- Discuss - lists.centos.org

pbond0: received packet with own address as source address
by aurfalien＠gmail.com 08 Oct '09

08 Oct '09

Hi all, I've been seeing this message fill my logs; pbond0: received packet with own address as source address I've tried; ip set link pbond0 down ip set link pbond0 arp off ip set link pbond0 up in /etc/systcl net.ipv4.conf.bond0.arp_ignore = 8 net.ipv4.conf.bond0.arp_announce = 2 I've 2 physycal nics bonded in mode0 called bond0. Are these messages benign and to be ignored? - aurf

2 4

Re: [CentOS] Bond Issues
by nate 08 Oct '09

08 Oct '09

Joseph L. Casale wrote: > 802.3ad info > LACP rate: slow Just a thought but try changing the lacp rate to fast? http://www.cyberciti.biz/howto/question/static/linux-ethernet-bonding-drive… lacp_rate Option specifying the rate in which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode. Possible values are: slow or 0 Request partner to transmit LACPDUs every 30 seconds fast or 1 Request partner to transmit LACPDUs every 1 second The default is slow. nate

6 15

Broadcom chips: TOE or no TOE?
by Florin Andrei 07 Oct '09

07 Oct '09

Last time I checked (but that was a while ago) TOE (TCP Offloading Engine) was not supported very well, at least not with Broadcom chips. Did anything change in that regard recently? More specifically, the chip I'm looking at is Broadcom NetXtreme II 5709 and the distribution is 5.3 Any luck with proprietary drivers? Any problems those drivers may cause with bonding? -- Florin Andrei http://florin.myip.org/

2 2

CentOS for non-tech user
by Anne Wilson 07 Oct '09

07 Oct '09

I'm thinking of giving CentOS to a non-tech user for her new desktop. He needs are small. She has been used to Mozilla for both mail and browsing, so equivalents there are not a problem. She needs grip and lame, for her mp3s - again no problem. In fact the only problem I can see is that gwenview doesn't appear to have the kipi-plugins. I can see libkipi listed, but no plugins, and a pbone search didn't find it for me. Perhaps it's available from a repo that I don't have? This is the tool of choice for me, for photo-printing. I think I've covered the areas that she's interested in. Can anyone point out any other things I should consider? Once I have the system set up as she needs I shall set up cron jobs to keep her up to date. Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

31 109

Re: [CentOS] Dualboot CentOS and Windows
by cornel panceac 07 Oct '09

07 Oct '09

2009/9/29 Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> > >-----Original Message----- > >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf > >Of Frank Thommen > >Sent: Tuesday, September 29, 2009 3:27 PM > >To: CentOS mailing list > >Subject: Re: [CentOS] Dualboot CentOS and Windows > > > >> I have to install CentOS on a spare partition of a laptop with > >> Windows pre installed. Is there anything I have to watch out for? > >> Couldn't find anything in the wiki or does the installer handle this > >> well without me doing some magic, or so? > > > >The installer will handle this perfectly if you select the correct > >partition for your CentOS installation :-) > usually, you need at least two partitions: one for / and one for swap. best is to setup first a small /boot partition. i'm sure somewhere there are some docs about it :) > > With that said, make sure you have a backup of the important stuff on the > Windows-partitions. > > -- > /Sorin > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > > -- Linux counter #213090

4 3

bind question, please help
by adrian kok 07 Oct '09

07 Oct '09

Hi I don't know how to let the dns as zone and also enquriy in local network please help if this. the outside and inside can use this server to enquiry zone, but can't enquriy non zone. but how can I let it enquiry non zone restrict in local network. Thank you allow-query { any; }; recursion no; Send instant messages to your online friends http://uk.messenger.yahoo.com

4 4

Re: [CentOS] Bring up Networking in Single User Mode
by R.C. Prince 07 Oct '09

07 Oct '09

I believe he's onto something there...routable addresses would be 172.16.254.81 thru 172.16.254.94 on 28 bits...and there's that pesky rule about having your gateway on the same subnet as the node. :) ------Original Message------ From: Eduardo Grosclaude Sender: centos-bounces(a)centos.org To: CentOS mailing list ReplyTo: CentOS mailing list Subject: Re: [CentOS] Bring up Networking in Single User Mode Sent: Oct 7, 2009 1:35 PM On Wed, Oct 7, 2009 at 3:28 PM, ML <mailinglists(a)mailnewsrss.com> wrote: > Nate, > >> ifconfig ethX IP_ADDRESS netmask NETMASK >> route add default gw IP_OF_GATEWAY > > OK, so I was correct, > > I am doing > > ifconfig eth0 172.16.254.80 netmask 255.255.255.240 > route add default gw 172.16.254.1 > > I am getting Network is unreachable. That's correct. Write down 80, 1 and 240 in binary. With a /28 mask, your IP address and your gateway are in different subnets. -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent via BlackBerry by AT&T

1 0

DNS Serving - Why my own?
by ML 07 Oct '09

07 Oct '09

HI All, Can anyone explain why I might want to run my own DNS Server in-house? I have a comcast business circuit and use their DNS servers and when I need entries, I use GoDaddy where I buy my domains. Best, -ML

10 10

Failing Hard Disk?
by Stewart Williams 07 Oct '09

07 Oct '09

Hi All, I am fairly certain that this disk is failing in my server, and I am replacing it straight away anyway. However, I'd appreciate the views of the list just to be sure as I value your opinion(s). I got these errors, once only so far, in /var/log/messages. This disk has / on it. Oct 5 08:34:47 server1 kernel: ata1.00: exception Emask 0x0 SAct 0x7 SErr 0x0 action 0x0 Oct 5 08:34:47 server1 kernel: ata1.00: irq_stat 0x40000001 Oct 5 08:34:47 server1 kernel: ata1.00: cmd 60/f8:00:b9:1e:71/00:00:14:00:00/40 tag 0 ncq 126976 in Oct 5 08:34:47 server1 kernel: res 41/40:00:40:1f:71/a0:00:14:00:00/00 Emask 0x409 (media error) <F> Oct 5 08:34:47 server1 kernel: ata1.00: status: { DRDY ERR } Oct 5 08:34:47 server1 kernel: ata1.00: error: { UNC } Oct 5 08:34:47 server1 kernel: ata1.00: cmd 60/08:08:b1:1f:71/00:00:14:00:00/40 tag 1 ncq 4096 in Oct 5 08:34:47 server1 kernel: res 41/04:f8:40:1f:71/00:00:14:00:00/00 Emask 0x1 (device error) Oct 5 08:34:47 server1 kernel: ata1.00: status: { DRDY ERR } Oct 5 08:34:47 server1 kernel: ata1.00: error: { ABRT } Oct 5 08:34:47 server1 kernel: ata1.00: cmd 60/00:10:b9:1f:71/01:00:14:00:00/40 tag 2 ncq 131072 in Oct 5 08:34:47 server1 kernel: res 41/04:f8:40:1f:71/00:00:14:00:00/00 Emask 0x1 (device error) Oct 5 08:34:47 server1 kernel: ata1.00: status: { DRDY ERR } Oct 5 08:34:53 server1 kernel: ata1.00: error: { ABRT } Oct 5 08:34:54 server1 kernel: ata1.00: configured for UDMA/133 Oct 5 08:34:58 server1 kernel: ata1: EH complete Oct 5 08:35:02 server1 kernel: SCSI device sda: 488397168 512-byte hdwr sectors (250059 MB) Oct 5 08:35:06 server1 kernel: sda: Write Protect is off Oct 5 08:35:13 server1 kernel: SCSI device sda: drive cache: write through I am also getting these errors every 30 minutes: Oct 5 06:22:06 server1 smartd[3118]: Device: /dev/sda, 12 Offline uncorrectable sectors Below is the smart selftest log: smartctl version 5.38 [x86_64-redhat-linux-gnu] Copyright (C) 2002-8 Bruce Allen Home page is http://smartmontools.sourceforge.net/ === START OF INFORMATION SECTION === Device Model: GB0250C8045 Serial Number: 9SF0H82R Firmware Version: HPG2 User Capacity: 250,059,350,016 bytes Device is: Not in smartctl database [for details use: -P showall] ATA Version is: 7 ATA Standard is: ATA/ATAPI-7 T13 1532D revision 4a Local Time is: Tue Oct 6 18:58:31 2009 BST SMART support is: Available - device has SMART capability. SMART support is: Enabled === START OF READ SMART DATA SECTION === SMART overall-health self-assessment test result: PASSED General SMART Values: Offline data collection status: (0x82) Offline data collection activity was completed without error. Auto Offline Data Collection: Enabled. Self-test execution status: ( 121) The previous self-test completed having the read element of the test failed. Total time to complete Offline data collection: ( 625) seconds. Offline data collection capabilities: (0x7b) SMART execute Offline immediate. Auto Offline data collection on/off support. Suspend Offline collection upon new command. Offline surface scan supported. Self-test supported. Conveyance Self-test supported. Selective Self-test supported. SMART capabilities: (0x0003) Saves SMART data before entering power-saving mode. Supports SMART auto save timer. Error logging capability: (0x01) Error logging supported. General Purpose Logging supported. Short self-test routine recommended polling time: ( 2) minutes. Extended self-test routine recommended polling time: ( 58) minutes. Conveyance self-test routine recommended polling time: ( 3) minutes. SCT capabilities: (0x103f) SCT Status supported. SCT Feature Control supported. SCT Data Table supported. SMART Attributes Data Structure revision number: 10 Vendor Specific SMART Attributes with Thresholds: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000f 062 061 044 Pre-fail Always - 173060773 3 Spin_Up_Time 0x0003 099 099 000 Pre-fail Always - 0 4 Start_Stop_Count 0x0032 100 100 020 Old_age Always - 17 5 Reallocated_Sector_Ct 0x0033 089 089 036 Pre-fail Always - 243 7 Seek_Error_Rate 0x000f 074 060 030 Pre-fail Always - 27793554 9 Power_On_Hours 0x0032 094 094 000 Old_age Always - 5695 10 Spin_Retry_Count 0x0013 100 100 097 Pre-fail Always - 0 12 Power_Cycle_Count 0x0032 100 100 020 Old_age Always - 17 184 Unknown_Attribute 0x0033 100 100 003 Pre-fail Always - 0 187 Reported_Uncorrect 0x0032 099 099 000 Old_age Always - 1 188 Unknown_Attribute 0x0032 100 100 000 Old_age Always - 0 189 High_Fly_Writes 0x003a 100 100 000 Old_age Always - 0 190 Airflow_Temperature_Cel 0x0022 071 064 045 Old_age Always - 29 (Lifetime Min/Max 18/36) 194 Temperature_Celsius 0x0022 029 040 000 Old_age Always - 29 (0 9 0 0) 195 Hardware_ECC_Recovered 0x001a 038 026 000 Old_age Always - 173060773 196 Reallocated_Event_Count 0x0033 089 089 036 Pre-fail Always - 243 197 Current_Pending_Sector 0x0012 100 100 000 Old_age Always - 0 198 Offline_Uncorrectable 0x0010 100 100 000 Old_age Offline - 24 199 UDMA_CRC_Error_Count 0x003e 200 200 000 Old_age Always - 0 SMART Error Log Version: 1 ATA Error Count: 1 CR = Command Register [HEX] FR = Features Register [HEX] SC = Sector Count Register [HEX] SN = Sector Number Register [HEX] CL = Cylinder Low Register [HEX] CH = Cylinder High Register [HEX] DH = Device/Head Register [HEX] DC = Device Command Register [HEX] ER = Error register [HEX] ST = Status register [HEX] Powered_Up_Time is measured from power on, and printed as DDd+hh:mm:SS.sss where DD=days, hh=hours, mm=minutes, SS=sec, and sss=millisec. It "wraps" after 49.710 days. Error 1 occurred at disk power-on lifetime: 5660 hours (235 days + 20 hours) When the command that caused the error occurred, the device was active or idle. After command completion occurred, registers were: ER ST SC SN CL CH DH -- -- -- -- -- -- -- 40 51 00 ff ff ff 0f Commands leading to the command that caused the error were: CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name -- -- -- -- -- -- -- -- ---------------- -------------------- 60 00 f8 ff ff ff 4f 00 36d+00:05:49.464 READ FPDMA QUEUED 60 00 00 ff ff ff 4f 00 36d+00:05:49.438 READ FPDMA QUEUED 61 00 08 59 d0 09 40 00 36d+00:05:49.430 WRITE FPDMA QUEUED 61 00 18 41 d0 09 40 00 36d+00:05:49.417 WRITE FPDMA QUEUED 60 00 08 ff ff ff 4f 00 36d+00:05:48.810 READ FPDMA QUEUED SMART Self-test log structure revision number 1 Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error # 1 Extended offline Completed: read failure 90% 5689 526673 # 2 Extended offline Completed: read failure 90% 5685 526673 SMART Selective self-test log data structure revision number 1 SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS 1 0 0 Not_testing 2 0 0 Not_testing 3 0 0 Not_testing 4 0 0 Not_testing 5 0 0 Not_testing Selective self-test flags (0x0): After scanning selected spans, do NOT read-scan remainder of disk. If Selective self-test is pending on power-up, resume after 0 minute delay. Thanks for any advice in advance.

4 3

Disc layout advice
by Joseph L. Casale 07 Oct '09

07 Oct '09

I have a DAS w/ 6 750Gb and 6 1Tb discs I am setting up using Linux raid. The controller is a POS so each disc is exported as an R0 single volume. I used a parted and fdisk script to create 1 max size partition labeled as Linux Raid Autodetect and created the first r6 array w/ mdadm. I normally create and mark partitions as raid or lvm so people know what's going on. The first md array is obviously too large for fdisk and parted doesn't create lvm partitions does it? Should I just pvcreate the raw /dev/md0 and not worry about creating an lvm partition on it, or should/(can?) I? Thanks! jlc

5 9

Re: [CentOS] How fast?
by Kevin Krieser 07 Oct '09

07 Oct '09

On Oct 6, 2009, at 2:23 AM, Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf >> Of Paul Heinlein >> Sent: Tuesday, October 06, 2009 12:35 AM >> To: CentOS mailing list >> Subject: Re: [CentOS] How fast? >> >> The bigger issue is ensuring that an older computer has enough disk >> space to house a modern distro and enough RAM to run modern kernels >> -- >> and even then you can tighten things up if you're willing to work >> with >> a speciality distro. > > I second that, nicely put! > > If I may suggest Smoothwall for a firewall appliance...? This is a > specialty > distro, IPCop is another similar distro. Smoothwall's even got a > simple > static DNS built-in, just the thing for a smallish home network. > Might be > just what the OP is looking for? > -- i know I used to use a Linux PC as a firewall for my home system. Back before the inexpensive routers, and before the fairly easy to find specialty loads. The thing that got me away from it was it was my only Linux system at the time, and a botched update ended up with me having an unbootable system. And an emergency trip to Staples to buy the distribution they had there. A couple days without a protected home network, and I decided to eventually go with a dedicated box. Things would be different if I wanted to get fancier than what these standalone systems provided. But right now, I don't need the extra capability.

2 1

Bring up Networking in Single User Mode
by ML 07 Oct '09

07 Oct '09

Hi All, Can anyone provide advice on how to bring up networking in Single User Mode? I need to specify an IP, mask, gateway and bring up the adaptor so I can ssh into another machine to transfer files to it. -ML

8 11

CentOS-5.3 Inactive device reports error - bugzilla:465442
by James B. Byrne 07 Oct '09

07 Oct '09

I am seeing this in the syslog when starting a multi-homed CentOS-5.3 host. Oct 6 08:35:04 inet04 nm-system-settings: initial_add_devices_of_type: could not get device from HAL: An SELinux policy prevents this sender from sending this message to this recipient (rejected message had interface "org.freedesktop.Hal.Manager" member "FindDeviceByCapability" error name "(unset)" destination "org.freedesktop.Hal") (9). Which appears to be this bug: https://bugzilla.redhat.com/show_bug.cgi?id=465442 However, I cannot tell from the bug description and commentary what is actually going on. What does this message mean and how is the situation reported rectified? I speculate that this error is somehow related to the fact that eth1 is not activated on boot by intent, but I cannot tell for sure. If anyone has the explanation of what is happening, what it means, and how this is fixed I would appreciate learning it. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

trying to understand OSS, GPL, BSD & other licensing model for software distribution.
by Rudi Ahlers 07 Oct '09

07 Oct '09

Hi all, We are busy developing some software (some is web based, others not) and I am having a bit of hard time understanding (or rather, choosing) a license model to work with, We will offer some free software (PHP based scripts, and even Windows based applications) and for this I'm sure the GPL, or even LGPL (for the network side?) will work fine. But, we also need to suppose these scripts, and will be charging for support (other for installations, customization, or even custom derivations, etc), but at the same time we need to distribute some commercial software to cover developer's salaries, rents, marketing, business growth, etc. Now, my question(s) is as follows: Can I sell one script as GPL, but another as AGPL, or even BSD under the same company name? And if these 2 are tied together (i.e. being able to be used together, although seperate programs / script - for example Apache + PHP), how would I license them? We are writing a series of PHP + MySQL based scripts which can be used on the internet, either stand-alone, or in conjunction with other scripts (API driven), and I want to offer a free, limited edition, as well as commercial edition with more features. We're also writing some software that makes use of MySQL / sqlite / postgresql, and even MSSQL, so I need to take their licenses into consideration. What would be the best license for this? I know it's broad, but there's just too much to readup on the different licences and I've read a lot already, not knowing where to go. I have a feeling that I may need to go the dual / multi-license route, but even then I don't know which licences to use. The open source projects wouls also be open for other people to add their own modifications, but I would also like to allow others to write commercial addon's as well. Any pointers, and even past-experiences? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

6 5

problem installing centos 5.3 on IBM x3200 m2
by Janez Kosmrlj 07 Oct '09

07 Oct '09

Hi, I am trying to install centos 5.3 on ibm x3200 m2 server. The problem appears when the installer is about to finish the installation. It detects the RAID correctly, but it doesn't finish formatting the root partition. I tried the default partition layout and also a custom one, but it always ends with the same message: An error occurred trying to format /. this problem is serious and the install cannot continue. I also checked the error console (ctrl+alt+F4) and it writes: <3> sd 0:1:10:0: rejecting I/O to offline device lspci says that the machin has an: LSI Logic SAS1064ET PCI-Express SCSI controller Broadcom NetXtreme BCM5722 Ethernet Has anybody an idea, how to fix this? BR

2 2

vncserver startup error??
by mcclnx mcc 07 Oct '09

07 Oct '09

we have CENTOS 5.3 X86_64 on DELL server. recently I found Vncserver can NOT startup. Everytime I type "vncserver :1" log file have following messages: Window manager warning: Log level 32: could not find XKB extension. ** (eggcups:10072): WARNING **: IPP request failed with status 1030 ** (eggcups:10072): WARNING **: IPP request failed with status 1030 ** (nm-applet:10088): WARNING **: <WARN> applet_dbus_manager_start_service(): Could not acquire the NetworkManagerUserSettings serv ice. Message: 'Connection ":1.15" is not allowed to own the service "org.freedesktop.NetworkManagerUserSettings" due to security polici es in the configuration file' Initializing nautilus-open-terminal extension Introspect error: A security policy in place prevents this sender from sending this message to this recipient, see message bus confi guration file (rejected message had interface "org.freedesktop.DBus.Introspectable" member "Introspect" error name "(unset)" destina tion "edu.duke.linux.yum") Traceback (most recent call last): File "/usr/bin/puplet", line 467, in ? main() File "/usr/bin/puplet", line 464, in main p.run() File "/usr/bin/puplet", line 451, in run self._refreshInfo() File "/usr/bin/puplet", line 191, in _refreshInfo if self.updatesObject is not None and \ AttributeError: DBusException instance has no attribute '_dbus_error_name' Introspect error: Launch helper exited with unknown return code 0 could not attach to desktop process anyone know how to fix it? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

2 1

Re: [CentOS] Embedded Question-Stateless readonly filesystem
by Alok Prasad 07 Oct '09

07 Oct '09

Yes This technology preview is amazing . Hope Karan never stop this development. I am trying to make a readonly root filesystem for asterisknow 1.5 which uses centos 5.3 ,if it this works will be amazing.It will always ensure asterisknow1.5 boot cleanly even improperly shutdown or on crash. Some information you are looking for is available at http://plone.lucidsolutions.co.nz/linux/io/using-centos-5.2-stateless-linux… Thx >>* -----Original Message----- *>>* From: centos-bounces at centos.org <http://lists.centos.org/mailman/listinfo/centos> *>>* [mailto:centos-bounces at centos.org <http://lists.centos.org/mailman/listinfo/centos>] On Behalf Of Victor Padro *>>* Sent: Saturday, August 01, 2009 18:18 *>>* To: CentOS mailing list *>>* Subject: Re: [CentOS] Embedded Question *>>* *>>* On Sat, Aug 1, 2009 at 4:59 PM, Joseph L. *>>* Casale<JCasale at activenetwerx.com <http://lists.centos.org/mailman/listinfo/centos>> wrote: *>>* > A friend asked me to setup an embedded appliance with an RO *>>* root for *>>* > minimal maintenance to primarily stream shoutcast out to an amp. *>>* > *>>* > The only thing I knew that might do this is iMedia Linux, but the *>>* > project is practically dead with little to no activity. Is *>>* it possible *>>* > to do something like this with CentOS? *>>* > *>>* > Doesn't seem to be much info on the *>>* /etc/sysconfig/readonly-root file. *>* *>* Googled it: *>* *>* http://people.redhat.com/dmalcolm/stateless/ *

1 0

ifconfig showing same mac for 2 nics in same bond
by aurfalien＠gmail.com 07 Oct '09

07 Oct '09

Hi all, I just noticed that my two nics that are bonded via mode 0 are showing the same mac addy in ifconfig. Is this normal because of the nature of my bond? In syslog I keep getting; kernel: pbond0: received packet with own address as source address Some guidance is appreciated before I dive in and troubleshoot. If I don't list the mac addy in my ifcfg-th# files, only one of the 2 nic comes up during boot. If I turn off bonding, then each nic shows its correct mac addy. This leads me to believe that since my switch isn't config'd for bonding when in mode 0, that the mac addy must be duplicated amongst all members of the bond in order for packets to be distributed; ie the bond to work in round robin fashion. uname; 2.6.18-128.7.1.el5xen /etc/modprode.conf alias eth0 tg3 alias eth1 tg3 alias eth2 forcedeth alias eth3 forcedeth alias scsi_hostadapter2 mptsas alias scsi_hostadapter mptspi alias scsi_hostadapter1 mptfc alias scsi_hostadapter2 mptsas alias bond0 bonding options bond0 miimon=80 mode=0 alias peth0 tg3 /etc/sysconfig/network-scripts/ifcfg-eth0 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth0 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5C ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-eth1 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth1 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5D ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=10.0.70.11 NETMASK=255.255.0.0 NETWORK=10.0.0.0 BROADCAST=10.0.255.255 GATEWAY=10.0.10.1 ONBOOT=yes BOOTPROTO=none USERCTL=no TYPE=Ethernet ifconfig output; bond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet addr:10.0.70.11 Bcast:10.0.255.255 Mask:255.255.0.0 inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10714 errors:0 dropped:0 overruns:0 frame:0 TX packets:386 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1157674 (1.1 MiB) TX bytes:37307 (36.4 KiB) eth0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5618 errors:0 dropped:0 overruns:0 frame:0 TX packets:192 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:694966 (678.6 KiB) TX bytes:20541 (20.0 KiB) Interrupt:21 eth1 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5570 errors:0 dropped:0 overruns:0 frame:0 TX packets:191 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:685771 (669.6 KiB) TX bytes:19584 (19.1 KiB) Interrupt:22 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2111 errors:0 dropped:0 overruns:0 frame:0 TX packets:2111 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:5464730 (5.2 MiB) TX bytes:5464730 (5.2 MiB) pbond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 RX packets:11188 errors:0 dropped:0 overruns:0 frame:0 TX packets:383 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1380737 (1.3 MiB) TX bytes:40125 (39.1 KiB) virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask: 255.255.255.0 inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:468 (468.0 b)

2 1

Experimenting with CentOS IPA Server
by Clint Dilks 06 Oct '09

06 Oct '09

Hi Everyone, I have been able to install all of the RPMS related to the recently announced CentOS IPA server and am at the point where I have run /usr/sbin/ipa-server-install. This completes but I see the following output which concerns me [8/16]: creating indices root : CRITICAL Failed to load indices.ldif: Command '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -y /tmp/tmpszemr6 -f /usr/share/ipa/indices.ldif' returned non-zero exit status 68 Looking in the log I see this ldapmodify: Already exists (68) 2009-10-07 11:33:50,781 CRITICAL Failed to load indices.ldif: Command '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -y /tmp/tmpszemr6 -f /usr/share/ipa/indices.ldif' returned non-zero exit st atus 68 So I am assuming this means the ldif is already in place ? Or is this an issue I should be trying to diagnose further ? Thanks for any insight you can offer :)

1 0

Access host from host
by Paras pradhan 06 Oct '09

06 Oct '09

HI, I don't know if this is the right place to ask but here is what I am looking for. I have a centos 5.3 server in DMZ . All of the access to and fro is blocked. I have someother servers in my network which they can access to my server at DMZ. Now to connect to the server "directly" at DMZ (ssh, rdp. ftp), is it possible to allow access via the accessible another servers? Thanks Paras.

1 0

rsync exclusions
by ML 06 Oct '09

06 Oct '09

Hi All, I am using rsync and I see --exclude as an option. But it says --exclude pattern? So how can I do an rsync on '/' except exclude /home/nackup? I am doing: rsync -avx / /mnt/sdb2/ can I simply do: rsync -avx --exclude=/home/backup / /mnt/sdb2/ -ML

3 3

ifconfig showing same mac for 2 nics in same bond
by aurfalien＠gmail.com 06 Oct '09

06 Oct '09

Hi all, I just noticed that my two nics that are bonded via mode 0 are showing the same mac addy in ifconfig. Is this normal? In syslog I keep getting; kernel: pbond0: received packet with own address as source address Some guidance is appreciated before I dive in and troubleshoot. If I don't list the mac addy in my ifcfg-th# files, only one of the 2 nic comes up during boot. uname; 2.6.18-128.7.1.el5xen /etc/modprode.conf alias eth0 tg3 alias eth1 tg3 alias eth2 forcedeth alias eth3 forcedeth alias scsi_hostadapter2 mptsas alias scsi_hostadapter mptspi alias scsi_hostadapter1 mptfc alias scsi_hostadapter2 mptsas alias bond0 bonding options bond0 miimon=80 mode=0 alias peth0 tg3 /etc/sysconfig/network-scripts/ifcfg-eth0 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth0 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5C ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-eth1 # Broadcom Corporation NetXtreme BCM5715 Gigabit Ethernet DEVICE=eth1 BOOTPROTO=none USERCTL=no HWADDR=00:23:8B:CE:9C:5D ONBOOT=yes MASTER=bond0 SLAVE=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=10.0.70.11 NETMASK=255.255.0.0 NETWORK=10.0.0.0 BROADCAST=10.0.255.255 GATEWAY=10.0.10.1 ONBOOT=yes BOOTPROTO=none USERCTL=no TYPE=Ethernet ifconfig output; bond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet addr:10.0.70.11 Bcast:10.0.255.255 Mask:255.255.0.0 inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10714 errors:0 dropped:0 overruns:0 frame:0 TX packets:386 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1157674 (1.1 MiB) TX bytes:37307 (36.4 KiB) eth0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5618 errors:0 dropped:0 overruns:0 frame:0 TX packets:192 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:694966 (678.6 KiB) TX bytes:20541 (20.0 KiB) Interrupt:21 eth1 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:5570 errors:0 dropped:0 overruns:0 frame:0 TX packets:191 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:685771 (669.6 KiB) TX bytes:19584 (19.1 KiB) Interrupt:22 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2111 errors:0 dropped:0 overruns:0 frame:0 TX packets:2111 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:5464730 (5.2 MiB) TX bytes:5464730 (5.2 MiB) pbond0 Link encap:Ethernet HWaddr 00:23:8B:CE:9C:5C inet6 addr: fe80::223:8bff:fece:9c5c/64 Scope:Link UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 RX packets:11188 errors:0 dropped:0 overruns:0 frame:0 TX packets:383 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1380737 (1.3 MiB) TX bytes:40125 (39.1 KiB) virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask: 255.255.255.0 inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:468 (468.0 b)

1 0

Huge!
by ML 06 Oct '09

06 Oct '09

Hi All, I was trouble shooting why an rsync was taking over a day. I found the problem to be in in a directory in /home that has CVS backups in it. I browsed to find out that there are 7 .tar.gz archives that are each about 1199943181 in size. So that is over 11gb each? If I am doing the math in my head right.... No wonder why this is taking forever to rsync to a USB drive. It was only on the second of 7 and I started it at 2pm yesterday and it was not done/going this morning.... -ML

2 1

More about firewalling
by ML 06 Oct '09

06 Oct '09

Hi All, So before when I used PIX's for my employer, our traffic was statically routed to one IP and then the firewall decided if allowed/ denied and passed it on or dropped it. I have a Comcast business circuit with 13 IP's. The gateway device they provide is a 'pass through' device. They sent traffic for all 13 IP's my way. It just allows traffic through. So if I put in a device to firewall (like Ipcop or Vyatta or something) in front, say it has 3 NICS, how do I do that? If the Firewall has IP A and Traffic for IP B comes in how would IP A answer and decide if the traffic to IP B belonged? Without statically routing I am confused on how to accomplish this? How fast does this device need to be? Best, -Jason

6 5

Re: [CentOS] Bond Issues
by nate 06 Oct '09

06 Oct '09

Joseph L. Casale wrote: > I have a machine I just deployed w/ tg3 interfaces, I have setup bonding > on this same line of server (HP DL380 G4) a million times. I saw there were > changes recently to how you configure a bond and have my setup configured > according to: http://kbase.redhat.com/faq/docs/DOC-7431 Can you post the contents of /proc/net/bonding/bond0 too? nate

2 1

Bond Issues
by Joseph L. Casale 06 Oct '09

06 Oct '09

I have a machine I just deployed w/ tg3 interfaces, I have setup bonding on this same line of server (HP DL380 G4) a million times. I saw there were changes recently to how you configure a bond and have my setup configured according to: http://kbase.redhat.com/faq/docs/DOC-7431 The HP switch has a LACP trunk defined on the two ports. Problem is, when rebooting, I need to issue a `service network restart` to gain connectivity? There is nothing in messages that looks wrong? Anyone have an idea? kernel: Ethernet Channel Bonding Driver: v3.4.0 (October 7, 2008) kernel: bonding: Warning: either miimon or arp_interval and arp_ip_target module parameters must be specified, otherwise bonding will not detect link fail kernel: bonding: bond0: setting mode to 802.3ad (4). kernel: bonding: bond0: Setting MII monitoring interval to 500. kernel: ADDRCONF(NETDEV_UP): bond0: link is not ready kernel: bonding: bond0: Adding slave eth0. kernel: bonding: bond0: enslaving eth0 as a backup interface with a down link. kernel: bonding: bond0: Adding slave eth1. kernel: bonding: bond0: enslaving eth1 as a backup interface with a down link. kernel: tg3: eth0: Link is up at 1000 Mbps, full duplex. kernel: tg3: eth0: Flow control is off for TX and off for RX. kernel: bonding: bond0: link status definitely up for interface eth0. kernel: tg3: eth1: Link is up at 1000 Mbps, full duplex. kernel: tg3: eth1: Flow control is off for TX and off for RX. kernel: bonding: bond0: link status definitely up for interface eth1. kernel: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready #cat /etc/sysconfig/network-scripts/ifcfg-eth0 # Broadcom Corporation NetXtreme BCM5704 Gigabit Ethernet DEVICE=eth0 BOOTPROTO=none HWADDR=00:14:C2:C2:BB:13 ONBOOT=yes MASTER=bond0 SLAVE=yes USERCTL=no eth1 looks similar... # cat /etc/sysconfig/network-scripts/ifcfg-bond0 # Bond with tg3 based BCM5704 nics eth0 and eth1 DEVICE=bond0 BOOTPROTO=none IPADDR=192.168.0.14 NETMASK=255.255.255.0 NETWORK=192.168.0.0 ONBOOT=yes USERCTL=no PEERDNS=no BONDING_OPTS="mode=4 miimon=500" # cat /etc/modprobe.conf alias bond0 bonding alias eth0 tg3 alias eth1 tg3 alias scsi_hostadapter cciss alias scsi_hostadapter1 ata_piix alias scsi_hostadapter2 usb-storage alias ipv6 off alias net-pf-10 off

1 0

CentOS-announce Digest, Vol 56, Issue 1
by centos-announce-request＠centos.org 06 Oct '09

06 Oct '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1471 Important CentOS 4 i386 elinks Update (Johnny Hughes) 2. CESA-2009:1471 Important CentOS 4 x86_64 elinks Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 06 Oct 2009 06:12:59 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1471 Important CentOS 4 i386 elinks Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4ACB263B.4060701(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1471 Important Upstream details at : http://rhn.redhat.com/errata/RHSA-2009-1471.html The following updated files have been uploaded and are currently syncing to the mirrors: SRPMS: elinks-0.9.2-4.el4_8.1.src.rpm i386: elinks-0.9.2-4.el4_8.1.i386.rpm

1 0

How fast?
by ML 06 Oct '09

06 Oct '09

HI All, How fast does a a small DNS Server need to be? I will have about 10 servers and a few workstations. I have a few older Compaq PIII boxes with 1gb RAM each or I have faster P4 boxes. Same question as above, just a Vyatta type device, Firewalling....? -ML

11 15

Re: [CentOS] How fast?
by Warren, Eucke 06 Oct '09

06 Oct '09

-----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Sorin Srbu > Sent: Tuesday, October 06, 2009 12:23 AM > To: 'CentOS mailing list' > Subject: Re: [CentOS] How fast? > If I may suggest Smoothwall for a firewall appliance...? This is a specialty distro, IPCop is another similar distro. Smoothwall's even got a simple > static DNS built-in, just the thing for a smallish home network. Might be just what the OP is looking for? > -- > /Sorin I'll throw in a second for Smoothwall. If you want to get really fancy there's a ton of firewall options available within their homebrew community. Just about any feature you could want in a firewall is available there. Eucke

1 0

bsd mkfile command in centos - a wish
by aurfalien＠gmail.com 05 Oct '09

05 Oct '09

I enjoy the convenience of mkfile command found in Irix and BSD based distros. This command allows me to make files of any size; usage: mkfile [-nv] size[b|k|m|g] filename ... I've looked here and there and can't seem to find it for Centos. Any one have ideas on were I can get at least the source for it? I got something off a BSD ports page but its for BSD type systems.

5 11

Quick question regarding qoutas
by Joseph L. Casale 05 Oct '09

05 Oct '09

If I export a mount with a quota via Samba, do the downstream win clients realize the drive size equal to the quota, or actual mount size? Working remotely while installing, I could test but it would save me time to know beforehand:) Thanks guys! jlc

1 0

CentOS 5.3 LDAP problem.
by Benjamin Donnachie 05 Oct '09

05 Oct '09

I currently have about eight servers running a mixture of CentOS x86_64 v5.2 and v5.3 but none with the very latest updates. They all obtain their authentication information over LDAP and to avoid the starting message bus hang problem[1], nscd is set to soft failure. However, yesterday I set up a new CentOS v5.3 server with the latest updates, but it refuses to get beyond "Starting message bus" if I have ldap as an option in nsswitch.conf. The LDAP server is hosted on two separate machines and this machine has an identical set up to the others - including soft failure in the nscd config. If I remove all references to ldap from nsswitch.conf I can get the machine to boot. I can then add those entries back, start nscd and getent works fine. However, when I start samba it then starts to fail stating that it cannot find a users unix account - which is clearly incorrect! To compound matters, ssh now seems to be locking up; freezing after requesting a password and eventually dropping connection. As I am working off-site for the test of the week I cannot post any further information at the moment, however, I think that the installed kernel had a September 2009 compile date. Does anyone know of any reason why the latest updates could be causing this behaviour? I have been unable to find anything relevant in the list archives or in the forums. I am under pressure to get this server working and I don't want to be forced to install Windows, so any advice would be appreciated. Many thanks, Ben [1] http://bugs.centos.org/view.php?id=2047

4 8

Build a Firewall (Can I learn to do this...)
by ML 05 Oct '09

05 Oct '09

Hi All, I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and have Comcast statically route my traffic to this IP. Then when traffic comes have it decide if it is allowed or not and if allowed pass it to the right server based upon the rules. I used to work with PIX 525's so I have knowledge, I just dont quite know how to do this with CentOS and such. Can anyone offer advice? Best, -Jason

11 11

Slightly OT: Vim command (or macro) to replace space under cursor by "  " (without deleting the following word)
by Niki Kovacs 05 Oct '09

05 Oct '09

Hi, I'm using Vim to edit some static XHTML pages. I have to (manually) check for non-breakable spaces in my text, and eventually replace simple spaces by the following character sequence:   Usually, when I perform the same operation over and over in a text, I do it once, and then repeat it in command mode using [.]. But I can't figure out how to do this here. Here's what the according macro would look like. Pressing F2 would replace the space under the cursor by " " : :map <F2> cw <ESC> ... except this also deletes the word after the cursor, which is annoying. Any suggestions ? Cheers, Niki

3 3

test
by Janez Kosmrlj 05 Oct '09

05 Oct '09

testing mail delivery

2 1

[Slightly OT] Data Preservation
by ML 05 Oct '09

05 Oct '09

HI All, So I have 5 1U servers (running Windows) that have Ultra 320 SCSI Drives in them. The owner of these boxes wants the drives captured in their current states to .iso or .cdr or something where if the need arises the data can be viewed, used again, etc. So what is the best approach? Boot from a Live CD, hook up a USB external HD and do what? Can I create a .iso or .cdr (or some other portable format) and have it created on the external USB? Thoughts on this process would be appreciated. -ML

6 7

Can't get forwarding to work
by Neil Aggarwal 05 Oct '09

05 Oct '09

Hello all: I am having trouble getting port forwarding with iptables to work. I have this configuration: Internet --- Linux machine --- Windows machine The windows machine is set up to listen on IP address 10.0.0.31 I am able to use lynx to connect to http://10.0.0.31 on the linux machine so there is no problem going from the linux machine to the windows machine. I have tied a public IP address a.b.c.d to the linux machine and entered these rules in its firewall: /sbin/ifconfig eth0:1 $WIN_EXTERNAL_IP netmask $ETH0_NETMASK broadcast $ETH0_BCAST /sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d $WIN_EXTERNAL_IP --dport 80 -j DNAT --to $WIN_INTERNAL_IP:80 /sbin/iptables -A FORWARD -p tcp -i eth0 -d $WIN_INTERNAL_IP --dport 80 -j ACCEPT I have this log entry at the bottom of the firewall rules: /sbin/iptables -A FORWARD -j LOG --log-prefix "FORWARD " When I try to go to the external IP address http://a.b.c.d from another network, I get an error. Any ideas? Thanks, Neil -- Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com Will your e-commerce site go offline if you have a DB server failure, fiber cut, flood, fire, or other disaster? If so, ask about our geographically redundant database system.

3 7

problem with installing centos 5.3 on sata ahci
by Maciej Jan Broniarz 04 Oct '09

04 Oct '09

Hello, I am trying to install Centos on sata ahci. The installer first waits few minutes while loading ahci module. Then, the installer cannot detect any disk during the partitioning phase. What might be the problem? I have switched to IDE in bios and it still is the same. Best regards, mjb

2 1

Testing and using a microphone
by Niki Kovacs 04 Oct '09

04 Oct '09

Hi, What's the most simple way to check if my microphone works on a plain CentOS 5.3 desktop? Is there a simple way, for example, to record voice into a simple .wav file? Niki

7 9

NFS lockups
by Mike Yates 04 Oct '09

04 Oct '09

I thought this had been fixed with newer kernels? We have an old Maxtor Snap Server, an 80 GB NAS unit, containing some of our archives. Both of our CentOS servers have it permanently mounted by NFS for convenient access. This weekend, I discovered remotely that, although all systems except the VRTSralus remote agents for Veritas (now Symantec) Backup Exec were working just fine, both servers would freeze a shell solid on starting to run "lsof" or half way through a "df". However, "mount" ran OK and showed the next item in the "df" should have been the Snap Server NFS mount. I pinged it and it did not respond - I'll let you know Monday what is up. "umount -f" showed "Device busy" but "umount -l" worked just fine and "df" "lsof" and "VRTSralus" all work OK now. BTW the Veritas does not access the Snap Server, though the weekly cron-job to tar-ball the Snap Server at 02:00 Saturday did not email me at all, though it is shown in /var/log/cron. Does anyone know of a method to make NFS mounts auto un-mount if the remote server disappears? Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.94.2/9865/Sat Oct 3 03:45:19 2009 Known viruses: 625330.

2 1

Monitoring OpenVPN TUNs with MRTG
by Eduardo Grosclaude 04 Oct '09

04 Oct '09

I want to check some client OpenVPN TUN interfaces with MRTG running at my VPN server, so I have to specify their OID interface numbers in mrtg.cfg. The problem is, these numbers are dynamic, as they may change whenever OpenVPN restarts for any reason... so, how can I write stanzas such as Target[somehostvpninterface] : ifInOctets.X&ifOutOctets.X:public@ <SOMEHOST.IP> without wiring up the X interface number into cfg file? Or, is there any method to keep X from changing at the clients? Any hints appreciated! -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

2 1

[Slightly OT] Data Preservation - More
by ML 03 Oct '09

03 Oct '09

Hi All, As it turns out these boxes are Red Hat Enterprise Linux and not Windows!. I am not sure how the person who asked me to do the work does not know what he had! I guess he was the CEO though! So I think this process becomes simpler. I should just be able to insert the live cd and do a cp -r on / to the destination USB drive, correct? -ML

5 11

Excessive NFS operations
by lhecking＠users.sourceforge.net 03 Oct '09

03 Oct '09

Reading the "waiting IOs" thread made me remember I have a similar problem that has been here for months, and I have no sulution yet. A single CentOS 5.2 x86_64 machine here is overloading our NetApp filer with excessive NFS getattr, lookup and access operations. The weird thing is that the number of these operations increases over time. I have an mrtg graph (which I didn't want to attach here) showing e.g. 200 NFS Ops on Monday, measured with filer-mrtg, going up to, e.g. 1200 in a straight line within days. nfsstat -l on the filer proves beyond doubt that the load is caused by this particular machine. dstat shows me which NFS operations are causing it. date/time | null gatr satr look aces ... 10-09 12:22:52| 0 0 0 0 0 10-09 12:22:53| 0 525 0 602 602 10-09 12:22:54| 0 1275 0 1464 1438 10-09 12:22:55| 0 0 0 0 0 10-09 12:22:56| 0 0 0 0 0 10-09 12:22:57| 0 0 0 0 0 10-09 12:22:58| 0 238 0 270 270 10-09 12:22:59| 0 1461 0 1663 1660 10-09 12:23:00| 0 205 0 133 114 10-09 12:23:01| 0 0 0 0 0 10-09 12:23:02| 0 1 0 0 0 10-09 12:23:03| 0 0 0 0 0 10-09 12:23:04| 0 1411 0 1574 1574 10-09 12:23:05| 0 498 0 465 466 10-09 12:23:06| 0 0 0 0 0 10-09 12:23:07| 0 0 0 0 0 10-09 12:23:08| 0 0 0 0 0 10-09 12:23:09| 0 1082 0 1178 1192 10-09 12:23:10| 0 790 0 885 865 This behaviour is somehow tied to the Gnome desktop. I have other machines running CentOS 5.2 x86_64 (at init level 3) which don't show this behaviour. I also have CentOS 5.2 i386 machines which don't show it either. None of the other machines on the lan show it - RHEL3 32 and 64bit, Solaris. What I'd need is a monitoring tool than can tie the NFS ops to process ids or applications. lsof isn't nearly as helpful here as I thought. I even copied this workstation user's files to another account, logged in and ran the same apps - and couldn't reproduce it. Ideas? Essentially, this makes CentOS 64bit undeployable in our environemnt.

12 29

du vs df size difference
by Ryan Pugatch 02 Oct '09

02 Oct '09

Hi all, Curious issue.. looking in to how much disk space is being used on a machine (CentOS 5.3). When I compare the output of du vs df, I am seeing a 12GB difference with du saying 8G used and df saying 20G used. # du -hcx / 8.0G total # df -h / Filesystem Size Used Avail Use% Mounted on /dev/xvda3 22G 20G 637M 97% / I recognize that in most cases du and df are not going to report the same but I am concerned about having a 12GB disparity. Does anyone have any thoughts about this or reason as to why there is a big difference? I have read a few articles online about it and none have really shown such a large difference. Thanks Ryan Pugatch Systems Administrator, TripAdvisor

14 27

Re: [CentOS] Asterisk and VOIP was Re: CentOS for non-tech user
by rb4centos＠gmail.com 02 Oct '09

02 Oct '09

-----Original Message----- From: Brian Mathis The difference is that CentOS is a general-purpose OS that can be used for many things, and has a much bigger installed base. That makes it more of a target and would likely be included in scanning tools. A custom OS running on a PBX might also have vulnerabilities, but it's also probably not a big target because of the diversity of systems out there and relative limited utility one would have if such a system were compromised. That you tend to tend to think of it as an "appliance" running the phone system does not change the fact that it's actually a full-blown server OS with the same issues as other servers. But if you're not connected to the Internet none of of this means anything. CentOS/Asterisk *would* be an appliance under these conditions. There are no "server" vulnerabilities because you're not connected to a LAN. Apologies if this is unreadable. I'm typing on my Centro and I do that very often.

6 7

Re: [CentOS] GnuPG for CentOS 5.3?
by lhecking＠users.sourceforge.net 02 Oct '09

02 Oct '09

> IMO the default install of gpg is good enough. Remember, you break it, you > get to keep the pieces. "Good enough" is in the eye of the beholder. If you want to use gpg-agent and pinentry, you need gpg2.

2 1

GnuPG for CentOS 5.3?
by Dick Roth 02 Oct '09

02 Oct '09

Good Morning-- I'm looking to shore up security in my system and with communications. Can you point me to the proper version of GnuPG for CentOS 5.3 (Final)? Thanks, Dick -- "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." --Benjamin Franklin 1755

3 2

Reply to ICMP echo request (type 8) on different (ethernet) interface
by Timo Schoeler 02 Oct '09

02 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I have a weird (?) problem here on a setup running CentOS 5.3 x86_64 (and OpenVZ, and some home-brew L2TP daemons, RIPd, BGPd, etc). There's a (VE in OpenVZ speak) virtual machine that has two ethernet interfaces, seen as eth0 and eth1, respectively. Those live in VLANs, but it's not important here. The thing is that on eth1 the default route lives, while on eth0 all traffic comes in. So, sending a ping to the IP address of eth0 tcpdump shows that the echo request (type 8) packet arrives on the machine. However, the machine does _not_ send an echo reply (type 0) back to the machine that pings eth0, maybe because it would have to emerge from eth1. One exception (an obvious one) is that IPs on the /29 where eth0 lives on _can_ ping eth0 and receive an answer -- this is because the packets don't have to take 'the default route', which lives on the other interface, eth1. This seems to me like decent behaviour. However, I really need eth0 to be able to be pinged from the outside world, it's totally okay for me that eth1 would 'answer' and send the echo replies instead of eth0. Is there anything I can tweak (via sysctl or whatever)? TIA, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/ iD8DBQFKxOC0O/2mgkVVV7kRAgjGAJ9B292FpBzUSS3rpUcZgPE+utWn5wCglptc dNUSD4i4iF4KaAiG1+jFdeg= =QTM+ -----END PGP SIGNATURE-----

2 2

Problems getting scanner to work from xsane (from Gnome Menu or GIMP)
by Robert Heller 01 Oct '09

01 Oct '09

We have a networked HP OfficeJet All-In-One. I have the scanner working with the CentOS 5.3, except xsane is ignoring SANE_DEFAULT_DEVICE. scanimage does however take this environment variable just fine: server1.wendellfreelibrary.org% scanimage -L No scanners were identified. If you were expecting something different, check that the scanner is plugged in, turned on and detected by the sane-find-scanner tool (if appropriate). Please read the documentation which came with this software (README, FAQ, manpages). default device is `hpaio:/net/Officejet_Pro_L7700?ip=192.168.1.253' server1.wendellfreelibrary.org% scanimage -T scanimage: scanning image of size 638x1125 pixels at 24 bits/pixel scanimage: acquiring RGB frame, 8 bits/sample scanimage: reading one scanline, 1914 bytes... PASS scanimage: reading one byte... PASS scanimage: stepped read, 2 bytes... PASS scanimage: stepped read, 4 bytes... PASS scanimage: stepped read, 8 bytes... PASS scanimage: stepped read, 16 bytes... PASS scanimage: stepped read, 32 bytes... PASS scanimage: stepped read, 64 bytes... PASS scanimage: stepped read, 128 bytes... PASS scanimage: stepped read, 256 bytes... PASS scanimage: stepped read, 512 bytes... PASS scanimage: stepped read, 1024 bytes... PASS scanimage: stepped read, 2048 bytes... PASS scanimage: stepped read, 2047 bytes... PASS scanimage: stepped read, 1023 bytes... PASS scanimage: stepped read, 511 bytes... PASS scanimage: stepped read, 255 bytes... PASS scanimage: stepped read, 127 bytes... PASS scanimage: stepped read, 63 bytes... PASS scanimage: stepped read, 31 bytes... PASS scanimage: stepped read, 15 bytes... PASS scanimage: stepped read, 7 bytes... PASS scanimage: stepped read, 3 bytes... PASS server1.wendellfreelibrary.org% echo "$SANE_DEFAULT_DEVICE" hpaio:/net/Officejet_Pro_L7700?ip=192.168.1.253 xsane just pops up a little window "scanning for devices", the "no devices available". I believe I have things properly setup with cups: In /etc/cups/printers.conf: <Printer Officejet_Color> Info Location Printer Area #DeviceURI socket://192.168.1.253:9100 DeviceURI hp:/net/Officejet_Pro_L7700?ip=192.168.1.253 State Idle StateTime 1211313246 Accepting Yes Shared Yes JobSheets none none QuotaPeriod 0 PageLimit 0 KLimit 0 OpPolicy default ErrorPolicy retry-job </Printer> -- Robert Heller -- Get the Deepwoods Software FireFox Toolbar! Deepwoods Software -- Linux Installation and Administration http://www.deepsoft.com/ -- Web Hosting, with CGI and Database heller(a)deepsoft.com -- Contract Programming: C/C++, Tcl/Tk

3 4

Printing problems with Firefox
by Robert Heller 01 Oct '09

01 Oct '09

I have been having problems printing web pages with Firefox under CentOS 4.8: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.14) Gecko/2009091009 CentOS/3.0.14-1.el4.centos Firefox/3.0.14 What happens is that some of the text is 'scrambled' (looks like somehow something is messed up with the font encoding of whatever font is being used). Sometimes the postscript (or PDF) code being generated is broken (the ghostscript print filter crashes because the postscript is broken or incomplete. For one page I get the console message "could not load glyph 321". When I print to a file and select 'PDF' format, I get sometimes PDF files that ghostview (gv-3.6.2-2.el4)/ghostscript (ghostscript-7.07-33.11.el4) find errors with. Xpdf (xpdf-3.00-20.el4) also does not like these PDF files (lots of errors of various sorts). Even Adobe's acroread does not like them sometimes. Sometimes, with enough fussing with I can get the PDF files to print. Sometimes I end up taking a screen shot with gimp of the Adobe acroread window and print that. :-( I have done two things: 1) Created a fresh profile and re-populated with my bookmarks, passwords, and addons. No difference. 2) Created a fresh profile and did not re-populate with with anything (basically a 'vanila' profile). I still have problems. It appears that there is some system setting or some package I have loaded (I have a bunch of packages from rpmforge and epel installed). I also have some extra fonts installed. I am not sure what the problem is. I have Seamonkey installed and Seamonkey *seems* to print at least some pages properly (not extensively tested). I like firefox and have it all setup the way I like. Everything *except* printing works just fine. Firefox *used* to print just fine. I *think* the problem with printing started with Firefox 3.0.<mumble>, but I am not sure exactly. Oh, I *don't* run either the Gnome or KDE desktop environment -- I use a plain window manager only (FVWM in MWM mode). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss