- Discuss - lists.centos.org

4 X 500 gb drives - best software raid config for a backup server?
by dnk 23 Feb '09

23 Feb '09

Hi there, I am currently setting up a server that will house my backups (simply using rsync). This system has 4 X 500 gb drives and I am looking to raid for max drive space and data safety. Performance is not so much a concern. My experience with software raids in nil, so some of these may seem like pretty dumb questions. I was thinking a raid 1 is probably sufficient. Would it be best to raid 1 two drives each and LVM them together? My next question would be about how to do this as I have never done a linux software raid. D

17 50

Re: [CentOS] probem with bind???
by David G. Miller 22 Feb '09

22 Feb '09

"fabian dacunha" <fabian(a)baladia.gov.kw> wrote: > Dear All, > > I am sorry for posting this query here but hope someone can help me out > i have been running Centos 5 as my prinamry DNS n Mail server with bind 9.2 > > every thing works fine but in my/var/messages log i see continuosly the > below meesages > > Feb 22 09:14:46 kmdns1 named[2087]: client 62.109.4.89#17222: query > (cache) './NS/IN' denied > Feb 22 09:14:46 kmdns1 named[2087]: client 62.109.4.89#26398: query > (cache) './NS/IN' denied > Feb 22 09:14:51 kmdns1 named[2087]: client 62.109.4.89#65326: query > (cache) './NS/IN' denied > Feb 22 09:14:52 kmdns1 named[2087]: client 62.109.4.89#59870: query > (cache) './NS/IN' denied > > now in my firewall i tryied to block this ip but the messages dont stop > > i also upgraded bind to version bind-9.3.4-6.0.3.P1.el5_2 but no avail > the problem still there > > > i jus like to know whts this problem and how could i solve it > > is there a problem with my DNS server > > thnks and regards > > apprecite your kind help > > > fabian > I run a very small, personal presence on the internet (only a single web site, e-mail, etc. plus DNS for my own stuff) so this might not work if you have lots of sites or there are legitimate reasons why the same source IP address would hit your DNS with multiple, valid queries in a very short period. Typically, once a source IP has queried a DNS, the result is cached for the time to live (TTL) of the resulting record and the query should not normally be repeated. Given this, I added the following rules to my firewall: ... # Block cache poisoning attacks # Drop repeated DNS requests -A RH-Firewall-1-INPUT -p udp -m udp -m recent -i eth0 --dport 53 --update \ --seconds 660 --hitcount 7 --name DNSTHROTTLE --rsource -j DROP -A RH-Firewall-1-INPUT -p udp -m udp -m recent -i eth0 --dport 53 -j ACCEPT \ --set --name DNSTHROTTLE --rsource ... Note that eth0 is my external NIC so these rules only fire for DNS requests that are not from my local network. I came up with seven queries in eleven minutes was a reasonable sign of a cache poisoning attack. Your mileage may very. These two rules replaced about 30 IPs in my blacklist and are completely automatic. The funny this that a lot of the brute force cache poisoning attempts just keep banging away so the source IP stays on the blacklist. Every once in a while I'll see a new IP address hit seven attempts and then the blacklist rule kicks in and they're never heard from again. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

xulrunner dependancy problem
by listmail 22 Feb '09

22 Feb '09

Hi, Is anyone else noticing a problem updating Firefox and its dependencies? It appears that xulrunner-devel 1.9.0.6-1.el5 wants xulrunner 1.9.0.5-1.el5, but "this is not available". Following is the output from Yum when I attempt to update Firefox on CentOS 5.2 X86_64: ============ Resolving Dependencies --> Running transaction check ---> Package firefox.x86_64 0:3.0.6-1.el5.centos set to be updated --> Processing Dependency: xulrunner >= 1.9.0.6-1 for package: firefox ---> Package firefox.i386 0:3.0.6-1.el5.centos set to be updated --> Running transaction check ---> Package xulrunner.x86_64 0:1.9.0.6-1.el5 set to be updated --> Processing Dependency: xulrunner = 1.9.0.5-1.el5 for package: xulrunner-devel --> Processing Dependency: xulrunner = 1.9.0.5-1.el5 for package: xulrunner-devel ---> Package xulrunner.i386 0:1.9.0.6-1.el5 set to be updated --> Running transaction check ---> Package xulrunner-devel.x86_64 0:1.9.0.6-1.el5 set to be updated --> Finished Dependency Resolution Dependencies Resolved ============================================================================= Package Arch Version Repository Size ============================================================================= Updating: firefox x86_64 3.0.6-1.el5.centos updates 12 M firefox i386 3.0.6-1.el5.centos updates 12 M xulrunner x86_64 1.9.0.6-1.el5 updates 10 M xulrunner i386 1.9.0.6-1.el5 updates 9.9 M Updating for dependencies: xulrunner-devel x86_64 1.9.0.6-1.el5 updates 3.6 M Transaction Summary ============================================================================= Install 0 Package(s) Update 5 Package(s) Remove 0 Package(s) Total download size: 48 M Is this ok [y/N]: y Downloading Packages: Running rpm_check_debug ERROR with rpm_check_debug vs depsolve: Package xulrunner-devel needs xulrunner = 1.9.0.5-1.el5, this is not available. Package xulrunner-devel needs xulrunner = 1.9.0.5-1.el5, this is not available. Complete! ======================= Thanks, --Bill

3 3

Software Raid Recovery
by Stephen Leonard Character 21 Feb '09

21 Feb '09

I have a server set up with 4hdd using software raid. I have /boot on a raid1 on md0 , / on raid5 on md1, and swap on raid0 on md2. If one of my drives die, how to I recover? Thanks in advance, scharacter

6 13

Re: [CentOS] CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 resolution?
by Dick Holland 21 Feb '09

21 Feb '09

On Fri, 2009-02-20 at 09:02 +0100, Sorin Srbu wrote: > >-----Original Message----- > >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf > >Of Dick Holland > >Sent: Friday, February 20, 2009 8:45 AM > >To: CentOS mailing list > >Subject: Re: [CentOS] CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 > >resolution? > > > > > >Be gentle with me, I'm a bit of a noob. Do you mean add rpmforge as a > >yum repository and do a "yum install 915resolution"? > > We all are at some point. ;-) The answer is yes. > > Go here for info on how to add the rpmforge repo: > http://dag.wieers.com/rpm/FAQ.php#B2 > > FYI, RHEL5 i386 reponds to CentOS5 i386 and so on. > > Then do a "yum install whateverpackageyouneed". > > HTH. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos Thanks for the guidance. I've d/l 915resolution, but it gives me an error message so I've mailed the author as it suggested. I'll post when I get success. -- Dick Holland

1 0

help with alternatives
by Tony Schreiner 20 Feb '09

20 Feb '09

I've installed java-1.6.0-openjdk (from EPEL) on a CentOS 5.2 x86_64 system and see that it has not registered itself with alternatives. First, is there a reason I should know about that it does not set itself up as an alternative? But second, if I was to configure it myself, the syntax is alternatives --install link name path priority ... and other optional stuff Looking at other examples, I'm not clear on the difference between link and path in this command Thanks, Tony Schreiner Boston College

2 2

CentOS-announce Digest, Vol 48, Issue 8
by centos-announce-request＠centos.org 20 Feb '09

20 Feb '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:0308 Important CentOS 4 ia64 cups - security update (Pasi Pirhonen) 2. CESA-2009:0275 Moderate CentOS 3 ia64 imap - security update (Pasi Pirhonen) 3. CESA-2009:0308 Important CentOS 3 s390(x) cups - security update (Pasi Pirhonen) 4. CESA-2009:0275 Moderate CentOS 3 s390(x) imap - security update (Pasi Pirhonen) 5. CESA-2009:0275 Moderate CentOS 3 i386 imap - security update (Tru Huynh) 6. CESA-2009:0275 Moderate CentOS 3 x86_64 imap - security update (Tru Huynh) 7. CESA-2009:0308 Important CentOS 3 i386 cups - security update (Tru Huynh) 8. CESA-2009:0308 Important CentOS 3 x86_64 cups - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 19 Feb 2009 20:19:28 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2009:0308 Important CentOS 4 ia64 cups - security update To: centos-announce(a)centos.org Message-ID: <20090219181928.GP12358(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2009:0308 https://rhn.redhat.com/errata/RHSA-2009-0308.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/cups-1.1.17-13.3.56.ia64.rpm updates/ia64/RPMS/cups-devel-1.1.17-13.3.56.ia64.rpm updates/ia64/RPMS/cups-libs-1.1.17-13.3.56.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Re: [CentOS] Keepalive...
by John Doe 20 Feb '09

20 Feb '09

> vrrp_instance VI_1 { > state MASTER ### BACKUP on the backup ### > interface eth0 > lvs_sync_daemon_interface eth1 > virtual_router_id 51 > priority 100 ### 99 on the backup ### > advert_int 1 > smtp_alert > virtual_ipaddress { > 192.168.16.123 > } > } Suddenly, I went a bit further... I saw a different (from the outdated doc) config on the web and tried it succesfully: virtual_ipaddress { 192.168.16.123/32 brd 192.168.31.255 scope global } And get these extra bits: Feb 20 16:19:56 lvs1 Keepalived_vrrp: VRRP_Instance(VI_1) Transition to MASTER STATE Feb 20 16:19:57 lvs1 Keepalived_vrrp: VRRP_Instance(VI_1) Entering MASTER STATE Feb 20 16:19:57 lvs1 Keepalived_vrrp: VRRP_Instance(VI_1) setting protocol VIPs. Feb 20 16:19:57 lvs1 Keepalived_vrrp: VRRP_Instance(VI_1) Sending gratuitous ARPs on eth0 for 192.168.16.123 Feb 20 16:19:57 lvs1 Keepalived_vrrp: Remote SMTP server [127.0.0.1:25] connected. Feb 20 16:19:57 lvs1 Keepalived_vrrp: SMTP alert successfully sent. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:04:23:9e:f3:74 brd ff:ff:ff:ff:ff:ff inet 192.168.28.226/20 brd 192.168.31.255 scope global eth0 inet 192.168.16.123/32 brd 192.168.31.255 scope global eth0 inet6 fe80::204:23ff:fe9e:f374/64 scope link valid_lft forever preferred_lft forever But not sure both lvs are talking vrrp to each other; tcpdump does not intercept anything... JD

1 0

BiND Failover
by Per Qvindesland 20 Feb '09

20 Feb '09

Hi list, I've two servers running the same ldap service. A is primary server and B is simply a mirror, and accounts from server A are constantly synchronized with B. Now I don't have a automatic failover solution, whenever server A goes down, I have to point the domain's A record to server B and wait for the DNS to get updated. Takes quite a lot of time but the ldap service is crucial to the system and shouldn't be down for longer than a few minutes. I've heard about Dyndns? They provide automatic failover if one server does down, what I want to know is if I can do the same using Bind? And if it's possible to do it automatically? Without human intervention. I don't want a round-robin solution, I want a automatic switchover if primary box goes down. Regards Per Qvindesland

5 5

question on hwclock
by Jerry Geis 20 Feb '09

20 Feb '09

I am trying to hwclock to set the time. (hwclock -w) this is what I get on standard 5.2 x86_64. hwclock --debug hwclock from util-linux-2.13-pre7 hwclock: Open of /dev/rtc failed, errno=19: No such device. No usable clock interface found. Cannot access the Hardware Clock via any known method. [root@devcentos5x64 src]# ls -l /dev/rtc crw------- 1 root root 10, 135 Feb 6 13:32 /dev/rtc Any thoughts? Jerry

5 7

Getting "poll: protocol failure in circuit setup" from rsh
by Sorin Srbu 20 Feb '09

20 Feb '09

Hi all, I inherited a cpu-stats script from the previous *nixadmin at our department. This script relies on a rsh-command to get the vmstats from the remote machines and then using a perl script to push it to a web server. Now I've just added a new machine running CentOS 5.2 x64 to the script and I get the error message in the subject line; "poll: protocol failure in circuit setup". What I've done so far is to check whether the command "rsh mach218 uptime" from m2 works with and w/o iptables running on mach218, checking that m2 is allowed to rlogin in m218 hosts.allow, hosts is properly setup, xinetd rsh and rlogin services are on and started AFAICT. In neither case does rsh work when run against m218, I still get the protocol failure-message. I have another machine, m14, that also runs CentOS 5.2 but the x86-flavour, and here rsh works. As far as I can tell, the machines are identically setup with respect to iptables, hosts and hosts.allow. Also the /etc/xinetd.conf are identical on both m14 and m218. Feels like I'm missing something obvious... Can you guys help? Thx. -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu [Sysadmin, Systems Engineer] # Dept of Medicinal Chemistry, Phone: +46 (0)18-4714482 >3 signals> GSM # Div of Org Pharm Chem, Mobile: +46 (0)701-718023 # Box 574, Uppsala University, Fax: +46 (0)18-4714482 # SE-751 23 Uppsala, Sweden Visit: BMC, Husargatan 3, D5:512b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # () ASCII ribbon campaign - Against html E-mail # /\ # # MotD follows: # If it wasn't backed-up, then it wasn't important. -The sysadmin's motto.

1 0

Re: [CentOS] CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 resolution?
by Dick Holland 20 Feb '09

20 Feb '09

On Fri, 2009-02-20 at 08:12 +0100, Sorin Srbu wrote: > >-----Original Message----- > >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf > >Of Dick Holland > >Sent: Thursday, February 19, 2009 11:26 PM > >To: centos(a)centos.org > >Subject: [CentOS] CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 > >resolution? > > > >I'm trying to find a CentOS 5 x86_64 video driver for an Intel > >DG965WHMKR mobo to support 1680X1050 resolution. There appears to be > >nothing at Intel - or anywhere else that I can find. > > Is this an mobo-integrated gfx-card? Did you check Intels download site? > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos Yes, it is integrated graphics and I checked Intel and could find nothing. -- Dick Holland

2 1

CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 resolution?
by Dick Holland 20 Feb '09

20 Feb '09

I'm trying to find a CentOS 5 x86_64 video driver for an Intel DG965WHMKR mobo to support 1680X1050 resolution. There appears to be nothing at Intel - or anywhere else that I can find. Anyone know where I can find one? -- Dick Holland

3 5

Re: [CentOS] CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 resolution?
by Sorin Srbu 20 Feb '09

20 Feb '09

>-----Original Message----- >From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf >Of Sorin Srbu >Sent: Friday, February 20, 2009 8:12 AM >To: 'CentOS mailing list' >Subject: Re: [CentOS] CentOS 5 video driver for Intel DG965WHMKR at 1680X1050 >resolution? > >>I'm trying to find a CentOS 5 x86_64 video driver for an Intel >>DG965WHMKR mobo to support 1680X1050 resolution. There appears to be >>nothing at Intel - or anywhere else that I can find. > >Is this an mobo-integrated gfx-card? Did you check Intels download site? Sorry, missed the line where you said you'd already checked Intels site. -- /Sorin

1 0

testing
by bruce 20 Feb '09

20 Feb '09

test.. please ignore..

1 0

ip6tables forwarding rule
by Robert Moskowitz 20 Feb '09

20 Feb '09

I have 2 boxes that act as IPv6 routers. One with 2 physical interfaces, the other with 6 vlan 'interfaces' on one physical interface plus a second physical interface. On both systems I have in /etc/sysconfig/network IPV6FORWARDING=yes But if I have my 'basic' ip6tables service running, only ICMP messages get through. Since both of these boxes are Centos based, I can't use the new shorewall6 that requires at least FC9 (both boxes have shorewall for IPv4 routing controls). Is there a 'simple' rule to add to forward all IPv6 traffic between the interfaces, with the other rules only impacting traffic for each host itself?

1 0

Re: [CentOS] USB Memory Key not recognized
by James B. Byrne 19 Feb '09

19 Feb '09

Message-ID: <499CC7D9.9050207(a)gmail.com> Date: Thu, 19 Feb 2009 08:15:45 +0530, partha chowdhury <kira.laucas(a)gmail.com> wrote: > what do /sbin/lsusb and fdisk -l show ? [root@inet04 ~]# /sbin/lsusb Bus 002 Device 001: ID 0000:0000 Bus 001 Device 001: ID 0000:0000 Bus 007 Device 001: ID 0000:0000 Bus 003 Device 002: ID 046d:c312 Logitech, Inc. Bus 003 Device 001: ID 0000:0000 Bus 006 Device 001: ID 0000:0000 Bus 008 Device 001: ID 0000:0000 Bus 005 Device 001: ID 0000:0000 Bus 004 Device 001: ID 0000:0000 Bus 004 Device 002: ID 045e:0039 Microsoft Corp. IntelliMouse Optical [root@inet04 ~]# fdisk -l Disk /dev/sda: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 13 104391 83 Linux /dev/sda2 14 121601 976655610 8e Linux LVM [root@inet04 ~]# Pardon the delay but I get the digest version of the mailing list. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

CentOS 5.2 and SATA HotSwap
by Julio Rodanes - KNET 19 Feb '09

19 Feb '09

Hello, I have a server Supermicro 5015B-MT with ICH9R chipset, disk SATAII and Centos 5.2 I have read that the AHCI module allows hotplug but when I add a hot new SATA disk, the system don't detects it . Any idea of what the problem is? Thanks. Julio Rodan?s Martinez SISTEMAS DE COMUNICACI?N [cid:imageade14b.gif@77028d6e.2a90465b] [cid:imageb22abd.gif@9a51a423.4620438d] Avda. Club Deportivo, 55 26007 Logro?o (La Rioja) T. 902 44 90 90 F. 941 51 93 92 www.knet.es<http://www.knet.es/> Pol?tica de privacidad<http://www.knet.es/mail/politica_privacidad.htm>

4 4

Lost konqueror navigation toolbars
by Anne Wilson 19 Feb '09

19 Feb '09

Re-sending, in the hope that someone has a brainwave. I still have some outstanding problems caused by the recent power problems. All my ~/.kde ended up in lost+found, identified by numbered folders. I've gradually managed to trace the origin of all the files and returned them to their correct place. However a few may have been lost, as there are no files left and I still have some problems. I'll post them in separate threads. When I launch konqueror as user I have no Main or Location toolbar. Also, my menu options are Settings, Help, Edit, View and Tools, in that order. Location, Go, Bookmarks and Window are missing. If I knew what provides these I could copy them from another account. Can anyone help, please? Do you know what causes a toolbar to be displayed? All the toolbars are visible in other users' konqueror, so I don't think anything vital is lost. Anne

4 5

Gpg-agent will not start
by Anne Wilson 19 Feb '09

19 Feb '09

I'm beginning to wonder whether I'm missing a package here, as no matter what I do I get the message that gpg-agent is not running and I should remove reference to it in the config or fix it. Here's what I seem to have: Installed Packages libgpg-error.i386 1.4-2 installed Available Packages gpgme.i386 1.0.3-1.el5.rf rpmforge gpgme-devel.i386 1.0.3-1.el5.rf rpmforge gpgme03.i386 0.3.16-1.el5.rf rpmforge gpgme03-devel.i386 0.3.16-1.el5.rf rpmforge libgpg-error-devel.i386 1.4-2 base perl-Crypt-GPG.noarch 1.63-1.el5.rf rpmforge perl-Mail-GPG.noarch 1.0.6-1.el5.rf rpmforge Now I realise that /usr/bin/gpg-agent does not exist. There are just gpg gpg-error gpgsplit gpgv gpg-zip kgpg Package gnupg - 1.4.5-13.i386 is already installed. Package pinentry - 0.7.2-1.el5.rf.i386 is already installed. What am I missing? Anne

7 14

USB Memory Key not recognized
by James B. Byrne 19 Feb '09

19 Feb '09

Intel DQ35JO MB CentOS-5.3 2.6.18-92.1.22.el5xen x86_64 I have a USB meory key (Kingston) that I formally used with a CentOS-5.2 (32bit) system. When I plug it into a connector slot the light on the key comes on but there are no entries created in /media and no entries made to the /var/log/messages file. I have a usb mouse and keyboard attached to the same system. Both work fine. Is there a problem because I am running xen? Is this related to the host being a 64 bit system? Is there something else that I should do to enable this devices? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

realtime backup
by CentOS List 19 Feb '09

19 Feb '09

Hi, I had a cfml application running on mysql database. Can some suggest a realtime backup solution via ftp say every 5mins without damaging the database? Thanks regards

15 17

OT: Oracle client logging issue
by Tom Brown 19 Feb '09

19 Feb '09

Hi We have an app on CentOS 5 that is in pyton and uses some form of thin oracle client called oracle-instantclient-basic, this error is more towards that client i think but if anyone has seen this before then it would be great to hear about it. The basic issue is that we are getting lots of sqlnet.log 's on the filesystem and we dont seem to be ablr to configure the location of that log as there is no oracle configuration for the client as such it seems in terms of tnsnames etc that you'd get with the full client. Anyone ever used this client before or know how to direct its logs somewhere else? thanks

2 1

Question about sub-domains
by Bo Lynch 18 Feb '09

18 Feb '09

We currently have a web server that is running apache on cent 5.2. We are upgrading our student info system so that it allows web access and the vendor (powerschool) is stating that this has to be a registered domain or a sub domain and only runs on Windows Server. My question is can you tell apache to point a subdomain to a diiferent IP address. For example, Our domain is currently amelia.k12.va.us. If someone goes to powerschool.amelia.k12.va.us it points to another IP other than itself? I have no experience with sub-domains so any input would be greatly appreciated. Thanks -- Bo Lynch

5 5

fotran 77 with amd64 technology
by Pavel Ritto 18 Feb '09

18 Feb '09

What is the right way to compile a fortran 77 file using the amd64 bits technology? If I write f77 -m64 -march=opteron file.f and then run a.out, the time of execution is so slow as if it I had´nt called to 64bits option. what is happening?

2 1

chkconfig path
by Geert Batsleer 18 Feb '09

18 Feb '09

Hi all! I'm trying to install FOG (an opensource ghostlike backup/rollout server) on a centos 5 box but at the end of the isntaller script it can't find chckconfig altough it's in /sbn and I run the (redhat specific install) script as root. How can I make sure chckconfig gets found? Tried adding the full path in the script to /sbin/chckconfig but got the same error. Regards, Geert ------------------------------ ------------------------------------------------ * Checking package: perl...OK * Checking package: perl-Crypt-PasswdMD5...OK * Checking package: lftp...OK Configuring services. * Setting up fog user...Exists * Setting up and starting MySql../lib/redhat/functions.sh: line 440: chkconfig: command not found ...Failed!

4 5

Re: [CentOS] GFS + Restarting iptables
by Sven Kaptein | MARS websolutions 18 Feb '09

18 Feb '09

>>>> Dear List, >>>> >>>> I have one last little problem with setting up an cluster. My gfs >>>> Mount will hang as soon as I do an iptables restart on one of the >>>> nodes.. >> >>> Undoubtedly someone else with more experience with GFS will give you an >>> answer, but to me this makes me think ip_conntrack stuff gets cleared >>> out and sessions have to reestablish themselves. >>> >>> Ray >> >> Ray, >> >> Thanks for your fast answer and getting me into the right direction. This >> sounds like a possible solution, but I have no clue how to fix it. I googled >> already a lot on ip_conntrack + gfs, but don't see a possible solution >> coming up. >> >> Can someone/you please help me a little bit more with the issue? >> >> Thanks a lot! >> Sven > Are your GFS mounts and your cluster on different sides of the firewall? > > Maybe you can do something simple like a tunnel between the clusters and the > mounts. Should be easier and safer than punching holes in the firewall. Or put > a separate subnet or vlan just for the GFS traffic. Uhm... I have the cluster running on a different vlan then my ISCSI traffic. Is that a problem? I would not like to put my cluster communication on the other vlan since thats iscsi dedicated now. I have now figured out that it isn't the restarting IP tables causing the trouble, but the issue is as follows: - Calling Group_tool dump This will cause groupd to run at 100% cpu. Dooing a strace on this process tells me its dooing some poll in an infinite loop: poll([{fd=1, events=POLLIN}, {fd=2, events=POLLIN}, {fd=7, events=POLLIN}, {fd=8, events=POLLIN}, {fd=9, events=POLLIN}, {fd=10, events=POLLIN}, {fd=12, events=POLLIN}, {fd=14, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN, revents=POLLNVAL}, {fd=-1}], 13, -1) = 1 - Calling Group_tool dump gfs This will cause gfs_controld to run at 100% cpu. Exactly the same as the groupd (strace): poll([{fd=2, events=POLLIN}, {fd=3, events=POLLIN}, {fd=6, events=POLLIN}, {fd=7, events=POLLIN}, {fd=8, events=POLLIN}, {fd=11, events=POLLIN}, {fd=12, events=POLLIN, revents=POLLNVAL}, {fd=12, events=POLLIN, revents=POLLNVAL}], 8, -1) = 2 Sometimes my Mount will hang, but sometimes it will just continue normally. I can imagine this has to do with the amount of data going to the gfs Mount. So I guess it isn't really an iptables problem.. But im trying to debug that a little bit more as well.. Any clues? Thanks!! Sven

1 0

After electric breaking: HARDWARE ERROR Kernel panic
by Vnpenguin 18 Feb '09

18 Feb '09

Hi all, After an electric breaking, my server (Centos 5.2 x86_64 with all updates) can not boot. The error message on screen is: ----------------------------------------------------------------------------------------------------------- Memory for crash kernel (0x0 to 0x0) notwithin permissible range <0> HARDWARE ERROR CPU 1: Machine Check Exception: 7 Bank 4: .... RIP 10:<.....> TSC 133eab63c9 ADDR 24fe3d028 This is not a software problem! Run through mcelog --ascii to decode and contact your hardware vendot Kernel panic - not syncing: Uncorrected machine check ------------------------------------------------------------------------- Anyone could tell me how to fix this please ! Help ! Thank you

5 6

Check out my Facebook profile
by Ceejay Cervantes 18 Feb '09

18 Feb '09

Hi CentOS, I set up a Facebook profile where I can post my pictures, videos and events and I want to add you as a friend so you can see it. First, you need to join Facebook! Once you join, you can also create your own profile. Thanks, Ceejay To sign up for Facebook, follow the link below: http://www.facebook.com/p.php?i=570089480&k=55LUPZR6W46MXBDCRAZ3T&r

2 1

reading sar data
by muhammad panji 18 Feb '09

18 Feb '09

Hi, I have a problem reading sar data. I have some server but no monitoring tools like cacti or nagios on it. every end of month I got the sar log manually and have to generate report for it but I have no idea how to read it. on this page :http://pagesperso-orange.fr/sebastien.godard/tutorial.html i found there is tool called sadf, can i use it on CentOS 4 or it just available on Centos 5? I found sadf on centos5 but not on centos 4. are there any tools that could be used to generate a graphic from a month historical sar data? best regards, -- Muhammad Panji http://sumodirjo.wordpress.com

2 1

Practical experience with NTLM/Windows Integrated Authentication [Apache]
by Sven 18 Feb '09

18 Feb '09

Hi folks I wish to migrate Windows IIS webserver to CentOS. Killer-Feature is SSO with Windows Integrated Authentication[0]. Anyone have experience with such a setup and can say a few sentences how to do that and if its stable? kind regards Sven Aluoor (Please CC me I am not on the list) [0] http://bayimg.com/image/hanogaabi.jpg

9 14

Re: [CentOS] Practical experience with NTLM/Windows Integrated Authentication [Apache]
by Ross Walker 17 Feb '09

17 Feb '09

On Feb 16, 2009, at 3:13 AM, "Sorin Srbu" <sorin.srbu(a)orgfarm.uu.se> wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf >> Of Christopher Chan >> Sent: Monday, February 16, 2009 8:53 AM >> To: CentOS mailing list >> Subject: Re: [CentOS] Practical experience with NTLM/Windows >> Integrated >> Authentication [Apache] >> >> >>>> No, NTLM auth works in Firefox (at least on Firefox on Windows, I >>>> don't think it will work in other platforms though). >>> >>> It doesn't. NTLM auth to eg Sharepoint sites works fine with >>> Firefox in >>> Windows. Setting the same things in Firefox under linux and having >>> it > login >>> to sharepoint doesn't. >> >> I don't think any other OS other than Windows has NTLM bindings. > > Probably not, but I was thinking there may be some obscure package > somewhere > on the 'net to do this. Avoid NTLM all together and use Kerberos between apache/squid, Active Directory and the Windows and Linux clients. Firefox and IE both support Kerberos authentication. I believe apache/ squid do too, but you need a manually create the service principal names in AD for those. Use pam_krb5 on the Linux clients to get a ticket on login. Use samba client on Linux hosts to join to domain and manage the Kerberos keytab file for the machine passwords. Use winbind to get passwd/group files via nsswitch. -Ross

5 16

Trying to restart IPv6 over PPP
by Robert Moskowitz 17 Feb '09

17 Feb '09

My IPv6 connection over my PPPoE link is down. IPv4 is up. I have tried: /etc/ppp/ipv6-up ppp0 and get the error: ./network-functions: line 78: ifcfg-: No such file or directory The gateway has been up and running for > 150 days. I have not been testing anything IPv6 out of my net for a while, so don't know when IPv6 connectivity went south. I don't want to restart the network, as I have a BIG rsync going right now (pulling down i386 FC10), and would like to get some external IPv6 testing done today....

1 0

vsftpd virtual users
by dnk 17 Feb '09

17 Feb '09

Good day all, I have followed the wiki article on setting up vsftpd on centos with virtual users. I was wondering if anyone had an example of knowledge on how to add another "readonly" user. I don't want to enable anon access. The issue I have is that the tutorial (from the wiki) uses the same real system user (ftp) - so permissions don't apply. d

4 11

Re: [CentOS] GFS + Restarting iptables
by Sven Kaptein | MARS websolutions 17 Feb '09

17 Feb '09

>> Dear List, >> >> I have one last little problem with setting up an cluster. My gfs >> Mount will hang as soon as I do an iptables restart on one of the >> nodes.. > Undoubtedly someone else with more experience with GFS will give you an > answer, but to me this makes me think ip_conntrack stuff gets cleared > out and sessions have to reestablish themselves. > > Ray Ray, Thanks for your fast answer and getting me into the right direction. This sounds like a possible solution, but I have no clue how to fix it. I googled already a lot on ip_conntrack + gfs, but don't see a possible solution coming up. Can someone/you please help me a little bit more with the issue? Thanks a lot! Sven

3 2

Lost konqueror navigation
by Anne Wilson 17 Feb '09

17 Feb '09

I still have some outstanding problems caused by the recent power problems. All my ~/.kde ended up in lost+found, identified by numbered folders. I've gradually managed to trace the origin of all the files and returned them to their correct place. However a few may have been lost, as there are no files left and I still have some problems. I'll post them in separate threads. When I launch konqueror as user I have no Main or Location toolbar. Also, my menu options are Settings, Help, Edit, View and Tools, in that order. Location, Go, Bookmarks and Window are missing. If I knew what provides these I could copy them from another account. Can anyone help, please? Anne

1 0

There was a crash during the distribution installation over PXE using kickstart
by Dotan Barak 17 Feb '09

17 Feb '09

Hi. I configured a remote machine to allow network installation when the machine is being loaded with PXE. I'm using an x86_64 desktop. The installation is almost fully automated with a kickstart file. I enabled PXE in the BIOS, started the installation and in the middle of the installation, i got a crash which reported an error. I opened a bug on this issue: http://bugs.centos.org/view.php?id=3394. Someone, called Tru, kindly gave me the following answer: from your logs: File "/usr/lib/anaconda/iw/progress_gui.py", line 243, in renderCallback self.intf.icw.nextClicked() File "/usr/lib/anaconda/gui.py", line 1045, in handleRenderCallback self.currentWindow.renderCallback() IOError: [Errno 30] Read-only file system ... which was caused by: <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown <3>hda: no DRQ after issuing MULTWRITE_EXT <4>ide0: reset: success <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown <3>hda: no DRQ after issuing MULTWRITE_EXT <4>ide0: reset: success <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown ... <4>ide0: reset: success <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown <4>end_request: I/O error, dev hda, sector 344757 <3>hda: no DRQ after issuing MULTWRITE_EXT <4>hda: status error: status=0x58 { DriveReady SeekComplete DataRequest } <4>ide: failed opcode was: unknown <3>hda: drive not ready for command .... 4>hda: status error: status=0x58 { DriveReady SeekComplete DataRequest } <4>ide: failed opcode was: unknown <3>hda: drive not ready for command <4>ide0: reset: success <3>Aborting journal on device dm-0. <2>ext3_abort called. <2>EXT3-fs error (device dm-0): ext3_journal_start_sb: Detected aborted journal <2>Remounting filesystem read-only Issue History Date Modified Username Field Change ====================================================================== 2009-02-17 11:30dotan_bar New Issue 2009-02-17 11:30dotan_bar File Added: bug_report.txt 2009-02-17 11:34dotan_bar File Added: default.ks 2009-02-17 11:35dotan_bar Note Added: 0008711 2009-02-17 12:20tru Note Added: 0008713 ====================================================================== Reply Forward noreply(a)centos.org to me show details 2:21 PM (1 hour ago) Reply The following issue has been CLOSED ====================================================================== http://bugs.centos.org/view.php?id=3394 ====================================================================== Reported By: dotan_bar Assigned To: ====================================================================== Project: CentOS-5 Issue ID: 3394 Category: -OTHER Reproducibility: unable to reproduce Severity: crash Priority: normal Status: closed Resolution: open Fixed in Version: ====================================================================== Date Submitted: 2009-02-17 11:30 UTC Last Modified: 2009-02-17 12:21 UTC - Show quoted text - ====================================================================== Summary: There was a crash during the distribution installation over PXE using kickstart Description: I configured a remote machine to allow network installation when the machine is being loaded with PXE. The installation is almost fully automated with a kickstart file. I enabled PXE in the BIOS, started the installation and in the middle of the installation, i got a crash which reported an error. I'm using x86_64 desktop. ====================================================================== ---------------------------------------------------------------------- dotan_bar - 2009-02-17 11:35 ---------------------------------------------------------------------- I attached the kick-start file too. ---------------------------------------------------------------------- tru - 2009-02-17 12:20 ---------------------------------------------------------------------- from your logs: File "/usr/lib/anaconda/iw/progress_gui.py", line 243, in renderCallback self.intf.icw.nextClicked() File "/usr/lib/anaconda/gui.py", line 1045, in handleRenderCallback self.currentWindow.renderCallback() IOError: [Errno 30] Read-only file system ... which was caused by: <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown <3>hda: no DRQ after issuing MULTWRITE_EXT <4>ide0: reset: success <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown <3>hda: no DRQ after issuing MULTWRITE_EXT <4>ide0: reset: success <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown ... <4>ide0: reset: success <4>hda: status timeout: status=0xd0 { Busy } <4>ide: failed opcode was: unknown <4>end_request: I/O error, dev hda, sector 344757 <3>hda: no DRQ after issuing MULTWRITE_EXT <4>hda: status error: status=0x58 { DriveReady SeekComplete DataRequest } <4>ide: failed opcode was: unknown <3>hda: drive not ready for command .... 4>hda: status error: status=0x58 { DriveReady SeekComplete DataRequest } <4>ide: failed opcode was: unknown <3>hda: drive not ready for command <4>ide0: reset: success <3>Aborting journal on device dm-0. <2>ext3_abort called. <2>EXT3-fs error (device dm-0): ext3_journal_start_sb: Detected aborted journal <2>Remounting filesystem read-only ---------------------------------------------------------------------- tru - 2009-02-17 12:21 ---------------------------------------------------------------------- OP hardware error, not a bug. This is not a support system, but a bug tracker. Please take your questions to either the centos mailing list or the forums. Can anyone help me with this issue? Thanks Dotan

3 3

Re: [CentOS] clamAV problem
by Mail List 17 Feb '09

17 Feb '09

Anne Wilson wrote: > "Clamd successfully notified about the update." > > I hate being beaten! :-) I simply removed the line that mentioned a local > socket. So simple, and so easily missed. Yes, it probably wasn't enabled by > default, but by misunderstanding. > > Thanks to all who helped. > > Anne Anne, Just for the record, I just installed the base packages of clamav, clamav-db using the rpmforge repo on a test machine. The option ... # Send the RELOAD command to clamd. # Default: no NotifyClamd /etc/clamd.conf Is enabled by default. So you did by no means break it. That is it's expected behavior. Also please not that in /etc/cron.daily/freshclam you will have the same option enabled, as follows /usr/bin/freshclam \ --quiet \ --datadir="/var/clamav" \ --log="$LOG_FILE" \ --log-verbose \ --daemon-notify="/etc/clamd.conf" So no you did not break it. it was turned on by default. Brian -- http://wx.Tatorz.com Open WebMail Project (http://openwebmail.org) -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

clamAV problem
by Anne Wilson 17 Feb '09

17 Feb '09

Since my power problems that resulted in a re-install I have a problem which I've failed to locate up to now. The logs show daily.cld updated (version: 8950, sigs: 72593, f-level: 38, builder: ccordes) Database updated (510565 signatures) from db.gb.clamav.net (IP: 163.1.3.8) WARNING: Clamd was NOT notified: Can't connect to clamd through /tmp/clamd.socket I've been through the config files, but obviously there is something in the setup that I've failed to do. Scans are running every night, but service clamd status clamd: unrecognized service It has to be something stupid that I've missed. Can someone kick me in the right direction? Thanks Anne

7 13

MySql server on Centos 5
by Blaž Bogataj 17 Feb '09

17 Feb '09

I have a question about Mysql. I use mysql 5.0.68 on Centos 4 from Centos plus repository. The old hardware steers me to Centos 5, however there is mysql 5.0.45. Some program solutions which we are using on the old server (production for 500 users) do not work properly on new one (some querys producing reports). Is there a source where I can find version for Centos 5 server equal to the Mysql version which I run on the old server. I'd like to use some kind of repository. Looking forward for sugesstions. Blaž

4 4

Suggestion for Server Room monitoring
by Fajar Priyanto 17 Feb '09

17 Feb '09

Hi all, I have a situation like this: Our little server room is always on. It has an air conditioning unit, but barely enough. So sometimes during weekend, the temperature could reach unhealthy level, like 29 degree Celsius. Currently, there's no personnel to monitor it 24 hours a day. I'm thinking of using a tool to monitor the temperature, and then send sms/email when it reaches certain threshold. Anyone has an idea? Could be software based or hardware one. Thank you.

14 16

kickstart driverdisk
by Jerry Geis 17 Feb '09

17 Feb '09

Hi guys, I have my driverdisk created and the files are on a USB pendrive. How do I make the USB pendrive /dev/sdb and not /dev/sda??? I am wanting the installation to take place on sda and the driver disk to be sdb? My driver disk is a network driver disk, r8168. Jerry

3 2

Re: [CentOS] Practical experience with NTLM/Windows Integrated Authentication [Apache]
by Kanwar Ranbir Sandhu 16 Feb '09

16 Feb '09

On Mon, 2009-02-16 at 09:13 +0100, Sorin Srbu wrote: > Probably not, but I was thinking there may be some obscure package somewhere > on the 'net to do this. There is - I found it last year, and it works. I have everything on my work PC, so I'll let the list know tomorrow or later this week. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.12-170.2.5.fc10.x86_64 x86_64 GNU/Linux 17:54:53 up 5 days, 19:41, 3 users, load average: 1.20, 1.70, 1.14

2 1

ipsec net-to-net problem
by brad＠bradandkim.net 16 Feb '09

16 Feb '09

I am trying to set up an ipsec net-to-net VPN and am having problems. Here is a diagram of the setup: LAN A --> Host A ----> Internet <---- Host B <-- LAN B LAN A = 10.10.2.0/24 LAN A gateway = 10.10.2.254 Host A internal = 10.10.2.254 Host A external = xx.xx.xx.xx Host B external (see below) Host B internal = 10.10.1.10 LAN B = 10.10.1.0/24 LAN B gateway = 10.10.1.252 (F5 Big IP) Host A is CentOS5 and is a router/firewall for LAN A. Host B is RHEL4 and does not have a public IP. It is behind an F5 BigIP and the BigIP forwards all traffic for yy.yy.yy.yy to Host B. Likewise it masks Host B's outbound traffic as yy.yy.yy.yy. I can get this tunnel to come up but seem to be having problems on the Host A side. If I run 'tcpdump |grep -i esp' on Host A and ping a host on LAN A from a host on LAN B (whose routing table was adjusted to go through Host B for the 10.10.2.0 network), I see ESP traffic on Host A: AH(spi=0x04c98137,seq=0x3): IP 10.10.1.10 > xx.xx.xx.xx: ESP(spi=0x07b6bcd3,seq=0x3), length 116 (ipip-proto-4) If I ping a host on LAN B from a host on LAN A I don't see any ESP traffic on either Host A or Host B and the host doing the ping gets a 'Destination Host Unreachable'. It seems like a problem with the routing on Host A. Here is the result of setkey -D on both hosts: Host A: xx.xx.xx.xx yy.yy.yy.yy esp mode=tunnel spi=169285624(0x0a1717f8) reqid=0(0x00000000) E: 3des-cbc ce370c79 68e74da7 79ba58b9 1605f149 f3e98e5b 9984da9b A: hmac-sha1 ea9dba47 cf6a4c04 7e949d4f a8f304f0 76e006c7 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:46:01 2009 current: Feb 16 12:47:13 2009 diff: 72(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=5198 refcnt=0 xx.xx.xx.xx yy.yy.yy.yy ah mode=tunnel spi=173186772(0x0a529ed4) reqid=0(0x00000000) A: hmac-sha1 82aaec77 11dfb67c 7fbb7f7c 152c2764 4445ad8e seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:46:01 2009 current: Feb 16 12:47:13 2009 diff: 72(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=5198 refcnt=0 yy.yy.yy.yy xx.xx.xx.xx esp mode=tunnel spi=166536016(0x09ed2350) reqid=0(0x00000000) E: 3des-cbc b63a5538 c6a2dd3b f449df6e c594cd16 644a59d4 cb45dfef A: hmac-sha1 5d8d015c f8e8e12f d117dc5b fc64d2ed f3ca79b5 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:46:01 2009 current: Feb 16 12:47:13 2009 diff: 72(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=1 pid=5198 refcnt=0 yy.yy.yy.yy xx.xx.xx.xx ah mode=tunnel spi=84103999(0x0503533f) reqid=0(0x00000000) A: hmac-sha1 022dbd45 248b1ffa 05d94068 22e3c530 5485a468 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:46:01 2009 current: Feb 16 12:47:13 2009 diff: 72(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=0 pid=5198 refcnt=0 Host B: xx.xx.xx.xx 10.10.1.10 esp mode=tunnel spi=169285624(0x0a1717f8) reqid=0(0x00000000) E: 3des-cbc ce370c79 68e74da7 79ba58b9 1605f149 f3e98e5b 9984da9b A: hmac-sha1 ea9dba47 cf6a4c04 7e949d4f a8f304f0 76e006c7 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:45:57 2009 current: Feb 16 12:47:35 2009 diff: 98(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=15049 refcnt=0 xx.xx.xx.xx 10.10.1.10 ah mode=tunnel spi=173186772(0x0a529ed4) reqid=0(0x00000000) A: hmac-sha1 82aaec77 11dfb67c 7fbb7f7c 152c2764 4445ad8e seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:45:57 2009 current: Feb 16 12:47:35 2009 diff: 98(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=15049 refcnt=0 10.10.1.10 xx.xx.xx.xx esp mode=tunnel spi=166536016(0x09ed2350) reqid=0(0x00000000) E: 3des-cbc b63a5538 c6a2dd3b f449df6e c594cd16 644a59d4 cb45dfef A: hmac-sha1 5d8d015c f8e8e12f d117dc5b fc64d2ed f3ca79b5 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:45:57 2009 current: Feb 16 12:47:35 2009 diff: 98(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=1 pid=15049 refcnt=0 10.10.1.10 xx.xx.xx.xx ah mode=tunnel spi=84103999(0x0503533f) reqid=0(0x00000000) A: hmac-sha1 022dbd45 248b1ffa 05d94068 22e3c530 5485a468 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:45:57 2009 current: Feb 16 12:47:35 2009 diff: 98(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=0 pid=15049 refcnt=0 Here are the ifcfg-ipsec files for each host. Host A: TYPE=IPSEC ONBOOT=NO IKE_METHOD=PSK SRCGW=10.10.2.254 DSTGW=10.10.1.10 SRCNET=10.10.2.0/24 DSTNET=10.10.1.0/24 DST=yy.yy.yy.yy Host B: TYPE=IPSEC ONBOOT=no IKE_METHOD=PSK SRCGW=10.10.1.10 DSTGW=10.10.2.254 SRCNET=10.10.1.0/24 DSTNET=10.10.2.0/24 DST=xx.xx.xx.xx Here are the routes from each host. Host A: 10.10.1.0 10.10.2.254 255.255.255.0 UG 0 0 0 eth1 Host B: 10.10.2.0 yy.yy.yy.yy 255.255.255.0 UG 0 0 0 bond0 Let me know if I should post the racoon.conf files. Thanks, Brad

1 0

INIT: Id "snmp" respawning too fast: disabled for 5 minutes
by David Halik 16 Feb '09

16 Feb '09

Hello all, I recently started seeing these messages on the consoles of three production Centos 5.2 servers. They have been occurring nonstop for the past few days and show up routinely every five minutes. INIT: Id "snmp" respawning too fast: disabled for 5 minutes INIT: Id "snmp" respawning too fast: disabled for 5 minutes INIT: Id "snmp" respawning too fast: disabled for 5 minutes Despite trying to debug this and googling for the last couple of hours, I haven't had any luck as to why the errors are generated or how to fix them. There are a ton of posts on the web related to other Id's, such as various tty ports and "x", but I haven't seen a single thing related to "snmp". The answer usually seems to be that there are misconfigured lines in /etc/inittab, but in my case there is nothing even remotely related to "Id snmp" in inittab. The make matters more confusing, snmp isn't installed or being used on these machines. I doubled checked and the extent of any snmp packages are these two: # rpm -qa | grep -i snmp perl-Net-SNMP-5.2.0-1.2.el5.rf net-snmp-libs-5.3.1-24.el5_2.1 Both only contain a couple of libraries, so I hardly believe they have anything to do with it. According to what I've learned, this error is usually generated when init tries to continually respawn a process that dies immediately... but as to what process it could possible be I have no idea. I even tried to strace init (-p1), but apparently this is a forbidden operation: # strace -p1 attach: ptrace(PTRACE_ATTACH, ...): Operation not permitted That's a shame too, but at least I could see what init is trying to do. Any ideas? I'm just about stumped as to how to proceed at this point. Thanks in advance. -- ================================ David Halik System Administrator OIT-CSS Rutgers University dhalik(a)jla.rutgers.edu ================================

2 3

logs such as messages, boot.log, and kernel contained 0 size
by Frank Ling 16 Feb '09

16 Feb '09

Hi, My both CentOS 5 servers have logging problems. Logs such as messages, boot.log, kernel, spooler, and tallylog in /var/log directory are all 0 size. The kernel is: Linux 2.6.18-92.1.22.el5 #1 SMP. Since the /var/log/messages contained no information it would be impossible to troubleshoot the problem. I am very sure both systems have not been hacked by others. Sincerely, Frank Ling -------------------------------------------------------------------------- -rw------- 1 root root 0 Feb 8 04:02 messages -rw------- 1 root root 0 Feb 3 11:04 messages.1 -rw------- 1 root root 0 Jan 25 04:02 messages.3 -rw------- 1 root root 0 Jan 11 04:03 messages.4 -rw------- 1 root root 10 Dec 27 13:00 messages.offset -rwx------ 1 root root 0 Feb 11 19:12 kernel -rwx------ 1 root root 0 Feb 11 16:53 kernel.1 -rwx------ 1 root root 0 Jan 25 04:02 kernel.3 -rwx------ 1 root root 0 Jan 11 04:03 kernel.4 -rw------- 1 root root 0 Feb 8 04:02 spooler -rw------- 1 root root 0 Feb 3 07:51 spooler.1 -rw------- 1 root root 0 Jan 25 04:02 spooler.3 -rw------- 1 root root 0 Jan 11 04:03 spooler.4 -rw------- 1 root root 0 Jun 24 2008 tallylog --------------------------------------------------------------------------

4 9

Re: [CentOS] ASUS PT6 or Intel DX58SO for CentOS?
by Vnpenguin 16 Feb '09

16 Feb '09

On Mon, Feb 16, 2009 at 2:54 PM, <jkinz(a)kinz.org> wrote: > On Mon, Feb 16, 2009 at 01:42:46PM +0100, Vnpenguin wrote: >> On Tue, Jan 13, 2009 at 10:44 PM, Chris Boyd <cboyd(a)gizmopartners.com> wrote: >> > I'm looking at setting up a new machine to run CentOS 5 and a few >> > VMWare machines to test Windows XP, Vista, and 7. I'm working with a >> > custom PC shop and they've recommended I use either the ASUS PT6 or >> > Intel DX58SO. Any feedback good or bad on either of these? >> > >> >> CentOS 5.2 can not found 2 on-board NIC of ASUS P6T Deluxe series. > > It is not clear what the above sentence is supposed to mean. > > Are you trying to say : > > "CentOS 5.2 can not be found on the ASUS P6T Deluxe series with 2 > on-board NICs." > > OR are you trying to say : > > "CentOS 5.2 can not find the 2 on-board NICs of ASUS P6T Deluxe > series." > Sorry, my bad english. I mean that when I installed CentOS 5.2 on a box with ASUS P6T, the installator of CentOS can not found 2 on-board NIC. So I have to add another NIC to work. -- http://vnoss.org

1 0

ASUS PT6 or Intel DX58SO for CentOS?
by Chris Boyd 16 Feb '09

16 Feb '09

I'm looking at setting up a new machine to run CentOS 5 and a few VMWare machines to test Windows XP, Vista, and 7. I'm working with a custom PC shop and they've recommended I use either the ASUS PT6 or Intel DX58SO. Any feedback good or bad on either of these? Thanks! --Chris

4 4

funny SMS server tips
by Fajar Priyanto 16 Feb '09

16 Feb '09

Hi guys, Hehe.. I thought I want to share this. In previous email, I said about monitoring server room. I just realize that we have this quite old sms server appliance in the room. It's still running though. I want to setup cronjob from linux machines, to send mail to that sms server, and it will then send sms to my cell about the machine condition. Problem is, nobody knows how to configure the sms server, and there's no docs beside a little description in the web UI. Been googling around few hours, but since it's quite old and proprietary, no good result. Problem is, the sms server's qmail refuses to work if I use hostname in the mail like mycellnum@sms-server. If I want to use mycellnum(a)192.168.1.100, sendmail refuses to send it as "host not found". So, out of curiosity, I define this in this /etc/hosts: 192.168.1.100 192.168.1.100 And now sending from sendmail to mycellnum(a)192.168.1.100 works! is it a feature or what? In network convention, all-numeric hostname is not allowed right? Hehe.. anyway, now I can monitor my server room using sms.

2 1

Re: [CentOS] Practical experience with NTLM/Windows Integrated Authentication [Apache]
by Christopher Chan 16 Feb '09

16 Feb '09

>> I don't think any other OS other than Windows has NTLM bindings. >> > > Probably not, but I was thinking there may be some obscure package somewhere > on the 'net to do this. > Hahaha, and I was hoping to flush it/them out.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss