- Discuss - lists.centos.org

Errors in core dump apache
by Matias Sardisco 03 Dec '09

03 Dec '09

Hi. I saw that some instances of apache die in a segmentation fault. I found this errors in core dump of apache. #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b181603e3a9 in ?? () from /etc/httpd/modules/libphp5.so ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- We run this software: CentOS 5.4 php 5.2.9 (test repository) httpd 2.2.3 zlib 1.2.3-3 Some ideas? Thank! ------------------------- Matias Sardisco e-mail: msardisco(a)mancia.org

1 0

Tomcat authentication via PAM (or other system methods)?
by Les Mikesell 03 Dec '09

03 Dec '09

Is there a way to coax java services running under tomcat to use the system authentication methods set up through PAM? In my case, this would be users in the local passwd file or through smb to a windows domain. I've added mod_auth_pam to get this effect with apache but would like to also handle java web services. -- Les Mikesell lesmikesell(a)gmail.com

3 2

(HOWTO) Crypto root with the LUKS key on a USB stick
by Devin Reade 03 Dec '09

03 Dec '09

I've written up a document on how to have whole-disk encryption (minus /boot) while having your LUKS key on a USB stick. (Whether or not this is a good idea depends on your usage model, and I won't get into that). The document is at <http://www.gno.org/~gdr/sysadmin/centos/5.4/usb-crypto-key.html> and is targetted at CentOS 5.4. It supersedes my howto for crypto root (for interactive boot or USB sticks) for CentOS 5.1 - 5.3 (the old links are on that page). If anyone has feedback on it, feel free to contact me privately. Devin -- Anyone who cannot cope with mathematics is not fully human. At best he is a tolerable subhuman who has learned to wear shoes, bathe, and not make messes in the house. - Robert Heinlein

1 0

Autofs cannot bind LDAP server
by Eric B. 03 Dec '09

03 Dec '09

Hi, I'm using Autofs and LDAP for mounting my home directories via nfs. In general, everything seems to work fine. However, I have one small problem. If I reboot my server using autofs while my LDAP server is down, I get the following error message in my logs: automount[3358]: bind_ldap_anonymous: lookup(ldap): Unable to bind to the LDAP server: (default), error Can't contact LDAP server which is understandable, since my ldap server is temporarily down. My problem, however, is that once my ldap server is back up, autofs never seems to retry to connect to it, so all my /home mounts fail. Basically, it means I have to make sure that my LDAP server is never down while another server is rebooting. I figure there must be something in the configuration file that would allow me to tweak this to indicate to autofs to recheck the ldap server periodically to see if it has come back up, but can't seem to find anything. My /etc/sysconfic/autofs file is pretty plain: # TIMEOUT - set the default mount timeout (default 600). # TIMEOUT=300 # LOGGING - set default log level "none", "verbose" or "debug" # LOGGING="verbose" # Other common LDAP nameing # MAP_OBJECT_CLASS="automountMap" ENTRY_OBJECT_CLASS="automount" MAP_ATTRIBUTE="ou" ENTRY_ATTRIBUTE="cn" VALUE_ATTRIBUTE="automountInformation" Is there anything I can do to force autofs to check to see if my LDAP server is back online? Thanks, Eric

5 8

Samsung M800
by Frank Cox 03 Dec '09

03 Dec '09

I have a Samsung M800 phone that I had (wrongly) assumed would show up as a USB drive on Linux so I can transfer files to it and so on. Instead, it appears to present itself as a modem. Is there any way to make it appear as a usb drive? Dec 1 13:47:17 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 3 Dec 1 13:47:17 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:18 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device Dec 1 13:47:18 mutt kernel: usbcore: registered new driver cdc_acm Dec 1 13:47:18 mutt kernel: drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adapters Dec 1 13:47:37 mutt kernel: usb 5-1: USB disconnect, address 3 Dec 1 13:47:38 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 4 Dec 1 13:47:38 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:38 mutt kernel: scsi9 : SCSI emulation for USB Mass Storage devices Dec 1 13:47:43 mutt kernel: usb 5-1: USB disconnect, address 4 Dec 1 13:47:44 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 5 Dec 1 13:47:45 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:45 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device Dec 1 13:51:13 mutt kernel: usb 5-1: USB disconnect, address 5 nd address 6 Dec 1 13:51:16 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:51:16 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

10 23

Persistent NFS Caching
by Paul Berger 03 Dec '09

03 Dec '09

Has anybody got persistent NFS caching to work after 5.3 update removed the tech preview? I have cachesfilesd installed & running and using nfs-utils with fsc patched back in but it appears to not be working, any pointers? Regards, Paul Berger

3 4

non-threaded perl no longer in .spec file
by Kurt Hansen 02 Dec '09

02 Dec '09

Hello, I'm setting up a new server on 5.4 and noticed this in the perl.spec file: * Mon Jul 21 2008 Stepan Kasal - 4:5.8.8-14.el5 - add two patches, which... - Resolves: #435505, #431041 - remove %%define threading, the non-threading variant is not supported, Related: 435376 That comment wasn't there when I set up a server on 5.2 a few months back and the %define threading option was still in the perl.spec file, making it easy for me to create my own non-threaded perl. I want a non-threaded perl because the mod_perl folks say that the performance is better on a non-threaded perl. I believe I can compare the spec files and figure out where to edit the new spec file, but I wondered about that "not supported" comment. Is there something "bad" about the non-threading variant? Thanks! Take care, Kurt Hansen khansen(a)charityweb.net

4 6

Inquiry:How to compare two files but not in line-by-line basis?
by hadi motamedi 02 Dec '09

02 Dec '09

Dear All Can you please do me favor and let me know how can I compare two files but not in line-by-line basis on my CentOS server ? I mean say row#1 in file1 has the same data as say row#5 in file2 , but the comm compares them in line-by-line basis that is not intended . It seems that the diff cannot do the job as well . Thank you in advance

3 2

ldapsearch -f file doesn't work
by Sergio Belkin 02 Dec '09

02 Dec '09

Hi, Firstly, system info: Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007 x86_64 x86_64 x86_64 GNU/Linux I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y openldap-2.3.27-8.el5_2.4 I'd want to perform a query that return one attribute. So I did something as follows: ldapsearch -W -f qbis.ldif -D "cn=Manager,dc=palermo,dc=edu" -b "ou=people,dc=mydomain,dc=edu" -x legajo (Where legajo is the filter) There is no problem with filter but wih the file "qbis.ldif" which contains: dn: uid=jdoe,ou=people,dc=mydomain,dc=edu Of course I could perform that query with no need of one file, but I need to get "legajo" from around 800 users so it would be nice to be able to use "-f file". I cannot do something like a "loop for" because it would ask me every time the Manager password. Am I doing something wrong or is a ldap bug? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 4

how to install ash on CentOS 5.4?
by Rudi Ahlers 02 Dec '09

02 Dec '09

Hi, Does anyone know if it's possible to install ash on CentOS 5.4, or just CentOS 5, for that matter? I'm trying to install OpenQRM which requires ash, but ash doesn't exist in the repositories. rpmfind.net als only has an older version listed, for CentOS 4 http://rpmfind.net/linux/rpm2html/search.php?query=ash&submit=Search+...&sy… dag wier's repository also doesn't have it. And google didn't yield any results for CentOS 5.4. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 3

Re: [CentOS] Inquiry:How to compare two files but not in line-by-line basis?
by hadi motamedi 02 Dec '09

02 Dec '09

Thank you very much for your reply . This code actually solved my problem and returned exact matches between the two files (irrespective of their location in the files) . As I understood , it will list each data showing to which file it belongs (or it is common to both files) . It is really what I wanted . Sincerely Yours On Wed, Dec 2, 2009 at 9:42 AM, Simon Banton <centos(a)web.org.uk> wrote: > At 08:54 +0000 2/12/09, hadi motamedi wrote: > >Dear All > >Can you please do me favor and let me know how can I compare two > >files but not in line-by-line basis on my CentOS server ? I mean say > >row#1 in file1 has the same data as say row#5 in file2 , but the > >comm compares them in line-by-line basis that is not intended . It > >seems that the diff cannot do the job as well > > This'll show you which lines are common to both files, and for the > ones that aren't which file they're in. > > perl -MData::Dumper -le 'while(<>) {chomp; push @{$s->{"$_"}}, > $ARGV}; END{ print Dumper($s) }' file1 file2 > > ... someone will be along shortly with a more elegant method. > > HTH > > S. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

2 2

best practises for avoiding to write passwords in shell scripts (example sqlplus from Oracle)
by Sven Aluoor 02 Dec '09

02 Dec '09

Hi folks I have here a CentOS box where i need to setup cronjob (with session to remote Oracle instance). On the remote DB i have no access, expect limited user. How to avoid putting passwords in shell scripts? The solution doesn't need to be perfect, only better than plain text passwords in scripts. Mostly remote host only support password authentication (no certificates and so on). cheers Sven

4 4

send existing root email to another user
by Lists 02 Dec '09

02 Dec '09

Hi all, I'm running Centos 5.4 I have a pile of emails in my root users /var/spool/mail/root file I need to send this all to another address (preferrably external but local would possibly do) I have searched a lot but can't find any way to do this. I have set it so future emails get forwarded to my external address but I also need to shift the existing emails. Thanks Kate

10 17

Startup script issues
by Robert Bielik 02 Dec '09

02 Dec '09

I'm converting Ubuntu startup scripts to work on CentOS (5.3), and I'm having trouble finding out how to start a daemon in a certain directory? For Ubuntu, start-stop-daemon has the option -d to set the working directory. TIA /Rob

3 5

centos-release srpm
by Shad L. Lords 02 Dec '09

02 Dec '09

Back on Oct 31st Karanbir said he would take care of the missing centos-release srpm. It still hasn't shown up on any of the mirrors. Is this ever going to be fixed? -Shad

2 2

/etc/cron.weekly/99-raid-check
by Farkas Levente 02 Dec '09

02 Dec '09

hi, it's been a few weeks since rhel/centos 5.4 released and there were many discussion about this new "feature" the weekly raid partition check. we've got a lot's of server with raid1 system and i already try to configure them not to send these messages, but i'm not able ie. i already add to the SKIP_DEVS all of my swap partitions (since i read it on linux-kernel list that there can be mismatch_cnt even though i still not understand why?). but even the data partitions (ie. all of my servers all raid1 partitions) produce this error (ie. ther mismatch_cnt is never 0 at the weekend). and this cause all of my raid1 partitions are rebuild during the weekend. and i don't like it:-( so my questions: - is it a real bug in the raid1 system? - is it a real bug in my disk which runs raid (not really believe since it's dozens of servers)? - the /etc/cron.weekly/99-raid-check is wrong in rhel/centos-5.4? or what's the problem? can someone enlighten me? thanks in advance. regards. -- Levente "Si vis pacem para bellum!"

9 10

OT: iscsi target bind to two addresses?
by Gordon McLellan 02 Dec '09

02 Dec '09

Does anyone know off hand how to bind iscsi enterprise target to two distinct addresses. Lets say I have a machine that has a bunch of interfaces on it, with different subnets. Rather than have ietd broadcast itself on all interfaces (the default), I would like to limit it to only two interfaces. I have edited the init.d startup script with --address x.x.x.x which works, but I tried using the --address argument twice, and the second time is ignored. I also tried x.x.x.x,y.y.y.y which also failed, second address was ignored. I'm thinking I could use ip tables to block ietd's ports on the unwanted interfaces but that seems like overkill. Thanks - Gordon

2 2

Re: [CentOS] NFS new security requirements?
by Mike Yates 01 Dec '09

01 Dec '09

Hi James Please reply to me as well as the list as I only get the digest. You wrote > What is the contents of /etc/exports on 'hs8' ? at present:- #/data 172.26.0.6(rw,no_root_squash) /data hs6(rw,sync,mp,no_root_squash,sec=none) /backup 172.26.0.6(rw,sync,mp,no_root_squash) > What happens if you restart rpc.mountd on 'hs8' ? I've done this many times as I try different exports options:- [root@hs8 ~]# /etc/init.d/nfs restart Shutting down NFS mountd: [ OK ] Shutting down NFS daemon: [ OK ] Shutting down NFS quotas: [ OK ] Shutting down NFS services: [ OK ] Starting NFS services: [ OK ] Starting NFS quotas: [ OK ] Starting NFS daemon: [ OK ] Starting NFS mountd: [ OK ] [root@hs8 ~]# vi msg SeLinux is disabled. Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10098/Tue Dec 1 03:06:27 2009 Known viruses: 660899.

2 2

ip6tables state matching
by Shunsuke Otanis 01 Dec '09

01 Dec '09

Hi, I am having problems adding a stateful inspection rule with ip6tables on CentOS4.5. #ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT That's what I am trying to do, but #ip6tables: No chain/target/match by that name. I have been googling but unable to solve the problem. any ideas?

3 2

Re: [CentOS] Unable to share directory via Samba?
by Per Qvindesland 01 Dec '09

01 Dec '09

Hi What does testparm give you? Regards Per At Tuesday, 01-12-2009 on 10:05 "James Bensley" wrote: So I went to System > Administration > Server Settings > Samba and added a folder to share and initially set it to guest access to get things going. I couldn't access this one and only share on this server with guest access from either my Windows laptop (XP Pro SP3) or a Leopard server (10.5.8) so I changed the settings to use user authentication and added my local user details (this is a stand alone file server with one user and the root user running CentOS 5.4). I made sure I hadn't put the entries in iptables incorrect by stopping iptables (sudo /etc/init.d/iptables stop, which executed just fine). SELinux kept popping up so I disabled that and restarted the server also. So now with no iptables nor SELinux enabled flicking between guest and user access I still can't access the share (I have also tried authenticating as root to no avail), my Windows and Mac test machines are erroring out saying they don't have permissions to access the share (I am an administrator on both machines so its not a local permissions issue). There are no firewall restrictions between my test machines and the CentOS server as I would even get prompted for authentication so that's not a problem and my test machines work fine because I can mount smb shares on other files servers in the same subnet as the CentOS server, what's going on? Ideas are welcome! Thanks for reading... -- Regards, James ;) Pablo Picasso - "Computers are useless. They can only give you answers." - http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] Docx format ?
by MHR 01 Dec '09

01 Dec '09

On Fri, Nov 27, 2009 at 5:37 AM, Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> wrote: > > So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS > and OOO teams! <RBFG> Thanks for the laugh, Sorin! mhr

3 2

Change system-wide default configuration for FF and OO with /etc/skel
by Niki Kovacs 01 Dec '09

01 Dec '09

Hi, I'm using a heavily tweaked CentOS 5.4 for desktop installs (here's what it looks like: http://www.microlinux.fr/captures.html) For every app I install, I try to configure a sensible default configuration system-wide for all users. For example, once I found a nice configuration for XMMS (default skin, loads of plugins, orange On Screen Display in a nice font, etcetera), I put my whole ~/.xmms in /etc/skel, so that every new user on the system will have the same default configuration. I have a script which does that for most of the applications I install for users. Even my GNOME desktop is heavily tweaked, and similarly, there's a default /etc/skel/.gconf for this. Now I have two annoyances remaining: Firefox and OpenOffice.org. When installing both of these (Firefox from the CentOS repos, OpenOffice.org from the RPMS contained in openoffice.org's tarball), the default configuration for each one (in ~/.mozilla and ~/.openoffice.org) takes no less than 3 MB, which I find a bit puzzling. Since I keep all my default configurations in an SVN tree, I find this a bit heavy. For Firefox, I only change a couple of options (like "Close download manager after finishing downloading" and "always ask where to store a file"). Similarly, for OpenOffice.org, I change things like auto-completion (so users won't call me on a sunday morning asking "Why does it try to finish my sentences?"). I guess the "real" configuration must be some small plain text file. But then, where? Is there a way not to upload the whole 3 MB of configuration? Cheers, Niki

3 4

Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.
by Billy Huddleston 01 Dec '09

01 Dec '09

I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E controller. I've googled all over the place and found a few different drivers for RHEL5 for it.. and tried a few of them.. Some will load, some complain that this isn't the correct version.. non of them work when it comes to showing Hard Drivers in the partition manager. The machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated. Thanks, Billy

9 26

timekeeping on VM - ntpd running
by Jonathan Garden 01 Dec '09

01 Dec '09

This is really stupid question. But referring to: http://lists.centos.org/pipermail/centos/2009-October/083791.html I don't see any line related to ntpd in my /var/log/messages . Do I need to turn-on ntpd for timekeeping on VMs? Some people say not to use ntpd on VMs for timekeeping or is it ntpdate cron job? Can someone please elaborate on this? Thanks, Jonathan.

3 3

Repository for clean and safe installation of python2.6 (and other python-software)
by Bernhard Gschaider 01 Dec '09

01 Dec '09

Hi! I want to test some software on my CentOS 5 machine that is not too happy with the system python (2.4). So when I install a python to my machines I want it to be a) clean: in other words it should be a RPM b) safe: it should not remove the system-python (in order not to break the system-scripts in subtle ways) but be accessible for instance as python2.6 (while python would still be python2.4) I've looked around (even other places than the usual suspects RPMforge and EPEL) for repositories that could have such packages. Before I start rolling my own RPMs: is anyone aware of a repository that has such packages? (an added bonus would be if it had RPMs of PyQt4, I didn't find those for Centos or RHEL, too) Bernhard

2 3

NFS new security requirements?
by Mike Yates 01 Dec '09

01 Dec '09

Hi I've suddenly lost access to some permanent cross-server shares. I think this was following the Nov 5 new kernel, rather than the Centos version upgrade. I don't see any difference to man mount.nfs I have:- [root@hs6 ~]# mount hs8:/data /sysback/hs8-data -v mount: no type was given - I'll assume nfs because of the colon mount: trying 172.26.0.8 prog 100003 vers 3 prot tcp port 2049 mount: trying 172.26.0.8 prog 100005 vers 3 prot udp port 735 mount: hs8:/data failed, reason given by server: Permission denied Yet on hs8 the log shows:- Nov 29 12:47:52 hs8 mountd[2255]: authenticated mount request from 172.26.0.6:617 for /data (/data) No internal permissions have changed. ' Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10094/Mon Nov 30 11:45:20 2009 Known viruses: 660218.

2 1

NetworkManager constantly overwriting /etc/resolve.conf - how to disable?
by Rudi Ahlers 01 Dec '09

01 Dec '09

Hi all, I have a CentOS 5.4 server-only installation, i.e. no X installed, and for some odd reason /etc/resolve.conf gets overwritten by NetworkManager on a constant basis. I haven't been able to track down how often, but I think it's on the hour, or something. This is the conents of the file right now: # Generated by NetworkManager # No nameservers found; try putting DNS servers into your # ifcfg files in /etc/sysconfig/network-scripts like so: # # DNS1=xxx.xxx.xxx.xxx # DNS2=xxx.xxx.xxx.xxx # DOMAIN=lab.foo.com bar.foo.com So, I change it to the following: nameserver 192.168.1.254, save it, and all network functions work fine. But, later on it get's changed again. Running "system-config-network", I can see that the nameserver that I have specified is in there, yet it doesn't show up in /etc/resolve.conf. I have searched a bit on google, but all the results reveal how to use NetworkManager to setup the nameservers, but now how it get's set automatically. Why does this happen, and how do I stop it from happening? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

8 13

Bnid Dynamic Update not returnnig latest update
by Joseph L. Casale 30 Nov '09

30 Nov '09

I have a zone that has several hosts update their ip with Dynamic DNS updates. This morning a client had updated its ip, but bind wasn't returning the new ip when queried until I restarted the daemon? Google hasn't yielded anything useful as I am prolly missing the boat with my search criteria. Anyone got any clues/pointers about this issue? Thanks, jlc

2 3

CentOS 5 and DRPM
by Janez Kosmrlj 30 Nov '09

30 Nov '09

Has anybody successfully implemented DRPMs on centos 5.x? I searched the net and I found a few indications that it is possible, but there is very little info how to do it. Just to be clear. With DRPMs i mean deltaRPMs. And with implementation i mean What yum plugins are necessary and what has to be done on the yum repository to make it work. BR Janez

4 8

AIDE or OSSEC on CentOS 5.4 x86_64?
by David McGuffey 30 Nov '09

30 Nov '09

Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade through to determine if they are legit or not. If that is all that AIDE can do, then it is not "manageable." Seems to me that any IDS must be tied to the yum update process so that one is not dealing with hundreds/thousands of changes that were brought in by a yum update that I choose to apply. Is OSSEC any less noisy? DaveM

9 11

Best way to secure apache web root
by Stephen Nelson-Smith 30 Nov '09

30 Nov '09

I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to implement this? I am thinking: chown -R root:apache /var/www/html chmod -R 0750 /var/www/html chown apache:apache for where need to write Is there a better way? S.

4 4

startssl and CA autority
by fakessh 30 Nov '09

30 Nov '09

> hi all > > hi postfix list > > I worked all day to develop my certificates > with certificates free of startssl > > I based this document > http://translate.google.fr/translate?js=y&prev=_t&hl=fr&ie=UTF-8&u=http%3A%… > > I realized correctly signed certificates > > I read in the doc startssl the need to import this document among the > certificates > to import the document https://www.startssl.com/certs/sub.class1.client.ca.pem > > how to incorporate the certificates in postfix? > > > thanks for all your feedback > > thanks all your > > thanks >

2 1

again, nic driver order
by Gordon McLellan 30 Nov '09

30 Nov '09

I have two servers with identical hardware ... TYAN i3210w system boards with dual intel gigabit interfaces, and a PCI intel gigabit nic. I'm running Centos 5.4, x86_64, 2.6.18-164.6.1.el5 Every other time I reboot, the nics initialize in a different order. anaconda had setup /etc/modprobe.conf with alias lines for the cards: alias eth0 e1000 alias eth1 e1000e alias eth2 e1000e However, introducing the bonding driver into the mix seems to have thrown a wrench in the works. alias bond0 bonding options bond0 miimon=80 mode=5 #or something like that, can't get to the machine right now - no console and the network is down So, I read about the ifcfg options and try assigning each config script an HWADDR line. after rebooting, /var/log/messages announces that hardware address for eth1 does not match, skipping ... same for eth2 Reading the archives seems to indicate modprobe.conf doesn't do much and is made obsolete by udev, and that hwaddr is discouraged because it's a band-aid. The archives seem to suggest fiddling with udev to be the answer. So I modify /etc/udev/rules.d/60-net (or something) and add a few rules found in an ancient example (those aren't my mac addresses): KERNEL=="eth?", SYSFS{address}=="00:37:e9:17:64:af", NAME="eth0" # MAC of first NIC in lowercase KERNEL=="eth?", SYSFS{address}=="00:21:e9:17:64:b5", NAME="eth1" # MAC of second NIC in lowercase Now, all three network cards get assigned as eth0! eth1 and eth2 are no longer found. The pci-express nics (onboard) get detected first, and the pci nic is last, so it ends up "owning" the eth0 alias. I don't really care which alias gets assigned to which nic, but I want that assignment to be constant. All suggestions are appreciated! Gordon

6 17

CentOS-announce Digest, Vol 57, Issue 12
by centos-announce-request＠centos.org 29 Nov '09

29 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update (Karanbir Singh) 2. CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update (Karanbir Singh) 3. CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update (Karanbir Singh) 4. CEBA-2009:1600 CentOS 5 i386 kexec-tools Update (Karanbir Singh) 5. CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update (Karanbir Singh) 6. CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update (Karanbir Singh) 7. CEBA-2009:1612 CentOS 5 x86_64 openswan Update (Karanbir Singh) 8. CEBA-2009:1612 CentOS 5 i386 openswan Update (Karanbir Singh) 9. CEBA-2009:1611 CentOS 5 i386 xterm Update (Karanbir Singh) 10. CEBA-2009:1611 CentOS 5 x86_64 xterm Update (Karanbir Singh) 11. CEBA-2009:1610 CentOS 5 i386 metacity Update (Karanbir Singh) 12. CEBA-2009:1610 CentOS 5 x86_64 metacity Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 27 Nov 2009 23:09:54 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230954.GA20939(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 25503455a83968e82bddb5bad50b3b36 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 24abb566a75e1186b8cc47ac3b883808 kdelibs-3.5.4-25.el5.centos.1.x86_64.rpm 4f29862576be6cd8f777c3fa02b39b6f kdelibs-apidocs-3.5.4-25.el5.centos.1.x86_64.rpm ef5c485ca5cd72aac5f4d11015a2d946 kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm a6ec2f3c18bb9f659f847058411d4c1b kdelibs-devel-3.5.4-25.el5.centos.1.x86_64.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 27 Nov 2009 23:09:53 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230953.GA20924(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 69f420e91ae49efb936b7ac6bafc4447 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 9e10d4c1ba5770f61a9a415d302663f7 kdelibs-apidocs-3.5.4-25.el5.centos.1.i386.rpm 2d16f3725afc68fd2256b2d0b62426bb kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21015(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 2b21645feba164d62f646dc3eeeb4a06 kexec-tools-1.102pre-77.el5.3.x86_64.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 i386 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21000(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 01fb1c1596d2f18e3922d9d1bf2c3c0c kexec-tools-1.102pre-77.el5.3.i386.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21084(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e6335c49b8f3329e402e5d3e53611897 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21099(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 292e68d92156b38cc296d6043b2f0215 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 27 Nov 2009 23:17:10 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 x86_64 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231710.GA21199(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c2888e684a30c8f7f015256fb8a7bba6 openswan-2.6.21-5.el5_4.1.x86_64.rpm f04a532ddf2eb134b597a775f7bdfc24 openswan-doc-2.6.21-5.el5_4.1.x86_64.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 27 Nov 2009 23:17:09 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 i386 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231709.GA21184(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c520e1798d11cd5ac40ae47cce9fa1a5 openswan-2.6.21-5.el5_4.1.i386.rpm d38b53762fea5d27a8ae40b8e2d28768 openswan-doc-2.6.21-5.el5_4.1.i386.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 i386 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21261(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: eb5d68779ddaecc22ddb519d83915979 xterm-215-8.el5_4.1.i386.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 x86_64 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21276(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: be2bf3c90ab6ea34ebe31351da16f78d xterm-215-8.el5_4.1.x86_64.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 i386 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21345(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: bc0cb5c70d74cf7a6965afc0dce1d53e metacity-2.16.0-12.el5_4.1.i386.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 x86_64 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21360(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a62304689380340ad45682704f2cbdd6 metacity-2.16.0-12.el5_4.1.i386.rpm 43f8ba25d93dd969d7bc7c5aa82093e8 metacity-2.16.0-12.el5_4.1.x86_64.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 57, Issue 12 ***********************************************

1 0

SNAT question
by Peter Peltonen 28 Nov '09

28 Nov '09

Hi, I am unable to get my LAN masqueraded using SNAT with CentOS 5.3 and iptables. I have the following setup: eth0: connects to internet with static public IP 1.2.3.1 (obscured here for privacy) eth1: connects to DMZ with static public IP 1.2.3.2 (obscured here for privacy) eth2: connects to LAN with static private IP 192.168.0.1 Traffic to hosts in the DMZ/Internet through eth0/1 work fine. I tried masqueradig the LAN with following: ptables -A FORWARD -i eth2 -j ACCEPT iptables -A FORWARD -o eth2 -j ACCEPT iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 1.2.3.1 After this I can ssh to a server in the Internet from the LAN using the server's IP address but not its name. The w command on the server tells me that my address has not been masqueraded (its 192.168.0.2, the LAN client's private IP). What am I doing wrong? Best, Peter

3 5

read only sftp access
by Andrei F 28 Nov '09

28 Nov '09

Hi, I'm trying to setup read-only SFTP repo. The directory that I'm planning to make available via sftp needs to have only read-only access. My issue is that this specific directory is already available for read & write access but under different credentials. When I try to login via my read-only account, openssh spits out an error about incorrect permissions. Any idea how can I share the same directory via sftp under two different usernames under the same filesystem permissions?

3 2

IPTABLES and Hi-Risk blocking
by James B. Byrne 28 Nov '09

28 Nov '09

We are considering whether or not to block internal access to social networking and private entertainment web sites. This not a policy decision as of yet, just an exploratory exercise. Our gateways run CentOS-5.4 and use iptables to enforce firewall rules. The information that we wish to determine is whether or not it is feasible to block sites such as facebook, youtube, twitter, etc. using iptables. Is there a superior method? Does there exist already a generally accepted utility or method for accomplishing this? At the present time we only block outgoing traffic for a handful of internal hosts that should never have any reason to generate traffic destined outside the lan. But, now we are advised by some authorities that facebook and similar sites are considered security risks to hosts that are used to access them. Without debating the merits of such claims, how would one proceed to block internal network access to specific domain names using CentOS? Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 5

PHP updates
by Craig White 28 Nov '09

28 Nov '09

For the 2 threads going on about PHP 5.2/5.3... CentOS tracks upstream whose version is... php-5.1.6-23.2.el5_3 If you want something newer, you have to go off the beaten path. try this...(as root) wget http://dev.centos.org/centos/5/CentOS-Testing.repo mv CentOS-Testing.repo /etc/yum.repos.d yum --enablerepo=c5-testing check-update and this would allow to update to version 5.2.9-2.el5.centos if you then... yum --enablerepo=c5-testing update php and if enough people actually convinced the developers that 5.2.9-2.el5.centos were feasible, then they would probably move it into the 'Extras' repository. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

8 8

Xen 3.4.1/3.4.2 and newer libvirt for Centos 5.4
by For＠ll 28 Nov '09

28 Nov '09

Hi, Is ther any repo wher I find xen 3.4.1 or 3.4.2 and newer libvirt for Centos 5.4 i386. For@ll

2 1

Re: [CentOS] Docx format ?
by Sorin Srbu 27 Nov '09

27 Nov '09

>-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf >Of Sorin Srbu >Sent: Friday, November 27, 2009 9:22 AM >To: 'CentOS mailing list' >Subject: Re: [CentOS] Docx format ? > >>> What about Powerpoint presentations, ie .pptx-files? Do they look anywhere >>> near the original look when opened in MS Office? >>> >>No clue - haven't run into one of those yet. >> >Anyway, I'll continue to look into OOO and pptx. Downloaded and installed OOO3.1 on a CentOS 5.4 i386 I had here. After some initial foul ups on my part (had OOO2 already installed, and had to first uninstall the older one and then do a forced manual rpm-install of OOO3.1), this is what I've found. I got a pptx-file from my boss with pictures and formatting and whatnot. It opened fine in CentOS. Some formatting was plain lost, but the pictures were all there, as far as I can tell. Some graphics, like arrows and such did not get through and looked like something from the 80s block graphics era. Some text got printed over other parts of the text, however I've a inkling this might be due to the screen size maybe? I also opened the same pptx with OOO3.1 on my WinXP-machine, and got a blank white screen, in slide show-mode. So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS and OOO teams! -- /Sorin

1 0

[OT] - Estrutura de armazenamento de uma grande quantidade de arquivos
by "Fábio Jr." 27 Nov '09

27 Nov '09

Olá pessoal, Desculpem o off-topic, mas não sabia onde postar minha dúvida. Se alguém tiver uma sugestão de lista para postar essa dúvida eu agradeço. O sistema do qual administro os servidores, possui uma funcionalidade que é exibição de imagens cadastradas pelos usuários. Estas imagens são armazenadas atualmente em um único diretório, e são gravadas com um número (ex.:123456.jpg), em um storage rodando centOS.(até q não é tão off-topic assim). O problema é que a quantidade de imagens já passa de 4 milhões de arquivos. Cada imagem antes de ser armazenada, é tratada, e salva em 3 tamanhos diferentes. Ou seja, existem 3 cópias de cada arquivos (4 milhões / 3). Espaço em disco não é problema, já que estas imagens são pequenas. O problema maior é a quantidade mesmo, e a organização. A medida que o numero de arquivos aumenta, fica pior para o SO buscar essa foto. Pra piorar a situação, os servidores de aplicação montam via nfs este storage para buscar os arquivos. Finalmente, o que venho pedir a lista seriam sugestões de como melhorar a indexação/organização destes arquivos. Já pensei em utilizar armazenamento distribuído (SAN, cloud, GlusterFS), organização por pastas com AliasMatch do apache para recuperá-las depois e armazenamento em banco de dados. Qualquer sugestão é bem vinda. Obrigado. []s -- Fábio da Silva Júnior - fjuniorlista(a)gmail.com ----- http://fabioojunior.wordpress.com -----

2 2

Amavisd and ClamAV
by Tony Molloy 27 Nov '09

27 Nov '09

Hi, I want to move my mail server from sendmail to postfix over christmas. I've got a test server running with the following: postfix dovecot postgrey amavisd-new clamav spamassassin I've followed the howto's on the wiki <http://wiki.centos.org/HowTos> with the exception that I installed amavisd-new and clamav from the EPEL repo rather than rpmforge. Things work OK with the exception of clamav. When I start clamav I get the following error. [root@newgoext ~]# service clamd.amavisd start Starting clamd.amavisd: ERROR: Missing argument for option at line 2 ERROR: Can't open/parse the config file /etc/clamd.d/amavisd.conf [FAILED] As this is a test server I'v set selinux to permissive so it doesn't look like a selinux problem. Thanks, Tony -- Dept. of Comp. Sci. University of Limerick.

2 2

my mail is refusing messages
by Nelson Gonzaga 27 Nov '09

27 Nov '09

Hi there, I trying to send e-mail using this: mail -s "maillog" ngonzaga(a)yahoo.com < /var/log/maillog but sendmail refused and I don't know why, see my maillog: Nov 19 14:31:33 servertdoc sendmail[11258]: nAJGVXXi011258: from=root, size=353085, class=0, nrcpts=1, msgid=<200911191631.nAJGVXXi011258(a)servertdoc.toshiba.fmg>, relay=root@localhost Nov 19 14:31:33 servertdoc sendmail[11258]: nAJGVXXi011258: to=ngonzaga(a)yahoo.com, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=383085, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1] There is some wrong setup, what can be? ____________________________________________________________________________________ Veja quais são os assuntos do momento no Yahoo! +Buscados http://br.maisbuscados.yahoo.com

3 3

OT: Using route metrics under dhcpd.conf
by carlopmart 27 Nov '09

27 Nov '09

Hi all, Somebody knows how can I assign metric to a static router under dhcpd.conf? Many thanks... -- CL Martinez carlopmart {at} gmail {d0t} com

1 0

Re: [CentOS] Docx format ?
by mark 27 Nov '09

27 Nov '09

Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf >> Of m.roth(a)5-cent.us >> Sent: Wednesday, November 25, 2009 7:22 PM >> Niki Kovacs wrote: >>> Roger asked: >>>> Is there any way I can read a .docx file on my CentOS desktop ? >>>> >>> Open Office 3 will do it. >> Yep, as well as .xlsx > > What about Powerpoint presentations, ie .pptx-files? Do they look anywhere > near the original look when opened in MS Office? > No clue - haven't run into one of those yet. > I'm looking into setting up a public computer in our seminar room, running > CentOS on an old door-stopper I had handy; a P3/500 with barely 500MB RAM. > Barely, he says. "Barely".... mark, remembering the hot new ->30MB<- h/d his bosses gave him in '89 as a holiday present > > ------------------------------------------------------------------------ > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos -- "Think of the elves as being like the CIA: whether or not they're on your side, you don't really want to be noticed by them" - Sean Mead (?), Windycon, 2002

2 1

Docx format ?
by Niki Kovacs 27 Nov '09

27 Nov '09

Hi, Is there any way I can read a .docx file on my CentOS desktop ? Cheers, Niki

12 15

META: Somebody please unsubscribe this chap until he fixes his problem
by Christopher Chan 27 Nov '09

27 Nov '09

armando(a)mail.bpa.cu The original message was received at Thu, 26 Nov 2009 08:39:46 -0500 from faraon.cgr.bpa.cu [172.16.24.98] ----- The following addresses had permanent fatal errors ----- <armando(a)mail.bpa.cu> (reason: 554 5.4.6 Too many hops) ----- Transcript of session follows ----- 554 5.4.6 Too many hops 27 (25 max): from <christopher.chan(a)bradbury.edu.hk> via localhost, to <armando(a)mail.bpa.cu> ------------------------------------------------------------------------ Reporting-MTA: dns; simbad.bpa.cu Arrival-Date: Thu, 26 Nov 2009 08:39:46 -0500 Final-Recipient: RFC822; armando(a)mail.bpa.cu Action: failed Status: 5.4.6 Diagnostic-Code: SMTP; 554 5.4.6 Too many hops Last-Attempt-Date: Thu, 26 Nov 2009 09:41:47 -0500 ------------------------------------------------------------------------ Return-Path: <christopher.chan(a)bradbury.edu.hk> Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAQDdW8U006127 for <armando(a)mail.bpa.cu>; Thu, 26 Nov 2009 08:39:46 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534233.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 23:11:46 -0500 X-Spam-Processed: bpa.cu, Mon, 23 Nov 2009 23:11:46 -0500 (not processed: message from trusted or authenticated source) X-Rcpt-To: armando(a)mail.bpa.cu X-MDRcpt-To: armando(a)mail.bpa.cu X-MDRemoteIP: 172.16.24.150 X-Return-Path: christopher.chan(a)bradbury.edu.hk X-Envelope-From: christopher.chan(a)bradbury.edu.hk X-MDaemon-Deliver-To: armando(a)mail.bpa.cu Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO4Bf8U029072 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 23:11:42 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534227.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 23:06:45 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO46h8U029043 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 23:06:43 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534220.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 23:01:40 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO41d8U029021 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 23:01:39 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534213.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:56:40 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3uc8U028988 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:56:38 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534210.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:51:50 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3ph8U028960 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:51:48 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534205.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:47:00 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3kk8U028931 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:46:59 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534194.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:41:55 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3fk8U028907 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:41:51 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534188.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:36:55 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3ak8U028880 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:36:51 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534181.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:32:05 -0500 Received: from bpa.cu (faraon.cgr.bpa.cu [172.16.24.98]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3Vk8U028853 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:32:02 -0500 Received: from simbad.bpa.cu ([172.16.24.150]) by bpa.cu (bpa.cu) (MDaemon PRO v9.6.6) with ESMTP id md50002534174.msg for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:30:25 -0500 Received: from mail2.ceniai.inf.cu (mail2.ceniai.inf.cu [169.158.128.50]) by simbad.bpa.cu (8.12.8/8.12.8) with ESMTP id nAO3UL8U028843 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:30:21 -0500 Received: from localhost (localhost [127.0.0.1]) by mail2.ceniai.inf.cu (Postfix) with ESMTP id 1D81D2C90AC for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:30:24 -0500 (EST) X-Virus-Scanned: amavisd-new at mail2.ceniai.inf.cu Received: from mail2.ceniai.inf.cu ([127.0.0.1]) by localhost (mail2.ceniai.inf.cu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FT50aFb1BMO for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:30:18 -0500 (EST) Received: from mail.centos.org (mail.centos.org [72.26.200.202]) by mail2.ceniai.inf.cu (Postfix) with ESMTP id DBEC12C90A7 for <armando(a)mail.bpa.cu>; Mon, 23 Nov 2009 22:30:16 -0500 (EST) Received: from mail.centos.org (voxeldev.centos.org [127.0.0.1]) by mail.centos.org (Postfix) with ESMTP id 28D216F774; Mon, 23 Nov 2009 22:29:24 -0500 (EST) X-Original-To: centos(a)centos.org Delivered-To: centos(a)centos.org Received: from mail.bradbury.edu.hk (ipvpn098242.netvigator.com [203.198.207.242]) by mail.centos.org (Postfix) with ESMTP id 80F3A6F774 for <centos(a)centos.org>; Mon, 23 Nov 2009 22:29:19 -0500 (EST) Received: from [192.168.9.5] (ipvpn098241.netvigator.com [203.198.207.241]) by mail.bradbury.edu.hk (Postfix) with ESMTPA id B12514795C for <centos(a)centos.org>; Tue, 24 Nov 2009 11:29:18 +0800 (HKT)

1 0

SAMBA vs NFS
by Alan McKay 27 Nov '09

27 Nov '09

Hey folks, A coworker wants to share drives between CentOS systems via SAMBA, which sort of seems pretty counter intuitive to me. But he says he's had troubles in the past with NFS. He was sort of short on details, but something about NFS not being reliable unless you enable NFS locking, but when you do that, you can end up in situations where if the server crashes it can cause the clients to hang too. I've used NFS for years in other jobs and don't recall issues like this. Thoughts? thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

6 7

GGI or Server Based Proxy Recommendations
by James Bensley 26 Nov '09

26 Nov '09

Hey List, Can anyone recommend any software like that at http://proxify.co.uk/ for me to install on a server for use as a http proxy? TIA, -- Regards, James ;)

4 5

rndc start fails with "rndc: connect failed: connection refused"
by Hugh E Cruickshank 26 Nov '09

26 Nov '09

CentOS 4.8, BIND 9.2.4 Hi All: I have a rather annoying problem with rndc which I have not been able to resolve despite much searching and many attempts to correct. When making changes to our DNS entries I have tried to use the following procedures: 1. Flush the cache buffers: rndc flush 2. Stop named: rndc stop 3. Delete the journal files: rm *.jnl 4. Edit the forward and/or reverse zone files as necessary. 5. Restart named: rndc start Everything works fine until the last command which fails with: rndc: connect failed: connection refused I can get around this by using "service named start" but I should not have to do this. Has anyone encountered something similar and can pass on some words of wisdom? TIA Regards, Hugh -- Hugh E Cruickshank, Forward Software, www.forward-software.com

8 16

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss