- Discuss - lists.centos.org

Automount, External USB disk and e2fsck
by Robert Heller 23 Nov '10

23 Nov '10

Does Automount/autofs automagically run e2fsck? If so, how does one disable this? We have an external USB connected 2TB hard drive setup to automount. Sometimes e2fsck gets fired up, I think from Automount. I have this line in the automount config: /backupdisk -fstype=ext3,nocheck :LABEL=BACKUP I believe this should prevent Automount from running e2fsck, but it still runs it. (We have a cron job that daily does a e2fsck -p on this disk at a 'quiet' time.) -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

1 0

200 line kernel patch to improve performance
by Jerry Geis 23 Nov '10

23 Nov '10

There was an article about a kernel patch to improve performance. www.webupd8.org/2010/11/alternative-to-200-lines-kernel-patch.html it involves adding this to ~/.bashrc | if [ "$PS1" ] ; then mkdir -m 0700 /sys/fs/cgroup/cpu/user/$$ echo $$ > /sys/fs/cgroup/cpu/user/$$/tasks fi and this as root: ||mount -t cgroup cgroup /sys/fs/cgroup/cpu -o cpu mkdir -m 0777 /sys/fs/cgroup/cpu/user| My machine Centos 5.5 does not have a /sys/fs/cgroup Is there anything else to do instead? Jerry

2 1

redirecting time output
by Rainer Traut 23 Nov '10

23 Nov '10

Hi, am trying to pipe output from time command and output from a shell script to the mail program. So far it's not working as expected... # time echo "test" 2>&1 | mail -s "timetest" my(a)mail.com real 0m0.126s user 0m0.000s sys 0m0.000s The time command writes to stderror, but here the redirection seems to apply to the echo command? Thx Rainer

3 3

Fail Transfer of Large Files
by Michael D. Berger 23 Nov '10

23 Nov '10

On my intranet, I sometimes transfer large files, about 4G, to an CentOS old box that I use for a web server. I transfer with ftp or sftp. Usually, before the file is complete, the transfer "stalls". At that point, ping from the destination box to the router fails. I then deactivate the net interface on the destination box and then activate it. Ping is then successful, and the transfer is completed. The transferred file is correct, as verified with sha1sum. All connections are via cat6 wire. So what do you think? Should I try changing the net card? Any tests to run? Any other suggestions? Thanks for your help. Mike.

7 13

Sendmail, localloop, and iptables -- should I be more paranoid?
by Robert Moskowitz 23 Nov '10

23 Nov '10

By default, sendmail only listens on the localloop: DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl But by default to allow sendmail to even work the iptables entry is: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT Without this, sendmail can't even connect to localloop. But should I handedit this line to something like: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -d 127.0.0.1 --dport 25 -j ACCEPT And once you handedit iptables, you can't use the gnome firewall applet, I suspect...

3 5

upcoming mailman version change?
by Dave Stevens 23 Nov '10

23 Nov '10

Hi, I'm using CentOS on a box that, among other things, offers mailman mailing lists, currently mailman 2.1.9. Version 2.1.14 is avilable from the developers but integrating it into the system promises to be tedious. I looked at RHEL 6 and don't know where to look to find the version there, which I assume will be the version in CentOS 6. Can anyone either confirm what version will be in C6 or where to find the full feature list in RHEL 6? Dave -- "It is no measure of health to be well adjusted to a profoundly sick society." Krishnamurti

2 2

where to download tzdata-java-20101-1.e15 RPM fro CENTOS 5.5 X86?
by mcclnx mcc 22 Nov '10

22 Nov '10

I am installed CENTOS 5.5 on X86. After finish, I tried to apply latest patches. Rpm patch manager say need "dependency" "tzdata-java-20101-1.e15". I search CENTOS 5.5 CD and can NOT find this file. I also search Internet and no result. Can anyone tell me where to download "tzdata-java-20101-1.e15" RPM? Thanks.

3 2

firefox. java. 64 bit. bleah!
by m.roth＠5-cent.us 22 Nov '10

22 Nov '10

Found this <http://plugindoc.mozdev.org/linux-amd64.html#java-sun>, and I remember the plugins directory... except firefox 3.6.11, I can't find any, not in ~/.mozilla, not in /usr/lib64/mozilla. Anyone have a clue for the poor? mark

4 6

Re: [CentOS] Router for SOHO network - hardware considerations
by Bob Puff＠NLE 22 Nov '10

22 Nov '10

I am looking for something similar to this thread.. Is there a way to make a small CentOS distro that is bootable and runnable from only a USB memory stick? It would need to be able to have files modified, but I wouldn't want the USB stick to die prematurely due to a ton of writes... Bob

2 1

Strange ntp behaviour?
by Robert Moskowitz 22 Nov '10

22 Nov '10

The following is from my logwatch email: --------------------- XNTPD Begin ------------------------ XNTPD Killed: 7 Time(s) XNTPD Started: 8 Time(s) Total interfaces 8 (non-local: 4) Total synchronizations 6 (hosts: 1) Errors getaddrinfo: "0.centos.pool.ntp.org" invalid host address, ignored: 2 time(s) getaddrinfo: "1.centos.pool.ntp.org" invalid host address, ignored: 2 time(s) getaddrinfo: "2.centos.pool.ntp.org" invalid host address, ignored: 2 time(s) ---------------------- XNTPD End ------------------------- Yet from this host I get: # host 0.centos.pool.ntp.org 0.centos.pool.ntp.org has address 208.53.158.34 0.centos.pool.ntp.org has address 69.50.219.51 0.centos.pool.ntp.org has address 108.76.168.145 So what is NTP doing here; why the errors for getaddrinfo? Or is this nothing more than 2 out of some many times getaddrinfo failed, but worked just fine enough to count?

2 2

TC Filter Flows & ESFQ - Traffic Shaping
by Frederick Abrams 22 Nov '10

22 Nov '10

Hi, We currently have ESFQ running on an old Fedora machine and i'm trying to build a new router with something similar using CentOS 5.5 The problem is that it seems by default the CentOS is not compiled with TC ESFQ or TC filter hash flows I get the following error: Unknown filter "flow", hence option "hash" is unparsable How can i add support for the hash flow option or ESFQ or perhaps someone can suggest a better option where I can get the same functionality of even sharing based on src / dst tc filter add dev eth0 parent 10: protocol ip handle 10 flow hash keys dst divisor 1024 -- Fred -- This message has been scanned for viruses and dangerous content by Intelvision MailScanner, and is believed to be clean.

1 0

"Cracking Passwords In The Cloud: Amazon’s New EC2 GPU Instances" -- using CentOS
by Timo Schoeler 22 Nov '10

22 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, in case someone missed it: CentOS was used in a EC2 setup to demonstrate GPU-based brute force cracking of passwords. "Cracking Passwords In The Cloud: Amazon’s New EC2 GPU Instances" http://stacksmashing.net/2010/11/15/cracking-in-the-cloud-amazons-new-ec2-g… See also: http://it.slashdot.org/story/10/11/16/1549245/Cracking-Passwords-With-Amazo… Cheers, Timo :) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFM6i59fg746kcGBOwRAoioAKC6oCVuh0meM5ynVUe7L+a3JlLFHgCeMivH nwFIhD4rcm6pP66uE9/M3Uo= =ZWeW -----END PGP SIGNATURE-----

1 0

Routing of outgoing packets
by Mitja Mihelič 22 Nov '10

22 Nov '10

Hi! I am trying to use hping to chek the latency of our network. Somehow things are not going to plan and I thought someone might be able to shed some light on the subject. Here is the setup: (the IP addresses gvien here are fake, but they do represent the correct state of the networking setup) vlan interface IP mask V2 eth0 192.168.20.20 32 V4 eth1 172.16.4.40 32 V6 eth2 172.16.6.60 32 The default route is set to eth1. The idea is to use eth2 for pinging only, the other two interfaces are used by another service and management access. If I do: ping -c 2 -I eth2 74.125.39.147 or fping -c 2 -I eth2 74.125.39.147 It binds to eth2 and sends its ICMP probes via that interface with the IP on that interface. If I do: hping3 -1 -c 2 -I eth2 74.125.39.147 -VD or [root@server ~]# hping3 -c 2 -I eth2 74.125.39.147 -VD DEBUG: if lo: Don't Match (but seems to be UP) DEBUG: if eth0: Don't Match (but seems to be UP) DEBUG: if eth1: Don't Match (but seems to be UP) DEBUG: if eth2: OK using eth2, addr: 172.16.6.60, MTU: 1500 It supposedly binds to eth2. But tcpdump tells another story. Packets get sent out via the default route (eth1) with the IP from eth2 set as the source address. The same happens with tcptraceroute (tcptraceroute-1.5-0.beta7.el5.rf.i386.rpm). I have tried various routing policies, but I have yet to find a solution that works. I have used iptables to log the packets in the OUTPUT chain, but they arrive there with the interface already set to eth1. Can anyone help ? Regards, Mitja Mihelic

3 3

Centos 4 and cgiemail
by Todd Cary 22 Nov '10

22 Nov '10

I am running Centos 4 and want to run cgiemail in a directory under the web application. The setting of the "value" property in the <form> is tricky, but I have the web application running on other servers without a problem. On my server I get the error that it cannot find the file pointed to by the value in the <form>. My question is whether or not I need to do something special like install an application on the server or do something special with permissions (the cgiemail is owned by apache and has 775 for permissions). The web app is in the "interact" folder with the cgiemail in cgi-bin under it. Works on other servers. Many thanks... Todd -- Ariste Software Petaluma, CA 94952 http://www.aristesoftware.com

2 5

LDAP clients fail to connect with SSL enabled
by bluethundr 21 Nov '10

21 Nov '10

I am attempting to setup SSL/TLS support on my openLDAP 2.4 server on FreeBSD. LBSD2# pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I put my cert file, key file and CA certfile in a directory called /usr/local/etc/openldap/cacerts Here's how it looks: [root@LBSD2:/usr/local/etc/openldap/cacerts]#ls -l total 48 dr--r----- 2 root ldap 512 Nov 21 17:12 bak -r--r----- 1 root ldap 1960 Nov 21 07:05 bsd2.summitnjhome.com.crt -r--r----- 1 root ldap 4604 Nov 21 17:16 gd_bundle.crt -r--r----- 1 root ldap 4689 Nov 21 18:59 sf_bundle.crt -r--r----- 1 root ldap 1537 Nov 21 17:16 sf_issuing.crt -r--r----- 1 root ldap 1090 Nov 21 12:29 slapd.csr -r--r----- 1 root ldap 1743 Nov 21 12:26 slapd.key -r--r----- 1 root ldap 1675 Nov 21 17:25 slapd.pem My cert flie is a GoDaddy turbo-ssl certfile named bsd2.summitnjhome.com.crt. slapd.key is the key file and slapd.pem is the same thing only with the password removed. I'm a little unsure of which CA file to use but I think that sf_issuing.crt _should_ work as this is the CA file that I used to setup a similar SSL enabled LDAP server for a client recently. Although I have tried all three CA files in this directory: (gd_bundle.crt, sf_bundle.crt, and sf_issuing.crt). I put the various cert/key files into my slapd.conf file like this: LBSD2# cat slapd.conf | grep -i tls ## TLS options for slapd TLSCipherSuite HIGH:MEDIUM:+SSLv2 TLSCertificateFile /usr/local/etc/openldap/cacerts/bsd2.summitnjhome.com.crt TLSCertificateKeyFile /usr/local/etc/openldap/cacerts/slapd.pem TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt Slapd restarts cleanly! LBSD2# /usr/local/etc/rc.d/slapd restart Stopping slapd. Waiting for PIDS: 81924. Starting slapd. Then I attempt to setup a virtual instance of CentOS 5.5 on the client side and that's where things fall apart...I attempt to ssh to localhost as an LDAP account: [root@VIRTCENT08:/etc/openldap/cacerts]#ssh bluethundr@localhost [...tectonic plates drift, careers begin and end, babies learn to walk, talk and grow to adulthood..] Connection closed by 127.0.0.1 [root@VIRTCENT08:/etc/openldap/cacerts]#getent passwd | grep ldapAccount [same interminable wait as above] This is what my /etc/ldap.conf file looks like on the client: [root@VIRTCENT08:/etc/openldap/cacerts]#cat /etc/ldap.conf # Your LDAP server. Must be resolvable without using LDAP. # Multiple hosts may be specified, each separated by a # space. How long nss_ldap takes to failover depends on # whether your LDAP client library supports configurable # network or connect timeouts (see bind_timelimit). #host 127.0.0.1 # The distinguished name of the search base. base dc=summitnjhome,dc=com # stored in /etc/ldap.secret (mode 600) #rootbinddn cn=manager,dc=example,dc=com # The port. # Optional: default is 389. #port 389 # Search timelimit #timelimit 30 timelimit 120 # Bind/connect timelimit #bind_timelimit 30 bind_timelimit 120 # Idle timelimit; client will close connections # (nss_ldap only) if the server has not been contacted # for the number of seconds specified below. #idle_timelimit 3600 idle_timelimit 3600 # Netscape SDK LDAPS #ssl on # Netscape SDK SSL options #sslpath /etc/ssl/certs # OpenLDAP SSL mechanism # start_tls mechanism uses the normal LDAP port, LDAPS typically 636 #ssl start_tls #ssl on # OpenLDAP SSL options # Require and verify server certificate (yes/no) # Default is to use libldap's default behavior, which can be configured in # /etc/openldap/ldap.conf using the TLS_REQCERT setting. The default for # OpenLDAP 2.0 and earlier is "no", for 2.1 and later is "yes". #tls_checkpeer yes # CA certificates for server certificate verification # At least one of these are required if tls_checkpeer is "yes" #tls_cacertfile /etc/ssl/ca.cert #tls_cacertdir /etc/ssl/certs # SSL cipher suite # See man ciphers for syntax #tls_ciphers TLSv1 # Client certificate and key # Use these, if your server requires client authentication. #tls_cert #tls_key # SASL mechanism for PAM authentication - use is experimental # at present and does not support password policy control uri ldap://ldap.summitnjhome.com/ ssl start_tls tls_cacertdir /etc/openldap/cacerts pam_password crypt This is how my nsswitch on the client side is setup: passwd: files ldap shadow: files ldap group: files ldap And here is the cert dir on my CentOS client: [root@VIRTCENT08:/etc/openldap/cacerts]#ls -l total 72 lrwxrwxrwx 1 root root 13 Nov 21 09:44 97552d04.0 -> gd_bundle.crt lrwxrwxrwx 1 root root 14 Nov 21 09:44 b737b221.0 -> sf_issuing.crt dr--r--r-- 2 root root 4096 Nov 21 2010 bak -r--r--r-- 1 root root 1960 Nov 21 07:05 bsd2.summitnjhome.com.crt lrwxrwxrwx 1 root root 25 Nov 21 09:44 c75be861.0 -> bsd2.summitnjhome.com.crt -r--r--r-- 1 root root 4604 Nov 21 2010 gd_bundle.crt -r--r--r-- 1 root root 1537 Nov 21 2010 sf_issuing.crt -r--r--r-- 1 root root 1090 Nov 21 12:29 slapd.csr -r--r--r-- 1 root root 1743 Nov 21 12:26 slapd.key -r--r--r-- 1 root root 1675 Nov 21 2010 slapd.pem Back on the server side there is a lot of activity in the ldap logs (here is an excerpt) Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: read activity on 11 Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: select: listen=6 active_threads=0 tvp=NULL Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: select: listen=7 active_threads=0 tvp=NULL Nov 21 20:21:38 LBSD2 slapd[81972]: connection_read(11): input error=-2 id=1017, closing. Nov 21 20:21:38 LBSD2 slapd[81972]: connection_closing: readying conn=1017 sd=11 for close Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: activity on 1 descriptor I've encloses a more complete log file as an attachment. I then try to show the CA files with an openssl command. First with sf_issuing.crt - slapd.conf: TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt On the client: [root@VIRTCENT08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile sf_issuing.crt CONNECTED(00000003) 3143:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188 Next with sf_bundle.crt - slapd.conf: TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_bundle.crt [root@VIRTCENT08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile sf_bundle.crt 3149:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('sf_bundle.crt','r') 3149:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 3149:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: CONNECTED(00000003) 3149:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: Next with gd_bundle.crt - TLSCACertificateFile /usr/local/etc/openldap/cacerts/gd_bundle.crt [root@VIRTCENT08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile gd_bundle.crt CONNECTED(00000003) 3156:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: Disabling TLS on the client side authentication works again! [root@VIRTCENT08:/etc/openldap/cacerts]#ssh bluethundr@localhost bluethundr@localhost's password: Last login: Sun Nov 21 09:41:34 2010 from 192.168.1.50 ######################################################### # SUMMITNJHOME.COM # # TITLE: VIRTCENT08 BOX # # LOCATION: SUMMIT BASEMENT # # # ######################################################### Any thought on how to resolve the current situation would be most appreciated! ;) -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Auto-Re: CentOS Digest, Vol 70, Issue 20
by 韦加宁 21 Nov '10

21 Nov '10

信已收到,谢谢!

2 1

Auto-Re: CentOS Digest, Vol 70, Issue 21
by 韦加宁 21 Nov '10

21 Nov '10

信已收到,谢谢!

1 0

Old thread:how many people still use NIS?
by Nico Kadel-Garcia 21 Nov '10

21 Nov '10

Good morning! I've been offlist for years, and hopping back on for various reasons, I see a thread that I'd like to add to. There's an old thread on NIS use in Centrify that I'd like to add some comments to. I'm still forced to work with NIS for various reasons, including interaction with heavy duty NAS's that require it for NFSv4. I have been busy falling in serious love with Centrify (www.centrify.com) for this. For an environment that already has an extensive Active Directory investment, it's a way to save weeks or months of expensive engineering time and get on with your job. It's a commercial toolkit, reasonably open source friendly and with free components for home users. It provides a very good plug-and-play solution to merging Linux and UNIX authentication, including NIS support, to an Active Directory back end. They basically do what I'd do if I had the time, including workable GUI's and error reporting. You get genuine single-sign-on, commercially supported Putty for your Windows clients, Kerberos password handling, commercially supported OpenSSH 5.x with GSSAPI, good support for multiple "zones" that have different sets of authorized users, scriptable toolkits for adding or adding machines to the relevant zones, etc., etc. It works well with CentOS 5.x, and saves me the work of having to manually compile my own OpenSSH to get GSSAPI support. And the NIS plugin works *very* well and saves weeks of work building your own solution with the limited and out of date components in CentOS or RHEL 5. It "Just Works(tm)".

1 0

PATA Hard Drive woes
by Keith Roberts 21 Nov '10

21 Nov '10

Hi All. Yesterday I was installing Centos 5.5 to my web server, and it looks like the main hard drive has gone AWOL. Fedora 12 put the file system into r/o mode. The drive is an Hitachi, still under warranty. There are bad sectors on it, and running the Hitachi DFT tool confirms this. Also I cannot repair the bad sectors. Would this be caused by a faulty I/O chip, or is it safe to say it's definately the HDD at fault? Kind Regards, Keith Roberts -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

12 30

Old metadata for centosplus 4 repo.
by I.Piasecki 20 Nov '10

20 Nov '10

Hi Centos maintainers ! Could You please refresh repo data for centosplus reposytory 4 ? There are new kernels rpms, but repo index files arn't updated. Please fix that. For example: http://mirror.centos.org/centos/4/centosplus/x86_64/ rpm from 20 oct 2010 but meatadata from 28 sep 2010 ... P.S: That was 17 nov 2010 fixed for centosplus 5 repo, but centosplus 4 was omitted. Best regards, -- Ireneusz Piasecki

2 1

centos 5.5--gnome desktop--all icons disappeared.
by fred smith 20 Nov '10

20 Nov '10

gang, I feel dumb having to ask this... I've got a Centos 5.5 installation (it's not new, I've been using it for over a year on this machine) and all of a sudden just a few minutes ago everything on the gnome desktop disappeared. no icons, right-click doesn't bring up a context menu. the panels are still there, though, thank goodness. tried logging off and back on but that didn't help. I'm perusing the centos forums for clues, and thought I should ask all of you too in parallel. Suggestions appreciated, thanks in advance! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

2 2

kickstart raid disk partitioning
by Roberto Nunnari 20 Nov '10

20 Nov '10

Hello. A couple of years ago I installed two file-servers using kickstart. The server has two 1TB sata disks with two software raid1 partitions as follows: # cat /proc/mdstat Personalities : [raid1] md1 : active raid1 sdb4[1] sda4[0] 933448704 blocks [2/2] [UU] md0 : active raid1 sdb1[1] sda2[2](F) 40957568 blocks [2/1] [_U] Now the drives are starting to be failing and next week I'll backup /homes, reinstall OS with kickstart, and finally restore /homes. There's a problem with how the kickstart process partitions the disks, though. As you may have noticed above, md0 is made up of sdb1 and sda2. Could anybody help me understand how to make the partitions on the two drives identical still using kickstart? Here's the relevant part from the kickstart file: zerombr yes clearpart --all --initlabel bootloader --location=mbr part /boot --fstype ext3 --size 250 --asprimary --ondisk sda part swap --size 2048 --asprimary --ondisk sda part raid.01 --size 40000 --asprimary --ondisk sda part raid.03 --size 1 --grow --asprimary --ondisk sda part /boot2 --fstype ext3 --size 250 --asprimary --ondisk sdb part swap --size 2048 --asprimary --ondisk sdb part raid.02 --size 40000 --asprimary --ondisk sdb part raid.04 --size 1 --grow --asprimary --ondisk sdb raid / --level=1 --device=md0 --fstype ext3 raid.01 raid.02 raid /home --level=1 --device=md1 --fstype ext3 raid.03 raid.04 ..but here's the produced partitioning on the two drives: # parted /dev/sda print Disk geometry for /dev/sda: 0.000-953869.710 megabytes Disk label type: msdos Minor Start End Type Filesystem Flags 1 0.031 251.015 primary ext3 boot 2 251.016 40248.786 primary ext3 raid 3 40248.787 42296.132 primary linux-swap 4 42296.133 953867.219 primary ext3 raid # parted /dev/sdb print Disk geometry for /dev/sdb: 0.000-953869.710 megabytes Disk label type: msdos Minor Start End Type Filesystem Flags 1 0.031 39997.771 primary ext3 boot, raid 2 39997.771 42045.117 primary linux-swap 3 42045.117 42296.132 primary ext3 4 42296.133 953867.219 primary ext3 raid I'm not asking because I'm picky, but just because, it would have made my life easier to fix bad blocks on disks by dd from good block on disk1 to bad block on disk2, and as next week I'll reinstall, I'd prefer to do it the right way. Some more bits about my environment: # cat /etc/redhat-release CentOS release 4.8 (Final) # uname -rms Linux 2.6.9-89.0.18.ELsmp i686 Thank you and best regards. Robi

5 14

juniper netscreen (ssg5) and centos
by aurfalien＠gmail.com 20 Nov '10

20 Nov '10

Hi all, Lookin to do an IPSEC VPN between a Juniper SSG5 and Centos 5.5. Reading some docs that ref /etc/ipsec-tools.conf but they do not exist on my box being Centos 5.5. The package ipsec-tools is installed and I'm guessing /etc/racoon/ racoon.conf is what I am looking for. Anyways, some help would be very appreciated. - aurf

1 0

OT: Java down
by Helmut Drodofsky 19 Nov '10

19 Nov '10

Hallo, yesterday from 3 to 11 pm UTC our Java application was down. As far as I know, the server java.sun.com was not available. Needs any java application direct access to sun? Can I stop this hell? Any idea? Best regards Helmut

4 3

Centos podcast on FLOSS weekly
by Les Mikesell 19 Nov '10

19 Nov '10

If you've ever wondered what Karanbir Singh looks like, check out this week's (142) video podcast at http://twit.tv/floss. I'm only partway through the audio version (will finish on the drive home) and haven't heard anything that would be surprising to people already using Centos yet but it's a great presentation and something to recommend to people who aren't familiar with the project. -- Les Mikesell lesmikesell(a)gmail.com

8 9

New to Centos
by Johan Scheepers 19 Nov '10

19 Nov '10

Good day, I would like to first test and then use centos 5.5. I downloaded centos 5.5 x86_64 live CD. Problem...screen resolution only 800x600. In fedora 14 it is 1024x768, same in debian squeeze and opensuse11.3. Could there be a way to increase the resolution? in either i386 or x86_64. Thanks Regards Johan

6 10

become mirror
by ann kok 19 Nov '10

19 Nov '10

Hi all My company would like to mirror the centos. How can it join? and which software for the mirror using? Thank you

2 1

How can I setup to allow php running on CentOS server?
by wang suya 19 Nov '10

19 Nov '10

Dear Everyone I met truble to setup centos Server. I installed centos lastest version, then installed apache lastest version and yum installed php lastest version. And looked at internet information to set up httpd.conf, then I run http://localhost/test.php but forbbiton 403 error return to me. Who know how to set up to allow php run in my server? Thank you in advance Wang wang suya

3 7

[HOWTO] Running Xen 4.0 host (dom0) with Redhat Enterprise Linux 6 (RHEL6)
by Pasi Kärkkäinen 18 Nov '10

18 Nov '10

Hello, If you're interested in running Xen 4.0 hypervisor/dom0 on RHEL6, take a look at here: http://wiki.xen.org/xenwiki/RHEL6Xen4Tutorial It explains steps needed to rebuild Xen 4.0.1 src.rpm from Fedora on RHEL6, and how to fetch dom0 capable 2.6.32.x kernel from upstream git repository. It also shows how to get libvirt/virt-manager working with Xen on RHEL6. Hopefully it helps :) -- Pasi

2 1

CentOS-announce Digest, Vol 69, Issue 8
by centos-announce-request＠centos.org 18 Nov '10

18 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0895 Moderate CentOS 4 i386 systemtap - security update (Tru Huynh) 2. CESA-2010:0895 Moderate CentOS 4 x86_64 systemtap - security update (Tru Huynh) 3. CEBA-2010:0722 CentOS 5 x86_64 xorg-x11-server Update (Karanbir Singh) 4. CEBA-2010:0722 CentOS 5 i386 xorg-x11-server Update (Karanbir Singh) 5. CEBA-2010:0721 CentOS 5 x86_64 iscsi-initiator-utils Update (Karanbir Singh) 6. CEBA-2010:0721 CentOS 5 i386 iscsi-initiator-utils Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 17 Nov 2010 19:59:39 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0895 Moderate CentOS 4 i386 systemtap - security update To: centos-announce(a)centos.org Message-ID: <20101117185939.GA10638(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0895 systemtap security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0895.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/systemtap-0.6.2-2.el4_8.3.i386.rpm updates/i386/RPMS/systemtap-runtime-0.6.2-2.el4_8.3.i386.rpm updates/i386/RPMS/systemtap-testsuite-0.6.2-2.el4_8.3.i386.rpm source: updates/SRPMS/systemtap-0.6.2-2.el4_8.3.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update systemtap Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

memory map
by Jerry Geis 18 Nov '10

18 Nov '10

Is there any way to tell what has been "mapped" into memory on linux (C5 x86_64)? I am trying to use the "pagein @pagein-impress" command from openoffice and it does not seem to make any difference in speed. Can I tell if the files have actually been mapped into memory? Maybe I am not doing something right. Thanks, Jerry

1 0

centos 5.5 x86_64 live cd
by Johan Scheepers 18 Nov '10

18 Nov '10

good day, I am new to centos. Using a standalone laptop. Downloaded and burned the live cd. All seem ok except screen resolution only 800x600. Most importand I do not seem to find the install to hard disk option anywhere. Some distros I tried do have an option to install on the screen when you are happy about the OS. Googled but could not find the howto for the live cd install. Kindly please..Is the live CD installable. Thanks Regards Johan

3 2

ssh prompting for password
by bluethundr 18 Nov '10

18 Nov '10

hello list I have a network mounted home directory shared between all hosts on my network: [bluethundr@LCENT03:~]#df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup00-LogVol00 140G 4.4G 128G 4% / /dev/sda1 99M 35M 60M 37% /boot tmpfs 1.6G 0 1.6G 0% /dev/shm nas.summitnjhome.com:/mnt/nas 903G 265G 566G 32% /mnt/nas nas2.summitnjhome.com:/mnt/store 1.4T 187G 1.1T 15% /mnt/store nas2.summitnjhome.com:/mnt/home 903G 47G 784G 6% /home none 1.6G 136K 1.6G 1% /var/lib/xenstored So therefore my RSA key should already be in my authorized_keys on any host. However logging into the virtual network, I always get prompted for a password. just for the heck of it, I scp'd the key over again to one of the virtual hosts: [bluethundr@LCENT03:~]#scp .ssh/id_rsa.pub virt1:~ bluethundr@virt1's password: id_rsa.pub 100% 381 0.4KB/s 00:00 ssh'd in: [bluethundr@LCENT03:~]#ssh virt1 bluethundr@virt1's password: Last login: Tue Nov 16 15:57:24 2010 from 192.168.1.46 Searched for the key on the host I just ssh'd into: [bluethundr@VIRTCENT01:~]#grep -f id_rsa.pub .ssh/authorized_keys ssh-rsa AAAAB3NzaC1yc2EAAAABI-FAKE-DATA-dgjIWxnyplIYKE5IQw9FY2+IVsYw== As you can see, it's already there.. I then checked the modes on authorized_keys: [bluethundr@VIRTCENT01:~]#ls -l .ssh/authorized_keys -rw------- 1 1001 1002 1597 Nov 15 12:02 .ssh/authorized_keys And checked that I was using the same shared network mounted home directory from the machine I just ssh'd in from: [bluethundr@VIRTCENT01:~]#df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup00-LogVol00 9.1G 1.8G 6.9G 21% / /dev/xvda1 99M 20M 75M 21% /boot tmpfs 129M 0 129M 0% /dev/shm nas.summitnjhome.com:/mnt/nas 903G 265G 566G 32% /mnt/nas nas2.summitnjhome.com:/mnt/store 1.4T 187G 1.1T 15% /mnt/store nas2.summitnjhome.com:/mnt/home 903G 47G 784G 6% /home [bluethundr@VIRTCENT01:~]# Considering that this key is internal network only and doesn't have a passphrase set (it does not traverse internet boundaries) why on earth am I being prompted for a password whenever I ssh into this machine? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

8 10

SMS Gateway
by Jakub Jedelsky 18 Nov '10

18 Nov '10

Hi list-people! Is there anybody who has expiriences with sms gateway on Centos? Our customer has a Siemens modem (connected via serial port) and finds any tool for sending and receving sms. I found something like gammu and smstools but I'm not sure with it.. Have you any tips? Thanks a lot! JJ.

5 5

something chmod'ing /dev/null
by Joe Pruett 18 Nov '10

18 Nov '10

it looks like one of the recent updates will sometimes chmod /dev/null to 600. out of 20 machines i've updated, 3 of them had the odd /dev/null perms afterwards. i haven't tried to identify what it doing it yet, but wanted to give a heads up to others that might start seeing weird behavior.

5 5

upgrading Centos-Xen when version 6 comes along
by Dave Stevens 18 Nov '10

18 Nov '10

I am curious what is the best way to upgrade my dom0 and domUs to V.6 (currently 5) when it releases. Any experience or docs on this? Dave -- "It is no measure of health to be well adjusted to a profoundly sick society." Krishnamurti

12 19

Recycle Bin disappeared (GNOME, CentOS 5.5, 32 bit)
by Lanny Marcus 18 Nov '10

18 Nov '10

Probably this is due to operator error, The Recycle Bin in GNOME disappeared, for this CentOS 5.5 (32 bit) Desktop PC. The box is fully updated. Is there a command I can use, or another procedure, to get the Recycle Bin in GNOME working again? The .trash folder is there. Incredibly rare that I use the KDE Desktop, but it is also installed on this box and the Trash folder (like the Recycle Bin on GNOME) is working perfectly, so this seems to be something I've done to GNOME. [lanny@dell1602 ~]$ uname -a Linux dell1602 2.6.18-194.17.4.el5 #1 SMP Mon Oct 25 15:51:07 EDT 2010 i686 i686 i386 GNU/Linux [lanny@dell1602 ~]$ TIA! Lanny http://www.magazines-magazine.com/

4 8

Ipv6 addr with Vlan-Id - unable to ping neighbour
by Rohit Mediratta 18 Nov '10

18 Nov '10

Hi All, If I have a vlan-Id on an interface with an ipv6 address, then I am unable to ping a real router. The problem is that the Neighbour Solicitation originated from the Centos machine is missing the Vlan-Id in the packet. Therefore a real router will drop such a packet. I have tried this with Centos 4.7 and with Centos 5.5 with the same result. If I originate the first Neighbour Solicitation from the Router (which contains the Vlan-Id), then Linux learns the Mac address correctly and bidirectional ping works. This is a workaround that I am using at the moment, but I would like to avoid doing this all the time (especially when there is a timeout of the neighbour information). This problem does not exist for Ipv4 (i.e. ARP packets originated from Centos contain the Vlan-Id as expected). Here is my topology. Router--port1/1/1.1-------------------eth2---(eth2.1)--Centos 10.10.8.1/24 1.1.1.2 10.10.8.10 (3ffe::a0a:801/120) (3ffe::a0a:80a/120) port 1/1/1.21--------------------------eth2.21 (3ffe::a0f:801/120) (3ffe::a0f:80a/120) (KANRTB1):~ > cat /etc/*-release CentOS release 5.5 (Final) (KANRTB1):~ > cat /proc/version Linux version 2.6.18-194.el5 (mockbuild(a)builder16.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Fri Apr 2 14:58:35 EDT 2010 (KANRTB1):~ > ip -6 addr show <SNIP> 687: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 500 inet6 3ffe::a0f:80a/128 scope global valid_lft forever preferred_lft forever inet6 3ffe::a0a:80a/120 scope global valid_lft forever preferred_lft forever inet6 fe80::2ff:7ff:fe00:2/64 scope link valid_lft forever preferred_lft forever <SNIP> 692: eth2.1@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 inet6 3ffe::a0a:80a/120 scope global valid_lft forever preferred_lft forever inet6 fe80::2ff:7ff:fe00:2/64 scope link valid_lft forever preferred_lft forever 693: eth2.21@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 inet6 3ffe::a0f:80a/120 scope global valid_lft forever preferred_lft forever inet6 fe80::2ff:7ff:fe00:2/64 scope link valid_lft forever preferred_lft forever <SNIP> KANRTB1):~ > ifconfig <SNIP> eth2 Link encap:Ethernet HWaddr 00:FF:07:00:00:02 inet addr:1.1.1.2 Bcast:1.1.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:29 errors:0 dropped:0 overruns:0 frame:0 TX packets:313 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:3330 (3.2 KiB) TX bytes:48442 (47.3 KiB) eth2.1 Link encap:Ethernet HWaddr 00:FF:07:00:00:02 inet addr:10.10.8.10 Bcast:10.10.8.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:29 errors:0 dropped:0 overruns:0 frame:0 TX packets:64 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2924 (2.8 KiB) TX bytes:10071 (9.8 KiB) eth2.21 Link encap:Ethernet HWaddr 00:FF:07:00:00:02 inet addr:10.15.8.10 Bcast:10.15.8.10 Mask:255.255.255.255 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:34 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:6313 (6.1 KiB) <SNIP> Any help/easy fixes/pointers are much appreciated. thanks, Rohit

1 0

MacBook Pro and CentOS-5
by James B. Byrne 18 Nov '10

18 Nov '10

After a long, and quite disheartening, series of hardware problems with my HP laptop I decided to try out a Mac (late 2009 Intel based 19.5 inch). In the months since January past I have discovered this to be no significant improvement and I have grown tired of the persistent wireless connectivity problems and am totally put off by the upgrade to OSX-10.6.4 which killed HD graphics using Open-Gl. Since July, trying to use HD on my Mac now blackens half the screen and then locks the system. I am contemplating wiping the system and installing CentOS-5.5 instead. Before my frustration leads me to run straight on into a wall, what can I expect to NOT work on the Macbook if I do this? I do need wireless, albeit I really cannot say that I have it now. I also dearly would like to get back HD graphics as well. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 7

How to stop automount
by Dick Roth 17 Nov '10

17 Nov '10

I just put a USB hard drive into service, but find that unless the drive is connected to my PC the machine won't boot and drops to a shell. Below is the line I added to fstab. I thought that the option "noauto" would prevent the machine from trying to mount the drive /dev/sdb /usbdrive ext3 user,noauto,rw 0 2 What am I doing wrong? Any advice is welcome. Dick -- Yes indeed...the Hokey Pokey *is* what its all about!

6 10

IDE port test card
by Keith Roberts 17 Nov '10

17 Nov '10

I was looking for something to test the IDE ports on my mobo, and came across this item: http://cgi.ebay.co.uk/PC-Desktop-LPT-IDE-Printer-Port-Analyzer-Tester-Check… Has anybody on the list seen or used anything like this before? I was also wondering if the IDE port tests OK, could I test a HDD cable by plugging that into the port, then putting this tester at the end of the cable? Kind Regards, Keith Roberts -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

1 0

CENTOS 5 (X86 32 bits) only support 16 Gb RAM???
by mcclnx mcc 17 Nov '10

17 Nov '10

I would like confirm one thing. Based on what I saw Redhat document before, look like CENTOS 5 (X86, 32 bits) only support 16 GB RAM. Is this correct? Thanks.

8 11

good shell script examples?
by Kill Script 17 Nov '10

17 Nov '10

I am looking for a beginner guide to shell scripting simple tasks on CentOS (e.g. ssh'ing into a server / router / switch, checking for certain things, then exiting and going to the next IP). Does anyone have any suggestions on where to look? (I'm relatively new to bash)

8 10

Snag installing CentOS in a VirtualBox VM
by Mark 17 Nov '10

17 Nov '10

I spent most of the evening trying to boot a new install of CentOS in a VirtualBox VM. The VM recognizes the install DVD, runs it, asks for me to boot it and I type in <return> (or any number of other combinations, all of which fail in exactly the same way) and it continues to run up to the point shown in the attached screenshot. I've tried numerous different combinations of device alternatives, even turned off the virtual NIC, and no joy. I tried marking it as a Red Hat Linux and as Other Linux - same results. I know this isn't a VB forum, but I'm just wondering.... Thanks. Mark

3 3

CentOS-announce Digest, Vol 69, Issue 7
by centos-announce-request＠centos.org 17 Nov '10

17 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0883 CentOS 5 x86_64 cmirror Update (Karanbir Singh) 2. CEBA-2010:0883 CentOS 5 i386 cmirror Update (Karanbir Singh) 3. CESA-2010:0889 Important CentOS 5 i386 freetype Update (Karanbir Singh) 4. CESA-2010:0889 Important CentOS 5 x86_64 freetype Update (Karanbir Singh) 5. CEBA-2010:0886 CentOS 5 x86_64 dapl Update (Karanbir Singh) 6. CEBA-2010:0886 CentOS 5 i386 dapl Update (Karanbir Singh) 7. CEBA-2010:0885 CentOS 5 x86_64 initscripts Update (Karanbir Singh) 8. CEBA-2010:0885 CentOS 5 i386 initscripts Update (Karanbir Singh) 9. CESA-2010:0889 Important CentOS 4 i386 freetype - security update (Tru Huynh) 10. CESA-2010:0889 Important CentOS 4 x86_64 freetype - security update (Tru Huynh) 11. CESA-2010:0894 Important CentOS 5 x86_64 systemtap Update (Karanbir Singh) 12. CESA-2010:0894 Important CentOS 5 i386 systemtap Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Nov 2010 17:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0883 CentOS 5 x86_64 cmirror Update To: centos-announce(a)centos.org Message-ID: <20101112171345.GA19080(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0883 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0883.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 2b39f1b7447ede5211469b45ae9fb1db cmirror-1.1.39-8.el5_5.1.x86_64.rpm Source: af16dcc51b0da82d1d7e55750012b8ed cmirror-1.1.39-8.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 12 Nov 2010 17:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0883 CentOS 5 i386 cmirror Update To: centos-announce(a)centos.org Message-ID: <20101112171345.GA19066(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0883 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0883.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 79f32f797b61a07c7143ac47d080ac69 cmirror-1.1.39-8.el5_5.1.i386.rpm Source: af16dcc51b0da82d1d7e55750012b8ed cmirror-1.1.39-8.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 16 Nov 2010 17:01:38 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0889 Important CentOS 5 i386 freetype Update To: centos-announce(a)centos.org Message-ID: <20101116170138.GA10324(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0889 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0889.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9c8c93f93c94e7b5d7702a80f6601741 freetype-2.2.1-28.el5_5.1.i386.rpm b1fe2de666dc55c47841d0395a89b482 freetype-demos-2.2.1-28.el5_5.1.i386.rpm d130d0e3f6391ac7caa7bd2d8d05b589 freetype-devel-2.2.1-28.el5_5.1.i386.rpm Source: 3a19ad77ac022f78ca1adbdf39c19cb8 freetype-2.2.1-28.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 16 Nov 2010 17:01:39 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0889 Important CentOS 5 x86_64 freetype Update To: centos-announce(a)centos.org Message-ID: <20101116170139.GA10338(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0889 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0889.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: b8b5f883806ca4b5f7dfa235ff08c0db freetype-2.2.1-28.el5_5.1.i386.rpm af2cc3429b90bad95f9741c8b6325c20 freetype-2.2.1-28.el5_5.1.x86_64.rpm da89202293e76ac2cd7a8acf5351d5cd freetype-demos-2.2.1-28.el5_5.1.x86_64.rpm 264af5226d97e11be5a63493cde43d7f freetype-devel-2.2.1-28.el5_5.1.i386.rpm 0194f2799a458b56091d71b152690a14 freetype-devel-2.2.1-28.el5_5.1.x86_64.rpm Source: 3a19ad77ac022f78ca1adbdf39c19cb8 freetype-2.2.1-28.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 16 Nov 2010 17:22:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0886 CentOS 5 x86_64 dapl Update To: centos-announce(a)centos.org Message-ID: <20101116172258.GA10918(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0886 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0886.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6c9194376f7b6214a3bfe4c4f83144f2 compat-dapl-2.0.25-2.el5_5.1.i386.rpm b1a8cdb6b67d65856ce1f40b87adef9e compat-dapl-2.0.25-2.el5_5.1.x86_64.rpm 8c1d29ce21de333532ef6037dfb8192c compat-dapl-devel-2.0.25-2.el5_5.1.i386.rpm abac44f8ecc27f5383a0e0e093036cd1 compat-dapl-devel-2.0.25-2.el5_5.1.x86_64.rpm d9d8a373b86063bc7655df2ff6528832 compat-dapl-static-2.0.25-2.el5_5.1.x86_64.rpm 02633b19bd109faa435ab5d1a713a303 compat-dapl-utils-2.0.25-2.el5_5.1.x86_64.rpm 7b6a9e4968ce8c4c90c10db1f3049f37 dapl-2.0.25-2.el5_5.1.i386.rpm cf9236700ad96d4ba39f46d957e0116f dapl-2.0.25-2.el5_5.1.x86_64.rpm b6fa6be1c87acfdd279b1a4c6bf5bbaa dapl-devel-2.0.25-2.el5_5.1.i386.rpm b4532efc9895b293debde6f5da3da45d dapl-devel-2.0.25-2.el5_5.1.x86_64.rpm 9c99d53c491753a8d196b50d9c5a78c2 dapl-static-2.0.25-2.el5_5.1.x86_64.rpm bd0a1ba2581d3d66ca008d375bcb1bfa dapl-utils-2.0.25-2.el5_5.1.x86_64.rpm Source: 16823592e6507fae5236bbea9987f126 dapl-2.0.25-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 16 Nov 2010 17:22:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0886 CentOS 5 i386 dapl Update To: centos-announce(a)centos.org Message-ID: <20101116172258.GA10903(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0886 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0886.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 1ebb1cfad1f49a8355d6eff2c814b9b1 compat-dapl-2.0.25-2.el5_5.1.i386.rpm 7af2a207e7087ee339bf1443631a6777 compat-dapl-devel-2.0.25-2.el5_5.1.i386.rpm 368c93205b90740d988633d062cfa957 compat-dapl-static-2.0.25-2.el5_5.1.i386.rpm 6d71142017d23213c2c64b2aa5386e7c compat-dapl-utils-2.0.25-2.el5_5.1.i386.rpm 56b46a7521f772a239402b5f2305bbaf dapl-2.0.25-2.el5_5.1.i386.rpm 55627e8a0bff3fccd9a66a629a203450 dapl-devel-2.0.25-2.el5_5.1.i386.rpm 2ab30b263bbed66f36a2e79242e28314 dapl-static-2.0.25-2.el5_5.1.i386.rpm fc40d3bbe3f0bccdd1ebc209acf19d6f dapl-utils-2.0.25-2.el5_5.1.i386.rpm Source: 16823592e6507fae5236bbea9987f126 dapl-2.0.25-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Tue, 16 Nov 2010 17:35:04 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0885 CentOS 5 x86_64 initscripts Update To: centos-announce(a)centos.org Message-ID: <20101116173504.GA11148(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0885 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0885.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a6e10c44a7120332c44be6bc425a58a7 initscripts-8.45.30-3.el5.centos.x86_64.rpm Source: c0c7f8a646ebea4ce14dcfece3b4c543 initscripts-8.45.30-3.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Tue, 16 Nov 2010 17:35:03 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0885 CentOS 5 i386 initscripts Update To: centos-announce(a)centos.org Message-ID: <20101116173503.GA11133(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0885 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0885.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 42bffe6e6e6df6c324855ad921ff7951 initscripts-8.45.30-3.el5.centos.i386.rpm Source: c0c7f8a646ebea4ce14dcfece3b4c543 initscripts-8.45.30-3.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Wed, 17 Nov 2010 00:37:49 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0889 Important CentOS 4 i386 freetype - security update To: centos-announce(a)centos.org Message-ID: <20101116233749.GA19660(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0889 freetype security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0889.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/freetype-2.1.9-17.el4_8.1.i386.rpm updates/i386/RPMS/freetype-demos-2.1.9-17.el4_8.1.i386.rpm updates/i386/RPMS/freetype-devel-2.1.9-17.el4_8.1.i386.rpm updates/i386/RPMS/freetype-utils-2.1.9-17.el4_8.1.i386.rpm source: updates/SRPMS/freetype-2.1.9-17.el4_8.1.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update freetype Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

yum update and iptables
by David McGuffey 17 Nov '10

17 Nov '10

I'm doing some testing in a lab which is isolated from the rest of my network (DMZ). I'm doing both inbound and outbound filtering at the firewall (CentOS +iptables). What protocols, ports and destination IP addresses does yum use to identify updates, and then actually go get them for installation? Looking at yum.conf and wireshark data, yum appears to go to a central site, look up the closest mirrors, then query the mirrors for the latest updates. Using wireshark it appears that http and tcp are used, but the addresses are all over the place (many mirrors). Is there a way to restrict the outbound traffic to a small number of mirrors? In other words, can I force yum to only check certain sites? If that is not so easy, I should be able to restrict the outbound traffic to a small set of addresses (yes/no?). DaveM

3 2

easy httpd's problem
by 49163653 17 Nov '10

17 Nov '10

your guys: I can't see the direcotry under / produced by mkdir command via Internat Explorer, except the any direcotry and file that exist after the CentOS installation complete. This is my directory 's detail information: drwxr-xr-x root www-data root:object_r:default_t CenterRepo and my httpd's configuration information: <VirtualHost *:80> ServerAdmin gitserver DocumentRoot / <Directory /> Options Indexes FollowSymLinks includes order allow,deny AllowOverride None allow from all </Directory> ServerName dummy-host.example.com ErrorLog logs/dummy-host.example.com-error_log CustomLog logs/dummy-host.example.com-access_log common </VirtualHost> I just make sure the the CenterRepo directory belong to the www-date group which run by httpd ,why can't I still access that directory? Thanks for your help! 2010-11-16 49163653

4 4

Memtest86+ running time
by Keith Roberts 16 Nov '10

16 Nov '10

I have run one full test and got no errors on the memory module. Is it worth keeping it running overnight, just to see if temperature changes will afect the test? Regards, Keith -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

9 18

Question about a hard drive error
by Gilbert Sebenste 16 Nov '10

16 Nov '10

Hey everyone, I just got one of these today: Nov 10 16:07:54 stormy kernel: sd 0:0:0:0: SCSI error: return code = 0x08000000 Nov 10 16:07:54 stormy kernel: sda: Current: sense key: Medium Error Nov 10 16:07:54 stormy kernel: Add. Sense: Unrecovered read error Nov 10 16:07:54 stormy kernel: Nov 10 16:07:54 stormy kernel: Info fld=0x0 Nov 10 16:07:54 stormy kernel: end_request: I/O error, dev sda, sector 3896150669 Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743752) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743760) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743768) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743776) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743784) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743792) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743800) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743808) My question is this: I have RAID00 set up, but don't really understand it well. This is how my disks are set up: Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/VolGroup00-LogVol00 1886608544 296733484 1492495120 17% / /dev/sda1 101086 19877 75990 21% /boot tmpfs 1684312 1204416 479896 72% /dev/shm Which one is having the trouble? Any ideas so I can swap it out? ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** Staff Meteorologist, Northern Illinois University **** E-mail: sebenste(a)weather.admin.niu.edu *** web: http://weather.admin.niu.edu ** *******************************************************************************

4 8

Still have problems with secure NFS and Kerberos
by Hans Persson 16 Nov '10

16 Nov '10

Both pc13267 and pc14113 run CentOS 5.5. On pc14113, my test user gets a home directory when logging in, but not on pc13267. But why? All logs below are from /var/log/messages. I have removed dates and stuff from the beginning of lines to make them more readable, and then grouped lines about the same thing from both machines. > pc13267 Using keytab file '/etc/krb5.keytab' > pc13267 INFO: Credentials in CC > 'MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE' are good until > 1288959329 > pc14113 getting credentials for client with uid 2038 for server > triangulum.ifm.liu.se > pc14113 CC file 'krb5cc_2038_R3Gzcw' being considered > pc14113 CC file 'krb5cc_2038_R3Gzcw' matches owner check and has > mtime of 1288949932 For some reason, only the broken machine appears to look in /etc/krb5.keytab (or at least it's the only one admitting to doing it). /etc/krb5.conf looks the same on both machines. /etc/krb5.keytab has the same rights (root.root, 600) and size on both machines, and as far as I can tell no differences in content: > [root@pc13267 ~]# klist -k -e > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- ----------------------------------------------------------------- > 20 host/pc13267.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with RSA-MD5) > 6 nfs/pc13267.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with CRC-32) > [root@pc14113 ~]# klist -k -e > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- ----------------------------------------------------------------- > 3 nfs/pc14113.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with CRC-32) > 3 host/pc14113.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with RSA-MD5) There are no differences in /etc/pam.d/ between the machines (except that the working machine apart from the files it should have also has a system-auth-ac~, but I have a hard time imagining that to be significant). > pc13267 using MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE as credentials > cache for machine creds > pc13267 using environment variable to select krb5 ccache > MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE > pc14113 using FILE:/tmp/krb5cc_2038_R3Gzcw as credentials cache for > client with uid 2038 for server triangulum.ifm.liu.se > pc14113 using environment variable to select krb5 ccache > FILE:/tmp/krb5cc_2038_R3Gzcw The machine having problems save to memory, the working one to disk, and they use file names with a different structure. I suspect this to be relevant somehow, but I have no clue why they behave differently. > pc13267 creating context using fsuid 0 (save_uid 0) > pc13267 creating tcp client for server triangulum.ifm.liu.se > pc13267 creating context with server nfs(a)triangulum.ifm.liu.se > pc14113 creating context using fsuid 2038 (save_uid 0) > pc14113 creating tcp client for server triangulum.ifm.liu.se > pc14113 creating context with server nfs(a)triangulum.ifm.liu.se The machine that works gets the uid right while the other one for some reason gets it to 0. Definitely wrong, but why? > pc13267 rpcsec_gss: gss_init_sec_context: (major) Unspecified GSS > failure. Minor code may provide more information - (minor) > Unknown code krb5 60 > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > for server triangulum.ifm.liu.se > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > with credentials cache MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE for > server triangulum.ifm.liu.se > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > with any credentials cache for server triangulum.ifm.liu.se > pc14113 DEBUG: serialize_krb5_ctx: lucid version! > pc14113 prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 > and length 8 After this, things break down (which doesn't really surprise me). The question is, I guess, why the broken machine starts using uid 0 to begin with. There is also a difference in what tickets the user gets on the different machines. > [testson2@pc13267 /]$ klist > Ticket cache: FILE:/tmp/krb5cc_2038_ch9xY3 > Default principal: testson2(a)IFM.LIU.SE > > Valid starting Expires Service principal > 11/05/10 10:34:46 11/06/10 10:34:46 krbtgt/IFM.LIU.SE(a)IFM.LIU.SE > > > Kerberos 4 ticket cache: /tmp/tkt2038 > klist: You have no tickets cached (non-working) > pc14113:/home/testson2> klist > Ticket cache: FILE:/tmp/krb5cc_2038_R3Gzcw > Default principal: testson2(a)IFM.LIU.SE > > Valid starting Expires Service principal > 11/05/10 10:38:52 11/06/10 10:38:52 krbtgt/IFM.LIU.SE(a)IFM.LIU.SE > 11/05/10 10:38:52 11/06/10 10:38:52 nfs/triangulum.ifm.liu.se(a)IFM.LIU.SE > > > Kerberos 4 ticket cache: /tmp/tkt2038 > klist: You have no tickets cached (working) Ideas? I'm all out of 'em. Hans

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss