- Discuss - lists.centos.org

how to find out promiscuous mode
by Vadkan Jozsef 06 Feb '10

06 Feb '10

How can I find out that someone is using it's network card in promiscuous mode in a subnet? Thank you!

3 2

Configuration Management Redux (was: best parallel / cluster SSH)
by Alan McKay 06 Feb '10

06 Feb '10

On Thu, Feb 4, 2010 at 2:03 PM, Les Mikesell <lesmikesell(a)gmail.com> wrote: > But, if someone ever gets cross-platform config management right or at > least close enough that it is worth learning yet another description > language I'd be very interested. Cfengine v3 might be getting there but > the windows version seems to be only available in the commercial build. OK, this is the perfect sequay for me :-) Assuming you only want Linux, and at that CentOS Linux - which are both the case for me - what Config Management system would you use? What is out there? A few months ago I sort of had a similar thread going and got the following : Slackmaster - looks like this is from google chef - have not looked it up yet puppet - got a test bed going and just bought the book because have not found much on line in terms of complex configs and how to actually use it to manage your environments bcfg2 - have not looked for it yet CF Engine - am vaguely familiar with it. thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

7 11

Virtualization - what do You recommend?
by Rafał Radecki 06 Feb '10

06 Feb '10

Hi All. I plan to use virtualization in my production environment. I plan to use one of the following options: - KVM; - VMWare Esxi; - VMWare Workstation. I plan to install Windows 2008 as a guest. I want to use something like LVM snapshots for backups. Stability is also very important, the guest will be used as a production server. Which option could You recommend and why? Thank You very much in advance :) With regards, R.

26 40

gdm-simple-greeter, redux
by m.roth＠5-cent.us 06 Feb '10

06 Feb '10

Does *anyone* have a clue where gdm-simple-greeter stores the usernames it presents? I know that it is not getting it out of /etc/passwd. based on users who can log in, since I have several machines where one user, who's rolled off, is still showing, even though /etc/passwd has him as having a shell that doesn't exist. mark

2 3

Using XEN to install Windows XP as guest on CentOS 5 as host ?
by Hadi Motamedi 06 Feb '10

06 Feb '10

Dear All I want to use XEN to install Windows XP as guest on CentOS 5 as host . I tried as the followings : #yum install xen virt-manager kernel-xen #chkconfig xend on #reboot Then I booted my CentOS server using XEN kernel . I tried as the followings : #virt-manager & But when continuing to create the virtual machine , under Installation Method menu , I cannot select 'local install media (cdrom)' and just the Network install tree is highlighted . So I tried to reach the desired one , by issuing as the followings : #virt-install --paravirt --name WindowsXP --ram 128 --file /vm --location /mnt/cdrom But it didn't get through as well . Can you please let me know how can I do it correctly ? Thank you Hotmail: Trusted email with powerful SPAM protection. Sign up now. _________________________________________________________________ Hotmail: Free, trusted and rich email service. https://signup.live.com/signup.aspx?id=60969

2 1

XEN
by Matt 05 Feb '10

05 Feb '10

I have a fairly high disk i/o intensive email server I am thinking of upgrading. I was thinking of upgrading it to CentOS 5.x 64bit. I was also thinking of running it as a guest under XEN. Would this allow me to more easilly transfer it to faster hardware in the future? Or would running as a guest seriously hurt disk i/o?

3 2

Clustering
by Bo Lynch 05 Feb '10

05 Feb '10

Just wanted to get the lists opinion on clustering and what project to use. Any info would be greatly appreciated. Thanks -- Bo Lynch

12 41

Vmware Server interface bridge not work.
by Saulo Bozzi 05 Feb '10

05 Feb '10

Hi list!!! Anybody, please, can help me. My CentOS 5.4 after that update to new kernel, my vmware server not work the interface bridge, with new kernel and old kernel. Only work with default install of CentOS 5.4, done update, not work. Anybody, please? ps.:Interface, nat, host-only, vmnet1 and vmnet8, work fine. Regards. Bye.

1 0

VMWare ESXi & CentOS5.4
by Thom Paine 05 Feb '10

05 Feb '10

I have a brand new Dell Poweredge T310 server with 4G ram and 1TB raid-5 hard drive in it. I Really only need to be able to run a copy of CentOS 5.4 on it, but I'm wondering if in the build process should I stick on ESXi 4 and then run CentOS as a vm? This would give me the options to roll out other VM's if I want over the life of the server (which I likely won't need) but the convenience of having them might be there. I'm only thinking of doing this because ESXi is free, and won't add any cost to this server. This server is going to be a domain controller for 5 workstations which will run Windows XP, as well as host 1 website with email. It will setup a few shares for samba, and have one network printer attached to it. Any thoughts to this, or should I just put on CentOS 5.4 and be done with it? I know it's like asking what everyone's favourite colour is, but maybe a few replies will give me some ideas. Thanks. -- -=/>Thom

7 8

About the openfire question ~
by Majian 05 Feb '10

05 Feb '10

Hi, guys: Would anyone know what causes this error message ? It's not the first time I've seen it but is the first time I've seen it so often. openfire verison is 3.6.4 . at org.apache.mina.filter.executor.ExecutorFilter$ProcessEventsRunnable.run(Execut orFilter.java:283) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:51) at java.lang.Thread.run(Unknown Source) 2007.05.13 15:07:38 org.jivesoftware.openfire.nio.ConnectionHandler.exceptionCaught(ConnectionHandle r.java:110) <http://www.igniterealtime.org/community/thread/32916> java.lang.ArrayIndexOutOfBoundsException 2007.05.13 15:08:03 org.jivesoftware.openfire.nio.ConnectionHandler.exceptionCaught(ConnectionHandle r.java:110) <http://www.igniterealtime.org/community/thread/32916> .... <http://www.igniterealtime.org/community/thread/32916> There are some lines displays that messages . If it displayes that , the client could have problems on the send or recive the message . But i don't know why does it diplays ~ Thanks in advance ~

3 2

Kernel error - help please
by Phil Savoie 05 Feb '10

05 Feb '10

Hi All, Just received this error from logwatch: --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present [<c0405a89>] error_code+0x39/0x40 ...: 2 Time(s) ---------------------- Kernel End ------------------------- Any ideas? I don't know what this means, other than if it is a kernel error it can't be good. Thanks in advance, Phil

3 2

logwatch/shorewall warnings
by Timothy Murphy 05 Feb '10

05 Feb '10

I'm running a little web-server under CentOS-5.4 , with shorewall as firewall. I used to get messages about attempted intrusions, with the IP addresses of those attempting to connect. This stopped some time ago, and my logwatch reports now are very bare. I don't recall changing the settings of logwatch or shorewall. Has there been some default change? I should say that I'm not sure if I mind losing these warnings, as I never used to do anything about them. -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

1 0

how to get logs from a time-range
by hqm8512 05 Feb '10

05 Feb '10

Hi, I want to get logs from a time-range, like from 11:00:11 to 13:00:00 ,How should in do it in the bash shell? All logs in a file .

2 1

pls help about changing network card but assign to another ethx
by adrian kok 05 Feb '10

05 Feb '10

Hi I change eth1 from realtek to dlink but the centos is showing eth2 instead of eth1 In another version of linux, I can change 70-persistent-net.rules but I check /etc/udev/rules.d/70-persistent-net.rules but it doesn't have the file 70-persistent-net.rules please help Thank you Send instant messages to your online friends http://uk.messenger.yahoo.com

3 2

giving normal user a super user privilege
by Umarzuki Mochlis 04 Feb '10

04 Feb '10

I had added user umarzuki to wheel group # usermod -G wheel umarzuki *Yes, I can use/setup sudo but I do this just for learning purpose My /etc/pam.d/su as below auth sufficient pam_rootok.so # Uncomment the following line to implicitly trust users in the "wheel" group. #auth sufficient pam_wheel.so trust use_uid # Uncomment the following line to require a user to be in the "wheel" group. auth required pam_wheel.so use_uid auth include system-auth account sufficient pam_succeed_if.so uid = 0 use_uid quiet account include system-auth password include system-auth session include system-auth session optional pam_xauth.so when i su to user umarzuki and view its id output $ id uid=500(umarzuki) gid=500(umarzuki) groups=10(wheel),500(umarzuki) and i tried run $ yum update Loaded plugins: fastestmirror You need to be root to perform this command. but i managed to change the interface's IP with this command $ /sbin/ifconfig eth0 192.168.1.1 netmask 255.255.255.0 up Is there a step that i missed? -- Regards, Umarzuki Mochlis http://debmal.my

1 1

Virtualization software to install Windows as guest on CentOS 5 as host ?
by Hadi Motamedi 04 Feb '10

04 Feb '10

Dear All I need to install Windows as guest on my CentOS 5 as host . Can you please give me the link to download the requierd rpm package for this purpose ? Thank you _________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

12 19

Unable to update a CentOS 4 : urlopen error nonnumeric port: 8080
by robert mena 04 Feb '10

04 Feb '10

Hi, I am trying to update a CentOS 4.4 but the yum update gives me error messages Setting up Update Process Setting up repositories http://mirror.centos.org/centos/4/updates/i386/repodata/repomd.xml: [Errno 4] IOError: <urlopen error nonnumeric port: '8080?'> Trying other mirror. Cannot open/read repomd.xml file for repository: update failure: repodata/repomd.xml from update: [Errno 256] No more mirrors to try. Error: failure: repodata/repomd.xml from update: [Errno 256] No more mirrors to try. I can access the web from this machine. Any ideas?

3 3

Display a warning message at a certain time ?
by Niki Kovacs 04 Feb '10

04 Feb '10

Hi, I'm currently installing a CentOS 5 desktop as a public internet access point. The machine shuts down every day automatically at 22:30. Is there a way I can display a message in GNOME at 22:15 warning the user that the machine will shutdown in 15 minutes ? Any suggestions ? Niki Kovacs

9 23

OpenSSH-5.3p1 selinux problem on CentOS-5.4.
by James B. Byrne 04 Feb '10

04 Feb '10

Note: I am digest subscriber so if you could copy me directly on any reply to the list I would appreciate it very much. I sent this to the OpenSSH list (secureshell(a)securityfocus.com) yesterday and received no response so I am asking here in hopes that someone else has run across this problem on CentOS. We have encountered a situation that requires sftp access to one of our server by an outside agency. This will be used for a data push application only and we need to secure our server from trespass via this access. After a modest amount of research we decided that the best answer was to use a more recent version of OpenSSH (5.3p1)that supports chroot as a configurable option. I obtained the software from the openssh.org website and built it using the libedit packages from the CentOS testing repo. These were the option used: ./configure --prefix=/opt --with-libedit --with-md5-passwords --with-pam --with-selinux --with-tcp-wrappers The new server software works fine for regular ssh/sftp users. However, when logging on as a member of the chroot group we obtain this error: ssh_selinux_getctxbyname: ssh_selinux_getctxbyname: security_getenforce() failed I have found reports of this exact error via Google in several places dating back to 2006, but these all seem to devolve into either: this has been fixed in version x.y.z on distribution Q, where x.y.z is less than 5.3 and Q is not CentOS. Or, the selinux filesystem has to be mounted inside the chroot directory. Since I assume the former is never going to happen for CentOS, at least not in time to do me any good, I am looking for an explanation of what the latter means and how it is accomplished. Our current SELinux status on that host is: # sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 21 Policy from config file: targeted Our chroot directory path is: /var/data/sshchroot The questions are: 1. Is it possible to mount the selinux filesystem twice on the same host having different roots? 2. If so, then how is this accomplished? 3. If not, then is there anything else that I can do, besides disabling selinux support in the sshd daemon, to get this to work? Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 10

Re: [CentOS] OpenSSH-5.3p1 selinux problem on CentOS-5.4.
by James B. Byrne 04 Feb '10

04 Feb '10

On Thu, February 4, 2010 10:08, Marc Wiatrowski wrote: > >> >> > Have you looked at using rssh as the users shell? You can limit the > user to a chroot sftp only. Its not stock, but ssh can then be. > > http://dag.wieers.com/rpm/packages/rssh/ > I looked at rssh briefly yesterday when someone suggested it. Had I known of it before we started down this road then we might have used it instead. However, at the moment we seem to have a working solution and so we will stick with that for now. I am not sure what effect disabling SELinux support in SSH actually has from a security standpoint. So, if anyone cares to enlighten me on the the consequences I would like to know. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

CentOS-announce Digest, Vol 60, Issue 1
by centos-announce-request＠centos.org 04 Feb '10

04 Feb '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0076 Important CentOS 4 i386 kernel - security and bug fix update (Tru Huynh) 2. CESA-2010:0076 Important CentOS 4 x86_64 kernel - security and bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Feb 2010 13:33:45 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0076 Important CentOS 4 i386 kernel - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20100204123345.GE24821(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0076 kernel security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0076.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/kernel-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-devel-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-hugemem-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-hugemem-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-smp-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-smp-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-smp-devel-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-smp-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-xenU-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-xenU-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-doc-2.6.9-89.0.20.EL.noarch.rpm source: updates/SRPMS/kernel-2.6.9-89.0.20.EL.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update kernel\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

alsa
by mattias 04 Feb '10

04 Feb '10

How to install alsa for sound I use vmware and it requre alsa

2 3

Yum: strange dependencies
by Fajar Priyanto 04 Feb '10

04 Feb '10

Hi all, On Centos 5.4 minimum installation, I tried to install these packages (notice the dependencies): =================================================================================================================== Package Arch Version Repository Size =================================================================================================================== Installing: mc i386 1:4.6.1a-35.el5 base 2.1 M mdadm i386 2.6.9-2.el5 base 827 k ntp i386 4.2.2p1-9.el5.centos.2.1 updates 1.3 M sudo i386 1.6.9p17-5.el5 base 218 k Installing for dependencies: exim i386 4.63-3.el5 base 1.2 M mysql i386 5.0.77-4.el5_4.1 updates 4.8 M perl i386 4:5.8.8-27.el5 base 12 M perl-DBI i386 1.52-2.el5 base 600 k postgresql-libs i386 8.1.18-2.el5_4.1 updates 196 k Transaction Summary =================================================================================================================== Install 9 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 23 M I didn't want all those dependencies, especially exim and mysql. So, instead of installing mc, mdadm, ntp, and sudo at the same time, I installed them one by one and this time no exim and mysql (mc still wanted perl, fine) dependencies. Any thought why was that? Thank you.

2 2

Updating gfortran in CentOS 5.4?
by Jon Forrest 04 Feb '10

04 Feb '10

We're finding that several of the packages we need don't compile using the version 4.1.2 of gfortran that comes with CentOS 5.4. So, I've built the latest version of gfortran (e.g. 4.4.2) but I've done it so that all the new version's files go in /share/apps/gnu so that they don't interfere with the standard gcc distribution (building gfortran requires building some parts of gcc). Although I can compile and run a simple fortran "Hello, world" program using the version of gfortran I built this way, trying to run a more complex application, such as charmm (a molecular dynamics program), fails. When I run charmm, I get the message "Killed". Running strace ./charmm shows execve("./charmm", ["./charmm"], [/* 43 vars */] <unfinished ...> +++ killed by SIGKILL Since "Hello, world" compiles and runs, but charmm compiles and doesn't run, there's something wrong with how charmm is linked. Also, although the 'file charmm' command shows an ELF 64-bit dynamically linked file, 'ldd charmm' says " not a dynamic executable" (note no file name). So, something is strange. What have other people done about building new versions of gfortran on CentOS 5.4? Is this worth the trouble? Or, is it better to just go with Intel Fortran? Cordially, -- Jon Forrest Research Computing Support College of Chemistry 173 Tan Hall University of California Berkeley Berkeley, CA 94720-1460 510-643-1032 jlforrest(a)berkeley.edu

4 5

atime, relatime query
by Rajagopal Swaminathan 04 Feb '10

04 Feb '10

Greetings, I am aware that mounting filesystems with noatime option greatly increases speed. I have tried to follow discussion on the pros and cons of using noatime. I have however not been able to mount with the option relatime in centos 5.2. But in a production db server, which is backed up by HP DP, is it advisable to mount with noatime? Anybody care to share their experience on it? Regards Rajagopal

6 9

subversion 1.6.9 and sqlite 3.6.22
by Benjamin Franz 03 Feb '10

03 Feb '10

I'm in the process of setting up subversion and since the version packages with C5 is, shall we say, showing its age, I've built an updated version. In order to do that I had to upgrade sqlite from the default 3.3.6 (which the current subversion will not build with) and I went with 3.6.22. Has anyone else had any experience with whether or not that breaks anything? I'm a little nervous because sqlite is used all over the place (rpm, X11, apache, yum, selinux, system-config-*, various perl modules, gnome, gimp, php, and so on). -- Benjamin Franz

3 3

Re: [CentOS] how to find out promiscuous mode
by Les Bell 03 Feb '10

03 Feb '10

"Les Bell" <lesbell(a)lesbell.com.au> wrote: >> http://sourceforge.net/projects/prodetect/ << Sorry - just remembered that's a Windows program. The classic tool for monitoring IP/Ethernet address pairings is arpwatch, but unlike prodetect, it will only report an ARP cache poisoning attack, not someone silently sniffing (which isn't much use on switched networks anyway). Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

pointer to Searchable Archives for the list pls
by Simon Billis 03 Feb '10

03 Feb '10

Hi Folks, Can you point me in the direction of searchable archives for the list? I'm obviously missing something. I would like to be able to search the archives before asking my question. Thanks in advance Simon

5 5

Re: [CentOS] Skype and problem with ALSA mixer driver?
by Andrew 03 Feb '10

03 Feb '10

On Tue, 2010-02-02 at 09:54 -0500, Brent L. Bates wrote: > Why are you trying to use 5.3? Why not 5.4? After installing 5.4, try > everything again, even the newer kernel module. I've been reading these lists > long enough to remember people saying they have had the same problem as you > with earlier versions of the OS. I do not remember the details, but the > solution has something to do with software settings. You might want to do a > Google search for `skype' and `mic'. The answer may even be in the CentOS > archives. I think I saw it on this list. It may have been the Scientific > Linux list instead. I subscribe to and read both lists, so the solution may > have been on the SL list instead of CentOS. I hope this helps some. Good > luck. > Hi Brent, Thanks for taking the trouble to reply to me personally. I'm using CentOS 5.3 on my PC simply because that's the latest version which I had downloaded and burnt to CDs! I'm afraid I'm a bit slow in keeping up with the fast-moving development of CentOS and am always a bit reluctant to rebuild/reinstall the operating system on my PC. However, I thought that 5.3 was sufficiently up-to-date for my purposes, but was disappointed when I found that neither the wifi on my laptop nor skype on my PC worked properly! I'm now using Ubuntu 9.04 on my laptop which seems to work brilliantly and is very user-friendly. I'm thinking of using Ubuntu (server edition?) on my PC, after years of using RedHat and CentOS, because as a 'semi-tech' user (and great supporter of linux) I do like the user-friendliness of Ubuntu! Best regards, Andy

1 0

Logrotate in CentOS 5.4 more brutal (to httpd at least) than in 5.3?
by Christopher Thorjussen 03 Feb '10

03 Feb '10

I've just updated a few CentOS 5.3 servers to 5.4. One of them were a Apache Webserver. Doing a diff/check on the new ".rpmnew" config files that are made, I saw that the logrotate command for apache was changed. In 5.3 it did a reload, but in 5.4 it does a hard kill: CentOS 5.3: /var/log/httpd/*log { missingok notifempty sharedscripts postrotate /sbin/service httpd reload > /dev/null 2>/dev/null || true endscript } CentOS 5.4: /var/log/httpd/*log { missingok notifempty sharedscripts postrotate /bin/kill -HUP `cat /var/run/httpd.pid 2>/dev/null` 2> /dev/null || true endscript } Isn't this a bit harsh in 5.4? Wouldn't the 5.3 method be better? -Christopher Thorjussen

8 7

Re: [CentOS] Updating gfortran in CentOS 5.4?
by m.roth＠5-cent.us 03 Feb '10

03 Feb '10

> We're finding that several of the packages we > need don't compile using the version 4.1.2 of > gfortran that comes with CentOS 5.4. So, > I've built the latest version of gfortran (e.g. 4.4.2) > but I've done it so that all the new version's > files go in /share/apps/gnu so that they > don't interfere with the standard gcc distribution > (building gfortran requires building some parts > of gcc). <snip> > Since "Hello, world" compiles and runs, but charmm > compiles and doesn't run, there's something wrong > with how charmm is linked. Also, although the > 'file charmm' command shows an ELF 64-bit dynamically > linked file, 'ldd charmm' says " not a dynamic executable" > (note no file name). So, something is strange. <snip> I was just talking to one of the researchers here who's built it, and pointed out the completely obvious (once he pointed it out): the "<blank> not a dynamic executable" tells you that that piece, at least, is statically linked, *not* dynamic. He recommends getting a core dump, so you can do a traceback. mark

1 0

kickstart installation from usb key
by Georghy 03 Feb '10

03 Feb '10

2 17

VMware Workstation 7.0.x and CentOS 5.4
by Akemi Yagi 03 Feb '10

03 Feb '10

VMware Workstation 7.0.1 Release Notes has a list of supported OS: http://www.vmware.com/support/ws7/doc/releasenotes_ws701.html According to that, RHEL 5.4 is listed as supported for both host and guest but CentOS 5.4 is only for guest. This is quite strange and, if it is true, that could be a serious issue. If you have VMware Workstation 7.0.x, could you tell us what you find? Did you encounter any problem when running CentOS 5.4 as a host? Thanks to nikkilocke who reported about the above release notes in the CentOS forum. Akemi

1 0

Re: [CentOS] authentication failure
by fabien faye 03 Feb '10

03 Feb '10

I have create a script and modify an action file's of fail2ban to contact the IP provider's of bruteforce attacks source. If you are interested : http://www.generationip.eu/documentation/mini-howto/135-use-fail2ban-to-con… Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "fabien faye" <fabien(a)faye.eu> To: "CentOS mailing list" <centos(a)centos.org> Sent: Monday, January 25, 2010 1:30:39 PM Subject: Re: [CentOS] authentication failure Hi, No one knows how to auto send fail2ban report to the email address present in the whois ? Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "fabien faye" <fabien(a)faye.eu> To: "CentOS mailing list" <centos(a)centos.org> Sent: Saturday, January 23, 2010 8:30:36 PM Subject: Re: [CentOS] authentication failure Hi, I am a fail2ban user and i am very interested to have an autosent mail to the ip provider of the brute force ip address. Do you know if it is possible with fail2ban or if we have to rewrite action in fail2ban ?. Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Mail Original ----- De: "Athmane Madjoudj" <athmanem(a)gmail.com> À: "CentOS mailing list" <centos(a)centos.org> Envoyé: Samedi 23 Janvier 2010 18:20:01 Objet: Re: [CentOS] authentication failure On Sat, Jan 23, 2010 at 6:14 PM, madunix <madunix(a)gmail.com> wrote: > I noticed that my server has a lot ca. 1000x auth failure from > different alocated in China / Romania and Netherlands per day since 3 > days > It looks to me like somebody was trying to get into server by guessing > my password by brute force. > what would be the best to stop this attack and how? the server running > apache mysql and ftp > PORT STATE SERVICE > 21/tcp open ftp > 80/tcp open http > 443/tcp open https > 3306/tcp open mysql > ... > Jan 22 16:07:14 user vsftpd(pam_unix)[17462]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=195.95.228.150 > Jan 22 16:07:16 user vsftpd(pam_unix)[16737]: check pass; user unknown > Jan 22 16:07:16 user vsftpd(pam_unix)[16737]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=195.95.228.150 > Jan 22 16:07:17 user vsftpd(pam_unix)[17462]: check pass; user unknown > Jan 23 17:23:52 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 17:23:55 user vsftpd(pam_unix)[20524]: check pass; user unknown > Jan 23 17:23:55 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 17:23:59 user vsftpd(pam_unix)[20524]: check pass; user unknown > Jan 23 17:24:58 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 00:37:47 user vsftpd(pam_unix)[1791]: check pass; user unknown > Jan 23 00:37:47 user vsftpd(pam_unix)[1791]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=217.23.14.168 > Jan 23 00:38:06 user vsftpd(pam_unix)[1791]: check pass; user unknown > Jan 23 00:38:06 user vsftpd(pam_unix)[1791]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=217.23.14.168 > ... > > Thanks > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Maybe a brute force attack, try to install a HIDS like: APF/BFD: http://www.rfxn.com/projects/advanced-policy-firewall/ http://www.rfxn.com/projects/brute-force-detection/ Fail2ban: http://www.fail2ban.org/ Fail2ban is available in EPEL repos. HTH -- Athmane Madjoudj _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] cannot mount NFS share, portmap problems, what todo? [SOLVED]
by Rudi Ahlers 03 Feb '10

03 Feb '10

On Wed, Feb 3, 2010 at 2:40 PM, Geoff Galitz <geoff(a)galitz.org> wrote: > > > > Should it be running, or not? > > > > > > >root@mercury:[~]$ netstat -ap --inet | grep rpc > > >tcp 0 0 *:sunrpc *:* > LISTEN 6458/portsentry > > >udp 0 0 localhost:filenet-rpc localhost:filenet-rpc > ESTABLISHED 1980/postmaster > > > > > > It looks like you need to deconfigure portsentry from listening on that > port and then you should be good to go. IOW, portsentry is ok to run, but > not on your portmapper port when you need to run portmapper. > > > > -geoff > > > > --------------------------------- > Geoff Galitz > Blankenheim NRW, Germany > http://www.galitz.org/ > http://german-way.com/blog/ > > _______________________________________________ > awesome, thanx. It's working now :) -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

1 0

monitoring a workstation
by MOKRANI Rachid 03 Feb '10

03 Feb '10

Hi, I need to monitor a workstation (Centos 5 x86_64). I need to obtain informations about : - cpu utilization per user, per a period, how many days per user, Any ideas about a good and simple free tool ? Regards. __________________________ Ce message (et toutes ses pièces jointes éventuelles) est confidentiel et établi à l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'IFP décline toute responsabilité au titre de ce message. This message and any attachments (the message) are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP should not be liable for this message. Visitez notre site Web / Visit our web site : http://www.ifp.fr __________________________

9 8

cannot mount NFS share, portmap problems, what todo?
by Rudi Ahlers 03 Feb '10

03 Feb '10

Hi all, I want to map an NFS share from a remote server to a local CentOS 5.4 server, but have a problem with portmap: root@mercury:[~]$ service portmap restart pmap_getmaps rpc problem: RPC: Unable to receive; errno = Connection reset by peer Stopping portmap: [FAILED] Starting portmap: [ OK ] root@mercury:[~]$ service portmap status portmap dead but subsys locked root@mercury:[~]$ What is "subsys", and how do I "unlock it"? /var/log/messages gives me this: Feb 3 13:44:23 mercury portmap[2221]: cannot bind udp: Address already in use Which address is it referring to? Portmap isn't running so I don't see how it can be in use. Or should I be looking for the problem elsewhere? Google search results sugested opening port 111 in the firewall, which I have, but still get the error. And I cannot, at any costs, reboot this server. So, is there a way to fix this? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 4

Not able to redirect console msgs to serial port
by premrajm＠digilink.in 03 Feb '10

03 Feb '10

Hi, Iam using cento-5.3 on x86 machine and iam working to get the console messages redirected to serial port. I have made the necessary changes in the /etc/inittab file. - - - - - id:3:initdefault . . so:12345:respawn:/sbin/agetty ttyS0 9600 vt100 - - - -- - and also in /etc/grub.conf file - - - - serial --speed=9600 --unit=0 --word=8 --parity=no --stop=1 terminal --timeout=10 serial . . kernel /boot/vmlinux-2.6.18-128.el5 ro root=LABEL=/1 console=ttyS0,9600 - - - Still Iam not able to see any console messages redirection on serial port.I have connected the serial port of the Machine_1 which has centos running to Machine_2 where i have opened an hyperterminal.I see no console messages displayed here. Iam , I missing any configuration or is there an rpm i should install ? Thanks and Regards, Premraj M Sr.Software Engineer Tel: +91-080-67274900 Cell: +91-9741231739 Email: premrajm(a)digilink.in Smartlink Network Systems Ltd. Digilink India Ltd, Plot No. 10-A,Next to Hi-Cal Magnetics, Electronic City Phase II, Konappana Agrahara, Bangalore - 560100 Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

4 3

Is it possible to run serial console redirection without xen kernel
by premrajm＠digilink.in 03 Feb '10

03 Feb '10

Hi, I have customized my centos Installation and removed the vitalization, Cluster and storage cluster support along with GUI support.I have enabled only server related packages. Regarding serial console redirection,I have checked my serial cable,Ports and inittab and grub.conf configuration.Everything seems to be correct.I wanted to know that is it necessary to have a xen kernel (2.6.18-128xen.el5) installed although you may be booting through an base linux kernel (2.6.18-128.el5).Is there any package for serial redirection that could be necessary.I have installed setserial rpm. Thanks premraj Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

2 1

Unicode related query
by Rajagopal Swaminathan 03 Feb '10

03 Feb '10

Greetings, I am able to get a english word list in <file> by using the following command cat <file> | tr -sc A-Za-z '\012' My question is how to specify unicode character and ASCII. Specifically text text file containing 3 byte sequence starting with \x0e in the tr command. I am able to see the character using: echo -e '\xe0\xa5\xbf' What regex incantation would make tr give the results I want? I am new to unicode. Regards, Rajagopal

2 2

An Open-iSCSI Question
by Clint Dilks 02 Feb '10

02 Feb '10

Hi People Using Open iSCSI I have been able to create and mount multiple iSCSI partitions and have them mount at boot. Now I wanted to setup a situation where one of the visible iSCSI partitions mounts at boot and the other is only available if I manually connect to it. This led me to the following command *iscsiadm -m node -T iqn.2001-05.com.equallogic:0-8a0906-237781f06-770000000134b676-inf2-san1 -p 192.168.1.100:3260 --op update -n node.startup -v manual *which stops the server from logging into the partition automatically. This is fine and provides me with the functionality I need, but if anyone run a discovery against the iSCSI storage again eg *iscsiadm -m discovery -t st -p 192.168.1.100:3260 *then node.startup for inf2-san1 gets set back to automatic. Is there any way to make the node.startup setting for inf2-san1 stick even after a discovery ? Thank you :)

1 0

Internet access not working on CentOS but on Windows when travelling
by Mathieu Baudier 02 Feb '10

02 Feb '10

Hello, I'm currently travelling (in south-eastern Europe) with a netbook (Samsung NC 10) running CentOS 5.4 i386. I frequently try to access internet from bars or hotels (mostly via wireless). Although it works pretty often, it happens quite regularly that in some hotels I cannot access internet from CentOS while it is possible from Windows. This is the case in the hotel where I am currently and I'd like to dig this further. To be more precise: - in such cases, connecting to the wireless network itself works (using NetworkManager) - this is when I try to open a web page in Firefox that after a while I get a "page not found exception" - there is no problem on a Windows XP which is also installed on the computer - Fedora 12 has the same issue as CentOS - I suspect that in such cases the network is configured in a windows-specific / non-standard manner (but I had the pb often enough to justify addressing it): I installed Samba and started the winbind service, but it did not help (I know pretty much nothing about Windows networking but doing this already did some magic for me in other contexts...) - there are many places where I could connect with CentOS and wireless without any problem, and it also work in my wireless network back home, so my CentOS config is OK - interestingly, my google phone (G1 running Android 1.6) could access internet via the wireless network of the hotel where I am currently (while CentOS and Fedora can't) Did anyone already face such an issue? Any idea how I could analyze further? Or what I could try? This is not a big deal since I can always reboot to check internet, but all the software I use for my work are on CentOS, so it would be much more practical if I could reliably access internet from it as well. Thanks in advance and cheers from the Black Sea under the snow... Mathieu

4 4

Re: [CentOS] Installing an SSL Cert
by J.Witvliet＠MINDEF.NL 02 Feb '10

02 Feb '10

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of ML Sent: Wednesday, January 27, 2010 1:38 AM To: CentOS mailing list Subject: [CentOS] Installing an SSL Cert HI All, I am considering buying this: http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a Since I have a domain that will be collecting data and processing payments. Where can I find instructions on how to install the certificate? Do I have to run another domain or sub domain for the store? Or can I just run the whole domain on https? Thanks, -Jason _______________________________________________ Ever considerd cacert.org ? ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

2 1

Find and excluding directory
by Tom Brown 02 Feb '10

02 Feb '10

Hi I have to use find to change the perms of a directory and files within that directory recursively but i need to exclude a directory within the top level directory, as its a netapp and so contains a read only .snapshot dir. I have tried... # find /var/data/foo -path '\.\/\.snapshot' -prune -o -exec chown usera:groupb {} \; but chown: changing ownership of `/var/data/foo/.snapshot': Read-only file system chown: changing ownership of `/var/data/foo/.snapshot/hourly.0': Read-only file system chown: changing ownership of `/var/data/foo/.snapshot/hourly.0/filename': Read-only file system any clue ? thanks

2 2

dm-crypt/LUKS the state of the art for block device encryption?
by Robert P. J. Day 02 Feb '10

02 Feb '10

it's been a while since i've played with filesystem encryption so, on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered to be the state of the art WRT encryption? i remember other solutions like loop-aes and others, but what's considered the gold standard these days? rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday ========================================================================

4 4

Was, Re: APC Smart-ups "status codes" (slightly OT), is replacement batteries
by m.roth＠5-cent.us 02 Feb '10

02 Feb '10

> > On Fri, 2010-01-29 at 16:53 -0500, m.roth(a)5-cent.us wrote: <battery change tale o' woe snipped> >> But the idiot light's still on. <snip> Well, I followed the link to the NUT info, and tried a "manual" calibration, and still no joy. Swapping in a cartridge that's still good, the light goes out, so it's not the unit. However, googling for other vendors' battery replacement kits for the RBC43, and then looking at another one, led me to one question, since they're all 12V, 5AH: anyone here know if they have to be HR (high release)? mark

1 0

Passwordless ssh
by Warren Michelsen 02 Feb '10

02 Feb '10

On Mac OS, in order to allow ssh using dsa keys, I would copy ~/.ssh/id_dsa.pub from my machine into ~/.ssh/authorized_keys of the target machine. I've created .ssh directories in my account home as well as in /root and copied the respective keys to authorized_keys files in each. Strangely, I can now ssh as root with no password but my own user account still prompts for a password. What might be wrong? Interestingly, passwordless root ssh log-in worked while 'PermitRootLogin' in /etc/ssh/sshd_config was just 'yes' and before I changed it to 'without-password'.

4 4

CentOS as an internet kiosk : how to create a "fresh" user upon leaving GNOME ?
by Niki Kovacs 02 Feb '10

02 Feb '10

Hi, I'm currently busy setting up a machine for use as an internet kiosk. Here's what I aim to do. - There's only one user on the system, 'invite'. One (very simple) password. The machine is to be used publicly and freely. - To ensure some privacy, there's one detail though. The best thing would be that upon disconnection from the GNOME session, the user 'invite' gets wiped from the system (userdel -r) and then created anew, with his password already set. This I can do. - The tricky part is to do this upon disconnect. There's a function in System > Preferences > Session, where I can choose programs to run upon GNOME startup... but there's nothing similar for the disconnection. - Writing a script disconnect.sh and then creating a desktop shortcut for it would be to no avail, since 'userdel' and 'useradd' can only be called as root. Any idea how I could do this ? The idea is that every new user begins with a clean slate. Cheers, Niki

3 3

cfengine version 3?
by Les Mikesell 02 Feb '10

02 Feb '10

Is anyone working with cfengine v3? It looks like it has some interesting design changes and a commercially supported windows version now. Can anyone share real-world experiences? -- Les Mikesell lesmikesell(a)gmail.com

2 1

very large difference between df and du (10 GB, hard to believe)
by Robert Grasso 02 Feb '10

02 Feb '10

Hello, I have a small server running a tool (RT : perl + mysql + apache) for our support team. I stripped down everything else. The OS is CentOS 4.8. I noticed a difference between df and du which is hard to believe : according to df, I am using 29 GB [root@cedrat-rt ~]$ df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 33G 29G 2.8G 92% / none 506M 0 506M 0% /dev/shm (there are no other partitions - ok, I could have partitioned it a bit more) but according to du -kshxc /* my largest directory is /var (because of mysql) and the grand total is 19 GB I have a 10 GB difference between both outputs. I verified with tune2fs -l /dev/sda1 (...) Block count: 8703205 Reserved block count: 435160 that is, the ordinary 5% the journal size : debugfs -R "stat <8>" /dev/sda1 yields Size: 33554432 with a block size of 4096, this gives 128 MB I rebooted on the CentOS v4.8 CD #1, started "linux rescue" : mounting /dev/sda1, I get the same 29 GB used e2fsck reports a clean filesystem e2fsck -f does not reports further errors. Does anybody have a suggestion ? Best regards --- Robert GRASSO - System engineer

9 10

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss