- Discuss - lists.centos.org

postfix startup issue - CentOS 5.2
by Tom Brown 27 Jan '09

27 Jan '09

Hi I am trying to get postfix going on a friends VPS however after installing on startup i see this Jan 27 11:15:13 postfix/postfix-script: starting the Postfix mail system Jan 27 11:15:13 postfix/master[28090]: fatal: pipe: Cannot allocate memory and a top gives Tasks: 23 total, 1 running, 22 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 524288k total, 160920k used, 363368k free, 0k buffers Swap: 0k total, 0k used, 0k free, 0k cached any clue? thanks # uname -i Linux 2.6.18-028stab059.6 #1 SMP Fri Nov 14 14:01:22 MSK 2008 i686 i686 i386 GNU/Linux # cat /etc/redhat-release CentOS release 5.2 (Final)

5 5

Upgrade to 5.3?
by James Bensley 27 Jan '09

27 Jan '09

Hey Listee's! I'm not that up on CentOS so I'd be curious to know if it is possible to upgrade CentOS 5.2 to 5.3 without reinstalling? Perhaps via Yum? Or can you get update RPMs? I hope this doesn't pose to much of a stupid question. Thanks for your help everyone. Regards, James ;) -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$ V- PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+++++) h--(++) r++ z++ ------END GEEK CODE BLOCK------

5 5

Old Small Box
by Mike -- EMAIL IGNORED 27 Jan '09

27 Jan '09

I have an old 400mHz Dell with a 20G hard drive and 125M ram. Can I install and run CentOS on it? Thanks, Mike.

20 28

Bezerk they will go!
by drew einhorn 27 Jan '09

27 Jan '09

On Thu, Jan 22, 2009 at 4:41 PM, Ralph Angenendt <ra+centos(a)br-online.de<ra%2Bcentos(a)br-online.de> > wrote: > Michael St. Laurent wrote: > > > > Is there a projected release date for CentOS-5.3? > > > > > > > > > > > he....did....not....ask...this.... > > > > > > search the forums..when it's done..unless you would like to help..:) > > > > I have helped by sending money. I don't know if that counts or not > > though. > > Sure does and thank you for that. But just as you don't mention the > Reinemachefrau in front of the Nazi chief in "Dead men don't wear plaid", > you > don't ask when the next release comes out here. Someone might go berzerk. > Bezerk they will go, because for each person who doesn't ask, there will be dozens who do. Betcha one of you can make this rhyme, I can't. Note the minimalist .sig Probably should fatten it up -- Drew Einhorn

2 1

Newbie
by kmadananteshwar.vbhat＠gmail.com 27 Jan '09

27 Jan '09

Hi I'm a linux newbie who has just switched from windows and I'd like to know weather or not there is a decent switching guide Sent from BlackBerry® on Airtel

2 1

print from emacs?
by Paul Johnson 26 Jan '09

26 Jan '09

I just noticed this problem in Centos 5.2. WHile editing a file in Emacs, one can print with the Postscript Print option from the pull down menu. However, the ordinary "print" option from the pull down menu, and the "printer icon" in the toolbar, cause nothing to happen. This is a new feature/bug for me. Can you explain? pj -- Paul E. Johnson Professor, Political Science 1541 Lilac Lane, Room 504 University of Kansas

1 0

[OT] Anyone on-list using a Barracuda Spam Firewall?
by Gary Greene 26 Jan '09

26 Jan '09

Normally I don't like posting on this list for off-topic info, but I need to know "un-biased" opinions regarding Barracuda's Spam Firewall as we're looking to get one soon where I work and I want to know any pros/cons before I stake my credibility on it for our spam fighting. If you've had good or bad experiences with one of these devices, please contact me _off_ list regarding this. I don't want to spam the list with a major OT thread. Thanks.

2 1

Support for i7 architecture?
by Michael St. Laurent 26 Jan '09

26 Jan '09

What is the status of i7 architecture support for CentOS-5? Do the latest updates support it? -- This e-mail may contain technical information which is controlled by the United States Government, Department of State, International Traffic & Arms Regulations (ITAR) (22 CFR 120-130) which requires an export license prior to sharing with foreign persons. Lacking such license, ITAR technical data is limited to US Legal Residents only. It is the responsibility of the organization and individual in control of this data to abide by US export laws. If you are not a US Legal Resident, immediately forward this e-mail to notify(a)hartwellcorp.com or reply to sender without reading any further. Take no other action with this e-mail until contacted. Notice: The information in this document and document itself, in whole or in part, in any form ("Information") is proprietary and/or confidential property of Hartwell Corporation, Placentia, California. Hartwell Corporation and its successors and assignees retain and reserve all right, title and interest in this information in whole or in part and in all forms. This Information is provided to the original recipient only for confidential use, with the understanding that it will not be used in any manner detrimental to the interests of Hartwell Corporation, and subject to return on request. Reproduction, transmission, distribution or publication of this Information in any form, in whole or in part, for any purpose without prior written permission of Hartwell Corporation is strictly prohibited. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

12 24

PHP 5.2 on Centos4
by John Clement 26 Jan '09

26 Jan '09

Bit of an emergency as I'm told this laptop has to leave here in 15 minutes, I've gone ahead and configured, made, installed PHP 5.2 but an httpd restart still only sees the old PHP 5.0.4, I think there's a fairly simple way to get it to find the 5.2 version I've just installed but can't think what. Any help gratefully received! thanks

5 5

Problem compiling cairo-dock under CentOS 5.2
by Marko Vojinovic 26 Jan '09

26 Jan '09

I am trying to compile cairo-dock from source (failing to find an existing package for CentOS). I believe all dependencies are satisfied, but while doing "make", at some point it says (I can provide the full make output if it's needed): gcc -g -O2 -o cairo-dock -Wl,--export-dynamic cairo_dock-cairo-dock-callbacks.o cairo_dock-cairo-dock.o cairo_dock-cairo-dock-dbus.o cairo_dock-cairo-dock-draw.o cairo_dock-cairo-dock-config.o cairo_dock-cairo-dock-load.o cairo_dock-cairo-dock-icons.o cairo_dock-cairo-dock-applications-manager.o cairo_dock-cairo-dock-menu.o cairo_dock-cairo-dock-modules.o cairo_dock-cairo-dock-launcher-factory.o cairo_dock-cairo-dock-application-factory.o cairo_dock-cairo-dock-applet-factory.o cairo_dock-cairo-dock-separator-factory.o cairo_dock-cairo-dock-desktop-file-factory.o cairo_dock-cairo-dock-keyfile-utilities.o cairo_dock-cairo-dock-dock-factory.o cairo_dock-cairo-dock-animations.o cairo_dock-cairo-dock-themes-manager.o cairo_dock-cairo-dock-notifications.o cairo_dock-cairo-dock-dialogs.o cairo_dock-cairo-dock-surface-factory.o cairo_dock-cairo-dock-renderer-manager.o cairo_dock-cairo-dock-default-view.o cairo_dock-cairo-dock-applet-facility.o cairo_dock-cairo-dock-file-manager.o cairo_dock-eggaccelerators.o cairo_dock-cairo-dock-keybinder.o cairo_dock-cairo-dock-desklet.o cairo_dock-cairo-dock-log.o cairo_dock-cairo-dock-X-utilities.o cairo_dock-cairo-dock-gauge.o cairo_dock-cairo-dock-dock-manager.o cairo_dock-cairo-dock-class-manager.o cairo_dock-cairo-dock-emblem.o cairo_dock-cairo-dock-flying-container.o cairo_dock-cairo-dock-graph.o cairo_dock-cairo-dock-draw-opengl.o cairo_dock-cairo-dock-particle-system.o cairo_dock-cairo-dock-gui-factory.o cairo_dock-cairo-dock-gui-callbacks.o cairo_dock-cairo-dock-gui-manager.o cairo_dock-cairo-dock-internal-position.o cairo_dock-cairo-dock-internal-accessibility.o cairo_dock-cairo-dock-internal-system.o cairo_dock-cairo-dock-internal-taskbar.o cairo_dock-cairo-dock-internal-hidden-dock.o cairo_dock-cairo-dock-internal-dialogs.o cairo_dock-cairo-dock-internal-indicators.o cairo_dock-cairo-dock-internal-views.o cairo_dock-cairo-dock-internal-labels.o cairo_dock-cairo-dock-internal-desklets.o cairo_dock-cairo-dock-internal-background.o cairo_dock-cairo-dock-internal-icons.o -pthread -Wl,--export-dynamic -lXtst -lXcomposite -lXfixes -lXinerama -L/lib -lgthread-2.0 -lrsvg-2 -ldbus-glib-1 -ldbus-1 -lxml2 -lz -lgtkglext-x11-1.0 -lgdkglext-x11-1.0 -lGLU -lGL -lXmu -lXt -lSM -lICE -lgtk-x11-2.0 -lgdk-x11-2.0 -latk-1.0 -lgdk_pixbuf-2.0 -lm -lpangocairo-1.0 -lpango-1.0 -lcairo -lgobject-2.0 -lgmodule-2.0 -ldl -lglib-2.0 cairo_dock-cairo-dock.o: In function `main': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock.c:724: undefined reference to `g_timeout_add_seconds' cairo_dock-cairo-dock-applications-manager.o: In function `cairo_dock_get_current_applis_list': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-applications-manager.c:1389: undefined reference to `g_hash_table_get_values' cairo_dock-cairo-dock-menu.o: In function `cairo_dock_notification_build_menu': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-menu.c:1081: undefined reference to `gtk_widget_set_tooltip_text' /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-menu.c:1318: undefined reference to `gtk_widget_set_tooltip_text' /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-menu.c:1143: undefined reference to `gtk_widget_set_tooltip_text' cairo_dock-cairo-dock-applet-facility.o: In function `_cairo_dock_restart_timer_with_frequency': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-applet-facility.c:523: undefined reference to `g_timeout_add_seconds' cairo_dock-cairo-dock-applet-facility.o: In function `_cairo_dock_check_for_redraw': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-applet-facility.c:392: undefined reference to `g_timeout_add_seconds' cairo_dock-cairo-dock-applet-facility.o: In function `cairo_dock_launch_measure': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock-applet-facility.c:443: undefined reference to `g_timeout_add_seconds' /usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libgdkglext-x11-1.0.so: undefined reference to `pango_x_font_subfont_xlfd' /usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libgdkglext-x11-1.0.so: undefined reference to `pango_x_font_map_for_display' /usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libgdkglext-x11-1.0.so: undefined reference to `pango_x_font_cache_unload' /usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libgdkglext-x11-1.0.so: undefined reference to `pango_x_find_first_subfont' /usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libgdkglext-x11-1.0.so: undefined reference to `pango_x_font_map_get_font_cache' /usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libgdkglext-x11-1.0.so: undefined reference to `pango_x_font_cache_load' collect2: ld returned 1 exit status make[3]: *** [cairo-dock] Error 1 make[3]: Leaving directory `/home/vmarko/cairo/cairo-dock-2.0.0-beta1/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/vmarko/cairo/cairo-dock-2.0.0-beta1/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/vmarko/cairo/cairo-dock-2.0.0-beta1' make: *** [all] Error 2 I believe the problem arises at the point where it says cairo_dock-cairo-dock.o: In function `main': /home/vmarko/cairo/cairo-dock-2.0.0-beta1/src/cairo-dock.c:724: undefined reference to `g_timeout_add_seconds' So, what is g_timeout_add_seconds, what library has it defined, or else what can I do about this? Did anyone successfully compile cairo-dock under Centos 5.2? Appreciate any help! Best, :-) Marko

6 6

Backup methods for an Oracle DB
by Ugo Bellavance 26 Jan '09

26 Jan '09

Hi, I've been testing different methods and I'd like to have some advice. I want to perform a cold backup once a week on the Oracle DB, and put it on tape. I'm using EMC Networker for backup software, and I am not too at ease with the fact of doing eveything with Networker, because if there is a problem with the backup, the Oracle DB might not come up after the backup run. So I thought of using disk-based backup. I've tried scp'ing the files directly to my backup server, but the operation is too long (120 min). I tried generating a tar.gz directly to my backup server via SSH. A decent 40 minutes, using mgzip (multi-thread gzip), 70 Gigs. 120 minutes for a tar.bz2, using pbzip2 (parralel bzip2) (54 Gigs). A tar sent directly to my backup server is quite huge (318 Gigs). It is then taken to tape on the regular nightly backup. My concerns are: - Time needed to perform backup (downtime). - Time needed to do a recovery. For the backup, sending a tar.gz directly to the backup server seems to be the best option. However, since I want to minimize the time needed to perform a recovery, I'd like to have raw files on tape, not in a tarball and not compressed (the tape is compressing anyway). Up to now, I've been quite disappointed by the speed at which my backup server can decompress and untar, and this server has quite good hardware. When I use iostat -x, I find that the %util of the device is averaging 80%. Here is the hardware involved: Oracle Server: HP Proliant 380DL + MSA70 16 GB ram 2 x Quad-core Xeons E5345 2.33 Ghz 9 RAID 10 volumes on 32 72G, 15K rpm SAS disks 1X Smart Array P400 w/512 MB BBU 1X Smart Array P800 w/512 MB BBU Database Server HP Proliant 360DL 2 x Quad-core Xeons E5345 2.33 Ghz 1 RAID 5 volume on 6 146 GB, 10K rpm SAS disks 1X Smart Array P400 w/512 MB BBU Any help or suggestions welcome. Regards, Ugo

2 3

ProFTPd under CentOS 5.2 running FTPS - iptables problem
by happymaster23 26 Jan '09

26 Jan '09

Thank you, I will check it. But - is this only possible solution? SFTP I am using only for administration purposes (yeah, it is quite easy to set it up :-D) and it´s better for me, to make FTPS for customers and SFTP only for me. 2009/1/26 German Andres Pulido <gpulido(a)gtscolombia.com>: >> Hello, >> >> I am setting up ProFTPd daemon (from EPEL repository) under CentOS 5.2 >> and I need encrypted connection. Daemon is configured perfectly, there >> is no problem - if iptables is off connection is smoothly established, >> but when iptables is on, connection in FTP client ends on command LIST >> without response. Last command with response (positive) is PASV. >> >> Thank you for your replies >> Martin Šťastný >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> http://lists.centos.org/mailman/listinfo/centos > > Hi! > > The issue is probably with the way FTP is handled. I see two possible > solutions: > > 1. Use the ip_conntrack_ftp module of IPtables. What this does is setting > iptables aware that the data FTP connection should also be allowed since it's > related to the original one on port 21. Google for more info on it (and the > exact module name) > > 2. If you only need encrypted traffic, using SFTP makes sense. It only uses > the port 22 (It's a subsystem of SSH) and its encryption is very good. > > Regards. >

3 3

Bind Issues
by Joseph L. Casale 26 Jan '09

26 Jan '09

I have a bind server running that cannot resolve www.atbfinancialonline.com. I turned on "debug 10" in the named.conf and start up dig on it, but dig just times out, what else can I do to see why exactly it won't resolve this? Thanks! jlc

4 4

ProFTPd under CentOS 5.2 running FTPS - iptables problem
by happymaster23 26 Jan '09

26 Jan '09

Hello, I am setting up ProFTPd daemon (from EPEL repository) under CentOS 5.2 and I need encrypted connection. Daemon is configured perfectly, there is no problem - if iptables is off connection is smoothly established, but when iptables is on, connection in FTP client ends on command LIST without response. Last command with response (positive) is PASV. Thank you for your replies Martin Šťastný

2 1

Ldap login
by Per Qvindesland 26 Jan '09

26 Jan '09

Hello List, I have installed Centos Directory Server to be able to authenticate with ldap on the other servers in the system, the directory server seems to be working fine, but when I configure a test server to authenticate up against this server then it says that there is no such user, I have made sure that the config is correct on the client /etc/ldap.conf is there also the /etc/openldap/ldap.conf is there and both is configured correctly, i have tried to telnet from the client to the server on port 389 and that also works. Does anyone have any idea of what I am missing here? Thanks in advance Regards Per Qvindesland

3 5

Shell Script - Compare packages. rpm.
by Tiago Dias 26 Jan '09

26 Jan '09

Hi, I need a script which makes the package compação rpm's through two text files ... Since a file is the output of the command *rpm-qa > pkg.out * And the second file is a list of several packages rpm's, multiple versions and architectures. My idea is to compare a package *x* file pkg.out with several packages *y* of the file update.out and know whether a package and has a larger version of the package *x* installed and with that I return I have a package to be updated. Does anyone can help me do this comparison? OBS.: The servers do not have access to internet. Here's an example of the packages described in the files: [root@rpm tiago]# tail -n12 pkg.out glibc-devel-2.3.4-2.39 libuser-devel-0.52.5-1.el4.1 libmudflap-4.1.2-14.EL4 iiimf-libs-devel-12.1-13.EL.6 xorg-x11-devel-6.8.2-1.EL.33 lam-libs-7.1.2-8 libdbi-0.6.5-10.RHEL4.1 unixODBC-kde-2.2.11-1.RHEL4.1 perl-Compress-Zlib-1.42-1.el4 MySQL-python-1.2.1_p2-1.el4.1 nmap-3.70-1 sysstat-5.0.5-16.rhel4 [root@rpm tiago]# -- [root@rpm tiago]# cat update.out glibc-devel-2.3.4-2.41.i386.rpm glibc-devel-2.3.4-2.39.i386.rpm glibc-devel-2.3.4-2.36.i386.rpm glibc-devel-2.3.4-2.25.i386.rpm glibc-devel-2.3.4-2.19.i386.rpm glibc-devel-2.3.4-2.13.i386.rpm glibc-devel-2.3.4-2.9.i386.rpm glibc-devel-2.3.4-2.i386.rpm libuser-devel-0.52.5-1.el4.3.i386.rpm libuser-devel-0.52.5-1.el4.1.i386.rpm libuser-devel-0.52.5-1.i386.rpm libmudflap-4.1.2-42.EL4.i386.rpm libmudflap-4.1.2-14.EL4.i386.rpm libmudflap-4.1.1-53.EL4.i386.rpm libmudflap-4.1.0-18.EL4.3.i386.rpm libmudflap-4.1.0-18.EL4.i386.rpm libmudflap-4.0.2-14.EL4.i386.rpm libmudflap-4.0.1-4.EL4.2.i386.rpm libmudflap-4.0.0-0.14.EL4.i386.rpm xorg-x11-devel-6.8.2-1.EL.52.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.0.4.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.0.2.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.0.1.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.i386.rpm xorg-x11-devel-6.8.2-1.EL.31.i386.rpm xorg-x11-devel-6.8.2-1.EL.19.i386.rpm xorg-x11-devel-6.8.2-1.EL.18.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.7.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.5.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.2.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.36.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.25.1.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.25.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.20.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.16.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.6.i386.rpm xorg-x11-devel-6.8.1-23.EL.i386.rpm lam-libs-7.1.2-15.el4:2.i386.rpm lam-libs-7.1.2-8:2.i386.rpm MySQL-python-1.2.1_p2-1.el4.1.i386.rpm MySQL-python-1.0.0-1.RHEL4.1.i386.rpm sysstat-5.0.5-19.el4.i386.rpm sysstat-5.0.5-16.rhel4.i386.rpm sysstat-5.0.5-15.0.1.el4.i386.rpm sysstat-5.0.5-14.rhel4.i386.rpm sysstat-5.0.5-11.rhel4.i386.rpm sysstat-5.0.5-7.rhel4.i386.rpm sysstat-5.0.5-1.i386.rpm nmap-3.70-1:2.i386.rpm [root@rpm tiago]# Att, -- Tiago Dias da Silva Administrador de Sistemas GNU/Linux HomePage: www.dias.eti.br Email: tiago(a)dias.eti.br "A mente que se abre a uma nova idéia jamais voltará ao seu tamanho original" (Albert Einstein)

3 2

Completeley disabling SELinux?
by Kevin Thorpe 26 Jan '09

26 Jan '09

Hi all, I've set SELinux to disabled using the security and firewall widget but I'm still getting a lot of messages in Logwatch.... NULL security context for user, but SELinux in permissive mode, continuing () So it looks like SELinux is still operating. Can anyone tell me how to turn it off completely? It's my development server under my desk so I reallly don't care about security. thanks

10 13

I may have been rooted - but I may not!?
by Nigel Kendrick 26 Jan '09

26 Jan '09

Morning, I am going to treat this as a rooted box and reinstall from scratch, but any thoughts appreciated: This is a Trixbox Server based on Centos, running kernel 2.6.18-53.1.4.el5 SMP The phone system stopped working but this was traced to a configuration error with a replacement switch (it did not get added to the vlan properly), which meant that Trixbox could not see any DNS servers and this b0rks TB. Anyway, during debugging I went to reboot the server and got the following: /dev/kmem missing IDT table read failed I have run rkhunter, which turns up nothing If have forced a filesystem check - all clean I have checked the logs and history file and cannot see anything The server is behind a hardware firewall and the only ports open are those needed for RTP, IAX2 and SIP - there is no other public access and no user accounts. Having fixed the vlan issue, Asterisk is running fine. I re-created /dev/kmem, but it's missing at subsequent reboots. I have Googled many references to the IDT table problem being associated with the SuckIT rootkit, but I can find no evidence that it's installed. OK, bearing in mind that I will go ahead and reinstall the server (no biggie as I have Trixbox config backups and installing TB is not a big task), I just wanted to check whether there were any IDT table issues that may *NOT* be rootkit related and if there are any simple fixes I can try on the box while it's isolated on the bench? In the other direction, has anyone seen this type of behaviour with any rootkit that is not detected by rkhunter and doesn't leave any obvious footprints? Anything to look for? Happy Monday! Thanks Nigel

2 3

Ping and traceroute...
by John Doe 26 Jan '09

26 Jan '09

Hi everybody, Right now, we are blocking pings and traceroutes to our website. But, in order for our members to test the connection when they are experiencing slow browsing, we are thinking about unblocking them... Are there still any security issues (flooding, etc...) in enabling them or is that an old problem fixed a long time ago? Thanks, JD

6 7

e-sata
by centos＠911networks.com 26 Jan '09

26 Jan '09

Hi, Does anybody has any experience with e-sata on CentOS5.2? - How fast is it? Same as an internal sata? - Does it support sata-2? - Does it "hot-plug" like a USB? -- Thanks http://www.911networks.com When the network has to work

5 5

OT? File order on CentOS/Samba server
by Miguel Medalha 25 Jan '09

25 Jan '09

I hope someone familiar with the way Linux processes files can enlighten me on the following: I recently replaced an old Windows 2000 server with a new machine running CentOS 5.2. It uses Samba 3.2.7 to serve a network of Windows XP clients. We are a newspaper. We use Acrobat Distiller to batch-convert a folder of single-page PostScript files (for print) to a multipage PDF file (for electronic distribution). Running on a workstation, Distiller watches the folder on a Samba share and does the conversion, automatically creating bookmarks, indexes and other information. On the Windows server, Distiller processes the files by filename order: M09010901A001C.ps M09010901A002C.ps M09010901A003C.ps ... and so on. On the Linux server, Distiller processes the files in an order that seems arbitrary, for example: M09010901A021C.ps M09010901A005C.ps M09010901A015C.ps ... and so on. The order Distiller uses is NOT related to the time stamp of the files. I tried to copy the files to the watched folder one by one in the correct order; the result is the same. This creates the need to open the final PDF and reshuffle the pages by hand, which is very time consuming and prone to error. There is a workaround to this: use the runfilex script that comes with Acrobat: it can contain a list of files to convert, in the order you want. Unfortunately, this is not acceptable for us since the process then takes about 40 minutes (irrespective of platform or filesystem), instead of 3 or 4 minutes. My question is: how is the order of files determined by Linux when a particular order is not explicitly required by a program? I noted the following: I have 4 files in a folder: file1.ps, file2.ps, file3.ps, file4.ps. When I order them by date, they appear in Windows Explorer in, say, the following order: 3, 4, 1, 2 If I copy them to a new folder one by one in the order 1, 2, 3, 4, they will still appear in the order 3, 4, 1, 2 when ordered by date. So, what information is transported with the files that makes the Linux server present them to the world in this order? Does someone know a workaround to this situation or can someone point me to information about file ordering with Linux? By the way, I am using the EXT3 file system. I tried the same on a VFAT file system and the result is the same. It seems to be a Linux thing, not a file system thing. Thank you for your patience.

12 49

replacing a line in a file
by Jerry Geis 25 Jan '09

25 Jan '09

I have a large file that has a line like: bindaddr=0.0.0.0 ; some other text I want to replace the 0.0.0.0 with my address 192.168.1.8 and remove everything else on the line to get: bindaddr=192.168.1.8 How can I do that? Thanks, jerry

3 3

Problem detecting HP Tape Drive
by Mehdi Sarmadi 24 Jan '09

24 Jan '09

Hello I do have problem using Linux with an external HP tape drive. The server platform is also an HP Server; the server is an HP ML350 G4, and the Tape drive is a HP Storage Works Ultrium 448 - 1U Rack-mountable. HP Ultrium documentation says two drivers should be automatically up, sym53c8xx for LSI SCSI interface "st" for tape and /proc/scsi/scsi should contain information about tape drive, e.g. SCSI ID. However none of them happened in my case! (document: "UP LTO Ultrium 2-3 - Unix Config Guide") The SCSI adapter is an LSI53C1030. The system has another the same adapter which is used for hard disk drives. The interesting part is, the hard disk are detected and even OS boots from them, but I can't make the tape drive work. Moreover, in system boot up, LSI SCSI BIOS displays informations saying there is a tape drive connected! Any one has same experience, suggestion, comments or clues? I've place a zip file here: http://msarmadi.googlepages.com/report_files.zip which contains: - dmesg - lshal - lsmod - lspci -vv - cat /proc/scsi/scsi > proc.scsi.scsi - cat /proc/modules > proc.modules - uname -a > uname Also, below there are detailed information about devices and OS config/log files. ===== System info: Operating System: Redhat Enterprise Linux AS 5(the same thing happened using CentOS 5.2) Sever System: HP ML530 G4 SCSI Adapter: LSI 1030 Tape Drive: HP Storage Works Ultrium 448 - 1U Rack-mountable SCSI Cable: P/N 313375002 Rev R (coming with tape drive) *Note that, no other SCSI devices are connected to the cable. ===== Here is some parts of boot up messages on the screen of HP ML350 G4 ==== System BIOS D17 (14/04/2005) ... MPTBIOS-5.05.18 ... Slot 3 HP Smart Array 6400 Controller (192MB, v.2.26) 1 Logic Drive Detected 1794-Slot 3 Drive Arraye - Array Accelerator Battery Charge low Array Accelerator Posted-Write Cache is temporarilty Disabled Array Accelerator batteries hace failed to charge and should be replaced Slot 3 HP Smart Array 6400 EM Controller (192MB, v.2.26) 1 Logic Drive Detected Tape or CD-ROM Drive(s) Detected: SCSI Port 2: SCSI ID 1 1785-Slot 3 Drive Arraye Not Configured No Drives Detected ... [Followed by GRUB and Linux boot up] ========================= -- Mehdi Sarmadi

5 8

CentOS-announce Digest, Vol 47, Issue 9
by centos-announce-request＠centos.org 24 Jan '09

24 Jan '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:0004 Important CentOS 4 i386 openssl security update (Karanbir Singh) 2. CESA-2009:0004 Important CentOS 4 x86_64 openssl security update (Karanbir Singh) 3. CESA-2009:0057 Important CentOS 5 i386 squirrelmail Update (Karanbir Singh) 4. CESA-2009:0057 Important CentOS 5 x86_64 squirrelmail Update (Karanbir Singh) 5. CESA-2009:0057 Important CentOS 4 i386 squirrelmail security update (Karanbir Singh) 6. CESA-2009:0057 Important CentOS 4 x86_64 squirrelmail security update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 23 Jan 2009 21:39:53 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0004 Important CentOS 4 i386 openssl security update To: centos-announce(a)centos.org Message-ID: <20090123213953.GA10367(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0004 Important https://rhn.redhat.com/errata/RHSA-2009-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: openssl-0.9.7a-43.17.el4_7.2.i386.rpm openssl-0.9.7a-43.17.el4_7.2.i686.rpm openssl-devel-0.9.7a-43.17.el4_7.2.i386.rpm openssl-perl-0.9.7a-43.17.el4_7.2.i386.rpm src: openssl-0.9.7a-43.17.el4_7.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 2 Date: Fri, 23 Jan 2009 21:39:54 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0004 Important CentOS 4 x86_64 openssl security update To: centos-announce(a)centos.org Message-ID: <20090123213954.GA10380(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0004 Important https://rhn.redhat.com/errata/RHSA-2009-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: openssl-0.9.7a-43.17.el4_7.2.i686.rpm openssl-0.9.7a-43.17.el4_7.2.x86_64.rpm openssl-devel-0.9.7a-43.17.el4_7.2.i386.rpm openssl-devel-0.9.7a-43.17.el4_7.2.x86_64.rpm openssl-perl-0.9.7a-43.17.el4_7.2.x86_64.rpm src: openssl-0.9.7a-43.17.el4_7.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 3 Date: Sat, 24 Jan 2009 06:16:17 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 5 i386 squirrelmail Update To: centos-announce(a)centos.org Message-ID: <20090124061617.GA12131(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 2509185832b13f153462b6aad4eceb40 squirrelmail-1.4.8-5.el5.centos.3.noarch.rpm Source: 16b0a61a00c16c7a6b8f49123a0a7172 squirrelmail-1.4.8-5.el5.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Sat, 24 Jan 2009 06:16:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 5 x86_64 squirrelmail Update To: centos-announce(a)centos.org Message-ID: <20090124061618.GA12147(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 700a7599bab0d434eeb9ea714b029cf0 squirrelmail-1.4.8-5.el5.centos.3.noarch.rpm Source: 16b0a61a00c16c7a6b8f49123a0a7172 squirrelmail-1.4.8-5.el5.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Sat, 24 Jan 2009 06:18:34 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 4 i386 squirrelmail security update To: centos-announce(a)centos.org Message-ID: <20090124061834.GA12197(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: squirrelmail-1.4.8-5.el4.centos.3.noarch.rpm src: squirrelmail-1.4.8-5.el4.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ Message: 6 Date: Sat, 24 Jan 2009 06:18:35 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:0057 Important CentOS 4 x86_64 squirrelmail security update To: centos-announce(a)centos.org Message-ID: <20090124061835.GA12210(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:0057 Important https://rhn.redhat.com/errata/RHSA-2009-0057.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: squirrelmail-1.4.8-5.el4.centos.3.noarch.rpm src: squirrelmail-1.4.8-5.el4.centos.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos @irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 47, Issue 9 **********************************************

1 0

file: /etc/sysconfig/clock
by chloe K 24 Jan '09

24 Jan '09

Hi I modify this file /etc/sysconfig/clock How can I restart the service to have update clock? Thank you --------------------------------- All new Yahoo! Mail - Get a sneak peak at messages with a handy reading pane.

2 1

Single Session VNC
by karl balsmeier 24 Jan '09

24 Jan '09

Currently most machines I connect to use a display, but I want to run vncserver such that the display is always 0. Is this possible.

2 1

svnserve with SASL on CentOS 5.2
by Ruslan Sivak 23 Jan '09

23 Jan '09

Hello List. I'm cross posting this from svn-users, as I'm not sure whether this is an CentOS specific issue. Perhaps someone here has an idea of what's going on? ----------------------------- I got a fresh install of CentOS 5.2 x32, svnserve, version 1.5.5 (r34862), here is my svnserve.conf file [general] anon-access = none auth-access = write realm = isf [sasl] use-sasl = true min-encryption = 128 max-encryption = 256 and here is my /etc/sasl2/svn.conf file pwcheck_method: auxprop auxprop_plugin: sasldb sasldb_path: /svn/sassl mech_list: DIGEST-MD5 On the client I am using TortoiseSVN 1.5.5 (TortoiseSVN 1.5.5, Build 14361 - 64 Bit , 2008/10/24 18:06:34 Subversion 1.5.4, apr 1.2.12 apr-utils 1.2.12 berkeley db 4.4.20 neon 0.28.3 OpenSSL 0.9.8i 15 Sep 2008 zlib 1.2.3) When connecting to this repository, I am getting "Error: Could not obtain the list of SASL mechanisms". I think I followed the instructions in the svn book : http://svnbook.red-bean.com/en/1.5/svn.serverconfig.svnserve.html#svn.serve…, although the instructions are very sparse. I'm not quite sure hwo sasl is supposed to know to use the svn.conf file to authenticate with svnserve. I am running svnserve from xinetd. Here is my /etc/xinetd.d/svnserve.conf # default: on # Subversion server service svnserve { socket_type = stream protocol = tcp user = root wait = no disable = no server = /usr/bin/svnserve server_args = -i -r /svn port = 3690 } Not quite sure why this isn't working. Does anyone have any ideas? Russ

1 1

cpu load monitoring
by Dave Stevens 23 Jan '09

23 Jan '09

Hi, I have a server running Centos 5.2 and am implementing a GIS mapserver app. I have some sample logs from another implementation that give me an idea of bandwidth requirements but I would like to check the cpu load. I can not be at the server during the test and am interested in knowing if there is logging of cpu load available. Anyone have experience with this? Recommendations? Dave -- Canada must refuse to be entangled in any more wars fought to make the world safe for capitalism. -- The Regina Manifesto, 1933

8 8

Re: [CentOS] Antivirus for CentOS? (yuck!)
by David G. Miller 23 Jan '09

23 Jan '09

Stephen John Smoogen <smooge(a)gmail.com> wrote: > On Thu, Jan 22, 2009 at 12:42 PM, David G. Miller <dave(a)davenjudy.org> wrote: > >> > Amos Shapira <amos.shapira(a)gmail.com> wrote: >> > >> >>> >> Hi All, >>> >> >>> >> Yes, I know, it's really really embarrassing to have to ask but I'm >>> >> being pushed to the wall with PCI DSS Compliance procedure >>> >> (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why >>> >> we don't need to install an anti-virus or find an anti-virus to run on >>> >> our CentOS 5 servers. >>> >> >>> >> Whatever I do - it needs to be convincing enough to make the PCI >>> >> compliance guy tick the box. >>> <SNIP> >> > After reading all of the other replies (including the ones that pointed >> > out that the PCI DSS requirement had changed the terminology from >> > "virus" to "malware"), why not claim you are meeting the requirement by >> > doing something useful like running chkrootkit or rkhunter on a regular >> > basis? That way you would be scanning the systems for the only malware >> > known to actually pose a threat to a Linux box. It may be a low >> > probability of infection (as others have pointed out) but should satisfy >> > the auditor and hopefully will just be a low cost exercise in futility >> > as long as reasonable security policies are followed. >> > > Any tool will require the need to have a risk assessment against it. > What is the liklihood of it finding malware? How much is updated and > how does it compare to other tools. These will be questions that will > need to be available for auditors to know you did your due-diligence > on selecting a tool. Answering those questions would provide the arguments for running a root kit scanner instead of anti-virus software. That is, the risk of malware affecting the systems in question is low with near zero likelihood that a true virus will cause a problem but with the possibility that a rootkit could compromise the systems. Chkrootkit and rkhunter are arguably the best tools for finding a root kit. The programs are updated whenever a new threat is identified. Obviously, the OP would need more than my say so as back up for these assertions. Said back up would also make the case that scanning for non-existent threats (Linux viruses) would make no sense while scanning for a real threat makes the most sense. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

OT: Managing change control in servers, LDAP, firewalls and switches question
by Erick Perez 23 Jan '09

23 Jan '09

Hi, being an off-topic questions with so many vendors involved I had no definitive place to go to ask but here. So maybe some of the list members have ideas in mind. Currently we manage several switches,firewalls and MS LDAP and Centos OpenLDAP installations. We are looking for a "man in the middle" or "framework" to manage change on our network devices and LDAP-based servers. So far, using Quest ActiveRoles/Intrust has filled the part of LDAP, where administrators log into ActiveRoles/Intrust system, generate changes (delete OU, users, change passwords, etc) then the request has to be approved by a staff member in Activeroles/intrust. When the approval is sent to the system, the ActiveRoles/Intrust (and not the sysadmin) logs into the LDAP systems and perform the changes. This has proven useful in tracking changes (who did what, when, who approved it). We are looking into a similar solution (Quest Software does not have that for devices) to perform change and control on the routers, switches and firewalls. Maybe someone can also point me to a mailing list where i can ask the same question? thanks, -- ------------------------------------------------------------ Erick Perez Cel +(507) 6675-5083 ------------------------------------------------------------

4 4

SquirrelMail Sending Under Wrong Username
by John Hinton 23 Jan '09

23 Jan '09

CentOS team... as is already bug reported and marked solved... as we await the upstream repair for this. It was reported that this was happening on CentOS 5. You likely already know, but it also happens on CentOS 4. For those unaware. It seems that SquirrelMail has an issue which allows mail to be sent out from one user on the system and it uses the from address of another user on the system. Apparently, both users need to be logged into SM at the same time. My client reported that when he sent the affected message, he received a connection lost notice. He logged in again, stated that the email was in fact sent. The recipient of that email asked what was up with the odd from address. Looking at the headers from that message, they do in fact show adifferentusername(a)thisparticularservername.com. This is about the most embarrassing thing that's ever happened with my servers. Obviously the affected user is not feeling very secure. It does invite the recipient to reply to the wrong address which could be bad on so many levels (imagine having a few local law firms hosted on the same server?). I view this as a horrid security issue. If maybe the CentOS team might be so kind as to push the SquirrelMail update to the front when it's ready, that would be greatly appreciated. John Hinton

3 2

Seeking translators
by Ralph Angenendt 23 Jan '09

23 Jan '09

Hi, anyone here who wants to really help out with the CentOS project? Then please check if you speak a language which is not yet on <http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.2> and help us translate the Release Notes for 5.3 (and 5.4, 5.6, 6.0 and whatever comes next). If you want to help out, please contact me *off* list. I have a slight timing issue (some parts have to be done by next Thursday, but that really is only a small part) and I'm sorry for not contacting this list earlier :) So if you can and want to help - send me a mail! Cheers, Ralph

1 0

OT: Looking for a timer/counter script
by Thomas Dukes 23 Jan '09

23 Jan '09

Hello, Was hoping someone could help me find a script for a website that increments at a specified rate over a specified period of time, something similar to the US National Debt site. I searched hotscripts but not really sure what this type script would be called. TIA PS I looked at the code for the national debt script but I can't make head or tails of it.

3 2

libpython2.4.so.1.0 i386
by Ed Donahue 23 Jan '09

23 Jan '09

I am running Kernel 2.6.18-92.1.18.el5 x86_64. I need /usr/lib/libpython2.4.so.1.0 for virtualbox. I have python-2.4.3-21.el5.i386.rpm installed which is supposed to provide it. Can I just grab the rpm and take out libpython2.4.so.1.0 and just put it in /usr/lib ? Not sure how to do that. I figured a sym-link would have the app not compile correctly (if at all) with the 64-bit lib. Tried yum with no luck: yum localinstall -y --nogpgcheck VirtualBox-2.1.2_41885_rhel5-1.i386.rpm --> Running transaction check ---> Package VirtualBox.i386 0:2.1.2_41885_rhel5-1 set to be updated --> Processing Dependency: libpython2.4.so.1.0 for package: VirtualBox --> Finished Dependency Resolution Error: Missing Dependency: libpython2.4.so.1.0 is needed by package VirtualBox rpm -qa|grep python|sort ... python-2.4.3-21.el5 python-crypto-2.0-1.2.el5.rf python-elementtree-1.2.6-5 python-game-1.8.1-1.el5.rf python-iniparse-0.2.3-4.el5 python-khashmir-4.4.0-1.el5.rf python-ldap-2.2.0-2.1 python-numeric-23.7-2.2.2 python-sqlite-1.1.7-1.2.1 python-urlgrabber-3.1.0-2 python-xdg-0.17-1.el5.rf rpm-python-4.4.2-48.el5

1 0

Question on upgrading hardware
by Bob Hoffman 23 Jan '09

23 Jan '09

For centos 5.x Two questions regarding upgrading hardware or system. 1- If I were to shut off the server and add more ram, switch out ram, remove one of the two cpus, or replace the two cpus with bigger or smaller ones.....Would I just be able to restart the server or would I have to do something with the configuration somewhere? 2- If I built another system, slightly different motherboard but most of the rest the same as far as hardware, would taking a drive from the old system and adding it to the new system work correctly and recognize what it needs? Thanks for any advice on the upgrading.

3 2

where did all the nonfree rpms go? Nvidia? xine-lib-mp3?
by Paul Johnson 23 Jan '09

23 Jan '09

I installed Centos on some machines that need long term support. I'm running up against some simple user convenience issues. How to play MP3? I've been really puzzled today that the addon rpm sites like livna, rpmforge, rpmfusion, epel, don't seem to have something like amarok-mp3 or xine-lib-mp3. What am I missing? It can be done in Ubuntu, Debian, and Fedora Linux. In the worst case scenario, what must be done? get the xine source code and build an rpm that includes the mp3 components? Do you have Nvidia cards? Then I noticed there is a new Nvidia proprietary driver on www.nvidia.org, and I can't find an rpm package for it, or for the previous 2 releases of the nvidia driver. The place to get those packages used to be rpm.livna.org, but that is now moved to rpmfusion, but on the rpmfusion site, the nonfree folders are empty. Oh, well. Just singing a complaining song. pj -- Paul E. Johnson

4 3

start network installation with HP 8530w with Intel ethernet card
by MOKRANI Rachid 23 Jan '09

23 Jan '09

Hi, I have an HP 8530w laptop. I need ti instal it under CentOS 5.2 x86_64 - kernel 2.6.18-92. The network card is not recognized. I have add the driver e1000e-0.5.11.2 (dowload from Intel site). After compiled and installed the driver, all work fine! But I need to make a network installation and the Intel network card should be recognized before. I found the following script on the net and try it. ------------------------------------------------------------------------ ------------------------------ wget http://my_web_server/CentOS/5.2/x86_64/images/diskboot.img cp diskboot.img diskboot.orig.img mkdir diskboot_mnt mount -o loop diskboot.img diskboot_mnt mkdir initrd_extracted cd initrd_extracted gunzip < ../diskboot_mnt/initrd.img | cpio -i --make-directories cd .. mkdir modules_extracted cd modules_extracted gunzip < ../initrd_extracted/modules/modules.cgz | cpio -i --make-directories cd 2.6.18-92.el5/x86_64 rm e1000e.ko wget http://my_web_server/e1000e.ko # Now put humpty back together again cd ../../ find . -print |cpio -o -Hnewc | gzip -c9 > ../modules.cgz cd .. cp -fp --no-preserve=all modules.cgz initrd_extracted/modules/ cd initrd_extracted find . -print |cpio -o -Hnewc | gzip -c9 > ../initrd.img cd .. cp -fp initrd.img diskboot_mnt/ # cleanup umount diskboot_mnt rm -rf diskboot_mnt/ initrd_extracted/ initrd.img modules.cgz modules_extracted/ mv diskboot.img diskboot.mod.img dd if=diskboot.mod.img of=/dev/sdb ------------------------------------------------------------------------ ----------------------------------------- After trying to start on a USB key, the network card is not recognized again :-( Something is missing ... how to add this network driver for starting a network installation ? Anybody do this before ? Best Regards (and sorry for my poor english) __________________________ Ce message (et toutes ses pièces jointes éventuelles) est confidentiel et établi à l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'IFP décline toute responsabilité au titre de ce message. This message and any attachments (the message) are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP should not be liable for this message. Visitez notre site Web / Visit our web site : http://www.ifp.fr __________________________

1 0

Re: [CentOS] where did all the nonfree rpms go? Nvidia? xine-lib-mp3?
by Ralph Angenendt 23 Jan '09

23 Jan '09

Sorin Srbu wrote: > Why don't you get your proprietary drivers from nvidia.com? Or do you need an > actual rpm-package? Anyway, you're bound to get newest stuff from Nvidia.com. Yes, using an rpm package is better, as the packaged drivers do not remove libGL.so, for example, like the nvidia driver does. Cheers, Ralph

2 1

Re: [CentOS] Support for i7 architecture?
by Les Bell 22 Jan '09

22 Jan '09

"Michael St. Laurent" <mikes(a)hartwellcorp.com> wrote: >> I hate that stupid thing but the suits have insisted on it. My apologies for any implied insult. << Just so you know, such disclaimers are *all* bluster and have no legal force whatsoever (with one exception: privileged attorney-client communications). If someone is silly enough to mis-route an email to me, it's their problem and they cannot enforce any contractual obligations on me whatsoever, since no contract exists (I didn't invite the email and there is no exchange of considerations). Even the ITAR stuff is BS - it;s *your* company's responsibility to control such information and it means nothing to anyone else - especially us "foreign persons". ;) All these disclaimers do is further reduce the signal/noise ratio of the SMTP protocol. . . Best, --- Les Bell, RHCE, CISSP, M.Info.Tech. (System Security) [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Adam Tauno Williams <awilliam(a)whitemice.org> wrote: >> CLAMAV, or any package, isn't THE answer, it is part of an answer. And PCI/DSS requires a server be scanned on a regular basis. Fighting against that directive just makes no sense. You should scan an entire system on some interval regardless of OS. << It's worth noting that the type of scan required by PCI DSS is not a filesystem scan by an antivirus product. It is a vulnerability scan performed by an Approved Scanning Vendor. Some other miscellanous points triggered by posts in this thread that I've read this morning: According to the Verizon 2008 Data Breaches Report, in over 90% of cases where a successful attack exploited a vulnerability, there was a patch available for at least six months prior to the breach. So the first thing we can say is that there is good reason to patch your system - it's definitely an effective activity. While the most popular attack methods of cybercriminals are hacking and malcode (again, the Verizon report confirms this), malcode is much more popular in the Windows world and hacking is the method of choice against Linux boxes, imho (SSH brute-forcing worms notwithstanding). This means that anti-virus products will be less effective in safeguarding the data on a Linux box, and host intrustion detection systems are correspondingly more effective. Most attacks against servers are conducted against the application layer code (PHP vulnerabilities, especially, but also SQL injection, etc.) Again, anti-virus products are not effective here, particularly since the original poster seems to be running custom code (internally-developed or outsourced). The best controls here will be HIDS like AIDE and Tripwire, as well as network IDS. An attacker who exploits a server might upload some recognisable malware, and an anti-virus scanner might pick it up, but I'm not sure whether (e.g.) ClamAV has signatures for stuff like eggdrop IRC servers, phishing sites and other stuff sometimes turns up on compromised hosts. The bulk of the signature database is undoubtedly Windows malware. However, a determined attacker, who knows what the server hosts, is much more likely to either use SQL injection or command injection techniques to extract credit card info (use NIDS to detect this) or to install a rootkit to allow him to come and go more easily (and HIDS will detect this). Remember, there are two problems to be solved here: a) Get the systems past the PCI-DSS Assessor b) Do something useful to actually protect the systems It would be great if both problems had the same solution, but that depends on how clueful the Assessor is (and how artfully the original poster can "manage" him). Right now, the original poster's employer is paying him to solve a), and will probably only worry about b) much later, should the excrement actually hit the fan. If installing ClamAV is what it takes to solve a), just do it and then get to work on b). Best, --- Les Bell, RHCE, CISSP, M.Info.Tech (Systems Security) [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

lvm metadata recovery
by Brian Krusic 22 Jan '09

22 Jan '09

Hi all, I am looking for a way to recover my primary VolGroup00 that has my root partition. Here is my scenario; 1 - I add an external drive to my VolGroup00 which is sdc1. 2 - I make that external drive a snapshot of my / 3 - After I remove that new volume of sdc1 using lvremove, all os fine. 4 - When I turn off the sdc1 drive, I loose my VolGroup00. If by chance, the sdc1 breaks in such a way that the system doesn't se it any more and the system happens to reboot, it will longer recognize a VolGroup00 and therefore not boot. I backed up my original /etc/lvm to /etc/lvm.backup and would like to know how I can restore it from booting to a LiveCD and simply restoring the files located in /etc/lvm.back/backup/VolGroup00 which is my original metadata config. - Brian

1 0

RHEL 5.3 released
by Pasi Kärkkäinen 22 Jan '09

22 Jan '09

Hello list! http://www.redhat.com/about/news/prarchive/2009/rhel_5_3.html kernel (2.6.18-128.el5) changelog: http://rhn.redhat.com/errata/RHSA-2009-0225.html -- Pasi

14 16

OT: Infrastructure Documenting
by Joseph L. Casale 22 Jan '09

22 Jan '09

We are moving all our (limited and badly organized) documentation to a wiki. Anyone got any examples/pointers to a hierarchy that made logical sense? We are hoping to move everything from topology to application specific notes in to the wiki. Given the size of this task, I only want to do this once:) Thanks for any reco's! jlc

3 2

Re: [CentOS] Antivirus for CentOS? (yuck!)
by David G. Miller 22 Jan '09

22 Jan '09

Amos Shapira <amos.shapira(a)gmail.com> wrote: > Hi All, > > Yes, I know, it's really really embarrassing to have to ask but I'm > being pushed to the wall with PCI DSS Compliance procedure > (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why > we don't need to install an anti-virus or find an anti-virus to run on > our CentOS 5 servers. > > Whatever I do - it needs to be convincing enough to make the PCI > compliance guy tick the box. > > So: > > 1. Has anyone here gone though such a procedure and got good arguments > against the need for anti-virus? > 2. Alternatively - what linux anti-virus (oh, the shame of typing this > word combination :() do you use which doesn't affect our systems > performance too much. > > The reviewed servers run both Internet-facing web applications and > internal systems, mostly using proprietary protocol for internal > communications. They are being administrated remotely via IPSec VPN > (and possibly in the future also OpenVPN). > > Thanks, > > --Amos After reading all of the other replies (including the ones that pointed out that the PCI DSS requirement had changed the terminology from "virus" to "malware"), why not claim you are meeting the requirement by doing something useful like running chkrootkit or rkhunter on a regular basis? That way you would be scanning the systems for the only malware known to actually pose a threat to a Linux box. It may be a low probability of infection (as others have pointed out) but should satisfy the auditor and hopefully will just be a low cost exercise in futility as long as reasonable security policies are followed. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

disable rquotad and pop
by Jerry Geis 22 Jan '09

22 Jan '09

> > Jerry Geis wrote on Thu, 22 Jan 2009 09:22:16 -0500: > > >/ for rquotad /etc/sysconfig/nfs has it quoted out but yet it is running? > />/ How do I disable it? > />/ > />/ also what about pop? > / > service name start/stop > > chkconfig name off to disable starting > Sure I familiar with those commands, problem is there is not rquota service... SO these dont help. I did do service nfs stop I changed /etc/sysconfig/nfs removed all RQUOTAD lines and added RQUOTAD="no" service nfs start however I still have an rpc.rquotad running. AHHH... What am I missing? Thanks, Jerry

2 1

disable rquotad and pop
by Jerry Geis 22 Jan '09

22 Jan '09

Hi all, I am trying to find out how to disable rquotad and pop (port 443) for rquotad /etc/sysconfig/nfs has it quoted out but yet it is running? How do I disable it? also what about pop? Jerry

2 2

help with udev rules needed
by rray_1＠comcast.net 22 Jan '09

22 Jan '09

I am migrating from Fedora 8 to CentOS 5.2 I have usb dvd On F8 I have /etc/udev/rules/00-my-custom.rules BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N ",SYMLINK="dvd",OWNER="rray" When I plug in dvd I get $ ll /dev/scd1 lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1 ll /dev/sr1 brw-r----- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1 Everything is ok On C5.2 I have /etc/udev/rules/00-my-custom.rules BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N ",SYMLINK="dvd",OWNER="rray" When I plug in dvd I get # ll /dev/scd0 brw-rw---- 1 root disk 11, 0 Jan 21 12:30 /dev/scd0 I have also tried MODE="0666" and it also has no affect I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both machines and they are the same Any suggestions Thanks Richard Ray

2 5

Issues with Ldap client on Centos 5
by ankush grover 22 Jan '09

22 Jan '09

Hi Friends, We are running some of the Centos 5 32 bit, 5.2 64-bit systems. These systems are ldap clients and the ldap server is Windows 2003 Server. Sometimes 1 or 2 services on these servers sucks 100% cpu and the load becomes high on the server. Below is an example where one the httpd process was eating 100% cpu and we took dump of this process gcore 17711 Core was generated by `/usr/sbin/httpd'. #0 0x00002ad1849cd997 in ldap_chase_v3referrals () from /usr/lib64/libldap-2.3.so.0 (gdb) bt full #0 0x00002ad1849cd997 in ldap_chase_v3referrals () from /usr/lib64/libldap-2.3.so.0 No symbol table info available. #1 0x00002ad1849bc4dd in ldap_msgdelete () from /usr/lib64/libldap-2.3.so.0 No symbol table info available. #2 0x00002ad1849bceb0 in ldap_result () from /usr/lib64/libldap-2.3.so.0 No symbol table info available. /etc/ldap.conf file host dc.example.com base ou=users,dc=example,dc=com binddn cn=ldap,ou=extra accounts,dc=example,dc=com bindpw QrQcepFKHR6wGNXu4 scope sub ssl no nss_base_passwd dc=example,dc=com?sub nss_base_shadow dc=example,dc=com?sub nss_base_group dc=example,dc=com?sub nss_map_objectclass posixAccount user nss_map_objectclass shadowAccount user nss_map_attribute uid sAMAccountName nss_map_attribute uidNumber UidNumber nss_map_attribute gidNumber GidNumber nss_map_attribute loginShell LoginShell nss_map_attribute gecos name nss_map_attribute userPassword unixUserPassword nss_map_attribute homeDirectory unixHomeDirectory nss_map_objectclass posixGroup Group nss_map_attribute uniqueMember msSFU30PosixMember nss_map_attribute cn cn pam_login_attribute sAMAccountName pam_filter objectclass=user pam_password md5 timelimit 0 sizelimit 0 tls_cacertdir /etc/openldap/cacerts There are 2 bugs listed on the redhat site but no solution for this problem has been provided. https://bugzilla.redhat.com/show_bug.cgi?id=222667 https://bugzilla.redhat.com/show_bug.cgi?id=474181 Thanks & Regards Ankush

2 1

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Ian Forde <ian(a)duckland.org> wrote: >> That depends upon how you define malware detection. Antivirus software for Linux typically scans for Windows viruses and malware. On the other hand, if you're talking about detection in the sense of Tripwire, or a cron job that runs a 'rpm -V' every night, I completely agree that this is something that should be done. << Bingo. The changes made in PCI DSS v 1.2 broaden the scope of section 5 from "viruses" to "malicious software". This covers viruses, worms, trojans, spyware, rootkits, etc. Use of AIDE or Open-Source Tripwire, with a carefully set up policy, should meet the requirements. I would write an "explanation of non-applicability" that states that CentOS is at low risk of infection by viruses and only slightly higher risk of infection by worms, and that implementation of a host filesystem integrity verification system (or host intrusion detection system) provides an appropriate control to alert administrators to unauthorised changes of any kind on the system. Add appropriate verbiage about SELinux, etc. if appropriate. I'd say that should get the job done. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Apache Server Tuning for Performance
by linux-crazy 22 Jan '09

22 Jan '09

Hi all, I am facing facing performance issues with our web servers which is working for concurrent 250 requests properly and then stops responding when the requests are more than 250 . The current configuration parameters are as follows : apachectl -version Server version: Apache/2.0.52 Server built: Jan 30 2007 09:56:16 Kernel : 2.6.9-55.ELsmp #1 SMP Fri Apr 20 16:36:54 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux Server Hardware : MAIN MEMORY (i) Memory Size 4 GB Dual-Core Intel 5160 processors. httpd.conf Timeout 300 KeepAlive On MaxKeepAliveRequests 1000 KeepAliveTimeout 150 ## Server-Pool Size Regulation (MPM specific) # prefork MPM # StartServers: number of server processes to start # MinSpareServers: minimum number of server processes which are kept spare # MaxSpareServers: maximum number of server processes which are kept spare # ServerLimit: maximum value for MaxClients for the lifetime of the server # MaxClients: maximum number of server processes allowed to start # MaxRequestsPerChild: maximum number of requests a server process serves <IfModule prefork.c> StartServers 8 MinSpareServers 5 MaxSpareServers 20 ServerLimit 251 MaxClients 251 MaxRequestsPerChild 4000 </IfModule> # worker MPM # StartServers: initial number of server processes to start # MaxClients: maximum number of simultaneous client connections # MinSpareThreads: minimum number of worker threads which are kept spare # MaxSpareThreads: maximum number of worker threads which are kept spare # ThreadsPerChild: constant number of worker threads in each server process # MaxRequestsPerChild: maximum number of requests a server process serves <IfModule worker.c> StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadsPerChild 25 MaxRequestsPerChild 0 </IfModule> I want to know about the difference between worker MPM and Prefork MPM , how to find out which one will be used by my apache server and the recommended one for highly loaded server.If some one provide me the link that best explains above two comparison also be very use full. Can any one guide me tuning to be done for the maximum utilization of the Resources and better performance of the Servers. Regards, lingu

9 13

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss