.x86_64 gnome-system-monitor-2.28.0-7.el6.x86_64 gnome-themes-2.28.1-6.el6.noarch gnome-user-docs-2.28.0-4.el6.noarch gnome-user-share-2.28.2-3.el6.x86_64 gnome-utils-2.28.1-10.el6.x86_64 gnome-utils-libs-2.28.1-10.el6.x86_64 gnome-vfs2-2.24.2-6.el6.x86_64 gnote-0.6.3-3.el6.x86_64 gnupg2-2.0.14-4.el6.x86_64 gnutls-2.8.5-4.el6.x86_64 gpg-pubkey-217521f6-45e8a532 gpg-pubkey-6b8d79e6-3f49313d gpg-pubkey-c105b9de-4e0fd3a3 gpgme-1.1.8-3.el6.x86_64 gpm-libs-1.20.6-11.el6.x86_64 grep-2.6.3-2.el6.x86_64 groff-1.18.1.4-21.el6.x86_64 grub-0.97-68.el6.x86_64 grubby-7.0.15-2.el6.x86_64 gsm-1.0.13-4.el6.x86_64 gssdp-0.7.1-1.el6.x86_64 gstreamer-0.10.29-1.el6.x86_64 gstreamer-plugins-bad-free-0.10.19-2.el6.x86_64 gstreamer-plugins-base-0.10.29-1.el6.x86_64 gstreamer-plugins-good-0.10.23-1.el6.x86_64 gstreamer-python-0.10.16-1.1.el6.x86_64 gstreamer-tools-0.10.29-1.el6.x86_64 gthumb-2.10.11-8.el6.x86_64 gtk2-2.18.9-4.el6.x86_64 gtk2-engines-2.18.4-5.el6.x86_64 gtkhtml3-3.28.3-3.el6.x86_64 gtkmm24-2.18.2-1.el6.x86_64 gtksourceview2-2.8.2-4.el6.x86_64 gtkspell-2.0.16-1.el6.x86_64 gucharmap-2.28.2-2.el6.x86_64 gupnp-0.13.2-1.el6.x86_64 gupnp-igd-0.1.3-3.1.el6.x86_64 gvfs-1.4.3-9.el6.x86_64 gvfs-afc-1.4.3-9.el6.x86_64 gvfs-fuse-1.4.3-9.el6.x86_64 gvfs-gphoto2-1.4.3-9.el6.x86_64 gvfs-obexftp-1.4.3-9.el6.x86_64 gzip-1.3.12-18.el6.x86_64 hal-0.5.14-8.el6.x86_64 hal-info-20090716-3.1.el6.noarch hal-libs-0.5.14-8.el6.x86_64 hdparm-9.16-3.4.el6.x86_64 hesiod-3.1.0-19.el6.x86_64 hicolor-icon-theme-0.11-1.1.el6.noarch httpd-2.2.15-5.el6.centos.x86_64 httpd-manual-2.2.15-5.el6.centos.noarch httpd-tools-2.2.15-5.el6.centos.x86_64 hunspell-1.2.8-16.el6.x86_64 hwdata-0.233-1.el6.noarch icedax-1.1.9-11.el6.x86_64 info-4.13a-8.el6.x86_64 initscripts-9.03.17-1.el6_0.1.x86_64 ipa-client-2.0-9.el6.x86_64 iproute-2.6.32-10.el6.x86_64 iptables-1.4.7-3.el6.x86_64 iptables-ipv6-1.4.7-3.el6.x86_64 iputils-20071127-13.el6.x86_64 ipw2100-firmware-1.3-11.el6.noarch ipw2200-firmware-3.1-4.el6.noarch irqbalance-0.55-27.el6.x86_64 iso-codes-3.16-2.el6.noarch ivtv-firmware-20080701-20.2.noarch iw-0.9.17-4.el6.x86_64 iwl1000-firmware-128.50.3.1-1.1.el6.noarch iwl3945-firmware-15.32.2.9-4.el6.noarch iwl4965-firmware-228.61.2.24-2.1.el6.noarch iwl5000-firmware-8.24.2.12-3.el6.noarch iwl5150-firmware-8.24.2.2-1.el6.noarch iwl6000-firmware-9.193.4.1-1.el5.noarch iwl6050-firmware-9.201.4.1-2.el6.noarch jasper-libs-1.900.1-15.el6.x86_64 java-1.6.0-openjdk-1.6.0.0-1.36.b17.el6_0.x86_64 jline-0.9.94-0.8.el6.noarch jpackage-utils-1.7.5-3.12.el6.noarch kbd-1.15-11.el6.x86_64 kbd-misc-1.15-11.el6.noarch kernel-2.6.32-71.29.1.el6.x86_64 kernel-2.6.32-71.el6.x86_64 kernel-doc-2.6.32-71.29.1.el6.noarch kernel-firmware-2.6.32-71.29.1.el6.noarch kernel-headers-2.6.32-71.29.1.el6.x86_64 kexec-tools-2.0.0-145.el6.x86_64 keyutils-1.4-1.el6.x86_64 keyutils-libs-1.4-1.el6.x86_64 kpartx-0.4.9-31.el6_0.3.x86_64 kpathsea-2007-56.el6.x86_64 krb5-libs-1.8.2-3.el6_0.7.x86_64 krb5-workstation-1.8.2-3.el6_0.7.x86_64 latrace-0.5.9-2.el6.x86_64 lcms-libs-1.19-1.el6.x86_64 less-436-4.el6.x86_64 libICE-1.0.6-1.el6.x86_64 libIDL-0.8.13-2.1.el6.x86_64 libSM-1.1.0-7.1.el6.x86_64 libX11-1.3-2.el6.x86_64 libX11-common-1.3-2.el6.noarch libXScrnSaver-1.2.0-1.el6.x86_64 libXau-1.0.5-1.el6.x86_64 libXcomposite-0.4.1-2.el6.x86_64 libXcursor-1.1.10-2.el6.x86_64 libXdamage-1.1.2-1.el6.x86_64 libXdmcp-1.0.3-1.el6.x86_64 libXext-1.1-3.el6.x86_64 libXfixes-4.0.4-1.el6.x86_64 libXfont-1.4.1-1.el6.x86_64 libXft-2.1.13-4.1.el6.x86_64 libXi-1.3-3.el6.x86_64 libXinerama-1.1-1.el6.x86_64 libXmu-1.0.5-1.el6.x86_64 libXpm-3.5.8-2.el6.x86_64 libXrandr-1.3.0-4.el6.x86_64 libXrender-0.9.5-1.el6.x86_64 libXres-1.0.4-1.el6.x86_64 libXt-1.0.7-1.el6.x86_64 libXtst-1.0.99.2-3.el6.x86_64 libXv-1.0.5-1.el6.x86_64 libXvMC-1.0.4-8.1.el6.x86_64 libXxf86dga-1.1.1-1.el6.x86_64 libXxf86misc-1.0.2-1.el6.x86_64 libXxf86vm-1.1.0-1.el6.x86_64 libacl-2.2.49-4.el6.x86_64 libaio-0.3.107-10.el6.x86_64 libao-0.8.8-7.1.el6.x86_64 libarchive-2.8.4-3.el5.x86_64 libart_lgpl-2.3.20-5.1.el6.x86_64 libasyncns-0.8-1.1.el6.x86_64 libatasmart-0.17-3.el6.x86_64 libattr-2.4.44-4.el6.x86_64 libavc1394-0.5.3-9.1.el6.x86_64 libblkid-2.17.2-6.el6_0.1.x86_64 libbonobo-2.24.2-4.el6.x86_64 libbonoboui-2.24.2-3.el6.x86_64 libburn-1.1.0-1.el5.x86_64 libcanberra-0.22-1.el6.x86_64 libcanberra-gtk2-0.22-1.el6.x86_64 libcap-2.16-5.2.el6.x86_64 libcap-ng-0.6.4-3.el6_0.1.x86_64 libcdio-0.81-3.1.el6.x86_64 libcgroup-0.36.1-6.el6_0.1.x86_64 libcollection-0.5.0-28.el6_0.4.x86_64 libcom_err-1.41.12-3.el6.x86_64 libcroco-0.6.2-5.el6.x86_64 libcurl-7.19.7-16.el6.x86_64 libdaemon-0.14-1.el6.x86_64 libdhash-0.4.0-28.el6_0.4.x86_64 libdiscid-0.2.2-4.1.el6.x86_64 libdmx-1.1.0-1.el6.x86_64 libdrm-2.4.20-2.el6.x86_64 libdv-1.0.0-8.1.el6.x86_64 libedit-2.11-4.20080712cvs.1.el6.x86_64 libertas-usb8388-firmware-5.110.22.p23-3.1.el6.noarch libevent-1.4.13-1.el6.x86_64 libexif-0.6.16-4.1.el6.x86_64 libffi-3.0.5-3.2.el6.x86_64 libfontenc-1.0.5-2.el6.x86_64 libfprint-0.1.0-19.pre2.el6.x86_64 libgail-gnome-1.20.1-4.1.el6.x86_64 libgcc-4.4.4-13.el6.i686 libgcc-4.4.4-13.el6.x86_64 libgcrypt-1.4.5-3.el6.x86_64 libglade2-2.6.4-3.1.el6.x86_64 libgnome-2.28.0-11.el6.x86_64 libgnomecanvas-2.26.0-4.el6.x86_64 libgnomekbd-2.28.2-2.el6.x86_64 libgnomeui-2.24.1-4.el6.x86_64 libgomp-4.4.4-13.el6.x86_64 libgpg-error-1.7-3.el6.x86_64 libgphoto2-2.4.7-4.el6.x86_64 libgpod-0.7.2-6.el6.x86_64 libgsf-1.14.15-5.el6.x86_64 libgssglue-0.1-8.1.el6.x86_64 libgtop2-2.28.0-3.el6.x86_64 libgudev1-147-2.29.el6.x86_64 libgweather-2.28.0-4.el6.x86_64 libhugetlbfs-2.8-2.el6.x86_64 libhugetlbfs-utils-2.8-2.el6.x86_64 libical-0.46-2.el5.x86_64 libicu-4.2.1-9.el6.x86_64 libidn-1.18-2.el6.x86_64 libiec61883-1.2.0-4.el6.x86_64 libimobiledevice-0.9.7-4.el6.x86_64 libini_config-0.5.1-28.el6_0.4.x86_64 libiptcdata-1.0.4-2.1.el6.x86_64 libisofs-1.1.2-1.el5.x86_64 libjpeg-6b-46.el6.x86_64 libldb-0.9.10-25.el5.x86_64 libmcpp-2.7.2-4.1.el6.x86_64 libmpcdec-1.2.6-6.1.el6.x86_64 libmtp-1.0.1-2.el6.x86_64 libmusicbrainz3-3.0.2-7.el6.x86_64 libnice-0.0.9-3.el6.x86_64 libnih-1.0.1-6.el6.x86_64 libnl-1.1-12.el6_0.1.x86_64 libnotify-0.5.0-1.el6.x86_64 libogg-1.1.4-2.1.el6.x86_64 liboil-0.3.16-4.1.el6.x86_64 libopenraw-0.0.5-4.1.el6.x86_64 libopenraw-gnome-0.0.5-4.1.el6.x86_64 libpanelappletmm-2.26.0-3.el6.x86_64 libpcap-1.0.0-6.20091201git117cb5.el6.x86_64 libpciaccess-0.10.9-2.el6.x86_64 libplist-1.2-1.el6.x86_64 libpng-1.2.44-1.el6.x86_64 libproxy-0.3.0-2.el6.x86_64 libproxy-bin-0.3.0-2.el6.x86_64 libproxy-python-0.3.0-2.el6.x86_64 libpurple-2.6.6-6.el6_0.x86_64 libraw1394-2.0.4-1.el6.x86_64 librsvg2-2.26.0-5.el6.x86_64 libsamplerate-0.1.7-2.1.el6.x86_64 libselinux-2.0.94-2.el6.x86_64 libselinux-python-2.0.94-2.el6.x86_64 libselinux-utils-2.0.94-2.el6.x86_64 libsemanage-2.0.43-4.el6.x86_64 libsemanage-python-2.0.43-4.el6.x86_64 libsepol-2.0.41-3.el6.x86_64 libshout-2.2.2-5.1.el6.x86_64 libsigc++20-2.2.4.2-1.el6.x86_64 libsndfile-1.0.20-3.el6.x86_64 libsoup-2.28.2-1.el6.x86_64 libspectre-0.2.4-1.el6.x86_64 libss-1.41.12-3.el6.x86_64 libssh2-1.2.2-7.el6.x86_64 libstdc++-4.4.4-13.el6.x86_64 libtalloc-2.0.1-7.el5.x86_64 libtar-1.2.11-16.el6.x86_64 libtasn1-2.3-3.el6.x86_64 libtdb-1.2.1-4.el5.x86_64 libtevent-0.9.8-8.el6.x86_64 libthai-0.1.12-3.el6.x86_64 libtheora-1.1.0-2.el6.x86_64 libtiff-3.9.4-1.el6_0.3.x86_64 libtirpc-0.2.1-1.el6.x86_64 libtool-ltdl-2.2.6-15.5.el6.x86_64 libtopology-0.3-7.el6.x86_64 libudev-147-2.29.el6.x86_64 libusb-0.1.12-23.el6.x86_64 libusb1-1.0.3-1.el6.x86_64 libuser-0.56.13-4.el6_0.1.x86_64 libuser-python-0.56.13-4.el6_0.1.x86_64 libutempter-1.1.5-4.1.el6.x86_64 libuuid-2.17.2-6.el6_0.1.x86_64 libv4l-0.6.3-2.el6.x86_64 libvisual-0.4.0-9.1.el6.x86_64 libvorbis-1.2.3-4.el6.x86_64 libvpx-0.9.6-1.el5.1.x86_64 libwnck-2.28.0-2.el6.x86_64 libxcb-1.5-1.el6.x86_64 libxkbfile-1.0.6-1.1.el6.x86_64 libxklavier-4.0-7.el6.x86_64 libxml2-2.7.6-1.el6.x86_64 libxml2-python-2.7.6-1.el6.x86_64 libxslt-1.1.26-2.el6.x86_64 lockdev-1.0.1-18.el6.x86_64 logrotate-3.7.8-12.el6_0.1.x86_64 logwatch-7.3.6-49.el6.noarch lsof-4.82-1.2.el6.x86_64 ltrace-0.5-16.45svn.1.el6.x86_64 lua-5.1.4-4.1.el6.x86_64 lvm2-2.02.72-8.el6_0.4.x86_64 lvm2-libs-2.02.72-8.el6_0.4.x86_64 m4-1.4.13-5.el6.x86_64 mailcap-2.1.31-1.1.el6.noarch mailx-12.4-6.el6.x86_64 make-3.81-19.el6.x86_64 man-1.6f-29.el6.x86_64 man-pages-3.22-12.el6.noarch man-pages-overrides-1.0-1.el6.noarch mcelog-1.0pre3-0.2.el6.x86_64 mcpp-2.7.2-4.1.el6.x86_64 mdadm-3.1.3-1.el6.x86_64 meanwhile-1.1.0-3.el6.x86_64 media-player-info-6-1.el6.noarch mesa-dri-drivers-7.7-2.el6.x86_64 mesa-libGL-7.7-2.el6.x86_64 mesa-libGLU-7.7-2.el6.x86_64 metacity-2.28.0-20.el6.x86_64 microcode_ctl-1.17-3.el6.x86_64 mingetty-1.08-4.1.el6.x86_64 mlocate-0.22.2-3.el6.x86_64 mod_auth_mysql-3.0.0-11.el6_0.1.x86_64 mod_authz_ldap-0.26-15.el6.x86_64 mod_dnssd-0.6-2.el6.x86_64 mod_nss-1.0.8-8.el6.x86_64 mod_perl-2.0.4-10.el6.x86_64 mod_ssl-2.2.15-5.el6.centos.x86_64 mod_wsgi-3.2-1.el6.x86_64 module-init-tools-3.9-17.el6.x86_64 mousetweaks-2.28.2-1.el6.x86_64 mozilla-filesystem-1.9-5.1.el6.x86_64 mtools-4.0.12-1.el6.x86_64 mtr-0.75-5.el6.x86_64 mysql-5.1.52-1.el6_0.1.x86_64 mysql-connector-odbc-5.1.5r1144-7.el6.x86_64 mysql-libs-5.1.52-1.el6_0.1.x86_64 mysql-server-5.1.52-1.el6_0.1.x86_64 mysql-test-5.1.52-1.el6_0.1.x86_64 nano-2.0.9-7.el6.x86_64 nautilus-2.28.4-15.el6.x86_64 nautilus-extensions-2.28.4-15.el6.x86_64 nautilus-open-terminal-0.17-3.el6.x86_64 nautilus-sendto-2.28.2-3.el6.x86_64 ncurses-5.7-3.20090208.el6.x86_64 ncurses-base-5.7-3.20090208.el6.x86_64 ncurses-libs-5.7-3.20090208.el6.x86_64 neon-0.29.3-1.2.el6.x86_64 net-tools-1.60-102.el6.x86_64 newt-0.52.11-2.el6.x86_64 newt-python-0.52.11-2.el6.x86_64 nfs-utils-1.2.2-7.el6.x86_64 nfs-utils-lib-1.1.5-1.el6.x86_64 nfs4-acl-tools-0.3.3-5.el6.x86_64 notification-daemon-0.5.0-1.el6.x86_64 nscd-2.12-1.7.el6_0.5.x86_64 nspluginwrapper-1.3.0-14.el6.x86_64 nspr-4.8.6-1.el6.x86_64 nss-3.12.7-2.el6.x86_64 nss-pam-ldapd-0.7.5-3.el6.x86_64 nss-softokn-3.12.8-1.el6_0.x86_64 nss-softokn-freebl-3.12.8-1.el6_0.i686 nss-softokn-freebl-3.12.8-1.el6_0.x86_64 nss-sysinit-3.12.7-2.el6.x86_64 nss-tools-3.12.7-2.el6.x86_64 nss-util-3.12.8-1.el6_0.x86_64 ntp-4.2.4p8-2.el6.x86_64 ntpdate-4.2.4p8-2.el6.x86_64 ntsysv-1.3.47-1.el6.x86_64 numactl-2.0.3-9.el6.x86_64 obex-data-server-0.4.3-4.el6.x86_64 obexd-0.19-2.el6.x86_64 oddjob-0.30-5.el6.x86_64 oddjob-mkhomedir-0.30-5.el6.x86_64 opal-3.6.6-4.el6.x86_64 openchange-0.9-7.el6.x86_64 openjpeg-libs-1.3-7.el6.x86_64 openldap-2.4.19-15.el6_0.2.x86_64 openldap-clients-2.4.19-15.el6_0.2.x86_64 openldap-devel-2.4.19-15.el6_0.2.x86_64 openldap-servers-2.4.19-15.el6_0.2.x86_64 openobex-1.4-7.el6.x86_64 openssh-5.3p1-20.el6_0.3.x86_64 openssh-clients-5.3p1-20.el6_0.3.x86_64 openssh-server-5.3p1-20.el6_0.3.x86_64 openssl-1.0.0-4.el6_0.2.x86_64 openssl098e-0.9.8e-17.el6.centos.x86_64 pakchois-0.4-3.2.el6.x86_64 pam-1.1.1-4.el6_0.1.x86_64 pam_krb5-2.3.11-1.el6.x86_64 pam_ldap-185-5.el6.x86_64 pam_passwdqc-1.0.5-6.el6.x86_64 pango-1.28.1-3.el6_0.5.x86_64 pangomm-2.26.0-1.el6.x86_64 parted-2.1-10.el6.x86_64 passwd-0.77-4.el6.x86_64 patch-2.6-6.el6.x86_64 pax-3.4-10.1.el6.x86_64 pciutils-3.1.4-9.el6.x86_64 pciutils-libs-3.1.4-9.el6.x86_64 pcmciautils-015-4.2.el6.x86_64 pcre-7.8-3.1.el6.x86_64 perl-5.10.1-115.el6.x86_64 perl-Archive-Extract-0.38-115.el6.x86_64 perl-Archive-Tar-1.58-115.el6.x86_64 perl-BSD-Resource-1.29.03-3.el6.x86_64 perl-CPAN-1.9402-115.el6.x86_64 perl-CPANPLUS-0.88-115.el6.x86_64 perl-Compress-Raw-Zlib-2.023-115.el6.x86_64 perl-Compress-Zlib-2.020-115.el6.x86_64 perl-Crypt-OpenSSL-Bignum-0.04-8.1.el6.x86_64 perl-Crypt-OpenSSL-RSA-0.25-10.1.el6.x86_64 perl-Crypt-OpenSSL-Random-0.04-9.1.el6.x86_64 perl-Crypt-SSLeay-0.57-16.el6.x86_64 perl-DBD-MySQL-4.013-3.el6.x86_64 perl-DBD-SQLite-1.27-3.el6.x86_64 perl-DBI-1.609-4.el6.x86_64 perl-DBIx-Simple-1.32-3.el6.noarch perl-Date-Manip-5.54-4.el6.noarch perl-Digest-HMAC-1.01-22.el6.noarch perl-Digest-SHA-5.47-115.el6.x86_64 perl-Digest-SHA1-2.12-2.el6.x86_64 perl-Encode-Detect-1.01-2.el6.x86_64 perl-ExtUtils-CBuilder-0.27-115.el6.x86_64 perl-ExtUtils-Embed-1.28-115.el6.x86_64 perl-ExtUtils-MakeMaker-6.55-115.el6.x86_64 perl-ExtUtils-ParseXS-2.2003.0-115.el6.x86_64 perl-File-Fetch-0.26-115.el6.x86_64 perl-HTML-Parser-3.64-2.el6.x86_64 perl-HTML-Tagset-3.20-4.el6.noarch perl-IO-Compress-Base-2.020-115.el6.x86_64 perl-IO-Compress-Zlib-2.020-115.el6.x86_64 perl-IO-Socket-INET6-2.56-4.el6.noarch perl-IO-Socket-SSL-1.31-2.el6.noarch perl-IO-Zlib-1.09-115.el6.x86_64 perl-IPC-Cmd-0.56-115.el6.x86_64 perl-Locale-Maketext-Simple-0.18-115.el6.x86_64 perl-Log-Message-0.02-115.el6.x86_64 perl-Log-Message-Simple-0.04-115.el6.x86_64 perl-Mail-DKIM-0.37-2.el6.noarch perl-MailTools-2.04-4.el6.noarch perl-Module-Build-0.3500-115.el6.x86_64 perl-Module-CoreList-2.18-115.el6.x86_64 perl-Module-Load-0.16-115.el6.x86_64 perl-Module-Load-Conditional-0.30-115.el6.x86_64 perl-Module-Loaded-0.02-115.el6.x86_64 perl-Module-Pluggable-3.90-115.el6.x86_64 perl-Net-DNS-0.65-2.el6.x86_64 perl-Net-LibIDN-0.12-3.el6.x86_64 perl-Net-SSLeay-1.35-9.el6.x86_64 perl-NetAddr-IP-4.027-3.el6.x86_64 perl-Newt-1.08-26.el6.x86_64 perl-Object-Accessor-0.34-115.el6.x86_64 perl-Package-Constants-0.02-115.el6.x86_64 perl-Params-Check-0.26-115.el6.x86_64 perl-Parse-CPAN-Meta-1.40-115.el6.x86_64 perl-Pod-Escapes-1.04-115.el6.x86_64 perl-Pod-Simple-3.13-115.el6.x86_64 perl-Socket6-0.23-3.el6.x86_64 perl-Term-UI-0.20-115.el6.x86_64 perl-Test-Harness-3.17-115.el6.x86_64 perl-Test-Simple-0.92-115.el6.x86_64 perl-Time-HiRes-1.9721-115.el6.x86_64 perl-Time-Piece-1.15-115.el6.x86_64 perl-TimeDate-1.16-11.1.el6.noarch perl-URI-1.40-2.el6.noarch perl-XML-Dumper-0.81-6.el6.noarch perl-XML-Grove-0.46alpha-40.el6.noarch perl-XML-Parser-2.36-7.el6.x86_64 perl-XML-Twig-3.34-1.el6.noarch perl-core-5.10.1-115.el6.x86_64 perl-devel-5.10.1-115.el6.x86_64 perl-libs-5.10.1-115.el6.x86_64 perl-libwww-perl-5.833-2.el6.noarch perl-libxml-perl-0.08-10.el6.noarch perl-parent-0.221-115.el6.x86_64 perl-version-0.77-115.el6.x86_64 php-5.3.2-6.el6_0.1.x86_64 php-cli-5.3.2-6.el6_0.1.x86_64 php-common-5.3.2-6.el6_0.1.x86_64 php-ldap-5.3.2-6.el6_0.1.x86_64 pidgin-2.6.6-6.el6_0.x86_64 pilot-link-0.12.4-6.el6.x86_64 pinentry-0.7.6-5.el6.x86_64 pinentry-gtk-0.7.6-5.el6.x86_64 pinfo-0.6.9-12.el6.x86_64 pixman-0.18.4-1.el6_0.1.x86_64 pkgconfig-0.23-9.1.el6.x86_64 plymouth-0.8.3-17.el6.centos.x86_64 plymouth-core-libs-0.8.3-17.el6.centos.x86_64 plymouth-graphics-libs-0.8.3-17.el6.centos.x86_64 plymouth-plugin-label-0.8.3-17.el6.centos.x86_64 plymouth-plugin-two-step-0.8.3-17.el6.centos.x86_64 plymouth-scripts-0.8.3-17.el6.centos.x86_64 plymouth-system-theme-0.8.3-17.el6.centos.noarch plymouth-theme-rings-0.8.3-17.el6.centos.noarch pm-utils-1.2.5-9.el6.x86_64 policycoreutils-2.0.83-19.8.el6_0.x86_64 policycoreutils-python-2.0.83-19.8.el6_0.x86_64 polkit-0.96-2.el6_0.1.x86_64 polkit-desktop-policy-0.96-2.el6_0.1.noarch polkit-gnome-0.96-3.el6.x86_64 poppler-0.12.4-3.el6_0.1.x86_64 poppler-data-0.4.0-1.el6.noarch poppler-glib-0.12.4-3.el6_0.1.x86_64 popt-1.13-7.el6.x86_64 portreserve-0.0.4-4.el6.x86_64 postgresql-libs-8.4.7-1.el6_0.1.x86_64 prelink-0.4.3-4.el6.x86_64 procmail-3.22-25.1.el6.x86_64 procps-3.2.8-14.el6.x86_64 psacct-6.3.2-63.el6.x86_64 psmisc-22.6-15.el6_0.1.x86_64 pth-2.0.7-9.3.el6.x86_64 ptlib-2.6.5-3.el6.x86_64 pulseaudio-0.9.21-13.el6.x86_64 pulseaudio-libs-0.9.21-13.el6.x86_64 pulseaudio-libs-glib2-0.9.21-13.el6.x86_64 pulseaudio-module-bluetooth-0.9.21-13.el6.x86_64 pycairo-1.8.6-2.1.el6.x86_64 pygobject2-2.20.0-5.el6.x86_64 pygpgme-0.1-18.20090824bzr68.el6.x86_64 pygtk2-2.16.0-3.el6.x86_64 pygtk2-libglade-2.16.0-3.el6.x86_64 pygtksourceview-2.8.0-1.el6.x86_64 python-2.6.5-3.el6_0.2.x86_64 python-crypto-2.0.1-22.el6.x86_64 python-decorator-3.0.1-3.1.el6.noarch python-iniparse-0.3.1-2.1.el6.noarch python-iwlib-0.1-1.2.el6.x86_64 python-ldap-2.3.10-1.el6.x86_64 python-libs-2.6.5-3.el6_0.2.x86_64 python-markupsafe-0.9.2-4.el6.x86_64 python-meh-0.9-1.el6.noarch python-pycurl-7.19.0-8.el6.x86_64 python-slip-0.2.11-1.el6.noarch python-slip-dbus-0.2.11-1.el6.noarch python-urlgrabber-3.9.1-7.el6.noarch pywebkitgtk-1.1.6-3.el6.x86_64 pyxf86config-0.3.37-7.1.el6.x86_64 ql2100-firmware-1.19.38-3.1.el6.noarch ql2200-firmware-2.02.08-3.1.el6.noarch ql23xx-firmware-3.03.27-3.1.el6.noarch ql2400-firmware-5.03.02-1.el6.noarch ql2500-firmware-5.03.02-2.el6.noarch quota-3.17-10.el6.x86_64 rarian-0.8.1-5.1.el6.x86_64 rarian-compat-0.8.1-5.1.el6.x86_64 rdate-1.4-16.el6.x86_64 rdist-6.1.5-49.el6.x86_64 readahead-1.5.6-1.el6.x86_64 readline-6.0-3.el6.x86_64 redhat-bookmarks-6-1.el6.centos.noarch redhat-logos-60.0.14-10.el6.noarch redhat-lsb-4.0-2.1.el6.centos.x86_64 redhat-menus-14.0.0-3.el6.noarch report-0.18-7.el6.centos.x86_64 report-config-ftp-0.18-7.el6.centos.x86_64 report-config-localsave-0.18-7.el6.centos.x86_64 report-config-scp-0.18-7.el6.centos.x86_64 report-gtk-0.18-7.el6.centos.x86_64 report-newt-0.18-7.el6.centos.x86_64 report-plugin-ftp-0.18-7.el6.centos.x86_64 report-plugin-localsave-0.18-7.el6.centos.x86_64 report-plugin-scp-0.18-7.el6.centos.x86_64 rfkill-0.3-4.el6.x86_64 rhino-1.7-0.7.r2.2.el6.noarch rng-tools-2-8.el6.x86_64 rootfiles-8.1-6.1.el6.noarch rpcbind-0.2.0-8.el6.x86_64 rpm-4.8.0-12.el6.x86_64 rpm-libs-4.8.0-12.el6.x86_64 rpm-python-4.8.0-12.el6.x86_64 rsync-3.0.6-5.el6_0.1.x86_64 rsyslog-4.6.2-2.el6.x86_64 rt61pci-firmware-1.2-7.el6.noarch rt73usb-firmware-1.8-7.el6.noarch rtkit-0.5-1.el6.x86_64 samba-client-3.5.4-68.el6_0.2.x86_64 samba-common-3.5.4-68.el6_0.2.x86_64 samba-winbind-clients-3.5.4-68.el6_0.2.x86_64 samba4-libs-4.0.0-23.alpha11.el6.x86_64 scenery-backgrounds-6.0.0-1.el6.noarch seahorse-2.28.1-4.el6.x86_64 sed-4.2.1-5.el6.x86_64 selinux-policy-3.7.19-54.el6_0.5.noarch selinux-policy-targeted-3.7.19-54.el6_0.5.noarch sendmail-8.14.4-8.el6.x86_64 sendmail-cf-8.14.4-8.el6.noarch sendmail-milter-8.14.4-8.el6.x86_64 setools-libs-3.3.7-4.el6.x86_64 setools-libs-python-3.3.7-4.el6.x86_64 setserial-2.17-25.el6.x86_64 setup-2.8.14-10.el6.noarch setuptool-1.19.9-3.el6.x86_64 sg3_utils-libs-1.28-3.el6.x86_64 sgml-common-0.6.3-32.el6.noarch sgpio-1.2.0.10-5.el6.x86_64 shadow-utils-4.1.4.2-8.el6.x86_64 shared-mime-info-0.70-4.el6.x86_64 slang-2.2.1-1.el6.x86_64 smartmontools-5.39.1-2.el6.x86_64 smp_utils-0.94-4.el6.x86_64 sos-2.2-2.el6.noarch sound-juicer-2.28.1-6.el6.x86_64 sound-theme-freedesktop-0.7-3.el6.noarch spamass-milter-0.3.1-3.el6.rf.x86_64 spamassassin-3.3.1-2.el6.x86_64 speex-1.2-0.12.rc1.1.el6.x86_64 sqlite-3.6.20-1.el6.x86_64 sssd-1.2.1-28.el6_0.4.x86_64 sssd-client-1.2.1-28.el6_0.4.x86_64 startup-notification-0.10-2.1.el6.x86_64 strace-4.5.19-1.10.el6.x86_64 sudo-1.7.2p2-9.el6.x86_64 sysstat-9.0.4-12.el6_0.1.x86_64 system-config-date-1.9.60-1.el6.noarch system-config-date-docs-1.0.9-1.el6.noarch system-config-firewall-1.2.27-3.el6_0.2.noarch system-config-firewall-base-1.2.27-3.el6_0.2.noarch system-config-firewall-tui-1.2.27-3.el6_0.2.noarch system-config-users-1.2.104-1.el6_0.3.noarch system-config-users-docs-1.0.8-1.el6.noarch system-gnome-theme-60.0.2-1.el6.noarch system-icon-theme-6.0.0-2.el6.noarch system-setup-keyboard-0.7-4.el6.x86_64 systemtap-runtime-1.2-9.el6.x86_64 sysvinit-tools-2.87-3.dsf.el6.x86_64 taglib-1.6.1-1.1.el6.x86_64 tar-1.23-3.el6.x86_64 tcp_wrappers-7.6-56.3.el6.x86_64 tcp_wrappers-libs-7.6-56.3.el6.x86_64 tcpdump-4.0.0-3.20090921gitdf3cb4.1.el6.x86_64 tcsh-6.17-12.el6.x86_64 telnet-0.17-46.el6.x86_64 tftp-0.49-5.1.el6.x86_64 time-1.7-37.1.el6.x86_64 tmpwatch-2.9.16-3.el6.x86_64 totem-2.28.6-2.el6.x86_64 totem-mozplugin-2.28.6-2.el6.x86_64 totem-nautilus-2.28.6-2.el6.x86_64 totem-pl-parser-2.28.3-1.el6.x86_64 trace-cmd-1.0.4-7.el6.x86_64 traceroute-2.0.14-2.el6.x86_64 tzdata-2011g-1.el6.noarch tzdata-java-2011g-1.el6.noarch udev-147-2.29.el6.x86_64 udisks-1.0.1-2.el6.x86_64 unique-1.1.4-2.el6.x86_64 unixODBC-2.2.14-11.el6.x86_64 unzip-6.0-1.el6.x86_64 upstart-0.6.5-6.1.el6_0.1.x86_64 urw-fonts-2.4-10.el6.noarch usbmuxd-1.0.2-1.el6.x86_64 usbutils-0.86-2.el6.x86_64 usermode-1.102-3.el6.x86_64 usermode-gtk-1.102-3.el6.x86_64 ustr-1.0.4-9.1.el6.x86_64 util-linux-ng-2.17.2-6.el6_0.1.x86_64 valgrind-3.5.0-18.el6.x86_64 vconfig-1.9-8.1.el6.x86_64 vim-common-7.2.411-1.6.el6.x86_64 vim-enhanced-7.2.411-1.6.el6.x86_64 vim-minimal-7.2.411-1.6.el6.x86_64 vorbis-tools-1.2.0-7.el6.x86_64 vsftpd-2.2.2-6.el6_0.1.x86_64 wacomexpresskeys-0.4.2-3.el6.x86_64 wavpack-4.60-1.1.el6.x86_64 webalizer-2.21_02-3.3.el6.x86_64 webkitgtk-1.2.6-2.el6_0.x86_64 wget-1.12-1.4.el6.x86_64 which-2.19-5.1.el6.x86_64 wireless-tools-29-5.1.1.el6.x86_64 wodim-1.1.9-11.el6.x86_64 words-3.0-17.el6.noarch xcb-util-0.3.6-1.el6.x86_64 xdg-utils-1.0.2-15.20091016cvs.el6.noarch xinetd-2.3.14-29.el6.x86_64 xkeyboard-config-1.6-7.el6.noarch xml-common-0.6.3-32.el6.noarch xmlrpc-c-1.16.24-1200.1840.el6.x86_64 xmlrpc-c-client-1.16.24-1200.1840.el6.x86_64 xorg-x11-drivers-7.3-13.2.el6.x86_64 xorg-x11-drv-acecad-1.4.0-2.el6.x86_64 xorg-x11-drv-aiptek-1.3.0-2.el6.x86_64 xorg-x11-drv-apm-1.2.2-1.1.el6.x86_64 xorg-x11-drv-ast-0.89.9-1.1.el6.x86_64 xorg-x11-drv-ati-6.13.0-6.el6.x86_64 xorg-x11-drv-ati-firmware-6.13.0-6.el6.noarch xorg-x11-drv-cirrus-1.3.2-1.1.el6.x86_64 xorg-x11-drv-dummy-0.3.3-1.el6.x86_64 xorg-x11-drv-elographics-1.2.3-5.el6.x86_64 xorg-x11-drv-evdev-2.3.2-8.el6.x86_64 xorg-x11-drv-fbdev-0.4.2-1.el6.x86_64 xorg-x11-drv-fpit-1.3.0-5.el6.x86_64 xorg-x11-drv-glint-1.2.4-1.1.el6.x86_64 xorg-x11-drv-hyperpen-1.3.0-4.el6.x86_64 xorg-x11-drv-i128-1.3.3-1.1.el6.x86_64 xorg-x11-drv-i740-1.3.2-1.1.el6.x86_64 xorg-x11-drv-intel-2.11.0-7.el6.x86_64 xorg-x11-drv-keyboard-1.4.0-3.el6.x86_64 xorg-x11-drv-mach64-6.8.2-1.1.el6.x86_64 xorg-x11-drv-mga-1.4.12-2.el6.x86_64 xorg-x11-drv-mouse-1.5.0-4.el6.x86_64 xorg-x11-drv-mutouch-1.2.1-5.el6.x86_64 xorg-x11-drv-nouveau-0.0.16-8.20100423git13c1043.el6.x86_64 xorg-x11-drv-nv-2.1.15-4.el6.x86_64 xorg-x11-drv-openchrome-0.2.904-1.el6.x86_64 xorg-x11-drv-penmount-1.4.0-5.el6.x86_64 xorg-x11-drv-qxl-0.0.12-2.1.el6_0.1.x86_64 xorg-x11-drv-r128-6.8.1-2.el6.x86_64 xorg-x11-drv-rendition-4.2.2-4.1.el6.x86_64 xorg-x11-drv-s3virge-1.10.4-1.1.el6.x86_64 xorg-x11-drv-savage-2.3.1-1.1.el6.x86_64 xorg-x11-drv-siliconmotion-1.7.3-1.1.el6.x86_64 xorg-x11-drv-sis-0.10.2-1.1.el6.x86_64 xorg-x11-drv-sisusb-0.9.3-1.1.el6.x86_64 xorg-x11-drv-synaptics-1.2.1-5.el6.x86_64 xorg-x11-drv-tdfx-1.4.3-1.1.el6.x86_64 xorg-x11-drv-trident-1.3.3-1.1.el6.x86_64 xorg-x11-drv-v4l-0.2.0-3.el6.3.x86_64 xorg-x11-drv-vesa-2.3.0-1.el6.x86_64 xorg-x11-drv-vmmouse-12.6.5-3.el6.x86_64 xorg-x11-drv-vmware-10.16.7-2.1.el6.x86_64 xorg-x11-drv-void-1.3.0-4.el6.x86_64 xorg-x11-drv-voodoo-1.2.3-1.1.el6.x86_64 xorg-x11-drv-wacom-0.10.5-6.el6_0.2.x86_64 xorg-x11-font-utils-7.2-10.el6.x86_64 xorg-x11-server-Xorg-1.7.7-26.el6_0.3.x86_64 xorg-x11-server-common-1.7.7-26.el6_0.3.x86_64 xorg-x11-server-utils-7.4-15.el6_0.2.x86_64 xorg-x11-utils-7.4-8.el6.x86_64 xorg-x11-xauth-1.0.2-7.1.el6.x86_64 xorg-x11-xinit-1.0.9-13.el6.x86_64 xorg-x11-xkb-utils-7.4-6.el6.x86_64 xulrunner-1.9.2.9-1.el6.centos.x86_64 xvattr-1.3-18.el6.x86_64 xz-4.999.9-0.3.beta.20091007git.el6.x86_64 xz-libs-4.999.9-0.3.beta.20091007git.el6.x86_64 xz-lzma-compat-4.999.9-0.3.beta.20091007git.el6.x86_64 yelp-2.28.1-8.el6.x86_64 yp-tools-2.9-10.el6.x86_64 ypbind-1.20.4-29.el6.x86_64 yum-3.2.27-14.el6.centos.noarch yum-metadata-parser-1.1.2-14.1.el6.x86_64 yum-plugin-fastestmirror-1.1.26-11.el6.noarch yum-utils-1.1.26-11.el6.noarch zd1211-firmware-1.4-4.el6.noarch zenity-2.28.0-1.el6.x86_64 zip-3.0-1.el6.x86_64 zlib-1.2.3-25.el6.x86_64 zsh-4.3.10-4.1.el6.x86_64 Harold

3 7

libsafe on CentOS 5.6
by Nguyen Vu Hung 11 Aug '11

11 Aug '11

Hello all, IIRC, libsafe was officially included in previous versions of Redhat. However, I found that libsafe is not on CentOS 5.6 yum repo. Is that any reason that such a good library like libsafe is excluded? Maybe is there any better alternative for libsafe recently? Regards, Nguyen Vu Hung

2 1

Re: [CentOS] selinux prohibiting sssd usage
by david 11 Aug '11

11 Aug '11

At 09:32 AM 8/10/2011, you wrote: >I've got a CentOS 6 machine that's slated to go into production >providing some web and development-repository services. > >Part of the environment is gitweb, which works as expected with one >glitch: SELinux doesn't allow gitweb.cgi to query sssd to display who >owns the repositories. > >The audit log entries are pretty straightforward, e.g., > >type=AVC msg=audit(XXXXXXXXXXXX): avc: denied { search } for >pid=XXXX comm="gitweb.cgi" name="sss" dev=XXX ino=XXXXXXXXXXX >scontext=unconfined_u:system_r:httpd_git_script_t:s0 >tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=dir > >I'll use audit2allow to build a custom policy if need be, but what I'd >really like to hear is that there's an SELinux boolean that can be >tweaked or a file context that can be altered to make things work as >expected. > >-- >Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/ >_________ Paul I've just spent three days trying to figure out why SSH worked sometimes, sometimes not. Just minutes before your note arrived, I figured I had to disable SELINUX, and now it works just fine. Your note confirmed that there's a link there. David Kurn

5 6

Using Samba to share Apache web root, securely
by Trey Dockendorf 11 Aug '11

11 Aug '11

I'm setting up a shared web server running Apache. Each web root will belong to a department, which has a corresponding Active Directory group to give access. So far I've got samba working and such, but am having some trouble wrapping my head around the necessary permissions to make all this work, especially securely. So far I've found that both the POSIX and the ACL permissions must both allow a user to write to directory which is proving problematic. Is it better to give the web root directories very "loose" permissions and have Samba manage who can access the folders? A few options I've come across would have a user's logged in account mapped to the "apache" user through samba, using the "force user", but that seems like a security risk allowing users to be apache. Another option I currently have working is using a default ACL for apache to give the web server read of all the files. The problem I have with this is some directories require write and some files should have read only (like db config files), so again a global permission set doesn't seem to work. I'd be very interested in knowing how someone has solved a problem like this. Thanks - Trey

10 19

Re: [CentOS] ffmpeg (resending, blocked by dnsbl.manitu.net)
by m.roth＠5-cent.us 10 Aug '11

10 Aug '11

Scott Robbins wrote: > On Wed, Aug 10, 2011 at 05:11:12PM -0400, m.roth(a)5-cent.us wrote: >> This is annoying. I've been trying to get motion working correctly on CentOS 6. First, there was no ffmpeg rpms. Now, I try to install it, and <snip> >> I've run into problems with libfaad being missing before. Here's the real question: how were the ffmpeg and ffmpeg-libs *built*, if a libfaad package isn't available in the repository? >> > I just use rpmforge's and never have issues. It's not always the latest version, but I've always been able to do everything with it that I need. > *sigh* My manager doesn't want us to use rpmforge (though he'll make an exception, at least for my testing, for kmod-nvidia, and even then, he wants it disabled *except* for updating that). > > Don't know if that helps at all, probably doesn't, but the repoforge ones have always worked well for me, through CentOS 5, and now 6. Thanks, but not really. I'll also mention that he really, really prefer that we not build except where absolutely necessary (like gspca for the video device). There's still the question: how can they build the package, if the dependency's not there? mark PS And I had to remove my hosting provider's mailhost *again*

2 1

Centos6(64) SSH sessions fail irregularly [SOLVED]
by david 10 Aug '11

10 Aug '11

Folks I just installed a centos6 system on a 64-bit box. My methods include remote administration, using ssh from a windows machine. I use this method successfully on several Centos5 boxes and one Centos6 (32bit) machine as well. However, on this latest one, I get inconsistent results with ssh. This is a server, SELINUX is disabled, it's command line only, and I have installed sendmail, apache, vsftpd (but haven't used the last two yet). The machine is connnected internally only (behind NAT), so is invisible to the outside world. In a successful use of SSH just after installing the needed software, I installed the DSA keys so no password is used. Subsequent to that, and at seemingly unpredictable frequent attempts, I get results such as a) A successful SSH login as desired. Variious commands, sucn as "ls" and such, work fine. b) A successful login, but a write failure with whatever I enter next c) Connection refused d) A request for password (followed by failure) I can't seem to connect these various errors with any activity on the server -- I'm monitoring /var/log/messages /var/log/secure and /var/log/audit/audit.log, on a terminal directly attached to the server. The server, and my windows box (which is my admin box) are on the same internal IPV4 network (192.168.xxx.xxx), all controlled by a Centos5 gateway running just fine which provides DHCP and NAT when needed. I haven't been able to correlate these failures with anything I do; there's no indication on the server that anything is happening. Of course, when the SSH login succeeds, there's a notation in the logs, but no evidence of the failures. I tend to get "best" results after a bootstrap, With no evidence of anything abnormal showing up in the logs, it's not clear where to look. I would appreciate some clues as to where to look next. The server seems to have functioning internet access through the gateway. I can easily redo the install if needed. The hardware was previously running Win7, so I suspect it's good hardware. It's a roll-you-own machine built with components from Fry's, so don't ask me for the model name :-) I'd appreciate advice or guidance. David Kurn SOLUTION: (with embarrassment) It turns out that one of the Ethernet switches in the path was not behaving properly. I removed it, and the problem disappeared. Sorry to have raised a red-flag ... the problem has been bugging me for 5 days and only today did I look at the switch.

1 0

Increase audio volume
by Juan C. Valido 10 Aug '11

10 Aug '11

Is there a way to increase the audio volume on CentOS 6. I have it set at the max and still very low. Thank you.

4 6

Centos6(64) SSH sessions fail irregularly
by david 10 Aug '11

10 Aug '11

Folks I just installed a centos6 system on a 64-bit box. My methods include remote administration, using ssh from a windows machine. I use this method successfully on several Centos5 boxes and one Centos6 (32bit) machine as well. However, on this latest one, I get inconsistent results with ssh. This is a server, SELINUX is disabled, it's command line only, and I have installed sendmail, apache, vsftpd (but haven't used the last two yet). The machine is connnected internally only (behind NAT), so is invisible to the outside world. In a successful use of SSH just after installing the needed software, I installed the DSA keys so no password is used. Subsequent to that, and at seemingly unpredictable frequent attempts, I get results such as a) A successful SSH login as desired. Variious commands, sucn as "ls" and such, work fine. b) A successful login, but a write failure with whatever I enter next c) Connection refused d) A request for password (followed by failure) I can't seem to connect these various errors with any activity on the server -- I'm monitoring /var/log/messages /var/log/secure and /var/log/audit/audit.log, on a terminal directly attached to the server. The server, and my windows box (which is my admin box) are on the same internal IPV4 network (192.168.xxx.xxx), all controlled by a Centos5 gateway running just fine which provides DHCP and NAT when needed. I haven't been able to correlate these failures with anything I do; there's no indication on the server that anything is happening. Of course, when the SSH login succeeds, there's a notation in the logs, but no evidence of the failures. I tend to get "best" results after a bootstrap, With no evidence of anything abnormal showing up in the logs, it's not clear where to look. I would appreciate some clues as to where to look next. The server seems to have functioning internet access through the gateway. I can easily redo the install if needed. The hardware was previously running Win7, so I suspect it's good hardware. It's a roll-you-own machine built with components from Fry's, so don't ask me for the model name :-) I'd appreciate advice or guidance. David Kurn

1 0

sieveshell fails to start on CentOS 6.0
by Harold Pritchett 10 Aug '11

10 Aug '11

I don't know if this is the right place to report this or not. I am building a new server on a 64 bit CentOS 6.0 platform. [root@newmick ~]# cat /etc/redhat-release CentOS Linux release 6.0 (Final) [root@newmick ~]# uname -a Linux newmick.halshome.net 2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27 19:49:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux Mail subsystem consists of: sendmail spamassassin spamass-milter cyrus-imap All of these appear to be working. Mail sent to the system appears in the inbox of the user it is sent to. My problem: I am unable to get the cyrus sieve to work. Attempting to run sieveshell to load the filter fails as shown below. [harold@newmick ~]$ sieveshell localhost connecting to localhost unable to connect to server at /usr/bin/sieveshell line 170. [harold@newmick ~]$ I have googled the error message and can find entries going back as far as the early 2000's. Nothing recent which seems to apply. Details: [root@newmick etc]# telnet localhost sieve Trying ::1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6" "SASL" "" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK [root@newmick etc]# telnet 127.0.0.1 sieve Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6" "SASL" "" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK The following subsystems are running: [root@newmick ~]# service --status-all | grep running abrtd (pid 2538) is running... acpid (pid 1768) is running... atd (pid 2557) is running... auditd (pid 2604) is running... automount (pid 1894) is running... avahi-daemon (pid 1743) is running... crond (pid 2546) is running... cyrus-imapd (pid 13884) is running... hald (pid 1777) is running... ip6tables: Firewall is not running. iptables: Firewall is not running. irqbalance (pid 1577) is running... mdmonitor (pid 1621) is running... messagebus (pid 1731) is running... rpc.statd (pid 1609) is running... rpcbind (pid 1591) is running... rpc.idmapd (pid 1656) is running... rsyslogd (pid 1536) is running... saslauthd (pid 2472) is running... sendmail (pid 2510) is running... sm-client (pid 2519) is running... slapd (pid 1877) is running... spamass-milter (pid 2528) is running... spamd (pid 9308) is running... openssh-daemon (pid 1912) is running... xinetd (pid 1920) is running... [root@newmick ~]# Notes on the above... Firewall is NOT running. saslauthd is running. slapd is running. No errors in the selinux audit logs. Configuration files look like this: [root@newmick etc]# cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN tls_cert_file: /etc/pki/tls/certs/cyrus.pem tls_key_file: /etc/pki/tls/certs/cyrus.pem tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt # uncomment this if you're operating in a DSCP environment (RFC-4594) # qosmarking: af13 [root@newmick etc]# [root@newmick etc]# cat /etc/cyrus.conf # standard standalone server implementation START { # do not delete this entry! recover cmd="ctl_cyrusdb -r" # this is only necessary if using idled for IMAP IDLE idled cmd="idled" } # UNIX sockets start with a slash and are put into /var/lib/imap/sockets SERVICES { # add or remove based on preferences # imap cmd="imapd" listen="imap" prefork=5 imaps cmd="imapd -s" listen="imaps" prefork=1 # pop3 cmd="pop3d" listen="pop3" prefork=3 # pop3s cmd="pop3d -s" listen="pop3s" prefork=1 sieve cmd="timsieved" listen="sieve" prefork=0 # these are only necessary if receiving/exporting usenet via NNTP # nntp cmd="nntpd" listen="nntp" prefork=3 # nntps cmd="nntpd -s" listen="nntps" prefork=1 # at least one LMTP is required for delivery # lmtp cmd="lmtpd" listen="lmtp" prefork=0 lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1 # this is only necessary if using notifications # notify cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1 } EVENTS { # this is required checkpoint cmd="ctl_cyrusdb -c" period=30 # this is only necessary if using duplicate delivery suppression, # Sieve or NNTP delprune cmd="cyr_expire -E 3" at=0400 # this is only necessary if caching TLS sessions tlsprune cmd="tls_prune" at=0400 } [root@newmick etc]# What other information do you need? Is there something obvious I have missed? I tried to send this with a "rpm -qa" attached, but my mail server timed out. too big I guess... Harold

1 0

selinux prohibiting sssd usage
by Paul Heinlein 10 Aug '11

10 Aug '11

I've got a CentOS 6 machine that's slated to go into production providing some web and development-repository services. Part of the environment is gitweb, which works as expected with one glitch: SELinux doesn't allow gitweb.cgi to query sssd to display who owns the repositories. The audit log entries are pretty straightforward, e.g., type=AVC msg=audit(XXXXXXXXXXXX): avc: denied { search } for pid=XXXX comm="gitweb.cgi" name="sss" dev=XXX ino=XXXXXXXXXXX scontext=unconfined_u:system_r:httpd_git_script_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=dir I'll use audit2allow to build a custom policy if need be, but what I'd really like to hear is that there's an SELinux boolean that can be tweaked or a file context that can be altered to make things work as expected. -- Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/

2 2

setting up bare minimal CentOS VM
by Rudi Ahlers 10 Aug '11

10 Aug '11

Hi all, I need to setup a real bare minimum CentOS Virtual Machine, but with normal internet / network access. i.e. I need SSH, Mutt, Links, lynx, ping, tracert, dig, iptables, etc. Does anyone know where (if?) I can get a list of applications which gets installed with CentOS 6 if every option is deselected in the installer so that I can see what I can remove which isn't really necessary once installed? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

12 20

Re: [CentOS] Two Samba Servers and Rsync
by Tom Diehl 10 Aug '11

10 Aug '11

On Tue, 9 Aug 2011, John R Pierce wrote: > On 08/09/11 12:50 PM, Railic Njegos wrote: >> I plan to use rsync to sync data from second to first server. It is OK ? >> Any suggestion ? > > rsync doesn't much tolerate network glitches in my experience. its > also a incremental file backup/copy, and won't be doing a 'snapshot' so > if any of these files you're copying are things that are randomly > updated like a database, its quite possible for the copy to be useless. > > as a backup strategy, having a single copy that you overwrite when you > make a new copy is weak. you have no history, you can't recover the file > that the user overwrote 2 days ago and forgot to tell you until today, > as you just overwrote your backup with his mistake last night. There is also rdiff-backup if you need history. Of course it is not a perfect solution either. Any solution is going to have trade offs. Regards, -- Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

1 0

keyboard problem
by bcb 10 Aug '11

10 Aug '11

OK, I know what I'm doing is "officially unsupported", but perhaps someone has some suggestions... I have a CentOS 5.6 system running as a virtual machine using VMware player. I cloned the system, booted the clone to make sure everything worked after cloning, it did. I then booted off a CentOS 6 ISO and did an upgrade (I know, unsupported!). I've got the system to the point where everything works except the keyboard. If I boot to a command line, it works, as soon as X gets involved, there is no response at all from the keyboard. The on-screen keyboard does work. The physical keyboard works in the host OS and all of the other guest OSes on the machine. It works in the original CentOS 5.6 VM. I'm at a loss and would love some advice on where to look next. Thanks! Bruce

5 11

tweek startup and logon
by Johan Vermeulen 10 Aug '11

10 Aug '11

Dear All, CentOs 6 is great, but I would like to get back 2 things from 5.6 : how can I always see the text lines during startup? (so no graphical screen ) how can I *not *see all the users on the system when loging on? (so that users also have to remember their username) thanks for any advise. James -- Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Opensource Software is the future.

3 3

Centos6 Migration glitch - Samba
by david 10 Aug '11

10 Aug '11

Folks My experiments have shown that Samba behaves differently in Centos 5.6 and Centos 6 (updated). In Centos 5, service smb restart restarts both smb and nmb. In Centos 6, however, it restarts only smb. REMEDY: a) Make sure that both services running b) Issue chkconfig smb on chkconfig nmb on IS THIS THE DESIRED BEHAVIOR I have no idea if this difference is a "bug" or a "feature", and leave it to others to determine that. David Kurn

3 2

Re: [CentOS] fail2ban help
by Nikos Gatsis - Qbit 10 Aug '11

10 Aug '11

On 9/8/2011 7:00 μμ, centos-request(a)centos.org wrote: >> > Hello list. >> > I have a question for fail2ban for bad logins on sasl. >> > I use sasl, sendmail and cyrus-imapd. >> > In jail.conf I use the following syntax: >> > >> > [sasl-iptables] >> > >> > enabled = true >> > filter = sasl >> > backend = polling >> > action = iptables[name=sasl, port=smtp, protocol=tcp] >> > sendmail-whois[name=sasl, dest=my@email] >> > logpath = /var/log/maillog >> > maxretry = 6 >> > >> > and the following filter: >> > >> > failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL >> > (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: >> > [A-Za-z0-9+/]*={0,2})?$ >> > >> > in iptables: >> > >> > fail2ban-sasl tcp -- anywhere anywhere tcp >> > dpt:smtp >> > ... >> > >> > Chain fail2ban-sasl (2 references) >> > target prot opt source destination >> > RETURN all -- anywhere anywhere >> > >> > >> > The problem is that never ban bad logins. >> > >> > I tried to change action as port="imap,imaps,pop3,pop3s,smtp" but >> > nothing change. >> > >> > Can somebody help me? >> > >> > Thank you, >> > Nikos >> > >> > >> > >> > _______________________________________________ >> > CentOS mailing list >> > CentOS(a)centos.org >> > http://lists.centos.org/mailman/listinfo/centos > Hello Nikos, > I have nearly the same regex as you: > > failregex = : warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed.* > and it works with > fail2ban-regex /var/log/maillog /etc/fail2ban/filter.d/sasl.conf > > > Gru? Hello list I change failregex and finally show results! failregex = : badlogin: [-._\w]+ \[<HOST>\] plaintext [A-Za-z0-9+/] SASL$-13$: authentication failure: checkpass failed fail2ban-regex find hits. However, although a line added in iptables and I recieve an email that show the ban ip address, badlogins still continuing from the same IP. iptables -L: Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-sasl tcp -- anywhere anywhere tcp dpt:smtp fail2ban-SSH tcp -- anywhere anywhere tcp dpt:ssh ... Chain fail2ban-sasl (1 references) target prot opt source destination DROP all -- [ip.ip.ip.ip] anywhere RETURN all -- anywhere anywhere What is wrong now? Thank you Nikos

1 0

Re: [CentOS] fail2ban help
by Nikos Gatsis - Qbit 10 Aug '11

10 Aug '11

Nikos Gatsis - Qbit <ngatsis(a)qbit.gr> Gesendet von: centos-bounces(a)centos.org 09.08.2011 10:40 Bitte antworten an CentOS mailing list <centos(a)centos.org> An centos(a)centos.org Kopie Thema [CentOS] fail2ban help Hello list. I have a question for fail2ban for bad logins on sasl. I use sasl, sendmail and cyrus-imapd. In jail.conf I use the following syntax: [sasl-iptables] enabled = true filter = sasl backend = polling action = iptables[name=sasl, port=smtp, protocol=tcp] sendmail-whois[name=sasl, dest=my@email] logpath = /var/log/maillog maxretry = 6 and the following filter: failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [A-Za-z0-9+/]*={0,2})?$ in iptables: fail2ban-sasl tcp -- anywhere anywhere tcp dpt:smtp ... Chain fail2ban-sasl (2 references) target prot opt source destination RETURN all -- anywhere anywhere The problem is that never ban bad logins. I tried to change action as port="imap,imaps,pop3,pop3s,smtp" but nothing change. Can somebody help me? Thank you, Nikos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Hello Nikos, I have nearly the same regex as you: failregex = : warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed.* and it works with fail2ban-regex /var/log/maillog /etc/fail2ban/filter.d/sasl.conf Gru? Andreas Reschke --------------------------------------------------------- I try yours and get no matches on maillog. Do you thing that the following is correct? ... port="imap,imaps,pop3,pop3s,smtp" ... Thank you

1 0

mingetty on centos 6
by Jerry Geis 09 Aug '11

09 Aug '11

hi all, on centos 5 - I could trim the number of mingetty's running by editing /etc/inittab on centos 6 there are none in the /etc/inittab file but it reverences /etc/init/tty.conf. I dont see in there how to control how many mingetty's get started. Where is that? THanks, Jerry

4 4

KVM , virt-manager , USB-devices
by Timothy Kesten 09 Aug '11

09 Aug '11

Hi Folks, Using CentOS 6 x86_64. I've installed a WIN-XP guest successful (conversion from a VMWare-Image) Everything works fine - expect USB-Devices. I've installed connected USB-Stick with virt-manager but in the WIN-XP guest no device accessible. What goes wrong? More information needed? Thx Timothy

2 1

Can two machines in the same network have the same hostname with different IPs?
by Indunil Jayasooriya 09 Aug '11

09 Aug '11

Hi, Can two machines in the same network have the *same hostname* with different IPs? I have done it in test environment. I want to do it under production? is it possible ? is it recommended? let's say . one Server is *mail.example.com* with ip address* 192.168.0.1* the other Server is also *mail.example.com* but with another ip address *192.168.0.2 * -- Thank you Indunil Jayasooriya

4 4

fail2ban help
by Nikos Gatsis - Qbit 09 Aug '11

09 Aug '11

Hello list. I have a question for fail2ban for bad logins on sasl. I use sasl, sendmail and cyrus-imapd. In jail.conf I use the following syntax: [sasl-iptables] enabled = true filter = sasl backend = polling action = iptables[name=sasl, port=smtp, protocol=tcp] sendmail-whois[name=sasl, dest=my@email] logpath = /var/log/maillog maxretry = 6 and the following filter: failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [A-Za-z0-9+/]*={0,2})?$ in iptables: fail2ban-sasl tcp -- anywhere anywhere tcp dpt:smtp ... Chain fail2ban-sasl (2 references) target prot opt source destination RETURN all -- anywhere anywhere The problem is that never ban bad logins. I tried to change action as port="imap,imaps,pop3,pop3s,smtp" but nothing change. Can somebody help me? Thank you, Nikos

2 1

Funny Characters in Midnight Commander??
by Keith Roberts 09 Aug '11

09 Aug '11

I'm on Centos 5.6 and I have a problem with the screen showing funny characters when I run mc in a konsole terminal window, under Xfce desktop. Here's a link to what it looks like: http://tinypic.com/view.php?pic=zojry1&s=7 Any ideas why mc is doing this? Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

3 4

CentOS 6 kernel update and grub.conf...
by John Doe 09 Aug '11

09 Aug '11

Hey, I ran a yum update and it installed a new kernel. ... Installed: kernel.x86_64 0:2.6.32-71.29.1.el6 kernel-devel.x86_64 0:2.6.32-71.29.1.el6 but it did not modify the grub.conf file. #boot=/dev/sda default=0 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-71.el6.x86_64) root (hd0,0) kernel /vmlinuz-2.6.32-71.el6.x86_64 ro root=UUID=... initrd /initramfs-2.6.32-71.el6.x86_64.img Is this the new behavior or...? Thx, JD

4 7

Does anyone try Xen in Kernel 3.0?
by LHT. Quốc 08 Aug '11

08 Aug '11

Does anyone try Xen in Kernel 3.0? I use "$ git clone git://git.kernel.org/pub/scm/linux/kernel/git/jeremy/xen.git linux-3.0.0-xen" command and it works. -- Thân ái, Quốc

5 5

Re: [CentOS] Centos6 Migration glitch - ZFS-FUSE
by david 08 Aug '11

08 Aug '11

At 02:03 PM 8/8/2011, you wrote: > > Folks > > > > My experiments with installing ZFS-FUSE in a Centos 6 system reveal > > behavior different from that observed in Centos 5.6. > > > > The version of ZFS-FUSE is that provided on the EPEL repository, and > > was installed on a 32-bit machine. I use it because of its > > deduplication facility. > > > > In Centos 5.6, the facility worked as advertised. > > > > In Centos 6, however, the system "hung" in initialization upon the > > first reboot after installing ZFS-FUSE and creating a pool. By > > "hung", I mean that the cute sliding blue bar that progresses during > >You may want to disable the cute sliding blue crap by editing the grub >options and remove "rhgb quiet" from it. That's what I do most of the >times because I want to see what's going on. > > > bootstrap got to nearly complete and then stood there for at least 20 > > minutes. The identical computer, configured without ZFS-FUSE, > > completed the system initialization within normal time. > > > > Following some clues found by googling the bug, I suspected that > > AUDITD and ZFS-FUSE had a conflict. After several experiments, I > > found what appears to work. > > > > REMEDY: > > > > When you install ZFS-FUSE, it will start the zfs-fuse service, and > > will also automatically issue a "chkconfig zfs-fuse on" command. The > > remedy is to prevent zfs-fuse from running during initializtion by issuing > > chkconfig zfs-fuse off > > and starting the service after the initialization is complete. > >Hm, I've just started running a server with SELinux enabled and already >learned why it was a good thing to stay away from it until now. I guess >that's also where your problems come from: the selinux-policy does not >have support for zfs-fuse, or for the way you are using it. you can check >audit.log to see if SELinux prevents zfs-fuse from starting up. I may be >wrong of course. > >Regards, >Simon > > >I I forgot to add... SELINUX is disabled.

1 0

Centos6 Migration glitch - ZFS-FUSE
by david 08 Aug '11

08 Aug '11

Folks My experiments with installing ZFS-FUSE in a Centos 6 system reveal behavior different from that observed in Centos 5.6. The version of ZFS-FUSE is that provided on the EPEL repository, and was installed on a 32-bit machine. I use it because of its deduplication facility. In Centos 5.6, the facility worked as advertised. In Centos 6, however, the system "hung" in initialization upon the first reboot after installing ZFS-FUSE and creating a pool. By "hung", I mean that the cute sliding blue bar that progresses during bootstrap got to nearly complete and then stood there for at least 20 minutes. The identical computer, configured without ZFS-FUSE, completed the system initialization within normal time. Following some clues found by googling the bug, I suspected that AUDITD and ZFS-FUSE had a conflict. After several experiments, I found what appears to work. REMEDY: When you install ZFS-FUSE, it will start the zfs-fuse service, and will also automatically issue a "chkconfig zfs-fuse on" command. The remedy is to prevent zfs-fuse from running during initializtion by issuing chkconfig zfs-fuse off and starting the service after the initialization is complete. I personally chose to start it via a crontab entry as root: @reboot <something> where "something" could be the direct service call, or (as was in my case) the starting of a script to do a bunch of startup things including starting zfs-fuse service. IS THIS THE DESIRED BEHAVIOR I sort of doubt it, and I'm sure it will eventually be sorted out by the zfs-fuse developers. David Kurn

2 1

Loadbalance Repo / ldirectord packages?
by Peter Hinse 08 Aug '11

08 Aug '11

Hi *, we want to migrate our loadbalancers running CentOS 5.6 to new hardware and CentOS 6, however the (heartbeat-)ldirectord package seems to be hidden in the new LoadBalance repo in RHEL6. Any chance to get the RHEL SRPMs from this repo? Regards, Peter

2 4

iptables problem under tuned bridge
by Steve liu 08 Aug '11

08 Aug '11

Hi this is my bridge structure ========================================= brctl show bridge name bridge id STP enabled interfaces *br0* 8000.0023aea32e26 no *eth0* *tapxp* ========================================= I tunneled a tapxp for my xp virtual machine. host is centos 6 using eth0 eth0 & tapxp are under bridge *br0 *and they work well. I wish to open 22 for host 80 for xp to outside. others to the outside are blocked. but I also wanna constrict nothing between *host* and *xp* now for host it's OK to open 22 and others are blocked. and I just want to open the connection between host and xp now. I tried the following command .... ========================================================================== iptables -A OUTPUT -s argent -m physdev --physdev-in tapxp -j ACCEPT iptables -A OUTPUT -s argent -m policy --dir out --mode tunnel --tunnel-dst 172.18.16.0/21 -j ACCEPT iptables -A OUTPUT -j LOG --log-tcp-sequence --log-level debug --log-prefix 'OUTPUT:' ========================================================================== but failed by logging this ================================================================ 6381 Aug 8 15:45:04 argent kernel: OUTPUT:IN= OUT=br0 SRC=172.18.22.188 DST=172.18.22.180 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=54323 DF PROTO=TCP SPT=52595 DPT=3389 SEQ=1304299590 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 ================================================================ from this log, I think it should in the *OUTPUT* chain, not *FORWARD* but why could I open it? 1) is there a much more verbose log could be used, or could be opened. 2) how to solve this? thanks

1 0

Will QA site also have 6.1 info/updates?
by Patrick Lists 07 Aug '11

07 Aug '11

Hi, Just wondering if the QA site will also have info & updates on the progress of 6.1? Thanks! Parick

1 0

openssl and eliptic curve
by Lucian 07 Aug '11

07 Aug '11

Hello, I'm trying to rebuild redhat openssl rpm with eliptic curve support enabled. What I did is just edit the spec file and modify the configure parameters from no-ec to enable-ec. Not surprisingly the package does not build with this enabled: http://pastie.org/2334009 This appears to be deliberate due to shitware patents. Anyone knows how to "fix" this? Thanks

2 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss