- Discuss - lists.centos.org

IPSec VPN Under CentOS 5.4
by João Salvatti 22 Oct '09

22 Oct '09

Hi List, What's the best way to create a VPN (IPSec) client-to-site under CentOS 5.4? Thanks in advance. -- João Salvatti Graduated in Computer Science Federal University of Para - UFPA - Brazil E-Mail: salvatti(a)gmail.com

7 8

Re: [CentOS] Security updates for Centos 5.3
by slchavarria＠iusacell.com.mx 22 Oct '09

22 Oct '09

I know too that yum - -security doesnt work on CentOS, so there is no way to install JUST security-updates ?? Best regards SLCC From: centos-request(a)centos.org To: centos(a)centos.org Date: 22/10/2009 11:04 a.m. Subject: CentOS Digest, Vol 57, Issue 22 Sent by: centos-bounces(a)centos.org Message: 3 Date: Wed, 21 Oct 2009 11:11:20 -0500 From: slchavarria(a)iusacell.com.mx Subject: [CentOS] Security updates for Centos 5.3 To: centos(a)centos.org Message-ID: <OF144F4736.2EB08B14-ON86257656.0058D70D-86257656.0056A92A(a)gruposalinas.com.mx> Content-Type: text/plain; charset="us-ascii" Hello, Someone knows which security updates i have to apply to a host with Centos 5.3 x_64. Thank you in advance and greetings SLCC ----------------------------------------- Este mensaje y cualquier archivo que se adjunte al mismo es propiedad de Grupo Iusacell y contiene informacion privada y privilegiada para uso exclusivo del destinatario. Si usted recibe esta comunicacion por error, no esta autorizado para copiar, retransmitir, utilizar o divulgar este mensaje ni los archivos adjuntos. En este caso por favor notifique inmediatamente al remitente por este mismo conducto. Gracias.

1 0

LDAP server, too many open files
by Jacob Bresciani 22 Oct '09

22 Oct '09

I've setup an LDAP server with a slave server on Centos 5.3 X86_64, replication works, most of the time client logins work fine but I'm starting to get a error I can't seem to eliminate, it's starting to cause login failures for users and I think it's causing other application failures when they try to auth against ldap. on the client side /var/log/messages shows Oct 22 08:53:23 client sshd[564]: nss_ldap: failed to bind to LDAP server ldap://ldap1: Can't contact LDAP server Oct 22 08:53:23 client sshd[564]: nss_ldap: reconnected to LDAP server ldap://ldap2 Oct 22 08:54:01 client ps: nss_ldap: failed to bind to LDAP server ldap://ldap1: Can't contact LDAP server Oct 22 08:54:01 client ps: nss_ldap: reconnected to LDAP server ldap://ldap2 Oct 22 08:54:03 client ls: nss_ldap: failed to bind to LDAP server ldap://ldap1: Can't contact LDAP server Oct 22 08:54:03 client ls: nss_ldap: reconnected to LDAP server ldap://ldap2 Oct 22 08:55:02 client ps: nss_ldap: failed to bind to LDAP server ldap://ldap1: Can't contact LDAP server Oct 22 08:55:02 client ps: nss_ldap: reconnected to LDAP server ldap://ldap2 on the server side I see Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.allow: Too many open files Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ hosts.deny: Too many open files ... ldap1 does nothing but ldap and I only have the x86_64 binaries installed. my slapd.conf file on the server looks like ###################################################### include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema allow bind_v2 pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args access to attrs=userPassword by self write by anonymous auth by dn.base="cn=domainadm,dc=domain,dc=local" write by dn.base="uid=ldapsync,ou=People,dc=domain,dc=local" read by * none access to * by self write by dn.base="cn=domainadm,dc=domain,dc=local" write by dn.base="uid=ldapsync,ou=People,dc=domain,dc=local" read by * read access to * by * read limits dn.exact="uid=ldapsync,ou=People,dc=domain,dc=local" size=unlimited time=unlimited database bdb suffix "dc=domain,dc=local" rootdn "cn=root,dc=domain,dc=local" rootpw {SSHA}YnnYasdadasdasdasdassd directory /var/lib/ldap # Indices to maintain for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub index uniqueMember eq,pres index entryCSN eq loglevel sync none logfile /var/log/ldap.log overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 ###################################################### ------------------------ Jacob Bresciani

2 2

CentOS-announce Digest, Vol 56, Issue 6
by centos-announce-request＠centos.org 22 Oct '09

22 Oct '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS-5.4 i386 and x86_64 (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 Oct 2009 02:44:07 +0530 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] Release for CentOS-5.4 i386 and x86_64 To: centos-announce(a)centos.org, distro(a)distrowatch.com Message-ID: <4ADF799F.9020100(a)centos.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed We are pleased to announce the immediate availability of CentOS-5.4 for i386 and x86_64 Architectures. CentOS-5.4 is based on the upstream release EL 5.4.0, and includes packages from all variants including Server and Client. All upstream repositories have been combined into one, to make it easier for end users to work with. And the option to further enable external repositories at install time is now available in the installer. This is just an announcement email, not the release notes. The Release Notes for CentOS-5.4 can be found on-line at : http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.4 and everyone is encouraged to look through them once. Also worth browsing through at the CentOS FAQ's at http://wiki.centos.org/FAQ +++++++++++++++++++++++ Upgrading from CentOS-5.3 ( or CentOS-5.0 / 5.1 / 5.2 ): If you are already running CentOS-5.3 or an older CentOS-5 distro, all you need to do is update your machine via yum by running : 'yum update' Running 'yum list updates' before doing the update is recommended, so you can get a list of packages that are going to be updated. To check you are indeed on CentOS-5.4, run : 'rpm -q centos-release' and that should return: 'centos-release-5-4.el5.centos.1' +++++++++++++++++++++++ LiveCD i386 For the first time, we are also releasing the i386 CentOS-5.4 LiveCD at the same time as the main distro. There will be a separate announcement with details of changes in the 5.4 LiveCD +++++++++++++++++++++++ LiveCD x86_64 Also for the first time, we now have a x86_64 CentOS LiveCD. This release includes support for both 64bit and 32bit user-space. However, due to size issues will only burn to a large capacity CD-r. There will be a separate announcement with details for the x86_64 LiveCD. +++++++++++++++++++++++ Downloading CentOS-5.4 for new installs: When possible, consider using torrents to run the downloads. Not only does it help the community and keeps mirrors from running up high bandwidth bills, in most cases you will find its also the fastest means to download the distro. There are present over three hundred people seeding CentOS-5 and its possible to get upto 100mbps downloads via these torrents. -- Via BitTorrent : CD: http://mirror.centos.org/centos/5.4/isos/i386/CentOS-5.4-i386-bin-1to6.torr… http://mirror.centos.org/centos/5.4/isos/x86_64/CentOS-5.4-x86_64-bin-1to7.… DVD: http://mirror.centos.org/centos/5.4/isos/i386/CentOS-5.4-i386-bin-DVD.torre… http://mirror.centos.org/centos/5.4/isos/x86_64/CentOS-5.4-x86_64-bin-DVD.t… sha1sum for these torrent files: a5ad269539be62873704ef916d4390ea4fc04b3f CentOS-5.4-i386-bin-1to6.torrent 44df26957569f272cd93c7cebeae7cb5e4ba056c CentOS-5.4-i386-bin-DVD.torrent 3c3ca34a47be07a91abf0264fc78b1ce68c18de6 CentOS-5.4-x86_64-bin-1to7.torrent 724b00c12baf09afc86d94ca8519a151b5cae850 CentOS-5.4-x86_64-bin-DVD.torrent -- Via direct download: Due to bandwidth considerations the CentOS Project does not publish ISOS directly from our network machines. However direct downloads are available from external mirrors over http, ftp and rsync, and a geoip based list is available at http://isoredirect.centos.org/centos/5/isos/ to give you the best predictable match ( and only lists mirrors that are updated already, so you don't need to waste time looking for a sync'd mirror ) Some mirrors also publish DVD images that can be downloaded directly. Refer to the mirrors list page at http://www.centos.org/mirrors for more details Mirrors that offer DVD's are clearly marked on the page. sha1sum for these ISOS: i386: 2c3e2d6ca38e3549d47d5f74529193ed68d838cc CentOS-5.4-i386-bin-1of6.iso 9f8b829bd7d39dec4c25d3f7815391323ea462d4 CentOS-5.4-i386-bin-2of6.iso aa9db29f2524894599a5d948b58593782da9adcc CentOS-5.4-i386-bin-3of6.iso 44d72f7b9f889e0278a1718061606b48d10975bf CentOS-5.4-i386-bin-4of6.iso 88ff6bd1abe194dc4b2d77d779dac28d914276bf CentOS-5.4-i386-bin-5of6.iso 0dd39bd0ca1420b78be630f2a1d0fa7301e00db4 CentOS-5.4-i386-bin-6of6.iso d2b36d3f017b2684ac920fab87aaf741bba16ca8 CentOS-5.4-i386-bin-DVD.iso f52e34da5570fd4eec0f3688c6f03c7686e8ad08 CentOS-5.4-i386-LiveCD.iso 94ddb89f24be9330efc2595a1ba76c4ce9aea22f CentOS-5.4-i386-netinstall.iso x86_64: 2a283f28adea32481b057bec0fcabba37b4e2d75 CentOS-5.4-x86_64-bin-1of7.iso aa5b7a5a03746024555a8aa4c17cdb1e51798480 CentOS-5.4-x86_64-bin-2of7.iso ab7c6e8ad67f426cfb046478f1669b3f8c925433 CentOS-5.4-x86_64-bin-3of7.iso 02e411338b6c693e483b152f72fe93fddfb9588e CentOS-5.4-x86_64-bin-4of7.iso a91ecff0ebb6e216ac96887e6e325f9c7b7eef32 CentOS-5.4-x86_64-bin-5of7.iso 9ab5f1d20cd81c3ebdc6a22d22e9dc7111646199 CentOS-5.4-x86_64-bin-6of7.iso 3b00f16ed097f2bd189395edde6834e33f73cdb4 CentOS-5.4-x86_64-bin-7of7.iso 9069eadfc3a8727ed7abe472effae5b9bbbda8a1 CentOS-5.4-x86_64-bin-DVD.iso da508b248ab2d18deb42e2ec0ec7061b1fbf4568 CentOS-5.4-x86_64-LiveCD.iso 98287aff19e8e4b4d19c5d714cc189fe08f38521 CentOS-5.4-x86_64-netinstall.iso +++++++++++++++++++++++ Outstanding Updates: Since upstream released their 5.4 media, a series of updates have been issued. All these pending updates for CentOS-5.4 will be released over the next 48 to 96 hours to be complete by Monday, 26th Oct 2009. Starting with 5.4, we will also have all fast-track rpms from upstream available in the fasttrack repository hosted at mirror.centos.org. This will start getting packages in the next few weeks, and also means that we will be able to move towards having a functional yum-security setup in place. Details on these will be posted by the 15th of Nov 2009. +++++++++++++++++++++++ Sources and Debuginfo packages: srpms and debuginfo packages are still making their way to the centos mirrors and should be online within the next few days. Most sources are already in place, while the debuginfos are only stating to get uploaded now. +++++++++++++++++++++++ Getting Help: The best place to start when looking for help with CentOS is at the wiki ( http://wiki.centos.org/GettingHelp ) which lists various options and communities who might be able to help. If you think there is a bug in the system, do report it at http://bugs.centos.org/ - but keep in mind that the bugs system is *not* a support mechanism. Some Friendly URL's : http://www.centos.org/ http://wiki.centos.org/ http://lists.centos.org/ http://bugs.centos.org/ irc://#centos@irc.freenode.net +++++++++++++++++++++++ A big thanks to everyone who contributed, including the translation teams, the qa team, the artwork team, the CentOS Developers and all the users out there. Enjoy this release, tell all your friends about it too! -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 56, Issue 6 **********************************************

2 1

CentOS-5.3 yum-priorites
by James B. Byrne 22 Oct '09

22 Oct '09

I visited http://wiki.centos.org/PackageManagement/Yum/Priorities which tells me to install the package yum-priorities available from extras. I try this and it fails. # yum install yum-priorities Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirror.csclub.uwaterloo.ca * base: mirror.csclub.uwaterloo.ca * extras: mirror.csclub.uwaterloo.ca * updates: mirror.csclub.uwaterloo.ca Excluding Packages from CentOS-5 - Base Finished Excluding Packages from CentOS-5 - Extras Finished Reducing rubyworks to included packages only Finished Excluding Packages from CentOS-5 - Updates Finished Setting up Install Process No package yum-priorities available. Nothing to do So, where has it gone? Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CentOS-5.3 yum-priorites
by James B. Byrne 22 Oct '09

22 Oct '09

I visited http://wiki.centos.org/PackageManagement/Yum/Priorities which tells me to install the package yum-priorities available from extras. I try this and it fails. # yum install yum-priorities Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirror.csclub.uwaterloo.ca * base: mirror.csclub.uwaterloo.ca * extras: mirror.csclub.uwaterloo.ca * updates: mirror.csclub.uwaterloo.ca Excluding Packages from CentOS-5 - Base Finished Excluding Packages from CentOS-5 - Extras Finished Reducing rubyworks to included packages only Finished Excluding Packages from CentOS-5 - Updates Finished Setting up Install Process No package yum-priorities available. Nothing to do So, where has it gone? Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Coincidence ? Well.... maybe
by Ron Loftin 22 Oct '09

22 Oct '09

http://www.theregister.co.uk/2009/10/22/win7_launch/ After you read the article, check out the comment about the timing of the CentOS 5.4 release and draw your own conclusions. ;> -- Ron Loftin reloftin(a)twcny.rr.com "God, root, what is difference ?" Piter from UserFriendly

1 0

New administrator and upgrading systems
by Jonathan Moore 22 Oct '09

22 Oct '09

Hi there folks. I've been watching the never ending "CentOS 5.4 OMG WHEN?" threads for the last few days / weeks and had a question. I'm pretty new to anything rpm based. I used Red Hat 9 back in college, but that's about it. Currently, I do have a few Cent OS servers and we're slowly migrating from Debian to CentOS for various reasons. Since 5.3 - 5.4 is going to be my first major upgrade, I had a simple question. WHEN it's actually released, and things are going normal, should I just continue doing "yum upgrade" as always and will eventually be on 5.4? I seem to recall something with Fedora where you had to install some kind of release package, etc (again.. this was back in 2003 - 2004 time) and was just curious. Simple google searches tell me "yes! just yum upgrade" but I wanted input from you guys, if you don't mind. Thanks, Jonathan

15 27

Upgrade to 5.4 with an existing XFS-filesystem
by Bernhard Gschaider 22 Oct '09

22 Oct '09

Hi! I've got a fileserver currently running under 5.3 with the /home-partition being an XFS-filesystem. I use the kmod-xfs from extras. It works great ;) Now: as I understand it from the release-notes the 5.4 kernel has XFS already built-in. Right? Or is it just a kmod-package ("technology preview") Now my question is: are there any recommendations for an upgrade-procedure? I mean, I can probably manage, but I'll want to minimize downtime Bernhard BTW: when doing "yum list updates" I don't see any "kernel*"-packages in the list. Is this because the last kernel from the 5.3-updates has the same build-numer (164 I think)? And is the 5.4-base-kernel the same as the latest 5.3-updates-kernel?

4 5

sendmail question
by Jerry Geis 22 Oct '09

22 Oct '09

Hi all, I have a local user account call "panel" on a machine. When I use the mail command to manually send email to the panel account it over 1 minute until that mail actually deposited in the mail account. What setting is that reduces this time? I changed /etc/sysconfig/sendmail the QUEUE=10s and that did not have any effect. Thanks Jerry

7 18

what else is missing in 5.4?
by Alan McKay 22 Oct '09

22 Oct '09

[root@alan centos]# du -sh 5.* 19G 5.3 14G 5.4 -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

3 3

EDAC Kernel Panic 2.6.9-78 and above
by Chris Miller 22 Oct '09

22 Oct '09

I've got a production system running CentOS 4 that was rock solid until I upgraded from 2.6.9-55 to 2.6.9-78.0.13 (now running 2.6.9-89.0.11). The system now crashes intermittently after a few weeks. I finally caught the panic message : EDAC MC0: INTERNAL ERROR: channel-b out of range (4 >= 4) Kernel panic - not syncing: MC0: Uncorrected Error Looking at the kernel changelog, I see that EDAC support was added for the Intel 5000 chipset in 2.6.9-68.20.EL which this server runs. I'm trying to determine if this is a potential memory issue, or is this related to some other hardware item. Also considering disabling EDAC in the kernel (is "noedac" a valid option?) as a last resort. I will run memtest86+ on the server as soon as possible to check the memory, just formulating my game plan if it's something else. Thoughts? Chris

6 6

Re: [CentOS] Missing yum-priorities in 5.4?
by Tony Molloy 22 Oct '09

22 Oct '09

On Thursday 22 October 2009 13:04:05 Sorin Srbu wrote: > >-----Original Message----- > >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > > Behalf > > >Of Morten Torstensen > >Sent: Thursday, October 22, 2009 12:37 PM > >To: CentOS mailing list > >Subject: [CentOS] Missing yum-priorities in 5.4? > > > >Is this missing on purpose? Function merged with another yum package? > >Or is it just missing as an oversight? > > I just upgraded a few systems with v5.4, rebooted and then ran an update > again. The yum-priorities plugin is loaded and used with the regular "yum > update" command. > > Or am *I* missing something here? I don't see anything wrong... > > To the CentOS-devs I'd like to extend a great thank you. The v5.4 upgrade > went in w/o a hitch and seems to be working excellent. Ditto. The problem is not with updated systems but with newly installed systems. yum-priorities is missing from newly installed 5.4 systems. It's fine with updated systems. Tony -- Dept. of Comp. Sci. University of Limerick.

2 1

Security updates for Centos 5.3
by slchavarria＠iusacell.com.mx 22 Oct '09

22 Oct '09

Hello, Someone knows which security updates i have to apply to a host with Centos 5.3 x_64. Thank you in advance and greetings SLCC ----------------------------------------- Este mensaje y cualquier archivo que se adjunte al mismo es propiedad de Grupo Iusacell y contiene informacion privada y privilegiada para uso exclusivo del destinatario. Si usted recibe esta comunicacion por error, no esta autorizado para copiar, retransmitir, utilizar o divulgar este mensaje ni los archivos adjuntos. En este caso por favor notifique inmediatamente al remitente por este mismo conducto. Gracias.

5 4

Low End NAS hardware.
by Drew 22 Oct '09

22 Oct '09

Hey, The recent discussion on NAS/SAN and the Thecus N8800 got me to thinking. Bit of background. I have an old Dual Athlon MP2800+ that I'm using for a home web/file server. It runs fine but between the noise of the various fans and it's location in the living room, I've been asked by my spouse to find a replacement for it that's smaller & quieter. Looking at the Thecus, and based on experience with Atom based Mini-ITX systems at work, I was thinking about rolling my own. My questions is, for a small home server that runs apache/php/mysql and Samba, how well do the Mini-ITX boards like the VIA C3/7 & Intel Atoms handle this sort of task? I've used VIA systems as MythTV frontends but never as file/web servers. I'd expect they'd do fine for home use but I've never tried. Thanks, -- Drew "Nothing in life is to be feared. It is only to be understood." --Marie Curie

4 4

Thanks! Desktop update successful
by Ron Blizzard 22 Oct '09

22 Oct '09

Just used 'yum clean all' and 'yum update.' So far no problems at all. I had to double check to make sure that I actually updated -- no new wallpaper or splash screen this time. Thanks everyone. -- RonB -- Using CentOS 5.4

1 0

Caught between a Red Hat and a CentOS
by Ron Blizzard 22 Oct '09

22 Oct '09

Interesting column at CNET... http://news.cnet.com/8301-13505_3-10376762-16.html ~~ "Novell has been positioning itself as the Avis of Linux, a distant but gaining Red Hat competitor that "tries harder." Like Oracle, Novell argues that it can give customers Red Hat value at a lower price. "There's just one problem with this marketing spin: the "low-cost alternative" to Red Hat isn't Novell. It's CentOS. And CentOS is free as in $0.00. "It's true that adoption of unpaid Linux like CentOS is booming, and that this no-cost alternative to more expensive solutions like Red Hat is a real threat to Red Hat. This is no doubt why Red Hat has made "free-to-paid" a core element of its ongoing strategy, as related in its recent earnings call. "But it's a much bigger threat to Novell and Oracle, both of whom are trying to position themselves as cheaper alternatives to Red Hat Enterprise Linux." ~~ I wonder if Red Hat has ever considered limited, paid support options for CentOS? -- RonB -- Using CentOS 5.3

21 36

using CentOS as an iSCSI server?
by Rudi Ahlers 22 Oct '09

22 Oct '09

Has anyone succesfully setup, and used CentOS as an iSCSI server? I'm trying to setup a server with 4x500GB HDD's, setup in RAID 10 to act as an iSCSI server for a virtualization project, but I can't find a decent howto on how to setup an iSCSI server using CentOS. I would like to setup something like Openfiler, but we also need todo some other stuff that OpenFiler doesn't support, so I would prefer to export some of the HDD space (about 500GB) as iSCSI LUN's -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

17 43

File Server using ISCSI attached storage - Hardware HBA ?
by Clint Dilks 22 Oct '09

22 Oct '09

Hi Everyone I am looking at setting up a File Server that uses ISCSI storage. It is the first time I have done this, so I am wanting to get peoples thoughts on whether for CentOS systems you should use Hardware based ISCSI HBA's? If so do I need to be careful about what HBA I use ? Currently I am looking at purchasing a Dell System using Broadcom ethernet cards/ ISCSI HBA. From google searching it seems QLogic HBA's are quite popular ? Any suggestions or experience you can offer appreciated. Have a nice day

2 4

Recommendation for PCI-e SATA RAID 5 card?
by Neil Aggarwal 21 Oct '09

21 Oct '09

Hello: I am looking for a recommendation for a PCI-e RAID card for my server. The server has a PCI-e x16 low profile slot so the card has to be at most 6.6 inches long x 2.536 inches high. I would like to use RAID 5 with 3 drives so I have to have those capabilities. It has to be CentOS 5.4 compatible (Of course!). I took a look at the offerings from 3Ware, but their cards are too long. If you have a card you are happy with, I would appreciate a recommendation. Thanks, Neil -- Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com Will your e-commerce site go offline if you have a DB server failure, fiber cut, flood, fire, or other disaster? If so, ask about our geographically redundant database system.

6 5

CentOS-5.3 saslauth configuration issue
by James B. Byrne 21 Oct '09

21 Oct '09

I am trying to get cyrus-imapd and saslauthd running together so that I can get squirrelmail to work. I have accomplished this on several other servers and have relatively complete documentation on how to do this. What I am running into in this case has me baffled. If I start saslauthd as a service: # service saslauthd start And I try testsaslauthd -u cyrus -p test Then I see this: 0: NO "authentication failed" and in the syslog I see this:: saslauthd[5995]: do_auth : auth failure: [user=cyrus] [service=imap] [realm=] [mech=pam] [reason=PAM auth error] However, if I stop the system service: # service saslauthd stop and I run the saslauthd daemon from the tty with debug on: # saslauthd -a shadow -d -n 6 then when I try # testsaslauthd -u cyrus -p test I see 0: OK "Success." Anyone have a clue for me as to what is going on here? Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 1

Re: [CentOS] sendmail question
by Jerry Geis 21 Oct '09

21 Oct '09

Brent L. Bates wrote: > It is not odd. You just refuse to listen to those trying to help. How > many times do they have to say `Check your DNS'? > > Check your /etc/nsswitch.conf and make sure it has a line like this: > > hosts: files dns > > `files' comes FIRST and `dns' LAST. > > The file /etc/resolv.conf should have a line starting with `domain' and > have your domain after it. You should have at least one `nameserver' line. > If you are running `named' on your local system then put `127.0.0.1'. You > can have up to 3 `nameserver' lines. > > Finally, your /etc/hosts file should have a line like this: > > 127.0.0.1 localhost loopback me > > You should also have lines that correspond with each and every IP address > the system is using. For example: > > 123.12.34.56 myhost.mydomain.com myhost > > List the Fully Qualified Domain Name (FQDN) FIRST and then the short > name. > > Use things like `ping' and `nslookup' to make sure DNS is working. If > these take forever, 2 minutes for example, your DNS isn't working and you need > to fix it. > > One last thing, your mail queue shouldn't be any shorter than 15 MINUTES. > If you are sending out the the Internet and it is much shorter, you will > probably end up on someones SPAM list. > > Brent, nsswitch.conf has in it the following: passwd: files shadow: files group: files #hosts: db files nisplus nis dns hosts: files dns I do not have any domain line in /etc/hosts just 2 nameservers. /etc/hosts has 127.0.0.1 localhost I do also have the line with the correct IP for the machine. IP address space full machine name short name also. Thanks, jerry

1 0

'Extremely lazy' disk flush?
by Les Mikesell 21 Oct '09

21 Oct '09

Are there any good options to configure a filesystem so most activity takes place in the RAM buffer with the flush to physical media allowed to lag very far behind? OpenNMS does some data collection that keeps the disk very busy. I don't want to lose the history completely in a crash like you would with a ramdisk, but it wouldn't be a big problem if only the last 10-30 minutes would be dropped. -- Les Mikesell lesmikesell(a)gmail.com

2 1

centos5.4 and extras
by Ryan Pugatch 21 Oct '09

21 Oct '09

Trying to install CentOS 5.4 with Xfce and I have enabled the extras repo, but Xfce doesn't show up when I customize the software selections. Is this because 5.4 hasn't hit all of the mirrors yet, or is Xfce not around for 5.4? Ryan

1 0

Console priority
by Daniel Bird 21 Oct '09

21 Oct '09

Hi all, A while back I vaguely remember someone posting a link to documentation on how to prioritise console access (for want of a better expression). For the life of me I can't find it in the archives or via Google; Can anyone provide a URL? Basically, I have a remote server that thrashes (that's my theory at least) occasionally, resulting in the service (httpd/mysql) failing. When its in this state logging on to the console (serial + screen) responds with "login timeout". The only way back from this at the moment is a reboot.. If I can prioritize console access somehow and get on to the server I may find a clue as to what's causing it. Cheers Dan

3 4

Rescan for new geometry without reboot?
by Amos Shapira 21 Oct '09

21 Oct '09

Hello, We just had our servers fitted with more disks. Most of the disks are growing existing RAID 1+0 channels, some are in new channels. Controllers and disks support live installation. I'd like to avoid a reboot just to let the system find that the disks are larger. All I can find so far suggests that its possible to rescan the disks, and even find the new geometry (e.g. http://linux.derkeiler.com/Mailing-Lists/Kernel/2004-12/1555.html) but nobody knows how to actually convince the system to let me use the extra space without a reboot. Does anyone know of a way to achieve this? Thanks, --Amos

2 1

local centos repository upgrade from 5.3 to 5.4
by Paul Herbosch 21 Oct '09

21 Oct '09

Hi list, I run quite a few centos 5.3 servers and have a local yum repository which is working fine. Below a list of what I'm rsyncing at the moment + an extract from my / etc/yum.repos.d/CentOS-Base.repo file I copied the OS directory from the install media and ran createrepo on that dir. I would like to upgrade my servers to 5.4. I was wondering if I could simply replace the '5.3' part in the rsync source to '5.4' ? Or is there more to it? Thank you in advance, Kind regards, Paul Herbosch === What I'm currently rsyncing === rsync -avrt rsync://anorien.csc.warwick.ac.uk/CentOS/5.3/addons/i386 -- exclude=debug/ /var/www/html/centos/5/addons/ rsync -avrt rsync://anorien.csc.warwick.ac.uk/CentOS/5.3/centosplus/ i386 --exclude=debug/ /var/www/html/centos/5/centosplus/ rsync -avrt rsync://anorien.csc.warwick.ac.uk/CentOS/5.3/contrib/i386 --exclude=debug/ /var/www/html/centos/5/contrib/ rsync -avrt rsync://anorien.csc.warwick.ac.uk/CentOS/5.3/extras/i386 -- exclude=debug/ /var/www/html/centos/5/extras/ rsync -avrt rsync://anorien.csc.warwick.ac.uk/CentOS/5.3/updates/i386 --exclude=debug/ /var/www/html/centos/5/updates/ === Local /etc/yum.repos.d/CentOS-Base.repo file === [base] name=CentOS-$releasever - Base # mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch… baseurl=http://mylocalreposerver/centos/$releasever/os/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5 #released updates [updates] name=CentOS-$releasever - Updates # mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch… baseurl=http://mylocalreposerver/centos/$releasever/updates/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5 etc... -- Paul Herbosch Operations TBWA\ Worldwide IT Mobile: +32 477 36 81 92 www.mytbwa.com/Technology This e-mail is intended only for the named person or entity to which it is addressed and contains valuable business information that is privileged, confidential and/or otherwise protected from disclosure. If you received this e-mail in error, any review, use, dissemination, distribution or copying of this e-mail is strictly prohibited. Please notify us immediately of the error via e-mail to disclaimer(a)tbwaworld.com and please delete the e-mail from your system, retaining no copies in any media. We appreciate your cooperation.

3 4

"conventional cluster management software"
by Alan McKay 21 Oct '09

21 Oct '09

I saw this in the openfiler thread, and realised it is another major hole in my knowledge What do you all use for clustering, and does it run out-of-the-box with CentOS? My main areas of interest are : - DB clustering (PostgreSQL) - yeah, we're looking at commercial stuff and skytools - web server clustering - Apache on CentOS - storage clustering thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

3 2

5.4 at last?
by fred smith 21 Oct '09

21 Oct '09

Now that it appears that some folks are able to get the 5.4 downloads (and a GREAT BIG THANK YOU to all the centos team members who make this possible!) I'm wondering when the updates will begin flowing so that those of us running 5.3 can do "yum upgrade" and enjoy all the benefits too? Thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

4 4

full-fledge PDF editor for Linux
by Boris Epstein 21 Oct '09

21 Oct '09

Hi all, Does anybody know of an editor that can do on Linux what Acrobat / Acrobat Pro can do on Mac/Windows? I have tried to use the PDF Import extension to the Open Office which appears barely functional - at least it is so slow as to be almost impractical. I have also tried pdfedit under Linux which seems to work fine but seems to have rather limited functionality. For instance, the capability to make bookmarks or to search through the whole document (as opposed to the current page) seems to be missing there. Any tips much appreciated. Cheers, Boris.

5 6

RH Server/Client disk sets -> Centos; how?
by Paul Johnson 21 Oct '09

21 Oct '09

I'm running Centos on 12 machines. Colleague runs Redhat Enterprise Linux and while studying his system, I see some gibberish/complication about his system being a "Client" install, not a "Server" install. Apparently, RH provides completely different disk sets for Server and Client installs. I've gone to the RH website and read about the difference between Client and Server, but I still don't understand why they make 2 different disks. In the "old days" of RH, there would be 1 set of disks, and when the install began, you would choose "server" or "workstation" as a way of choosing a default set of packages, and then you could freely pick and choose additional things. You could install gnome on a server, or an http server on a client. Centos seems to follow the good old RH packaging approach. This RHEL Client/Server thing actually causes some wrinkles if you try to transition a running system from RH to Centos, because the repository names are different. RH will have a version name like "5client" whereas Centos will just have 5. I understand this Centos list is not quite the right place to ask "why does RedHat do that?", but I bet some of you will know. What I really want to ask here is: what is the relationship between the several RHEL install types and the Centos disks? Does Centos collect up all the SRPM/RPM packages from both RHEL Client and Server? -- Paul E. Johnson Professor, Political Science 1541 Lilac Lane, Room 504 University of Kansas

2 1

Calling all Hackers
by DTS-Corp (Knowledgebase) 21 Oct '09

21 Oct '09

Hey guys. I have a server that is owned by me and can confirm through servint that it is owned by me. I would like to do a penetration test and of course to allow you to upload files on the server and kind of trash it to the point where it is always restarting and running out of memory etc etc. This is going to be mainly script kiddie stuff, however will be able to get you hired on with me for some other jobs that are invovlving network security evaluations. Here is the server info Cpanel and WHM running on CentOS hostname level1.ixkt.net IP addresses 64..131.81.30 64.131.81.31 64.131.81.32 64.131.81.30 SSH Port is on 3734

13 15

Karanbir's disks (was: openfiler )
by Alan McKay 21 Oct '09

21 Oct '09

On Tue, Oct 20, 2009 at 6:14 PM, Karanbir Singh <mail-lists(a)karan.org> wrote: > I have this running in production. only not with 2 machines, but with 4 > machines, doing raid-10 ( not mdraid10, but conventional 2 sets of > raid-1's 0'd ) Can you give more detail on what you've got there? Sounds interesting. -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 2

Created a DVD from Gnome Desktop -CentOS-5.3
by James B. Byrne 21 Oct '09

21 Oct '09

I am trying to put the dvd iso image of CentOS-5.4 onto a DVD. I have an LG multi-writer installed. I have used this device on this host to created CDs in the past but this is my first attempt at creating a dvd. When I put a blank DVD-R media in the drive then I see a desktop icon for "CD-ROM Disc" created. When I open the bittorent folder and click on the iso image "CentOS-5.4-x86_64-bin-DVD.iso" then I am prompted to open the image with "CD/DVD Creator". When I do this then I get a new window opened with the image file in the lower portion and an entry at the top labelled: CD/DVS Creator Folder and a button labled "Write to Disc" When I click on write to disc I am prompted to either create from image or create from file. I select image and am propted for the speed. I select maximum possible (the default) and press the write button. I get this error: Insert a rewritable or blank disc Please put a disc, with at least 4.3 GiB free, into the drive. The following disc types are supported: DVD+R DL, DVD-RAM, DVD-R, DVD-RW, DVD+R, DVD+RW I get the same thing if I use a DVD-RAM. What is going on? I have used the same model dvd writer on a MSWindows stations and have created readible dvds therefrom. Any ideas on how to proceed? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 4

Re: [CentOS] using Linux as a NAS / SAN device
by J.Witvliet＠MINDEF.NL 20 Oct '09

20 Oct '09

Hi, -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Robert Heller Sent: Friday, August 28, 2009 12:23 AM To: CentOS mailing list Cc: CentOS mailing list Subject: Re: [CentOS] using Linux as a NAS / SAN device At Fri, 28 Aug 2009 00:12:27 +0200 CentOS mailing list <centos(a)centos.org> wrote: > > Hi, > > I'm looking at using Linux as a NAS / SAN device, and would like some > input from other's who have done this before? > > How would it compare to commercial SAN devices, Thecus N8800SAS > (http://www.thecus.com/products_over.php?cid=11&pid=177&set_language=e > nglish) > or something similar to these? > > I would probably use hardware RAID 10, and could go with either SAS / > SATA, and then probably offer iSCSI, Samba. NFS & rsync. > In terms of servers hardware, well either Tyan / SuperMicro / Intel / > Dell would be fine as well. But, my question is rather from a linux > point of view, how would Linux compare to dedicated NAS devices, in > terms of the OS managing the device? I think many dedicated NAS devices, are in fact Linux machines, using an embedded Linux system. -- Just a word of caution. I had a simarly question: building one self, or buyding dedicated hw. Looked through several specs of different boxes, and decided for an ICY-box, that can hold two sata-disks, raid0/raid1/jbod, has an GB-ethernet interface and capable of doing NFS. (which is actually an Linux-box) However, the box is as slow as a proverbial civil-servant, although the link is realy set to GB, it just might as well have been 100MB. And even that its not capable of filling to the max. (60Mb) Found out (afterwards ;-) on the relevant product mailing lists that it's the max the box can do. hans ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

3 3

iptables question
by Bowie Bailey 20 Oct '09

20 Oct '09

The logs on my mail server are filling up with this kind of thing: Oct 19 17:03:51 bnofmail kernel: REJECT: IN=eth0 OUT= MAC=XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX SRC=195.140.240.6 DST=XX.XX.XX.XX LEN=189 TOS=0x00 PREC=0x00 TTL=52 ID=6284 DF PROTO=TCP SPT=25 DPT=32776 WINDOW=65535 RES=0x00 ACK PSH URGP=0 The source port is always 25 and the destination is a high-numbered port. The destination address is the private IP of the server. These seem to be related to outgoing email connections based on the source IPs, but I don't know why they are not part of an established connection. The mail server seems to be running just fine regardless of these blocked connections. Any ideas? -- Bowie

4 7

Openfiler question - fiber channel?
by Alan McKay 20 Oct '09

20 Oct '09

Hey folks, I don't seem to be able to get a response from the openfiler forums (and they want 40 quid for the fine manual!), and since there has been a lot of chat about it here lately, I figured I'd ask here. Please forgive my terminology as I am just making my first baby steps into iSCSI and Fiber Channel, and am not very well read on the matters. So I could be using the wrong terms (anyone got a good primer to recommend?) It seems straightforward that I can install openfiler to server iSCSI disks out over the network. And it seems obvious to me that I'd want a dedicated network for doing that. That part is easy. But based on some poking around on the openfiler site and in the forums, it looks to me like it might be possible to stick a fiber channel card into an openfiler system, and serve fiberchannel out to other systems? Is that right? Is anyone here doing this? This does tie back in to CentOS directly because most of my systems are CentOS, and I'd eventually like to migrate them in this direction, depending on what comes of my benchmarking thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

1 0

centos5.4 and freenx - using my home dir and settings
by Ryan Pugatch 20 Oct '09

20 Oct '09

Hello all, I am setting up freenx on a machine and I am able to connect to it remotely. However, when I connect and start xfce it does not appear to use the correct settings. It acts like it is a whole different user. It is starting the desktop environment as the nx user rather than myself. Is there any way to have the NX server connect as myself rather than having a whole separate virtual environment? I know you can't connect to an existing X session that wasn't started with FreeNX, but I want to be able to start a session using my settings and have access to my home dir, etc. Thanks, Ryan

1 1

VMware Server 2.0.1 and Centos 5.4
by Ben Mohilef 20 Oct '09

20 Oct '09

Upgrade to RHEL 5.4's glibc has rendered vmware-hostd inoperable in some systems. I don't know if Centos 5.4 has the same conflict between glibc and VMware Server as RHEL (no reason it shouldn't). If you run VMware Server 2.0.1 make a copy of /lib64/libc-2.5.so (or /lib/libc- 2.5.so) before upgrading to 5.4. If you encounter this problem follow dirkgf 's instructions in http://communities.vmware.com/thread/229957 from which I quote: > > Re: vmware-hostd crashes repeatedly after upgrade to RHEL 5.4 Sep 5, > 2009 7:49 AM > > just for reference in case somebody else is having this issue. We seem to have > been able to resolve the problem for us. Following the steps we performed. > > * Log on to your VMware host. > * Create the directory /usr/lib/vmware/lib/libc.so.6 > * Log on to an RHEL 5.3. machine. Grab /lib64/libc-2.5.so (or > /lib/libc-2.5.so in case you're running an 32 Bit host) and copy it to the > VMware host into /usr/lib/vmware/lib/libc.so.6 > * Rename the file libc-2.5.so within /usr/lib/vmware/lib/libc.so.6 to > libc.so.6 * Open /usr/sbin/vmware-hostd and add > /usr/lib/vmware/lib/libc.so.6 to the LD_LIBRARY_PATH. I just added an > "export LD_LIBRARY_PATH=/usr/lib/vmware/lib/libc.so.6:$LD_LIBRARY_PATH" > before the last line. * Restart your vmware services (or just the host) > > > Downgrading libc might be also an option, but I'd like to keep the host > unchanged other Works for me on a x86_64 system which exhibited similar symptoms. I agree with his last line because I don't know what else retaining the old glibc wold break. regards, benm

2 1

Monitoring a remote server with Conky ?
by Niki Kovacs 20 Oct '09

20 Oct '09

Hi, I've been using Conky for some time, a nifty utility to monitor just about anything on the PC. Vital things like CPU, RAM, swap, disks, current song playing in MPD :o) Here's what it looks like : http://www.microlinux.fr/images/bureau_conky.png And with more detail : http://www.microlinux.fr/images/conky_zoom.png Now I wonder... I'd really like to use that to monitor my remote server. I know this feature isn't officially supported by Conky, but I'm right now thinking about a workaround. Something like: OK, my server is 'headless' (e. g.: no graphical server, nothing), but why not install just xorg-x11-server-Xorg, then use Conky and forward it to my local display with SSH -X ? I'm pondering this question, thinking about the possible issues... ... so maybe one of you guys here has come up with some solution ? Cheers, Niki

8 11

Don't have scaling_available_frequencies files
by Neil Aggarwal 20 Oct '09

20 Oct '09

Hello all: I am trying to follow the RHEL virtualization guide. According to Chapter 17, I have a processor without a constant Time Stamp Counter (Its an Opteron). According to that guide, I need to set the MIN_SPEED and MAX_SPEED variables in /etc/sysconfig/cpuspeed to the highest frequency show in /sys/devices/system/cpu/cpu*/cpufreq/scaling_available_frequencies I took a look at my system (CentOS 5.4) and there are no cpufreq directories in the cpu folders. Is that a problem? Thanks, Neil -- Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com Will your e-commerce site go offline if you have a DB server failure, fiber cut, flood, fire, or other disaster? If so, ask about our geographically redundant database system.

2 2

update of openssh-server i386 4.3p2-36.el5, dependencies
by zagiatakrapovic＠gmx.ch 20 Oct '09

20 Oct '09

more rant on @ChrisG: maybe you should check your ironyEnabled flag is set to TRUE and the personalSensitivity enum is not WALLFLOWER but SELFCONFIDENT thx for your advises and lessons, the best lesson for me now was to see that trying to refresh a stalled thread by using kind of humor isn't accepted in this part of the world. next time I will just try "PING", that's less human like but maybe less people get offended... more rant off -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser

1 0

sum and limit quota for multiple filesystems/mountpoints
by Götz Reinicke - IT-Koordinator 20 Oct '09

20 Oct '09

Hi, is there any way to sum and limit quotas for one user across multiple filesystems? E.g. I'd like to use different mountpoints on a mailserver for /var/mail and /home but the user should have only a total of 1GB. or on a samba server the windows profile files should be on an other filesystem as other files for that user. Regards, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

2 1

RAID advice? and KVM advice?
by Dave Stevens 20 Oct '09

20 Oct '09

Hello All, In the not too distant future I will be commissioning a new CentOS (5.4?) box with 4 identical SATA drives. I'd like to set them up as RAID 1+0 for speed and redundancy. I've read the RHEL 5 deployment guide on raid setup and it seems to cover the basics of software raid pretty well, but doesn't cover 1+0. Does anyone have a reference for that kind of configuration? I'd also like to have two virtual domains, one for CentOS and one for Debian. any suggestions for setup docs for that kind of arrangement? TIA. Dave -- When addiction becomes commonplace in a society, people become addicted not only to alcohol and drugs, but to a thousand other destructive pursuits: money, power, dysfunctional relationships, or video games. A social perspective on addiction does not deny individual differences in vulnerability to addiction, but it removes them from the foreground of attention, because social determinants are more powerful.

4 3

Re: [CentOS] iptables - Forwarding with port translation thru an OpenVPN tunnel
by Chuck Munro 20 Oct '09

20 Oct '09

Thanks to those who responded. The use of Apache's reverse proxy was something I would never have though of (it's the mind-numbing cold medication I'm on, LOL) However, I did manage to get things rolling thru the tunnel by configuring strong-end routing at the remote server. Requests were indeed arriving at the remote, but because the request's origin IP address was that of the outside user's browser, the remote server was simply trying to return responses via its default route, which is not the tunnel. I *have* to ask ... why is strong-end routing not the default behavior in Linux? Anyway ... Adding 'ip route ....' and 'ip rule ....' commands when establishing the tunnel did the trick. On the remote server, here are the commands run in a script launched by rc.local: --------------------------- #!/bin/sh # NOTE: To allow VPNs under OpenVPN, IPv4 Forwarding # must be enabled in the /etc/sysctl.conf file! # Enable NAT for the OpenVPN tunnel from the main server: WAN=eth0 # The primary public IP interface iptables -t nat -A POSTROUTING -s 172.17.xxx.0/24 -o ${WAN} -j MASQUERADE # Enable strong-end routing for traffic coming in thru the VPN tunnel: ## Table 200 - In/Out traffic via tun0: ip route add table 200 172.17.xxx.0/24 via 172.17.xxx.yy dev tun0 ip route add table 200 default via 172.17.xxx.yy dev tun0 ## Engage! ... ip rule add from 172.17.xxx.0/24 lookup 200 service openvpn start --------------------------- In the example above, xxx.yy is tun0's 'P-t-P' IP address (usually it's inet IP address minus 1). -- and -- On the main server, here are the commands run in a script launched by rc.local: --------------------------- #!/bin/sh # NOTE: To allow VPNs under OpenVPN, IPv4 Forwarding # must be enabled in the /etc/sysctl.conf file! # Enable NAT for the OpenVPN tunnels: WAN=eth0 # the public IP interface /sbin/iptables -t nat -A POSTROUTING -s 172.17.xxx.0/24 -o ${WAN} -j MASQUERADE TunnelRemoteIP="172.17.xxx.zz" # The inet IP address of the remote server thru the VPN. # Force any HTTP/HTTPS requests on eth0:1's secondary IP address (64.aaa.bbb.ccc) # to be forwarded to the remote server, with port translation. # HTTP: /sbin/iptables -t nat -A PREROUTING -i eth0 -d 64.aaa.bbb.ccc -p tcp --dport 80 -j DNAT --to ${TunnelRemoteIP}:29080 /sbin/iptables -A FORWARD -p tcp -m tcp -i eth0 -o tun0 -d ${TunnelRemoteIP} --dport 29080 -j ACCEPT # # HTTPS: /sbin/iptables -A PREROUTING -t nat -i eth0 -d 64.aaa.bbb.ccc -p tcp --dport 443 -j DNAT --to ${TunnelRemoteIP}:29443 /sbin/iptables -A FORWARD -p tcp -m tcp -i eth0 -o tun0 -d ${TunnelRemoteIP} --dport 29443 -j ACCEPT service openvpn start sleep 2 # Be polite. /sbin/iptables -A FORWARD -p tcp -m tcp --dport 80 -j ACCEPT /sbin/iptables -A FORWARD -p tcp -m tcp --dport 443 -j ACCEPT --------------------------- Obviously the above iptables entries could simply be added to the recipe in /etc/sysconfig/iptables, but I chose to put them in this script so that if I don't want tunnels to be started I don't run the scripts. There may be redundant commands in all of this, but at least it works flawlessly for me. I didn't use any SNAT statements on the rash assumption POSTROUTING does the same thing. I hope this may be useful to anyone else out there who encounters this issue. Cheers, Chuck

1 0

Re: [CentOS] [CENTOS] allowing users to issue the "shutdown" command
by Buz Davis 20 Oct '09

20 Oct '09

Thanks to all who answered. "Poweroff" is exactly what I needed.

1 0

Fwd: [BKO] CentOS for boot.kernel.org
by Geerd-Dietger Hoffmann 19 Oct '09

19 Oct '09

Hey I would be happy to maintain such a thing but I would need someone as a backup. Cheers Didi ---------- Forwarded message ---------- From: J.H. <warthog19(a)eaglescrag.net> Date: Mon, Oct 19, 2009 at 9:51 PM Subject: Re: [BKO] CentOS for boot.kernel.org To: Geerd-Dietger Hoffmann <ribalba(a)gmail.com> Cc: bko(a)hera.kernel.org Didi, I assume you mean with respect to the live images as opposed to the network installers (since we already support CentOS as a network install target). As for the live image there's a couple of things that would need to be figured out, (1) does the live image already support iscsi out of the box and (2) does it already support httpfs out of the box. (1) is possible, (2) I'm guessing is it doesn't, and likely never will officially. If the live image doesn't already support booting off of an iscsi target than adding it should be trivial, if it doesn't than we'll have to hack into the initrd and add it. It's not a *huge* change but it means the following to the initrd: adding: - networking into the initrd - iscsid - iscsiadm - lib files for dns resolution and then it's just a few small adjustments to the init script so that it brings up the iscsi interface, and puts the image in the right place before letting it plow forward as normal. Probably the most useful, to us, is if the kernel + initrd were separate like they are for the normal pxe installs but that's not a requirement by any stretch. I suppose the question ultimately becomes, is this something the CentOS project is interested in generally providing or are we looking at specific support for BKO? Just trying to figure out if we are going to end up in the having to forward port the changes continually on new releases or if this is something that CentOS is willing to pick up and maintain. - John "Warthog9" Hawley Geerd-Dietger Hoffmann wrote: > > Hey > > I was wondering if I could help to get a CentOS image on boot.kernel > > Would be really nice to have more bistros available. > > Cheers Didi > ---- > > My www page: www.ribalba.de > Email / Jabber: ribalba(a)gmail.com > Skype : ribalba > > _______________________________________________ > BKO mailing list > BKO(a)hera.kernel.org > http://linux.kernel.org/mailman/listinfo/bko

1 0

gpg command works fine from login shell, not from cron script
by Sean Carolan 19 Oct '09

19 Oct '09

I have an odd situation here, maybe one of you can help. We have a script that runs via a cron job. It's purpose is to decrypt PGP-encrypted files in a certain directory. I have tried the command two different ways, both fail with the same error message: gpg --decrypt $file > ${file%.txt}.decrypted.txt gpg --output ${file%.txt}.decrypted.txt --decrypt $file (Don't even ask about the name substitution. The end-user insists they MUST submit files with a .txt extension, and not .pgp or .gpg) Anyway, I can run the script fine from a login shell. It works beautifully. But when it runs from a cron job two things happen: 1. A file of zero size is created called file.decrypted.txt 2. The error message in the cron email I get says: gpg: encrypted with ELG-E key, ID XXXXXXXX gpg: decryption failed: secret key not available Why does it say "secret key not available"? The output of gpg -K shows that the key is in fact available, and this is further confirmed when I run the script manually and the files are decrypted just fine.

3 5

Re: [CentOS] [OT] DHCP auth&auth software
by Antonio da Silva Martins Junior 19 Oct '09

19 Oct '09

----- "Marko Vojinovic" <vvmarko(a)gmail.com> escreveu: > Does anyone know about some free (as in beer, and maybe as in speech) > software which would implement authentication and authorization of a user prior > to issuing a valid dhcp lease? > > I imagine the following scenario: someone walks into my office > building with a laptop (a colleague, a visitor, a guest, whoever), and hooks up onto > the local net (wired or wireless). The server detects an unknown MAC address, > issues a bogus dhcp lease which resolves all dns queries to a single internal > web page with a form the user is supposed to fill in and send. After he does > so, an administrator does a sanity check of the data the user provided, and > grants or denies access. If access is granted, the user gets a new, unrestricted > dhcp lease, which provides him with a normal access to local network. > > The goal is to have a database which relates IP or MAC addresses to > people names, so I can track a person down efficiently if he brings an > infected/spamming machine into the building. > > I would know how to build this infrastructure manually, but it's a lot > of work, and I don't want to reinvent the wheel. Google somehow failed to > help, or I failed to provide the right keywords. :-( > After reading this thread I think you can try PacketFence (www.packetfence.org) and there are some others less powerfull ones on the wikipedia under the NAC topic: http://en.wikipedia.org/wiki/Network_Access_Control Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analist | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious." -- Esta mensagem foi verificada pelo sistema de antivírus e acredita-se estar livre de perigo.

1 0

apache env vars - best practices
by aurfalien＠gmail.com 19 Oct '09

19 Oct '09

I've been setting custom env vars for Apache 1 of 2 ways; 1 - Changing the passwd file so Apache has a shell and loading a custom .bashrc file. 2 - Using the SetEnv directive in my httpd.conf file. I'm crazy about neither one as they both have limitations; 1 - I don't like giving Apache its own shell. 2 - The SetEnv directive only takes 2 args so if I have a var with multiple values like a path, it won't work. What's the cleanest way to set complex env vars for Apache?

6 13

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss