- Discuss - lists.centos.org

vncserver startup error??
by mcclnx mcc 07 Oct '09

07 Oct '09

we have CENTOS 5.3 X86_64 on DELL server. recently I found Vncserver can NOT startup. Everytime I type "vncserver :1" log file have following messages: Window manager warning: Log level 32: could not find XKB extension. ** (eggcups:10072): WARNING **: IPP request failed with status 1030 ** (eggcups:10072): WARNING **: IPP request failed with status 1030 ** (nm-applet:10088): WARNING **: <WARN> applet_dbus_manager_start_service(): Could not acquire the NetworkManagerUserSettings serv ice. Message: 'Connection ":1.15" is not allowed to own the service "org.freedesktop.NetworkManagerUserSettings" due to security polici es in the configuration file' Initializing nautilus-open-terminal extension Introspect error: A security policy in place prevents this sender from sending this message to this recipient, see message bus confi guration file (rejected message had interface "org.freedesktop.DBus.Introspectable" member "Introspect" error name "(unset)" destina tion "edu.duke.linux.yum") Traceback (most recent call last): File "/usr/bin/puplet", line 467, in ? main() File "/usr/bin/puplet", line 464, in main p.run() File "/usr/bin/puplet", line 451, in run self._refreshInfo() File "/usr/bin/puplet", line 191, in _refreshInfo if self.updatesObject is not None and \ AttributeError: DBusException instance has no attribute '_dbus_error_name' Introspect error: Launch helper exited with unknown return code 0 could not attach to desktop process anyone know how to fix it? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

2 1

Re: [CentOS] Embedded Question-Stateless readonly filesystem
by Alok Prasad 07 Oct '09

07 Oct '09

Yes This technology preview is amazing . Hope Karan never stop this development. I am trying to make a readonly root filesystem for asterisknow 1.5 which uses centos 5.3 ,if it this works will be amazing.It will always ensure asterisknow1.5 boot cleanly even improperly shutdown or on crash. Some information you are looking for is available at http://plone.lucidsolutions.co.nz/linux/io/using-centos-5.2-stateless-linux… Thx >>* -----Original Message----- *>>* From: centos-bounces at centos.org <http://lists.centos.org/mailman/listinfo/centos> *>>* [mailto:centos-bounces at centos.org <http://lists.centos.org/mailman/listinfo/centos>] On Behalf Of Victor Padro *>>* Sent: Saturday, August 01, 2009 18:18 *>>* To: CentOS mailing list *>>* Subject: Re: [CentOS] Embedded Question *>>* *>>* On Sat, Aug 1, 2009 at 4:59 PM, Joseph L. *>>* Casale<JCasale at activenetwerx.com <http://lists.centos.org/mailman/listinfo/centos>> wrote: *>>* > A friend asked me to setup an embedded appliance with an RO *>>* root for *>>* > minimal maintenance to primarily stream shoutcast out to an amp. *>>* > *>>* > The only thing I knew that might do this is iMedia Linux, but the *>>* > project is practically dead with little to no activity. Is *>>* it possible *>>* > to do something like this with CentOS? *>>* > *>>* > Doesn't seem to be much info on the *>>* /etc/sysconfig/readonly-root file. *>* *>* Googled it: *>* *>* http://people.redhat.com/dmalcolm/stateless/ *

1 0

ifconfig showing same mac for 2 nics in same bond
by aurfalien＠gmail.com 07 Oct '09

07 Oct '09

Hi all, I just noticed that my two nics that are bonded via mode 0 are showing the same mac addy in ifconfig. Is this normal because of the nature of my bond? In syslog I keep getting; kernel: pbond0: received packet with own address as source address Some guidance is appreciated before I dive in and troubleshoot. If I don't list the mac addy in my ifcfg-th# files, only one of the 2 nic comes up during boot. If I turn off bonding, then each nic shows its correct mac addy. This leads me to believe that since my switch isn't config'd for bonding when in mode 0, that the mac addy must be duplicated amongst all members of the bond in order for packets to be distributed; ie the bond to work in round robin fashion. uname; 2.6.18-128.7.1.el5xen /etc/modprode.conf alias eth0 tg3 alias eth1 tg3 alias eth2 forcedeth alias eth3 forcedeth alias scsi_hostadapter2 mptsas alias scsi_hostadapter mptspi alias scsi_hostadapter1 mptfc alias scsi_hostadapter2 mptsas alias bond0 bonding options bond0 miimon=80 mode=0 alias peth0 tg3 /etc/sysconfig/network-scripts/ifcfg-eth0 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth0 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5C ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-eth1 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth1 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5D ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=10.0.70.11 NETMASK=255.255.0.0 NETWORK=10.0.0.0 BROADCAST=10.0.255.255 GATEWAY=10.0.10.1 ONBOOT=yes BOOTPROTO=none USERCTL=no TYPE=Ethernet ifconfig output; bond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet addr:10.0.70.11 Bcast:10.0.255.255 Mask:255.255.0.0 inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10714 errors:0 dropped:0 overruns:0 frame:0 TX packets:386 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1157674 (1.1 MiB) TX bytes:37307 (36.4 KiB) eth0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5618 errors:0 dropped:0 overruns:0 frame:0 TX packets:192 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:694966 (678.6 KiB) TX bytes:20541 (20.0 KiB) Interrupt:21 eth1 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5570 errors:0 dropped:0 overruns:0 frame:0 TX packets:191 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:685771 (669.6 KiB) TX bytes:19584 (19.1 KiB) Interrupt:22 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2111 errors:0 dropped:0 overruns:0 frame:0 TX packets:2111 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:5464730 (5.2 MiB) TX bytes:5464730 (5.2 MiB) pbond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 RX packets:11188 errors:0 dropped:0 overruns:0 frame:0 TX packets:383 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1380737 (1.3 MiB) TX bytes:40125 (39.1 KiB) virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask: 255.255.255.0 inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:468 (468.0 b)

2 1

Experimenting with CentOS IPA Server
by Clint Dilks 06 Oct '09

06 Oct '09

Hi Everyone, I have been able to install all of the RPMS related to the recently announced CentOS IPA server and am at the point where I have run /usr/sbin/ipa-server-install. This completes but I see the following output which concerns me [8/16]: creating indices root : CRITICAL Failed to load indices.ldif: Command '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -y /tmp/tmpszemr6 -f /usr/share/ipa/indices.ldif' returned non-zero exit status 68 Looking in the log I see this ldapmodify: Already exists (68) 2009-10-07 11:33:50,781 CRITICAL Failed to load indices.ldif: Command '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -y /tmp/tmpszemr6 -f /usr/share/ipa/indices.ldif' returned non-zero exit st atus 68 So I am assuming this means the ldif is already in place ? Or is this an issue I should be trying to diagnose further ? Thanks for any insight you can offer :)

1 0

Access host from host
by Paras pradhan 06 Oct '09

06 Oct '09

HI, I don't know if this is the right place to ask but here is what I am looking for. I have a centos 5.3 server in DMZ . All of the access to and fro is blocked. I have someother servers in my network which they can access to my server at DMZ. Now to connect to the server "directly" at DMZ (ssh, rdp. ftp), is it possible to allow access via the accessible another servers? Thanks Paras.

1 0

rsync exclusions
by ML 06 Oct '09

06 Oct '09

Hi All, I am using rsync and I see --exclude as an option. But it says --exclude pattern? So how can I do an rsync on '/' except exclude /home/nackup? I am doing: rsync -avx / /mnt/sdb2/ can I simply do: rsync -avx --exclude=/home/backup / /mnt/sdb2/ -ML

3 3

ifconfig showing same mac for 2 nics in same bond
by aurfalien＠gmail.com 06 Oct '09

06 Oct '09

Hi all, I just noticed that my two nics that are bonded via mode 0 are showing the same mac addy in ifconfig. Is this normal? In syslog I keep getting; kernel: pbond0: received packet with own address as source address Some guidance is appreciated before I dive in and troubleshoot. If I don't list the mac addy in my ifcfg-th# files, only one of the 2 nic comes up during boot. uname; 2.6.18-128.7.1.el5xen /etc/modprode.conf alias eth0 tg3 alias eth1 tg3 alias eth2 forcedeth alias eth3 forcedeth alias scsi_hostadapter2 mptsas alias scsi_hostadapter mptspi alias scsi_hostadapter1 mptfc alias scsi_hostadapter2 mptsas alias bond0 bonding options bond0 miimon=80 mode=0 alias peth0 tg3 /etc/sysconfig/network-scripts/ifcfg-eth0 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth0 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5C ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-eth1 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth1 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5D ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=10.0.70.11 NETMASK=255.255.0.0 NETWORK=10.0.0.0 BROADCAST=10.0.255.255 GATEWAY=10.0.10.1 ONBOOT=yes BOOTPROTO=none USERCTL=no TYPE=Ethernet ifconfig output; bond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet addr:10.0.70.11 Bcast:10.0.255.255 Mask:255.255.0.0 inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10714 errors:0 dropped:0 overruns:0 frame:0 TX packets:386 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1157674 (1.1 MiB) TX bytes:37307 (36.4 KiB) eth0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5618 errors:0 dropped:0 overruns:0 frame:0 TX packets:192 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:694966 (678.6 KiB) TX bytes:20541 (20.0 KiB) Interrupt:21 eth1 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5570 errors:0 dropped:0 overruns:0 frame:0 TX packets:191 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:685771 (669.6 KiB) TX bytes:19584 (19.1 KiB) Interrupt:22 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2111 errors:0 dropped:0 overruns:0 frame:0 TX packets:2111 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:5464730 (5.2 MiB) TX bytes:5464730 (5.2 MiB) pbond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 RX packets:11188 errors:0 dropped:0 overruns:0 frame:0 TX packets:383 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1380737 (1.3 MiB) TX bytes:40125 (39.1 KiB) virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask: 255.255.255.0 inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:468 (468.0 b)

1 0

Huge!
by ML 06 Oct '09

06 Oct '09

Hi All, I was trouble shooting why an rsync was taking over a day. I found the problem to be in in a directory in /home that has CVS backups in it. I browsed to find out that there are 7 .tar.gz archives that are each about 1199943181 in size. So that is over 11gb each? If I am doing the math in my head right.... No wonder why this is taking forever to rsync to a USB drive. It was only on the second of 7 and I started it at 2pm yesterday and it was not done/going this morning.... -ML

2 1

More about firewalling
by ML 06 Oct '09

06 Oct '09

Hi All, So before when I used PIX's for my employer, our traffic was statically routed to one IP and then the firewall decided if allowed/ denied and passed it on or dropped it. I have a Comcast business circuit with 13 IP's. The gateway device they provide is a 'pass through' device. They sent traffic for all 13 IP's my way. It just allows traffic through. So if I put in a device to firewall (like Ipcop or Vyatta or something) in front, say it has 3 NICS, how do I do that? If the Firewall has IP A and Traffic for IP B comes in how would IP A answer and decide if the traffic to IP B belonged? Without statically routing I am confused on how to accomplish this? How fast does this device need to be? Best, -Jason

6 5

Re: [CentOS] Bond Issues
by nate 06 Oct '09

06 Oct '09

Joseph L. Casale wrote: > I have a machine I just deployed w/ tg3 interfaces, I have setup bonding > on this same line of server (HP DL380 G4) a million times. I saw there were > changes recently to how you configure a bond and have my setup configured > according to: http://kbase.redhat.com/faq/docs/DOC-7431 Can you post the contents of /proc/net/bonding/bond0 too? nate

2 1

Bond Issues
by Joseph L. Casale 06 Oct '09

06 Oct '09

I have a machine I just deployed w/ tg3 interfaces, I have setup bonding on this same line of server (HP DL380 G4) a million times. I saw there were changes recently to how you configure a bond and have my setup configured according to: http://kbase.redhat.com/faq/docs/DOC-7431 The HP switch has a LACP trunk defined on the two ports. Problem is, when rebooting, I need to issue a `service network restart` to gain connectivity? There is nothing in messages that looks wrong? Anyone have an idea? kernel: Ethernet Channel Bonding Driver: v3.4.0 (October 7, 2008) kernel: bonding: Warning: either miimon or arp_interval and arp_ip_target module parameters must be specified, otherwise bonding will not detect link fail kernel: bonding: bond0: setting mode to 802.3ad (4). kernel: bonding: bond0: Setting MII monitoring interval to 500. kernel: ADDRCONF(NETDEV_UP): bond0: link is not ready kernel: bonding: bond0: Adding slave eth0. kernel: bonding: bond0: enslaving eth0 as a backup interface with a down link. kernel: bonding: bond0: Adding slave eth1. kernel: bonding: bond0: enslaving eth1 as a backup interface with a down link. kernel: tg3: eth0: Link is up at 1000 Mbps, full duplex. kernel: tg3: eth0: Flow control is off for TX and off for RX. kernel: bonding: bond0: link status definitely up for interface eth0. kernel: tg3: eth1: Link is up at 1000 Mbps, full duplex. kernel: tg3: eth1: Flow control is off for TX and off for RX. kernel: bonding: bond0: link status definitely up for interface eth1. kernel: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready #cat /etc/sysconfig/network-scripts/ifcfg-eth0 # Broadcom Corporation NetXtreme BCM5704 Gigabit Ethernet DEVICE=eth0 BOOTPROTO=none HWADDR=00:14:C2:C2:BB:13 ONBOOT=yes MASTER=bond0 SLAVE=yes USERCTL=no eth1 looks similar... # cat /etc/sysconfig/network-scripts/ifcfg-bond0 # Bond with tg3 based BCM5704 nics eth0 and eth1 DEVICE=bond0 BOOTPROTO=none IPADDR=192.168.0.14 NETMASK=255.255.255.0 NETWORK=192.168.0.0 ONBOOT=yes USERCTL=no PEERDNS=no BONDING_OPTS="mode=4 miimon=500" # cat /etc/modprobe.conf alias bond0 bonding alias eth0 tg3 alias eth1 tg3 alias scsi_hostadapter cciss alias scsi_hostadapter1 ata_piix alias scsi_hostadapter2 usb-storage alias ipv6 off alias net-pf-10 off

1 0

CentOS-announce Digest, Vol 56, Issue 1
by centos-announce-request＠centos.org 06 Oct '09

06 Oct '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1471 Important CentOS 4 i386 elinks Update (Johnny Hughes) 2. CESA-2009:1471 Important CentOS 4 x86_64 elinks Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 06 Oct 2009 06:12:59 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1471 Important CentOS 4 i386 elinks Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4ACB263B.4060701(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1471 Important Upstream details at : http://rhn.redhat.com/errata/RHSA-2009-1471.html The following updated files have been uploaded and are currently syncing to the mirrors: SRPMS: elinks-0.9.2-4.el4_8.1.src.rpm i386: elinks-0.9.2-4.el4_8.1.i386.rpm

1 0

How fast?
by ML 06 Oct '09

06 Oct '09

HI All, How fast does a a small DNS Server need to be? I will have about 10 servers and a few workstations. I have a few older Compaq PIII boxes with 1gb RAM each or I have faster P4 boxes. Same question as above, just a Vyatta type device, Firewalling....? -ML

11 15

Re: [CentOS] How fast?
by Warren, Eucke 06 Oct '09

06 Oct '09

-----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Sorin Srbu > Sent: Tuesday, October 06, 2009 12:23 AM > To: 'CentOS mailing list' > Subject: Re: [CentOS] How fast? > If I may suggest Smoothwall for a firewall appliance...? This is a specialty distro, IPCop is another similar distro. Smoothwall's even got a simple > static DNS built-in, just the thing for a smallish home network. Might be just what the OP is looking for? > -- > /Sorin I'll throw in a second for Smoothwall. If you want to get really fancy there's a ton of firewall options available within their homebrew community. Just about any feature you could want in a firewall is available there. Eucke

1 0

bsd mkfile command in centos - a wish
by aurfalien＠gmail.com 05 Oct '09

05 Oct '09

I enjoy the convenience of mkfile command found in Irix and BSD based distros. This command allows me to make files of any size; usage: mkfile [-nv] size[b|k|m|g] filename ... I've looked here and there and can't seem to find it for Centos. Any one have ideas on were I can get at least the source for it? I got something off a BSD ports page but its for BSD type systems.

5 11

Quick question regarding qoutas
by Joseph L. Casale 05 Oct '09

05 Oct '09

If I export a mount with a quota via Samba, do the downstream win clients realize the drive size equal to the quota, or actual mount size? Working remotely while installing, I could test but it would save me time to know beforehand:) Thanks guys! jlc

1 0

CentOS 5.3 LDAP problem.
by Benjamin Donnachie 05 Oct '09

05 Oct '09

I currently have about eight servers running a mixture of CentOS x86_64 v5.2 and v5.3 but none with the very latest updates. They all obtain their authentication information over LDAP and to avoid the starting message bus hang problem[1], nscd is set to soft failure. However, yesterday I set up a new CentOS v5.3 server with the latest updates, but it refuses to get beyond "Starting message bus" if I have ldap as an option in nsswitch.conf. The LDAP server is hosted on two separate machines and this machine has an identical set up to the others - including soft failure in the nscd config. If I remove all references to ldap from nsswitch.conf I can get the machine to boot. I can then add those entries back, start nscd and getent works fine. However, when I start samba it then starts to fail stating that it cannot find a users unix account - which is clearly incorrect! To compound matters, ssh now seems to be locking up; freezing after requesting a password and eventually dropping connection. As I am working off-site for the test of the week I cannot post any further information at the moment, however, I think that the installed kernel had a September 2009 compile date. Does anyone know of any reason why the latest updates could be causing this behaviour? I have been unable to find anything relevant in the list archives or in the forums. I am under pressure to get this server working and I don't want to be forced to install Windows, so any advice would be appreciated. Many thanks, Ben [1] http://bugs.centos.org/view.php?id=2047

4 8

Build a Firewall (Can I learn to do this...)
by ML 05 Oct '09

05 Oct '09

Hi All, I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and have Comcast statically route my traffic to this IP. Then when traffic comes have it decide if it is allowed or not and if allowed pass it to the right server based upon the rules. I used to work with PIX 525's so I have knowledge, I just dont quite know how to do this with CentOS and such. Can anyone offer advice? Best, -Jason

11 11

Slightly OT: Vim command (or macro) to replace space under cursor by "  " (without deleting the following word)
by Niki Kovacs 05 Oct '09

05 Oct '09

Hi, I'm using Vim to edit some static XHTML pages. I have to (manually) check for non-breakable spaces in my text, and eventually replace simple spaces by the following character sequence:   Usually, when I perform the same operation over and over in a text, I do it once, and then repeat it in command mode using [.]. But I can't figure out how to do this here. Here's what the according macro would look like. Pressing F2 would replace the space under the cursor by " " : :map <F2> cw <ESC> ... except this also deletes the word after the cursor, which is annoying. Any suggestions ? Cheers, Niki

3 3

test
by Janez Kosmrlj 05 Oct '09

05 Oct '09

testing mail delivery

2 1

[Slightly OT] Data Preservation
by ML 05 Oct '09

05 Oct '09

HI All, So I have 5 1U servers (running Windows) that have Ultra 320 SCSI Drives in them. The owner of these boxes wants the drives captured in their current states to .iso or .cdr or something where if the need arises the data can be viewed, used again, etc. So what is the best approach? Boot from a Live CD, hook up a USB external HD and do what? Can I create a .iso or .cdr (or some other portable format) and have it created on the external USB? Thoughts on this process would be appreciated. -ML

6 7

Can't get forwarding to work
by Neil Aggarwal 05 Oct '09

05 Oct '09

Hello all: I am having trouble getting port forwarding with iptables to work. I have this configuration: Internet --- Linux machine --- Windows machine The windows machine is set up to listen on IP address 10.0.0.31 I am able to use lynx to connect to http://10.0.0.31 on the linux machine so there is no problem going from the linux machine to the windows machine. I have tied a public IP address a.b.c.d to the linux machine and entered these rules in its firewall: /sbin/ifconfig eth0:1 $WIN_EXTERNAL_IP netmask $ETH0_NETMASK broadcast $ETH0_BCAST /sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d $WIN_EXTERNAL_IP --dport 80 -j DNAT --to $WIN_INTERNAL_IP:80 /sbin/iptables -A FORWARD -p tcp -i eth0 -d $WIN_INTERNAL_IP --dport 80 -j ACCEPT I have this log entry at the bottom of the firewall rules: /sbin/iptables -A FORWARD -j LOG --log-prefix "FORWARD " When I try to go to the external IP address http://a.b.c.d from another network, I get an error. Any ideas? Thanks, Neil -- Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com Will your e-commerce site go offline if you have a DB server failure, fiber cut, flood, fire, or other disaster? If so, ask about our geographically redundant database system.

3 7

problem with installing centos 5.3 on sata ahci
by Maciej Jan Broniarz 04 Oct '09

04 Oct '09

Hello, I am trying to install Centos on sata ahci. The installer first waits few minutes while loading ahci module. Then, the installer cannot detect any disk during the partitioning phase. What might be the problem? I have switched to IDE in bios and it still is the same. Best regards, mjb

2 1

Testing and using a microphone
by Niki Kovacs 04 Oct '09

04 Oct '09

Hi, What's the most simple way to check if my microphone works on a plain CentOS 5.3 desktop? Is there a simple way, for example, to record voice into a simple .wav file? Niki

7 9

NFS lockups
by Mike Yates 04 Oct '09

04 Oct '09

I thought this had been fixed with newer kernels? We have an old Maxtor Snap Server, an 80 GB NAS unit, containing some of our archives. Both of our CentOS servers have it permanently mounted by NFS for convenient access. This weekend, I discovered remotely that, although all systems except the VRTSralus remote agents for Veritas (now Symantec) Backup Exec were working just fine, both servers would freeze a shell solid on starting to run "lsof" or half way through a "df". However, "mount" ran OK and showed the next item in the "df" should have been the Snap Server NFS mount. I pinged it and it did not respond - I'll let you know Monday what is up. "umount -f" showed "Device busy" but "umount -l" worked just fine and "df" "lsof" and "VRTSralus" all work OK now. BTW the Veritas does not access the Snap Server, though the weekly cron-job to tar-ball the Snap Server at 02:00 Saturday did not email me at all, though it is shown in /var/log/cron. Does anyone know of a method to make NFS mounts auto un-mount if the remote server disappears? Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.94.2/9865/Sat Oct 3 03:45:19 2009 Known viruses: 625330.

2 1

Monitoring OpenVPN TUNs with MRTG
by Eduardo Grosclaude 04 Oct '09

04 Oct '09

I want to check some client OpenVPN TUN interfaces with MRTG running at my VPN server, so I have to specify their OID interface numbers in mrtg.cfg. The problem is, these numbers are dynamic, as they may change whenever OpenVPN restarts for any reason... so, how can I write stanzas such as Target[somehostvpninterface] : ifInOctets.X&ifOutOctets.X:public@ <SOMEHOST.IP> without wiring up the X interface number into cfg file? Or, is there any method to keep X from changing at the clients? Any hints appreciated! -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

2 1

[Slightly OT] Data Preservation - More
by ML 03 Oct '09

03 Oct '09

Hi All, As it turns out these boxes are Red Hat Enterprise Linux and not Windows!. I am not sure how the person who asked me to do the work does not know what he had! I guess he was the CEO though! So I think this process becomes simpler. I should just be able to insert the live cd and do a cp -r on / to the destination USB drive, correct? -ML

5 11

Excessive NFS operations
by lhecking＠users.sourceforge.net 03 Oct '09

03 Oct '09

Reading the "waiting IOs" thread made me remember I have a similar problem that has been here for months, and I have no sulution yet. A single CentOS 5.2 x86_64 machine here is overloading our NetApp filer with excessive NFS getattr, lookup and access operations. The weird thing is that the number of these operations increases over time. I have an mrtg graph (which I didn't want to attach here) showing e.g. 200 NFS Ops on Monday, measured with filer-mrtg, going up to, e.g. 1200 in a straight line within days. nfsstat -l on the filer proves beyond doubt that the load is caused by this particular machine. dstat shows me which NFS operations are causing it. date/time | null gatr satr look aces ... 10-09 12:22:52| 0 0 0 0 0 10-09 12:22:53| 0 525 0 602 602 10-09 12:22:54| 0 1275 0 1464 1438 10-09 12:22:55| 0 0 0 0 0 10-09 12:22:56| 0 0 0 0 0 10-09 12:22:57| 0 0 0 0 0 10-09 12:22:58| 0 238 0 270 270 10-09 12:22:59| 0 1461 0 1663 1660 10-09 12:23:00| 0 205 0 133 114 10-09 12:23:01| 0 0 0 0 0 10-09 12:23:02| 0 1 0 0 0 10-09 12:23:03| 0 0 0 0 0 10-09 12:23:04| 0 1411 0 1574 1574 10-09 12:23:05| 0 498 0 465 466 10-09 12:23:06| 0 0 0 0 0 10-09 12:23:07| 0 0 0 0 0 10-09 12:23:08| 0 0 0 0 0 10-09 12:23:09| 0 1082 0 1178 1192 10-09 12:23:10| 0 790 0 885 865 This behaviour is somehow tied to the Gnome desktop. I have other machines running CentOS 5.2 x86_64 (at init level 3) which don't show this behaviour. I also have CentOS 5.2 i386 machines which don't show it either. None of the other machines on the lan show it - RHEL3 32 and 64bit, Solaris. What I'd need is a monitoring tool than can tie the NFS ops to process ids or applications. lsof isn't nearly as helpful here as I thought. I even copied this workstation user's files to another account, logged in and ran the same apps - and couldn't reproduce it. Ideas? Essentially, this makes CentOS 64bit undeployable in our environemnt.

12 29

du vs df size difference
by Ryan Pugatch 02 Oct '09

02 Oct '09

Hi all, Curious issue.. looking in to how much disk space is being used on a machine (CentOS 5.3). When I compare the output of du vs df, I am seeing a 12GB difference with du saying 8G used and df saying 20G used. # du -hcx / 8.0G total # df -h / Filesystem Size Used Avail Use% Mounted on /dev/xvda3 22G 20G 637M 97% / I recognize that in most cases du and df are not going to report the same but I am concerned about having a 12GB disparity. Does anyone have any thoughts about this or reason as to why there is a big difference? I have read a few articles online about it and none have really shown such a large difference. Thanks Ryan Pugatch Systems Administrator, TripAdvisor

14 27

Re: [CentOS] Asterisk and VOIP was Re: CentOS for non-tech user
by rb4centos＠gmail.com 02 Oct '09

02 Oct '09

-----Original Message----- From: Brian Mathis The difference is that CentOS is a general-purpose OS that can be used for many things, and has a much bigger installed base. That makes it more of a target and would likely be included in scanning tools. A custom OS running on a PBX might also have vulnerabilities, but it's also probably not a big target because of the diversity of systems out there and relative limited utility one would have if such a system were compromised. That you tend to tend to think of it as an "appliance" running the phone system does not change the fact that it's actually a full-blown server OS with the same issues as other servers. But if you're not connected to the Internet none of of this means anything. CentOS/Asterisk *would* be an appliance under these conditions. There are no "server" vulnerabilities because you're not connected to a LAN. Apologies if this is unreadable. I'm typing on my Centro and I do that very often.

6 7

Re: [CentOS] GnuPG for CentOS 5.3?
by lhecking＠users.sourceforge.net 02 Oct '09

02 Oct '09

> IMO the default install of gpg is good enough. Remember, you break it, you > get to keep the pieces. "Good enough" is in the eye of the beholder. If you want to use gpg-agent and pinentry, you need gpg2.

2 1

GnuPG for CentOS 5.3?
by Dick Roth 02 Oct '09

02 Oct '09

Good Morning-- I'm looking to shore up security in my system and with communications. Can you point me to the proper version of GnuPG for CentOS 5.3 (Final)? Thanks, Dick -- "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." --Benjamin Franklin 1755

3 2

Reply to ICMP echo request (type 8) on different (ethernet) interface
by Timo Schoeler 02 Oct '09

02 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I have a weird (?) problem here on a setup running CentOS 5.3 x86_64 (and OpenVZ, and some home-brew L2TP daemons, RIPd, BGPd, etc). There's a (VE in OpenVZ speak) virtual machine that has two ethernet interfaces, seen as eth0 and eth1, respectively. Those live in VLANs, but it's not important here. The thing is that on eth1 the default route lives, while on eth0 all traffic comes in. So, sending a ping to the IP address of eth0 tcpdump shows that the echo request (type 8) packet arrives on the machine. However, the machine does _not_ send an echo reply (type 0) back to the machine that pings eth0, maybe because it would have to emerge from eth1. One exception (an obvious one) is that IPs on the /29 where eth0 lives on _can_ ping eth0 and receive an answer -- this is because the packets don't have to take 'the default route', which lives on the other interface, eth1. This seems to me like decent behaviour. However, I really need eth0 to be able to be pinged from the outside world, it's totally okay for me that eth1 would 'answer' and send the echo replies instead of eth0. Is there anything I can tweak (via sysctl or whatever)? TIA, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/ iD8DBQFKxOC0O/2mgkVVV7kRAgjGAJ9B292FpBzUSS3rpUcZgPE+utWn5wCglptc dNUSD4i4iF4KaAiG1+jFdeg= =QTM+ -----END PGP SIGNATURE-----

2 2

Problems getting scanner to work from xsane (from Gnome Menu or GIMP)
by Robert Heller 01 Oct '09

01 Oct '09

We have a networked HP OfficeJet All-In-One. I have the scanner working with the CentOS 5.3, except xsane is ignoring SANE_DEFAULT_DEVICE. scanimage does however take this environment variable just fine: server1.wendellfreelibrary.org% scanimage -L No scanners were identified. If you were expecting something different, check that the scanner is plugged in, turned on and detected by the sane-find-scanner tool (if appropriate). Please read the documentation which came with this software (README, FAQ, manpages). default device is `hpaio:/net/Officejet_Pro_L7700?ip=192.168.1.253' server1.wendellfreelibrary.org% scanimage -T scanimage: scanning image of size 638x1125 pixels at 24 bits/pixel scanimage: acquiring RGB frame, 8 bits/sample scanimage: reading one scanline, 1914 bytes... PASS scanimage: reading one byte... PASS scanimage: stepped read, 2 bytes... PASS scanimage: stepped read, 4 bytes... PASS scanimage: stepped read, 8 bytes... PASS scanimage: stepped read, 16 bytes... PASS scanimage: stepped read, 32 bytes... PASS scanimage: stepped read, 64 bytes... PASS scanimage: stepped read, 128 bytes... PASS scanimage: stepped read, 256 bytes... PASS scanimage: stepped read, 512 bytes... PASS scanimage: stepped read, 1024 bytes... PASS scanimage: stepped read, 2048 bytes... PASS scanimage: stepped read, 2047 bytes... PASS scanimage: stepped read, 1023 bytes... PASS scanimage: stepped read, 511 bytes... PASS scanimage: stepped read, 255 bytes... PASS scanimage: stepped read, 127 bytes... PASS scanimage: stepped read, 63 bytes... PASS scanimage: stepped read, 31 bytes... PASS scanimage: stepped read, 15 bytes... PASS scanimage: stepped read, 7 bytes... PASS scanimage: stepped read, 3 bytes... PASS server1.wendellfreelibrary.org% echo "$SANE_DEFAULT_DEVICE" hpaio:/net/Officejet_Pro_L7700?ip=192.168.1.253 xsane just pops up a little window "scanning for devices", the "no devices available". I believe I have things properly setup with cups: In /etc/cups/printers.conf: <Printer Officejet_Color> Info Location Printer Area #DeviceURI socket://192.168.1.253:9100 DeviceURI hp:/net/Officejet_Pro_L7700?ip=192.168.1.253 State Idle StateTime 1211313246 Accepting Yes Shared Yes JobSheets none none QuotaPeriod 0 PageLimit 0 KLimit 0 OpPolicy default ErrorPolicy retry-job </Printer> -- Robert Heller -- Get the Deepwoods Software FireFox Toolbar! Deepwoods Software -- Linux Installation and Administration http://www.deepsoft.com/ -- Web Hosting, with CGI and Database heller(a)deepsoft.com -- Contract Programming: C/C++, Tcl/Tk

3 4

Printing problems with Firefox
by Robert Heller 01 Oct '09

01 Oct '09

I have been having problems printing web pages with Firefox under CentOS 4.8: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.14) Gecko/2009091009 CentOS/3.0.14-1.el4.centos Firefox/3.0.14 What happens is that some of the text is 'scrambled' (looks like somehow something is messed up with the font encoding of whatever font is being used). Sometimes the postscript (or PDF) code being generated is broken (the ghostscript print filter crashes because the postscript is broken or incomplete. For one page I get the console message "could not load glyph 321". When I print to a file and select 'PDF' format, I get sometimes PDF files that ghostview (gv-3.6.2-2.el4)/ghostscript (ghostscript-7.07-33.11.el4) find errors with. Xpdf (xpdf-3.00-20.el4) also does not like these PDF files (lots of errors of various sorts). Even Adobe's acroread does not like them sometimes. Sometimes, with enough fussing with I can get the PDF files to print. Sometimes I end up taking a screen shot with gimp of the Adobe acroread window and print that. :-( I have done two things: 1) Created a fresh profile and re-populated with my bookmarks, passwords, and addons. No difference. 2) Created a fresh profile and did not re-populate with with anything (basically a 'vanila' profile). I still have problems. It appears that there is some system setting or some package I have loaded (I have a bunch of packages from rpmforge and epel installed). I also have some extra fonts installed. I am not sure what the problem is. I have Seamonkey installed and Seamonkey *seems* to print at least some pages properly (not extensively tested). I like firefox and have it all setup the way I like. Everything *except* printing works just fine. Firefox *used* to print just fine. I *think* the problem with printing started with Firefox 3.0.<mumble>, but I am not sure exactly. Oh, I *don't* run either the Gnome or KDE desktop environment -- I use a plain window manager only (FVWM in MWM mode). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

1 0

OT: dmidecode data - what is maximum RAM capacity of this box?
by Lanny Marcus 01 Oct '09

01 Oct '09

In Timo's thread about RAM today, I noticed dmidecode and I got the data for my Dell Dimension 2400 (Celeron CPU) box, which is below. I won this box in a raffle, during February 2005. After I got the box, I got conflicting information, from Crucial.com and from Dell Latin America, regarding the maximum RAM configuration. To be conservative, I bought two 256 MB DIMMS from Crucial.com, early in 2005. Running dmidecode, I got the below information. Questions: (a) Is the maximum capacity of this motherboard 1 GB instead of the 512 MB I thought it was? (b) Is it possible the mainboard capacity is 1 GB, but that the BIOS limits to 512 MB? To add further confusion, I just searched for this model on crucial.com and they are showing 2 GB total capacity. However, they do not allow one to select between the Celeron CPU which I have and a non Celeron CPU and they may have different capacity. TIA! Lanny dmidecode for Dell Dimension 2400 Celeron box Handle 0x1000, DMI type 16, 15 bytes. Physical Memory Array Location: System Board Or Motherboard Use: System Memory Error Correction Type: None Maximum Capacity: 1 GB Error Information Handle: Not Provided Number Of Devices: 2 Handle 0x1100, DMI type 17, 23 bytes. Memory Device Array Handle: 0x1000 Error Information Handle: Not Provided Total Width: 64 bits Data Width: 64 bits Size: 256 MB Form Factor: DIMM Set: None Locator: DIMM_1 Bank Locator: Not Specified Type: SDRAM Type Detail: Synchronous Speed: 266 MHz (3.8 ns) Handle 0x1101, DMI type 17, 23 bytes. Memory Device Array Handle: 0x1000 Error Information Handle: Not Provided Total Width: 64 bits Data Width: 64 bits Size: 256 MB Form Factor: DIMM Set: None Locator: DIMM_2 Bank Locator: Not Specified Type: SDRAM Type Detail: Synchronous Speed: 266 MHz (3.8 ns) Handle 0x1301, DMI type 19, 15 bytes. Memory Array Mapped Address Starting Address: 0x00000000000 Ending Address: 0x0001FFFFFFF Range Size: 512 MB Physical Array Handle: 0x1000 Partition Width: 0 Handle 0x1402, DMI type 20, 19 bytes. Memory Device Mapped Address Starting Address: 0x00000000000 Ending Address: 0x0000FFFFFFF Range Size: 256 MB Physical Device Handle: 0x1100 Memory Array Mapped Address Handle: 0x1301 Partition Row Position: 1 Handle 0x1403, DMI type 20, 19 bytes. Memory Device Mapped Address Starting Address: 0x00010000000 Ending Address: 0x0001FFFFFFF Range Size: 256 MB Physical Device Handle: 0x1101 Memory Array Mapped Address Handle: 0x1301 Partition Row Position: 1 from Crucial.com Q: How much memory can my computer handle? from Crucial.com A: 2048MB.

2 3

vncviewer and IPv6
by Robert Moskowitz 01 Oct '09

01 Oct '09

I have a host that I have been accessing with vncviewer via its fqdn that had only an IPv4 A record. I just added a AAAA IPv6 record, and vncviewer via fqdn stopped working. But worked when I provided the IPv4 address instead. It LOOKS like vncviewer is trying the IPv6 address, eventhough all documentation indicates that it does not support IPv6. Definitely my server is only listening on the IPv4 interface. SSH has a nice -4 option to force using IPv4; there is no similar option for vncviewer. Does anyone have any idea on how to enforce IPv4 usage for IPv6-dead vncviewer? Yes, I DO want IPv6 on this server....

1 0

Any known problems with kernel-2.6.18-164.el5.x86_64 / x86_64 / 3ware?
by mbneto 01 Oct '09

01 Oct '09

Hi, I have a server that is running centos 5.3 x86_64 that until last week was running fine. With no error messages in console and in /var/log/messages the server simply stops responding. After a reboot everything is fine. The only change (that I could find) but that was not active before the first incident/reboot was the update of the kernel and friends. The server (is this can help) is a intel quad core, 8GB RAM , 3 x 1TB disks (raid mirror with 2 active / 1 spare via 3ware controller) Any known problem with the kernel-2.6.18-164.el5.x86_64? (I am assuming that this would be the only thing that could cause the problem due to the lack of other messages. Regards. yum.log Sep 24 12:13:48 Updated: openssl-0.9.8e-12.el5.x86_64 Sep 24 12:13:49 Updated: mysql-5.0.77-3.el5.x86_64 Sep 24 12:13:49 Updated: nspr-4.7.5-1.el5_4.x86_64 Sep 24 12:13:49 Updated: openssl-0.9.8e-12.el5.i686 Sep 24 12:13:49 Installed: libXrender-0.9.1-3.1.i386 Sep 24 12:13:49 Installed: freetype-2.2.1-21.el5_3.i386 Sep 24 12:13:51 Installed: fontconfig-2.4.1-7.el5.i386 Sep 24 12:13:52 Updated: mysql-5.0.77-3.el5.i386 Sep 24 12:13:52 Installed: libjpeg-6b-37.i386 Sep 24 12:13:52 Installed: 2:libpng-1.2.10-7.1.el5_3.2.i386 Sep 24 12:13:52 Updated: openssh-4.3p2-36.el5.x86_64 Sep 24 12:13:52 Updated: gnutls-1.4.1-3.el5_3.5.x86_64 Sep 24 12:13:52 Installed: keyutils-1.2-1.el5.x86_64 Sep 24 12:13:52 Installed: cairo-1.2.4-5.el5.i386 Sep 24 12:13:52 Installed: libtiff-3.8.2-7.el5_3.4.i386 Sep 24 12:13:53 Installed: atk-1.12.2-1.fc6.i386 Sep 24 12:13:53 Installed: libXfixes-4.0.1-2.1.i386 Sep 24 12:13:53 Updated: lftp-3.7.11-4.el5.x86_64 Sep 24 12:13:53 Installed: trousers-0.3.1-4.el5.x86_64 Sep 24 12:13:53 Updated: ecryptfs-utils-75-5.el5.x86_64 Sep 24 12:13:53 Installed: libXcursor-1.1.7-1.1.i386 Sep 24 12:13:53 Installed: libXft-2.1.10-1.1.i386 Sep 24 12:13:53 Installed: pango-1.14.9-5.el5.centos.i386 Sep 24 12:13:53 Installed: libXrandr-1.1.1-3.1.i386 Sep 24 12:13:54 Updated: nspr-4.7.5-1.el5_4.i386 Sep 24 12:13:54 Installed: libXinerama-1.0.1-2.1.i386 Sep 24 12:13:54 Installed: gnutls-1.4.1-3.el5_3.5.i386 Sep 24 12:13:54 Updated: openssh-clients-4.3p2-36.el5.x86_64 Sep 24 12:13:54 Updated: openssh-server-4.3p2-36.el5.x86_64 Sep 24 12:13:55 Updated: mysql-server-5.0.77-3.el5.x86_64 Sep 24 12:13:56 Updated: 1:nfs-utils-1.0.9-42.el5.x86_64 Sep 24 12:13:56 Updated: dnsmasq-2.45-1.1.el5_3.x86_64 Sep 24 12:13:57 Updated: openssl-devel-0.9.8e-12.el5.x86_64 Sep 24 12:13:57 Updated: mysql-devel-5.0.77-3.el5.x86_64 Sep 24 12:13:57 Updated: mysql-devel-5.0.77-3.el5.i386 Sep 24 12:14:04 Installed: kernel-2.6.18-164.el5.x86_64 Sep 24 12:14:04 Updated: kernel-headers-2.6.18-164.el5.x86_64 Sep 24 12:14:04 Installed: 1:cups-libs-1.3.7-8.el5_3.6.i386 Sep 24 12:14:05 Installed: gtk2-2.10.4-20.el5.i386 Sep 24 12:14:05 Installed: trousers-0.3.1-4.el5.i386 Sep 24 12:14:05 Updated: ecryptfs-utils-75-5.el5.i386

3 4

Re: [CentOS] Asterisk and VOIP was Re: CentOS for non-tech user
by Les Bell 01 Oct '09

01 Oct '09

Chan Chung Hang Christopher <christopher.chan(a)bradbury.edu.hk> wrote: >> Ah, well, if you want to keep the landlines, then yeah, I guess asterisk is the way to go. If your goal is to replace keyline systems, then asterisk definitely has that kind of support which, it appears, even Cisco's solution does not (from the mouth of Datacraft Asia personnel selling the school Cisco's voip solution). << I replaced our PBX with an Asterisk box and Snom VoIP phones for just this reason. All calls are made over POTS lines, although I did have it working over IAX2 with FreeWorldDialup back when they offered a free service. The functionality is significantly better than the old PBX, with a menu system to connect callers to the right extension during business hours, conferencing, voicemail with forwarding by email, etc. I have an OpenVPN connection from my desktop machine at the university where I work back to my home office LAN and can use a softphone to answer my home phone while at the office, etc. Quite neat. I've even programmed it to fetch the area weather forecast and read it out when you dial one extension. This has been much more useful than I expected - when I get sales calls from people I really don't want to deal with, I just say, "Please hold the line - I'm going to transfer you to the right person" and then transfer the call to the weather forecast. The sales person now gets what sounds like Stephen Hawking reading them the weather. Easily the best use for Asterisk ever. My setup is running on Centos 4.8 and has been a breeze to maintain. Nothing is exposed to the outside world, so I haven't felt pressured to apply updates, etc. However, I did do a little experimenting and found that it's remarkably easy to record calls using Cain+Abel to conduct an ARP cache poisoning attack between any phone and the Asterisk server. The only defences against this are to implement SRTP (Secure Real-Time Protocol), but last time I looked, this required SIP over TCP, which Asterisk did not support (not to mention having to set up a PKI and issue certs to the phones), or the much simpler control of ensuring that all phones are on a separate VLAN from the computers. For any reasonable-sized setup this isn't too hard to achieve as you may well want to buy a PoE switch to power the phones (wall warts are a PITA). There's also an excellent publication on VoIP in the NIST 800-series Special Publications, which is worth looking at. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

ignore please.
by Brian McKerr 01 Oct '09

01 Oct '09

testing email delivery

1 0

SATA cards?
by ML 01 Oct '09

01 Oct '09

Hi All, I have a server that is IDE drives and I dont have any so I wanted to put in a sata PCI card. Will CentOS be able to see the drives as they will be connected to the card? -ML

5 4

Re: [CentOS] CentOS for non-tech user
by Marcelo M. Garcia 30 Sep '09

30 Sep '09

Sorin Srbu wrote: >>> HTH. >> Hi Sorin >> >> You can "sudo bash" and you will have a root terminal. In it, you can >> set the root password for root. > > Yupp, as I said, at the time I was testing Ubuntu, I was rather green and > didn't know about those little tricks. Now is a another matter, but I still > prefer CentOS. Besides, opening a terminal and typing in "su -" is way > faster. Saves keystrokes. Hi The reason for Ubuntu in the laptop is simply because CentOS didn't work very well. I followed the wiki about XPS M1530[1] and everything almost work. At the office one of the developers uses a Dell Precision laptop with RHEL 5.3 (it came from Dell with RHEL) and works really fine. So, I image that some laptops are more CentOS/RHEL-friendly than others. Now I'm used to use sudo. It is a great tool. I use it everywhere. And everything I do appears in the logwatch. Regards mg. [1] http://wiki.centos.org/HowTos/Laptops/Dell/XPS_M1530

3 2

ftp issue in Centos 5.3
by Dave Stevens 30 Sep '09

30 Sep '09

I manage a small server that I back up weekly. I do this by making a tarball of relevant files then transferring it over the local subnet to my station (Fedora 11), whereupon I burn it to DVD. There is no optical burner on the server. The tarball amounts to a bit under 5 gigs. Recently I've started getting an error telling me to try PASV or PORT first. I use the gFTP client on my machine and as far as I know there is no option in this program to use either option either locally or remotely (on the server.) Any ideas on this one? Dave -- When addiction becomes commonplace in a society, people become addicted not only to alcohol and drugs, but to a thousand other destructive pursuits: money, power, dysfunctional relationships, or video games. A social perspective on addiction does not deny individual differences in vulnerability to addiction, but it removes them from the foreground of attention, because social determinants are more powerful.

3 3

Re: [CentOS] Asterisk and VOIP was Re: CentOS for non-tech user
by rb4centos＠gmail.com 30 Sep '09

30 Sep '09

-----Original Message----- From: Brian Mathis The difference is that CentOS is a general-purpose OS that can be used for many things, and has a much bigger installed base. That makes it more of a target and would likely be included in scanning tools. A custom OS running on a PBX might also have vulnerabilities, but it's also probably not a big target because of the diversity of systems out there and relative limited utility one would have if such a system were compromised. That you tend to tend to think of it as an "appliance" running the phone system does not change the fact that it's actually a full-blown server OS with the same issues as other servers. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

How to autoconfigure network?
by happymaster23 30 Sep '09

30 Sep '09

Hello, I have installed new network card under CentOS 5.3, but there are some problems. I want delete existing ifcfg-eth0 and automatically make new on as it is during OS installation process. Is it possible? Thank you

6 12

Re: [CentOS] CentOS for non-tech user
by Christopher Chan 30 Sep '09

30 Sep '09

Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >> > Behalf > >> Of Marcelo M. Garcia >> Sent: Tuesday, September 29, 2009 10:36 PM >> To: CentOS mailing list >> Subject: Re: [CentOS] CentOS for non-tech user >> >> >>> Not using, but I've tried it in a LAMP-configuration couple of years ago. >>> Stability seems ok, but personally I don't like the sudo this and sudo >>> > that > >>> and sudo everywhere. Besides, it felt somehow clunky. CentOS seemed slim, >>> slick and fast compared at the time, so CentOS is what I got stuck with >>> > (in > >>> an endearing sense of course). >>> >>> HTH. >>> >> Hi Sorin >> >> You can "sudo bash" and you will have a root terminal. In it, you can >> set the root password for root. >> > > Yupp, as I said, at the time I was testing Ubuntu, I was rather green and > didn't know about those little tricks. Now is a another matter, but I still > prefer CentOS. Besides, opening a terminal and typing in "su -" is way > faster. Saves keystrokes. > And I can't believe I just write that...! I sound like a linux > die-hard... > Just try Solaris or FreeBSD then. That should make you a Linux die-hard. :-D

3 2

Re: [CentOS] SATA controler req
by Steve Bonds 30 Sep '09

30 Sep '09

On Wed, Sep 23, 2009 at 2:16 PM, Steve Bonds wrote: > These $50 four port cards work wonderfully with the sata_sil24 drived included > with CentOS: > > http://www.newegg.com/Product/Product.aspx?Item=N82E16816132017 > > They only come as PCI. I never found anything stable enough for me > (which is VERY stable) for PCIe. Perhaps someone else has found > something good for that slot. These look promising: http://www.newegg.com/Product/Product.aspx?Item=N82E16816124027 (Syba SY-PEX40008, info at http://www.iocrest.com/products.php?SY-PEX40008) And at $60 for four ports... relatively affordable. I have not tried them personally since I have enough ports for now. However, this is probably the one I try when I run out unless someone else comes back with something better. :-) -- Steve

1 0

Gathering information about RAM in sockets
by Timo Schoeler 30 Sep '09

30 Sep '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I have an IBM xseries 345, running CentOS 5.3, hosting a few Xen domUs. However, I need more RAM -- but cannot remember if all (four) RAM sockets are populated (which would mean to buy higher capacity modules) or if there are two slots left to use. However, I'd like (and think that it's possible, but don't remember how) to check remotely. dmesg's first lines: Linux version 2.6.18-164.el5xen (mockbuild(a)builder16.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-46)) #1 SMP Thu Sep 3 04:47:32 EDT 2009 BIOS-provided physical RAM map: Xen: 0000000000000000 - 0000000020800000 (usable) 0MB HIGHMEM available. 520MB LOWMEM available. Using x86 segment limits to approximate NX protection On node 0 totalpages: 133120 DMA zone: 133120 pages, LIFO batch:31 DMI 2.3 present. ACPI: RSDP (v000 IBM ) @ 0x000fdfc0 ACPI: RSDT (v001 IBM SERONYXP 0x00001000 IBM 0x45444f43) @ 0x7ffdff80 ACPI: FADT (v001 IBM SERONYXP 0x00001000 IBM 0x45444f43) @ 0x7ffdff00 ACPI: MADT (v001 IBM SERONYXP 0x00001000 IBM 0x45444f43) @ 0x7ffdfe40 ACPI: ASF! (v016 IBM SERONYXP 0x00000001 IBM 0x45444f43) @ 0x7ffdfd80 ACPI: DSDT (v001 IBM SERGEODE 0x00001000 MSFT 0x0100000b) @ 0x00000000 ACPI: Local APIC address 0xfee00000 ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) ACPI: LAPIC (acpi_id[0x01] lapic_id[0x06] enabled) ACPI: LAPIC (acpi_id[0x02] lapic_id[0x01] enabled) ACPI: LAPIC (acpi_id[0x03] lapic_id[0x07] enabled) ACPI: LAPIC_NMI (acpi_id[0x00] dfl dfl lint[0x1]) ACPI: LAPIC_NMI (acpi_id[0x06] dfl dfl lint[0x1]) ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) ACPI: LAPIC_NMI (acpi_id[0x07] dfl dfl lint[0x1]) ACPI: IOAPIC (id[0x0e] address[0xfec00000] gsi_base[0]) IOAPIC[0]: apic_id 14, version 17, address 0xfec00000, GSI 0-15 ACPI: IOAPIC (id[0x0d] address[0xfec01000] gsi_base[16]) IOAPIC[1]: apic_id 13, version 17, address 0xfec01000, GSI 16-31 ACPI: IOAPIC (id[0x0c] address[0xfec02000] gsi_base[32]) IOAPIC[2]: apic_id 12, version 17, address 0xfec02000, GSI 32-47 ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) ACPI: IRQ0 used by override. ACPI: IRQ2 used by override. ACPI: IRQ5 used by override. Enabling APIC mode: Flat. Using 3 I/O APICs Using ACPI (MADT) for SMP configuration information Built 1 zonelists. Total pages: 133120 Kernel command line: ro root=/dev/VG00/VG_root Enabling fast FPU save and restore... done. Enabling unmasked SIMD FPU exception support... done. Initializing CPU#0 CPU 0 irqstacks, hard=c0750000 soft=c0730000 PID hash table entries: 4096 (order: 12, 16384 bytes) Xen reported: 3059.962 MHz processor. Console: colour VGA+ 80x25 Dentry cache hash table entries: 131072 (order: 7, 524288 bytes) Inode-cache hash table entries: 65536 (order: 6, 262144 bytes) Software IO TLB enabled: Aperture: 2 megabytes (...) Any hints? Thanks in advance, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/ iD8DBQFKw42gO/2mgkVVV7kRAsXnAJ9RTvHcvPeMBzDY5a3OOzLPKhY7ygCgiFGy FIJCYVvuTxAlvy59u5/HA9g= =/OwG -----END PGP SIGNATURE-----

5 5

[JOB] Linux Sysadmin, London
by Stephen Nelson-Smith 30 Sep '09

30 Sep '09

Hello, I've been asked to recruit a Linux Systems Administrator for one of our clients. They're based in London, but I know many folk who commute from Hampshire, so here's the spec: Job: Systems Administrator Company: Wordtracker Location: Kentish Town, London, NW5 (excellent transport) Salary: £45K Culture: No tie. Agile development Hours: PAYE, 5 days a week (Monday - Friday), min 35 hrs, flexible but core office hours are from 11am - 5pm. Benefits: Free food on Friday! 23 days holiday & pension. THE COMPANY Wordtracker is a small company of around 15 people and our offices are based in Kentish Town, London. Roughly half of the people are developers mainly using: PHP, Ruby (and Ruby on Rails) and agile development. We specialise in: keywords, data analysis, mining and extracting meaning out of online data. Our primary product is the keyword research tool, Wordtracker (http://www.wordtracker.com) which has been serving keywords to customers for over 10 years (since 1998). THE CULTURE Wordtracker has been using agile and extreme programming across our company since we started and as a result our roles includes pairing time with other developers and management. The style is informal (a tie free zone). Most of what we do we haven't done before, so Wordtracker is very much a learning organisation. THE CHALLENGE Wordtracker is a large technically complicated environment, much of which has been built from scratch. In addition to maintaining a business-critical web front-end, there is a significant amount of batch processing and database work involved in keeping Wordtracker running. Most of this infrastructure is very highly automated. We need someone to join the team, assimilate quickly a deep and diverse body of knowledge, get their head around the system and work to improve it continuously. THE ROLE Personality: * Open and communicative * Commercially aware * Comfortable working with Agile Methodologies Experience: * Fluent in sysadmin tools, including Puppet and Nagios * Experienced with version control (git) * Comfortable working with scripting languages, Bash and the Unix command line, particularly in a web environment * Open to working within iterations; estimating tasks; familiar with pairing * Experience with high availability systems Platform: * CentOS & RedHat (RH Certificate welcome) Technologies: * Web servers - (NginX, Apache, Passenger) * Virtualisation (Xen and VM Ware) * Databases (MySQL, Postgres) * Automation tools (e.g. Puppet and Chef) * Monitoring tools (Nagios) * Firewalls (iptables) * Storage (SAN, NFS, Samba) * Packaging (RPMs) * Mac support (no windows support needed) If this interests you please contact me off list, ASAP. Thanks, S. -- Stephen Nelson-Smith Technical Director Atalanta Systems Ltd www.atalanta-systems.com

1 0

cups-lpd job settings
by janezkosmr 30 Sep '09

30 Sep '09

Does someone know, how to configure cups lpd job options. My xinet.d config looks like this: # default: off # description: Allow applications using the legacy lpd protocol to communicate w ith CUPS service printer { disable = no socket_type = stream protocol = tcp wait = no user = lp server = /usr/lib/cups/daemon/cups-lpd server_args = -o job-sheets=none,none -o cpi=12 } The problem is, that it cups ignores the second option under server_args. I checked the documentation and googled quite a lot, but I couldn't find an example with more then one option. BR Janez

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss