- Discuss - lists.centos.org

SSH keys question
by John Kennedy 15 Nov '10

15 Nov '10

All, I have 3 servers. All 3 are CentOS 5.5. All 3 have identical /etc/ssh/sshd_config files. I used ssh-keygen (with no arguments) to generate keys with no password. I then added all 3 id_rsa.pub keys to the authorized_keys file. With this set up, I should be able to ssh between all 3 boxes without needing a password. The problem is that one of the servers keeps asking for a password even with the keys set up. servera --> serverb No password serverb --> servera No password servera --> serverc Password serverc --> servera No password serverb --> serverc Password serverc --> serverb No password If they are all identical from an ssh standpoint (at least the authorized_keys, /etc/sshd_config, and UID for the user on all 3 hosts), why will serverc not play nicely with the other 2> Is there something else I should be checking? Thanks, John -- John Kennedy

3 3

can't find ldapseaerch
by bluethundr 15 Nov '10

15 Nov '10

hello list I'm having a very strange problem with my centos 5.5 system. For some strange reason, this machine cannot find ldapsearch: [root@VIRTCENT13 ~]# ldapsearch ldapsearch: Command not found. [root@VIRTCENT13 ~]# whereis ldapsearch ldapsearch: /usr/bin/ldapsearch /usr/share/man/man1/ldapsearch.1.gz ldapsearch currently lives at /usr/bin along with a lot of other really very useful tools. /usr/bin is also _clearly_ on my root path:i [root@VIRTCENT13 ~]# echo $PATH /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin And here are the permissions and modes for this tool: [root@VIRTCENT13 bin]# ls -l ldapsearch -rwxr-xr-x 1 root wheel 65336 Aug 11 09:20 ldapsearch And other things in this directory (like yum for example) work just fine: [root@VIRTCENT13 bin]# yum repolist Loaded plugins: fastestmirror, priorities Existing lock /var/run/yum.pid: another copy is running as pid 11750. Another app is currently holding the yum lock; waiting for it to exit... The other application is: yum-updatesd-he Memory : 65 M RSS (107 MB VSZ) Started: Sat Nov 13 18:04:22 2010 - 00:57 ago State : Running, pid: 11750 If you feed the command line the full path to ldapsearch it works as intended. I was wondering if anyone had any idea why ldapsearch isn't being found? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

4 3

ipvs and destination hashing...
by John Doe 15 Nov '10

15 Nov '10

Hi, just in case some ipvs knowledgable people read this... I tried to find some info on ipvs destination hashing on the net but did not find anything... Right now we have a basic direct routing round-robin keepalived configuration: abc.example.com (a.b.c.d) => LVS ( round-robin ) => server_[1..n] with IP[1..n]. If we use the dh option, on what would the hashing be done? I saw some pseudo code that states that the hash is based on the destination IPs in the packets... But there is only 1 IP in input and the output IPs are selected by round-robin already (so no point dhing them)... Do we have to have n IPs for abc.example.com (in the dns) and the hashing will be done on these IPs? Thx, JD

1 0

Auto-Re: CentOS Digest, Vol 70, Issue 15
by 韦加宁 15 Nov '10

15 Nov '10

信已收到,谢谢!

1 0

RPM/YUM on CentOS 5.4 issue - multiple versions of the same package installed
by Gabriel Tabares 15 Nov '10

15 Nov '10

Hi all, We currently have an issue with multiple versions of a custom package being installed. The RPM contains a liquibase script (a Java-based DB change management tool) and a %post script to run liquibase. We are installing with scripts that run "yum update liquibase-script". If the %post script runs correctly, it returns 0 and the application gets installed correctly but, if the %post script fails, it returns -1 and the application does get installed, but the old one does not get unistalled, so if I run "rpm -qa | grep liquibase-script" I get a list of all the versions that have been installed. I know that the files have been installed correctly, as the RPM contents have the same name but different content and I have checked it. Why is this happening? I thought that %post scripts failing do not prevent the application to installing and that RPM installation is atomic, so installing one package will remove the previous verison. Is there any way to prevent this issue? We're using CentOS 5.4 on x86_64 Thanks Gabriel

2 2

updating to gtk+ >= 2.0
by aurfalien＠gmail.com 15 Nov '10

15 Nov '10

Hi all, Any know the best way to up gtk+ on Centos 5.5 to something being at least 2.0 or greater? - aurf

6 8

xServes are dead ;-( / SAN Question
by Nicolas Ross 15 Nov '10

15 Nov '10

Hi ! As some of you might know, Apple has discontinued it's xServes server as of january 31st 2011. We have a server rack with 12 xserves ranging from dual G5's to dual quand-core xeon lastest generation, 3 xserve-raid and one activeraid 16 TB disk enclosure. We also use xSan to access a shared file system among the servers. Services are run from this shared filesystem, spreaded across the servers. Some LUNs on the fiber channel network are accessed directly and mounted on a case-by-case basis. Those raid volumes are partitioned with a GUID partition map, and apple_label type volumes. So they can be mounted by name with mount_hfs. We were on the verge on upgrading at least 6 of our server in a separate location (as a backup-site), with another SAN, same aplication etc. But this announce has come put a little delay. We do have several servers running CentOS (about 10 or so), on intel server platform. Now with this said, I am searching for documentation on operating a SAN under linux. We are looking at Quantum StorNext FS2 product for the SAN itselft. And I am searching info about accessing volumes on a fiber channel network by label. I know I can label individual ext3 partition, but how to do so on a raid array via fiber channel ? Basicly, I search for a linux starter guide to fiber channel storage. Thanks for any insight. Nicolas

18 40

Does "yum update tzdata" update /etc/localtime?
by Jobst Schmalenbach 15 Nov '10

15 Nov '10

Hi list. Does "yum update tzdata" update /etc/localtime or does this need to be done manually? [this is part of the hwclock problem, a guy from sage-au has given me a hint] Jobst -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 1

kernel bug ?
by My LinuxHAList 15 Nov '10

15 Nov '10

Hi, I was using kernel-2.6.18-164.15.1 with no known issues. Then, I updated to: Linux 2.6.18-194.17.1.el5 #1 SMP Wed Sep 29 12:50:31 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux I'm aware that there are later updates that patch couple more security bugs. Here is an issue I run with 2.6.18-194.17.1 and am asking if anyone hits that kernel bug. Here are the symptoms: 1) kswapd1 running at 100%, there are not much paging 2) when i logged in, root can't kill -9 ANY processes 3) memory is used up, swap is probably only used up for couple hundred MBs at most (Swap space has couple Gig available) I saw in the logs: kernel: INFO: task sadc:23936 blocked for more than 120 seconds. kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Annoyingly, I failed to reproduce the issues. I tried to reproduce it with the "stress" software package, using up CPU, memory, etc. But I failed to reproduce those. Reading later release of kernel did not mention this bug. If anyone can contribute to what is happening here, that would be great. Thanks

2 1

Confused about Java browser plugin for Firefox
by Nicolas Kovacs 15 Nov '10

15 Nov '10

Hi, I'd like to install a working Java Plugin for Firefox, and I wonder how to go about it. There's some documentation available online, but one quickly gets the feeling it's quite a mess. I also admit being a contributor to the mess, since the Linux book I published in June 2009 gives a detailed - and now obsolete - description about installing JRE : http://www.microlinux.fr/linux_aux_petits_oignons/chapitre_8/01.php#java Any advice on how to go about that without jumping through burning loops? A pointer to some concise documentation or, even better, a short and working step-by-step HOWTO? Cheers, Niki Kovacs -- http://www.kikinovak.net

7 9

External HD on CentOS 5.5
by Dick Roth 14 Nov '10

14 Nov '10

I'm looking into backing up my CentOS 5.5 system using an external USB 2.0 hard drive. Anyone with experience with Toshiba Canvio USB 750 GB unit? I'm backing up to DVDs now and would like to streamline the process. Any advice is welcome with thanks. Dick -- Yes indeed...the Hokey Pokey *is* what its all about!

2 2

RAID Resynch...??
by Tom Bishop 14 Nov '10

14 Nov '10

So still coming up to speed with mdadm and I notice this morning one of my servers acting sluggish...so when I looked at the mdadm raid device I see this: mdadm --detail /dev/md0 /dev/md0: Version : 0.90 Creation Time : Mon Sep 27 22:47:44 2010 Raid Level : raid10 Array Size : 976759808 (931.51 GiB 1000.20 GB) Used Dev Size : 976759808 (931.51 GiB 1000.20 GB) Raid Devices : 2 Total Devices : 2 Preferred Minor : 0 Persistence : Superblock is persistent Update Time : Sun Nov 14 11:33:51 2010 State : clean, resyncing Active Devices : 2 Working Devices : 2 Failed Devices : 0 Spare Devices : 0 Layout : far=2 Chunk Size : 512K Rebuild Status : 57% complete UUID : f045370a:5be687e9:73e57992:06ea59e5 Events : 0.8 Number Major Minor RaidDevice State 0 8 17 0 active sync /dev/sdb1 1 8 33 1 active sync /dev/sdc1 If done some googling but I am stumped as to what would have kicked this off, anyone have any insight that would be great...The system has been up for ~34 days and it kicked off at 4am local time...Here are some of my system details... Centos 5.5 - 2.6.18-194.11.4.el5 fstab: LABEL=/ / ext3 defaults 1 1 LABEL=/boot /boot ext3 defaults 1 2 /dev/md0 /home ext4 noatime,defaults 0 2 /dev/md0 /mnt/data-raid ext4 noatime,defaults 0 2 tmpfs /dev/shm tmpfs defaults 0 0 devpts /dev/pts devpts gid=5,mode=620 0 0 sysfs /sys sysfs defaults 0 0 proc /proc proc defaults 0 0 LABEL=SWAP-sda2 swap swap defaults 0 0 Thanks in advance....

2 3

Best practices for the maximal length of user names
by Mathieu Baudier 14 Nov '10

14 Nov '10

Hello, are there any best practices for the length of user names? I tend to limit them to 8 characters and to follow the pattern 'first letter of the first name'+'first 7 letters of the last name' (e.g. mbaudier). But people are sometimes frustrated with having their last name truncated and I wonder if limiting the user name to 8 characters is not a kind of superstition coming from some old times... I would be very interested to hear opinions / experience about this. (I'm using CentOS 5.5) Thanks in advance! Mathieu

4 3

Addressing outgoing connections to a specific interface
by Dotan Cohen 14 Nov '10

14 Nov '10

On a CentOS 5.5 laptop (Dell Inspiron, dual boot with a Debian-based distro) I have a cable plugged into eth0 which is on a LAN with no internet connection. Additionally, I connect wirelessly on wlan0 to the internet. Both connections have router on the 192.168.0.1 address. Although I need to stay connected to the wireless router, can I still access the address 192.168.0.1 on the wired interface? Some googling led me to the keyword "loopback" but I am at a loss as how to configure it, or if this is even the right idea. If there is a specific page that I should be reading in the fine manual then please do RTFM me, as I myself failed to find the proper page. Thanks in advance. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

11 30

Oracle charging for InnoDB support in MySQL : what is going to change for us?
by robert mena 14 Nov '10

14 Nov '10

Hi, I've noticed that Oracle is charging for the MySQL version that supports InnoDB (http://www.mysql.com/products/) I could not find any other link with direct confirmation of what is going to change for the existing servers/versions and I was wondering if anybody has a more detailed info. For example, is RHEL (and CentOS) going to drop support for it? Are we going to see any further updates for security issues?

5 4

make fails with "recompile with -fPIC"
by aurfalien＠gmail.com 14 Nov '10

14 Nov '10

Hi all, I am trying to get monodevelop installed on Centos 5.5 In order to do so, I must install several packages, all of which give me the following error when doing a make; /usr/bin/ld: .libs/image.o: relocation R_X86_64_PC32 against `gdip_getcodecinfo_gif' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: final link failed: Bad value How and where do I add this value of -fPIC? Better yet, has any one done this before? Keep in mind this is diff then mono-devel. Thanks in advance, - aurf

2 2

Flash plugin not working
by Niki Kovacs 13 Nov '10

13 Nov '10

Hi, I have a fresh install of CentOS 5.5, with a minimal GNOME desktop. I configured RPMForge as third party repo. I updated everything first, then installed flash-plugin. (And yes, I restarted Firefox... :oD). All I see when I try to see some things Flash on the Internet, like Youtube or the likes, I get... nothing. The space remains white. Sometimes a black square will appear, sometimes it will redisappear again. $ rpm -q flash-plugin flash-plugin-10.1.82.76-0.1.el5.rf I also tried to give the more recent version from Adobe a shot, with the same result. I took a look in /usr/lib/mozilla/plugins, where everything seems normal. $ ls -l /usr/lib/mozilla/plugins/ total 0 lrwxrwxrwx 1 root root 39 nov 8 22:22 libflashplayer.so -> /usr/lib/flash-plugin/libflashplayer.so Which leaves me clueless. Any suggestions ? Cheers, Niki

7 15

httpd RPM newer than 2.0.63 avail for CentOS 4.x?
by Philip Amadeo Saeli 12 Nov '10

12 Nov '10

I'm maintaining an internet-facing web server which is now running httpd 2.0.63 (httpd-2.0.63-2.el4s1.centos.2) which is now neary 2.5 years old(!?!). I need to move to either 2.0.64 or 2.2.12 or later. However, I've been unable to find available RPMs for such releases for CentOS 4.x. I have to believe that others have these needs also. In light of this, how do others keep up with security upgrades for the httpd? I'm rather new to this aspect of things, so am still in the process of sorting things out in this regard. Any help would be appreciated. Thanks! --Phil -- Philip Amadeo Saeli CentOS, RHEL, openSUSE psaeli(a)zorodyne.com

5 7

Redhat Virtualization
by Nataraj 12 Nov '10

12 Nov '10

What are the differences between the Redhat virtualization product and the kvm virtualization that is currently included with Redhat/CentOS? If I don't want to run the standalone hypervisor or the windows based management interface (Is this worth considering?), are there any advantages to the virtualization product over running kvm on CentOS? It is my understanding that the windows management will at some point run under linux. Other than the current kvm, will the Redhat virtualization product be part of CentOS in any way? Thank You, Nataraj

2 1

conntrack-tools
by Steve Clark 12 Nov '10

12 Nov '10

Hi, I have been looking for a conntrack-tools rpm for Centos 5.5. Does anyone know of one? Thanks, -- Stephen Clark *NetWolves* Sr. Software Engineer III Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

1 0

Gnome-Screensaver Problem
by Chi-Duen Poon 12 Nov '10

12 Nov '10

Around last weekend, the updated package, gnome-screensaver-2.16.1-8.el5_5.1, came in replacing gnome-screensaver-2.16.1-8.el5. Once our CentOS 5.5 machines are running the new gnome-screensaver, we start seeing problem in unlocking the Gnome screensaver with Kerberos authentication. Unlocking the screensaver with local password works fine. After we back out from the new version, Kerberos authentication to unlock the screensaver works fine. We have submitted a bug report on this finding. Do you have any workaround besides backing out from the new version? CD Poon.

1 0

RHEL 6 Officially Released
by John Kennedy 12 Nov '10

12 Nov '10

When will CentOS 6 be released??? (Just kidding...Just wanted to let you all know that RHEL6 has been released...And yes, I know that most of you all know...) John -- John Kennedy

29 52

CentOS-announce Digest, Vol 69, Issue 6
by centos-announce-request＠centos.org 12 Nov '10

12 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0880 CentOS 5 x86_64 mod_authz_ldap Update (Karanbir Singh) 2. CEBA-2010:0880 CentOS 5 i386 mod_authz_ldap Update (Karanbir Singh) 3. CEEA-2010:0876 CentOS 5 i386 cman Update (Karanbir Singh) 4. CEEA-2010:0876 CentOS 5 x86_64 cman Update (Karanbir Singh) 5. CEBA-2010:0871 CentOS 5 i386 python Update (Karanbir Singh) 6. CEBA-2010:0871 CentOS 5 x86_64 python Update (Karanbir Singh) 7. CEBA-2010:0869 CentOS 5 i386 tog-pegasus Update (Karanbir Singh) 8. CEBA-2010:0869 CentOS 5 x86_64 tog-pegasus Update (Karanbir Singh) 9. CEBA-2010:0868 CentOS 5 i386 e2fsprogs Update (Karanbir Singh) 10. CEBA-2010:0868 CentOS 5 x86_64 e2fsprogs Update (Karanbir Singh) 11. CEBA-2010:0833 CentOS 5 i386 autofs Update (Karanbir Singh) 12. CEBA-2010:0833 CentOS 5 x86_64 autofs Update (Karanbir Singh) 13. CEBA-2010:0832 CentOS 5 i386 selinux-policy Update (Karanbir Singh) 14. CEBA-2010:0832 CentOS 5 x86_64 selinux-policy Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Nov 2010 00:20:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0880 CentOS 5 x86_64 mod_authz_ldap Update To: centos-announce(a)centos.org Message-ID: <20101112002027.GA12369(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0880 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0880.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 42db2383be48a1641382365621dfe685 mod_authz_ldap-0.26-9.el5_5.1.x86_64.rpm Source: cb5cc9b72f29b3271394d3af0b83faf3 mod_authz_ldap-0.26-9.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 12 Nov 2010 00:20:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0880 CentOS 5 i386 mod_authz_ldap Update To: centos-announce(a)centos.org Message-ID: <20101112002026.GA12354(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0880 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0880.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9e4f41b6e56160b97aafeb0c93205fd7 mod_authz_ldap-0.26-9.el5_5.1.i386.rpm Source: cb5cc9b72f29b3271394d3af0b83faf3 mod_authz_ldap-0.26-9.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 12 Nov 2010 00:21:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2010:0876 CentOS 5 i386 cman Update To: centos-announce(a)centos.org Message-ID: <20101112002111.GA12465(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2010:0876 Upstream details at : https://rhn.redhat.com/errata/RHEA-2010-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: edfea91a42ac32d995caf68d14d89f01 cman-2.0.115-34.el5_5.4.i386.rpm 22103177e6e2400f241f6696cae1a978 cman-devel-2.0.115-34.el5_5.4.i386.rpm Source: 491bb3d3c129bc38d95ca3872cc50982 cman-2.0.115-34.el5_5.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 12 Nov 2010 00:21:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2010:0876 CentOS 5 x86_64 cman Update To: centos-announce(a)centos.org Message-ID: <20101112002111.GA12478(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2010:0876 Upstream details at : https://rhn.redhat.com/errata/RHEA-2010-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 75910fc915609dc8b0c939f5adea8c7e cman-2.0.115-34.el5_5.4.x86_64.rpm 5b072200d3e266b3e6ce443856bbb852 cman-devel-2.0.115-34.el5_5.4.i386.rpm ee13bdfc2aa8b0e5922f098b11458275 cman-devel-2.0.115-34.el5_5.4.x86_64.rpm Source: 491bb3d3c129bc38d95ca3872cc50982 cman-2.0.115-34.el5_5.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 12 Nov 2010 00:22:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0871 CentOS 5 i386 python Update To: centos-announce(a)centos.org Message-ID: <20101112002218.GA12578(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c76cdba5e527547b9923fd182cafd581 python-2.4.3-27.el5_5.3.i386.rpm e82e2502ea0acab992fe2a8d66f09b2a python-devel-2.4.3-27.el5_5.3.i386.rpm be20281fe1c00c5ce2655ba685c97033 python-tools-2.4.3-27.el5_5.3.i386.rpm fed33376ca58d5e3317b516f69fa8db9 tkinter-2.4.3-27.el5_5.3.i386.rpm Source: 4066452a673e3475e9ef95efdab92bb7 python-2.4.3-27.el5_5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 12 Nov 2010 00:22:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0871 CentOS 5 x86_64 python Update To: centos-announce(a)centos.org Message-ID: <20101112002218.GA12592(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 0661b58d35cff838823e6c6ef57ef379 python-2.4.3-27.el5_5.3.x86_64.rpm 5dfa3aa050b8c52b8037cde4d8d12ff5 python-devel-2.4.3-27.el5_5.3.i386.rpm f2997eedf0baebe346c42bd3e665e513 python-devel-2.4.3-27.el5_5.3.x86_64.rpm e4b0539a0b50ac649346faacc26b3610 python-tools-2.4.3-27.el5_5.3.x86_64.rpm 008f6998fd60c807ec344a4bbd580756 tkinter-2.4.3-27.el5_5.3.x86_64.rpm Source: 4066452a673e3475e9ef95efdab92bb7 python-2.4.3-27.el5_5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 12 Nov 2010 00:23:29 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0869 CentOS 5 i386 tog-pegasus Update To: centos-announce(a)centos.org Message-ID: <20101112002329.GA12689(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0869 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: b25f676511ec584eb376ac64203efdc0 tog-pegasus-2.9.1-2.el5_5.1.i386.rpm bfdffe1a264c55ccb21289983e7bcc0b tog-pegasus-devel-2.9.1-2.el5_5.1.i386.rpm Source: f394e0a573c3e62dba709f85db73eea2 tog-pegasus-2.9.1-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 12 Nov 2010 00:23:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0869 CentOS 5 x86_64 tog-pegasus Update To: centos-announce(a)centos.org Message-ID: <20101112002330.GA12702(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0869 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 672f0f4df18d9fc5f98d5f19c482b04f tog-pegasus-2.9.1-2.el5_5.1.i386.rpm 8c2de74d394d70b99c794650640c8774 tog-pegasus-2.9.1-2.el5_5.1.x86_64.rpm 5d1a749de278436f49be2deec8f4a4e4 tog-pegasus-devel-2.9.1-2.el5_5.1.i386.rpm 767420cfdd1ff4e3954555db5e2014ec tog-pegasus-devel-2.9.1-2.el5_5.1.x86_64.rpm Source: f394e0a573c3e62dba709f85db73eea2 tog-pegasus-2.9.1-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 12 Nov 2010 00:24:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0868 CentOS 5 i386 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20101112002413.GA12807(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0868 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0868.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: a477a70b06fd236162771f78187e3dac e2fsprogs-1.39-23.el5_5.1.i386.rpm dfce9fe20220afca74b5c278668bc07a e2fsprogs-devel-1.39-23.el5_5.1.i386.rpm 66857f3ea704d06c059fe6b98f46d81c e2fsprogs-libs-1.39-23.el5_5.1.i386.rpm a951709c523462d965563bd88dbfeb5d uuidd-1.39-23.el5_5.1.i386.rpm Source: a711a0cb837672eb9cb784b35b5591ba e2fsprogs-1.39-23.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 12 Nov 2010 00:24:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0868 CentOS 5 x86_64 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20101112002413.GA12820(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0868 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0868.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 24646daefeadb4d062694da4309dc797 e2fsprogs-1.39-23.el5_5.1.x86_64.rpm cd50d249a778c3098b2d44edebf2d40b e2fsprogs-devel-1.39-23.el5_5.1.i386.rpm 6e36db7a97015bba23e2034e9ed6ce4e e2fsprogs-devel-1.39-23.el5_5.1.x86_64.rpm c999210eae1aa0d536b29c7378607d6d e2fsprogs-libs-1.39-23.el5_5.1.i386.rpm 8473c5004b92c32a8276b9c34cde4db2 e2fsprogs-libs-1.39-23.el5_5.1.x86_64.rpm a0173fc59230b128fa587e2f9981311c uuidd-1.39-23.el5_5.1.x86_64.rpm Source: a711a0cb837672eb9cb784b35b5591ba e2fsprogs-1.39-23.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 12 Nov 2010 00:24:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0833 CentOS 5 i386 autofs Update To: centos-announce(a)centos.org Message-ID: <20101112002445.GA12893(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0833 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0833.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: ea962af72e3e055c1526ad115c9dfabd autofs-5.0.1-0.rc2.143.el5_5.6.i386.rpm Source: 8955138b030c20366aedd2e7586f39c3 autofs-5.0.1-0.rc2.143.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 12 Nov 2010 00:24:46 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0833 CentOS 5 x86_64 autofs Update To: centos-announce(a)centos.org Message-ID: <20101112002446.GA12906(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0833 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0833.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: fc0615a882733719117342c371633e5a autofs-5.0.1-0.rc2.143.el5_5.6.x86_64.rpm Source: 8955138b030c20366aedd2e7586f39c3 autofs-5.0.1-0.rc2.143.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 13 Date: Fri, 12 Nov 2010 00:25:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0832 CentOS 5 i386 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20101112002552.GA13028(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0832 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0832.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 7edd19f7ac2572c54e4bd16f53d2e72b selinux-policy-2.4.6-279.el5_5.2.noarch.rpm 9e7ae71e9e2ba91314e7c164ffd76ac8 selinux-policy-devel-2.4.6-279.el5_5.2.noarch.rpm 8f0b9668eb7733518c874831c76d46c2 selinux-policy-minimum-2.4.6-279.el5_5.2.noarch.rpm 2a263b4ac37f2929ecf6ecfbebde6285 selinux-policy-mls-2.4.6-279.el5_5.2.noarch.rpm 4bd6bb1eefdd59fdef846b46472e3f90 selinux-policy-strict-2.4.6-279.el5_5.2.noarch.rpm 0dcd7a7640acb2668647676eb037a829 selinux-policy-targeted-2.4.6-279.el5_5.2.noarch.rpm Source: ff6fedf3fd6e9ec4ebc96663621edfc2 selinux-policy-2.4.6-279.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 14 Date: Fri, 12 Nov 2010 00:25:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0832 CentOS 5 x86_64 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20101112002552.GA13044(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0832 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0832.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 5b5df1a65007df30315a1f571547c38a selinux-policy-2.4.6-279.el5_5.2.noarch.rpm f0661bfb03b44cf3af2d460afe4c8579 selinux-policy-devel-2.4.6-279.el5_5.2.noarch.rpm 95269368ca64c0ae81ba349171c020ad selinux-policy-minimum-2.4.6-279.el5_5.2.noarch.rpm c78dfbecc342233abf9ac24a83675b1f selinux-policy-mls-2.4.6-279.el5_5.2.noarch.rpm 8a1b6714052029fca221b2d3052aee35 selinux-policy-strict-2.4.6-279.el5_5.2.noarch.rpm 63e56b68678484b38ddb82f716ba7401 selinux-policy-targeted-2.4.6-279.el5_5.2.noarch.rpm Source: ff6fedf3fd6e9ec4ebc96663621edfc2 selinux-policy-2.4.6-279.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 6 **********************************************

1 0

Flash problems in newest upgrade?
by Ron Blizzard 12 Nov '10

12 Nov '10

Hi, I just upgraded to the newest kernel and Flash. Hulu now "grays out" when I try to go to full screen. I tried uninstalling and reinstalling the proprietary video drivers (no difference either way), so I'm guessing it has something to do with either the new Flash or the new kernel. Anyone else experiencing this problem? Thanks for any pointers. -- RonB -- Using CentOS 5.5

2 2

http form automation tools?
by Les Mikesell 11 Nov '10

11 Nov '10

I need to grab some data from a remote web server that offers a csv download but only after viewing a chart where you have to first navigate to a form and make some selections. Are there any good tools for automating this kind of access? (What I'm really after are bandwidth stats from some routers where I only have read access to a CA/ehealth system that monitors it). Previously the intermediate system was cacti where the link to the data download for a time interval can be computed directly. -- Les Mikesell lesmikesell(a)gmail.com

2 2

Adding SAMBA users in Centos 5.5
by Peter Crighton 11 Nov '10

11 Nov '10

I have SAMBA working on Centos 5.5 - I can see and access my "home" directory from a Windows machine. I have created a new folder to share, changed the owner and group to my username and chcon -t samba_share_t to allow SELinux to share the folder. I can see this folder from Windows but not access it's contents. I think that the key reason is that there is no user assigned to the new share that I have created in SAMBA. I don't seem to be able add users/passwords (at least they don't stay present! In the SAMBA section of Control Panel I have selected my username from the Unix users and added it to SAMBA users with the same password as the Windows machine (and as it happens the Centos machine). Click Apply and OK. When I re-load the SAMBA section of Control Panel my user has disappeared! This didn't happen when I setup a Centos 4.4 machine - all the users are still visible in Control Panel. Without the user available I can't assign it to my new share. Why is my added user disappearing and how can I solve it? (I presume that I can access my "home" share as it is automatically by the username from Windows).

2 3

quota broken for large NFS mount
by Dave 11 Nov '10

11 Nov '10

Should I report this as a bug somewhere? Or is it just a problem with the old fedora box, probably fixed long ago and not relevant to the centos list? On the server side, theme4, a very old fedora box, exports t4d5 via NFS. t4d5 is big, has lots of space, and the user tobiasf has plenty of quota: [root@theme4 ~]# quota -vls tobiasf|grep sdf /dev/sdf1 1312G 4578G 4769G 119k 0 0 [root@theme4 ~]# rpm -q quota nfs-utils;df -lh|grep sdf;uname -a quota-3.12-6 nfs-utils-1.0.7-13.FC4 /dev/sdf1 13T 11T 2.2T 84% /export/t4d5 Linux theme4.soest.hawaii.edu 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:59:20 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux On the client side, running centos, mounting the NFS partition with automount, quota looks exhausted: [tobiasf@lee1 ~]$ quota -vs Disk quotas for user tobiasf (uid 2797): Filesystem blocks quota limit grace files quota limit grace theme4:/export/t4d5 1312G* 482G 673G 119k 0 0 [tobiasf@lee1 ~]$ uname -a;cat /etc/redhat-release ;df -h|grep t4d5 Linux lee1 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux CentOS release 5.5 (Final) theme4:/export/t4d5 13T 11T 2.2T 84% /home/t4d5 [tobiasf@lee1 ~]$ rpm -q nfs-utils quota nfs-utils-1.0.9-44.el5 quota-3.13-1.2.5.el5 Thanks, Dave

1 2

future modprobe.conf
by Jerry Geis 11 Nov '10

11 Nov '10

centos 5 had modprobe.conf entries for eth0 and if present eth1. something like: alias eth0 forcedeth alias eth1 e1000e For the new centos 6 (I have the rhel 6 client installed on my laptop) the modprobe.conf file is gone. Which is fine. I understand files can be created in /etc/modprobe.d and server the same purpose. My question is I dont see (doing a grep) any eth0 alias's in the files in /etc/modprobe.d/* My reason is when I have a system with 2 ethernet cards I used to have to specify the order of loading. Like: install e1000e /sbin/modprobe forcedeth; /sbin/modprobe --ignore-install e1000e So I used to grep for eth0 and eth1 do get the module names from modprobe.conf. How do I get that information in RHEL 6 since it doesnt seem to be there. Thanks, (just trying to prepare) Jerry

5 4

gmp package installation on CentOS 5.2
by Nastou Panagiotis 11 Nov '10

11 Nov '10

Hello, Last year, I installed CentOS 5.2 on an HP Proliant Server. Along with other packages, the gmp and gmp-devel version 4.1.4 packages were installed. To the best of my knowledge these packages do not come from the gmp team. Recently, I built an rpm package for gmp 5.0.1 for CentOS 5.2. I tried to update the gmp package by command rpm -Uvh gmp-5.0.1-1.x86_64.rpm but the update failed because the libgmp.so.3, libgmpxx.so.3 and the libmp.so.3 are needed from gcc-gfortran, php, php-cli, guile and gmp-devel packages. What kind of dependency exists between these packages and gmp? Could I forced the update without affecting the operation of the above packages? Since It is better to compile gmp 5.0.1 with the more recent gnu c compiler, is it safe to update gcc, gcc-gfortran and gcc-c++ on CentOS 5.2 to the more recent version appeared for CentOS 5.5? Regards, Panagiotis Nastou, Dpt of Mathematics University of Aegean Karlovasi, Samos, Greece

2 1

FW: Permissions issue
by Jason Pyeron 11 Nov '10

11 Nov '10

I am at loss on this mysterious file permission issue. I cannot move the file out of the directory, but I can rename it. I cannot read the file. It is not open by any processes, the filesystem is in read write mode. I am logged in as root. -Jason [root@localhost /]# tar cvzf ~/named.201011111228.tgz --one-file-system /etc/named.conf /var/named/ tar: Removing leading `/' from member names /etc/named.conf /var/named/ /var/named/data/ /var/named/lost+found/ /var/named/slaves/ tar: /var/named/backup.tgz: Cannot open: Permission denied /var/named/chroot/ /var/named/chroot/etc/ /var/named/chroot/etc/named.caching-nameserver.conf <snip/> tar: Error exit delayed from previous errors [root@localhost /]# dir /var/named/backup.tgz -rw------- 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# stat /var/named/backup.tgz File: `/var/named/backup.tgz' Size: 6651 Blocks: 24 IO Block: 4096 regular file Device: fd04h/64772d Inode: 98312 Links: 1 Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2010-11-11 12:28:33.000000000 -0500 Modify: 2010-11-11 11:32:03.000000000 -0500 Change: 2010-11-11 11:32:03.000000000 -0500 [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# chmod 777 /var/named/backup.tgz [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# setfacl -b /var/named/backup.tgz [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# mount <redact> No readonly mounts </redact> [root@localhost /]# df -h <redact> Each filessytem has plenty of free space </redact> [root@localhost /]# dir /var/named/ total 72 drwxr-x--- 6 root named 4096 Nov 11 11:32 . drwxr-xr-x 24 root root 4096 Apr 1 2010 .. -rwxrwxrwx 1 root root 6651 Nov 11 11:32 backup.tgz drwxr-x--- 6 root named 4096 Nov 11 11:48 chroot drwxrwx--- 2 named named 4096 Jan 18 2010 data drwx------ 2 root named 16384 Feb 4 2009 lost+found drwxrwx--- 2 named named 4096 Jan 18 2010 slaves [root@localhost named]# /etc/init.d/named stop Stopping named: . [ OK ] [root@localhost named]# mv backup.tgz foo [root@localhost named]# mv foo backup.tgz [root@localhost named]# mv backup.tgz ~ mv: cannot open `backup.tgz' for reading: Permission denied [root@localhost named]# lsof | grep backup.tgz [root@localhost named]# -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

3 5

dictonary attacks
by PA 11 Nov '10

11 Nov '10

Hi hoping someone can help me a little with this one. I have 2 mail servers, the incoming mail server runs dovecot and the outgoing mail server runs postfix with sasl. Lately I noticed a lot of spammers are running dictionary attacks on my incoming server and then using that user/password for sasl on the outgoing server. The weird thing is I never see on the logs the guessed username/password. I always see the ones they can't guess. For example: Looking at the logs I see the following dictionary attack from 94.242.206.37 Nov 10 03:04:38 pop dovecot: pop3-login: Disconnected: rip=94.242.206.37, lip=209.213.66.10 Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(ababa,94.242.206.37): lookup ..... And so on.. Then that ip gets banned by fail2ban [root@pop ~]# grep 94.242.206.37 /var/log/fail2ban.log 2010-11-10 03:04:42,416 fail2ban.actions: WARNING [dovecot] Ban 94.242.206.37 However on my outgoing mail server that ip is already sending out all sorts of spam with the sasl username of Paramus. This username Paramus never shows up on the dovecot dictionary attack log, as a matter of fact the user Paramus is nowhere to be found on the dovecot log at all and I have logs going back months. /var/log/maillog:Nov 10 02:46:16 mrelay3 postfix/smtpd[27776]: 3B64928015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:47:54 mrelay3 postfix/smtpd[27776]: 247AB28016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:48:00 mrelay3 postfix/smtpd[27785]: 87DE128016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:56:00 mrelay3 postfix/smtpd[27792]: 9728628015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:05:38 mrelay3 postfix/smtpd[27808]: D529F28015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:06:00 mrelay3 postfix/smtpd[27808]: DDF7C2801B: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=Paramus Does anyone have any idea what could of happened here. I mean if the user/passwd was already harvested by 94.242.206.37 why would they bother to start another dict. attack. I'm just not sure how they guess the username/password as its not on any logs that goes back months and I don't have a dovecot fail record for that user on the logs. This is the case all the time for me and it happens with other ips. Any help would be appreciated. paul

2 2

Fwd: ntp help
by tony.chamberlain＠lemko.com 11 Nov '10

11 Nov '10

Hello I am trying to sync via NTP locally (since I have no Internet access). None of the NTP stuff I read on the net seems to work right. I mean it works fine setting up a client going to something like 0.pool.ntp.org but when I want to make my LInux box a server, and I do an ntpdate to it from another machine, it says no suitable server found. I have tried every possible combination of restrict, broadcast, multicast. Followed directions in the examples but nothing works. Also "iptables-save" shows no iptables stuff set at all, so there is no firewall blocking it. Maybe I could ask my question and someone could tell me how to configure? There are 4 machines: 1. 10.5.1.50 2. 10.5.0.20 / 192.168.1.100 3. 10.6.1.50 4. 10.6.0.20 / 192.168.1.101 The 10.5s cannot reach the 10.6s (except roundaboutly through the 192 network). The two 192 machines are connected directly to each other. You can get back and forth between them I want to set it up so that, and it doesn't matter which way), one of the 191.168.1.X machines NTP syncs to the other, and then the 10.5.1.50 syncs to 10.5.0.20 and the 10.6.1.20 syncs to 10.6.0.20. How do I set the ntp.conf files? Remember there is no external internet on any of the machines, and the 10.5 machines cannot reach the 10.6 machines and v.v. (except the 10.X.0.20 machines can reach each other through the 192 network). Also I am not allowed to use the 192 machines as routers for the 10.X.1.50 machines. Thanks

3 2

RHEL Released
by William Warren 11 Nov '10

11 Nov '10

It's on their website right now.

2 1

flash-plugin crashes on full screen
by Rob Kampen 11 Nov '10

11 Nov '10

Hi List. doing my weekly updates with yum last night installed kernel.x86_64 2.6.18-194.17.4.el5.centos.plus and flash-plugin.i386 10.1.102.64-release now today as I go to watch a movie from hulu.com it crashes the flash-plugin whenever I try to go full screen. Anyone else notice this behaviour? I guess I'll try to downgrade flash and see if that fixes the problem. TIA

4 7

kerboros and nfs v4
by m.roth＠5-cent.us 10 Nov '10

10 Nov '10

My mamnager's trying to get nfs v4 working with kerboros. One major issue is that we do *not* have access to the server, or ktadmin - that's the network folks, and they have AD on the other side. The result is that he can't create (if I have this right) objects. I found <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-…>, and he says he's done everything and more. Any pointers, suggestions, etc? mark

2 1

Need advice trying to load ethernet firmware for kickstart
by Spiro Harvey 10 Nov '10

10 Nov '10

I've got a memory stick that I use to install systems. It's basically just has a simple isolinux setup on it that calls up the kickstart files from an http server and pulls down the distro via our online repo. However, I'm trying to get a standard automated install like this on an IBM box which has a Broadcom NetXtreme 2 NIC that requires firmware to be there on bootup. I've got the file, and I've added it into the directory that I think it should be in (/lib/firmware/bnx2) on the initrd.img. However, when the system boots, it identifies the NICs on one of the console screens, but borks and won't boot properly. On console 1: GRUB boots, I get menu, choose option. Kernel loads initrd.img loads anaconda starts loads usb-storage module borks with: """ loader received SIGSEGV! Backtrace [0xf00bar] ... etc install exited normally [1/1] """ sends termination signals, unmounts everything, and halts ("You may safely reboot") On console screen 3: last few items are loading bnx2 module, insert module, remove usb-storge from modprobe.conf, and finally "getting kickstart file" On screen 4: detects storge devices and BNX2 NICs It seems to be crapping out when it tries to do the network access, but I've got nothing more I can trace the problem with. There's no shell yet. So I can't figure out if I've put the firmware in the wrong place, given it the wrong permissions (dirs are 755 and .fw file is 644) but whether that even matters because the source files are on a FAT16 partition, I don't know. It could just not be loading it, or the file could be corrupt. So how do I go about debugging this? Or am I doing it wrong? Any advice or pointers greatly appreciated. Thanks. -- Spiro Harvey Knossos Networks Ltd (04) 460-2531 : (021) 295-1923 www.knossos.net.nz

1 0

Re: [CentOS] flash-plugin crashes on full screen
by brett mm 10 Nov '10

10 Nov '10

>> now today as I go to watch a movie from hulu.com it crashes the >> flash-plugin whenever I try to go full screen. On Fedora 13, some versions of Flash crashed when fullscreen button was clicked, if the user also had nvidia drivers installed. The workaround was to right click on the flash video content (before switching to fullscreen), unticking "enable hardware acceleration" then clicking fullscreen. Might be worth a try. Brett.

3 2

Re: [CentOS] CentOS Digest, Vol 70, Issue 10
by Frans Rosslee 10 Nov '10

10 Nov '10

I listened to your email using DriveCarefully and will respond as soon as I can. Download DriveCarefully for free at www.drivecarefully.com Sent via my BlackBerry from Vodacom - let your email find you!

3 2

CentOS-announce Digest, Vol 69, Issue 5
by centos-announce-request＠centos.org 10 Nov '10

10 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0839 Moderate CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2010:0839 Moderate CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Nov 2010 22:40:43 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0839 Moderate CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20101109224043.GA10138(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d121c43f4c192a0d57f3a914ff9d5e62 kernel-2.6.18-194.26.1.el5.i686.rpm df72e94d0c64ebc4719fbe2321c3aa17 kernel-debug-2.6.18-194.26.1.el5.i686.rpm e8a473a5489412c52bc234c5592a5846 kernel-debug-devel-2.6.18-194.26.1.el5.i686.rpm b1bc156cbc685de1d5987ab0e68ec1ed kernel-devel-2.6.18-194.26.1.el5.i686.rpm 98854bc0cc91c508eb1886b54baf8101 kernel-doc-2.6.18-194.26.1.el5.noarch.rpm 6e9e8c55cb7ca9721342937a42a12bec kernel-headers-2.6.18-194.26.1.el5.i386.rpm 1ef86e848ec5804fdbfc1e8cacfc1753 kernel-PAE-2.6.18-194.26.1.el5.i686.rpm 3f17d764da86ce8ff192d6bfde59a862 kernel-PAE-devel-2.6.18-194.26.1.el5.i686.rpm f1a492c80a81ce80a3a1d190a7299679 kernel-xen-2.6.18-194.26.1.el5.i686.rpm fd2dd0907c7730bda802152ff460126b kernel-xen-devel-2.6.18-194.26.1.el5.i686.rpm Source: d3b4f0593f5f8c2ab2f436549b7e6347 kernel-2.6.18-194.26.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 9 Nov 2010 22:40:44 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0839 Moderate CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20101109224044.GA10154(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 960beaa2770d2d0607ff426fbe936f82 kernel-2.6.18-194.26.1.el5.x86_64.rpm 00e18cf5f435e198d83c419e3d8c7d53 kernel-debug-2.6.18-194.26.1.el5.x86_64.rpm ba1cd10ff374a4beaec8de1c6090e3b0 kernel-debug-devel-2.6.18-194.26.1.el5.x86_64.rpm 18d005a14e65e7b7779698e89a30ff42 kernel-devel-2.6.18-194.26.1.el5.x86_64.rpm c7a10fd5410f4997f78371757681bc43 kernel-doc-2.6.18-194.26.1.el5.noarch.rpm 2fd1f1e9466c96372d0bc6bff59ebd8e kernel-headers-2.6.18-194.26.1.el5.x86_64.rpm 21675572616e9cc3d3c8cdebc9c03e60 kernel-xen-2.6.18-194.26.1.el5.x86_64.rpm 3a98cb4aed00e182ff8986c8ce6d3b5f kernel-xen-devel-2.6.18-194.26.1.el5.x86_64.rpm Source: d3b4f0593f5f8c2ab2f436549b7e6347 kernel-2.6.18-194.26.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 5 **********************************************

1 0

Re-export an NFS mount from another machine for roaming profiles
by Nicolas Kovacs 10 Nov '10

10 Nov '10

Hi, In my office I have a server running CentOS 5.5. I have Apache+PHP+MySQL running on that server, and I'm exporting /var/www/html, so I can mount it on my main desktop with NFS. Server : grossebertha Desktop : babasse [root@babasse:~] # mount /dev/sda3 on / type ext4 (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) tmpfs on /dev/shm type tmpfs (rw) /dev/sda1 on /boot type ext2 (rw) /dev/sdb1 on /Disque2 type ext4 (rw) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw) grossebertha:/var/www/html on /home/kikinovak/Sites type nfs (rw,rsize=8192,wsize=8192,timeo=14,intr,addr=192.168.1.252) Now I'm thinking about configuring a few roaming profiles here with NIS/NFS, using 'babasse' as my main machine. In that case, I would export babasse's full /home to the local network, and then configure authentication with NIS. I wonder if it can be a problem when one of the directories, in that case /home/kikinovak/Sites, is already an NFS mount. I can't really figure it out, but I guess I vaguely fear some situation similar to the one displayes in "Being John Malkovich", where John Malkovich enters the secret trapdoor to his own thoughts. Thought I'd better ask before doing something silly. Cheers, Niki -- http://www.kikinovak.net

3 2

RHEL 6 potential release date???
by Tom Bishop 10 Nov '10

10 Nov '10

Benn playing with the beta's and have looked around for a potential release date...Does anyone know what the likely date is??? Thanks....

11 16

Network card not working after update to 2.6.18-194.17.4.el5
by Mathieu Baudier 10 Nov '10

10 Nov '10

Hello, the network card of my workstation stopped working after I updated the kernel to 2.6.18-194.17.4.el5 . I don't see any specific error messages when booting, and the related interface is shown as up by ifconfig with its (static) IP address properly set. But I cannot reach any other computer or router on the LAN (whereas other boxes work fine). Where the network cable is plugged, an orange light stays on and does not blink. Booting with 2.6.18-194.17.1.el5 instead solves the issue. The network card is: Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8110SC/8169SC Gigabit Ethernet (rev 10) I just wanted to share this, and see if anybody else experienced such issues. It makes me feel uncomfortable with updating some remote servers, because it would really be a pain to fix if their network cards stopped working after rebooting (they are not the same as the one of my workstation, but I would feel safer if I could find out that this is a problem with my computer and not with the kernel) Cheers, Mathieu

3 3

Init.d script troubleshooting.
by Don Krause 10 Nov '10

10 Nov '10

I got a strange problem with init.d scripts on a fully updated (as of today) fresh install of 5.5 x64. I've written a script, /etc/init.d/Fast that starts a fairly large and slow commercial application, by calling that applications control binary to do the actual work. I "registered" the script, via chkconfig --add Fast, and the symlinks are in the expected places. [root@rpmbuilder etc]# ls /etc/rc*/*Fast /etc/rc0.d/K10Fast /etc/rc4.d/S90Fast /etc/rc1.d/K10Fast /etc/rc5.d/S90Fast /etc/rc2.d/K10Fast /etc/rc6.d/K10Fast /etc/rc3.d/S90Fast [root@rpmbuilder etc]# ls -la init.d/Fast -rwxr-xr-x 1 root root 2691 Nov 9 16:49 init.d/Fast [root@rpmbuilder etc]# Testing the script, both via "/etc/init.d/Fast start" and "service Fast start" works, and it fully works for the implemented "start","stop","status" commands. "/etc/rc0.d/K10Fast stop" works as expected. (as does /etc/rc1,2,6 etc..) The script contains full paths to everything. At boot, the script functions as expected. My problem is that at reboot, via shutdown -r or shutdown -h the script does NOT get called, so naturally the system doesn't get to clean up after itself, then it fails to startup correctly next boot. The startup and shutdown of this application is slow, 2+ minutes. I know it doesn't work at reboot or halt because the host goes down fast, and the system is littered with left over pid files and such that prevents a clear restart of the Fast process. I've placed echo commands in the script, both in the stop() function to log the date/time to a file when it's called, and in the head of the script itself, just to see if it gets called at all during shutdown. As far as I can tell, the script does NOT get called at shutdown/reboot time. At all. I'm just confused, this ain't supposed to be this hard... Is there some way to debug init? Suggestions? Thanks <-- /etc/init.f/Fast --> #!/bin/bash # # Startup script for Fast # # chkconfig: 345 90 10 # description: Fast Search Engine # processname: nctrl echo "************************* In Fast ****************************" # Source function library . /etc/init.d/functions RETVAL=0 FASTSEARCH=/opt/Opti/9.1/Fast/fast BIN=${FASTSEARCH}/bin LIBPATH=${FASTSEARCH}/lib SHLIB=${FASTSEARCH}/lib LD_LIBRARY_PATH=${FASTSEARCH}/lib PYTHONPATH=${FASTSEARCH}/lib/python2.3/lib-dynload export FASTSEARCH LIBPATH SHLIB LD_LIBRARY_PATH PYTHONPATH start() { if [ -f ${BIN}/nctrl ]; then cd ${BIN} echo -n $"Starting Fast " su fastadmin -c "./nctrl start" RETVAL=$? [ $RETVAL -eq 0 ] && touch /var/lock/subsys/fast echo fi return $RETVAL } stop() { echo -n $"Stopping Fast " cd ${BIN} su fastadmin -c "./nctrl stop" RETVAL=$? [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/fast echo return $RETVAL } status() { cd ${BIN} su fastadmin -c "./nctrl status" } restart() { stop start } case "$1" in start) start ;; stop) stop ;; restart) restart ;; killlock) if [ -f /var/lock/subsys/fast ]; then rm -f /var/lock/subsys/fast fi ;; status) status ;; *) echo $"Usage: $0 {start|stop|restart|killlock|status}" exit 1 esac exit $RETVAL -- Don Krause

2 3

"yum -yq --security check-update" spouting lots of text?
by Dave 09 Nov '10

09 Nov '10

uname -a Linux 2.6.18-194.17.4.el5.centos.plus #1 SMP Tue Oct 26 04:07:11 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux I thought -q meant 'no output'. Recently yum -q has started spewing the following garbage, can anyone tell me why? thanks, Dave # yum -yq --security check-update 2>/dev/null Loaded plugins: fastestmirror, priorities, security Loading mirror speeds from cached hostfile * addons: mirror.5ninesolutions.com * base: ftp.osuosl.org * centosplus: centos.promopeddler.com * contrib: mirrors.kernel.org * epel: mirror.pnl.gov * extras: mirror.rocketinternet.net * rpmforge: ftp-stud.fht-esslingen.de * rpmfusion-free-updates: mirror.web-ster.com * rpmfusion-free-updates-testing: mirror.web-ster.com * rpmfusion-nonfree-updates: mirror.web-ster.com * rpmfusion-nonfree-updates-testing: mirror.web-ster.com * updates: mirrors.cat.pdx.edu Limiting package lists to security relevant ones No packages needed, for security, 31 available aalib.x86_64 1.4.0-5.el5.rf rpmforge blas.x86_64 3.1.1-1.el5.rf rpmforge cadaver.x86_64 0.22.5-1.el5.rf rpmforge dnsmasq.x86_64 2.55-1.el5.rf rpmforge emacs-git.x86_64 1.7.3-1.el5.rf rpmforge enca.x86_64 1.10-1.el5.rf rpmforge gdal.x86_64 1.4.4-2.el5.rf rpmforge geos.x86_64 3.2.2-1.el5.rf rpmforge git.x86_64 1.7.3-1.el5.rf rpmforge hdf5.x86_64 1.8.0-1.el5.rf rpmforge iso-codes.noarch 1.0a-1.el5.rf rpmforge lapack.x86_64 3.1.1-1.el5.rf rpmforge lftp.x86_64 4.0.10-1.el5.rf rpmforge libextractor.x86_64 0.5.22-2.el5.rf rpmforge libmpcdec.x86_64 1.2.6-1.el5.rf rpmforge libpaper.x86_64 1.1.22-1.el5.rf rpmforge libwpd.x86_64 0.8.14-1.el5.rf rpmforge mtr.x86_64 2:0.80-1.el5.rf rpmforge netcdf.x86_64 3.6.3-1.el5.rf rpmforge netcdf-devel.x86_64 3.6.3-1.el5.rf rpmforge perl-Compress-Zlib.noarch 2.015-1.el5.rf rpmforge perl-DBI.x86_64 1.615-1.el5.rf rpmforge perl-Git.x86_64 1.7.3-1.el5.rf rpmforge perl-HTML-Parser.x86_64 3.68-1.el5.rf rpmforge perl-HTML-Tagset.noarch 3.20-1.el5.rf rpmforge proj.x86_64 4.7.0-1.el5.rf rpmforge rsync.x86_64 3.0.7-1.el5.rf rpmforge syslinux.x86_64 4.03-1.el5.rf rpmforge udftools.x86_64 1.0.0b3-3.el5.rf rpmforge xvidcore.x86_64 1.2.2-1.el5.rf rpmforge Obsoleting Packages perl-IO-Compress.noarch 2.030-2.el5.rf dag perl-Compress-Zlib.x86_64 1.42-1.fc6 installed

1 1

Running a DNS signed zone on Centos 5.5
by Robert Moskowitz 09 Nov '10

09 Nov '10

My DNS server has been running Centos for some time. I am in the process of upgrading it to Centos 5.5 (long overdue, I know). Since we now have .com signed I want to get my domain signed as well, but I see that Centos 5.5 is running BIND 9.3.6 and a thread on the BIND list recommends against running a DNSSEC master zone on anything less than 9.6 and you really should be on 9.7. The thread DOES mention that some functionality has been backported by RH to what their 9.3.6. I did find the following: http://jason.roysdon.net/2009/10/16/building-bind-9-6-on-rhel5-centos5-for-… Is this the best path at this time? Can anyone point me to other documents? I have a server that I can test this out and get everything ready before I upgrade my main Centos DNS server. This way I can get it right in one try (or that is the dream).

9 10

lvm and /dev/cdrom: open failed: No medium found
by Rainer Traut 09 Nov '10

09 Nov '10

Hi, every lvm command gives one line with: /dev/cdrom: open failed: No medium found I looked at https://bugzilla.redhat.com/show_bug.cgi?id=431901 and changed filter in /etc/lvm/lvm.conf to filter = [ "r|/dev/cdrom|", "a/.*/" ] then deleted cache /etc/lvm/cache/.cache This seems to help, but after a while the message reappears. Is there a way to get rid of it, because I'm making use of lvm with snapshots very often? Rainer

2 2

OT - Any true bourne shells out there for linux?
by Phil Savoie 09 Nov '10

09 Nov '10

Hi All, Was wondering if anyone knows there are any separate rpms to be able to install a true bourne shell and not one linked to bash. Thanks in advance, Phil -- Manners are the unenforced standards of conduct which demonstrate that a person is proper, polite, and refined.

8 8

Update for mailman 2.1.11 -> 2.1.14? Centos 5.5
by Götz Reinicke - IT-Koordinator 09 Nov '10

09 Nov '10

Hey, recently I was asked, how mailman handles bounces and after digging around I also noticed that the current version is 2.1.14 with a lot of bug fixes. So I'd like to ask if there is a (src)rpm out there with the recent version working on centos 5.5. Thanks and best regadrs . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Geschäftsführer: Prof. Thomas Schadt

1 0

large numbers of linux system user for postfix
by ahmad riza h nst 08 Nov '10

08 Nov '10

hello, i need to setup a mail server with postfix + dovecot + webmin + virtualmin + virtual user with linux system user. the virtual user may reach to thousands user from several hundreds virtual domains. what i concern is large numbers of linux system user which used in these setup, is it good or bad? maybe somebody would share their experience about this setup ? any links would be good. postfix 2.6.7 dovecot 2.0.6 centos 5.x webmin + virtualmin thank you. -- http://blog.rizahnst.org

9 10

pam_ldap login under centOS
by bluethundr 08 Nov '10

08 Nov '10

Hello List I am attempting to setup various pam modules to consult our new LDAP services in order to do what it needs to do. I have setup my /etc/pam.d sudo file (for example) this way in the attempt to accomplish this via LDAP: [root@VIRCENT03:~]#cat /etc/pam.d/sudo #%PAM-1.0 auth include system-auth auth required pam_ldap.so account include system-auth account required pam_ldap.so password include system-auth password required pam_ldap.so session optional pam_keyinit.so revoke session required pam_limits.so session required pam_ldap.so but even tho the user is part of the %wheel group under LDAP it is unable to sudo to any other account (including root). If I try to sudo this is what happens: [bluethundr@VIRCENT03:~]#sudo bash [sudo] password for bluethundr: bluethundr is not in the sudoers file. This incident will be reported. It would appear that sudo support for ldap is compiled in: [root@VIRCENT03:~]#ldd $(which sudo)| grep -i ldap libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x00552000) This is how I setup my ldap.conf file [root@VIRCENT03:~]#cat /etc/openldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example, dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never URI ldap://ldap.acadaca.net/ BASE dc=acadaca,dc=net TLS_CACERTDIR /etc/openldap/cacerts sudoers_base ou=sudoers,ou=Services,dc=acadaca,dc=net In my openldap logs on the LDAP server there appears to be no activity when I sudo. however in the secure logs on the client I do.. Nov 8 16:05:34 VIRCENT03 su: pam_unix(su-l:session): session opened for user root by bluethundr(uid=500) Nov 8 16:05:37 VIRCENT03 su: pam_unix(su-l:session): session opened for user bluethundr by bluethundr(uid=0) Nov 8 16:05:44 VIRCENT03 sudo: bluethundr : user NOT in sudoers ; TTY=pts/5 ; PWD=/home/bluethundr ; USER=root ; COMMAND=/bin/bash I do see other events in secure.log that appear to be pam successes however. am i interpreting this correctly that at least part of the system is communicating with pam on the ldap server? thanks -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss