- Discuss - lists.centos.org

OT: eclipse on x86_64 compile for x86?
by Coert Waagmeester 14 Aug '09

14 Aug '09

Hello all, Have installed eclipse 3.5 x86_64 from the eclipse site, with CDT and QT integration. I am just starting to learn C++ but I would like to know how to set up the ability to compile for 32 bit as well? At the moment I am googleing this as well. Regards, Coert

2 1

CentOS-announce Digest, Vol 54, Issue 5
by centos-announce-request＠centos.org 14 Aug '09

14 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1209 Moderate CentOS 3 i386 curl - security update (Tru Huynh) 2. CESA-2009:1209 Moderate CentOS 3 x86_64 curl - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 14 Aug 2009 04:34:58 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1209 Moderate CentOS 3 i386 curl - security update To: centos-announce(a)centos.org Message-ID: <20090814023458.GA20744(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1209 curl security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1209.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/curl-7.10.6-10.rhel3.i386.rpm updates/i386/RPMS/curl-devel-7.10.6-10.rhel3.i386.rpm source: updates/SRPMS/curl-7.10.6-10.rhel3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update curl\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Re: [CentOS] [Off-list] Slow IDE on GeForce 8200 board
by Niki Kovacs 14 Aug '09

14 Aug '09

Ian Murray a écrit : > > Nobody said I was breaking rules, only that I annoyed them. > Then let me apologize for having bothered you with outdated concepts like respect, politeness or consideration. Believe it or not, I just took a peek in my Oxford Dictionary: "egoism, n (usu derog) state of mind in which one is not concerned by the immediate wishes or needs of Ian Murray". Cheers from the sunny South of France, Niki Kovacs

1 0

Re: [CentOS] [Off-list] Slow IDE on GeForce 8200 board
by Niki Kovacs 14 Aug '09

14 Aug '09

Ian Murray a écrit : > Niki, > > I am perfectly comfortable with my email client and I prefer top posting > because I don't like wading through constantly re-quoted stuff I already > read. I will on occasion interleave and bottom post if it serves my > purpose, though. If you don't like it, don't read my posts. > Some folks just humbly take the advice and adapt to a community's rules. Others remain draped in their glory and don't mind telling everybody they prefer doing so. This reminder probably doesn't "serve your purpose", as you say. Well, just follow your own advice. Don't read it. :o)

1 0

Centralised logging with Gui and alerts?
by Gavin Henry 14 Aug '09

14 Aug '09

Hi all, If logging all logs via syslog to a central syslog server that are all Centos based, what GUIs are out there to browse them etc. ? I know about splunk but don't want to go down that route. Also, some servers are hosted and would be best not sending their logs across the net to a central syslog (although we could openvpn them in), so can the same system be setup to receive logwatch emails? Any tips or best practices for this above and beyond just a central syslog server would be very appreciated. Server numbers are in the double figures and some are Windows (would be nice to get some of those 'logs' too - snare?). Thanks. -- Sent from my mobile device http://www.suretecsystems.com/services/openldap/ http://www.suretectelecom.com

2 2

yum update
by madunix 14 Aug '09

14 Aug '09

Can any one clarify this, is auto updating at all production servers recommended or not? need to know your opinion, how do you manage the update? -mu

11 14

rpm question
by Jerry Geis 14 Aug '09

14 Aug '09

When I install some RPMS like openoffice 3 on centos x85_64 is there some command that will leave all the actual files alone (leave them installed) but just remove the RPM name from the RPM database so centos now things the packages are not installed? Reason is I was wanting to do this so a next yum update does not get all confused... and the yum update happens just like I never installed openoffice 3. is there a way to do that ? Jerry

5 6

Centos 5.3 - php-5.2.10
by For＠ll 14 Aug '09

14 Aug '09

Hi, I was looking a "stable" repo when I find php-5.2.10 wich I can use on my centos 5.3, previously I used a remi and epel repo but now they are have a php-5.3.0. Regards, For@ll

2 1

(solved) HP C4580 printer x86_64
by Shawn Brown 14 Aug '09

14 Aug '09

Hi, I managed to get my C4580 (4500 series) connected to my router to work with 64 bit 5.3. That printer needs at least hplip 2.8.10 which I found at http://rpm.pbone.net/index.php3/stat/4/idpl/12086038/com/hplip-2.8.10-0.1.e… It was just a matter of following the manual install instructions for hplip here http://hplipopensource.com/hplip-web/install/manual/distros/redhatenterpris… and then getting the necessary dependencies. In the end it worked with (this is for the last line of step 3 in HP's instuctions) rpm -Uvh ./hplip-2.8.10-0.1.el5.test.x86_64.rpm ./python-imaging-1.1.6-2.el5.rf.x86_64.rpm ./hpijs-2.8.10-0.1.el5.test.x86_64.rpm ./net-snmp-5.3.2.2-5.el5_3.1.x86_64.rpm ./net-snmp-libs-5.3.2.2-5.el5_3.1.x86_64.rpm ./lm_sensors-2.10.7-4.el5.x86_64.rpm I'm happy with HP's Linux support! Shawn

1 0

glibc update RHBA-2009:1202 release?
by Rainer Traut 13 Aug '09

13 Aug '09

Hi, will this update be released by centos? Or because it's no security update it gets a lower priority in the queue? Thx Rainer

4 3

Re: [CentOS] Dangerous Software Raid instructions on Wiki
by James B. Byrne 13 Aug '09

13 Aug '09

REPLY-TO: <183c528b0908121238k33c407ah18e4762c48652de4(a)mail.gmail.com> On Wed, 12 Aug 2009 15:38:00 -0400 Brian Mathis <brian.mathis(a)gmail.com> > > It also helps to understand how people read instructions. When > they look at a page, they see {big blob of useless introduction > text}, then they see "Step 1, do this". They almost always go > right to Step 1. > > I'd bet $100 that everyone reading this thread has done that more > than once, recently. It's not good enough to put the warnings so > far separated from the actual commands. You might have some > feelings about how things *should* be done, but you don't get to > make that decision for people, you just need to know it and work > within it. "Code Complete" has an entire section on why variables should only be declared immediately before they are used. This is essentially the same issue in a different guise. > > As far as the replies here go, the first one insinuates that the > person can't follow instructions, the second one calls the person > dumb, and others say that the person is incompetent, and compares > their intelligence to that of a bottle. That IS rude and arrogant > in my book, and your final sentence only continues with the > passive-aggressive swiping that goes on too often in IT realms. > Well, I find that the real problem is more often the medium, not the messenger. The immediacy of E-Mail simply does not promote the reflective approach required to create effective written communication. However, what can be compensated for by body language when stated in person may project a brusque and contemptuous tone in writing so that failing to take the necessary time extracts its cost in needless upset and conflict. There are a few other things that people should really consider before they dash off their offhand remarks. Firstly, it is unwise to shout at ones watchman, for the next time they see something suspicious then they may remember the first occasion and hold their tongue. If somebody senses something is wrong then they should be civilly treated when they bring it to our attention. Even if their concern is the result of their misapprehension this is a sign that perhaps the information provided needs revisiting and revision. I doubt that anyone could reasonably hold up the documentation of most software as exemplars of clarity and comprehensiveness. Secondly, not all of us, I speculate that not even most of us, work in large organisations. In fact, I would venture to guess that most people using CentOS are found in small shops or even sole practitioner sites. So, railing about how things should be run given infinite resources and time simply of flies in the face of the realities surrounding OSS utilisation and is completely useless. Thirdly, the Net has a surfeit of nannies. If you are not yourself going to deal with the issue raised then keep silent. If the 'signal to noise' ratio is bothering you then at least withhold your own contribution to the noise. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

OT: Firefox SSL error on Linux, Firefox OK on Windows - same web site
by Lanny Marcus 13 Aug '09

13 Aug '09

Using CentOS 5.3 (32 bit) on my Desktop with Mozilla Firefox 3.0.12. With one web site (LinkShare) I am getting an SSL error, after clicking to get a more advanced report I do not get that error, using Mozilla Firefox 3.0.13 on M$ Windows and I get the report OK on Windows. It appears, when using Firefox on Linux, that it is not ending up on the LinkShare web site and Firefox is giving me the below error. I use OpenDNS.com for DNS service. Question: How can I verify that there is no corruption in my Firefox installation on Linux and that I have the latest SSL CAs for it? TIA! Lanny Secure Connection Failed analytics.linksynergy.com uses an invalid security certificate. The certificate is only valid for *.opendns.com (Error code: ssl_error_bad_cert_domain) * This could be a problem with the server's configuration, or it could be someone trying to impersonate the server. * If you have connected to this server successfully in the past, the error may be temporary, and you can try again later. Or you can add an exception… Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.12) Gecko/2009072711 CentOS/3.0.12-1.el5.centos Firefox/3.0.12

3 7

Dangerous Software Raid instructions on Wiki
by Chan Chung Hang Christopher 13 Aug '09

13 Aug '09

http://wiki.centos.org/HowTos/SoftwareRAIDonCentOS5 has: dd if=/dev/zero of=/dev/sda bs=512 count=64 dd if=/dev/zero of=/dev/sdb bs=512 count=64 Will the joker who put in this particular gem without any warnings or a clear explanation for those who need a clueby4 with regards to file systems please either remove the instructions or add a very clear warning that damage to file systems that is not recoverable will result if run on the wrong disk(s). My successor at my previous job has gleefully followed those instructions (he seriously needs a clueby4 which is why he bothers to actually read HowTos) and on a production box (who wants pop-corn and soda? Sorry, the er support conversation will not be on irc) and I think this seriously highlights the need for HowTo writers to seriously consider their audience as dumb monkeys that just follow whatever you tell them to do without thinking if you do not list out things they first have to think about or questions they first need to answer. Christopher

11 19

OT: hardware newbie p9115-505
by Fajar Priyanto 13 Aug '09

13 Aug '09

Hi guys, Sorry for the OT. I've posted it in some IBM related forums but no reply yet. We've got an IBM pSeries p9115-505 machine from warehouse. I notice that it doesn't have any port for the monitor. Where do we plug the monitor? >From Google it says something about HMC (Hardware Management Center). Any hints is really2 appreciated. Thank you.

6 6

Re: [CentOS] CentOS Project Infrastructure
by James B. Byrne 13 Aug '09

13 Aug '09

On Sun, 9 Aug 2009 03:23:57 +0100 Marko Vojinovic <vvmarko(a)gmail.com> wrote: > Unfortunately, governments are typically not made of experts, but of > opportunists. Name one president of <insert your favorite political > entity here> that has been elected because he has a PhD in political > sciences/history/law/whatever, or because he had enough hands-on > experience in governing the state (maybe without a formal degree). Woodrow Wilson. Ph.D. in Political Science (John Hopkins), President of Princeton University, Governor of the State New Jersey, President of the United States of America. > Even if one such exists, I doubt he would listen to whatever > random non-initiated group of people are "suggesting". Then you would be wrong. Once his mind was made up then Wilson became quite closed to further suggestion on a subject. Up to that point he sought as wide and varied a range of opinion as he could obtain. Your pride in what you know is blinding you to the value of knowledge of others in areas where you know little and presume much. I have had much experience with volunteer organisations. I now stay well clear of any involvement with them. This recent string of interrogations by concerned people, whether ignorant or not, and the aggrieved tone of the responses of some of the inner circle demonstrate the type of emotional blackmail which I frequently encounter and find so distressful in these bodies. I have no doubt that everyone involved with CentOS is pursuing some goal that they believe serves the greater good. However, difficulties ofttimes arise when one encounters another who either does not share ones belief or, as is more often the case, understands the nature of the shared goal, or the means by which it is attained, in a fashion fundamentally at odds with ones own. These uncomfortable collisions with political reality often occur at junctures such as CentOS recently experienced. Most of the people here were no doubt quite content to allow the sages of the project whatever leeway that the sages desired. In return we got a free (as in beer) copy of a very reputable Linux distribution. Had the recent inner conflict not become public then this happy arrangement might have persisted indefinitely. I still consider this arrangement a very good bargain having neither the talent nor the desire to become a sage myself. However, when the mortal nature of the sages is revealed together with the possibility of a project collapse as very real consideration, regardless how unlikely, then those dependent upon the stability of the project become fearful. Fearful people seek reassurance that their fears are baseless. A bald statement by the sages that the fear is baseless is in itself insufficient. Doubtless the fearful have told themselves that many times already. Having inoculated doubt it is now incumbent upon those who sowed it to address specific concerns raised by those who fear. Telling people who voice concerns to get lost and find another distribution, even if their concerns are presented in the form of ill-considered suggestions, smacks of arrogance to me, however it appears to others. Further, it does absolutely nothing to address the fears that prompted the suggestion. The baleful effects of these kind of replies upon those who read but choose not to participate may only be imagined, but be assured they are neither positive nor insignificant. The fact that one is a volunteer leader does not lessen the requirement that to receive the trust and support of others one must meet satisfactorily the expectations of those who follow. I am not clamoring for any immediate changes. I do not propose a program that I wish anyone else to follow. I do appreciate very much the efforts of all who contribute to the success of the CentOS projects. I further acknowledge that those who presently form the core support team are probably best equipped to evaluate the bona fides of prospective core members. Nonetheless, it is very evident from the heated exchanges on this mailing list that there exists a substantial divergence on which path to take from here. It seems to me insupportable that the past practices of a small coterie of initiates deciding on everything without community input will suffice for the future. If that does become the choice taken then I foresee the community splitting in the future in consequence. Finally, please drop the word "meritocracy" in future communications. It implies a natural worthiness of those to whom it is applied which is simply not appropriate to these discussions. The proper word in this circumstance is "oligarchy." -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

13 24

c5-testing
by John R Pierce 13 Aug '09

13 Aug '09

is there a list more sutiable for c5-testing discussions? I'd like to install the php-5.2.9 on there, but I'm getting a dependency problem # yum update --enablerepo=c5-testing php Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * rpmforge: fr2.rpmfind.net * base: updates.interworx.info * updates: mirrors.cmich.edu * addons: mirror.stanford.edu * extras: mirrors.xmission.com Excluding Packages from Red Hat Enterprise 5 - RPMforge.net - dag Finished Excluding Packages from CentOS-5 - Base Finished Excluding Packages from CentOS-5 - Updates Finished 271 packages excluded due to repository priority protections Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package php.i386 0:5.2.9-2.el5.centos set to be updated --> Processing Dependency: php-common = 5.2.9-2.el5.centos for package: php --> Processing Dependency: php-cli = 5.2.9-2.el5.centos for package: php --> Running transaction check ---> Package php.i386 0:5.2.9-2.el5.centos set to be updated --> Processing Dependency: php-common = 5.2.9-2.el5.centos for package: php ---> Package php-cli.i386 0:5.2.9-2.el5.centos set to be updated --> Processing Dependency: php-common = 5.2.9-2.el5.centos for package: php-cli --> Finished Dependency Resolution php-5.2.9-2.el5.centos.i386 from c5-testing has depsolving problems --> Missing Dependency: php-common = 5.2.9-2.el5.centos is needed by package php-5.2.9-2.el5.centos.i386 (c5-testing) php-cli-5.2.9-2.el5.centos.i386 from c5-testing has depsolving problems --> Missing Dependency: php-common = 5.2.9-2.el5.centos is needed by package php-cli-5.2.9-2.el5.centos.i386 (c5-testing) Error: Missing Dependency: php-common = 5.2.9-2.el5.centos is needed by package php-5.2.9-2.el5.centos.i386 (c5-testing) Error: Missing Dependency: php-common = 5.2.9-2.el5.centos is needed by package php-cli-5.2.9-2.el5.centos.i386 (c5-testing) and, when I list whats in c5-testing that matches php\*, I don't see that php-common at all. # yum list --disablerepo=\* --enablerepo=c5-testing php\* Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile Installed Packages php.i386 5.1.6-23.2.el5_3 installed php-cli.i386 5.1.6-23.2.el5_3 installed php-common.i386 5.1.6-23.2.el5_3 installed php-gd.i386 5.1.6-23.2.el5_3 installed php-ldap.i386 5.1.6-23.2.el5_3 installed php-mbstring.i386 5.1.6-23.2.el5_3 installed php-mcrypt.i386 5.1.6-15.el5.centos.1 installed php-mysql.i386 5.1.6-23.2.el5_3 installed php-pdo.i386 5.1.6-23.2.el5_3 installed php-pear.noarch 1:1.4.9-4.el5.1 installed php-pear-Date.noarch 1.4.7-2.el5.centos installed php-pgsql.i386 5.1.6-23.2.el5_3 installed php-xml.i386 5.1.6-23.2.el5_3 installed phpmyadmin.noarch 2.11.9.5-1.el5.rf installed Available Packages php.i386 5.2.9-2.el5.centos c5-testing php-bcmath.i386 5.2.9-2.el5.centos c5-testing php-cli.i386 5.2.9-2.el5.centos c5-testing php-common.i386 5.2.9-2.el5.centos c5-testing php-dba.i386 5.2.9-2.el5.centos c5-testing php-debuginfo.i386 5.2.9-2.el5.centos c5-testing php-devel.i386 5.2.9-2.el5.centos c5-testing php-gd.i386 5.2.9-2.el5.centos c5-testing php-imap.i386 5.2.9-2.el5.centos c5-testing php-ldap.i386 5.2.9-2.el5.centos c5-testing php-mbstring.i386 5.2.9-2.el5.centos c5-testing php-mysql.i386 5.2.9-2.el5.centos c5-testing php-ncurses.i386 5.2.9-2.el5.centos c5-testing php-odbc.i386 5.2.9-2.el5.centos c5-testing php-pdo.i386 5.2.9-2.el5.centos c5-testing php-pear.noarch 1:1.5.1-2.el5s2 c5-testing php-pgsql.i386 5.2.9-2.el5.centos c5-testing php-snmp.i386 5.2.9-2.el5.centos c5-testing php-soap.i386 5.2.9-2.el5.centos c5-testing php-suhosin.i386 0.9.25-1.el5.centos c5-testing php-suhosin-debuginfo.i386 0.9.25-1.el5.centos c5-testing php-xml.i386 5.2.9-2.el5.centos c5-testing php-xmlrpc.i386 5.2.9-2.el5.centos c5-testing

1 1

A bit more on the Firefox 3.5.issue
by Ron Blizzard 13 Aug '09

13 Aug '09

I set up a CentOS desktop computer for my brother and his kids. When Firefox 3.5 came out he decided to download and install it like he would Windows (he doesn't yet understand the repository system). He's been telling me that it works fine, even though I was skeptical due to my experience with Firefox 3.5 on CentOS 5.3. Then today, he says, "Oh, by the way, the CentOS computer has been rebooting itself every now and then." What?! (This is where he is in Linux -- doesn't realize that it's not like Windows, that it's not supposed to reboot randomly.) "Does it do it when you're in Firefox?" "Yes." He's okay, though, just a matter of uninstalling his home root version of Firefox -- I've been updating his computer with yum, so he still has the newest *repository* release of Firefox also. At any rate, just to let everyone know, whatever the issue is with Firefox 3.5 and *some* CentOS 5.3 computers (an Xorg graphics card incompatibility issue?) -- it goes beyond the RPM package released by Michael Harris. As for myself, I'm just going to wait for the repository Firefox 3.5 upgrade. -- RonB -- Using CentOS 5.3

9 17

Million linux virtual machines
by Bob Hoffman 13 Aug '09

13 Aug '09

If someone posted already, forgive me I get the digest. http://www.tgdaily.com/content/view/43480/108/ Scientists get a million Linux kernels to run at once Scientists at Sandia National Laboratories in Livermore, have run more than a million Linux kernels as virtual machines. (how long before shared hosts use this....lol) The technique will allow them to effectively observe behaviour found in malicious botnets, or networks of infected machines that can operate on the scale of a million nodes. One of the researchers Ron Minnich, said they are often difficult to analyze since they are geographically spread all over the world. However using virtual machine and a Thunderbird supercomputing cluster for the demonstration, the team was able to run VMS at a similar scale as a botnet. This allows cyber researchers to watch how botnets work and explore ways to stop them in their tracks said Minnich. The largest number of kernals that had been run at once was 20,000 kernels. However the more kernels that can be run at once the more effective cyber security professionals can be in combating the global botnet problem. The hope is one day to emulate the computer network of a small nation, or even one as large as the United States, in order to 'virtualise' and monitor a cyber attack." "The sheer size of the Internet makes it very difficult to understand in even a limited way," said Minnich. It has been estimated that the team will need to run 100 million CPUs by 2018 in order to build a computer that will run at the speeds they need.

6 6

CentOS Project Infrastructure
by Marcus Moeller 13 Aug '09

13 Aug '09

Dear Community, I recently started thinking about how to make a project like CentOS more transparent and open (especially for new contributors). The http://wiki.centos.org/Team page (which Dag created about a year ago) lists about 20 (more or less active) members, divided into core and community contributors. I personally do not like that kind of distinction. Of course there should be something like a 'board' and clear responsibilities (release management and such), but at least the board should be elected by all active members. As we are a community of ppl with high technical skills probably only persons with a valuable number of contributions and knowledge will be elected to the board. A board member could of course be responsible for core dev tasks, too. The board itself could consist of a mix of technical, marketing, or legal orientated ppl. To make this happen, the new maintainer process has to be clarified first. I am thinking about a (frequently maintained) list of open tasks e.g. maintained within trac, from which a new (and even existing) maintainer could choose one. Of course suggestions for task that are not listed there could be published on the ML. The 'Team' page should list major tasks one is working on or responsible for. If one needs help (e.g. I am in need of help for the website update), he/she could add a note to this task list (and maybe even announce on the ML) with contact details (wiki homepage). Other areas of taking part should and are already covered on: http://wiki.centos.org/Contribute But some aspects are still unclear: THE WIKI: For me a wiki is a collaboration platform which should be accessible to every contributor in the same manner (except the front and user pages). That means there should be a join process (where you have to agree to the cc license) which then leads to EditGroup membership. I do not see a good reason why new articles should first be published on the ML. A user should be able to add a new article and then announce it on the ML (if necessary). Same on the personal pages. Of course it makes sense that new users introduce theirself on the ML but they should already have access to their own personal page, before. A comment function could be a good feature but in a comparatively small community like ours, most of everything can be discussed via ML or could be handled through page changelog. I personally see no reason to honor authorship of created pages besides the wiki page history. THE BUGTRACKER: The CentOS bugtracker contains a lot of upstream bugs that cannot be fixed here. We have to make sure that these are tracked upstream and fixed there. THE CONTRIB REPO: This repository has been re-invited in CentOS 5.3 but it's still unclear what it's meant to be for. Could it contain non-free packages. Should'nt oss packages better be pushed to EPEL/RPMFusion or even RPMForge? Where should spec files go? Is there an SVN with write access and an automated build process, already? Barriers on this site should be lowered when it's clear what the repo is meant for. QA: Some of you might know that CentOS has got an QA process before releases. This is an closed process and invite only. There where some reasons for it (e.g. some ppl only took part in the beta program to get early access to upcoming releases) but an invite only QA could not be the solution. This process should be open to all members. BARRIERS: Overall, the barriers for new contributors are much too high. This can also be fixed with something like a mentorship program where longtime developers take care about new maintainers. Best Regards Marcus Moeller

34 101

disable virtual terminals during kickstart installation
by James A. Peltier 13 Aug '09

13 Aug '09

Hi All, I'm trying to figure out where the inittab is for a pxeboot/kickstart installation so that I can disable virtual terminals that allow for interactive input such as CTRL+ALT+F2. I've looked in the /etc directories for the pxeboot initrd as well as the stage2 and minstg2 files. Am I missing something grossly obvious here? -- James A. Peltier Systems Analyst (FASNet), VIVARIUM Technical Director HPC Coordinator Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax : 778-782-3045 E-Mail : jpeltier(a)sfu.ca Website : http://www.fas.sfu.ca | http://vivarium.cs.sfu.ca http://blogs.sfu.ca/people/jpeltier MSN : subatomic_spam(a)hotmail.com The point of the HPC scheduler is to keep everyone equally unhappy.

4 7

vtund segfault
by Daniel Bruno 12 Aug '09

12 Aug '09

I configured a tunnel where the server is a CentOS 5 x86_64 with compress. In the client don't have problem but in the message log of the server show this erro: vtund[15145]: segfault at 0000000000000040 rip 0000000000409774 rsp 00007fff88d548d0 error 4 I did the same configuration on another server, but i686 and had no problems. Packs: vtun-3.0.2-1.el5.rf x86_64 lzo2-2.02-3.el5.rf x86_64 Any idea? Thanks, -- Daniel Bruno http://danielbruno.eti.br danielbruno(a)projetofedora.org

2 1

vnc - single application or a "remote localhost" on Firefox
by Frank Cox 12 Aug '09

12 Aug '09

Normally I use VNC-over-SSH to provide a complete desktop to a remote user. Is there a way to provide a single application to a user instead of a complete desktop? In this case I am looking for a method to provide remote report-viewing access to LedgerSMB for a company's outside accountant. LedgerSMB runs through a web browser (i.e. http://localhost/ledgersmb) so he doesn't need or want remote access to anything other than one instance of Firefox. In other words, normally the remote users crank up a VNC session and see their full desktop. For this instance I would like to have him see only a Firefox session. A ssh session like "ssh -X user@remotehost firefox" works. But it's painfully slow. On the other hand, VNC has a reasonable amount of snap. The other approach would be to somehow do use some kind of ssh port-forwarding under Firefox so he could run Firefox locally on his own computer, and somehow access http://localhost/ledgersmb on the remote machine. Is there such a thing as a "remote localhost" that would work like that? I don't want to open anything other than ssh on the application server to the big scary world. To complicate things a bit more, the accountant runs Windows on his computer. Maybe there is a simple way to accomplish this feat and I'm just not seeing it? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

4 6

Re: [CentOS] Laptop hd incorrect
by chandlercody＠gmail.com 12 Aug '09

12 Aug '09

Thank you for the help and info! ------Original Message------ From: Lanny Marcus Sender: centos-bounces(a)centos.org To: CentOS mailing list ReplyTo: CentOS mailing list Subject: Re: [CentOS] Laptop hd incorrect Sent: Aug 12, 2009 2:45 PM On Wed, Aug 12, 2009 at 1:07 PM, <chandlercody(a)gmail.com> wrote: > Thanks for the reply! Looking at the specs the hd is sata. Also the documents for rhel are they the same for centos? I'm looking for items to help me learn/gain knowledge. Should be binary equivalent with RHEL, so the upstream documentation for RHEL should be fine. There may be some differences in the updating procedures, but other than that, I think it should be the same. If I'm wrong, someone more knowledgeable, hopefully will jump in and correct me. Suggest you download the Live CD and burn that and test it on your laptop to see if it is going to work OK on your HW. It can be problematic on a laptop, especially if it is very new. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent on the Now Network� from my Sprint® BlackBerry

1 0

Re: [CentOS] Laptop hd incorrect
by chandlercody＠gmail.com 12 Aug '09

12 Aug '09

Thanks for the reply! Looking at the specs the hd is sata. Also the documents for rhel are they the same for centos? I'm looking for items to help me learn/gain knowledge. Thank You Cody ------Original Message------ From: Robert Heller Sender: centos-bounces(a)centos.org To: CentOS mailing list Cc: CentOS(a)centos.org ReplyTo: CentOS mailing list Subject: Re: [CentOS] Laptop hd incorrect Sent: Aug 12, 2009 1:19 PM At Wed, 12 Aug 2009 16:40:11 +0000 CentOS mailing list <centos(a)centos.org> wrote: > > > Hello > > I'm new to linux and am trying to install centos 5.3 on my laptop > and it has an ata drive but centos does not see the had or cdrom. > Googleing does not give me much to check. The laptop is a hp-g60 249wm, > latest bios update. The bios does not have any ability to change drive > information. The bios basically allows me to only set time, date and > boot item. Any advice or direction is appreciated! Is the drive IDE (PATA) or SATA? If SATA, you will need a proper SATA driver. As a *guess* (which worked for the SATA controller on my desktop motherboard), try adding the 'irqpoll' kernel parameter: Boot: linux irqpoll > > Thank you > Cody > Sent on the Now NetworkÂ™ from my SprintÂ® BlackBerryMIME-Version: 1.0 > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > > -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/ Sent on the Now Network� from my Sprint® BlackBerry

3 2

vpn
by chloe K 12 Aug '09

12 Aug '09

Hi Where remote and local address and subnet I can put for vpn configuration in linux box? Thank you __________________________________________________________________ Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark your favourite sites. Download it now http://ca.toolbar.yahoo..com.

3 2

SOLVED: Re: OT: Firefox SSL error on Linux, Firefox OK on Windows - same web site
by Lanny Marcus 12 Aug '09

12 Aug '09

On Wed, Aug 12, 2009 at 6:24 AM, Lanny Marcus<lmmailinglists(a)gmail.com> wrote: > Using CentOS 5.3 (32 bit) on my Desktop with Mozilla Firefox 3.0.12. > With one web site (LinkShare) I am getting an SSL error, after > clicking to get a more advanced report I do not get that error, using > Mozilla Firefox 3.0.13 on M$ Windows and I get the report OK on > Windows. It appears, when using Firefox on Linux, that it is not > ending up on the LinkShare web site and Firefox is giving me the below > error. I use OpenDNS.com for DNS service. > > Secure Connection Failed > > analytics.linksynergy.com uses an invalid security certificate. Thank you Johnny, Filipe and Rick (Rick wrote me off list)! The problem is not on my end. :-) The problem is with the DNS settings of LinkShare. I wrote to them, again, this time with information Filipe and Rick provided to me and I'm sure after they change their DNS settings, this problem will go away. :-)

1 0

Laptop hd incorrect
by chandlercody＠gmail.com 12 Aug '09

12 Aug '09

Hello I'm new to linux and am trying to install centos 5.3 on my laptop and it has an ata drive but centos does not see the had or cdrom. Googleing does not give me much to check. The laptop is a hp-g60 249wm, latest bios update. The bios does not have any ability to change drive information. The bios basically allows me to only set time, date and boot item. Any advice or direction is appreciated! Thank you Cody Sent on the Now Network� from my Sprint® BlackBerry

2 1

Re: [CentOS] [Off-list] Slow IDE on GeForce 8200 board
by Kai Schaetzl 12 Aug '09

12 Aug '09

Ian Murray wrote on Tue, 11 Aug 2009 05:51:05 +0000 (GMT): > I hit reply and changed the subject. Please stop doing that. That's what I do on my local > LUG list and nobody complained so, I don't know if I have committed > some list faux pas, so apologies if I have done. It's wrong for every mail conversation. > > Perhaps you can set me straight on where I am going wrong? Send a new message. If you hit "reply" then the threading information (in -reply-to und references headers) gets inserted as well and thus the message gets threaded to that thread. Opposite to what some people who are new on the net believe the threading is *not* done by the subject but by the threading headers. The subject gets used only in case the threading headers are absent. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

7 8

ntp will not drift to correct time
by Tom Brown 12 Aug '09

12 Aug '09

Hi On 5.3 i have a situation where some boxes have been 3 or 4 seconds out and restarting ntpd has fixed the issue. What i dont understand is why the clocks did not drift to the correct time when the config seems correct in that restarting ntp did correct the time. Is there something 'special' i need to do in order for the drift to work? $ cat /etc/ntp.conf restrict default ignore restrict 127.0.0.1 restrict 10.0.0.0 mask 255.0.0.0 nomodify notrap server server01 server server02 fudge 127.127.1.0 stratum 10 driftfile /var/lib/ntp/drift broadcastdelay 0.008 keys /etc/ntp/keys # cat /etc/ntp/step-tickers server01 server02 any clues? thanks

3 3

CentOS-announce Digest, Vol 54, Issue 4
by centos-announce-request＠centos.org 12 Aug '09

12 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1203 Important CentOS 5 i386 subversion Update (Karanbir Singh) 2. CESA-2009:1203 Important CentOS 5 x86_64 subversion Update (Karanbir Singh) 3. CESA-2009:1204 Moderate CentOS 5 i386 apr Update (Karanbir Singh) 4. CESA-2009:1204 Moderate CentOS 5 x86_64 apr Update (Karanbir Singh) 5. CESA-2009:1206 Moderate CentOS 5 i386 libxml2 Update (Karanbir Singh) 6. CESA-2009:1206 Moderate CentOS 5 x86_64 libxml2 Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 11 Aug 2009 21:17:40 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1203 Important CentOS 5 i386 subversion Update To: centos-announce(a)centos.org Message-ID: <20090811211740.GA16899(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1203 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1203.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: f0c736453c1ce6c9a38a653e2b877ac4 mod_dav_svn-1.4.2-4.el5_3.1.i386.rpm 184e957bc500a510a92de1d23f97fed9 subversion-1.4.2-4.el5_3.1.i386.rpm 06053f12771b40b0cf48e2413837c08f subversion-devel-1.4.2-4.el5_3.1.i386.rpm 68d90d888f095727478383e1db97d023 subversion-javahl-1.4.2-4.el5_3.1.i386.rpm 6fbd923348f1ce5e7f97002f6a45f798 subversion-perl-1.4.2-4.el5_3.1.i386.rpm 91696426d915c1d7e10d8b12c5299d9f subversion-ruby-1.4.2-4.el5_3.1.i386.rpm Source: 131e0a50111346c6486288a3b1550660 subversion-1.4.2-4.el5_3.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 11 Aug 2009 21:17:40 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1203 Important CentOS 5 x86_64 subversion Update To: centos-announce(a)centos.org Message-ID: <20090811211740.GA16914(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1203 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1203.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: b0aeb1d66bfb0d66e1be65104e74c8b7 mod_dav_svn-1.4.2-4.el5_3.1.x86_64.rpm e3490020afeae920a1f5bd5792d0abbd subversion-1.4.2-4.el5_3.1.i386.rpm d9a5e47803339ceab4a61f84692527d9 subversion-1.4.2-4.el5_3.1.x86_64.rpm e7434dca3dd19df2b59562427f24b153 subversion-devel-1.4.2-4.el5_3.1.i386.rpm 0429a6aead2ae85c558d6465f92d9fbc subversion-devel-1.4.2-4.el5_3.1.x86_64.rpm 346a91029a06af40df118f8a2692096f subversion-javahl-1.4.2-4.el5_3.1.x86_64.rpm 2dc6b812f12548f5f514ee7f1365a2ff subversion-perl-1.4.2-4.el5_3.1.x86_64.rpm 7ff89a5e9c62dbd2381847a10da6f597 subversion-ruby-1.4.2-4.el5_3.1.x86_64.rpm Source: 131e0a50111346c6486288a3b1550660 subversion-1.4.2-4.el5_3.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 11 Aug 2009 21:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1204 Moderate CentOS 5 i386 apr Update To: centos-announce(a)centos.org Message-ID: <20090811212030.GA17071(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1204 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1204.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9642e5d947f25172cd56fc2a8c6d2760 apr-1.2.7-11.el5_3.1.i386.rpm 5641fe170aa72d005ecd4f267c5c536a apr-devel-1.2.7-11.el5_3.1.i386.rpm f5010e63327411d7262a3b394f3a3c10 apr-docs-1.2.7-11.el5_3.1.i386.rpm a3778987a531bc5868e33f99b47bf7ae apr-util-1.2.7-7.el5_3.2.i386.rpm 3513e78d15df4989900bfeefeab52424 apr-util-devel-1.2.7-7.el5_3.2.i386.rpm adcd3f02096695ec917d31c4f3093cff apr-util-docs-1.2.7-7.el5_3.2.i386.rpm Source: e64eb63b0a673dd282f820448251d305 apr-1.2.7-11.el5_3.1.src.rpm 8ed1b373bd42637686336263986f4a07 apr-util-1.2.7-7.el5_3.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 11 Aug 2009 21:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1204 Moderate CentOS 5 x86_64 apr Update To: centos-announce(a)centos.org Message-ID: <20090811212030.GA17086(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1204 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1204.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: e3280b6a5a0b4a919be10111c8ffc048 apr-1.2.7-11.el5_3.1.i386.rpm 3c5fd940a265609392f4082b7d3ee59d apr-1.2.7-11.el5_3.1.x86_64.rpm 47b846e27a7b7928f4d4895d7f5d943c apr-devel-1.2.7-11.el5_3.1.i386.rpm 84764e2fe91456ae82a168abe9396726 apr-devel-1.2.7-11.el5_3.1.x86_64.rpm 5e4644ebecf727c4aa60e0e6f61c3082 apr-docs-1.2.7-11.el5_3.1.x86_64.rpm 589935915526ff9533588c78055577fd apr-util-1.2.7-7.el5_3.2.i386.rpm cd5fbb4f66ce380b1e823db8df2b0bef apr-util-1.2.7-7.el5_3.2.x86_64.rpm e5d106c523e22c86fc072973f10e88e7 apr-util-devel-1.2.7-7.el5_3.2.i386.rpm fcd8246fa89312c2b0a020d4ba59b430 apr-util-devel-1.2.7-7.el5_3.2.x86_64.rpm b9d1d98e896652bcfa6c4aed11ed00e6 apr-util-docs-1.2.7-7.el5_3.2.x86_64.rpm Source: e64eb63b0a673dd282f820448251d305 apr-1.2.7-11.el5_3.1.src.rpm 8ed1b373bd42637686336263986f4a07 apr-util-1.2.7-7.el5_3.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 11 Aug 2009 21:21:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1206 Moderate CentOS 5 i386 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20090811212158.GA17170(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1206 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1206.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 35cabf82753ae2814826da864473b01b libxml2-2.6.26-2.1.2.8.i386.rpm ca25791a3a53120ba46f0ef93cc83ac8 libxml2-devel-2.6.26-2.1.2.8.i386.rpm d6a2e20c9451d325c864ed8cfbbda6f9 libxml2-python-2.6.26-2.1.2.8.i386.rpm Source: ea5703af208906f7701cf7a83fedfc0c libxml2-2.6.26-2.1.2.8.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 11 Aug 2009 21:21:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1206 Moderate CentOS 5 x86_64 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20090811212158.GA17185(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1206 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1206.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 66e4fa3e253ff023b7c784d409576054 libxml2-2.6.26-2.1.2.8.i386.rpm 08a53cf592d13798f270b201b4f92c70 libxml2-2.6.26-2.1.2.8.x86_64.rpm 723ce00ef38cacf6928edfc05576765f libxml2-devel-2.6.26-2.1.2.8.i386.rpm 668f894778609766928dab2a0646f76d libxml2-devel-2.6.26-2.1.2.8.x86_64.rpm d680cc6d783978c4f2cf75da6897c2e6 libxml2-python-2.6.26-2.1.2.8.x86_64.rpm Source: ea5703af208906f7701cf7a83fedfc0c libxml2-2.6.26-2.1.2.8.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 54, Issue 4 **********************************************

1 0

Slow IDE on GeForce 8200 board
by Ian Murray 12 Aug '09

12 Aug '09

In my haste for help, I stupidly hit reply and changed the subject which I thought was enough for a new message, not giving much thought for the threading, etc. So apologies for the hijack, although I would think it fairly obvious that it wasn't deliberate or obvious to me... or a big deal really. My mail doesn't thread. Some further info for those actually interested in helping, I forgot that the HD in question had an Ubuntu 8.10 install on it, so I fired that up and hdparm -t produced 56MB/Sec. So the issue is either kernel or config. Thanks for your patience. ----- Forwarded Message ---- I have a system who's normal activity is running Xen 3.3.1 with Centos 5.3 as the DomU. I had reason to connect an IDE drive to the single IDE interface that this board has. I was getting slow performance. hdparm -t revealed that the thoughput was down to just 2.7 MB/sec. After some tweaking (switch on 32 bit,etc) and retesting under a non-Xen config, I managed to get that to 8MB/Sec. When I move the drive to a USB to IDE adapter, hdparm -t gives me about 18MB/Sec. Big improvement, although I don't know if it is then perfect.. My kernel is 2.6.18-128.4.1.el5. I have kernel parameter pci=nomsi. I can't remember exactly why I needed this, but there was a good reason, maybe SATA drive not working properly or some such. Could this be the cause of my issue? The motherboard blurb states that the IDE interface is ATA/133 compliant and I am using the provided IDE cable. I have tried three hard disks, all with similar results. (2x 40gb + 1x 160gb) lspci | grep IDE gives 00:06.0 IDE interface: nVidia Corporation MCP78S [GeForce 8200] IDE (rev a1) As a reference, hdparm -t against the SATA drive in AHCI mode on the same board gives about 110MB/Sec. Any ideas, anyone? Thanks in advance, Ian.

3 5

Inclusion in the GNU/Linux distro list
by Bassu 11 Aug '09

11 Aug '09

Hello, I was seeing the FSF's GNU site and noticed that CentOS was included as the proprietary or unendorsed distribution and not as the one following their free software distribution guidelines. So my question is, is it really not possible to comply with them or are we just not willing to! I think by default all software comes (at least with the server stuff) is free on CentOS but though not sure about that kernel "blob" thing! ** *All of the distributions listed on this page fail to follow the guidelines in at least two important ways:* - *They do not have a policy of only including free software, and removing nonfree software if it is discovered. Most of them have no clear policy on what software they'll accept or reject at all. The distributions that do have a policy unfortunately aren't strict enough, as explained below.* - *The version of the kernel Linux that they distribute includes blobs: pieces of object code, distributed without source, usually to help operate some device.* CentOS *We're not aware of problems in CentOS aside from the two listed above: there's no clear policy about what software can be included, and nonfree blobs are shipped with Linux. Of course, with no firm policy in place, there might be other nonfree software included that we missed.* Best, Bassu ------ A player who makes a team great is more valuable than a great player. Losing yourself in the group, for the good of the group, that’s teamwork. -John Wooden

3 3

retrieving specific packages from a repo
by Dave 11 Aug '09

11 Aug '09

Hello, I'm setting up an additional repo on a 5.3 machine. I only want three packages out of it, and to exclude all others. I know there's a line to add to the repo file, googling didn't give it to me, anyone know how to get only a selected set of packages from a repo? This is probably a very simple question. Thanks. Dave.

2 1

CentOS-announce Digest, Vol 54, Issue 3
by centos-announce-request＠centos.org 11 Aug '09

11 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1205 Moderate CentOS 3 i386 httpd - security and bug fix update (Tru Huynh) 2. CESA-2009:1205 Moderate CentOS 3 x86_64 httpd - security and bug fix update (Tru Huynh) 3. CESA-2009:1206 Moderate CentOS 3 i386 libxml and libxml2 - security update (Tru Huynh) 4. CESA-2009:1206 Moderate CentOS 3 x86_64 libxml and libxml2 - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 10 Aug 2009 23:35:07 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1205 Moderate CentOS 3 i386 httpd - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20090810213507.GB13702(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1205 httpd security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1205.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/httpd-2.0.46-75.ent.centos.i386.rpm updates/i386/RPMS/httpd-devel-2.0.46-75.ent.centos.i386.rpm updates/i386/RPMS/mod_ssl-2.0.46-75.ent.centos.i386.rpm source: updates/SRPMS/httpd-2.0.46-75.ent.centos.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update httpd\* mod_ssl Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Python 2.4 64-bit problem w/CentOS5.3?
by Curt Mills 11 Aug '09

11 Aug '09

I'm getting this on two XF_64 systems by running "yum update" today. Perhaps Python 2.4 is missing some lib64 libraries? --> Running transaction check ---> Package python.x86_64 0:2.4.3-24.el5_3.6 set to be updated ---> Package tkinter.x86_64 0:2.4.3-24.el5_3.6 set to be updated --> Processing Dependency: /usr/lib64/python2.4 for package: libxslt-python --> Processing Dependency: /usr/lib64/python2.4 for package: gamin-python --> Processing Dependency: /usr/lib64/python2.4 for package: libxml2-python --> Finished Dependency Resolution libxml2-python-2.6.26-2.1.2.7.x86_64 from installed has depsolving problems --> Missing Dependency: /usr/lib64/python2.4 is needed by package libxml2-python-2.6.26-2.1.2.7.x86_64 (installed) gamin-python-0.1.7-8.el5.x86_64 from installed has depsolving problems --> Missing Dependency: /usr/lib64/python2.4 is needed by package gamin-python-0.1.7-8.el5.x86_64 (installed) libxslt-python-1.1.17-2.el5_2.2.x86_64 from installed has depsolving problems --> Missing Dependency: /usr/lib64/python2.4 is needed by package libxslt-python-1.1.17-2.el5_2.2.x86_64 (installed) Error: Missing Dependency: /usr/lib64/python2.4 is needed by package libxslt-python-1.1.17-2.el5_2.2.x86_64 (installed) Error: Missing Dependency: /usr/lib64/python2.4 is needed by package libxml2-python-2.6.26-2.1.2.7.x86_64 (installed) Error: Missing Dependency: /usr/lib64/python2.4 is needed by package gamin-python-0.1.7-8.el5.x86_64 (installed) -- Curt Mills, WE7U hacker at fluke dot com Senior Methods Engineer/SysAdmin "Lotto: A tax on people who are bad at math!" "Windows: Microsoft's tax on computer illiterates!" -- WE7U "The world DOES revolve around me: I picked the coordinate system!" Please be advised that this email may contain confidential information. If you are not the intended recipient, please do not read, copy or re-transmit this email. If you have received this email in error, please notify us by email by replying to the sender and by telephone (call us collect at +1 202-828-0850) and delete this message and any attachments. Thank you in advance for your cooperation and assistance. In addition, Danaher and its subsidiaries disclaim that the content of this email constitutes an offer to enter into, or the acceptance of, any contract or agreement or any amendment thereto; provided that the foregoing disclaimer does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment to this email.

5 5

Bugzilla not working following RHEL to CentOS migration
by Chris Ross 11 Aug '09

11 Aug '09

Dear listmates, I've recently moved a server from RHEL5 to CentOS 5.3 after it was decided not to renew the subscripton. Everything works beautifully except for Bugzilla, which throws MySQL errors. For example, the sanitycheck.cgi page says: # # # Bugzilla – Sanity Check * Home * | New * | Search * | * | Reports * * | My Votes * | Preferences * | Administration * | Log out bugzilla(a)grandeye.com Bugzilla is checking the referential integrity of your database. This may take several minutes to complete. Errors, if any, will be emphasized like this. Depending on the errors found, some links will be displayed allowing you to easily fix them. Fixing these errors will automatically run this script again (so be aware that it may take an even longer time than the first run). OK, now running sanity checks. Checking references to classifications.id... ... from products.classification_id. Checking references to keyworddefs.id... ... from keywords.keywordid. Checking references to fielddefs.id... ... from bugs_activity.fieldid. ... from profiles_activity.fieldid. Checking references to flagtypes.id... ... from flags.type_id. ... from flagexclusions.type_id. ... from flaginclusions.type_id. Checking references to bugs.bug_id... ... from bugs_activity.bug_id. ... from bug_group_map.bug_id. ... from bugs_fulltext.bug_id. Software error: DBD::mysql::st execute failed: Table 'bugs.bugs_fulltext' doesn't exist [for Statement "SELECT DISTINCT bugs_fulltext.bug_id FROM bugs_fulltext LEFT JOIN bugs ON bugs_fulltext.bug_id = bugs.bug_id WHERE bugs.bug_id IS NULL AND bugs_fulltext.bug_id IS NOT NULL"] at /var/www/html/bugzilla/sanitycheck.cgi line 428 main::CrossCheck('bugs', 'bug_id', 'ARRAY(0x1760b5a0)', 'ARRAY(0x18298ba0)', 'ARRAY(0x18298830)', 'ARRAY(0x1814a150)', 'ARRAY(0x17f0bf50)', 'ARRAY(0x18298840)', 'ARRAY(0x18298850)', ...) called at /var/www/html/bugzilla/sanitycheck.cgi line 469 For help, please send mail to the webmaster (root@localhost), giving this error message and the time and date of the error. # # # bugzilla, mysql and perl are fully up-to-date according to yum, I have checked that the database is OK but restored a suitable (mysqldump) backup anyway. [root@neodymium bugzilla]# rpm -qa bugzilla mysql perl mysql-5.0.45-7.el5 bugzilla-3.2.4-1.el5 mysql-5.0.45-7.el5 perl-5.8.8-18.el5_3.1 [root@neodymium bugzilla]# perl --version This is perl, v5.8.8 built for x86_64-linux-thread-multi [root@neodymium bugzilla]# mysql --version mysql Ver 14.12 Distrib 5.0.45, for redhat-linux-gnu (x86_64) using readline 5.0 Googling hasn't helped beyond suggesting this has happened to others following RHEL upgrading Bugzilla 3.0.2 to 3.2.4 in July for security. Sadly, that didn't show the way out of it. Any help would be gratefully accepted. Many thanks, Chris R.

3 4

Building tomcat6, SRPM jakarta-commons-dbcp-1.2.1-7jpp.ep1.2.ep5.el5.src.rpm fails to build
by RedShift 11 Aug '09

11 Aug '09

Hello all I'm trying to build tomcat6 from the SRPMs provided at [1], but I appear to have hit a wall. One of the dependencies of tomcat6-6.0.18-8.18.1.noarch [2] is jakarta-commons-dbcp-tomcat5 (provided by jakarta-commons-dbcp [3]). (I don't see why it's requiring tomcat5 components, maybe that's my problem). When I try to build jakarta-commons-dbcp, compilation fails: BEGIN BUILD OUTPUT [root@testserver build]# rpmbuild --rebuild --without maven jakarta-commons-dbcp-1.2.1-7jpp.ep1.2.ep5.el5.src.rpm > buildlog 2>&1 warning: InstallSourcePackage: Header V3 DSA signature: NOKEY, key ID 37017186 warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root Installing jakarta-commons-dbcp-1.2.1-7jpp.ep1.2.ep5.el5.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.70693 + umask 022 + cd /root/rpmbuild/BUILD + cat If you dont want to build with maven, give rpmbuild option '--without maven' + rm -rf /var/tmp/jakarta-commons-dbcp-1.2.1-buildroot + cd /root/rpmbuild/BUILD + rm -rf commons-dbcp-1.2.1 + /usr/bin/bzip2 -dc /root/rpmbuild/SOURCES/commons-dbcp-1.2.1-src-RHCLEAN.tar.bz2 + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd commons-dbcp-1.2.1 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + cp LICENSE.txt ../LICENSE + find . -name '*.jar' -exec rm -f '{}' ';' + gzip -dc /root/rpmbuild/SOURCES/commons-build.tar.gz + tar xf - + cp -p /root/rpmbuild/SOURCES/dbcp-tomcat5-build.xml . + echo 'Patch #0 (commons-dbcp-1.2.1-project_xml.patch):' Patch #0 (commons-dbcp-1.2.1-project_xml.patch): + patch -p0 -b --suffix .sav -s + echo 'Patch #1 (commons-dbcp-1.2.1-TestJOCLed.patch):' Patch #1 (commons-dbcp-1.2.1-TestJOCLed.patch): + patch -p0 -b --suffix .sav -s + echo 'Patch #2 (commons-dbcp-1.2.1-TestConnectionPool.patch):' Patch #2 (commons-dbcp-1.2.1-TestConnectionPool.patch): + patch -p0 -b --suffix .sav -s + echo 'Patch #3 (commons-dbcp-1.2.1-navigation_xml.patch):' Patch #3 (commons-dbcp-1.2.1-navigation_xml.patch): + patch -p0 -b --suffix .sav -s + echo 'Patch #4 (commons-dbcp-1.2.1-project_properties.patch):' Patch #4 (commons-dbcp-1.2.1-project_properties.patch): + patch -p0 -b --suffix .sav -s + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.70693 + umask 022 + cd /root/rpmbuild/BUILD + cd commons-dbcp-1.2.1 ++ build-classpath jdbc-stdext xerces-j2 + export CLASSPATH=/usr/lib/jvm-exports/java/jdbc-stdext.jar:/usr/share/java/xerces-j2.jar + CLASSPATH=/usr/lib/jvm-exports/java/jdbc-stdext.jar:/usr/share/java/xerces-j2.jar ++ build-classpath commons-pool ++ build-classpath commons-collections ++ build-classpath junit ++ build-classpath jndi ++ build-classpath xml-commons-apis + ant -Dbuild.sysclasspath=first -Dcommons-pool.jar=/usr/share/java/commons-pool.jar -Dcommons-collections.jar=/usr/share/java/commons-collections.jar -Djunit.jar=/usr/share/java/junit.jar -Djndi.jar=/usr/lib/jvm-exports/java/jndi.jar -Dsax2.jar=/usr/share/java/xml-commons-apis.jar -Djava.io.tmpdir=. -Dtest.failonerror=false dist test Buildfile: build.xml init: clean: prepare-nojdbc3: prepare-jdbc3: [echo] JDBC 3 was detected. prepare: compile: [mkdir] Created dir: /root/rpmbuild/BUILD/commons-dbcp-1.2.1/build/classes [javac] Compiling 39 source files to /root/rpmbuild/BUILD/commons-dbcp-1.2.1/build/classes [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/BasicDataSource.java:43: org.apache.commons.dbcp.BasicDataSource is not abstract and does not override abstract method isWrapperFor(java.lang.Class<?>) in java.sql.Wrapper [javac] public class BasicDataSource implements DataSource { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/DelegatingStatement.java:45: org.apache.commons.dbcp.DelegatingStatement is not abstract and does not override abstract method isPoolable() in java.sql.Statement [javac] public class DelegatingStatement extends AbandonedTrace implements Statement { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/DelegatingStatement.java:130: isClosed() in org.apache.commons.dbcp.DelegatingStatement cannot implement isClosed() in java.sql.Statement; attempting to assign weaker access privileges; was public [javac] protected boolean isClosed() { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/DelegatingPreparedStatement.java:49: org.apache.commons.dbcp.DelegatingPreparedStatement is not abstract and does not override abstract method setNClob(int,java.io.Reader) in java.sql.PreparedStatement [javac] public class DelegatingPreparedStatement extends DelegatingStatement [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/DelegatingCallableStatement.java:52: org.apache.commons.dbcp.DelegatingCallableStatement is not abstract and does not override abstract method setNClob(java.lang.String,java.io.Reader) in java.sql.CallableStatement [javac] public class DelegatingCallableStatement extends DelegatingPreparedStatement [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/DelegatingConnection.java:50: org.apache.commons.dbcp.DelegatingConnection is not abstract and does not override abstract method createStruct(java.lang.String,java.lang.Object[]) in java.sql.Connection [javac] public class DelegatingConnection extends AbandonedTrace [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/DelegatingResultSet.java:54: org.apache.commons.dbcp.DelegatingResultSet is not abstract and does not override abstract method updateNClob(java.lang.String,java.io.Reader) in java.sql.ResultSet [javac] public class DelegatingResultSet extends AbandonedTrace implements ResultSet { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/PoolablePreparedStatement.java:40: org.apache.commons.dbcp.PoolablePreparedStatement is not abstract and does not override abstract method setNClob(int,java.io.Reader) in java.sql.PreparedStatement [javac] public class PoolablePreparedStatement extends DelegatingPreparedStatement implements PreparedStatement { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/PoolingConnection.java:37: org.apache.commons.dbcp.PoolingConnection is not abstract and does not override abstract method createStruct(java.lang.String,java.lang.Object[]) in java.sql.Connection [javac] public class PoolingConnection extends DelegatingConnection implements Connection, KeyedPoolableObjectFactory { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/PoolingDataSource.java:44: org.apache.commons.dbcp.PoolingDataSource is not abstract and does not override abstract method isWrapperFor(java.lang.Class<?>) in java.sql.Wrapper [javac] public class PoolingDataSource implements DataSource { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/SQLNestedException.java:38: warning: non-varargs call of varargs method with inexact argument type for last parameter; [javac] cast to java.lang.Class<?> for a varargs call [javac] cast to java.lang.Class<?>[] for a non-varargs call and to suppress this warning [javac] getCauseMethod = Throwable.class.getMethod("getCause", null); [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/cpdsadapter/ConnectionImpl.java:40: org.apache.commons.dbcp.cpdsadapter.ConnectionImpl is not abstract and does not override abstract method createStruct(java.lang.String,java.lang.Object[]) in java.sql.Connection [javac] class ConnectionImpl implements Connection { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/cpdsadapter/PooledConnectionImpl.java:42: org.apache.commons.dbcp.cpdsadapter.PooledConnectionImpl is not abstract and does not override abstract method removeStatementEventListener(javax.sql.StatementEventListener) in javax.sql.PooledConnection [javac] class PooledConnectionImpl [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/cpdsadapter/PoolablePreparedStatementStub.java:33: isClosed() in org.apache.commons.dbcp.DelegatingStatement cannot implement isClosed() in java.sql.Statement; attempting to assign weaker access privileges; was public [javac] class PoolablePreparedStatementStub extends PoolablePreparedStatement { [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/datasources/PerUserPoolDataSource.java:49: org.apache.commons.dbcp.datasources.PerUserPoolDataSource is not abstract and does not override abstract method isWrapperFor(java.lang.Class<?>) in java.sql.Wrapper [javac] public class PerUserPoolDataSource [javac] ^ [javac] /root/rpmbuild/BUILD/commons-dbcp-1.2.1/src/java/org/apache/commons/dbcp/datasources/SharedPoolDataSource.java:43: org.apache.commons.dbcp.datasources.SharedPoolDataSource is not abstract and does not override abstract method isWrapperFor(java.lang.Class<?>) in java.sql.Wrapper [javac] public class SharedPoolDataSource [javac] ^ [javac] Note: Some input files use or override a deprecated API. [javac] Note: Recompile with -Xlint:deprecation for details. [javac] Note: Some input files use unchecked or unsafe operations. [javac] Note: Recompile with -Xlint:unchecked for details. [javac] 15 errors [javac] 1 warning BUILD FAILED /root/rpmbuild/BUILD/commons-dbcp-1.2.1/build.xml:126: Compile failed; see the compiler error output for details. Total time: 5 seconds error: Bad exit status from /var/tmp/rpm-tmp.70693 (%build) RPM build errors: InstallSourcePackage: Header V3 DSA signature: NOKEY, key ID 37017186 user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root user mockbuild does not exist - using root group mockbuild does not exist - using root Bad exit status from /var/tmp/rpm-tmp.70693 (%build) END BUILD OUTPUT I have found a few references on the errors with some conclusive information on the tomcat mailinglist [4], stating that dbcp won't build with a java 6 compiler. So at this point my mind is blank, "now what?". Thanks, Best regards, Glenn Matthys [1] ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/ [2] ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/JBEAP/SRPMS/tom… [3] ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/JBEAP/SRPMS/jak… [4] http://marc.info/?l=tomcat-user&m=121730068831452&w=2

3 6

Re: [CentOS] CentOS Digest, Vol 55, Issue 10
by Ed Warner 11 Aug '09

11 Aug '09

> I tried your suggestions without success. ip-up.local is executable in > a bash console and if I do so, I get this message: "iptables v1.3.5: > invalid mask '255' specified Try 'iptables -h' for more information. > A subent mask of 255? In my opinion it should be something like > <address>/24 or 255.255.255.0. > Seems to me that your settings are not correct, firestarter doesn't know > your subnet mask. > > > regards > Olaf > > That message is what I don't understand. My subnet is declared correctly, I even went back and checked. Firestarter says it starts but doesn't seem to enable NAT because nothing behind the firewall can reach the internet. Regards Ed Warner

3 2

Centos 5.3 live-cd install -
by Bob Goodwin 11 Aug '09

11 Aug '09

I just downloaded the Centos 5.3 live-cd and booted the resulting disk. I do not see an icon to install from the cd! Did i get the wrong thing? I have a fixed allocation of bandwidth and hate to waste 700+ megs! Bob

11 16

Encrypted File Storage
by Joseph L. Casale 11 Aug '09

11 Aug '09

Anyone got any experience/suggestions for a way to store a directory of sensitive information on a CentOS box? This directory contains many scripts and output files, I need it backed up but not unencrypted and don't want to store it in a tar file type archive as when it needs to be accessed and have scripts executed/data generated, it needs to be untarred/unencrypted and I don't know the ramifications of this wrt recovery once its retarred and deleted. I was hoping it could be stored somehow such that it was decrypted on the fly when needed by entering a pass/keyphrase before use. Thus it could be backed up and remain encrypted. Is dm-crypt the simplest option here? None of our servers have a gui. Thanks! jlc

4 4

Execution from ip-up.local
by Ed Warner 10 Aug '09

10 Aug '09

-- On Mon, 8/10/09, Ed Warner <edwarner99(a)yahoo.com> wrote: > From: Ed Warner <edwarner99(a)yahoo.com> > Subject: Re: CentOS Digest, Vol 55, Issue 10 > To: centos(a)centos.org > Date: Monday, August 10, 2009, 5:39 PM > > I tried your suggestions without > success. ip-up.local is executable in > > a bash console and if I do so, I get this message: > "iptables v1.3.5: > > invalid mask '255' specified Try 'iptables -h' for > more information. > > A subent mask of 255? In my opinion it should be > something like > > <address>/24 or 255.255.255.0. > > Seems to me that your settings are not correct, > firestarter doesn't know > > your subnet mask. > > > > > > regards > > Olaf > > > > > That message is what I don't understand. My subnet is declared correctly, I even went back and checked. Firestarter says it starts but doesn't seem to enable NAT because nothing behind the firewall can reach the internet. Regards Ed Warner

1 0

error --- > any idea ?? Kernel: Additional sense: Invalid command operation code
by Agnello George 10 Aug '09

10 Aug '09

Hi All My system is CentOS release 4.4 (Final) and for the last few days my system si getting rebooted ... i really cant find out any reason why ... but on the messages found in the var/log/ ...here is what i got . Aug 10 04:31:34 spam2 kernel: FAILED Aug 10 04:31:34 spam2 kernel: status = 1, message = 00, host = 0, driver = 08 Aug 10 04:31:34 spam2 kernel: Current sd: sense key Illegal Request Aug 10 04:31:34 spam2 kernel: Additional sense: Invalid command operation code Aug 10 04:31:34 spam2 kernel: FAILED Aug 10 04:31:34 spam2 kernel: status = 1, message = 00, host = 0, driver = 08 Aug 10 04:31:34 spam2 kernel: Current sd: sense key Illegal Request Aug 10 04:31:34 spam2 kernel: Additional sense: Invalid command operation code Aug 10 04:31:34 spam2 kernel: FAILED Aug 10 04:31:34 spam2 kernel: status = 1, message = 00, host = 0, driver = 08 Aug 10 04:31:34 spam2 kernel: Current sd: sense key Illegal Request Aug 10 04:31:34 spam2 kernel: Additional sense: Invalid command operation code Aug 10 04:31:34 spam2 kernel: FAILED Aug 10 04:31:34 spam2 kernel: status = 1, message = 00, host = 0, driver = 08 Aug 10 04:31:34 spam2 kernel: Current sd: sense key Illegal Request Aug 10 04:31:34 spam2 kernel: Additional sense: Invalid command operation code Aug 10 04:31:34 spam2 kernel: FAILED Aug 10 04:31:34 spam2 kernel: status = 1, message = 00, host = 0, driver = 08 Aug 10 04:31:34 spam2 kernel: Current sd: sense key Illegal Request Aug 10 04:31:34 spam2 kernel: Additional sense: Invalid command operation code Aug 10 04:32:29 spam2 kernel: FAILED Aug 10 04:32:29 spam2 kernel: status = 1, message = 00, host = 0, driver = 08 Aug 10 04:32:29 spam2 kernel: Current sd: sense key Illegal Request Aug 10 04:32:29 spam2 kernel: Additional sense: Invalid command operation code Aug 10 04:32:29 spam2 kernel: FAILED Can some one please help me debug this issue . or assist me on what i should do further . Thanks Agnello -- Regards Agnello D'souza

5 4

Re: [CentOS] Execution from ip-up.local
by Ed Warner 10 Aug '09

10 Aug '09

> Message: 22 > Date: Mon, 10 Aug 2009 02:09:58 +0200 > From: Olaf Mueller <daily-planet(a)istari.de> > Subject: Re: [CentOS] Execution from ip-up.local > To: centos(a)centos.org > Message-ID: <1587893.OjVOrq4qrm(a)weidenwinde.istari.de> > Content-Type: text/plain; charset=us-ascii > > John R Pierce wrote: > > > Ed Warner wrote: > >> I'm using Firestarter as my firewall. If I restart > the network or my > >> DSL line goes down, I have to manually restart > Firestarter. > > >> Does anyone have a suggestion as how I could > further troubleshoot > >> this problem? > Remove the original firestarter line from > /etc/ppp/ip-up.local and add > the following line to /etc/ppp/ip-up.local: > /etc/firestarter/firestarter.sh start > > And the following line to /etc/ppp/ip-down.local: > /etc/firestarter/firestarter.sh stop > > Also disable firestarter as a service (chkconfig > firestarter off) and > take a look in /etc/ppp/ip-up.local for broken code. > Is /etc/ppp/ip-up.local executable in a bash console? > > > why aren't you starting your firewall from > > /etc/rc.d/init.d/firestarter, with symlinks in the > usual > > /etc/rc.d/rc?.d/{K|S}##firestarter > Cause ip changes on every dial-in for internet connections > without a > static ip. > > > I've never -heard- of dinking with the ifup-***** > scripts for any > > reason > This is an option in firestarter configuration since 2005. > See for more > in firestarter Changelog: > > 2005-01-09 Tomas Junnonen <tomas(a)fs-security.com> > [...] > * src/scriptwriter.c: > - Set execute permissions on > ip-up.local > [...] > > And in scriptwriter.c: > > #define PPP_HOOK_FILE "/etc/ppp/ip-up.local" > const gchar* FIRESTARTER_HOOK = "sh > "FIRESTARTER_CONTROL_SCRIPT" > start\n"; > > > > regards > Olaf I tried your suggestions without success. ip-up.local is executable in a bash console and if I do so, I get this message: "iptables v1.3.5: invalid mask '255' specified Try 'iptables -h' for more information. Firewall started

2 1

can NOT update CENTOS use YUM
by mcclnx mcc 10 Aug '09

10 Aug '09

We have CENTOS 5.1 on DELL server. This server is OUTSIDE Firewall. I tried to update it to latest release and get error. any ideal? ========================================= # yum update Loading "fastestmirror" plugin Loading mirror speeds from cached hostfile Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=5&arch=i386&repo=os error was [Errno 4] IOError: <urlopen error (111, 'Connection refused')> Error: Cannot find a valid baseurl for repo: base ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

9 11

Integrate shell scripts into Nautilus ?
by Niki Kovacs 10 Aug '09

10 Aug '09

Hi, I'd like to integrate a handful of shell scripts into my Nautilus file browser, for example to be able to resize a selection of images with one click via ImageMagick, or convert videos easily. After a bit of Googling, I found out that folks seem to do this by placing scripts into ~/.gnome2/nautilus-scripts. Only that doesn't seem to work for me. Nothing appears in the browsers contextual menu. Any pointers for a start ? Anyone here using something similar ? Cheers, Niki

2 1

Greasemonkey question
by Boris Epstein 10 Aug '09

10 Aug '09

Hello all, Sorry about going a bit off-topic (the question is not really Linux-related) but here it goes nonetheless: 1) How does one create a webpage with a Greasemonkey script that is installable? 2) Why does it happen that a Firefox installation in a user's account (i.e., the configuration which amongst other things contains Greasemonkey scripts) would all of a sudden lose them? Thanks. Boris.

4 4

Apache not liking directories outside of /var/www
by Boris Epstein 10 Aug '09

10 Aug '09

Hi all, It appears that on my nice little CentOS 5.3 machines Apache only allows me to store content in directories which are under /var/www/ For instance, putting content in /var/www/test and defining the following alias: Alias /test /var/www/test then accessing it under http://hostname/test works great. Not copy that same content to /home/test, change the alias to: Alias /test /home/test and you get Error 403. Any idea why that would be? Never had this sort of trouble anywhere, including under CentOS 5.0 and 5.1 Thanks in advance for any and all help. Boris.

10 24

ASP Pages?
by ML 10 Aug '09

10 Aug '09

I have a friend that hosts a few basic ASP pages. some simple links and plays a few media files with Windows Media Player. Is there any way I can host his site on my Linux Server? Without re- writing it for him.... -jason

6 5

CentOS as a router
by James B. Byrne 10 Aug '09

10 Aug '09

I am setting up a small CentOS-5.3 host to act as a router. I have the device configured and working. What I am trying to accomplish now is configuring the firewall so as to protect both the router and the LAN. The host configuration has the WAN attached to eth0 (IP_ADDR = A) and the LAN attached to eth1 (IP_ADDR = B). The default gateway for B is A. The default gateway for B is B-1. There is a static route set for eth0 (A) to route traffic for B/24 to B. My understanding is that INCOMING packets, for the purposes of iptables, originate outside the host interfaces and that OUTGOING packets originate from, or are forwarded across, the host itself. So, as I understand things, traffic from network C/24 destined to B/24 comes IN eth0, is forwarded to eth1, and then goes OUT eth1. Similarly, traffic from B/24 to C/24 comes IN eth1 and goes OUT eth0. Is my understanding correct? I have set up four custom chains, one each for IN and OUT on each of the two eth i/f. Incoming packets for eth0 are sent to the WAN-IN-CHAIN, outgoing are sent to the WAN-OUT-CHAIN. In a similar fashion I have LAN-IN-CHAIN and LAN-OUT-CHAIN. My confusion arises from trying to setup an iptables filter on the WAN-In-CHAIN so that traffic arriving to eth0 cannot connect to either A or B, but can nonetheless pass through B to B/24. I cannot seem to discover an arrangement whereby I can do this and still maintain network connectivity to B/24 from a console session running on the router itself. Further, I wish to prevent any incoming connection from the WAN for any source address purporting to belong to the B/24 netblock (IP spoofing). Again, whatever arrangements that I try, whenever I enable such a rule I lose network connectivity from the console session to the LAN. I would appreciate some guidance and an explanation of what fundamental issue it is that I am missing. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 6

remot powerbar
by chloe K 10 Aug '09

10 Aug '09

Hi all Have you had any experience using linux to do the remotepower bar function? Thank you __________________________________________________________________ Connect with friends from any web browser - no download required. Try the new Yahoo! Canada Messenger for the Web BETA at http://ca.messenger.yahoo.com/webmessengerpromo.php

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss