- Discuss - lists.centos.org

OT: Newest kernels much smaller in size
by Lanny Marcus 10 Aug '09

10 Aug '09

I'm updating my Desktop and curious as to the reason for the huge difference in size, between the oldest kernel, which will be removed, and the newest one that will be installed. Question: Did they remove a lot of things from the kernel or rewrite it much more efficiently? TIA. Installing: kernel i686 2.6.18-128.4.1.el5 updates 15 M Removing: kernel i686 2.6.18-128.1.6.el5 installed 40 M

2 2

Execution from ip-up.local
by Ed Warner 10 Aug '09

10 Aug '09

Hi, I'm using Firestarter as my firewall. If I restart the network or my DSL line goes down, I have to manually restart Firestarter. I have sh /etc/firestarter/firestarter.sh stop and then sh /etc/firestarter/firestarter.sh start in my ip-up.local file. I confirmed ip-up.local us being executed by placing an entry in the logs, but it appears firestarter is not or at least not correctly. Does anyone have a suggestion as how I could further troubleshoot this problem? Thanks for your help.

3 2

Current Infighting
by Cory Rainey 09 Aug '09

09 Aug '09

Most often, I sit here and read the posts because I don't feel I'm qualified yet to be of help to anyone posting in this mailing list. I chose CentOS for my work file server because I had always used RedHat and Fedora and felt comfortable with it. I feel blessed to be part of this community and would be sadly disappointed if it were to self destruct. I appreciate the developers and would not have a clue how they do what they do. I have a great product with support when I need it from the forums and help there when I can as well. That's all I ask. I would gladly donate to the project if there was anything left after paying the bills. I'm sure my boss would as well but, he couldn't even give me a raise this year and is concerned about the future given the economy. Cory

2 1

CentOS-announce Digest, Vol 54, Issue 2
by centos-announce-request＠centos.org 09 Aug '09

09 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1201 Important CentOS 5 x86_64 java-1.6.0-openjdk Update (Johnny Hughes) 2. CESA-2009:1201 Important CentOS 5 i386 java-1.6.0-openjdk Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 08 Aug 2009 23:11:10 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1201 Important CentOS 5 x86_64 java-1.6.0-openjdk Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4A7E4C5E.7040802(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1201 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1201.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-demo-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-devel-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-javadoc-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-src-1.6.0.0-1.2.b09.el5.x86_64.rpm src: java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.src.rpm

1 0

ledgersmb installation
by Frank Cox 09 Aug '09

09 Aug '09

I'm attempting to install ledgersmb on Centos 5 and I'm sure that I've missed something. After doing the initial installation, I get a 404 when I get to the part of the instructions that tell me to go to http://localhost/ledgersmb/admin.pl /etc/httpd/conf.d/ledgersmb.conf contains the following line: Alias /usr/share/ledgersmb WORKING_DIR /usr/share/ledgersmb exists and contains a file named admin.pl /etc/httpd/conf/httpd.conf contains the following line: Include conf.d/*.conf But when I go to http://localhost/ledgersmb/admin.pl I get this entry in the apache log: 127.0.0.1 - - [08/Aug/2009:15:47:30 -0600] "GET /ledgersmb/admin.pl HTTP/1.1" 40 4 291 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.12) Gecko/2009072711 CentOS/3.0.12-1.el5.centos Firefox/3.0.12" What have I missed here? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

2 2

RPMs for vispan , spamstat, phplistadmin
by Linux Advocate 08 Aug '09

08 Aug '09

Guys, i have heard of vispan, phplistadmin, spamstat from the mailscanner manual and would like to experiment with them. 1. Any thoughts on them? ( i am trying to avoid mailwatch bcos i think vispan is better fit for reporting) 2. I have googled for their centos rpms but no luck? Any ideas where i can get their rpms? regards, marco.

1 1

Flow-Tools RPM for CentOS 5.3
by Camron W. Fox 08 Aug '09

08 Aug '09

Alle, Does anyone know if there is/where to get an rpm of flow-tools V0.66 or better for CentOS/RHEL 5.3? We've been trying to build from the SRPM @ http://cng.ateneo.net/cng/wyu/software/srpm/flow-tools-0.68-2.src.rpm with no luck. Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

5 6

Internet squid proxy for banner and add filtering and Nagios
by Dave 07 Aug '09

07 Aug '09

Hello, I've got a standalone internet server, it's a vps and i'd like to use it for proxy and add filtering. Since it's directly accessible from the internet i need to lock it down so only designated users can get to it, i'd prefer encrypted transmission of credentials. I've also wanted to get nagios going on this box so it can monitor other services and email/sms when they go down as in an unexpected reboot and don't come back up. That one i definitely want to secure the cgi interface. For both the squid and nagios only authorized users should be able to get to them, and only users on the machine itself, via ssh, ideally should be able to configure them. I'd appreciate any suggestions. Thanks. Dave.

1 0

firewall question
by Jerry Geis 07 Aug '09

07 Aug '09

My firewall config is below... I am trying to figure out why another machine has access to port 5038 on my machine based on these firewall rules. I thought the reject at the bottom would take care of all other ports? It does not. I have restarted with "server iptables restart" and same thing. I can connect from another machine to my machine on port 5038. How do I prevent this? Jerry --------------------------------- This is my firewall: # Firewall configuration written by system-config-securitylevel # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -i eth0 -j ACCEPT -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -p 50 -j ACCEPT -A RH-Firewall-1-INPUT -p 51 -j ACCEPT -A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2049 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 2049 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6540 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6500 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6510 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6520 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5060 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5036 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 4569 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 1720 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 4520 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 123 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5900 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5900 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2000 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 2000 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5353 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5353 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6544 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT

7 8

so many arp caches why?
by MontyRee 07 Aug '09

07 Aug '09

Hello, all. When I execute arp -a -n, there are lots of arp caches like below. Surely, I set netmask and Broadcast without problem and routing table also no problem. System is CentOS release 4.7 i386. I know how to delete the arp cache, but I don't know why .. # ifconfig eth0 Link encap:Ethernet HWaddr 00:A0:D1:E7:91:CC inet addr:192.168.195.36 Bcast:192.168.195.63 Mask:255.255.255.192 # route -n 192.168.195.0 0.0.0.0 255.255.255.192 U 0 0 0 eth0 0.0.0.0 192.168.195.36 0.0.0.0 UG 0 0 0 eth0 # arp -a -n ? (120.88.46.10) at 00:23:5E:12:63:FE [ether] on eth0 ? (208.80.195.54) at 00:23:5E:12:63:FE [ether] on eth0 ? (125.122.171.33) at 00:23:5E:12:63:FE [ether] on eth0 ? (211.233.26.29) at 00:23:5E:12:63:FE [ether] on eth0 ? (111.125.201.75) at 00:23:5E:12:63:FE [ether] on eth0 ? (218.24.196.100) at 00:23:5E:12:63:FE [ether] on eth0 ? (60.190.216.31) at 00:23:5E:12:63:FE [ether] on eth0 ? (72.232.223.58) at 00:23:5E:12:63:FE [ether] on eth0 ? (211.39.135.185) at 00:23:5E:12:63:FE [ether] on eth0 ? (203.171.229.153) at 00:23:5E:12:63:FE [ether] on eth0 ? (121.11.81.217) at 00:23:5E:12:63:FE [ether] on eth0 ? (61.110.195.18) at 00:11:43:E0:7D:19 [ether] on eth0 ? (61.164.112.5) at 00:23:5E:12:63:FE [ether] on eth0 ? (218.66.79.152) at 00:23:5E:12:63:FE [ether] on eth0 ? (221.139.48.11) at 00:23:5E:12:63:FE [ether] on eth0 ? (211.233.26.12) at 00:23:5E:12:63:FE [ether] on eth0 ? (211.137.175.2) at 00:23:5E:12:63:FE [ether] on eth0 ? (116.71.174.203) at 00:23:5E:12:63:FE [ether] on eth0 ? (72.18.205.157) at 00:23:5E:12:63:FE [ether] on eth0 ? (211.39.136.4) at 00:23:5E:12:63:FE [ether] on eth0 ? (202.255.47.226) at 00:23:5E:12:63:FE [ether] on eth0 ? (211.211.52.134) at 00:23:5E:12:63:FE [ether] on eth0 ? (218.61.2.197) at 00:23:5E:12:63:FE [ether] on eth0 ? (61.164.151.12) at 00:23:5E:12:63:FE [ether] on eth0 ............. _________________________________________________________________ 메신저 10살 생일도 축하해 주시고,이벤트도 참여하세요~! http://im.msn.co.kr/im/main/mainCoverDetail.asp?BbsCode=bbs01&Seq=2688

5 9

syslog to remote server
by hce 07 Aug '09

07 Aug '09

Hi, I set up the syslog.conf to log local0 and local1 to a remote log server: *.info;mail.none;authpriv.none;cron.none;local0.none;local1.none /var/log/messages local0.*;local1.* @192.168.1.2 The messages from local0 worked fine, all sent to the remote log server. But all messages from local1 were still displayed in /var/log/messages despite it has been set to local1.none. Of cause, no local1 messages were sending to the remote server. Could I be missing something here, or could be a bug in 2.6.18-53.el5 which I am running? Thank you. Kind Regards, Jupiter

3 2

Certificate system
by J.Witvliet＠MINDEF.NL 07 Aug '09

07 Aug '09

Hi all, Can anybody inform me wether the "RedHat Certificate System" or actually a CentOS equivalent is available for CentOS. Just skimmed on a download site through the RPM's for 5.3 and I couldn't find it. According to their pressrelease, it the code should be gpl, allthough I can't find any rpm for RH, FC or Centos. It seems that this is one of the few CA-packages for large scale deployment of certificates. Only alternative AFAIK is OpenCA, which seems to be hardly maintained... ( binaries on their site are old, and source code yields lots of errors during build..) Defensie/CDC/IVENT/Research en Innovation Centrum Ing J. (Hans) Witvliet Systeembeheer, CAcert-assurer T 0174-539053 mailto:j.witvliet@mindef.nl Coldenhovelaan 1, 3155RC Maasland, kamer A109 ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

6 6

BIND vulnerability
by Kenneth Porter 07 Aug '09

07 Aug '09

Slashdot carried this story yesterday on a BIND vulnerability: <http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability-In-All-…> The upstream report: <https://www.isc.org/node/474> Red Hat's Bugzilla: <https://bugzilla.redhat.com/show_bug.cgi?id=514292> >From what I'm reading, if one has an Internet-facing master for a zone, one is vulnerable, even if dynamic DNS isn't being used.

15 26

traceenable for httpd
by Jerry Geis 06 Aug '09

06 Aug '09

On centos 5.3 x86_64 I can add "traceenable off" to httpd.conf and that works well. however this doesnt seem to work for centos 4.7 i686. Is there a similiar named option on 4.7? Jerry

5 4

Battery condition tools CentOS/Dell
by Kwan Lowe 06 Aug '09

06 Aug '09

Hello all: Does anyone know of a tool/project that will allow me to read the battery condition (not the charge status) on a Dell laptop battery? Under XP there is a utility that warns that the battery is still holding a charge but that the battery is degraded and should be replaced. Also, not sure if this is possible, but I would like to control how the laptop charges the battery. I tend to have the laptop plugged in most of the time and this constant charging state is apparently very bad for battery lifetime. So a charge/drain cycle is supposedly better. Thanks, Kwan

12 20

Autorun ability on cd?
by James B. Byrne 06 Aug '09

06 Aug '09

On: Wed, 5 Aug 2009 10:15:47 -0400, Stephen Harris <lists(a)spuddy.org> wrote: > > Untested, and it depends very much on your shell, but create a > function > > cdr() > { > cd $1 || exit > if [ -x ./.myscript ] > then > ./.myscript > fi > } > > Now if you use "cdr" (for Change Directory & Run) it should do what > you want (runs a file called ".myscript" in the new directory if > it exists) > > > This _might_ work... > > cd() > { > command cd $1 || exit > if [ -x ./.myscript ] > then > ./.myscript > fi > } > > OK, I just tested the later under ksh88 and it worked. You'd need > to > test with bash/ksh93/whatever-your-shell-is > > $ cat x1/.myscript > echo hello > $ cd x1 > hello > $ mkdir x0 > $ cd x0 > $ cd .. > hello > $ > > As you can see, everytime I enter the "x1" directory it runs > .myscript > > -- > > rgds > Stephen >****************** > Thank You. I usually run in the CentOS default (bash) shell. I will give this a try and report back. Many thanks, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 1

rpmforge.repo
by Sam Drinkard 06 Aug '09

06 Aug '09

Sorry I didn't quote the reply from Christoph Maser... was on another machine. Anyhow, this is the complete yum output with rpmforge.repo active. # yum update Loaded plugins: fastestmirror, priorities, protectbase Loading mirror speeds from cached hostfile * rpmforge: ftp-stud.fht-esslingen.de * base: centos.corenetworks.net * updates: mirror.anl.gov * addons: mirror.skiplink.com * extras: centos.corenetworks.net Excluding Packages in global exclude list Finished 145 packages excluded due to repository priority protections 0 packages excluded due to repository protections Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package spamassassin.x86_64 0:3.2.5-1.el5.rf set to be updated ---> Package libwpd.x86_64 0:0.8.14-1.el5.rf set to be updated ---> Package perl-XML-Parser.x86_64 0:2.36-1.el5.rf set to be updated ---> Package kernel.x86_64 0:2.6.18-128.4.1.el5 set to be installed ---> Package perl-IO-Zlib.noarch 0:1.10-1.el5.rf set to be updated ---> Package nmap.x86_64 2:5.00-1.el5.rf set to be updated ---> Package kernel-headers.x86_64 0:2.6.18-128.4.1.el5 set to be updated ---> Package perl-Archive-Tar.noarch 0:1.40-1.el5.rf set to be updated --> Processing Dependency: perl(Package::Constants) for package: perl-Archive-Tar ---> Package perl-Net-SSLeay.x86_64 0:1.35-1.el5.rf set to be updated ---> Package subversion.x86_64 0:1.6.3-0.1.el5.rf set to be updated ---> Package dstat.noarch 0:0.6.9-1.el5.rf set to be updated ---> Package perl-XML-NamespaceSupport.noarch 0:1.10-1.el5.rf set to be updated ---> Package perl-IO-Socket-INET6.noarch 0:2.56-1.el5.rf set to be updated ---> Package nmap-frontend.x86_64 2:5.00-1.el5.rf set to be updated ---> Package iso-codes.noarch 0:1.0a-1.el5.rf set to be updated ---> Package perl-Net-DNS.x86_64 0:0.65-1.el5.rf set to be updated ---> Package bind.x86_64 30:9.3.4-10.P1.el5_3.3 set to be updated ---> Package perl-HTML-Parser.x86_64 0:3.61-1.el5.rf set to be updated ---> Package perl-DBD-mysql.x86_64 0:4.012-1.el5.rf set to be updated ---> Package perl-Socket6.x86_64 0:0.23-1.el5.rf set to be updated ---> Package udftools.x86_64 0:1.0.0b3-3.el5.rf set to be updated ---> Package bind-utils.x86_64 30:9.3.4-10.P1.el5_3.3 set to be updated ---> Package dnsmasq.x86_64 0:2.49-1.el5.rf set to be updated ---> Package perl-XML-SAX.noarch 0:0.96-1.el5.rf set to be updated ---> Package syslinux.x86_64 0:3.82-1.el5.rf set to be updated --> Processing Dependency: perl(Crypt::PasswdMD5) for package: syslinux ---> Package perl-IO-Socket-SSL.noarch 0:1.26-1.el5.rf set to be updated ---> Package bind-chroot.x86_64 30:9.3.4-10.P1.el5_3.3 set to be updated ---> Package clamav-db.x86_64 0:0.95.2-4.el5.rf set to be updated ---> Package perl-Digest-SHA1.x86_64 0:2.12-1.el5.rf set to be updated ---> Package perl-Convert-ASN1.noarch 0:0.22-1.el5.rf set to be updated ---> Package lftp.x86_64 0:3.7.14-1.el5.rf set to be updated ---> Package bind-libs.x86_64 30:9.3.4-10.P1.el5_3.3 set to be updated ---> Package perl-DBI.x86_64 0:1.609-1.el5.rf set to be updated --> Processing Dependency: perl(RPC::PlClient) >= 0.2000 for package: perl-DBI --> Processing Dependency: perl(RPC::PlServer) >= 0.2001 for package: perl-DBI ---> Package perl-IO-Compress.noarch 0:2.020-2.el5.rf set to be updated --> Processing Dependency: perl(Compress::Raw::Bzip2) >= 2.020 for package: perl-IO-Compress --> Processing Dependency: perl(Compress::Raw::Zlib) >= 2.020 for package: perl-IO-Compress ---> Package perl-HTML-Tagset.noarch 0:3.20-1.el5.rf set to be updated ---> Package mtr.x86_64 2:0.75-1.el5.rf set to be updated ---> Package perl-BSD-Resource.x86_64 0:1.2901-1.el5.rf set to be updated ---> Package rsync.x86_64 0:3.0.6-1.el5.rf set to be updated --> Running transaction check ---> Package perl-Compress-Raw-Zlib.x86_64 0:2.020-1.el5.rf set to be updated ---> Package perl-Package-Constants.noarch 0:0.02-1.el5.rf set to be updated ---> Package perl-Crypt-PasswdMD5.noarch 0:1.3-1.2.el5.rf set to be updated ---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.020-1.el5.rf set to be updated ---> Package perl-PlRPC.noarch 0:0.2020-1.el5.rf set to be updated --> Processing Dependency: perl(Net::Daemon) for package: perl-PlRPC --> Processing Dependency: perl(Net::Daemon::Log) for package: perl-PlRPC --> Processing Dependency: perl(Net::Daemon::Test) for package: perl-PlRPC --> Running transaction check ---> Package perl-Net-Daemon.noarch 0:0.43-1.el5.rf set to be updated --> Finished Dependency Resolution --> Running transaction check ---> Package kernel.x86_64 0:2.6.18-128.1.14.el5 set to be erased --> Finished Dependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: kernel x86_64 2.6.18-128.4.1.el5 updates 17 M perl-IO-Compress noarch 2.020-2.el5.rf rpmforge 237 k replacing perl-Compress-Zlib.x86_64 1.42-1.fc6 Updating: bind x86_64 30:9.3.4-10.P1.el5_3.3 updates 961 k bind-chroot x86_64 30:9.3.4-10.P1.el5_3.3 updates 42 k bind-libs x86_64 30:9.3.4-10.P1.el5_3.3 updates 869 k bind-utils x86_64 30:9.3.4-10.P1.el5_3.3 updates 173 k clamav-db x86_64 0.95.2-4.el5.rf rpmforge 21 M dnsmasq x86_64 2.49-1.el5.rf rpmforge 225 k dstat noarch 0.6.9-1.el5.rf rpmforge 192 k iso-codes noarch 1.0a-1.el5.rf rpmforge 1.5 M kernel-headers x86_64 2.6.18-128.4.1.el5 updates 958 k lftp x86_64 3.7.14-1.el5.rf rpmforge 2.1 M libwpd x86_64 0.8.14-1.el5.rf rpmforge 1.5 M mtr x86_64 2:0.75-1.el5.rf rpmforge 84 k nmap x86_64 2:5.00-1.el5.rf rpmforge 1.7 M nmap-frontend x86_64 2:5.00-1.el5.rf rpmforge 767 k perl-Archive-Tar noarch 1.40-1.el5.rf rpmforge 61 k perl-BSD-Resource x86_64 1.2901-1.el5.rf rpmforge 57 k perl-Convert-ASN1 noarch 0.22-1.el5.rf rpmforge 46 k perl-DBD-mysql x86_64 4.012-1.el5.rf rpmforge 228 k perl-DBI x86_64 1.609-1.el5.rf rpmforge 871 k perl-Digest-SHA1 x86_64 2.12-1.el5.rf rpmforge 75 k perl-HTML-Parser x86_64 3.61-1.el5.rf rpmforge 151 k perl-HTML-Tagset noarch 3.20-1.el5.rf rpmforge 14 k perl-IO-Socket-INET6 noarch 2.56-1.el5.rf rpmforge 17 k perl-IO-Socket-SSL noarch 1.26-1.el5.rf rpmforge 55 k perl-IO-Zlib noarch 1.10-1.el5.rf rpmforge 17 k perl-Net-DNS x86_64 0.65-1.el5.rf rpmforge 288 k perl-Net-SSLeay x86_64 1.35-1.el5.rf rpmforge 327 k perl-Socket6 x86_64 0.23-1.el5.rf rpmforge 50 k perl-XML-NamespaceSupport noarch 1.10-1.el5.rf rpmforge 16 k perl-XML-Parser x86_64 2.36-1.el5.rf rpmforge 318 k perl-XML-SAX noarch 0.96-1.el5.rf rpmforge 79 k rsync x86_64 3.0.6-1.el5.rf rpmforge 374 k spamassassin x86_64 3.2.5-1.el5.rf rpmforge 1.1 M subversion x86_64 1.6.3-0.1.el5.rf rpmforge 6.8 M syslinux x86_64 3.82-1.el5.rf rpmforge 1.2 M udftools x86_64 1.0.0b3-3.el5.rf rpmforge 100 k Removing: kernel x86_64 2.6.18-128.1.14.el5 installed 83 M Installing for dependencies: perl-Compress-Raw-Bzip2 x86_64 2.020-1.el5.rf rpmforge 111 k perl-Compress-Raw-Zlib x86_64 2.020-1.el5.rf rpmforge 178 k perl-Crypt-PasswdMD5 noarch 1.3-1.2.el5.rf rpmforge 9.9 k perl-Net-Daemon noarch 0.43-1.el5.rf rpmforge 44 k perl-Package-Constants noarch 0.02-1.el5.rf rpmforge 7.8 k perl-PlRPC noarch 0.2020-1.el5.rf rpmforge 33 k Transaction Summary ================================================================================ Install 8 Package(s) Update 36 Package(s) Remove 1 Package(s) Total size: 61 M Total download size: 17 M Is this ok [y/N]: y Downloading Packages: (1/2): kernel-headers-2.6.18-128.4.1.el5.x86_64.rpm | 958 kB 00:03 (2/2): kernel-2.6.18-128.4.1.el5.x86_64.rpm | 17 MB 00:16 -------------------------------------------------------------------------------- Total 847 kB/s | 17 MB 00:21 Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Check Error: file /usr/share/emacs/site-lisp/psvn.el from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/de/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/es/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/fr/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/it/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/ja/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/ko/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/nb/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/pl/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/pt_BR/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/sv/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/zh_CN/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/locale/zh_TW/LC_MESSAGES/subversion.mo from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/man/man1/svn.1.gz from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/man/man1/svnadmin.1.gz from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/man/man1/svnlook.1.gz from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/man/man5/svnserve.conf.5.gz from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/man/man8/svnserve.8.gz from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 file /usr/share/xemacs/site-packages/lisp/psvn.el from install of subversion-1.6.3-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5.i386 Error Summary ------------- Sam

3 2

Open Letter to Lance Davis
by R P Herrold 06 Aug '09

06 Aug '09

I seem to be having network and email issues tonight; please excuse any duplication -- Russ herrold -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HTML dump on Thu Jul 30 00:30:33 EDT 2009 http://www.centos.org/ Open Letter to Lance Davis July 30, 2009 04:39 UTC This is an Open Letter to Lance Davis from fellow CentOS Developers It is regrettable that we are forced to send this letter but we are left with no other options. For some time now we have been attempting to resolve these problems: You seem to have crawled into a hole ... and this is not acceptable. You have long promised a statement of CentOS project funds; to this date this has not appeared. You hold sole control of the centos.org domain with no deputy; this is not proper. You have, it seems, sole 'Founders' rights in the IRC channels with no deputy ; this is not proper. When I (Russ) try to call the phone numbers for UK Linux, and for you individually, I get a telco intercept 'Lines are temporarily busy' for the last two weeks. Finally yesterday, a voicemail in your voice picked up, and I left a message urgently requesting a reply. Karanbir also reports calling and leaving messages without your reply. Please do not kill CentOS through your fear of shared management of the project. Clearly the project dies if all the developers walk away. Please contact me, or any other signer of this letter at once, to arrange for the required information to keep the project alive at the 'centos.org' domain. Sincerely, Russ Herrold Ralph Angenendt Karanbir Singh Jim Perrin Donavan Nelson Tim Verhoeven Tru Huynh Johnny Hughes - ---------------------------------- This document clearsigned with the key indicated and of record at the customary keyservers See: http://orcorc.blogspot.com/2008/08/gnupg-few-minutes-on-using-detached-and.… user: "R P Herrold <herrold(a)owlriver.com>" 1024-bit DSA key, ID 9B649644, created 2003-02-09 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFKcSQKMRh1QZtklkQRAqIFAJ96+UzMm7O0/JanMcYYqnX+UPJhMwCeOoL9 s83yIVHOmbcASgmb4hE8GRY= =2Yg2 -----END PGP SIGNATURE-----

49 86

CentOS-announce Digest, Vol 54, Issue 1
by centos-announce-request＠centos.org 06 Aug '09

06 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1193 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2009:1193 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 5 Aug 2009 16:23:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1193 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20090805162313.GA16357(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1193 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1193.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 306054f38d0ba9a19bc4a6ad5f3b2c9d kernel-2.6.18-128.4.1.el5.i686.rpm ac4cfe50729d799e936dec829ced7f08 kernel-debug-2.6.18-128.4.1.el5.i686.rpm 960b09fbc1ae3794c5ef82c0eacabb94 kernel-debug-devel-2.6.18-128.4.1.el5.i686.rpm 43f6eb4fcad1a5d026cc0e009bf52887 kernel-devel-2.6.18-128.4.1.el5.i686.rpm 270618d67d2a501260e82fae98cc8cd3 kernel-doc-2.6.18-128.4.1.el5.noarch.rpm 6dcf7303fede4fc14f0790f1375e9fe5 kernel-headers-2.6.18-128.4.1.el5.i386.rpm 9cdefea2b4e4c272b8126bba03435cf6 kernel-PAE-2.6.18-128.4.1.el5.i686.rpm 31212886409f4a2e4ecb308eb506c1cf kernel-PAE-devel-2.6.18-128.4.1.el5.i686.rpm 8c75794f8aae0ec6418ce8a4730edb0d kernel-xen-2.6.18-128.4.1.el5.i686.rpm a935ff234f0652f1fc58ee19eafdcc35 kernel-xen-devel-2.6.18-128.4.1.el5.i686.rpm Source: 4e72b5e4b6d676f21be6d0164e6c31c6 kernel-2.6.18-128.4.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 5 Aug 2009 16:23:15 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1193 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20090805162315.GA16372(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1193 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1193.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 38f5887b9822006c68b4486716ae18d1 kernel-2.6.18-128.4.1.el5.x86_64.rpm aa0c5bb5e7b4eecde44018cd95e9ea28 kernel-debug-2.6.18-128.4.1.el5.x86_64.rpm f62dd4c14d4911d3161a7e8574d43da0 kernel-debug-devel-2.6.18-128.4.1.el5.x86_64.rpm 8aac2fdf2312fde27f09c99d739d617c kernel-devel-2.6.18-128.4.1.el5.x86_64.rpm 64e37705920db6068c982a0d004fd318 kernel-doc-2.6.18-128.4.1.el5.noarch.rpm b80d5df60492256a43f9a799ae97b9f5 kernel-headers-2.6.18-128.4.1.el5.x86_64.rpm 384fa34172a633669e7738c09542e543 kernel-xen-2.6.18-128.4.1.el5.x86_64.rpm eab0550cbdecd1722a8fd0530a0ca1f5 kernel-xen-devel-2.6.18-128.4.1.el5.x86_64.rpm Source: 4e72b5e4b6d676f21be6d0164e6c31c6 kernel-2.6.18-128.4.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 54, Issue 1 **********************************************

1 0

Serious bug in OpenOffice.org Calc shipped with CentOS
by Niki Kovacs 06 Aug '09

06 Aug '09

Hi, Until now I've been a happy user of CentOS. Everything just works(tm), and I don't care if application versions are slightly outdated. Next week I have to give a series of classes for a company that recently made the switch to Linux. On schedule is a one-week course for Writer and Calc. And right now I discover that one crucial function of Calc, "fill series", doesn't work. Let's say I type "lundi" (monday) in one cell, so I can pull Calc's handle to fill other cells with the days of the week. Doing the same with "janvier" (january) does so with the names of the month. Well, this function is broken in OO shipped with CentOS. And I don't have the slightest clue as to why. Tried the same on a more recent version of OO in Ubuntu, and it works like a charm. Anyone has a solution to this? This seems like a major nuisance to me. Cheers, Niki

6 6

rpmforge.repo
by Sam Drinkard 06 Aug '09

06 Aug '09

How come rpmforge.repo wants to install a whole slew of perl modules, yet if I leave rpmforge.repo out of the update process, none of the perl modules shows up? Here's the rpmforge.repo file.. do any of yall see anything wrong with anything in there? Sam # Name: RPMforge RPM Repository for Red Hat Enterprise 5 - dag # URL: http://rpmforge.net/ [rpmforge] name = Red Hat Enterprise $releasever - RPMforge.net - dag #baseurl = http://apt.sw.be/redhat/el5/en/$basearch/dag mirrorlist = http://apt.sw.be/redhat/el5/en/mirrors-rpmforge #mirrorlist = file:///etc/yum.repos.d/mirrors-rpmforge enabled = 1 protect = 0 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag gpgcheck = 1 priority=10

3 2

Cmake on Centos
by Geoff Galitz 06 Aug '09

06 Aug '09

Have folks been using Cmake on Centos5 without issues? I have installed an RPM for it, but I've been running into some apparent configuration issues. -geoff --------------------------------- Geoff Galitz Blankenheim NRW, Germany http://www.galitz.org/ http://german-way.com/blog/

2 2

German Centos/Linux Group in Cologne/Bonn/Aachen
by Geoff Galitz 06 Aug '09

06 Aug '09

It seems there are a number of Centos users in the Cologne/Bonn/Aachen area of Germany. If there is not one already (and please let me know if there is!) I'd like to start a Linux User Group (including Centos) for this area. I'm way down in Blankenheim, though. Would someone like to volunteer a location? I envision alternating meetings between the three cities if possible... just to make it fair for everyone who has to travel. I'll even propose Friday August 14th for our first meeting. Any interest? -geoff --------------------------------- Geoff Galitz Blankenheim NRW, Germany http://www.galitz.org/ http://german-way.com/blog/

1 0

kvm in Centos 5.3
by Kanwar Ranbir Sandhu 06 Aug '09

06 Aug '09

Hi All, Is KVM support in CentOS 5.3 complete? That is, can a CentOS 5.3 system host KVM VMs or does CentOS 5.3 only support being virtualized via KVM? I ask because I installed KVM on a CentOS 5.3 host, but I can't find a kvm module anywhere in /lib/modules/* (let alone the running kernel). Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 17:55:54 up 5 days, 9:22, 5 users, load average: 1.13, 0.47, 0.28

8 18

Autorun ability on cd?
by James B. Byrne 05 Aug '09

05 Aug '09

I have a little niggling situation that I would like to resolve programmatically. I use Git as my SCM and I have release branches which are sometimes patched. I find myself sometimes entering the working directory tree forgetting that I was last on a release branch and not on the master. What I would like to do is to have a script run every time that I enter a directory, check for .git, and if it finds it then simply do a git-branch for me so that which I am on is forcefully pointed out to me before I proceed to do something foolish. All I can come up with from searching wrt cd is details on why one cannot change the working directory of a running script and various kluges around this. I do not wish to change the pwd of the shell, I just want some way of testing for a certain file and running a specific command if it is found when I enter a working tree. If this requires testing every directory that I cd to then I can live with that. If instead one can put a script that runs only when one enters certain directories then I can live with that as well. Is there any way to do this? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

differences in DNS between boxes
by Mike -- EMAIL IGNORED 05 Aug '09

05 Aug '09

Please refer to my thread "excessive DNS slows httpd" in which I discuss a very slow response from my httpd server on my CentOS box after modifying httpd.config . I have "solved" the problem by blocking all DNS in iptables on my CentOS box. As it happens, this is not a problem in my present configuration, but it can hardly be considered a good solution. Given that the httpd configurations are essentially identical, it appears that there is a difference between my Feodora box and my CentOS box regarding how and when DNS is handled, at least when originated by httpd. Suggestions would be most welcome. Mike.

6 13

php-pdo
by Peter Peltonen 05 Aug '09

05 Aug '09

I wish to use PostgreSQL with PHP+PDO. I haven't use PDO before. I have the php-pdo package installed on my CentOS 4.7 server: # rpm -qa |grep pdo php-pdo-5.1.6-3.el4s1.10 Now when I try connect to the PostgeSQL db with this code: <?php print "PDO test<br />"; try { $db = new PDO("pgsql:host=192.168.0.180;port=5432;dbname=mydb;user=test;password=test"); } catch(PDOException $e) { print "Error : " . $e->getMessage() . "<br/>"; die(); } ?> I get no output in the browser, but I see this error in Apache log: PHP Fatal error: Class 'PDO' not found in /var/www/html/pdotest.php on line 4 Well, it appears the PDO class is not provided by the php-pdo package: # rpm -ql php-pdo |less/etc/php.d/pdo.ini /etc/php.d/pdo_sqlite.ini /usr/lib/php/modules/pdo.so /usr/lib/php/modules/pdo_sqlite.so So, what package does provide it or have I misunderstood something? Regards, Peter

4 7

[Q} how can O.S. predicate a disk going to failure??
by mcclnx mcc 04 Aug '09

04 Aug '09

we have CENTOS 4.X on DELL server and one one of virtual disk include 4 disk configure as REID5 (one more disk for hot spare). I saw /var/log/messages file have: Aug 4 06:27:02 host1 Server Administrator: Storage Service EventID: 2094 Predictive Failure reported: Physical Disk 1:5 Controller 0, Connector 1 Aug 4 06:27:02 host1 Server Administrator: Storage Service EventID: 2051 Physical disk degraded: Physical Disk 1:5 Controller 0, Connector 1 I use DELL OPMN to check and found "disk 1:5" still "online", but "predicate failure". I also use DELL OPMN to check virtual disk and it show "online", not "degrade". my questions are: 1. is this disk really "degrade" or not? 2. how O.S. can predicate disk going to failure? 3. do I need replace this disk now? Thanks. ______________________________________________________________________________________________________ 付費才容量無上限？Yahoo!奇摩電子信箱2.0免費給你，信件永遠不必刪！ http://tw.mg0.mail.yahoo.com/dc/landing

9 8

question on managing multiple boxes
by Jerry Geis 04 Aug '09

04 Aug '09

How do admins handle a situation with many boxes like 50 for example. If I wish to tell 50 boxes to run a handful of commands - how is that done? (I mean without actually logging into 1,2,3,4...X and executing the commands) Thanks, Jerry

8 7

ghc and xmonad
by lostson 04 Aug '09

04 Aug '09

Hello Has anyone tried to build ghc and xmonad on a centos 5.3 set or is there a repo somewhere with the goodies ? -- LostSon http://lostsonsvault.org centOS its not just for servers...

1 0

Strange XEN on CentOS HWaddr Address Issue
by Brett Serkez 04 Aug '09

04 Aug '09

Ran into a strange issue with XEN on CentOS that I think is specific to CentOS, which is why I'm starting by posting to this list first, I'll post on the XEN list depending on responses. My sense is this issue has something to do with how CentOS handles network setup on first boot of the XEN kernel. - Installed a brand new CentOS 5.3 server with minimal packages. - Installed XEN, modified grub.conf to boot off of the XEN kernel and rebooted. - After reboot, network connectivity was lost. - Investigation concluded the issue was that the HWaddr address of the physical NIC matched the fabricated HWaddr that XEN uses for most of its adapters: FE:FF:FF:FF:FF:FF. - Temporary resolution, I re-enabled the motherboard's NIC, rebooted, all seems to be working. I would like to get the NIC in question working as it is a GigaBit NIC, but it still has the HWaddr: FE:FF:FF:FF:FF:FF which conflicts with XEN. My understanding of the HWaddr is that the first portion is manufacturer assigned for uniqueness, I cannot image this NIC originally had this HWaddr, but I don't know what it originally was. Does anyone know if this value is read from the NIC on each boot, or is it stored in a file after the first boot? Is there someway to undo this change so the NIC returns to its original value or atleast a non-conflicting value? Has anyone else seen this behavior? Thank you in advance, Brett

9 12

firewall setup for nfs
by Jerry Geis 04 Aug '09

04 Aug '09

Below is my firewall rules for iptables. everything is working fine except for NFS I cannot mount my drive. If I turn off iptables I can mount. Looking at this : http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-nfs.html Important In order for NFS to work with a default installation of Red Hat Enterprise Linux with a firewall enabled, IPTables with the default TCP port 2049 must be configured. Without proper IPTables configuration, NFS does not function properly. The NFS initialization script and rpc.nfsd process now allow binding to any specified port during system start up. However, this can be error prone if the port is unavailable or conflicts with another daemon. I have port 2049 listed in my iptables. Is there a reason I cannot mount? thanks, Jerry ------------------------------ # Firewall configuration written by system-config-securitylevel # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -p 50 -j ACCEPT -A RH-Firewall-1-INPUT -p 51 -j ACCEPT -A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2049 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 2049 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6540 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6500 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6510 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6520 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5060 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5036 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 4569 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 1720 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 4520 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 123 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5900 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5900 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2000 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 2000 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 5353 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5353 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6544 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited

4 4

CentOS village @ HAR
by Didi 04 Aug '09

04 Aug '09

Hey I am just organizing the CentOS village at HAR and need a rough estimate of people who will be attending. What do people want? Shall the CentOS people have their own party tent? We are currently with the Fedora people. I will also post on the SL mailing list. Hope to see you all at HAR? Cheers Didi ---- My www page: www.ribalba.de Email / Jabber: ribalba(a)gmail.com Skype : ribalba

3 2

Yum - which repo did a package come from
by Linux Advocate 04 Aug '09

04 Aug '09

guys, i have installed mailscanner, spamassassin, etc on my machine. This was done sometime ago. Some of these rpms i got not frm centos repos. What command ( or yum command ) can i use to find out which repo did this installled package come from. yum info packagename just says; repo : installed i was hoping for something like repo:rpmforge or something similiar. i have these 3 rpms which i cant remember where i got them from. dovecot-1.0.7-7.el5 mailscanner-4.74.13-2 spamassassin-3.2.5-1.el5 Regards, Marco.

4 6

help - batch account creation
by David Leon 04 Aug '09

04 Aug '09

Hello guys I have a new Centos 5.3 running, and I have a text file with a bunch of accounts (more than 100) that I should create . File format is like this user1 pasword1 user2 passwrd2 .... How can I do this task easier than creating user one by one by hand? Need some help for building an script to achieve this task Thanks David

7 10

excessive DNS slows httpd
by Mike -- EMAIL IGNORED 04 Aug '09

04 Aug '09

My web server is a CentOS box thus: [root ~]# uname -a Linux mbrc21 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 athlon i386 GNU/Linux root ~]# rpm -q httpd httpd-2.2.3-22.el5.centos.2 My development and standby is on a Fedora box thus: [root ~]# uname -a Linux mbrc32 2.6.23.17-88.fc7 #1 SMP Thu May 15 00:35:10 EDT 2008 i686 athlon i386 GNU/Linux [root@ ~]# rpm -q httpd httpd-2.2.8-1.fc7 They are close neighbors on my LAN. Now I recently revised my httpd.conf making it somewhat more complex and adding ssl for part of it. Running the same configuration on both boxes, I find that the Fedora box runs rapidly, while the CentOS box is very slow. Examining the situation with WireShark on both boxes I find that in responding to a simple GET, the CentOS box does a sequence of DNS queries to resolve the details of the location of the client IP address, whereas the Fedora box does no such thing. It ts these DNS queries that are causing the slow response. Now if I revert to the old configuration, there is no such problem and WireShark shows that there are no DNS queries. Advice on how to proceed would be much appreciated. Thanks, Mike.

4 5

Split dns issues
by Jason Pyeron 04 Aug '09

04 Aug '09

We have internal DNS servers that will override the A record for selected hosts. Example mail.pdinc.us will have a different internal ip than external. This has always been a fine way to handle it as the zone files are for that specific host, and there have never been subdomains before. Now we want to just override the MX records for pdinc.us without having to merge or manage all the records for every entry/subdoamin in the zone file for pdinc.us. Any ideas/questions? -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

8 26

Perl Module Question
by Joseph L. Casale 03 Aug '09

03 Aug '09

To safely make Perl modules from CPAN in Solaris, I used this procedure: mkdir /opt/cpan chmod 777 /opt/cpan chown joe:101 /opt/cpan PERL5LIB=$PERL5LIB:/opt/cpan export PERL5LIB /usr/perl5/bin/perlgcc -MCPAN -e shell Also, ~/.cpan/CPAN/MyConfig.pm specifically had 'makepl_arg' => q[LIB=/opt/cpan PREFIX=/opt/cpan INSTALLMAN3DIR=/opt/cpan/man/man3], Does this make sense in CentOS as well when the modules just aren't available and using cpan2rpm has me chasing my tail endlessly on deps? Thanks! jlc

2 3

Grub fallback problem
by Matthias Blankenhaus 03 Aug '09

03 Aug '09

Hi ! I am posting this again, since I still have the problem and have not been able to resolve this. Please, take a look and comment if you can. Thank you ! I am running CentOS 5 (core pkgs) / x86_64 using grub 0.97 and I am trying to configure a fallback between two partitions on my local disk, each installed with a CentOS image. The idea is to be able to install a new test OS image and fall back in case of a problem to the default image. This is a great grub feature ! Except it does not work for me :( grub.conf: #----------------------------------------------- default saved timeout=5 fallback 1 title NEW OS root (hd0,0) kernel /boot/vmlinuz-new root=/dev/sda1 panic=5 initrd /boot/initrd-new.img savedefault fallback title DEFAULT OS root (hd0,1) kernel /boot/vmlinuz-default root=/dev/sda2 initrd /boot/initrd-default.img savedefault #----------------------------------------------- Grub is installed on /dev/sda1, but not on /dev/sda2. /dev/sda1 is the primary boot partition. Both partitions are formatted with ext3. The problem is that the fallback does not work for me. For instance, if I specify on purpose a wrong root device with the NEW OS, e.g. root=/dev/sda3, then the kernel panics and reboots properly after 5 sec. However, grub then attempts to boot the NEW OS all over again. The same is true when I fully boot NEW OS with the right root device and then panic the kernel on purpose. Now, I have read somewhere that grub requires a default file to get the savedefault feature working. However, I could neither find the 'savedefault' command nor the grub default file under /boot/grub or anywhere else. One more thing, when I choose the boot title manually then grub seems to remember my last choice. In other words, grub is preserving my last choice from a previous boot. Am I doing something wrong ? Do I need to install something in addition to grub 0.97 ? I have done the RTFM / info thing. Your help is much appreciated, Matthias

2 4

Web
by madunix 03 Aug '09

03 Aug '09

I have the following issues on a website, would like to know how would you resolve these issue? 1- CSS is not used efficient. 2- Search engine need to be optimized. 3- Java Scripts are placed between HTML tags. 4- Redirecting homepage through JS code, using client side 5- Web page delay, a lot of objects. 6- Disable listings directories from apache (how) 7- web not compatible with Firefox Thanks -mu

9 12

server mirroring how to
by fabian 03 Aug '09

03 Aug '09

Dear All, I have the following setup which is the heart of our organistion and runs the following for a long time Centos 5.0 server which is used as a Primary Mailserver running sendmail about 400 users mailScanner Primary DNS server using bind Webserver running apache squirrel mail web server i also do have a another centos secondary DNS server and same machine used as my secondary mail server with no mail users Currently i have been following a little crude way of backup i shut down the Primary machine and I use clone Gozilla to make a duplicate of the original disk and keep it standby i do it weekly basis which is really a crude way i am jus googling arround for a solution in where i could have online mirroring of another machine i could have an identical hardware machine which could be running online so if the first machine fails the second one is avaliable instantly also if i create a new user or a new mail user ther user is replicated on both machine if i upgraded or install any software on one machine it is replicated on the other automaticalu.. so we have total redundancy can it be done i was googling arround and actually found linux heartbeat but could not really get the hang of it. to my understanding heartbeat works on service which one would like to mirror but for me i would like disk mirroring on different servers any body has done the above apprecite your advice and help regards fabian -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

4 3

Weird permission
by muhammad panji 03 Aug '09

03 Aug '09

Dear all, I got weird permission on one of my server, when I ls -l the / i got permission for all directory set to "drwxr-xr-x." there are dot after the executable permission for others. what dot mean in permission and how to fix it? the actual problem is I could login via ssh but cannot login via winscp. any idea how to fix this? thanks in advance best regards, -- Muhammad Panji http://sumodirjo.wordpress.com http://www.kurungsiku.web.id

5 6

State of KVM and CentOS
by Johan Swensson 03 Aug '09

03 Aug '09

Hi I was wondering, what is the state on getting a more updated version of KVM onto centos? I've found some 3rd party repos by I'm curious if one could expect a new supported KVM soon or will it not get in until EL6?

4 3

PDNS
by Jason Pyeron 03 Aug '09

03 Aug '09

Does anyone have experience with PDNS? The reason I ask is that I have never heard of it before today, but it looks like we might want to leverage its sql backend capabilites. My (useless) searches lead me to: * http://lists.centos.org/pipermail/centos-es/2009-February/004499.html * http://lists.centos.org/pipermail/centos/2009-July/078975.html (in spanish...) * http://www.tummy.com/journals/entries/kevin_20070326_163156 * http://mailman.powerdns.com/pipermail/pdns-users/2005-November/002829.html * http://www.linuxquestions.org/questions/solaris-opensolaris-20/powerdns-vs-… 636478/ (same dilemma as mine) In particular do you have any complaints about doing complicated setups? Windows machines registering themselves? Upstream provider's continued support after 5.x? Any other jibes or cheers? -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

3 2

CentOS on Acer Laptop
by sam R 03 Aug '09

03 Aug '09

I have very basic question: I have downloaded *CentOS-5.3-i386-LiveCD* from CentOS website. Now I need to install it on my Acer Laptop permanently not as a liveCD. How do I burn it to a DVD to be able to install it by simply restarting my laptop? Thank you, Sam

8 9

Can not modprobe acpi-cpufreq.ko in CentOS 5.2
by Ian jonhson 03 Aug '09

03 Aug '09

Dear all, The cpufreq modules have been distributed in Centos. But recently, I met a problem when I tried to test the power-related applications. The module can not be modprobed in kernel notwithstanding releated with Centos distribution. The messgae thrown out is: ------------- dump of screen ------------ # modprobe p4-clockmod.ko FATAL: Module p4_clockmod.ko not found -------------------------------------------------- However, the module is there. If I search the kernel path: ------------------ dump of screen ---------------------- # ls /lib/modules/`uname -r`/kernel/arch/*/kernel/cpu/cpufreq acpi-cpufreq.ko # find /lib/modules/ -name "*cpufreq*" /lib/modules/2.6.18-92.el5/kernel/drivers/cpufreq /lib/modules/2.6.18-92.el5/kernel/drivers/cpufreq/cpufreq_powersave.ko /lib/modules/2.6.18-92.el5/kernel/drivers/cpufreq/cpufreq_ondemand.ko /lib/modules/2.6.18-92.el5/kernel/drivers/cpufreq/cpufreq_conservative.ko /lib/modules/2.6.18-92.el5/kernel/drivers/cpufreq/cpufreq_stats.ko /lib/modules/2.6.18-92.el5/kernel/arch/x86_64/kernel/cpufreq /lib/modules/2.6.18-92.el5/kernel/arch/x86_64/kernel/cpufreq/acpi-cpufreq.ko /lib/modules/2.6.29.3/kernel/drivers/cpufreq /lib/modules/2.6.29.3/kernel/drivers/cpufreq/cpufreq_powersave.ko /lib/modules/2.6.29.3/kernel/drivers/cpufreq/cpufreq_ondemand.ko /lib/modules/2.6.29.3/kernel/drivers/cpufreq/cpufreq_conservative.ko /lib/modules/2.6.29.3/kernel/drivers/cpufreq/cpufreq_stats.ko /lib/modules/2.6.29.3/kernel/arch/x86/kernel/cpu/cpufreq /lib/modules/2.6.29.3/kernel/arch/x86/kernel/cpu/cpufreq/acpi-cpufreq.ko # cat /etc/issue CentOS release 5.2 (Final) Kernel \r on an \m # uname -a Linux hdt0.mycompany.com 2.6.29.3 #1 SMP Thu May 28 13:34:23 CST 2009 x86_64 x86_64 x86_64 GNU/Linux ------------------------------------------------------------------ I have googled the internet for a long time, but not got any solution. Could anybody given me some help? Thanks, Ian

5 11

Connection to Microsoft ISA 2006 via IPsec
by Peter Hopfgartner 03 Aug '09

03 Aug '09

Dear list members, has anybody successfully established a VPN connection with CentOS to a VPN served by a Micorosft ISO 2006 server (IPsec + tunnel mode)? Regards, Peter -- Dott. Peter Hopfgartner R3 GIS Srl - GmbH Via Johann Kravogl-Str. 2 I-39012 Meran/Merano (BZ) Email: peter.hopfgartner(a)r3-gis.com Tel. : +39 0473 494949 Fax : +39 0473 069902 www : http://www.r3-gis.com

1 0

Re: [CentOS] BIND vulnerability
by shprahi shprahi 03 Aug '09

03 Aug '09

Hi All, I am using Caching DNS server with Bind 9 bind-utils-9.3.4-10.P1.el5_3.1 bind-9.3.4-10.P1.el5_3.1 bind-chroot-9.3.4-10.P1.el5_3.1 system-config-bind-4.0.3-2.el5.centos bind-libs-9.3.4-10.P1.el5_3.1 I am getting Error : named[22851]: mem.c:1061: REQUIRE((((ctx) != ((void *)0)) && (((const isc__magic_t *)(ctx))->magic == ((('M') << 24 | ('e') << 16 | ('m') << 8 | ('C')))))) failed named[22851]: exiting (due to assertion failure) Is this related to above bug? Thanks in advance shprahi On Wed, Jul 29, 2009 at 9:45 PM, Kenneth Porter <shiva(a)sewingwitch.com>wrote: > Slashdot carried this story yesterday on a BIND vulnerability: > > < > http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability-In-All-… > > > > The upstream report: > > <https://www.isc.org/node/474> > > Red Hat's Bugzilla: > > <https://bugzilla.redhat.com/show_bug.cgi?id=514292> > > >From what I'm reading, if one has an Internet-facing master for a zone, > one > is vulnerable, even if dynamic DNS isn't being used. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

1 0

things weirdly different in new installation
by fred smith 02 Aug '09

02 Aug '09

I've just built a new system and installed latest Centos 5.3 on it. My old box also has an up to date Centos 5 on it. Some things are just plain different between the two installations, and it's stumping me why that would be. Example: on the old box, the shutdown dialog offers restart, cancel, shutdown, and also standby and hibernate. and the standby and hibernate options work, too. The new box, it only offers restart, cancel, or shutdown. Oddly, the main "System" dropdown offers "suspend" as well as "logoff" and "shutdown" submenus. Since it's a desktop, I won't often want to suspend or hibernate, but it may occasionally be nice to have the option to hibernate (e.g., power is off, UPS is about dead, hibernate could save my work.) Ideas, anyone? Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "Not everyone who says to me, 'Lord, Lord,' will enter the kingdom of heaven, but only he who does the will of my Father who is in heaven." ------------------------------ Matthew 7:21 (niv) -----------------------------

3 3

Embedded Question
by Joseph L. Casale 02 Aug '09

02 Aug '09

A friend asked me to setup an embedded appliance with an RO root for minimal maintenance to primarily stream shoutcast out to an amp. The only thing I knew that might do this is iMedia Linux, but the project is practically dead with little to no activity. Is it possible to do something like this with CentOS? Doesn't seem to be much info on the /etc/sysconfig/readonly-root file. Anyone know a good place to get info on this? I would rather use CentOS if possible as I also want to use this a firewall/vpn for them and that would be easy and reliable w/ CentOS. Thanks! jlc

4 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss