- Discuss - lists.centos.org

sendmail Deferred mail - reason unknown
by Sean Carolan 16 Dec '08

16 Dec '08

I'm a bit baffled by this problem. Maybe there's a sendmail guru out there who can help me out here. We have some end-users who need to receive system-generated mail that originates from a java-based application on our network. The java app sends the mail through our sendmail cluster, which then sends the email on to the end-user over the Internet. The size of the emails can range from a few kb up through around 2Mb in size. The mail logs show that these emails are typically delayed for up to 24 hours, sometimes longer. It appears that several attempts to deliver the email are made, with each unsuccessful one showing "Deferred" status in the maillog. After several hours of failed attempts the mail finally goes through successfully. Here is a typical entry (customer name redacted): exmx1 : Dec 14 05:28:39 exmx1 sendmail[31574]: mBDIYhEa031574: to=< customer(a)example.com>, delay=00:00:00, xde lay=00:00:00, mailer=esmtp, pri=41874, relay=mail.example.com., dsn=4.0.0, stat=Deferred Unfortunately there is no reason given for the "Deferred" status such as "Server unavailable", etc. Do you have any ideas how I can begin to troubleshoot this?

7 14

Any way to reduce CPU use of OpenSSH?
by Steve Snyder 15 Dec '08

15 Dec '08

On my CentOS v5.2 server (dual Pentium4) the OpenSSH daemon stands out as being the most CPU-intensive of the applications running, It's used 176 minutes of CPU time in the last 2 days alone. Is there any way to lower the CPU utilization without compromising security? (I.e. without using a less processor-intensive encrypt/decrypt algorithm?) I'm getting the CPU use figures from top, so there no fine-grained info on exactly what code is taking so much time. I'm assuming that the bulk of the time is spent in the OpenSSL libraries. Is there some hardware add-on or processor-specific optimization that would reduce the CPU load incurred by OpenSSH? Thanks.

8 8

OT supermicro server chassis?
by Gordon McLellan 15 Dec '08

15 Dec '08

Does anyone have a supermicro 942i server chassis? I'm trying to figure out if it has a true nine 5.25" drive bays, or if the one occupied by the 3.5" caddy is special / crippled. What I want to do is install three of the supermicro 5x3 hot swap backplanes and I'm gunshy about buying one site unseen. Thanks! Gordon

2 1

Centos 5.2 yum check-update fails - repo change?
by Dave Stevens 15 Dec '08

15 Dec '08

A couple of days ago I run yum update to take care of installing new updates for evolution.i386, evolution-data-server.i386 and nscd.i386 . The update went through with no fuss. Yesterday when I ran check-update I got the exact same updates list. So I did not run yum update, thinking this was a sync error or a repo issue. Today (just a few minutes ago) I ran the update check again and got the same list. So I ran yum clean all and now I get a different error, detailed below. Anyone know why this happens or what to do? I see the epel mirror has changed but don't know why or what to make of it. Advice welcome. Dave --------------- transcript follows ----------------------- [admin@cserver ~]$ yum check-update Loading "fastestmirror" plugin Loading "priorities" plugin Loading mirror speeds from cached hostfile * epel: www.muug.mb.ca * virtualmin: software.virtualmin.com * virtualmin-universal: software.virtualmin.com * base: centos.arcticnetwork.ca * updates: www.muug.mb.ca * addons: www.muug.mb.ca * extras: www.muug.mb.ca 0 packages excluded due to repository priority protections evolution.i386 2.12.3-8.el5_2.3 updates evolution-data-server.i386 1.12.3-6.el5_2.3 updates nscd.i386 2.5-24.el5_2.2 updates [admin@cserver ~]$ man yum [admin@cserver ~]$ yum clean all Loading "fastestmirror" plugin Loading "priorities" plugin You need to be root to perform this command. [admin@cserver ~]$ su - Password: [root@cserver ~]# yum clean all Loading "fastestmirror" plugin Loading "priorities" plugin Cleaning up Everything Cleaning up list of fastest mirrors [root@cserver ~]# exit logout [admin@cserver ~]$ yum check-update Loading "fastestmirror" plugin Loading "priorities" plugin Determining fastest mirrors * epel: www.muug.mb.ca * virtualmin: software.virtualmin.com * virtualmin-universal: software.virtualmin.com * base: www.muug.mb.ca * updates: www.muug.mb.ca * addons: www.muug.mb.ca * extras: www.muug.mb.ca Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Please verify its path and try again [admin@cserver ~]$ yum check-update Loading "fastestmirror" plugin Loading "priorities" plugin Determining fastest mirrors * epel: mirror.its.uidaho.edu * virtualmin: software.virtualmin.com * virtualmin-universal: software.virtualmin.com * base: ftp.telus.net * updates: ftp.telus.net * addons: ftp.telus.net * extras: ftp.telus.net Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Please verify its path and try again [admin@cserver ~]$ -- Canada must refuse to be entangled in any more wars fought to make the world safe for capitalism. -- The Regina Manifesto, 1933

2 4

CentOS PPC architecture support
by Stewart Williams 15 Dec '08

15 Dec '08

I have a system with a PowerPC cpu which I'd like to run CentOS on in a production environment (albeit for a home personal server.) Does anyone know if the CentOS team are actually going to support PPC? I have found a page which states release 4 is in beta[1]. But little else. Is there lack of demand for support for this aging arch? Is there a lack of volunteers? I'd be willing to test the releases and bug report, or help out in anyway I can. Fedora has good support, however, I don't really want to update the system often. [1] http://www.centos.org/modules/news/article.php?storyid=65

2 2

GNOME + Firefox - Mouse froze - what key combination to revive?
by Lanny Marcus 15 Dec '08

15 Dec '08

Earlier, I was using GNOME and Firefox and the Mouse died. I had to kill the power, to get the box going again, because it doesn't have a reset switch; which is *not* an elegant way to get going. What key combination would get me going or to a shell? CentOS 5, fully updated, 32 bit. TIA!

6 15

CentOS Bug Reporting Policy
by Hywel Richards 15 Dec '08

15 Dec '08

I'm a little confused about what you are supposed to do when you discover a bug with CentOS (and by implication RHEL). Is there some policy as to what to do and where to report the bug? It doesn't seem appropriate to report it to http://bugs.centos.org because CentOS is kept in-sync with the upstream, so bugs will never get fixed in CentOS, only in the upstream distribution. Unless there is some feedback mechanism from this CentOS bugtracker to Redhat that I am unaware of. So that makes the obvious place to report any bugs http://bugzilla.redhat.com, but do they (Redhat) have any opinion on people reporting bugs observed on a CentOS distribution there? Do they welcome it or do they discourage it? There is certainly no CentOS product classification in their bugzilla I can see. So, in short, is there any CentOS bug reporting policy, and is it written down anywhere? Hywel.

4 5

CentOS-announce Digest, Vol 46, Issue 6
by centos-announce-request＠centos.org 15 Dec '08

15 Dec '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:1028 Moderate CentOS 3 ia64 cups - security update (Pasi Pirhonen) 2. CESA-2008:1021 Moderate CentOS 3 ia64 enscript - security update (Pasi Pirhonen) 3. CESA-2008:1021 Moderate CentOS 4 s390(x) enscript - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Mon, 15 Dec 2008 18:56:30 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:1028 Moderate CentOS 3 ia64 cups - security update To: centos-announce(a)centos.org Message-ID: <20081215165630.GA13827(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:1028 https://rhn.redhat.com/errata/RHSA-2008-1028.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/cups-1.1.17-13.3.55.ia64.rpm updates/ia64/RPMS/cups-devel-1.1.17-13.3.55.ia64.rpm updates/ia64/RPMS/cups-libs-1.1.17-13.3.55.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CentOS 5 Dom0 doesn't start all DomU images
by Devraj Mukherjee 15 Dec '08

15 Dec '08

Hello all, I have a CentOS Dom0 booting CentOS DomU, I am able to start multiple DomUs from the command line using xm create, but if I copy the configuration files to /etc/xen/auto only one of the DomUs seem to start up automatically. Has anyone experienced anything similar before? Any pointers / hints? Thanks. -- "I never look back darling, it distracts from the now", Edna Mode (The Incredibles)

3 3

SSH login to centos
by Gopinath Achari 15 Dec '08

15 Dec '08

Hi all, SSH login to Centos 5.2 (Fresh installed) system takes a long time, what is the problem. anyone aware of this -- Regards, Gopinath M

3 3

Centos4: USB disk standby?
by Rainer Traut 15 Dec '08

15 Dec '08

Hi, I've decided to use an external USB disk as backup with rsync. This works fine. When the external disk is mounted, it does not go into standby/sleep/whatever, though I'm using it only for 30minutes at night. Is there a way to do this with C4, 2.6.9-78.0.8.ELsmp? E.g. unmount/some special command/upgrade to 5.2? Thx Raier

2 3

Any Alternative for X window System
by karthikeyan subbannan 15 Dec '08

15 Dec '08

hi , I have one problem in centos4.4.That is when i run a java Swing Based application(non stop Application ie ,24/7) in centos4.4 the X Window system takes 100% of cpu usage....When i restart the system it will come down.After few hours it will again go to 100%...please tell me solution.....

4 5

secure file not updating
by Mike -- EMAIL IGNORED 15 Dec '08

15 Dec '08

On my Centos 5 server, the secure file has not updated since Dec 10. This despite the fact that I run an sshd server that I access many times per day. Most peculiar is the fact that a swatch monitor that I run on the secure file catches plenty of lines. It is as if when swatch catches a line in the file, the line is removed from the file and the modification date is set back. Hard to believe. Any ideas? Thanks, Mike.

3 9

wine 1.1.10 rpm for centos
by dnk 15 Dec '08

15 Dec '08

has anyone come across a wine 1.1.10 RPM? Searching all the usual places..... d

8 18

Sync csgfs in centos 4 with current kernel updates
by Aliet Santiesteban Sifontes 15 Dec '08

15 Dec '08

Hi list, any timeframe for the sync of csgfs in centos 4 with current kernel updates???. Best regards

2 2

mount as ro for users, rw for root?
by Scott R. Ehrlich 14 Dec '08

14 Dec '08

Under CentOS 5.2, is it possible to mount an iscsi filesystem/partition as rw for root, but ro for users? If so, what would be the proper syntax? Thanks. Scott

3 2

CentOS 5.2 running in VMWare 6.5 Firefox failed to connect, but konqueror works well
by Josef Temminghoff 14 Dec '08

14 Dec '08

Hello I am running CentOS 5.2 in VMWare 6.5. Firefox doesn't run but Konqurer does. VMware host (Vista) is connected to the internet via a DSL router. CentOS VMware network is brided, DHCP is activated, no firewall is acive. Perhaps somebody can help me. Thank you in advance Josef

3 2

Checking to see if I can mail
by Bob Hoffman 13 Dec '08

13 Dec '08

Been able to receive mail but unable to get mine to appear on list. I tried resetting the list to see if I am able to mail out again. Lets see if this works. Test#12

4 7

CentOS 5.2 + iptables + memcached Problem
by Art Age Software 13 Dec '08

13 Dec '08

Hi, I'm experiencing the most perplexing problem with iptables on CentOS 5.2. I'm hoping someone can point out what I must be missing here. I have memcached set up on several nodes on an internal network. I have the following rules set up to allow traffic between memcached nodes: IPTABLES -A INPUT -i bond0 -p tcp -m tcp -s 192.168.1.0/24 -d 192.168.1.0/24 --dport 11211 -j ACCEPT IPTABLES -A FORWARD -i bond0 -p tcp -m tcp -s 192.168.1.0/24 -d 192.168.1.0/24 --dport 11211 -j ACCEPT IPTABLES -A OUTPUT -o bond0 -p tcp -m tcp -s 192.168.1.0/24 -d 192.168.1.0/24 --dport 11211 -j ACCEPT IPTABLES -A FORWARD -o bond0 -p tcp -m tcp -s 192.168.1.0/24 -d 192.168.1.0/24 --dport 11211 -j ACCEPT And yet, iptables continues to drop memcached packets. It appears to simply skip these rules and fall through to the default CATCH-ALL policy. Here are some iptables log messages notifying of the dropped packets: Dec 12 20:33:53 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=47567 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:33:59 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=47771 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:34:00 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=35600 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:34:12 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.4 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=52823 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:34:40 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.4 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=44946 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:34:42 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.3 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=45046 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:37:40 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.4 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=58825 WINDOW=0 RES=0x00 RST URGP=0 Dec 12 20:37:49 s1 kernel: DROP -- Catch All: IN= OUT=bond0 SRC=192.168.1.1 DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=11211 DPT=44183 WINDOW=0 RES=0x00 RST URGP=0 I am not seeing anything like this with any of the other filtered ports in my ruleset. Is there something obvious here that I am just missing? Or am I running into a possible kernel bug of some sort? Thanks in advance for any insights.

2 5

Dlink DGE-530T on CentOS 4.7
by Stephen Harris 13 Dec '08

13 Dec '08

Has anyone had any luck getting this to work? The kernel provide skge, sky2 and sk98lin modules all fail to load. I was able to download the latest version from the syskonnect.de site, and with some hacking/klduging of their install script managed to compile the module in there (a newer version of sk98lin, it seems) which recognised the card... but this isn't really sustainable 'cos new kernels will cause problems. Any ideas? -- rgds Stephen

3 8

5.2 driver for Marvell Yukon 88E8042 PCI-E Fast Ethernet controller
by Kurt Hansen 13 Dec '08

13 Dec '08

Hello, I'm trying to install CentOS 5.2 on an HP 6730s notebook. All's going well except for one little item -- the networking. Never thought I'd have trouble with an Ethernet adapter, so I didn't even check before buying this machine; it was cheap. The adapter is a Marvell Yukon 88E8042 PCI-E Fast Ethernet controller. I can't find a Linux driver for it except one that appears to require me to recompile a custom kernel. I find it on the Marvell website: http://www.marvell.com/drivers/search.do It looks like I'll have to recompile the kernel to get this installed. Having read the warnings on the CentOS Wiki, I figured I should ask before building my own kernel for the first time. Do I have other options? Thanks! Kurt Hansen khansen(a)charityweb.net

6 11

init script question
by Davide Cittaro 13 Dec '08

13 Dec '08

Hi all, is there a function (or variable) I can use in a custom init script that identifies the init script name? i.e. I'm porting some init scripts from gentoo, where the $SVCNAME variable identifies the init script name within the script itself... d /* Davide Cittaro Cogentech - Consortium for Genomic Technologies via adamello, 16 20139 Milano Italy tel.: +39(02)574303007 e-mail: davide.cittaro(a)ifom-ieo-campus.it */

5 7

Upgrade to new drives in raid, larger
by Bob Hoffman 13 Dec '08

13 Dec '08

Hi all, As part of my raid experience, I have yet to have to do this, but was wondering how you guys would attempt it. I have 3 drives in a raid 1, with one as a hot spare. They are 250gb with all space used by two raid devices, 1 with boot, the other with LVMs filling them up. Now, lets say down the road I want to put in 500gb drives and replace them....yikes. I was thinking of taking out the spare and replacing it first. Then cloning the raid 1 array drive as I normally would. This would leave 250 gb open. Then I was thinking to make it a spare and then pulling out drive 2 so drive 3, the 500gb, starts syncing. And replacing drive 2 as I did drive 3 above. When drive 3 is done syncing then I can pull out drive 1 and allow drive 2 to sync while drive 1 is turned into a hot spare. Now, supposing this will work, can the raid device be enlarged easily so the LVMs can be increased as needed (make the second raid fill up the drive as it does now)? Or is there a simpler or harder way to do this without waiting forever for the syncing. I am thinking by the time I need to replace them, centos6 will be out and I will just have to redo the whole computer anyway, but I have not seen anyone talk about this, thought I would see what you gurus would do. Bob

3 2

Experimental RPM Squid Packages for EL4/EL5
by Vandaman 13 Dec '08

13 Dec '08

I posted on the squid-users mailing list and also CC'd the upstream developer in case he wasn't subscribed. He replied and updated his page on http://people.redhat.com/mnagy/squid/ You can follow the full conversation at http://marc.info/?t=122908476200005&r=1&w=2 Are there any plans for any other squid versions in CentOS plus? Any other repos/sources you know of with EL4/EL5 squid rpms? Is there a CentOS dev with any experimental packages? Regards, Vandaman.

1 0

OT: Need some riser card advice...
by Ray Van Dolson 13 Dec '08

13 Dec '08

Fellow server-builders out there, this is for you. :) I was trying to build a cheap JBOD type storage solution running CentOS. Ended up snagging a Supermicro SC826TQ-R800LPB 2U case (12 drives slots) and a Supermicro X7DBE-O motherboard. Unfortunately, without thinking I snagged a 3ware 9650SE-12ML SATA RAID card which is a full height card and thus does not fit in my case. I have a few options here: - Go with a 3U case instead. Now I have a 16-drive case with only a 12-way card. :-) - Return the 3Ware and order two of the 8-way cards which are half-height. This means I love some of my space now however as I have to have an extra spare drive per card. - Get a PCI-E riser. The riser option I like, except I also have the BBU unit for my RAID card meaning I need to ensure that I have enough clearance and support for it when the card is mounted horizontally. You can mount the battery elsewhere, but not the logic module... Most of the PCI-E 8x risers I've seen out there seem to be pretty small profile and I'm not sure if they'd give the clearance needed (see the Supermicro provided CSE-RR1U-E8). It looks like I need around 35mm of clearance to get the card in sideways with the BBU attached... Another solid option would looke to be a 2U riser, but I am having a harder time finding somethign reasonably priced. The RSC-R2UE-A3E8 from Supermicro looks perfect and would definitely give me the clearance I need, but is priced 10x higher than the 1U riser! Any advice? Apologies for the off-topic post.. this *will* be running CentOS however and there doesn't seem to be a more appropriate mailing list for general stuff like this.. :-) TIA, Ray

3 3

No /etc/yum/repos.d after new install of 5.2
by MHR 12 Dec '08

12 Dec '08

Since I was in the unenviable position of completely reinstalling my system today, I started out from the 5.2 Final DVD and then ran yum update to get the 79 (?) packages (and another 14 after that). I noticed something I found rather odd. There is no /etc/yum/repos.d directory at all. Is this right? Doesn't seem so. Makes it hard to set specific options for various repositories. Can someone explain that one? Thanks. mhr

3 4

Yum errors trying to install yum-priorities
by MHR 12 Dec '08

12 Dec '08

What does this mean (CentOS 5.2, all the latest updates, for which yum worked just fine): yum install yum-priorities Password: Loading "fastestmirror" plugin Loading mirror speeds from cached hostfile * rpmforge: ftp-stud.fht-esslingen.de * base: mirror.sanctuaryhost.com * updates: mirrors.easynews.com * addons: linux.mirrors.es.net * extras: mirror.dhsrv.com Setting up Install Process Parsing package install arguments Resolving Dependencies --> Running transaction check ---> Package yum-priorities.noarch 0:1.1.10-9.el5.centos set to be updated --> Finished Dependency Resolution Dependencies Resolved ============================================================================= Package Arch Version Repository Size ============================================================================= Installing: yum-priorities noarch 1.1.10-9.el5.centos base 11 k Transaction Summary ============================================================================= Install 1 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 11 k Is this ok [y/N]: y Downloading Packages: (1/1): yum-priorities-1.1 100% |=========================| 2.6 kB 00:00 http://mirror.sanctuaryhost.com/centos/5.2/os/i386/CentOS/yum-priorities-1.…: [Errno -1] Package does not match intended download Trying other mirror. (1/1): yum-priorities-1.1 100% |=========================| 11 kB 00:00 http://updates.interworx.info/centos/5.2/os/i386/CentOS/yum-priorities-1.1.…: [Errno -1] Package does not match intended download Trying other mirror. http://holmes.umflint.edu/centos/5.2/os/i386/CentOS/yum-priorities-1.1.10-9…: [Errno 9] Requested Range Not Satisfiable Trying other mirror. http://mirrors.combinetworks.com/centos/5.2/os/i386/CentOS/yum-priorities-1…: [Errno 9] Requested Range Not Satisfiable Trying other mirror. http://mirror.atlanticmetro.net/centos/5.2/os/i386/CentOS/yum-priorities-1.…: [Errno 9] Requested Range Not Satisfiable Trying other mirror. (1/1): yum-priorities-1.1 100% |=========================| 11 kB 00:00 ftp://mirror.atlantic.net/pub/centos/5.2/os/i386/CentOS/yum-priorities-1.1.…: [Errno -1] Package does not match intended download Trying other mirror. http://mirrors.serveraxis.net/centos/5.2/os/i386/CentOS/yum-priorities-1.1.…: [Errno 9] Requested Range Not Satisfiable Trying other mirror. http://mirrors.liquidweb.com/CentOS/5.2/os/i386/CentOS/yum-priorities-1.1.1…: [Errno 9] Requested Range Not Satisfiable Trying other mirror. http://centos.mirrors.tds.net/pub/linux/centos/5.2/os/i386/CentOS/yum-prior…: [Errno 9] Requested Range Not Satisfiable Trying other mirror. (1/1): yum-priorities-1.1 100% |=========================| 11 kB 00:00 ftp://ftp.ussg.iu.edu/linux/centos/5.2/os/i386/CentOS/yum-priorities-1.1.10…: [Errno -1] Package does not match intended download Trying other mirror. Error Downloading Packages: yum-priorities - 1.1.10-9.el5.centos.noarch: failure: CentOS/yum-priorities-1.1.10-9.el5.centos.noarch.rpm from base: [Errno 256] No more mirrors to try. Thanks. mhr

2 2

URGENT: libdvdcss install hosed /var [SOLVED]
by MHR 12 Dec '08

12 Dec '08

I found it - there has to be a /var/lib/nfs directory with a few subdirectories under it. Once I had created them all, I could run rpc.statd, and that unfroze everything. Thanks to all, esp. Bill for mentioning rpc - that was the clue for me. mhr

4 5

Information about ASLR (Address Space Layout Randomization) in CentOS 5
by Filipe Brandenburger 12 Dec '08

12 Dec '08

Hi, We are porting some applications from CentOS 4 to CentOS 5, the applications use mmap, and we found out that they sometimes crash in CentOS 5. We found out that this is due to the fact that CentOS 5 does randomization of the address space when loading binaries, libraries, and when using mmap, so that is what's causing our problem. The thing is, I'm trying to google for it, but I did not find any useful information on ASLR present in CentOS 5/RHEL 5/Linux 2.6.18. If anyone has any good pointers on reliable information on what does that code do, how to configure/tweak it, or how to use mmap properly to work around the issues, I would really appreciate it. In particular, if there is a switch/option that would allow us to disable it for some binaries/libraries only, it would be great, since this could allow us to do the upgrade sooner and try to find the proper fix for the problem later. Thanks! Filipe

2 3

Centos directory server
by Per Qvindesland 12 Dec '08

12 Dec '08

Hello List, I really hope that someone could shed some light here on where I am going rong, I have setup 2 directory servers one so that I can replicate from one to the other I have followed the manual to the letter (i think, well I have read and re-read it so many times now) from this place http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Replication-C… but I still get errors, in the log on the supplier server it says the following NSMMReplicationPlugin - agmt="cn=sms.viasat.se" (ldap2:389): Replication bind to cn=Replication Manager on consumer failed: 32 () but I am not sure what I have done rong, has anyone got any idea of what I am doing rong? Kind regards Per Qvindesland

1 0

yum-updatesd or similar for CentOS 4
by Alexander Farber 12 Dec '08

12 Dec '08

Hello, we have enabled yum-updatesd on our dozen real and virtual machines running CentOS 5.2 some time ago and are very satisfied: afarber@ablsw01:~> grep -v ^# /etc/yum/yum-updatesd.conf [main] run_interval = 7200 updaterefresh = 1200 emit_via = email dbus_listener = no do_update = yes do_download = yes do_download_deps = yes (it would be good to make it use the proxy though...) My plan is to keep the update mails and if anything goes wrong, install the older packages. But until now I never needed to do that :-) However we have few machines running CentOS 4.7 which we can't upgrade to 5 (because of Oracle 9 etc.) Is there some similar service available? Or has anybody experience in putting "yum -y update" into crontab for CentOS 4? Any good advices? Thank you Alex

7 7

network driver needed at install time
by Jerry Geis 12 Dec '08

12 Dec '08

I am wanting to use a motherboard that uses the 8111b reaktek chip. http://wiki.centos.org/AdditionalResources/HardwareList/RealTekRTL8111b This was great information. My question is now that I have a compiled module for centos 5.2 is there any way I can include that module in a DVD or load the module from USB at the installation time??? I use kickstart and that needs to work over the network. Is there an easy way to load a network driver at install from USB or something like that? Jerry

3 2

Is 4GB memory the 64bit switch tipping point?
by Kenneth Burgener 12 Dec '08

12 Dec '08

I am curious what should be the benchmark for making the choice of switching from 32bit to 64bit Linux? I have a few assumptions below. Is my logic sound? (This is a follow up to the "Adding RAM" thread) Assumptions: 1. 4GB Memory. The main benefit of 64bit mode is the ability to address more than 4GB of RAM. I assume that you use 64bit mode if you want to *efficiently* have more than 4GB of RAM, or intend to upgrade past 4GB in the foreseeable future. (I emphasize "efficiently" because PAE is an option, if you are desperate to keep 32bit mode with more RAM) 2. Overhead. It is my assumption that 64bit has more "overhead", being that the registers are now 64bits long, instead of 32bit, which would mean more bits to pass around the system. So if you have less than 4GB of RAM, 32bit mode would perform better than 64bit mode. 3. Compatibility. Linux has made incredible strides to make 64bit Linux very robust and compatible, but I still occasionally see binary applications/plugins/drivers that popup which are 32bit mode only. This is usually only a problem with Desktop systems that want bleeding edge, or not as well supported software. 4. Desktop vs Servers. Current "desktops" machines generally have around 2GB of RAM, or less. Current "server" machines generally have around 2GB of RAM, or more (much more). Because of the overhead (#2) and compatibility (#3) I would think that Desktops would benefit from using 32bit mode, and Servers would benefit from 64bit mode. Is my logic sound? Thanks, Kenneth

8 9

Re: [CentOS] pop3 attack
by David G. Miller 12 Dec '08

12 Dec '08

Toby Bluhm <tkb(a)alltechmedusa.com> wrote: > Or switch to postfix. I plunked "relayhost = smtp-server.roadrunner.com" > into main.cf & away it went. Having read the rest of the thread, I respond at the risk of furthering the flames. The sendmail configuration line is just as trivial: define('SMART_HOST','[smarthost.example.net]')dnl Check the quoting since the article uses matching left and right single quotes which is probably a figment of the editor used for writing the article. Here's the reference if you'd like more information: http://www.elandsys.com/resources/sendmail/smarthost.html Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

Re: [CentOS] [users] URGENT: Installed libdvdcss from rpmforge and k3b trashed /
by Dag Wieers 12 Dec '08

12 Dec '08

On Thu, 11 Dec 2008, MHR wrote: > I am running CentOS 5.2 with all the latest updates with the GNOME DE > and k3b. I put a DVD in the tray and tried to make a copy, but k3b > says it can't copy an encrypted disk. > > So, I installed libdvdcss from rpmforge: > > libdvdcss.i386 1.2.9-2.el5.rf rpmforge > > When I restarted k3b, it hung. After several minutes of waiting for > it to respond, I found that the whole system had become unresponsive - > no mouse movement or clicks, nor keyboard keys recognized. Unable to > do anything else with the system, I rebooted it. > > When the system came up, there were problems in /, so I had to run > e2fsck manually on /, and it found and fixed a whole slew of errors. > However, when the system rebooted after a successful fsck, there are > now errors in efforts to access various files and directories under > /var, mostly in /var/lock, but also /var/gdm (meaning no graphics), > all kinds of daemons are not starting up, and so on. > > Has anyone else seen anything like this? This is my primary desktop > system at work (I'm using my backup system at the moment), and I need > to have it back up a.s.a.p. Any suggestions? Why would this be related to libdvdcss ? I really do not see any link between the filesystem problems and libdvdcss. In the thread on the centos mailinglist you already identified the slowness to be related to an NFS mount. What if your system had filesystem errors all along, and when you installed the libdvdcss package it triggered these error into a fatal state. When you rebooted, the filesystem is being checked since it was no longer clean. You ran fsck without first doing fsck -N to see what would happen. The filesystem check also found out about all the other filesystem errors, and damaged files and brought the filesystem into a state where you see the problems you described. I would think you have had hardware problems, (or maybe your sudden reboot triggered a filesystem bug). Again, I seriously doubt the problems you have had are related to the libdvdcss RPM package. And without any proof I don't feel tempted to take any action. -- -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors]

1 0

URGENT: libdvdcss install hosed /var
by MHR 12 Dec '08

12 Dec '08

I am running CentOS 5/2 (latest updates) with the GNOME DE on a 32-bit machine (at work). I have k3b installed, and I was trying to copy a DVD earlier this morning, but k3b said it couldn't read encrypted DVDs. So, I installed libdvdcss from rpmforge and restarted k3b. It hung the system. I rebooted, and / had been damaged. After running e2fsck from the repair prompt, I rebooted and a whole slew of errors revolving around various /var directories that did not ecist occurred. I have been trying to repair /var, and so far with a fair modicum of success, but I've hit an interesting wall - two, actually. 1) The gdm refuses to come up. It claims that "Server Authorization directory (daemon/ServAuthDir) is set to /var/gdm, but this does not exist...." However: # ll -d /var/gdm drwxrwx--T 2 root gdm 4096 Dec 11 10:31 /var/gdm # ll /var/gdm total 8 -rw-r----- 1 root root 45 Nov 26 10:47 :0.Xauth -rw-r--r-- 1 root root 63 Dec 11 09:14 :0.Xservers This is identical to my backup system (which is not surprising - I set up the dir and copied the files from here - was that a bad idea?). 2) The following daemons fail to start: auditd, NFS statd, avahi and HAL. I've tried to pin down why the avahi daemon won't start because it keeps logging permissions errors trying to create the pid file /var/run/avahi-daemon//pid, but the setup of /var /var/run and /var/run/avahi-daemon are all identical to this (backup) machine. Any suggestions? Or is there a better, more comprehensive repair facility available? BTW, OT: Does anyone know why this might have happened? I have all this installed at home, no problems whatsoever (libdvdcss works seamlessly with all my DVD tools, including k3b). Thanks! mhr

8 16

PHP5 on CentOS4.7?
by Rudi Ahlers 11 Dec '08

11 Dec '08

Hi all, Does anyone know if CentOS 4.7 will support PHP5 natively? I have searched centos.org site, but can't see anything related to this? -- Kind Regards Rudi Ahlers

7 8

Watchdog process?
by Amos Shapira 11 Dec '08

11 Dec '08

Hello, Is there a generic built-in way on CentOS to overlook that a specific process is alive and re-spawn it (or just run a configured command) when it dies? I know how to script things so a parent will watch its child, but was wondering whether there is something more readily available instead of having to reinvent the wheel. The process must be controlled via a /etc/init.d/... script and should be stop-able (it runs in a primary/stand-by configuration), so use of "respawn" in inittab is not a solution. So far googl'ing for "watchdog" comes up with references about system watchdog - which will reboot the system if the kernel appears to be stuck. Thanks, --Amos

5 5

Combining active-backup and round-robbin network bonding
by Timm Essigke 11 Dec '08

11 Dec '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I think my first mail was not processed because it was send before the confirmation mail. In case you receive this mail twice, I am sorry! - --------------------------------------------------------------------- Hi, I want to set up two servers as a active-active HA cluster. Both servers have four Gbit NICs. Besides an unmanaged Gbit switch for the cluster communication (connected with eth0) I have two managed Gbit switches to which the servers and the clients will be attached. My idea was to use the following setup: switch2------eth1--bond1-- | switch1------eth2 | | | bond0 | switch1------eth3 This is for server1. Server2 should have two links with switch2 and one with switch1 instead. Switch1 and switch2 have a 3x1GBit 802.3ad trunk as switch interconnect. bond0 should be balance-rr (mode 0) to have load balancing and fault tolerance on switch2. The primary use is to double the capacity of the Gbit link. bond1 should be active-passive (mode 1) with bond0 as primary interface. This should guarantee availability of server1 to the workstations attached to switch2 in case switch1 fails. Both modes work fine as long as I use ethX-devices. According to /proc/net/bonding/bond0 I can bring bond0 up (MII Status: up), but in /proc/net/bonding/bond1 I can not bring the slave interface bond0 up. The "Permantent HW addr" is 00:00:00:00:00:00 no matter if I specify a MAC in ifcfg-bond0 or not. ifconfig bond0 shows the MAC of eth1 as HWaddr and the device as "UP BROADCAST RUNNING SLAVE MASTER MULTICAST". I use ARP for link monitoring, because MII monitoring seemed not reliable with my hardware (Broadcom BCM5708 + Intel 82571EB NICs and 3com 3848 + 4500G switches) on CentOS 5.2 (2.6.18-92.1.18.el5xen). How can I activate bond0 to work in the way I intended? Is such a setup impossible (i.e. to enslave bond-interfaces)? Is there a different/better way of doing what I want? Thanks in advance! Timm -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEVAwUBSUFrVMGs9/GXBO2vAQJAfgf/ZrM74TXKoX7PdD54V9i7ly0UyBRsIsRB Z2Nwq3YuUCkmN2wXSUwIyrccs/PeZ+Lm3k7THhbUGIxHXjI6EdfeJYgy5FYuNsWG 6BpUUUmgMSz7vXQ5NIJO9UkNpXQmgsjNpv5I0jwSvMRI/9blY5CHQf0pbxWG5dm8 Wz/YnvxwXf3ilNreEu7hTZ3C/ohnnUh8BRY0rmE0YKJRReeqol2at6GQ4XoPDw6m tAayNhv9+mUA1TYYvy/sOPXH9na143NSr4A7lPXG4l8aeS/obSI2359oZZyzR1Br 2brmensyswU9FbAreRr5/GIsWQ3zdQOdLoV9uTkzn57fD147u/ZiGQ== =Wk+k -----END PGP SIGNATURE-----

2 1

Upgrading to Centos 4.7 on HP DL580G5 caused problems
by Dr Les Oswald 11 Dec '08

11 Dec '08

As part of patching a cluster which has two DL580G5 login nodes ( 4X Intel 7300 DC cpus) & 24 HP DL160G5 compute nodes ( 2x Intel 5272 DC cpus) we encountered an issue that I would like to record: I upgraded both DL580s to Centos 4.7 via yum but only rebooted one initially- this node, previously bomb-proof, started to hang randomly with no obvious messages logged to help with diagnosis. In the dmessage output I found this sequence never seem before Uhhuh. NMI received for unknown reason 20. Dazed and confused, but trying to continue Do you have a strange power saving mode enabled? Uhhuh. NMI received for unknown reason 30. Dazed and confused, but trying to continue (repeated several times) Googling revealed many different scenarios with this boot error message, some suggesting a memory error - Oh Joy, these two machines have 64GB RAM each. I then changed grub.conf to boot to the previous kernel 2.6.9-67.0.15.ELsmp instead of the updated version of 2.6.9-78.0.5.ELsmp. The boot-time error messages immediately went away and so far the systems are reliable. Has anyone an explanation or confirmation that they have seen or overcome the above issue? I should mention that the DL160 compute nodes have not exhibited this behaviour at all. Les Oswald

3 2

bind specific ip address to iscsi target
by carlopmart 11 Dec '08

11 Dec '08

Hi all, I have setup a centos5.2 server (full updated) to serve iscsi disks using scsi-target-utils package. This server has two network adapters, one for remote administration and another to serve iscsi disk. How can I bind iscsi target service to only one ip address?? Many thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

2 2

Miredo 1.1.5
by Robert Moskowitz 11 Dec '08

11 Dec '08

I found a src.rpm for 1.1.5-1 for fc8 (not rh8!). I was able to rebuild it on my Centos build system. The rpms are identified as 1.1.5-1.i386.rpm, no el5 or other identification was placed in the files. I don't see how to control this when you rebuild from an existing src.rpm. Interestingly the fc8 designation was lost. I also rebuild it on my fc10 system. It worked, and the rpms have fc10 in their names. Don't know how well they will work. I will be trying them over the next couple weeks. If anyone wants a copy, let me know....

4 6

Iptables Question
by Joseph L. Casale 10 Dec '08

10 Dec '08

I have a squid proxy running transparently, so in my firewall script I run the following fairly early: iptables -A PREROUTING -t nat -i $LAN -p tcp -m multiport --dports 80,443 -j REDIRECT --to-port 3128 This is a multihomed server so after this change the masquerading was removed (as only web access on the lan side of this server was needed). I now need to masq cleanly one device so that it can bypass the squid proxy. As order is important, would it be correct to put the following _in front_ of the PREROUTING command above: iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE iptables -A FORWARD -i $LAN -o $WAN -m mac --mac-source <mac addr> -m state --state NEW,ESTABLISHED,RELATED -p tcp -m multiport --dports 443 -j ACCEPT iptables -A FORWARD -i $WAN -o $LAN -m state --state RELATED,ESTABLISHED -j ACCEPT Where is the best place to filter for the mac in this scenario? I am hoping anything w/o this mac will skip the whole masq setup and enter the PREROUTING command below, resulting in the traffic being proxied through squid. Thanks! jlc

2 2

Fedora 9 domU on CentOS 5.2 dom0 - very unstable?
by Dirk H. Schulz 10 Dec '08

10 Dec '08

I am running a Fedora 9 domU on CentOS 5.2 dom0, and it is quite unreliable. Every few days I have the following phenomenon: - many applications do not work at all (e. g. Nagios 3.05 stops checking, but the cgis work perfectly, the web server works as well) - system processes run into time outs (e. g. logging in via ssh runs into timeouts <<"connection reset by peer">> after many seconds, logging into the console does not get finished ever, no error, no refusal) and similiar All I can do then is destroy the domain (xm shutdown does not lead to anything either). Is this a known phenomenon? Is there any way to work around it? I do not have these problems with CentOS 5.2 domUs on the same machine (at least not that massive). Every hint or help is appreciated. Dirk

2 1

Cannot mount samba shares
by Ralph Angenendt 10 Dec '08

10 Dec '08

Hi, quick(?) question: Has anybody seen that problem below? More important question: Did anybody solve that? This is my smb.conf (well, only the most important parts): [global] workgroup = FOOBAR server string = My Server map to guest = Bad User preferred master = No local master = No domain master = No dns proxy = No [on3] comment = Audio-Video-Imports path = /local/mir/import/on3 force group = users read only = No create mask = 0664 directory mask = 0775 guest ok = Yes The path has: drwxrwxr-x 3 mir users 4096 10. Dez 16:35 /local/mir/import/on3/ Meaning: group users and user mir are allowed to write in there. Works fine from windows clients. Guest user gets mapped to "nobody". Doesn't work from linux: [root@shutdown ~]# mount -t cifs -o user=nobody,guest //mir-qs/on3 /mnt/tmp/ mount error 13 = Permission denied Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) root@mir-qs:~# uname -a ; rpm -q samba Linux mir-qs.br.de 2.6.9-78.0.8.ELsmp #1 SMP Wed Nov 19 20:05:04 EST 2008 i686 i686 i386 GNU/Linux samba-3.0.28-0.el4.9.i386 Machine is up to date. Error message on the server is make_connection: connection to on3 denied due to security descriptor. Googling around led me to the belief that someone fooled around with srvmgr.exe from a windows machine and that I should remove /var/cache/samba/share_info.tdb and restart samba. Which doesn't work. Now if I take out the "force group = users" everything works as expected. Except that I cannot write in this share - nobody isn't in the group users. I don't want to add nobody to the group users, nor can I go and change anything on that server regarding users and groups in the file system. Ah yes, smbclient works fine, but I really do not want to use that either. Cheers, Ralph

2 4

What is Judy?
by Robert Moskowitz 10 Dec '08

10 Dec '08

I am trying to build Miredo 1.1.5 (http://www.remlab.net/miredo/devel.shtml.en) I have followed the rpmbuild instructions from: http://www.owlriver.com/tips/non-root/, and have the miredo source in ~/build/miredo-1.1.5. I run ./configure (as the INSTALL text file tells me to do) and get the error: checking for Judy.h usablity... no checking for Judy.h presence... no checking for Judy.h... no configure: WARING: If you don't care about scalability, re-run configure with ' --without-Judy'. configure: error: Required Judy dynamic arrays library missing.

2 3

Re: [CentOS] Adobe plugin for firefox
by Bo Lynch 10 Dec '08

10 Dec '08

On Tue, December 9, 2008 3:49 pm, William L. Maltby wrote: > > On Tue, 2008-12-09 at 15:01 -0500, Bo Lynch wrote: >> I'm having an issue with workstation opening pdf's with firefox. I have >> the adobe plugin installed and enabled in firefox but firefox will only >> let me save the file. Under applications I have tried using the doc >> reader >> and adobe to associate pdf's with firefox with no luck. I am running >> firefox 3.0.4. Any help would be greatly appreciated. >> Thank you > > I've just been mucking about with this stuff. If you'll provide more > information, maybe I can help. Many folks ignore requests with no > substantive information because it wasts so much time trying to get the > information needed. > > For me, if you use rpm -q<splat whatever else you want> to list the > adobe plugin file installed, that would be a start. > > Under ~/.mozilla are one or more files named pluginreg.dat. Their > contents would be useful. The find command will help you locate them. If > you have multiple "default" directories there, which one is your active > one? Just get information from that one. > > If you have edited your preferences, list the settings for those that > may be related: what do you have for download actions, under > tools->add-ons->plugins tab, what is shown their. Anything else that may > be useful and related. > > -- > Bill > rpm -q firefox firefox-3.0.4-1.el5.centos [root@localhost ~]# acroread -v 8.1.3 The output of pluginreg.dat. This file was located in ~/.mozilla/firefox/ssehte9e.default Is this normal? Generated File. Do not edit. [HEADER] Version:0.09:$ [PLUGINS] /usr/lib/nspluginwrapper/npwrapper.so:$ :$ 1216305953000:1:1:$ <a href="http://gwenole.beauchesne.info/projects/nspluginwrapper/">nspluginwrapper</a> is a cross-platform NPAPI plugin viewer, in particular for linux/i386 plugins.<br>This is <b>beta</b> software available under the terms of the GNU General Public License.<br>:$ NPAPI Plugins Wrapper 0.9.91.5:$ 1 0:unknown/mime-type:Do not open:none:$ /usr/lib/mozilla/plugins-wrapped/nswrapper_32_32.libflashplayer.so:$ :$ 1226956491000:1:1:$ Shockwave Flash 10.0 r12:$ Shockwave Flash:$ 2 0:application/x-shockwave-flash:Shockwave Flash:swf:$ 1:application/futuresplash:FutureSplash Player:spl:$ /usr/lib/mozilla/plugins-wrapped/nswrapper_32_32.nppdf.so:$ :$ 1227025018000:1:1:$ The Adobe Reader plugin is used to enable viewing of PDF and FDF files from within the browser.:$ Adobe Reader 8.0:$ 5 0:application/pdf:Portable Document Format:pdf:$ 1:application/vnd.fdf:Acrobat Forms Data Format:fdf:$ 2:application/vnd.adobe.xfdf:XML Version of Acrobat Forms Data Format:xfdf:$ 3:application/vnd.adobe.xdp+xml:Acrobat XML Data Package:xdp:$ 4:application/vnd.adobe.xfd+xml:Adobe FormFlow99 Data File:xfd:$ Thanks for any help. Bo Lynch

3 8

squidGuard-simple.cgi display fields
by Joseph L. Casale 10 Dec '08

10 Dec '08

I have this cgi file running on CentOS 5 with Apache 2.2.3 and although it executes most fields are empty, a typical block by squidGuard yields this: Supplementary info : Client address = 192.168.0.5+clientname Client name = User ident = Client group = URL = Target class = The redirect lines is: http://localhost/cgi-bin/squidGuard-simple.cgi?clientaddr=%a+clientname=%n+… I assume the "+" throws this off somehow, something to do with cgi and apache? Any ideas? Thanks! jlc

2 2

Centos 4.7 httpd error messages
by Vandaman 10 Dec '08

10 Dec '08

I have the following error messages on a CentOS server. Googling did not identify the error. [Wed Dec 10 09:22:02 2008] [notice] caught SIGTERM, shutting down No log handling enabled - turning on stderr logging Cannot find module (IP-MIB): At line 0 in (none) Cannot find module (IF-MIB): At line 0 in (none) Cannot find module (TCP-MIB): At line 0 in (none) Cannot find module (UDP-MIB): At line 0 in (none) Cannot find module (HOST-RESOURCES-MIB): At line 0 in (none) Cannot find module (SNMPv2-MIB): At line 0 in (none) Cannot find module (SNMPv2-SMI): At line 0 in (none) Cannot find module (NOTIFICATION-LOG-MIB): At line 0 in (none) Cannot find module (UCD-SNMP-MIB): At line 0 in (none) Cannot find module (UCD-DEMO-MIB): At line 0 in (none) Cannot find module (SNMP-TARGET-MIB): At line 0 in (none) Cannot find module (NET-SNMP-AGENT-MIB): At line 0 in (none) Cannot find module (HOST-RESOURCES-TYPES): At line 0 in (none) Cannot find module (UCD-DISKIO-MIB): At line 0 in (none) Cannot find module (LM-SENSORS-MIB): At line 0 in (none) Cannot find module (DISMAN-EVENT-MIB): At line 0 in (none) Cannot find module (IPV6-ICMP-MIB): At line 0 in (none) Cannot find module (IPV6-MIB): At line 0 in (none) Cannot find module (IPV6-TCP-MIB): At line 0 in (none) Cannot find module (IPV6-UDP-MIB): At line 0 in (none) Cannot find module (SNMP-VIEW-BASED-ACM-MIB): At line 0 in (none) Cannot find module (SNMP-COMMUNITY-MIB): At line 0 in (none) Cannot find module (UCD-DLMOD-MIB): At line 0 in (none) Cannot find module (SNMP-FRAMEWORK-MIB): At line 0 in (none) Cannot find module (SNMP-MPD-MIB): At line 0 in (none) Cannot find module (SNMP-USER-BASED-SM-MIB): At line 0 in (none) Cannot find module (SNMP-NOTIFICATION-MIB): At line 0 in (none) Cannot find module (SNMPv2-TM): At line 0 in (none) Regards, Vandaman.

2 2

vsftpd and SElinux
by Dirk H. Schulz 10 Dec '08

10 Dec '08

Hi folks, I have configured vsftpd with virtual users for webserver users (that means, a virtual users chrooted home is the document root of a virtual host in apache). That works fine so far - as long as SElinux ist not enforcing. I have tried to audit2allow out the problem, but did not succeed. Virtual vsftpd users are denied access to directories: virtual users are mapped to a system user with vsftpd; after login the vsftpd process changes into the system users home directory, then into the virtual users chroot. And the first step (changing into the system users home dir) is denied by SElinux. But there is no "avc denial" in audit log any more - I have policied these out completely. There seems to be a "dontaudit" denial working - which I cannot make visible on CentOS since the -D flag is not available for semodule (as it is in Fedora 9, e.g.). So I am quite stuck here. Is there anything I can do to find the denial I need to feed into audit2allow? Or some other way to make SElinux accept vsftpds access? Perhaps someone out there has already gone through this process. Any hint or help is appreciated. Dirk

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss