- Discuss - lists.centos.org

Re: [CentOS] Skype and problem with ALSA mixer driver?
by Brent L. Bates 02 Feb '10

02 Feb '10

Sorry about empty message. I accidentally hit the wrong buttons.

1 0

Re: [CentOS] Skype and problem with ALSA mixer driver?
by Brent L. Bates 02 Feb '10

02 Feb '10

-- Brent L. Bates (UNIX Sys. Admin.) M.S. 912 Phone:(757) 865-1400, x204 NASA Langley Research Center FAX:(757) 865-8177 Hampton, Virginia 23681-0001 Email: B.L.BATES(a)larc.nasa.gov http://www.vigyan.com/~blbates/

1 0

knockd rpm for CentOS-5.4
by James B. Byrne 02 Feb '10

02 Feb '10

Is there a recommended knockd package for CentOS-5.4 or do I just pull from the project's web site? Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

VNC Questions
by Warren Michelsen 02 Feb '10

02 Feb '10

Fresh install of CentOS 5.4 (and my first experience with CentOS). Following install, the first thing I did was enable desktop sharing so that I can control this new 1U box from my Mac workstation. The VNC client sees this as "Warren's remote desktop" but I'd like it to be more meaningful, as I have other remote desktops. Where in the user settings/prefs do I change the way this VNC server identifies itself? I'd like it to show the host name. Since this installation will eventually go on line as a LAMP Internet server, I'd like my VNC sessions to be encrypted. I saw no place in the account settings for remote desktop to specify this. Finally, I'd like VNC to be functional at boot, before I have logged in, so that I can log in to my user account via VNC. Once configured, this server will be located remotely. Can the VNC server be made to run at loot, rather than at log-in of my account? Can these things be done with the existing standard VNC server or do I have to install something else via yum or some such?

7 11

Re: [CentOS] Passwordless ssh
by Brian Mathis 01 Feb '10

01 Feb '10

On Mon, Feb 1, 2010 at 9:49 PM, Warren Michelsen <Warren(a)mdcclxxvi.com> wrote: > On Mac OS, in order to allow ssh using dsa keys, I would copy > ~/.ssh/id_dsa.pub from my machine into ~/.ssh/authorized_keys of the > target machine. I've created .ssh directories in my account home as > well as in /root and copied the respective keys to authorized_keys > files in each. > > Strangely, I can now ssh as root with no password but my own user > account still prompts for a password. What might be wrong? > > > Interestingly, passwordless root ssh log-in worked while > 'PermitRootLogin' in /etc/ssh/sshd_config was just 'yes' and before I > changed it to 'without-password'. > chmod 700 ~/.ssh chmod 600 ~/.authorized_keys

1 0

Re: [CentOS] Passwordless ssh
by Agile Aspect 01 Feb '10

01 Feb '10

On Mon, Feb 1, 2010 at 6:49 PM, Warren Michelsen <Warren(a)mdcclxxvi.com> wrote: > On Mac OS, in order to allow ssh using dsa keys, I would copy > ~/.ssh/id_dsa.pub from my machine into ~/.ssh/authorized_keys of the > target machine. I've created .ssh directories in my account home as > well as in /root and copied the respective keys to authorized_keys > files in each. > > Strangely, I can now ssh as root with no password but my own user > account still prompts for a password. What might be wrong? > > > Interestingly, passwordless root ssh log-in worked while > 'PermitRootLogin' in /etc/ssh/sshd_config was just 'yes' and before I > changed it to 'without-password'. Check the permission all your top level directories and the .ssh directories and it's files. Basically, group and other writes are forbidden since it would allow other people to change your keys. If you're allowing the use of passwords and keys, then it's just falling back to passwords because the permissions are incorrect. And I presuming the secret key is not encrypted, i.e., you never set a passphrase - hence the root login works without a password since the permissions are correct for key exchange. Also, on Redhat/Centos/Solaris machines, it's PermitRootLogin no or PermitRootLogin yes and not PermitRootLogin without-password There should be separate entry for passwords PermitEmptyPasswords no You have to be barking mad to allow root connections - or any connection - with an empty passwords. Note, this isn't Mac mailing list so your mileage will vary. Without a sshd_config file it's hard to help you. -- Enjoy global warming while it lasts.

1 0

Trying to rebuild srpm from fedora....
by Tom Bishop 01 Feb '10

01 Feb '10

So I am trying to rebuild this source rpm from fedora 10, shutter-0.85.1-1.fc10.src.rpm -its a screen capture application ( http://shutter-project.org/ ) that I have been unable to find in any repos, although it is in the fedora repos. Thought I would give it a go and try to rebuild the rpm, so here is the error that I am getting: + desktop-file-install --delete-original --dir /var/tmp/shutter-0.85.1-1-root-itsupport//usr/share/applications /var/tmp/shutter-0.85.1-1-root-itsupport//usr/share/applications/shutter.desktop Must specify the vendor namespace for these files with --vendor error: Bad exit status from /var/tmp/rpm-tmp.38313 (%install) Anyone have any tips or 2x4 :) to point me in the right direction I would appreciate it, thanks. Oh yeah, running centos 5.4 i386 arch, thanks again.

7 12

Re: [CentOS] Trying to rebuild srpm from fedora....
by Ross Walker 01 Feb '10

01 Feb '10

On Feb 1, 2010, at 5:33 PM, Tom Bishop <bishoptf(a)gmail.com> wrote: > Here is the section of the spec file: > > %{_bindir}/%{name} > %{_datadir}/applications/%{name}.desktop > %{_datadir}/%{name} > %{_mandir}/man1/%{name}* > %{_datadir}/pixmaps/ > %{_datadir}/icons/hicolor/*/apps/%{name}.* > > > it appears to be coverd... Ah, not really, rpmbuild is complainig about: /usr/share/applications/centos5-shutter.desktop It's possible the spec file originally mv'd the file to remove the fedoraX, but since the distro changed the file name changed. You'll need to edit the spec fix. -Ross

2 1

Re: [CentOS] VNC Questions
by Akemi Yagi 01 Feb '10

01 Feb '10

On Mon, Feb 1, 2010 at 12:05 PM, Warren Michelsen <Warren(a)mdcclxxvi.com> wrote: >>Or use "su -" instead of "su" when switching to the root user and you >>will get root's environment, which includes /sbin on the path. > > Ah! This is something I've not run across before. Using "su -" did the trick. CentOS Wiki is (almost) always your good friend :-) http://wiki.centos.org/TipsAndTricks/BecomingRoot Akemi

1 0

glibc updates and rebooting
by R-Elists 01 Feb '10

01 Feb '10

i forgot... is it necessary to reboot after glibc* yum updates on 4.x and 5.x or any centos for that matter... tia - rh

3 2

Grub boot loader?
by hadi motamedi 01 Feb '10

01 Feb '10

Dear All On my CentOS server , the '/boot/grub/menu.lst' has the right configuration but when I reboot my CentOS server I cannot enter to grub edit menu to edit my boot kernel by pressing the 'e' key . Can you please confirm if I can activate it through issuing the followings : #grub-install /dev/hdax Is it a safe procedure to try with? Please confirm. Thank you

3 5

Browser related question
by Rajagopal Swaminathan 01 Feb '10

01 Feb '10

Greetings, How does one monitor if a site is being accessed using browser? IOW, I just want to know if a user has launched a session thru Firefox. I basically want to know if a user has tried to access the webserver and unable to reach it and log such instances. I am using cron and curl to seperately monitor the link. Any clues? Centos 5.2/Gnome/Firefox 3.0.16 Regards Rajagopal

7 13

DynDNs.org compatible server scripts
by Rajagopal Swaminathan 01 Feb '10

01 Feb '10

Greetings, I know this mail is slightly OT. But my DNS server and and all other compute nodes (currently around 80) run Centos. Has anybody come across some package script which can be used to listen to request from DynDNS.org clients which can be found commonly in the devices? I have a scenario wherein many devices having Dynamic IP scattered across a geographical region. most have an embedded Dyndns.com client which can be enabled. I configure a Private Dynamic DNS server at a central location. Now I need something which will listen to the request thrown out by the devices and update Dynamic DNS Server. TIA Regards, Rajagopal

2 1

APC Smart-ups "status codes" (slightly OT)
by m.roth＠5-cent.us 01 Feb '10

01 Feb '10

We got replacement battery "kits" for some of our APC UPS' (Smart-UPS, rackmount). I put them into one tray (it's for an RBC 43, which takes 8, and weighs a ton), and put it in, and let it charge. Idiot "change battery" led stays on. So I hit the test button, it discharges very rapidly (a good number of servers on this), and the led stays on. For some reason, apcupsd's USB test fails, with an HIDDEV i/o error. So I got rid of the weird APC usb cable, and put in one of their serial cables, and run the "smart" test (the USB does more), and get results showing everything's fine. But the idiot light's still on. So, looking at all the values that the "apcsmart" choice can give me, the first thing is UPS status. I've been googling for a while, and can't find a single reference to it. Anyone have a link to somewhere that will give me the status codes (and their meaning)? Thanks in advance. mark

5 5

CentOS 5.4 64-bit: Java web browser plugin for 64-bit FireFox?
by Robert Heller 01 Feb '10

01 Feb '10

Does there exist *anywhere* a Java web browser plugin for 64-bit FireFox? The SUN 1.6<mumble> JDK (jdk-6u18-linux-amd64.rpm) does NOT include the Java web browser plugin library. java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.x86_64.rpm does not have one either. Should I install the *32-bit* SUN 1.6<mumble> JDK and use the 32-64 bit wrapper? I've searched the web and read the wiki (which only shows installing the 32-bit Java web browser plugin). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

11 18

Apache MPM-ITK
by Andrey Garkin 01 Feb '10

01 Feb '10

Hi All! Wished to ask. I have put: apache+php+mysql All works perfectly, only there is one question. The matter is that apache something works from the user apache, and when I закачиваю on the site through php the form the owner of the gone file to become apache. How it can be corrected? Esteemed on the Internet there is under Debian the apache with the module mpm-itk and how to be in CentOS 5.4?

1 0

perl question
by Jerry Geis 01 Feb '10

01 Feb '10

I am trying to run a perl script that said it needs Net::SMPP I ran this: your_host]# *perl -MCPAN -e shell* cpan shell -- CPAN exploration and modules installation (v1.76) ReadLine support enabled cpan> *install Net::SNMP seemed to work. no errors reported. however when I run perl I still get the same error saying needs ./sendmessage.pl Can't locate Net/SMPP.pm in @INC (@INC contains: /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/5.8.8 .) at ./sendmessage.pl line 18. BEGIN failed--compilation aborted at ./sendmessage.pl line 18. What else do I need? Jerry *

7 8

Re: [CentOS] monitoring a workstation
by fabien faye 01 Feb '10

01 Feb '10

Hi, For that you have a lot of solution : "top" or "vmstat 1" on the console for a global overview But if you need load and cpu utilisation per user you have to use ac. Exemple : ac -d -p ffaye 12.86 Jan 6 total 12.86 fwadmin 0.00 ffaye 8.77 Jan 7 total 8.77 ffaye 0.24 Jan 19 total 0.24 ffaye 0.79 Today total 0.79 If you want more information follow this link : http://generationip.com/documentation/system-documentation/113-howto-on-psa… After that if you need to do that remotely and generate graph, take a look on cacti or nagios. Best regards Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "MOKRANI Rachid" <Rachid.MOKRANI(a)ifp.fr> To: "CentOS mailing list" <centos(a)centos.org> Sent: Monday, February 1, 2010 11:08:10 AM Subject: [CentOS] monitoring a workstation Hi, I need to monitor a workstation (Centos 5 x86_64). I need to obtain informations about : - cpu utilization per user, per a period, how many days per user, Any ideas about a good and simple free tool ? Regards. __________________________ Ce message (et toutes ses pièces jointes éventuelles) est confidentiel et établi à l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'IFP décline toute responsabilité au titre de ce message. This message and any attachments (the message) are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP should not be liable for this message. Visitez notre site Web / Visit our web site : http://www.ifp.fr __________________________ _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Skype and problem with ALSA mixer driver?
by Andrew 01 Feb '10

01 Feb '10

Having used skype successfully in the past with previous CentOS versions, I haven't yet been able to get it working fully with CentOS 5.3 - the playback sound works OK but I can't get the mic working. I previously used the skype version installed with yum from the skype repo but thought maybe this was faulty, so have just installed the static version (cd skype_static-2.1.0.81). However, the mic still doesn't work and I've notice the following (repeated) error messages on the command line (currently this version has to be executed from the command line): snd_pcm_avail_update() returned a value that is exceptionally large: 203032 bytes (1057 ms). Most likely this is a bug in the ALSA driver. Please report this issue to the ALSA developers. snd_pcm_avail_update() returned a value that is exceptionally large: 201176 bytes (1047 ms). Most likely this is a bug in the ALSA driver. Please report this issue to the ALSA developers. snd_pcm_avail_update() returned a value that is exceptionally large: 199280 bytes (1037 ms). Most likely this is a bug in the ALSA driver. Please report this issue to the ALSA developers. ..........etc Does anybody have any information about this issue/bug and any idea how to solve the problem? Thanks, Andy

6 11

Multiple RAID support in CentOS?
by Victor Padro 01 Feb '10

01 Feb '10

Hello, I was wondering if someone could help me, I'm putting together a Server for personal use, I want to virtualize a few servers(mail, web, ssh) and use it as a NAS, but I have a question if I can use Multiple RAID Arrays using the following HW: Intel Xeon Quad Core X3430 ASUS P7F-M LGA 1156 - LSI MegaRAID(integrated) - HighPoint RocketRAID 2640x1 2 Hitachi 500GB HDDs 4 Hitachi 1TB HDDs I want to use one array with the 2 500GB HDDs in RAID1 for the OS and for some VMs, and the other 4 1TB HDDs I want to create an array in RAID5 or RAID10 for file sharing across my home Network. I found a guide but it's a little bit outdated and it's for Debian... Do you have any other pointer I can read/use? TIA. -- Linux User #452368 http://twitter.com/vpadro "Everything that irritates us about others can lead us to an understanding of ourselves"

5 6

[FYI] skype-2.0.0.72.nosrc.rpm
by Nikita Izyumtsev 31 Jan '10

31 Jan '10

Greetings! I have been using statically linked skype for a while, but found it uncofortable to install it in contraversion of rpm db, so I decided to package it. You can get nosrc.rpm here: http://dl.dropbox.com/u/4043330/skype-2.0.0.72-1.nosrc.rpm You can rebuild it in usual way, like that: Install rpmbuild (if it's not installed yet): sudo yum install rpmbuild As an ordinary user, not root, create a directory tree based on ~/rpmbuild: cd mkdir -p rpmbuild/{BUILD,RPMS,SOURCES,SPECS,SRPMS} echo '%_topdir %(echo $HOME)/rpmbuild' > .rpmmacros Download and install nosrc.rpm: cd ~/rpmbuild/SRPMS wget http://dl.dropbox.com/u/4043330/skype-2.0.0.72-1.nosrc.rpm rpm -i skype-2.0.0.72-1.nosrc.rpm Download and install non-distributable* tarball: cd ~/rpmbuild/SOURCES wget http://download.skype.com/linux/skype_static-2.0.0.72.tar.bz2 Rebuild binary rpm package: cd ~/rpmbuild/SPECS rpmbuild -bb skype.spec * Actually, skype is _redistributable_, pld-linux ships it on it's spins, but as far I understood it is somewhat problematic to come to agreement with Skype. P.S: spec file is loosely based on pld-linux implementation Nikita

1 0

Problem: udevb[478]: add_to_rules: unknown key 'ATTRS{idProduct}'
by Majian 31 Jan '10

31 Jan '10

Hi, all : Today my laptop shows the following messages during booting: udevb[478]: add_to_rules: unknown key 'ATTRS{idProduct}' udevb[478]: add_to_rules: unknown key 'ATTRS{idVendor}' ..... ..... .... These many lines are repeated over and over filling the whole screen. But after a few seconds booting continues as usual and the system works fine. But what is it with this messages, what does it mean and how do i get rid of it? Thanks ~

4 3

Advanced fsck?
by hadi motamedi 31 Jan '10

31 Jan '10

Dear All My CentOS server got file system inconsistency , asking for "type Ctrl-D for normal boot or give root password for maintenance to run fsck manually". I tried for manually run fsck , as the followings : #fsck -s /dev/hda3 But after rebooting the server it will come back again at the similar prompt asking for "give root password for maintenance" . Can you please do me favor and let me know how can I try for advanced fsck to fix the bug? Thank you

6 7

yum update error
by Majian 31 Jan '10

31 Jan '10

Hi ,all : Today I run the "yum update" command on my laptop, which is CentOS 5.4 i386. Then the screen displays the following message : root@kuku ~ > yum update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirror.centos.net.cn * base: mirror.centos.net.cn * epel: mirrors.sohu.com * extras: mirror.centos.net.cn * rpmforge: ftp-stud.fht-esslingen.de * rpmfusion-free-updates: mirrors.cat.pdx.edu * rpmfusion-free-updates-testing: mirrors.cat.pdx.edu * rpmfusion-nonfree-updates: mirrors.cat.pdx.edu * rpmfusion-nonfree-updates-testing: mirrors.cat.pdx.edu * update: mirrors.163.com Setting up Update Process Resolving Dependencies --> Running transaction check --> Processing Dependency: liblua-5.1.so for package: mysql-proxy ---> Package lua.i386 0:5.1.4-1.el5.rf set to be updated ---> Package lua-devel.i386 0:5.1.4-1.el5.rf set to be updated --> Finished Dependency Resolution mysql-proxy-0.5.1-1.el5.i386 from installed has depsolving problems --> Missing Dependency: liblua-5.1.so is needed by package mysql-proxy-0.5.1-1.el5.i386 (installed) Error: Missing Dependency: liblua-5.1.so is needed by package mysql-proxy-0.5.1-1.el5.i386 (installed) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest Then I run "yum update --skip-broken", but after I run that command , the screen displays these: root@kuku ~ > yum update --skip-broken Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirrors.163.com * base: mirrors.163.com * epel: mirrors.sohu.com * extras: mirrors.163.com * rpmforge: ftp-stud.fht-esslingen.de * rpmfusion-free-updates: mirrors.cat.pdx.edu * rpmfusion-free-updates-testing: mirrors.cat.pdx.edu * rpmfusion-nonfree-updates: mirrors.cat.pdx.edu * rpmfusion-nonfree-updates-testing: mirrors.cat.pdx.edu * update: mirrors.163.com Setting up Update Process Resolving Dependencies --> Running transaction check --> Processing Dependency: liblua-5.1.so for package: mysql-proxy ---> Package lua.i386 0:5.1.4-1.el5.rf set to be updated ---> Package lua-devel.i386 0:5.1.4-1.el5.rf set to be updated --> Finished Dependency Resolution mysql-proxy-0.5.1-1.el5.i386 from installed has depsolving problems --> Missing Dependency: liblua-5.1.so is needed by package mysql-proxy-0.5.1-1.el5.i386 (installed) --> Running transaction check ---> Package lua.i386 0:5.1.4-1.el5.rf set to be updated --> Processing Dependency: lua = 5.1.4-1.el5.rf for package: lua-devel --> Finished Dependency Resolution lua-devel-5.1.4-1.el5.rf.i386 from rpmforge has depsolving problems --> Missing Dependency: lua = 5.1.4-1.el5.rf is needed by package lua-devel-5.1.4-1.el5.rf.i386 (rpmforge) Packages skipped because of dependency problems: lua-5.1.4-1.el5.rf.i386 from rpmforge lua-devel-5.1.4-1.el5.rf.i386 from rpmforge Could someone give me some advices? Thanks in advance ~

2 1

Adobe Acrobat Reader 9.3 - slightly OT
by MHR 31 Jan '10

31 Jan '10

I've noticed recently that the latest version of Adobe's Acrobat Reader (9.3) has a really annoying tendency to stop for 30-60 seconds shortly after it starts up to read/display a PDF file. I don't see this on my Windows copies, just on CentOS. Anyone know what's up with that? Thanks. mhr

8 15

CENTOS 5.4 /var/log/messages too many?????
by mcclnx mcc 30 Jan '10

30 Jan '10

we have CENTOS 5.4 on dell server and recently /var/log/messages have thousand of following messages every day. Jan 30 10:12:47 ORA5 snmpd[8295]: Connection from UDP: [127.0.0.1]:55837 Jan 30 10:12:47 ORA5 snmpd[8295]: Received SNMP packet(s) from UDP: [127.0.0.1]:55837 Jan 30 10:12:47 ORA5 snmpd[8295]: Connection from UDP: [127.0.0.1]:55837 Jan 30 10:12:47 ORA5 last message repeated 31 times Jan 30 10:12:47 ORA5 snmpd[8295]: Connection from UDP: [127.0.0.1]:64026 Jan 30 10:12:47 ORA5 snmpd[8295]: Received SNMP packet(s) from UDP: [127.0.0.1]:64026 Jan 30 10:12:47 ORA5 snmpd[8295]: Connection from UDP: [127.0.0.1]:64026 Anyone know how to fix it? Thansk. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

2 1

Recover /usr/lib/libc.a
by Zvi Vered 30 Jan '10

30 Jan '10

Hello, I'm using Centos: /proc/version = Linux version 2.6.18-128.el5 (mockbuild(a)builder16.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)) #1 SMP Wed Jan 21 10:44:23 EST 2009 I did a mistake and erased libc.a from /usr/lib How can I recover it without reinstalling Centos ? Thanks.

3 2

Full Virtualized DomU won't boot
by Sergio Belkin 29 Jan '10

29 Jan '10

Hi, I use Centos 5.4 x86_64 kernel used is 2.6.18-164.11.1.el5xen I have a physical machine running Debian Etch (32 bit) and Debian Lenny and I virtualized the first one as follows: *Created a HVM DomU with Virt-Manager with a virtual disk file of 40000 M *Boot from LiveCD, and created a swap and a ext3 partitions (Yes, very simple layout). *Rsync'd files from root partition of physical machine to partition mounted on LiveCD on DomU. *Chrooted and edited files /boot/grub/menu.lst, /etc/fstab, etc/mtab, /boot/grub/device.map. *Then I rebooted from hard disk and stay freezed with the message "booting from hard disk" . But it doesn't boot at all from hard disk. I can boot using grub-rescue-cdrom, but if I try to install grub with grub-install it outputs: "The file /boot/grub/stage1 not read correctly" (I've tried --recheck option, and depmod and update-grub commands with no success) Output of file command on virtual disk file is: /virtuales/videodisk.img: x86 boot sector; partition 1: ID=0x82, starthead 1, startsector 63, 4273227 sectors; partition 2: ID=0x83, active, starthead 0, startsector 4273290, 77626080 sectors The DomU file is: DomU (file): name = "video" uuid = "54d25d78-b9d0-0159-542c-bb601cc936bb" maxmem = 1024 memory = 512 vcpus = 1 builder = "hvm" kernel = "/usr/lib/xen/boot/hvmloader" boot = "d" pae = 1 acpi = 1 apic = 1 localtime = 0 on_poweroff = "destroy" on_reboot = "restart" on_crash = "restart" device_model = "/usr/lib64/xen/bin/qemu-dm" sdl = 0 vnc = 1 vncunused = 1 keymap = "es" disk = [ "file:/virtuales/videodisk.img,hda,w", "file:/virtuales/isos/grub-rescue-cdrom.iso,hdc:cdrom,r" ] vif = [ "mac=00:16:36:0b:24:2d,bridge=xenbr0,script=vif-bridge" ] parallel = "none" serial = "pty" EOF With grub-rescue cd DomU can boot but as I've said can't install grub and loads also loopback interface. Please could you tell me what I am doing wrong? Thanks in advance!! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 2

CentOS 5 i386 Live CD
by Mike McCarty 29 Jan '10

29 Jan '10

Johnny Hughes wrote: > I forgot to add that the password for root and centos is: > > 12qwaszx > > Johnny Hughes wrote: >> The CentOS Development team is pleased to announce the availability of >> the CentOS 5 i386 Live CD. [...] >> This CD has a non writable /usr directory, which means it is not able to >> have software installed on it after boot up. The CentOS team is working >> hard to create a Live CD for CentOS 5 that is based on the Fedora Live >> CD Project (that is writable in all directories and even able to be used >> for installs) ... unfortunately we were not able to get this working >> with CentOS 5 for this release. We hope to get that Live CD working by >> the release of CentOS 5.1. Did I miss some notices? I don't recall seeing another LiveCD. How is progress coming? Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} Oppose globalization and One World Governments like the UN. This message made from 100% recycled bits. You have found the bank of Larn. I speak only for myself, and I am unanimous in that!

1 0

NFS vs SMb vs iSCSI for remote backup mounts
by Rudi Ahlers 29 Jan '10

29 Jan '10

Hi, I would like to get some input from people who have used these options for mounting a remote server to a local server. Basically, I need to replicate / backup data from one server to another, but over the internet (i.e. insecure channels) Currently we have been mounting an SMB share over SSH, but it's got it's own set of problems. And I don't know if this is optimal, or if I could setup something better. We don't have much control over the remote server, so I couldn't setup a VPN, or iSCSI or anything else. My options was FTP & SMB. But I want to move the backups in-house, to save bandwidth and have more control over what we do. So, with a new CentOS server & 2x1TB HDD's in RAID1 configuration, I can do pretty much whatever I want. The backup server(s) will serve backups for multiple servers, in different data centers (possible in different counties as well, I still need to think about this), so my biggest concern is security. We mainly use cPanel & DotNetPanel (Windows ServerS) , but also WebMin & VirtualMin, so I need to stick with their native backup procedures and don't really want to use a too technical backup system. The end users need access to the data 24/7, so having the remote share permanently mounted seems to be the best for this, then our support staff don't need to SSH into the servers and download the backups. With the mount, I can also use rsync backups, so an end user could restore only a single file if need be. NOW, the question is: Which protocol would be best for this? I can only think of SMB, NFS & iSCSI The SMB mounts have worked well so far, but it's not as safe, and once the SMB share is mounted, I can't unmount it until the server reboots. This isn't necessarily a bad thing, but sometime the backup script will mount the share again (I think this is a bug in cPanel) and we end up with 4 or 5 open connection to the remote server. NFS - last time I looked at it was on V3, which was IMO rather slow & insecure. iSCSI - this doesn't allow for more than one connect to the same share. Sometimes I user might want to download a backup directly from the backup server via FTP / SSH / a web interface, which I don't think will work. We also sometimes need to restore a backup on a different server (if for example the HDD on the initial server is too full), so this isn't possible. The remote shares also need to be mounted inside XEN domU's, or directly on CentOS / Windows servers. what would be my best option for this? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

13 31

Re: [CentOS] Lockup using stock r8169 on 4.8 in gigabit mode during heavy transfer on lan
by Tim Nelson 29 Jan '10

29 Jan '10

----- "Jason Pyeron" <jpyeron(a)pdinc.us> wrote: > I have no output in the logs, but /etc/init.d/network restart fixes > the issue. > I am rsync/scp (10GB) data from one 100MB Full duplex host to an ASUS > M3A78-EM > (RTL8111B/C). It locks up around the 1.5GB Tx mark. > If I ethtool -s eth0 autoneg off speed 100 duplex full it does not > happen again. > > Ideas? Part of the problem is that you mention r8169 kernel module in your subject but your hardware is RTL8111B. Realtek drivers are notorious for loading on improper hardware and appearing to work properly. You need to get the proper driver for your NIC. I've run into this countless times with the r8169 driver and non-r8169 Realtek NICs. And, on a side note, Realtek may possibly be the worst NIC out there, especially for server use. It may link at gigabit speed, but I bet a trusty old 3Com or Intel Pro 100 will get better throughput. Install a different NIC as fast as you can and never look back. --Tim

2 1

Lockup using stock r8169 on 4.8 in gigabit mode during heavy transfer on lan
by Jason Pyeron 29 Jan '10

29 Jan '10

I have no output in the logs, but /etc/init.d/network restart fixes the issue. I am rsync/scp (10GB) data from one 100MB Full duplex host to an ASUS M3A78-EM (RTL8111B/C). It locks up around the 1.5GB Tx mark. If I ethtool -s eth0 autoneg off speed 100 duplex full it does not happen again. Ideas? -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

2 1

Re: [CentOS] NFS vs SMb vs iSCSI for remote backup mounts
by J.Witvliet＠MINDEF.NL 29 Jan '10

29 Jan '10

At any rate... if I were in your shoes and really restricted to the options you propose, I would go with CIFS mounts through IPSEC tunnels. Wouldn't IPSEC add more overhead than an SSH tunnel? -geoff I would *certainly* not use ssh-tunnels, on a line that is not 100% error free or with high latency. In general tcp-in-tcp tunneling is BAD. One likely gets the infamous snowbal-effect. As ipsec is lower in the protocol-stack (then openvpn) it has probably the lowest overhead. ssh-tunnels are the worst (just nice for a quick tunnel in SOHO-environments) ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

Re: [CentOS] NFS vs SMb vs iSCSI for remote backup mounts
by J.Witvliet＠MINDEF.NL 29 Jan '10

29 Jan '10

________________________________ From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Rudi Ahlers Sent: Friday, January 29, 2010 12:23 AM To: CentOS mailing list Subject: Re: [CentOS] NFS vs SMb vs iSCSI for remote backup mounts On Fri, Jan 29, 2010 at 1:18 AM, nate <centos(a)linuxpowered.net<mailto:centos@linuxpowered.net>> wrote: Rudi Ahlers wrote: > nate, why not? Is it simply unavoidable at all costs to mount on system on > another, over a WAN? That's all I really want todo If what you have now works, stick with it.. in general network file systems are very latency sensitive. CIFS might work best *if* your using a WAN optimization appliance, I'm not sure how much support NFS gets from those vendors. iSCSI certainly is the worst, block devices are very intolerant of latency. AFS may be another option though quite a bit more complicated, as far as I know it's a layer on top of an existing file system that is used for things like replication http://www.openafs.org/ I have no experience with it myself. nate _______________________________________________ CentOS mailing list CentOS(a)centos.org<mailto:CentOS@centos.org> http://lists.centos.org/mailman/listinfo/centos Thanx nate, this is what I wanted to hear :) So, is there any benefit in using NFS over SMB in this case? Can't speak for NFS(3/4), but i can tell you that that smb-protocol combined with high latency is a recepy for disaster. We tried it from europe to the carribean (both sat or fibre) but users spent their time more complaining then working. Needed horrible expensive lan-optimesers at both end So perhaps nfs4 or afs (later is intended for geographically separated machines, afaicr) but certainly not smb! ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

How to map ata#.# numbers to /dev/sd numbers?
by Stephen Harris 29 Jan '10

29 Jan '10

On my C5 machine (a Dell XPS420) I have a 500Gb disk on the internal SATA controller. I also have a SiI3132 dual-port multi-device eSATA card. This is connected to an external SATA array of disks. Now occasionally I see something like this in my logs ata7.01: exception Emask 0x0 SAct 0x0 SErr 0x0 a ction 0x0 ata7.01: irq_stat 0x00060002, device error via D 2H FIS ata7.01: cmd 25/00:08:47:1c:92/00:00:6c:00:00/e0 tag 0 dma 4096 in res 51/40:00:4e:1c:92/00:00:6c:00:00/00 Emask 0x9 (media error) ata7.01: status: { DRDY ERR } ata7.01: error: { UNC } ata7.01: configured for UDMA/100 ata7: EH complete How do I tell what disk this is complaining about? Is there a way to determine what ata7.01 maps to in terms of /dev/sd# values? /proc/scsi/scsi doesn't obviously match scsi# numbers to ata# numbers :-( -- rgds Stephen

6 9

Hibernating a laptop with the power button (Thinkpax X31) under CentOS 5.4
by Robert Heller 28 Jan '10

28 Jan '10

I am having a weird problem trying to get hibernation to work when I press the power button on my Thinkpad X31 under CentOS 5.4. I've modified /etc/acpi/events/power.conf to contain: # ACPID config to power down machine if powerbutton is pressed, but only if # no gnome-power-manager is running event=button/power.* action=/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now And restarted acpid (sudo /sbin/service acpid restart). I don't run gnome, so there won't be a gnome-power-manager process running. When I press the power button nothing happens (acpid does log that it ran the above action). If I run the action line above in a shell (as root), the machine does hibernate just fine. What is going on here? -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

1 0

Centos/Linux Disk Caching, might be OT in some ways
by Noob Centos Admin 28 Jan '10

28 Jan '10

I'm trying to optimize some database app running on a CentOS server and wanted to confirm some things about the disk/file caching mechanism. >From what I've read, Linux has a Virtual Filesystem layer that sits between the physical file system and everything else. So no matter what FS is used, applications are still addressing the VFS. Due to this, disk caching is done on an inode/block basis. I'm assuming that this is still the case in CentOS or am I badly mistaken? If that is correct, then here is my scenario and hypothesis. Assuming the server has xxx MB of free memory and the database consist of several tables more than xxx MB in size. So no table will fit entirely into memory. And assuming other processes do not interfere with the caching behaviour or available memory etc. Given the inode caching behaviour, if the DBMS only access a bunch of inodes that total less than xxx MB, is it therefore likely to be always using the cache, hence faster? My thought is that if this is the case, then I could likely speed up the application behaviour if I further split the tables into parts that are more frequently accessed, and parts that are unlikely touched. e.g. the table may currently have rows with 20 fields and total 1KB/row, but very often say only 5/20 fields are used in actual processing. Reading x rows from this table may access x inodes which would not fit into the cache/memory. However if now I break the table into two parts with those 5 fields into a smaller table, there would be a speed increase since the reading the same x rows from this table would only access 1/x inodes. Further more, these would more likely fit into the disk/memory cache for even faster access. Or would I simply be duplicating what the DBMS's index files would already be doing and therefore see no improvement?

8 43

Installing an SSL Cert
by ML 28 Jan '10

28 Jan '10

HI All, I am considering buying this: http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a Since I have a domain that will be collecting data and processing payments. Where can I find instructions on how to install the certificate? Do I have to run another domain or sub domain for the store? Or can I just run the whole domain on https? Thanks, -Jason

8 7

bind a web root sub-folder to /usr/share/xxyy
by Mr. X 28 Jan '10

28 Jan '10

This is OT, but what is the RH/Centos best practice for this scenario. I have a web root under control of user webmaster. In /etc/fstab ----------- snip ------ /var/www/dev /home/webmaster/www_dev none bind 0 0 --------- unsnip ------ ls -al /var/www/dev/ drwxr-xr-x 10 webmaster webmaster 4096 Jan 28 14:21 dev what I'd like to do is bind /usr/share/xxyy to /var/www/dev/xxyy under control ~webmaster. Is it as simple as /usr/share/xxyy /var/www/dev/xxyy none bind 0 0 do I have chown webmaster:webmaster /usr/share/xxyy ? -- Mark

1 0

Starting a java applet from the desktop
by James B. Byrne 28 Jan '10

28 Jan '10

CentOS-5.4 i86_64 I have a calculator applet on my desktop (superbcalc.jar). When I double click on it I get no response. If I right click and select open with java I get no response. If I open a terminal window and cd to Desktop and type java -jar superbcalc.jar then the applet opens. Does anyone have any idea why I am seeing this behaviour? There are no messages in the syslog file relating to this. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

question on virtual desktops
by Jerry Geis 28 Jan '10

28 Jan '10

centos has the 4 virtual desktops by default. if I have a terminal window open in desktop 1 is there a command I can execute (type in) to switch to desktop 2? The mouse will not be attached at this point and I want to switch views using a command line. How do I do that? Thanks, Jerry

3 2

/usr/sbin/usermod -p doesn't update MAX_DAYS - workaround?
by Sean Carolan 28 Jan '10

28 Jan '10

I have a large group of Linux servers that I inherited from a previous administrator. Unfortunately there is no single sign-on configured so each server has it's own local accounts with local authentication. Normally I use ssh keys and a handy shell script to change passwords on all these machines with the usermod -p command. We are able to update the password on on one server and push the encrypted password out to all the others. If, however, we turn on password aging with "chage -M 90 username" then try to update passwords with usermod, the aging info for the account is not updated even though the password has been changed. Apparently this must be done manually for each and every server with the passwd command. This is not practical. In the long run we're going to try and get some kind of centralized authentication, but in the meantime does anyone have an idea for a workaround? Thanks Sean

2 2

Crash during yum update
by Kwan Lowe 28 Jan '10

28 Jan '10

Hello all: I was getting a reproducible crash during an update of a xen system. The problem went away after I set SELinux to permissive, but the fact that it crashed was alarming (first one on a non-dev system that I've had in over a year). I attempted the update earlier but it crashed at the same point after attempting to update selinux. After verifying hardware (all clean) I ran it again and crashed in the same location. Third time failed again in same location. I rebooted, changed selinux, then it completed after that. Unfortunately there are no dumps and I had to put the system back into operation. Didn't see anything in bugzilla either. Anyone else seen this? Here's the console output: Transaction Summary ================================================================================ Install 2 Package(s) Update 17 Package(s) Remove 2 Package(s) Total size: 56 M Is this ok [y/N]: y Downloading Packages: Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Test Succeeded Running Transaction Updating : selinux-policy-targeted 1/38 general protection fault: 0000 [1] SMP last sysfs file: /hypervisor/uuid CPU 0 Modules linked in: autofs4 i2c_dev i2c_core hidp rfcomm l2cap bluetooth lockd sunrpc ip_conntrack_netbios_ns ipt_REJECT xt_state ip_conntrack nfnetlink iptable_filter ip_tables ip6t_REJECT xt_tcpudp ip6table_filter ip6_tables x_tables ipv6 xfrm_nalgo crypto_api dm_multipath scsi_dh scsi_mod parport_pc lp parport xennet pcspkr dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod xenblk ext3 jbd uhci_hcd ohci_hcd ehci_hcd Pid: 4269, comm: semodule Not tainted 2.6.18-164.10.1.el5xen #1 RIP: e030:[<ffffffff88037cb0>] [<ffffffff88037cb0>] :jbd:journal_grab_journal_head+0x25/0x44 RSP: e02b:ffff88001ee5fb50 EFLAGS: 00010202 RAX: 0000000000304027 RBX: ffff88001d78e370 RCX: 0000000000000035 RDX: fffd88001d7939d0 RSI: ffff88001d78e310 RDI: ffff88001d78e370 RBP: 0000000000000001 R08: ffffffff804f8e00 R09: ffff88003e513600 R10: ffff88001d793a30 R11: ffffffff8804fc33 R12: ffff88001d793a30 R13: ffff88003e513600 R14: ffff88000194d908 R15: 0000000000000001 FS: 00002b85be90abc0(0000) GS:ffffffff805ca000(0000) knlGS:0000000000000000 CS: e033 DS: 0000 ES: 0000 Process semodule (pid: 4269, threadinfo ffff88001ee5e000, task ffff880032883820) Stack: ffffffff88032257 0000000000000000 0000000000000000 ffff88001d78e3d0 00000c000194d8d0 ffff88001d78e2b0 ffff88000194d908 000000000000056e 0000000000000004 000000000000056e Call Trace: [<ffffffff88032257>] :jbd:journal_invalidatepage+0xdc/0x358 [<ffffffff8021d3dd>] truncate_complete_page+0x1b/0x5c [<ffffffff8022b98f>] truncate_inode_pages_range+0x9b/0x290 [<ffffffff802c555b>] vmtruncate+0x4e/0xc9 [<ffffffff8024335e>] inode_setattr+0x22/0x104 [<ffffffff88050b2f>] :ext3:ext3_setattr+0x1bd/0x228 [<ffffffff8022ceab>] notify_change+0x145/0x2f3 [<ffffffff802d17af>] do_truncate+0x5e/0x79 [<ffffffff80212f1a>] may_open+0x1d3/0x22f [<ffffffff8021b4ce>] open_namei+0x2c8/0x6ed [<ffffffff80227a14>] do_filp_open+0x1c/0x38 [<ffffffff8021a1b8>] do_sys_open+0x44/0xbe [<ffffffff802602f9>] tracesys+0xab/0xb6 Code: ff 42 08 8b 07 a9 00 00 20 00 75 0a 0f 0b 68 f5 97 03 88 c2 RIP [<ffffffff88037cb0>] :jbd:journal_grab_journal_head+0x25/0x44 RSP <ffff88001ee5fb50> <0>Kernel panic - not syncing: Fatal exception

1 0

Seamonkey (Mozilla) web browser for CentOS 5.4?
by Robert Heller 27 Jan '10

27 Jan '10

Does the Seamonkey (Mozilla) web browser exist for CentOS 5.4? It seems to be missing from the standard repository. -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

4 4

Postfix 2.6.5 in CentOSplus?
by Dirk H. Schulz 27 Jan '10

27 Jan '10

Hi folks, according to several findings on the web I tried to find postfix-2.6.5 in centosplus adding this to my /etc/yum.repos.d/CentOS-Base.repo: [base] exclude=postfix [centosplus] includepkgs=postfix in the right places. But when I "yum remove" and "yum install" postfix then, it's "only" 2.3.3-2.1 with added mysql/pqsql support. Is there anything I am doing wrong? Or is there just no postfix 2.6.5 in centosplus? Dirk

5 13

need some help with compiling mod_gnutls
by Tobias Weisserth 27 Jan '10

27 Jan '10

Hi everybody, I want to build mod_gnutls. The problem: CentOS' version of GNUTLS is too old to link against, so I compiled and installed GNUTLS from source and put it into /opt where it doesn't hurt the already installed GNUTLS. Now I have trouble linking against this version as the autoconf buildchain in mod_gnutls does not find the newer version. I tried like this: ./configure -with-libgnutls=/opt/lib ./configure -with-libgnutls=/opt/bin I get this from configure: checking for libgnutls - version >= 2.4.0... no *** An old version of LIBGNUTLS (1.4.1) was found. *** You need a version of LIBGNUTLS newer than 2.4.0. The latest version of *** LIBGNUTLS is always available from ftp://gnutls.hellug.gr/pub/gnutls. *** *** If you have already installed a sufficiently new version, this error *** probably means that the wrong copy of the pkg-config shell script is *** being found. The easiest way to fix this is to remove the old version *** of LIBGNUTLS, but you can also set the PKG_CONFIG environment to point to the *** correct copy of pkg-config. (In this case, you will have to *** modify your LD_LIBRARY_PATH enviroment variable, or edit /etc/ld.so.conf *** so that the correct libraries are found at run-time)) configure: error: *** *** libgnutls was not found. You may want to get it from *** http://www.gnutls.org/ *** I don't understand this. I already set the PKG_CONFIG_PATH to /opt/lib/pkgconfig (according to pkg-config manpage) but that doesn't work. What's the easiest way to make mod_gnutls link against GNUTLS as installed in /opt/lib? thanks, Tobias W.

2 1

5.2 to 5.4
by Jerry Geis 27 Jan '10

27 Jan '10

I am trying to update x86_64 from 5.2 to 5.4 I am trying to update glibc first (before yum -y upgrade) with the command yum update glibc glib-devel glibc-headers gives me the following: package glibc-devel needs glibc-headers = 2.5-24.el5._2.2 this, is not available package glibc-devel needs glibc = 2.5-24.el5._2.2, this is not available. am I missing something? usually this works fine. Jerry

2 1

Generating X.509 Certificates in Centos with open ssl
by Arvind P R 27 Jan '10

27 Jan '10

hi all can someone please guide me to a good howto to Generating X.509 Certificates in centos 5.4 with open ssl? i am using a windows based desktop virtualization software called vWorkspace which requires (copy/paste from vWorkspace documentation) • One or more X.509 web server certificates (depending upon configuration) • Trusted root certificate from the issuing CA installed into the Windows machine store of the SSL Gateway for certificates that have been installed on Web Access or Connection Broker servers. • Your certificate should have the same Issued To and Friendly Name. • The certificate should be an RSA (1024) certificate, not an AES certificate. • You should have a private key that corresponds to the certificate. i need the certificate for testing purposes only, so i m using openssl to generate a self signed certificate. i m not good enough with the concepts either. hence need sme help thanks in advance Arvind

2 2

Auto exit lftp on bash script
by Alan Hoffmeister 27 Jan '10

27 Jan '10

Hello again! I have this piece od code: ##################### #lftp will make the backup lftp -u user,password -e "mirror --reverse --delete --only-newer --verbose /var/bkp /test_bkp" somehost.com >> $LOGFILE # end log file date >> $LOGFILE echo "Backup Completo!" >> $LOGFILE ##################### Everything is fine, but the bash scrip dosn't complete after lftp upload all files... It hungs in: lftp user@somehost.com:~> how can I exit lftp and finish the bash? Thx!

6 9

Kerberos integration in directory server
by nimmermehr＠chello.at 27 Jan '10

27 Jan '10

> > -----Original Message----- >> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On >> Behalf Of nimmermehr at chello.at >> Sent: Tuesday, January 26, 2010 6:23 AM >> To: centos at centos.org >> Subject: [CentOS] Kerberos integration in directory server >> >> Hi, >> >> Got some issues regarding Kerberos and Directory Server and hope someone >> can help me out. >> Used these for the configiruation : >> http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-kerberos.html >> http://www.redhat.com/docs/manuals/dir-server/8.1/install/index.html >> >> Server : CentOS 5.4 with Kerberos and Directory Server installed >> Client : CentOS 5.4 >> >> I use putty to connect to the client, which authenticates against the >> server. >> Using Kerberos or LDAP worked perfectly (using system-config- >> authentication on the client for configuration) >> >> The only thing that doesn't seem to work is the kerberized version of the >> login via LDAP on the directory Server. Shouldn't I get a Kerberos ticket >> for that ? If I activate kerberos AND ldap in system-config-authentication >> it fails : >> >> Jan 25 13:24:59 monarch sshd[3947]: pam_unix(sshd:auth): check pass; user >> unknown >> Jan 25 13:24:59 monarch sshd[3947]: pam_unix(sshd:auth): authentication >> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.0.1 >> Jan 25 13:24:59 monarch sshd[3947]: pam_succeed_if(sshd:auth): error >> retrieving information about user testuser >> Jan 25 13:25:01 monarch sshd[3947]: Failed password for invalid user >> testuser from 192.168.0.1 port 1142 ssh2 >> >> I followed the instructions here : >> http://directory.fedoraproject.org/wiki/Howto:Kerberos >> >> Maybe I just didn't get it ;) >> >> Thanks in advance, >> >> Peter >> _______________________________________________ >> CentOS mailing list >> CentOS at centos.org >> http://lists.centos.org/mailman/listinfo/centos >My setup is a tad different than yours in that I integrated MIT Kerberos with OpenLDAP. While our configurations are different I'm sure >you're trying for kerberized logins (System authenticates against Kerberos and pulls account information from LDAP). If so here are >some items you may want to verify you have included in your system-auth config file. >Auth sufficient pam_krb5.so use_first_pass >Auth sufficient pam_unix.so nullok try_first_pass >Account sufficient pam_ldap.so >Account required pam_unix.so >Password sufficient pam_krb5.so >Password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authok >Session optional pam_keyinit.so revoke >Session optional pam_krb5.so >Dan Just to see if I understood it correctly : It is mandatory that every LDAP-User has a functional Kerberos-login (user and PW). Is it possible for such a user to access a server that only has ldap for authentication and checks against the LDAP-Server ? About testing : How can I check if the information is pulled out of ldap ? Thanks in advance :) Peter

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss