- Discuss - lists.centos.org

Re: [CentOS] Small proxy appliance hardware
by Chuck Munro 03 Dec '09

03 Dec '09

Regarding a small proxy appliance, my thanks to those who responded either on this list or by direct email. We are going to get one of the little Acer AspireRevo 3610 boxes and give it a try. It's small, quiet, runs cool, and has more than enough resources to handle our CentOS proxy application. It's a shame that we have to trash the Windows-7 install (a waste of money) but that's life. The only unanswered question is with regard to an external USB wired network adapter, so we'll have to go by the data on the various manufacturers' web sites about Linux support. Has anyone tried the Belkin USB2/Gbit, the D-Link DUB-E100 or the Linksys USB300M devices? Which adapter chips to they use (in other words, which driver)?

1 0

LDAP for central authentication?
by Scott Ehrlich 03 Dec '09

03 Dec '09

I have the following on a network: 1) RHEL 5.0 Server acting as NIS and Samba domain controller 2) CentOS 5.x machines on NIS network 3) Win XP machines on Samba domain When I create an account for someone, I need to first type adduser new_person -d /home/new_person then passwd new_person, then cd /var/yp and make. Then smbpasswd -a new_person. Thus, two different databases. On another network, I have separate XP and Linux (CentOS 5.x, RHEL 5.x, and Suse) systems. No Samba, no NIS. Can I still set up a central LDAP directory for a single account database? For the NIS+Samba case, can I merge both credential files into a central database using LDAP? I would also want to control password length, complexity, aging, and other things. What is the best way to do this? Thanks. Scott

3 2

Skype version for CentOS 5.3
by Andrew 03 Dec '09

03 Dec '09

Which is the best version of skype to install in CentOS 5.3? skype.i586 2.0.0.72-fc5 from the skype repo or skype 2.1.0.47-fc10.i586.rpm from the 'skype for linux beta' downloads section of the skype website? Andy

3 5

Fedora 11 i386 Evolution address book --> CentOS 5.4 x86_64
by David McGuffey 03 Dec '09

03 Dec '09

Finally moved my home desktop from Fedora to CentOS. My spouse was unhappy with me upgrading from F9-->F10-->f11 etc and wanted something more stable. I built a second machine which is now running in parallel to the old F11 desktop. I moved my data (mail and files) from the F11 box to the CentOS 5.4 box. I used tar to move everything. Mail and files transferred A-OK...but the Evolution address book did not. Any tips on getting the old /home/.../.evolution/addressbook which worked with the version of Evolution on the new machine with an older version of Evolution? BTW, on CentOS, I cannot add new addresses to the address book. User_id on the new machine is the same as on the old machine, so perms should not be the problem. I checked the selinux context and it is the same as everything else in /home If I do a forced reinstall of Evolution would it mess up the mail files? DaveM

2 6

Centos-DS DSGW
by Alan McKay 03 Dec '09

03 Dec '09

Hey folks, I'm looking for DSGW. Google got me this thread : http://lists.centos.org/pipermail/centos-devel/2008-September/thread.html#3… Did it ever get added, or can I pick up a semi-official package anywhere? I don't see it out there : [root@sandbox1 html]# yum --enablerepo=* search centos-ds Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * addons: mirror.csclub.uwaterloo.ca * centosplus: centos.mirror.nac.net * contrib: centos.mbni.med.umich.edu * extras: mirror.csclub.uwaterloo.ca centosplus | 1.9 kB 00:00 centosplus/primary_db | 98 kB 00:00 contrib | 951 B 00:00 contrib/primary | 204 B 00:00 dag | 1.1 kB 00:00 443 packages excluded due to repository priority protections ============================================================== Matched: centos-ds =============================================================== centos-ds.x86_64 : CentOS Directory, Administration, and Console Suite centos-ds-admin.x86_64 : CentOS Administration Server (admin) centos-ds-base.x86_64 : CentOS Directory Server (base) centos-ds-base-devel.x86_64 : Development libraries for CentOS Directory Server centos-ds-console.noarch : CentOS Directory Server Management Console -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

1 0

RIPd not announcing routes (CentOS 5.4)
by Timo Schoeler 03 Dec '09

03 Dec '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, yesterday I sent this eMail to quagga mailing list, however I didn't receive an answer yet. Unfortunately, I really need this stuff running or have to switch to another strategy achieving the goals. Maybe one of you has some experience on this topic and can shed some light on it -- I really appreciate it. - -----8<-----8<-----8<----- I have a setup here that requires me to announce dynamic route that are created (within some virtual machines) on my CentOS-based machine. Config looks like this: (ripd.conf) ! hostname bla.foo.org password something enable password somethingother log file /var/log/quagga/ripd.log debug rip events ! router rip ~ version 2 ~ redistribute kernel ~ passive-interface default ~ network eth1.123 ~ network eth1.124 ! ~ no passive-interface eth1.123 ~ no passive-interface eth1.124 ! line vty ! Now, the problem is that it seems to distribute its routes (as my Cisco network guy told me), but it does not learn the routes announced by the (Cisco) neighbours: The speaks to a bunch of Cisco routers (which do, among OSPF and BGP routing, redistriubution of lots of stuff via RIPv2, which should feed my machines). The logfile (as configured above in the config) seems okay (except a "RIP: update timer fire!" entry every now and then): 2009/11/30 10:16:47 RIP: RIPd 0.98.6 starting: vty@2602 2009/11/30 10:16:47 RIP: turn on eth1.123 2009/11/30 10:16:47 RIP: Redistribute new prefix x.x.x.x/14 on the interface eth1.123 2009/11/30 10:16:47 RIP: triggered update! 2009/11/30 10:16:47 RIP: turn on eth1.124 2009/11/30 10:16:47 RIP: Redistribute new prefix y.y.y.y/16 on the interface eth1.124 2009/11/30 10:16:48 RIP: multicast join at eth1.123 2009/11/30 10:16:48 RIP: multicast request on eth1.123 2009/11/30 10:16:48 RIP: SEND to 224.0.0.9.520 2009/11/30 10:16:48 RIP: multicast join at eth1.124 2009/11/30 10:16:48 RIP: multicast request on eth1.124 2009/11/30 10:16:48 RIP: SEND to 224.0.0.9.520 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.1 port 520 on eth1.123 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.2 port 520 on eth1.123 2009/11/30 10:16:48 RIP: RECV packet from z.0.0.3 port 520 on eth1.123 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.121 port 520 on eth1.124 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.122 port 520 on eth1.124 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.123 port 520 on eth1.124 ... A 'sh ip rip status' shows me following: QUAGGA# sh ip rip status Routing Protocol is "rip" ~ Sending updates every 30 seconds with +/-50%, next due in 28 seconds ~ Timeout after 180 seconds, garbage collect after 120 seconds ~ Outgoing update filter list for all interface is not set ~ Incoming update filter list for all interface is not set ~ Default redistribution metric is 1 ~ Redistributing: kernel ~ Default version control: send version 2, receive version 2 ~ Interface Send Recv Key-chain ~ eth1.123 2 2 ~ eth1.124 2 2 ~ Routing for Networks: ~ eth1.123 ~ eth1.124 ~ Routing Information Sources: ~ Gateway BadPackets BadRoutes Distance Last Update ~ z.z.z.1 60 0 120 00:00:16 ~ z.z.z.3 60 0 120 00:00:22 ~ z.z.z.2 60 0 120 00:00:25 ~ z.z.z.6 67 0 120 00:00:05 ~ z.z.z.5 69 0 120 00:00:28 ~ z.z.z.121 68 0 120 00:00:22 ~ z.z.z.123 68 0 120 00:00:16 ~ z.z.z.122 69 0 120 00:00:10 ~ z.z.z.7 61 0 120 00:00:11 ~ z.z.z.6 4423 0 120 00:00:27 ~ z.z.z.5 5556 0 120 00:00:00 ~ z.z.z.7 3460 0 120 00:00:09 ~ Distance: (default is 120) So, I got a *lot* of BadPackets. tcpdump shows nothing 'weird', so I don't see the problem. Maybe this is something trivial but I don't see it as I'm new to quagga. Help greatly appreciated. Best regards, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFLFO+ifg746kcGBOwRAsvOAJ9jSJ2vJ6Ir02N7DB1tWHgsPR6LCQCgnT1O j1B+IbniBypTttFLcwmCHlk= =ZuLM -----END PGP SIGNATURE-----

2 2

Latency Monitor
by Matt 03 Dec '09

03 Dec '09

Does anyone know of a utillity I can run on a server to periodically ping several hosts and record the result? Does not need to be anything fancy at all. Matt

5 4

(re)load new kernel with rebooting host node?
by Rudi Ahlers 02 Dec '09

02 Dec '09

Hi all, Is it possible to reload the dom0 / host node's kernel with a newer one, without rebooting the server? I know kexec can do something like this for security patches, but I don't know much about kexec, and I don't want to mess up a production server either. So, has anyone done something like this before? I need to load a new kernel for one of the domU's iptables to work, but don't want to reboot the whole server and cause downtime for the other domU's. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 3

CentOS 5.3 - changing display settings
by Andrew 02 Dec '09

02 Dec '09

I've just installed CentOS 5.3 on my desktop and need to change the installed display setting from 1280x1024 to 1024x768 (more suitable for my monitor). When I try this on the Display Settings tab, I get the message: "Display settings changed You need to log out and restart the X server for the changes to take effect. Configuration was written to /etc/X11/xorg.conf, original configuration saved as /etc/X11/xorg.conf.backup." Trouble is, I don't know how to restart the X server apart from rebooting the computer, but that has no effect and the display settings remain unchanged! Any help appreciated, Andy

4 4

Small proxy appliance hardware
by Chuck Munro 02 Dec '09

02 Dec '09

I need to configure a small proxy appliance which doesn't require a lot of CPU power. I'm looking for any warnings this group may have regarding CentOS-5 on the following: - Acer AspireRevo 3610 (Atom CPU) - Dell Inspiron 537s (Celeron) - Any other small machines you might recommend (UL approved) I need to implement dual NICs, and for the Dell it should be no problem finding a low-profile 3Com or Intel adapter, but for the Acer I'll need to use one of those USB wired network dongle things. Does anyone have recommendations for a USB dongle that is fully automatic (regarding speed and duplex negotiation) supported by CentOS? Gigabit speed is not required. Any other compatibility issues with the above machines? Normally I'd simply build something from components and squeeze it into a small box, but in this case I need something with UL/CSA/CE approvals, which lets out homebrew hardware. Many thanks in advance!

4 5

Errors in core dump apache
by Matias Sardisco 02 Dec '09

02 Dec '09

Hi. I saw that some instances of apache die in a segmentation fault. I found this errors in core dump of apache. #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b181603e3a9 in ?? () from /etc/httpd/modules/libphp5.so ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- We run this software: CentOS 5.4 php 5.2.9 (test repository) httpd 2.2.3 zlib 1.2.3-3 Some ideas? Thank! ------------------------- Matias Sardisco e-mail: msardisco(a)mancia.org

1 0

Tomcat authentication via PAM (or other system methods)?
by Les Mikesell 02 Dec '09

02 Dec '09

Is there a way to coax java services running under tomcat to use the system authentication methods set up through PAM? In my case, this would be users in the local passwd file or through smb to a windows domain. I've added mod_auth_pam to get this effect with apache but would like to also handle java web services. -- Les Mikesell lesmikesell(a)gmail.com

3 2

(HOWTO) Crypto root with the LUKS key on a USB stick
by Devin Reade 02 Dec '09

02 Dec '09

I've written up a document on how to have whole-disk encryption (minus /boot) while having your LUKS key on a USB stick. (Whether or not this is a good idea depends on your usage model, and I won't get into that). The document is at <http://www.gno.org/~gdr/sysadmin/centos/5.4/usb-crypto-key.html> and is targetted at CentOS 5.4. It supersedes my howto for crypto root (for interactive boot or USB sticks) for CentOS 5.1 - 5.3 (the old links are on that page). If anyone has feedback on it, feel free to contact me privately. Devin -- Anyone who cannot cope with mathematics is not fully human. At best he is a tolerable subhuman who has learned to wear shoes, bathe, and not make messes in the house. - Robert Heinlein

1 0

Autofs cannot bind LDAP server
by Eric B. 02 Dec '09

02 Dec '09

Hi, I'm using Autofs and LDAP for mounting my home directories via nfs. In general, everything seems to work fine. However, I have one small problem. If I reboot my server using autofs while my LDAP server is down, I get the following error message in my logs: automount[3358]: bind_ldap_anonymous: lookup(ldap): Unable to bind to the LDAP server: (default), error Can't contact LDAP server which is understandable, since my ldap server is temporarily down. My problem, however, is that once my ldap server is back up, autofs never seems to retry to connect to it, so all my /home mounts fail. Basically, it means I have to make sure that my LDAP server is never down while another server is rebooting. I figure there must be something in the configuration file that would allow me to tweak this to indicate to autofs to recheck the ldap server periodically to see if it has come back up, but can't seem to find anything. My /etc/sysconfic/autofs file is pretty plain: # TIMEOUT - set the default mount timeout (default 600). # TIMEOUT=300 # LOGGING - set default log level "none", "verbose" or "debug" # LOGGING="verbose" # Other common LDAP nameing # MAP_OBJECT_CLASS="automountMap" ENTRY_OBJECT_CLASS="automount" MAP_ATTRIBUTE="ou" ENTRY_ATTRIBUTE="cn" VALUE_ATTRIBUTE="automountInformation" Is there anything I can do to force autofs to check to see if my LDAP server is back online? Thanks, Eric

5 8

Samsung M800
by Frank Cox 02 Dec '09

02 Dec '09

I have a Samsung M800 phone that I had (wrongly) assumed would show up as a USB drive on Linux so I can transfer files to it and so on. Instead, it appears to present itself as a modem. Is there any way to make it appear as a usb drive? Dec 1 13:47:17 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 3 Dec 1 13:47:17 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:18 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device Dec 1 13:47:18 mutt kernel: usbcore: registered new driver cdc_acm Dec 1 13:47:18 mutt kernel: drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adapters Dec 1 13:47:37 mutt kernel: usb 5-1: USB disconnect, address 3 Dec 1 13:47:38 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 4 Dec 1 13:47:38 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:38 mutt kernel: scsi9 : SCSI emulation for USB Mass Storage devices Dec 1 13:47:43 mutt kernel: usb 5-1: USB disconnect, address 4 Dec 1 13:47:44 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 5 Dec 1 13:47:45 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:45 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device Dec 1 13:51:13 mutt kernel: usb 5-1: USB disconnect, address 5 nd address 6 Dec 1 13:51:16 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:51:16 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

10 23

Persistent NFS Caching
by Paul Berger 02 Dec '09

02 Dec '09

Has anybody got persistent NFS caching to work after 5.3 update removed the tech preview? I have cachesfilesd installed & running and using nfs-utils with fsc patched back in but it appears to not be working, any pointers? Regards, Paul Berger

3 4

non-threaded perl no longer in .spec file
by Kurt Hansen 02 Dec '09

02 Dec '09

Hello, I'm setting up a new server on 5.4 and noticed this in the perl.spec file: * Mon Jul 21 2008 Stepan Kasal - 4:5.8.8-14.el5 - add two patches, which... - Resolves: #435505, #431041 - remove %%define threading, the non-threading variant is not supported, Related: 435376 That comment wasn't there when I set up a server on 5.2 a few months back and the %define threading option was still in the perl.spec file, making it easy for me to create my own non-threaded perl. I want a non-threaded perl because the mod_perl folks say that the performance is better on a non-threaded perl. I believe I can compare the spec files and figure out where to edit the new spec file, but I wondered about that "not supported" comment. Is there something "bad" about the non-threading variant? Thanks! Take care, Kurt Hansen khansen(a)charityweb.net

4 6

Inquiry:How to compare two files but not in line-by-line basis?
by hadi motamedi 02 Dec '09

02 Dec '09

Dear All Can you please do me favor and let me know how can I compare two files but not in line-by-line basis on my CentOS server ? I mean say row#1 in file1 has the same data as say row#5 in file2 , but the comm compares them in line-by-line basis that is not intended . It seems that the diff cannot do the job as well . Thank you in advance

3 2

ldapsearch -f file doesn't work
by Sergio Belkin 02 Dec '09

02 Dec '09

Hi, Firstly, system info: Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007 x86_64 x86_64 x86_64 GNU/Linux I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y openldap-2.3.27-8.el5_2.4 I'd want to perform a query that return one attribute. So I did something as follows: ldapsearch -W -f qbis.ldif -D "cn=Manager,dc=palermo,dc=edu" -b "ou=people,dc=mydomain,dc=edu" -x legajo (Where legajo is the filter) There is no problem with filter but wih the file "qbis.ldif" which contains: dn: uid=jdoe,ou=people,dc=mydomain,dc=edu Of course I could perform that query with no need of one file, but I need to get "legajo" from around 800 users so it would be nice to be able to use "-f file". I cannot do something like a "loop for" because it would ask me every time the Manager password. Am I doing something wrong or is a ldap bug? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 4

how to install ash on CentOS 5.4?
by Rudi Ahlers 02 Dec '09

02 Dec '09

Hi, Does anyone know if it's possible to install ash on CentOS 5.4, or just CentOS 5, for that matter? I'm trying to install OpenQRM which requires ash, but ash doesn't exist in the repositories. rpmfind.net als only has an older version listed, for CentOS 4 http://rpmfind.net/linux/rpm2html/search.php?query=ash&submit=Search+...&sy… dag wier's repository also doesn't have it. And google didn't yield any results for CentOS 5.4. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 3

Re: [CentOS] Inquiry:How to compare two files but not in line-by-line basis?
by hadi motamedi 02 Dec '09

02 Dec '09

Thank you very much for your reply . This code actually solved my problem and returned exact matches between the two files (irrespective of their location in the files) . As I understood , it will list each data showing to which file it belongs (or it is common to both files) . It is really what I wanted . Sincerely Yours On Wed, Dec 2, 2009 at 9:42 AM, Simon Banton <centos(a)web.org.uk> wrote: > At 08:54 +0000 2/12/09, hadi motamedi wrote: > >Dear All > >Can you please do me favor and let me know how can I compare two > >files but not in line-by-line basis on my CentOS server ? I mean say > >row#1 in file1 has the same data as say row#5 in file2 , but the > >comm compares them in line-by-line basis that is not intended . It > >seems that the diff cannot do the job as well > > This'll show you which lines are common to both files, and for the > ones that aren't which file they're in. > > perl -MData::Dumper -le 'while(<>) {chomp; push @{$s->{"$_"}}, > $ARGV}; END{ print Dumper($s) }' file1 file2 > > ... someone will be along shortly with a more elegant method. > > HTH > > S. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

2 2

best practises for avoiding to write passwords in shell scripts (example sqlplus from Oracle)
by Sven Aluoor 02 Dec '09

02 Dec '09

Hi folks I have here a CentOS box where i need to setup cronjob (with session to remote Oracle instance). On the remote DB i have no access, expect limited user. How to avoid putting passwords in shell scripts? The solution doesn't need to be perfect, only better than plain text passwords in scripts. Mostly remote host only support password authentication (no certificates and so on). cheers Sven

4 4

send existing root email to another user
by Lists 01 Dec '09

01 Dec '09

Hi all, I'm running Centos 5.4 I have a pile of emails in my root users /var/spool/mail/root file I need to send this all to another address (preferrably external but local would possibly do) I have searched a lot but can't find any way to do this. I have set it so future emails get forwarded to my external address but I also need to shift the existing emails. Thanks Kate

10 17

Startup script issues
by Robert Bielik 01 Dec '09

01 Dec '09

I'm converting Ubuntu startup scripts to work on CentOS (5.3), and I'm having trouble finding out how to start a daemon in a certain directory? For Ubuntu, start-stop-daemon has the option -d to set the working directory. TIA /Rob

3 5

centos-release srpm
by Shad L. Lords 01 Dec '09

01 Dec '09

Back on Oct 31st Karanbir said he would take care of the missing centos-release srpm. It still hasn't shown up on any of the mirrors. Is this ever going to be fixed? -Shad

2 2

/etc/cron.weekly/99-raid-check
by Farkas Levente 01 Dec '09

01 Dec '09

hi, it's been a few weeks since rhel/centos 5.4 released and there were many discussion about this new "feature" the weekly raid partition check. we've got a lot's of server with raid1 system and i already try to configure them not to send these messages, but i'm not able ie. i already add to the SKIP_DEVS all of my swap partitions (since i read it on linux-kernel list that there can be mismatch_cnt even though i still not understand why?). but even the data partitions (ie. all of my servers all raid1 partitions) produce this error (ie. ther mismatch_cnt is never 0 at the weekend). and this cause all of my raid1 partitions are rebuild during the weekend. and i don't like it:-( so my questions: - is it a real bug in the raid1 system? - is it a real bug in my disk which runs raid (not really believe since it's dozens of servers)? - the /etc/cron.weekly/99-raid-check is wrong in rhel/centos-5.4? or what's the problem? can someone enlighten me? thanks in advance. regards. -- Levente "Si vis pacem para bellum!"

9 10

OT: iscsi target bind to two addresses?
by Gordon McLellan 01 Dec '09

01 Dec '09

Does anyone know off hand how to bind iscsi enterprise target to two distinct addresses. Lets say I have a machine that has a bunch of interfaces on it, with different subnets. Rather than have ietd broadcast itself on all interfaces (the default), I would like to limit it to only two interfaces. I have edited the init.d startup script with --address x.x.x.x which works, but I tried using the --address argument twice, and the second time is ignored. I also tried x.x.x.x,y.y.y.y which also failed, second address was ignored. I'm thinking I could use ip tables to block ietd's ports on the unwanted interfaces but that seems like overkill. Thanks - Gordon

2 2

Re: [CentOS] NFS new security requirements?
by Mike Yates 01 Dec '09

01 Dec '09

Hi James Please reply to me as well as the list as I only get the digest. You wrote > What is the contents of /etc/exports on 'hs8' ? at present:- #/data 172.26.0.6(rw,no_root_squash) /data hs6(rw,sync,mp,no_root_squash,sec=none) /backup 172.26.0.6(rw,sync,mp,no_root_squash) > What happens if you restart rpc.mountd on 'hs8' ? I've done this many times as I try different exports options:- [root@hs8 ~]# /etc/init.d/nfs restart Shutting down NFS mountd: [ OK ] Shutting down NFS daemon: [ OK ] Shutting down NFS quotas: [ OK ] Shutting down NFS services: [ OK ] Starting NFS services: [ OK ] Starting NFS quotas: [ OK ] Starting NFS daemon: [ OK ] Starting NFS mountd: [ OK ] [root@hs8 ~]# vi msg SeLinux is disabled. Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10098/Tue Dec 1 03:06:27 2009 Known viruses: 660899.

2 2

ip6tables state matching
by Shunsuke Otanis 01 Dec '09

01 Dec '09

Hi, I am having problems adding a stateful inspection rule with ip6tables on CentOS4.5. #ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT That's what I am trying to do, but #ip6tables: No chain/target/match by that name. I have been googling but unable to solve the problem. any ideas?

3 2

Re: [CentOS] Unable to share directory via Samba?
by Per Qvindesland 01 Dec '09

01 Dec '09

Hi What does testparm give you? Regards Per At Tuesday, 01-12-2009 on 10:05 "James Bensley" wrote: So I went to System > Administration > Server Settings > Samba and added a folder to share and initially set it to guest access to get things going. I couldn't access this one and only share on this server with guest access from either my Windows laptop (XP Pro SP3) or a Leopard server (10.5.8) so I changed the settings to use user authentication and added my local user details (this is a stand alone file server with one user and the root user running CentOS 5.4). I made sure I hadn't put the entries in iptables incorrect by stopping iptables (sudo /etc/init.d/iptables stop, which executed just fine). SELinux kept popping up so I disabled that and restarted the server also. So now with no iptables nor SELinux enabled flicking between guest and user access I still can't access the share (I have also tried authenticating as root to no avail), my Windows and Mac test machines are erroring out saying they don't have permissions to access the share (I am an administrator on both machines so its not a local permissions issue). There are no firewall restrictions between my test machines and the CentOS server as I would even get prompted for authentication so that's not a problem and my test machines work fine because I can mount smb shares on other files servers in the same subnet as the CentOS server, what's going on? Ideas are welcome! Thanks for reading... -- Regards, James ;) Pablo Picasso - "Computers are useless. They can only give you answers." - http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] Docx format ?
by MHR 01 Dec '09

01 Dec '09

On Fri, Nov 27, 2009 at 5:37 AM, Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> wrote: > > So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS > and OOO teams! <RBFG> Thanks for the laugh, Sorin! mhr

3 2

Change system-wide default configuration for FF and OO with /etc/skel
by Niki Kovacs 30 Nov '09

30 Nov '09

Hi, I'm using a heavily tweaked CentOS 5.4 for desktop installs (here's what it looks like: http://www.microlinux.fr/captures.html) For every app I install, I try to configure a sensible default configuration system-wide for all users. For example, once I found a nice configuration for XMMS (default skin, loads of plugins, orange On Screen Display in a nice font, etcetera), I put my whole ~/.xmms in /etc/skel, so that every new user on the system will have the same default configuration. I have a script which does that for most of the applications I install for users. Even my GNOME desktop is heavily tweaked, and similarly, there's a default /etc/skel/.gconf for this. Now I have two annoyances remaining: Firefox and OpenOffice.org. When installing both of these (Firefox from the CentOS repos, OpenOffice.org from the RPMS contained in openoffice.org's tarball), the default configuration for each one (in ~/.mozilla and ~/.openoffice.org) takes no less than 3 MB, which I find a bit puzzling. Since I keep all my default configurations in an SVN tree, I find this a bit heavy. For Firefox, I only change a couple of options (like "Close download manager after finishing downloading" and "always ask where to store a file"). Similarly, for OpenOffice.org, I change things like auto-completion (so users won't call me on a sunday morning asking "Why does it try to finish my sentences?"). I guess the "real" configuration must be some small plain text file. But then, where? Is there a way not to upload the whole 3 MB of configuration? Cheers, Niki

3 4

Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.
by Billy Huddleston 30 Nov '09

30 Nov '09

I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E controller. I've googled all over the place and found a few different drivers for RHEL5 for it.. and tried a few of them.. Some will load, some complain that this isn't the correct version.. non of them work when it comes to showing Hard Drivers in the partition manager. The machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated. Thanks, Billy

9 26

timekeeping on VM - ntpd running
by Jonathan Garden 30 Nov '09

30 Nov '09

This is really stupid question. But referring to: http://lists.centos.org/pipermail/centos/2009-October/083791.html I don't see any line related to ntpd in my /var/log/messages . Do I need to turn-on ntpd for timekeeping on VMs? Some people say not to use ntpd on VMs for timekeeping or is it ntpdate cron job? Can someone please elaborate on this? Thanks, Jonathan.

3 3

Repository for clean and safe installation of python2.6 (and other python-software)
by Bernhard Gschaider 30 Nov '09

30 Nov '09

Hi! I want to test some software on my CentOS 5 machine that is not too happy with the system python (2.4). So when I install a python to my machines I want it to be a) clean: in other words it should be a RPM b) safe: it should not remove the system-python (in order not to break the system-scripts in subtle ways) but be accessible for instance as python2.6 (while python would still be python2.4) I've looked around (even other places than the usual suspects RPMforge and EPEL) for repositories that could have such packages. Before I start rolling my own RPMs: is anyone aware of a repository that has such packages? (an added bonus would be if it had RPMs of PyQt4, I didn't find those for Centos or RHEL, too) Bernhard

2 3

NFS new security requirements?
by Mike Yates 30 Nov '09

30 Nov '09

Hi I've suddenly lost access to some permanent cross-server shares. I think this was following the Nov 5 new kernel, rather than the Centos version upgrade. I don't see any difference to man mount.nfs I have:- [root@hs6 ~]# mount hs8:/data /sysback/hs8-data -v mount: no type was given - I'll assume nfs because of the colon mount: trying 172.26.0.8 prog 100003 vers 3 prot tcp port 2049 mount: trying 172.26.0.8 prog 100005 vers 3 prot udp port 735 mount: hs8:/data failed, reason given by server: Permission denied Yet on hs8 the log shows:- Nov 29 12:47:52 hs8 mountd[2255]: authenticated mount request from 172.26.0.6:617 for /data (/data) No internal permissions have changed. ' Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10094/Mon Nov 30 11:45:20 2009 Known viruses: 660218.

2 1

NetworkManager constantly overwriting /etc/resolve.conf - how to disable?
by Rudi Ahlers 30 Nov '09

30 Nov '09

Hi all, I have a CentOS 5.4 server-only installation, i.e. no X installed, and for some odd reason /etc/resolve.conf gets overwritten by NetworkManager on a constant basis. I haven't been able to track down how often, but I think it's on the hour, or something. This is the conents of the file right now: # Generated by NetworkManager # No nameservers found; try putting DNS servers into your # ifcfg files in /etc/sysconfig/network-scripts like so: # # DNS1=xxx.xxx.xxx.xxx # DNS2=xxx.xxx.xxx.xxx # DOMAIN=lab.foo.com bar.foo.com So, I change it to the following: nameserver 192.168.1.254, save it, and all network functions work fine. But, later on it get's changed again. Running "system-config-network", I can see that the nameserver that I have specified is in there, yet it doesn't show up in /etc/resolve.conf. I have searched a bit on google, but all the results reveal how to use NetworkManager to setup the nameservers, but now how it get's set automatically. Why does this happen, and how do I stop it from happening? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

8 13

Bnid Dynamic Update not returnnig latest update
by Joseph L. Casale 30 Nov '09

30 Nov '09

I have a zone that has several hosts update their ip with Dynamic DNS updates. This morning a client had updated its ip, but bind wasn't returning the new ip when queried until I restarted the daemon? Google hasn't yielded anything useful as I am prolly missing the boat with my search criteria. Anyone got any clues/pointers about this issue? Thanks, jlc

2 3

CentOS 5 and DRPM
by Janez Kosmrlj 30 Nov '09

30 Nov '09

Has anybody successfully implemented DRPMs on centos 5.x? I searched the net and I found a few indications that it is possible, but there is very little info how to do it. Just to be clear. With DRPMs i mean deltaRPMs. And with implementation i mean What yum plugins are necessary and what has to be done on the yum repository to make it work. BR Janez

4 8

AIDE or OSSEC on CentOS 5.4 x86_64?
by David McGuffey 30 Nov '09

30 Nov '09

Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade through to determine if they are legit or not. If that is all that AIDE can do, then it is not "manageable." Seems to me that any IDS must be tied to the yum update process so that one is not dealing with hundreds/thousands of changes that were brought in by a yum update that I choose to apply. Is OSSEC any less noisy? DaveM

9 11

Best way to secure apache web root
by Stephen Nelson-Smith 30 Nov '09

30 Nov '09

I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to implement this? I am thinking: chown -R root:apache /var/www/html chmod -R 0750 /var/www/html chown apache:apache for where need to write Is there a better way? S.

4 4

startssl and CA autority
by fakessh 29 Nov '09

29 Nov '09

> hi all > > hi postfix list > > I worked all day to develop my certificates > with certificates free of startssl > > I based this document > http://translate.google.fr/translate?js=y&prev=_t&hl=fr&ie=UTF-8&u=http%3A%… > > I realized correctly signed certificates > > I read in the doc startssl the need to import this document among the > certificates > to import the document https://www.startssl.com/certs/sub.class1.client.ca.pem > > how to incorporate the certificates in postfix? > > > thanks for all your feedback > > thanks all your > > thanks >

2 1

again, nic driver order
by Gordon McLellan 29 Nov '09

29 Nov '09

I have two servers with identical hardware ... TYAN i3210w system boards with dual intel gigabit interfaces, and a PCI intel gigabit nic. I'm running Centos 5.4, x86_64, 2.6.18-164.6.1.el5 Every other time I reboot, the nics initialize in a different order. anaconda had setup /etc/modprobe.conf with alias lines for the cards: alias eth0 e1000 alias eth1 e1000e alias eth2 e1000e However, introducing the bonding driver into the mix seems to have thrown a wrench in the works. alias bond0 bonding options bond0 miimon=80 mode=5 #or something like that, can't get to the machine right now - no console and the network is down So, I read about the ifcfg options and try assigning each config script an HWADDR line. after rebooting, /var/log/messages announces that hardware address for eth1 does not match, skipping ... same for eth2 Reading the archives seems to indicate modprobe.conf doesn't do much and is made obsolete by udev, and that hwaddr is discouraged because it's a band-aid. The archives seem to suggest fiddling with udev to be the answer. So I modify /etc/udev/rules.d/60-net (or something) and add a few rules found in an ancient example (those aren't my mac addresses): KERNEL=="eth?", SYSFS{address}=="00:37:e9:17:64:af", NAME="eth0" # MAC of first NIC in lowercase KERNEL=="eth?", SYSFS{address}=="00:21:e9:17:64:b5", NAME="eth1" # MAC of second NIC in lowercase Now, all three network cards get assigned as eth0! eth1 and eth2 are no longer found. The pci-express nics (onboard) get detected first, and the pci nic is last, so it ends up "owning" the eth0 alias. I don't really care which alias gets assigned to which nic, but I want that assignment to be constant. All suggestions are appreciated! Gordon

6 17

CentOS-announce Digest, Vol 57, Issue 12
by centos-announce-request＠centos.org 28 Nov '09

28 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update (Karanbir Singh) 2. CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update (Karanbir Singh) 3. CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update (Karanbir Singh) 4. CEBA-2009:1600 CentOS 5 i386 kexec-tools Update (Karanbir Singh) 5. CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update (Karanbir Singh) 6. CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update (Karanbir Singh) 7. CEBA-2009:1612 CentOS 5 x86_64 openswan Update (Karanbir Singh) 8. CEBA-2009:1612 CentOS 5 i386 openswan Update (Karanbir Singh) 9. CEBA-2009:1611 CentOS 5 i386 xterm Update (Karanbir Singh) 10. CEBA-2009:1611 CentOS 5 x86_64 xterm Update (Karanbir Singh) 11. CEBA-2009:1610 CentOS 5 i386 metacity Update (Karanbir Singh) 12. CEBA-2009:1610 CentOS 5 x86_64 metacity Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 27 Nov 2009 23:09:54 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230954.GA20939(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 25503455a83968e82bddb5bad50b3b36 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 24abb566a75e1186b8cc47ac3b883808 kdelibs-3.5.4-25.el5.centos.1.x86_64.rpm 4f29862576be6cd8f777c3fa02b39b6f kdelibs-apidocs-3.5.4-25.el5.centos.1.x86_64.rpm ef5c485ca5cd72aac5f4d11015a2d946 kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm a6ec2f3c18bb9f659f847058411d4c1b kdelibs-devel-3.5.4-25.el5.centos.1.x86_64.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 27 Nov 2009 23:09:53 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230953.GA20924(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 69f420e91ae49efb936b7ac6bafc4447 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 9e10d4c1ba5770f61a9a415d302663f7 kdelibs-apidocs-3.5.4-25.el5.centos.1.i386.rpm 2d16f3725afc68fd2256b2d0b62426bb kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21015(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 2b21645feba164d62f646dc3eeeb4a06 kexec-tools-1.102pre-77.el5.3.x86_64.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 i386 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21000(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 01fb1c1596d2f18e3922d9d1bf2c3c0c kexec-tools-1.102pre-77.el5.3.i386.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21084(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e6335c49b8f3329e402e5d3e53611897 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21099(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 292e68d92156b38cc296d6043b2f0215 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 27 Nov 2009 23:17:10 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 x86_64 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231710.GA21199(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c2888e684a30c8f7f015256fb8a7bba6 openswan-2.6.21-5.el5_4.1.x86_64.rpm f04a532ddf2eb134b597a775f7bdfc24 openswan-doc-2.6.21-5.el5_4.1.x86_64.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 27 Nov 2009 23:17:09 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 i386 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231709.GA21184(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c520e1798d11cd5ac40ae47cce9fa1a5 openswan-2.6.21-5.el5_4.1.i386.rpm d38b53762fea5d27a8ae40b8e2d28768 openswan-doc-2.6.21-5.el5_4.1.i386.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 i386 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21261(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: eb5d68779ddaecc22ddb519d83915979 xterm-215-8.el5_4.1.i386.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 x86_64 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21276(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: be2bf3c90ab6ea34ebe31351da16f78d xterm-215-8.el5_4.1.x86_64.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 i386 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21345(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: bc0cb5c70d74cf7a6965afc0dce1d53e metacity-2.16.0-12.el5_4.1.i386.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 x86_64 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21360(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a62304689380340ad45682704f2cbdd6 metacity-2.16.0-12.el5_4.1.i386.rpm 43f8ba25d93dd969d7bc7c5aa82093e8 metacity-2.16.0-12.el5_4.1.x86_64.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 57, Issue 12 ***********************************************

1 0

SNAT question
by Peter Peltonen 28 Nov '09

28 Nov '09

Hi, I am unable to get my LAN masqueraded using SNAT with CentOS 5.3 and iptables. I have the following setup: eth0: connects to internet with static public IP 1.2.3.1 (obscured here for privacy) eth1: connects to DMZ with static public IP 1.2.3.2 (obscured here for privacy) eth2: connects to LAN with static private IP 192.168.0.1 Traffic to hosts in the DMZ/Internet through eth0/1 work fine. I tried masqueradig the LAN with following: ptables -A FORWARD -i eth2 -j ACCEPT iptables -A FORWARD -o eth2 -j ACCEPT iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 1.2.3.1 After this I can ssh to a server in the Internet from the LAN using the server's IP address but not its name. The w command on the server tells me that my address has not been masqueraded (its 192.168.0.2, the LAN client's private IP). What am I doing wrong? Best, Peter

3 5

read only sftp access
by Andrei F 28 Nov '09

28 Nov '09

Hi, I'm trying to setup read-only SFTP repo. The directory that I'm planning to make available via sftp needs to have only read-only access. My issue is that this specific directory is already available for read & write access but under different credentials. When I try to login via my read-only account, openssh spits out an error about incorrect permissions. Any idea how can I share the same directory via sftp under two different usernames under the same filesystem permissions?

3 2

IPTABLES and Hi-Risk blocking
by James B. Byrne 27 Nov '09

27 Nov '09

We are considering whether or not to block internal access to social networking and private entertainment web sites. This not a policy decision as of yet, just an exploratory exercise. Our gateways run CentOS-5.4 and use iptables to enforce firewall rules. The information that we wish to determine is whether or not it is feasible to block sites such as facebook, youtube, twitter, etc. using iptables. Is there a superior method? Does there exist already a generally accepted utility or method for accomplishing this? At the present time we only block outgoing traffic for a handful of internal hosts that should never have any reason to generate traffic destined outside the lan. But, now we are advised by some authorities that facebook and similar sites are considered security risks to hosts that are used to access them. Without debating the merits of such claims, how would one proceed to block internal network access to specific domain names using CentOS? Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 5

PHP updates
by Craig White 27 Nov '09

27 Nov '09

For the 2 threads going on about PHP 5.2/5.3... CentOS tracks upstream whose version is... php-5.1.6-23.2.el5_3 If you want something newer, you have to go off the beaten path. try this...(as root) wget http://dev.centos.org/centos/5/CentOS-Testing.repo mv CentOS-Testing.repo /etc/yum.repos.d yum --enablerepo=c5-testing check-update and this would allow to update to version 5.2.9-2.el5.centos if you then... yum --enablerepo=c5-testing update php and if enough people actually convinced the developers that 5.2.9-2.el5.centos were feasible, then they would probably move it into the 'Extras' repository. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

8 8

Xen 3.4.1/3.4.2 and newer libvirt for Centos 5.4
by For＠ll 27 Nov '09

27 Nov '09

Hi, Is ther any repo wher I find xen 3.4.1 or 3.4.2 and newer libvirt for Centos 5.4 i386. For@ll

2 1

Re: [CentOS] Docx format ?
by Sorin Srbu 27 Nov '09

27 Nov '09

>-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf >Of Sorin Srbu >Sent: Friday, November 27, 2009 9:22 AM >To: 'CentOS mailing list' >Subject: Re: [CentOS] Docx format ? > >>> What about Powerpoint presentations, ie .pptx-files? Do they look anywhere >>> near the original look when opened in MS Office? >>> >>No clue - haven't run into one of those yet. >> >Anyway, I'll continue to look into OOO and pptx. Downloaded and installed OOO3.1 on a CentOS 5.4 i386 I had here. After some initial foul ups on my part (had OOO2 already installed, and had to first uninstall the older one and then do a forced manual rpm-install of OOO3.1), this is what I've found. I got a pptx-file from my boss with pictures and formatting and whatnot. It opened fine in CentOS. Some formatting was plain lost, but the pictures were all there, as far as I can tell. Some graphics, like arrows and such did not get through and looked like something from the 80s block graphics era. Some text got printed over other parts of the text, however I've a inkling this might be due to the screen size maybe? I also opened the same pptx with OOO3.1 on my WinXP-machine, and got a blank white screen, in slide show-mode. So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS and OOO teams! -- /Sorin

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss