- Discuss - lists.centos.org

Question about Mirrors
by Bo Lynch 13 Oct '08

13 Oct '08

I am trying to set up a local repo for my division. I tried to rsync 5.1 updates off the mirrors and recieved an error of no file or dir. After going to the mirror, I notice that all of the 5.1 filder is empty and there is a readme there that states..... This directory (and version of CentOS) is depreciated. For normal users, you should use /5/ and not /5.1/ in your path. Please see this FAQ concerning the CentOS release scheme: http://www.centos.org/modules/smartfaq/faq.php?faqid=34 If you know what you are doing, and absolutely want to remain at the 5.1 level, go to http://vault.centos.org/ for packages. So I just want to make sure that I'm understanding this correct. I should use the 5.1 original RPMS for my base OS and get my updates for 5.1 from the 5 folder???? Just sounds weird. Should I do the same for my 5.0 release? Thanks for you help. -- Bo Lynch

7 15

Good [L]AMP tutorial for CentOS 5.2 ?
by Rene Fournier 13 Oct '08

13 Oct '08

Being slightly familiar with BSD, I'm trying to get my feet wet with Linux, and was wondering if anyone can suggest a good walkthrough of setting up a CentOS server with Apache, PHP, and MySQL... I realize there are step-by-step guides of the sort "copy-this-line- paste-into-terminal-and-hit-enter", but I'd like to understand what's going on when I issue a single wget command and numerous packages and libraries start downloading.... Specifically: 1. Is there a "right" way to install software on Linux in general, an CentOS in particular? For example, the Package Manager on CentOS 5.2 allows you to install certain software, but often not the latest version. So if I go download MySQL 5.0.67 from the web, how do I install it and make it play nice with the rest of the system? Ditto for PHP 5.2.6. And once installed (either by the Package Manager -- and by the way, why are the apps it lists so out of date?), what's the best way to update PHP and MySQL? Is it simply a matter of downloading the binaries again and overwriting the existing install? On Mac OS X, such downloads come as .pkg files that seem to take care of so many details without requiring a trip to the command line. 2. Where should software, such as PHP, MySQL, Apache2, be installed? / usr/bin ? 3. Is it a bad idea to install some software from the command-line via wget, some software from the graphical Package Manager, and some software from the the web? What I mean is, so far it seems like Linux manages the list of installed packages, and I just wonder if I'm screwing things up this way. Anyway, sorry for the ramble, just looking for some guidance. Thanks. ...Rene

6 6

smartd and 3ware on centos5
by Aleksandar Milivojevic 13 Oct '08

13 Oct '08

Hi, I've CentOS5 box with 3ware RAID controller in it. I can't get the tw_cli command line tool to work, and smartd also barks on me. The tw_cli simply doesn't see the controller, no errors logged anywhere. When starting smartd, it is much more verbose. I'm getting a bunch of messages like this: Oct 9 22:15:15 toporko kernel: program smartd is using a deprecated SCSI ioctl, please convert it to SG_IO Oct 9 22:15:15 toporko kernel: 3w-xxxx: SCSI_IOCTL_SEND_COMMAND deprecated, please update your 3ware tools. Oct 9 22:15:15 toporko last message repeated 5 times Oct 9 22:15:15 toporko smartd[29238]: Device: /dev/sda [3ware_disk_00], not found in smartd database. Oct 9 22:15:15 toporko smartd[29238]: Device: /dev/sda [3ware_disk_00], ATA IDENTIFY DEVICE words 82-83 don't specify if SMART capable. Oct 9 22:15:15 toporko smartd[29238]: Device: /dev/sda [3ware_disk_00], proceeding since '-T permissive' Directive given. Oct 9 22:15:15 toporko kernel: program smartd is using a deprecated SCSI ioctl, please convert it to SG_IO Oct 9 22:15:15 toporko kernel: 3w-xxxx: SCSI_IOCTL_SEND_COMMAND deprecated, please update your 3ware tools. Oct 9 22:15:15 toporko last message repeated 5 times Oct 9 22:15:15 toporko kernel: program smartd is using a deprecated SCSI ioctl, please convert it to SG_IO Oct 9 22:15:15 toporko kernel: 3w-xxxx: SCSI_IOCTL_SEND_COMMAND deprecated, please update your 3ware tools. Oct 9 22:15:15 toporko kernel: 3w-xxxx: SCSI_IOCTL_SEND_COMMAND deprecated, please update your 3ware tools. Oct 9 22:15:15 toporko smartd[29238]: The SMART RETURN STATUS return value (smartmontools -H option/Directive) can not be passed through the 3ware 3w-xxxx driv er. This can be fixed by applying a simple 3w-xxxx driver patch that can be found here: http://smartmontools.sourceforge.net/ Alternatively, upgrade your 3w-xx xx driver to version 1.02.00.037 or greater. The configuration file for smartd looks like this: /dev/sda -d 3ware,0 -a -m root -T permissive /dev/sda -d 3ware,1 -a -m root -T permissive I do remember smartd and tw_cli working in the past. However, last time I used them was so long ago that I don't remember if it was before or after upgrade from CentOS4 to CentOS5. Is it possible to get tw_cli and smartd into working condition on CentOS5 box? Thanks, Alex

2 2

Minicom capture file
by Dean Maluski 12 Oct '08

12 Oct '08

I'm trying to capture text data coming in on serial port to put into a plot on a web page. Running minicom 2.3 on a Fedora 9 box the capture file is updated immediately. Running minicom 2.1, stock on a Centos 5.x box the capture file doesn't update until you exit capture mode. Is there any way to have it update immediately or is there an alternative application to write incoming data to a text file. Likely many ways to accomplish this but my brain is out of ideas today. Dean

1 0

looking for good web based DNS script to check nameservers
by Rudi Ahlers 12 Oct '08

12 Oct '08

Hi all, I'm looking for a good web based script / website that can do a full ananlysis on DNS & namservers. Can someone please recommend something good to use? And if possible, if it could show any errors, or even make suggestions (like "TTL is too high", or " you don't have an MX, please ad one", etc) -- Kind Regards Rudi Ahlers

3 2

need filesystem recommendation
by Mag Gam 12 Oct '08

12 Oct '08

Hi All, I have a backup site and I would like to rsync from production to backup site. However, I would like to have all backups be compressed so I can save space. Can anyone recommend a good way to do this? I am currently using tar and bzip2 to do this. TIA

4 3

Unable to use SSH password-less logins
by Joe Tseng 11 Oct '08

11 Oct '08

I am trying to ssh from my Windows/Cygwin xterm window into my CentOS52 servers w/o using passwords but my keys seem like they're being ignored. I created the key in cygwin using: $ ssh-keygen -t dsa -f id_dsa And copied id_dsa.pub over to centos:~/.ssh/authorized_keys Ideas? tia, - Joe

2 3

CentOS-announce Digest, Vol 44, Issue 9
by centos-announce-request＠centos.org 11 Oct '08

11 Oct '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0937 Important CentOS 3 ia64 cups - security update (Pasi Pirhonen) 2. CESA-2008:0937 Important CentOS 3 s390(x) cups - security update (Pasi Pirhonen) 3. CESA-2008:0937 Important CentOS 4 ia64 cups - security update (Pasi Pirhonen) 4. CESA-2008:0937 Important CentOS 4 s390(x) cups - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Oct 2008 16:45:31 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0937 Important CentOS 3 ia64 cups - security update To: centos-announce(a)centos.org Message-ID: <20081010134530.GF5793(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0937 https://rhn.redhat.com/errata/RHSA-2008-0937.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/cups-1.1.17-13.3.54.ia64.rpm updates/ia64/RPMS/cups-devel-1.1.17-13.3.54.ia64.rpm updates/ia64/RPMS/cups-libs-1.1.17-13.3.54.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Any problems in the CentOS Samba?
by Spike Turner 11 Oct '08

11 Oct '08

Upstream bugzilla says :- Rebasing to Samba 3.0.32 would fix various current RHEL4 bugs. https://bugzilla.redhat.com/show_bug.cgi?id=460904 I have looked at the bugs.centos.org but did not find user reported bugs. Is anyone experiencing problems using the CentOS 4 samba? Spike.

1 0

Atheros AR5212/AR5213 wifi not working
by Marko Vojinovic 11 Oct '08

11 Oct '08

Hello everyone, I'm new to the CentOS list, so forgive me if this has been answered before (someone please point me to an efficient way of searching through the list archives). I have a wifi card from the subject line, and have the driver installed. Using NetworkManager under Gnome everything works perfectly. However, I prefer to use network service instead of NetworkManager since a) I use KDE and NetworkManager fails to work properly there b) this is a desktop machine, online 24/7 and I want wireless active even when I am not logged in. But when I use the network service, wifi0 fails after a delay, and /var/log/messages says there are no dhcp offers available. However, I am sure that there are several wireless networks available, with a strong signal. How to solve this? I would even accept using NM if it works as a daemon, ie even if I'm not logged in, and under KDE (which it doesn't atm). I believe the problem is essentially in the (in)ability to choose the appropriate network automatically --- in KDE NM doesn't have the taskbar applet which would let me choose the network, and the network service has no way of automatically making such a choice either... Please help! Btw, this is somewhat urgent, I am supposed to make it work by monday, Oct. 13. Oh, I almost forgot, CentOS 5.2, fully updated. Best, :-) Marko

4 5

Unexpected FTP Activity
by Mike -- EMAIL IGNORED 10 Oct '08

10 Oct '08

Since I put my new Centos box on the net, it frequently tr1es to make ftp contact with IP address 64.90.181.77 . Why is this, and does anyone recognize this IP address? Is it spyware? Mike.

8 15

find cont'd 3
by Eric Sisolak 10 Oct '08

10 Oct '08

On Wed, Oct 8, 2008 at 9:49 PM, <tony.chamberlain(a)lemko.com> wrote: > > Basically I want to find all files with a string (except binary) > and change it. let STR be the string I am looking for. NEW is new string. Hmm, why not ditch find entirely, and just use grep? Something like: TFIL=/usr/tmp/dummy$$.txt grep -Ilr "$STR" * > $TFIL for fil in $( cat $TFIL); do sed -i "s/$STR/$NEW/g" $fil done Man grep says: "-I Process a binary file as if it did not contain matching data". Also -l gives you the filename and relative path. If $STR contains "/"s then you could use # instead. sed -i "s#$STR#$NEW#g" $fil I dont know how much the searched for string would change, but you could test if it contained "/" and then use sed with "#" instead. Also you might want to use "sed -ibak ..." instead since this will backup the unchanged file to filename.bak, should your substitution go awry. The letters after "i" specify the extension you want to use. Eric Sisolak

2 1

unsuscribe
by Miguel Varas A. 10 Oct '08

10 Oct '08

1 0

Fwd: P5GC SATA mode problem
by Eduardo Grosclaude 10 Oct '08

10 Oct '08

Hello, I'm top-posting my own thread with some homework I've done, can somebody help? In short, the problem is that kernel 2.6.18-53 (as per 5.1 installation) works OK while any kernel update makes booting impossible in Enhanced SATA mode. For newer kernels, only Compatible mode works, but at a very heavy cost in performance. The motherboard is ASUS P5GC-MX and the disk is ATA WDC WD3200AAJS-6. More detail in my own former message at the end. 1. I have tried pci=nommconf, noacpi, acpi=off. Any other hints? 2. I've opened up both initrd files (initrd-2.6.18-53.el5.img, which works in "SATA/enhanced" mode, and the newer initrd-2.6.18-92.1.13.el5.img, which only works in "compatible") and found practically no differences (USB modules are loaded in a different order and that's about it). 3. In the hope that I could build up a working kernel (albeit sacrificing ease of update) I tried to figure out some useful config. I've scanned both config-XXX files but I am unable to identify any reasonable suspects either, diff provided below. Should SCSI-SAS-ATA be different? 4. Just to play a while, attempted to make mrproper and got the following. Same for make clean. [root@localhost 2.6.18-92.1.13.el5-i686]# make mrproper scripts/Makefile.clean:17: /usr/src/kernels/2.6.18-92.1.13.el5-i686/drivers/infiniband/hw/amso1100/Makefile: No such file or directory make[3]: *** No rule to make target `/usr/src/kernels/2.6.18-92.1.13.el5-i686/drivers/infiniband/hw/amso1100/Makefile'. Stop. make[2]: *** [drivers/infiniband/hw/amso1100] Error 2 make[1]: *** [drivers/infiniband] Error 2 make: *** [_clean_drivers] Error 2 So it seems 5.2's kernel really doesn't like me. Now, my questions: 1. What is going on? What can I read to understand a bit more? 2. As for the disk drive behaviour, should I file a bug? I haven't found any related known bugs. Does it depend on whether ASUS P5GC-MX is or not on the HW CL? 3. Is it on the HW CL anyway? I assume it is, from what I read at http://www.linux-tested.com/results/asus_p5gc-mx.html 4. As for the kernel compile error, what is going on again? Any hints deeply appreciated! Thank you in advance CONFIGs DIFF OUTPUT ------------------------------- 3,4c3,4 < # Linux kernel version: 2.6.18-53.el5 < # Mon Nov 12 02:16:55 2007 --- > # Linux kernel version: 2.6.18-92.1.13.el5 > # Wed Sep 24 19:27:25 2008 189a190,191 > CONFIG_ISCSI_IBFT_FIND=y > CONFIG_ISCSI_IBFT=m 399a402 > CONFIG_XFRM_NALGO=m 483a487 > CONFIG_IPV6_OPTIMISTIC_DAD=y 800a805 > CONFIG_NL80211=y 803a809 > CONFIG_MAC80211_RCSIMPLE=y 806,812c812 < CONFIG_MAC80211_DEBUG=y < # CONFIG_MAC80211_VERBOSE_DEBUG is not set < # CONFIG_MAC80211_LOWTX_FRAME_DUMP is not set < # CONFIG_TKIP_DEBUG is not set < # CONFIG_MAC80211_DEBUG_COUNTERS is not set < # CONFIG_MAC80211_IBSS_DEBUG is not set < # CONFIG_MAC80211_VERBOSE_PS_DEBUG is not set --- > # CONFIG_MAC80211_DEBUG is not set 1130a1131 > CONFIG_SCSI_SAS_ATA=y 1220a1222 > # CONFIG_PATA_ACPI is not set 1229a1232 > # CONFIG_PATA_CS5536 is not set 1245a1249 > # CONFIG_PATA_NS87415 is not set 1281a1286,1287 > CONFIG_DM_MULTIPATH_HP=m > CONFIG_DM_UEVENT=y 1290c1296 < CONFIG_FUSION_MAX_SGE=40 --- > CONFIG_FUSION_MAX_SGE=128 1292a1299 > CONFIG_FUSION_LOGGING=y 1399c1406,1407 < # CONFIG_SUNDANCE is not set --- > CONFIG_SUNDANCE=m > # CONFIG_SUNDANCE_MMIO is not set 1439a1448 > CONFIG_IXGBE=m 1445a1455,1457 > CONFIG_BNX2X=m > CONFIG_MLX4_CORE=m > CONFIG_MLX4_DEBUG=y 1524,1525d1535 < CONFIG_IWLWIFI=y < CONFIG_IWLWIFI_DEBUG=y 1526a1537,1540 > CONFIG_IWL4965_QOS=y > CONFIG_IWL4965_SPECTRUM_MEASUREMENT=y > CONFIG_IWL4965_SENSITIVITY=y > # CONFIG_IWL4965_DEBUG is not set 1879c1893,1894 < # CONFIG_IPMI_PANIC_EVENT is not set --- > CONFIG_IPMI_PANIC_EVENT=y > CONFIG_IPMI_PANIC_STRING=y 1905a1921 > # CONFIG_HP_WATCHDOG is not set 1981,1986c1997,2002 < < # < # TPM devices < # < # CONFIG_TCG_TPM is not set < # CONFIG_TELCLOCK is not set --- > CONFIG_TCG_TPM=m > CONFIG_TCG_TIS=m > CONFIG_TCG_NSC=m > CONFIG_TCG_ATMEL=m > CONFIG_TCG_INFINEON=m > CONFIG_TELCLOCK=m 2515a2532 > CONFIG_USB_NET_DM9601=m 2647,2650d2663 < < # < # InfiniBand support < # 2653a2667 > CONFIG_INFINIBAND_USER_MEM=y 2660a2675,2677 > CONFIG_INFINIBAND_NES=m > # CONFIG_INFINIBAND_NES_DEBUG is not set > CONFIG_MLX4_INFINIBAND=m 2662c2679 < # CONFIG_INFINIBAND_IPOIB_CM is not set --- > CONFIG_INFINIBAND_IPOIB_CM=y 2669,2671c2686,2688 < CONFIG_INFINIBAND_VNIC=m < # CONFIG_INFINIBAND_VNIC_DEBUG is not set < CONFIG_INFINIBAND_VNIC_STATS=y --- > CONFIG_INFINIBAND_QLGC_VNIC=m > # CONFIG_INFINIBAND_QLGC_VNIC_DEBUG is not set > CONFIG_INFINIBAND_QLGC_VNIC_STATS=y 2687a2705,2706 > CONFIG_EDAC_I3000=m > CONFIG_EDAC_I5000=m 2819a2839 > CONFIG_ECRYPT_FS=m 2978a2999 > # CONFIG_LOCK_STAT is not set 3029a3051,3057 > CONFIG_CRYPTO_API=m > CONFIG_CRYPTO_ALGAPI=m > CONFIG_CRYPTO_AEAD=m > CONFIG_CRYPTO_BLKCIPHER=m > CONFIG_CRYPTO_SEQIV=m > CONFIG_CRYPTO_HASH=m > CONFIG_CRYPTO_MANAGER=m 3030a3059,3060 > CONFIG_CRYPTO_NHMAC=m > CONFIG_CRYPTO_XCBC=m 3038a3069,3072 > CONFIG_CRYPTO_ECB=m > CONFIG_CRYPTO_CBC=m > CONFIG_CRYPTO_CTR=m > CONFIG_CRYPTO_CCM=m 3054a3089 > CONFIG_CRYPTO_AUTHENC=m ---------- Forwarded message ---------- From: Eduardo Grosclaude <eduardo.grosclaude(a)gmail.com> Date: Tue, Sep 23, 2008 at 9:41 PM Subject: ASUS P5GC-MX/1333+ WD SATA To: CentOS mailing list <centos(a)centos.org> Hi, I'm puzzled by an ASUS P5GC-MX/1333 with a WD320AAJS disk. My 5.2 DVD refused to see the hard disk. As the CD happened to have a bad MD5 sum, I assumed this was due to a bad burnt image. Backed off to 5.1. Installation of 5.1 to /dev/sda went OK, then I upgraded by yum to 5.2. But, at the next boot, the new kernel can't see the disk. Only when BIOS IDE Setup is "compatible" I can boot the new kernel. However, the disk shows up as /dev/hdc and performance is noticeably slow. If I choose any other mode, nash complains that any LVM groups can't be found and panics away. I/O in general is terrible. Copying a CDROM to a file with dd renders the machine nearly unusable. The kernel provided in 5.1 can work in the BIOS IDE Setup "enhanced/SATA" and performance is really good. Hdparm when under the current kernel says 3.51 MB/s buffered speed, whereas for the older kernel it claims some 111+ MB/s. I have updated the BIOS ROM to no avail. What am I missing? Is there anything I can do except keep trying kernel updates? TIA -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

1 0

sudo
by centos＠unixplanet.biz 10 Oct '08

10 Oct '08

Hi Biz_User needs to switch to Sales_User, and I tried following in sudoers: Biz_User ALL=(Sales_User) ALL but I get following error when I run sudo su - Sales_User "Sorry, user Biz_User is not allowed to execute '/usr/bin/su - Sales_User' as root on Server_Name" I know that if I add root in allowed users list, I can switch to other user , but in that way user can switch to root as well. %Biz_Users ALL=(Sales_User,root) ALL any better idea ?

3 2

Xboard rpm for CentOS 4
by vandaman2002-rt＠yahoo.co.uk 10 Oct '08

10 Oct '08

Has anyone built an rpm for xboard for CentOS 4? I looked in the EPEL repo, KBS repo and rpmforge but none exist. The KBS repo has gnuchess in testing but what good is gnuchess without xboard? As usual the fedora SRPM for Fedora 6 and Fedora 9 cannot build on CentOS 4- they might build on CentOS 6 but i have no time machine :).

9 18

Installing a new VM on a xen box.
by James B. Byrne 10 Oct '08

10 Oct '08

HW = HPQ DC7700 DuoCore 1.8GHz, 4 x 2GB RAM, 1 x 1TB SATA (AHCI) OS = CentOS-5.2 ix_64 (xen) I am experimenting with Xen and with virtual machines in general for the first time. In consequence I have many questions. However, the one that I wish answered at the moment is simple: Given a DVD containing the CentOS-5.2_Final (i386) distribution mounted at /media/CentOS_5.2_Final on Dom0, what argument do I pass to the "Install Media URL" argument of the "Create a new virtual system" wizard" to install the 32 bit version of CentOS-5.2 onto a vm called test-1? I have tried things like: /media/CentOS_5.2_Final /media/CentOS_5.2_Final/images /media/CentOS_5.2_Final/images/diskboot.img etc. All attempts produce the same negative result. What URL is used to load the 32 bit OS from the dvd? I am a digest subscriber so the favour of a direct copy of any reply to the list is appreciated. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 15

Video driver questions
by Robert Moskowitz 10 Oct '08

10 Oct '08

My OQO has a VIA chipset. From the hwconf: class: VIDEO bus: PCI detached: 0 desc: "VIA Technologies, Inc. CX700M2 UniChrome PRO II Graphics" vendorId: 1106 deviceId: 3157 subVendorId: 1106 subDeviceId: 3157 pciType: 1 pcidom: 0 pcibus: 1 pcidev: 0 pcifn: 0 When I install Centos, I default to the vesa driver, and it operates at the monitor's native 800x480. Of course I want more and to physically scroll the screen to see all of the content (the OQO has slide bars on it that do cause the current active window to scroll). When I change the monitor settings to Generic LCD 1024x768, I get that and 800x600 as an option. If I change the screen resolution to either 800x600 or 1024x768, and log out of X and log back in, my resolution is unchanged at 800x480. So I tried using the VIA driver that comes with Centos. It does not list the CX700, but, you know, give it a try. At first I get errors from X when logging in, finally I get changes to occur, but I am still at 800x480. Selecting 800x600 or 1024x768 mkaes no difference. Below is my /etc/X11/xorg.conf. Any ideas on what to try? # Xorg configuration created by system-config-display Section "ServerLayout" Identifier "single head configuration" Screen 0 "Screen0" 0 0 InputDevice "Keyboard0" "CoreKeyboard" EndSection Section "InputDevice" Identifier "Keyboard0" Driver "kbd" Option "XkbModel" "pc105" Option "XkbLayout" "us" EndSection Section "Monitor" Identifier "Monitor0" ModelName "LCD Panel 1024x768" ### Comment all HorizSync and VertSync values to use DDC: HorizSync 31.5 - 48.0 VertRefresh 56.0 - 65.0 Option "dpms" EndSection Section "Device" Identifier "Videocard0" Driver "vesa" EndSection Section "Screen" Identifier "Screen0" Device "Videocard0" Monitor "Monitor0" DefaultDepth 24 SubSection "Display" Viewport 0 0 Depth 24 EndSubSection EndSection

6 15

More Samba Questions
by Joseph L. Casale 10 Oct '08

10 Oct '08

I have never setup a Samba server, and the recent thread here prompted to get on this I need to migrate two XP machines from using iSCSI to Samba. I thought the "+" preceding a username in the smb.conf file for a share definition told Samba to use the unix username? Unless I actually use swat to create and enable the user and take off the + it doesn't work. Any ideas what swat does when you create a user through that interface? Is there any way to simply force Samba to use locally created users in the share definition? Thanks! jlc

4 7

CentOS-announce Digest, Vol 44, Issue 8
by centos-announce-request＠centos.org 10 Oct '08

10 Oct '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0937 Important CentOS 3 i386 cups - security update (Tru Huynh) 2. CESA-2008:0937 Important CentOS 3 x86_64 cups - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Oct 2008 10:49:24 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0937 Important CentOS 3 i386 cups - security update To: centos-announce(a)centos.org Message-ID: <20081010084924.GB18421(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0937 cups security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0937.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/cups-1.1.17-13.3.54.i386.rpm updates/i386/RPMS/cups-devel-1.1.17-13.3.54.i386.rpm updates/i386/RPMS/cups-libs-1.1.17-13.3.54.i386.rpm source: updates/SRPMS/cups-1.1.17-13.3.54.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update cups Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Firefox3 for CentOS4 -- dependency on evolution28 packages?
by Bart Schaefer 10 Oct '08

10 Oct '08

I'd been putting off installing the FX3 packages because of some extensions I use that don't have upgrades. [*] However, when FX1.5 crashed on me today I decided to finally go ahead. Fired up yum and I'm told I have to install a slew of evolution28 library packages in order to install the firefox package. Why? I removed evolution from my system for a reason, and I'd just as soon it stays gone. [*] Additional off-topic rant: Why was the API access to form history removed from Firefox? Why must I throw away my entire history to get rid of a few typographical errors to reduce the number of bogus field completion choices I'm offered?

5 5

Thunderbird does not follow url links in Firefox
by Theo Band 10 Oct '08

10 Oct '08

Since the recent update from firefox2 to firefox3 the links in my mails do no longer work. No window pops up. After some debug I found the problem. Let's share it with others that experience the same problem: I'm using Thunderbird 2.0.0.17 (manually downloaded, that might have caused the problem, I have not tried with 1.5) I'm using Firefox 3.0.2 (yum installed CentOS 4.7) To solve I created a small wrapper script that unsets LD_LIBRARY_PATH: cat <path>/firefox_wrap #!/bin/bash unset LD_LIBRARY_PATH firefox $@ To start add : user_pref("network.protocol-handler.app.http", "<path>/firefox_wrap"); to ~/.thunderbird/<salt>/prefs.js (or use the advanced config editor) The error message (for those Googling around): /usr/lib/firefox-3.0.2/firefox-bin: /opt/thunderbird-2.0.0.17/libnss3.so: version `NSS_3.12' not found (requiredby /usr/lib/firefox-3.0.2/libxul.so) Cheers, Theo

3 2

find
by tony.chamberlain＠lemko.com 10 Oct '08

10 Oct '08

I am looking for something similar to the windows SEARCH FILES comman with the option "files containing ..." (that is where I can specify a string and it will find all files containing that string -- not just having the string as part of the name but actually containing it in the text). Is there some way to do this?

11 16

[Fwd: Re: [CentOS] Install CentOS-5.0 on HP-ComPaq DC7700 Dual Core]
by James B. Byrne 10 Oct '08

10 Oct '08

---------------------------- Original Message ---------------------------- Subject: Re: [CentOS] Install CentOS-5.0 on HP-ComPaq DC7700 Dual Core From: "James B. Byrne" <byrnejb(a)harte-lyne.ca> Date: Mon, October 6, 2008 12:26 To: cenos(a)centos.org Cc: "John Newbigin" <jnewbigin(a)ict.swin.edu.au> -------------------------------------------------------------------------- On Sun, October 5, 2008 20:39, John Newbigin wrote: > Also make sure you have the latest firmware and set the hard disk mode > in the BIOS to Raid (Which will enable AHCI). > > John. By the time I received this message I had already installed the ia_64 version of CentOS-5.2 with the BIOS set to IDE emulation. If now I change the BIOS to use RAID then the system cannot see the SATA drive at all. Is it possible to change the BIOS setting to RAID and subsequently load the necessary drivers from the boot DVD without having to reinstall the entire system? If so, then what is the procedure? Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 4

Samba 3.0.28/3.0.32
by Spike Turner 09 Oct '08

09 Oct '08

I've looked at the CentOS docs-list as well as the Wiki as I was interested in Samba. On one CentOS box I've got 3.0.32 (the latest bug-fixed version from Samba.org) and on another I've got 3.0.28 (the latest from upstream). The docs look almost the same and the docs refer to security = share. However 3.0.32 comes with a blank smb.conf making it harder to get a secure server up and running. Is there a plan for a quick and dirty guide on the Wiki for setting up Samba with secure settings as well as TDB rather than deprecated settings? In tips and tricks there is http://wiki.centos.org/TipsAndTricks/WindowsShares Without writing a book as someone suggested, a few one-liners could be put together in the wiki. Spike

10 15

rpmforge, perl-dbd-mysql, yum, priorities, centos, and you
by Joe Pruett 09 Oct '08

09 Oct '08

rpmforge has just released a new perl-DBD-mysql for el4 that has an obsoletes against perl-DBD-MySQL and the protectbase yum plugin doesn't grok obsoletes. the priorities plugin does. so if you are having issues with this, install the yum-plugin-priorities first, make sure that the CentOS-Base repo is priority 1 and the rpmforge repo is priority 2 or higher (99 is the default). also, i'd like to suggest that the priorities plugin be made added to the base install and that the centos-base repos be configured with priority 1. it looks like c4 has the priority setting, but c5 doesn't and neither have the plugin installed. it seems like this would create a little more stable setup for people when they start adding other repos.

3 4

Apache Charset vs html file charset
by Spike Turner 09 Oct '08

09 Oct '08

The apache httpd.conf has AddDefaultCharset UTF-8 while the page I'm viewing on my CentOS server is charset=ISO-8859-1 The page appears funny on the browser showing �� Given that apache has the default charset shouldn't it honor it? Why the �� characters? Spike.

3 5

CentOS-announce Digest, Vol 44, Issue 7
by centos-announce-request＠centos.org 09 Oct '08

09 Oct '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0941-04: Low CentOS 2 i386 tzdata enhancement update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Thu, 09 Oct 2008 12:40:17 +1100 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2008:0941-04: Low CentOS 2 i386 tzdata enhancement update To: centos-announce(a)centos.org Message-ID: <48ED6101.7040103(a)ict.swin.edu.au> Content-Type: text/plain; charset=ISO-8859-1; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHEA-2008:0941-04 tzdata enhancement update Files available: tzdata-2008f-1.el2_1.noarch.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin ITS Senior Analyst / Programmer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 44, Issue 7 **********************************************

1 0

How to upgrade GNOME in CentOS?
by Sadaruwan Samaraweera 09 Oct '08

09 Oct '08

Hi, I need to know is there a way to upgrade the current version of GNOME to the newest version ? -- Sadaruwan Samaraweera

8 9

find cont'd 3
by tony.chamberlain＠lemko.com 09 Oct '08

09 Oct '08

Another question about find. I looked at the gnome tool and tried to simulate what it is doing. I can't use it directly because it won't do sed. Basically I want to find all files with a string (except binary) and change it. let STR be the string I am looking for. NEW is new string. I am doing TFIL=/usr/tmp/dummy$$.txt find . -type f | while read fil do grep "$STR" $fil > $TFIL [ $? -eq 0 ] || continue ## does not match if [ "$(cat $TFIL)" = "Binary file $fil matches" ] then continue # Don't operate on binary files fi sed -i "s/$STR/$NEW/g" $fil done (I will have to do something with sed in case there is "/" in the string) Problem is, the grep redefines my stdin so it no longer comes from the list of files that "find" found, and it then terminates after finding the first file. Anyway to "push" stdin on the stack or something before the grep, and "pop" it again afterwards, so it goes back to the list of files found?

1 0

Request for additional patch in CentOS Plus kernel
by Filipe Brandenburger 08 Oct '08

08 Oct '08

Hi, I have an Adaptec eSATA card, model 1225SA: http://www.adaptec.com/en-US/products/Controllers/Hardware/sata/entry/AAR-1… Although the chipset is sata_sil24, it is not recognized by default by the kernel because its PCI ID is different than the ones recognized by this driver on the CentOS kernel. The driver recognizes PCI IDs such as 0x3132, 0x0242, 0x3131, but not 0x0244, which is the one this card has. I found out that it works with the latest kernel, and that the patch to make it work only adds the 0x0244 PCI ID to the list of IDs recognized by the sata_sil24 driver. Here is the patch: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdi… Following the instructions on the Wiki, I built a custom kernel based on the CentOS Plus kernel, but adding this patch. The adapter worked as expected with that kernel. So I ask: Would it be possible to incorporate this patch to the default set of patches applied on the CentOS Plus kernel? I would really appreciate it since that would make it easier for me to keep updated without worrying about the card. Thanks a lot! Filipe

5 7

Question on Wireless Setup
by Ashish Vijaywargiya 08 Oct '08

08 Oct '08

Hello Akemi & Others, Today I reformated my laptop Dell Precision M90 and installed the Fresh version of CentOs 5.2 and then took all the available update. In that update I got Kernel version update and now I am on Kernel-2.6.18-92.1.10.el5.centos.plus. I kept a file iwlwifi-3945-1.ucode into the /lib/firmware/ Now after restarting the computer my computer it is giving the following message on the startup. Bringing up interface wmaster : Determining IP information for wmaster .... SIOCSIFLAGS : Operation not supported. In the network manager it is showing my device i.e Intel Pro 3945 adapter but in the Inactive state. Please give me some suggestion so that I can figure out this problem. Thanks in advance. -- Ashish Vijaywargiya Indore (M.P), India http://en.wikipedia.org/wiki/Indore

5 7

Slightly OT: Dell Poweredge 2850 with 4GB RAM
by Sorin＠Gmail 08 Oct '08

08 Oct '08

Hi all, I got the previously mentioned Dell Poweredge 2850 with 4GB RAM and Perc4e raid controller. Installation went well and the raid is pretty fast even with level 5. However I have another problem now... CentOS 5.2 only sees 256MB RAM. Googling a bit, got me to install kernel-PAE, this went well, but CentOS still sees only 256MB. Googling some more, I found a bios update was suggested and might do the trick. Checking what bios version the server had, revealed it was A02. Upon checking the Dell support site I saw they had a version A07, which I downloaded. The file was in bin format and executable via the CLI. Installation of the A07-version went well too with no errors, and it told me to reboot the machine to activate/start the update. Upon reboot, at post, it said the update failed. Now what?? I'm at a loss here. This is my first Dell Poweredge-server and I lack knowledge in the tricks-department with this one. What do I do now? Knowing the Dell-support, I turn to this list in hope of some useful hints in this matter. Thx for any insights. -- Best Wishes Sorin --------------------------------------------- http://home-skynet.servehttp.com/ Proud member of TEAM OS/2. Mountainbiker [Kona Kilauea - Member of Equipe Les Cafards VTT] Motorcyclist [Honda VFR750F-'97] MCSE, MCP+I, MCP, A+ [Knowledge is power!] --------------------------------------------- () ascii ribbon campaign - against html e-mail /\ MotD: This is an adware tagline. Please visit our sponsors to continue helping the development of this tagline.

10 26

CentOS-announce Digest, Vol 44, Issue 6
by centos-announce-request＠centos.org 08 Oct '08

08 Oct '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2008:0925 CentOS 4 x86_64 openmpi Update (Johnny Hughes) 2. CEBA-2008:0925 CentOS 4 i386 openmpi Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 08 Oct 2008 06:01:19 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0925 CentOS 4 x86_64 openmpi Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <48EC92FF.8050000(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Bugfix Advisory 2008:0925 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0925.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: openmpi11-1.1.5-1.el4_7.i386.rpm openmpi11-1.1.5-1.el4_7.x86_64.rpm openmpi-1.2.7-2.el4_7.i386.rpm openmpi-1.2.7-2.el4_7.x86_64.rpm openmpi-devel-1.2.7-2.el4_7.i386.rpm openmpi-devel-1.2.7-2.el4_7.x86_64.rpm openmpi-libs-1.2.7-2.el4_7.i386.rpm openmpi-libs-1.2.7-2.el4_7.x86_64.rpm src: openmpi11-1.1.5-1.el4_7.src.rpm openmpi-1.2.7-2.el4_7.src.rpm

1 0

Samba 3.0.28/3.0.32
by Spike Turner 08 Oct '08

08 Oct '08

I've looked at the CentOS docs-list as well as the Wiki as I was interested in Samba. On one CentOS box I've got 3.0.32 (the latest bug-fixed version from Samba.org) and on another I've got 3.0.28 (the latest from upstream). The docs look almost the same and the docs refer to security = share. However 3.0.32 comes with a blank smb.conf making it harder to get a secure server up and running. Is there a plan for a quick and dirty guide on the Wiki for setting up Samba with secure settings as well as TDB rather than deprecated settings? In tips and tricks there is http://wiki.centos.org/TipsAndTricks/WindowsShares Without writing a book as someone suggested, a few one-liners could be put together in the wiki. Spike

2 1

AW: Re: [CentOS] ssh error in /var/log/secure
by Marc Rebischke 08 Oct '08

08 Oct '08

>Akemi Yagi wrote: >> >> This has to do with ipv6. >Thanks! >Got it fixed. Hi, Maybe (?) it would be helpful for us all if You would tell us how the Problem was Fixed instead of telling us "Thanks, got it fixed" ;-) P.S. Sorry for the horrible Format of this Mail. But i'm using the lausy M$-Standard-Client on my Mobile-Phone... Regards Marc Rebischke

3 2

How to unsubscribe
by Joey Mendez 08 Oct '08

08 Oct '08

I appreciate all the help I received from this Mailing List. However I am receiving work email to my cell phone now and I am being overwhelmed with the mailing list emails. Can some one let me know how to unsubscribe from this mailing list. Thank you -- Jose Mendez Computer Resource Specialist HNRC 619-543-8090

7 6

Software Raid Expert Needed
by Iulian Badea 07 Oct '08

07 Oct '08

Hello all, I have 2 x 250GB sata disks (sda and sdb). # fdisk -l /dev/sda Disk /dev/sda: 250.0 GB, 250059350016 bytes 255 heads, 63 sectors/track, 30401 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 14939 119997486 fd Linux raid autodetect /dev/sda2 14940 29878 119997517+ fd Linux raid autodetect /dev/sda3 29879 30400 4192965 fd Linux raid autodetect # fdisk -l /dev/sdb Disk /dev/sdb: 250.0 GB, 250059350016 bytes 255 heads, 63 sectors/track, 30401 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdb1 * 1 522 4192933+ fd Linux raid autodetect # cat /proc/mdstat Personalities : [raid1] md2 : active raid1 sdb1[1] sda3[0] 4192832 blocks [2/2] [UU] md1 : active raid1 sda2[1] sda1[0] 119997376 blocks [2/2] [UU] What I want to do: - have on each disk 2 partitions (4gb for swap and the 200gb+ the rest for /) - raid 1 between them This is what I wanted in the beginning, but...I didn't paid attention... What can I do to rebuild it to my needs (without loosing data or reformatting)? Thanks

5 7

Discussion: automount problem in 5.2
by kapil singh 07 Oct '08

07 Oct '08

Hello all, Automount is not working well with centos 5.2, but the same is working nicely with centos 5 . -- Thanks and Regards, Kapil Singh Kushwah Linux System/Network Administrator Hotwax Media Inc. Indore,(M.P) INDIA

6 6

Cebit and Centos
by Didi 07 Oct '08

07 Oct '08

Hey I just read this http://www.linux-magazine.com/online/news/cebit_open_source_linux_magazine_… Maybe Centos want's to try to get a stand. Cheers Didi ---- www.ribalba.de Email / Jabber: ribalba(a)gmail.com Skype : ribalba

6 8

Customizing SELinux Policy
by Alain Reguera Delgado 07 Oct '08

07 Oct '08

Hi Guys, After some moths the server has been running in SELinux Permesive mode ... Some avc: denied messages has been recored ... I thought it was time to go to the next step and set SELinux Enforcing mode in the server ... it is a mail(postfix+cyrus+sasl), web, snmp with mrtg, squid sever with a local TLS configured for webmail access ... I took a look to the Deployment Guide about how to do it ... and tried to build modules with audit2allow from the /var/log/message The modules seem to work fine, because old avc denied messages desappeard ... but some messages like the following appear at /var/log/messages when I do a semodule -i modulename or semodule -r modulename : Oct 5 20:16:11 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:16:11 orion kernel: audit(1223252171.572:8): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:16:41 orion kernel: audit(1223252201.673:9): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbus d_t:s0 msg='avc: received policyload notice (seqno=3) Oct 5 20:16:41 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:16:41 orion kernel: audit(1223252201.676:10): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:17:51 orion kernel: audit(1223252271.462:11): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbu sd_t:s0 msg='avc: received policyload notice (seqno=4) Oct 5 20:17:51 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:17:51 orion kernel: audit(1223252271.464:12): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:19:06 orion kernel: audit(1223252346.208:13): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbu sd_t:s0 msg='avc: received policyload notice (seqno=5) Oct 5 20:19:06 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:19:06 orion kernel: audit(1223252346.211:14): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:19:11 orion kernel: audit(1223252351.331:15): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbu sd_t:s0 msg='avc: received policyload notice (seqno=6) Also, in the /var/log/httpd/ssl_error_log the following messages appear too: [Sun Oct 05 19:58:19 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Sun Oct 05 19:58:19 2008] [warn] RSA server certificate CommonName (CN) `orion.ciget.cienfuegos.cu' does NOT match server nam e!? Really rare to me because that name `orion.ciget.cienfuegos.cu' is the actual server hostname. When try to connect to the webmail through https:// can't connect to it, the browser reports connection failed after a waiting of a few seconds. http:// works as expected. This machine is fully updated in CentOS-5.2. Linux orion.ciget.cienfuegos.cu 2.6.18-92.1.13.el5 #1 SMP Wed Sep 24 19:33:52 EDT 2008 i686 i686 i386 GNU/Linux Could you suggest something ? ... Thank you very much guys, al.

1 1

CentOS-announce Digest, Vol 44, Issue 5
by centos-announce-request＠centos.org 07 Oct '08

07 Oct '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0908 Moderate CentOS 4 s390(x) thunderbird - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Oct 2008 18:44:07 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0908 Moderate CentOS 4 s390(x) thunderbird - security update To: centos-announce(a)centos.org Message-ID: <20081006154407.GD5793(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0908 https://rhn.redhat.com/errata/RHSA-2008-0908.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/thunderbird-1.5.0.12-16.el4.centos.s390.rpm s390x: updates/s390x/RPMS/thunderbird-1.5.0.12-16.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

problem talking to server postgrey/socket: Permission denied
by Dirk H. Schulz 07 Oct '08

07 Oct '08

Hi folks, I have installed postgrey from the rpmforge repo, but it does not work well with postfix from CentOS 5.2: I always get the error: warning: connect to postgrey/socket: Permission denied problem talking to server postgrey/socket: Permission denied But the permissions on the socket seem okay (postfix could write to it): srw-rw-rw- 1 postgrey postgrey 0 4. Okt 14:48 socket I also tried "restorecon -R /var/spool/postfix/postgrey", but that did not change anything, either. Googling does not show anything recent and helpful. Any hint or help is appreciated. Dirk

3 4

vsftpd
by Mad Unix 07 Oct '08

07 Oct '08

Hi ALL I'm using vsftpd as FTP server, and I'd like to chroot my FTP users to their home dir. How can I do it? i.e. "jailing" them in their home dir... at the moment I have the following issues the user when they login to ftp server they go to the main directory /var/ftp/ /etc/passwd ... sdc:x:501:501::/var/ftp/sdc:/bin/bash ase:x:502:501::/var/ftp/ase:/bin/bash jsc:x:503:501::/var/ftp/jsc/:/bin/bash [root@linux10 ftp]# pwd /var/ftp [root@linux10 ftp]# ls -al total 28 drwx--x--x 6 root ftpusers 4096 Oct 6 13:46 . drwxr-xr-x 22 root root 4096 Oct 5 15:42 .. drwx------ 3 ase ftpusers 4096 Oct 6 20:30 ase drwx------ 3 jsc ftpusers 4096 Oct 6 17:27 jsc drwx------ 2 pons pons 4096 Oct 6 16:22 pub drwx------ 5 sdc ftpusers 4096 Oct 6 17:19 sdc chroot_list_enable=YES # (default follows) chroot_list_file=/etc/vsftpd/chroot_list chroot_local_user=YES # # You may activate the "-R" option to the builtin ls. This is disabled by # default to avoid remote users being able to cause excessive I/O on large # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume # the presence of the "-R" option, so there is a strong case for enabling it. #ls_recurse_enable=YES # # When "listen" directive is enabled, vsftpd runs in standalone mode and # listens on IPv4 sockets. This directive cannot be used in conjunction # with the listen_ipv6 directive. listen=YES # # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6 # sockets, you must run two copies of vsftpd whith two configuration files. # Make sure, that one of the listen options is commented !! #listen_ipv6=YES pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES ###added for TLSand SSL permission ssl_enable=YES allow_anon_ssl=NO force_local_data_ssl=NO force_local_logins_ssl=YES ssl_tlsv1=YES ssl_sslv2=YES ssl_sslv3=YES rsa_cert_file=/etc/vsftpd/vsftpd.pem rsa_private_key_file=/etc/vsftpd/vsftpd.pem local_root=/var/ftp #userlist_file=/etc/vsftpd/ftpusers userlist_file=/etc/vsftpd/ftpusers #userlist_file=/etc/vsftpd/user_list pasv_enable=YES anon_max_rate=10485760 local_max_rate=0 max_clients=500 max_per_ip=4 passwd_chroot_enable=YES

1 0

Re: [CentOS] Re: mysqld breaks yum, help?
by Vandaman 07 Oct '08

07 Oct '08

Dac Chartrand wrote: > Yum is broken. > I have the priorities plug-in setup. I did `yum update` before > messing around with 3rd party repositories. The only modules I > installed from the 3rd party sties are PHP related. Isn't there php in the CentOS plus repo? What repo is that you messed about with? ATRPMS or Livna? Regards, Vandaman.

11 29

Eclipse 3.2.1-19 package on Centos 5.2
by Tom [toms400] 06 Oct '08

06 Oct '08

Hi, I'm using Centos 5.2 and trying to use Eclipse's embedded browser without success. Could this be due to any of the patches that were commented out in 3.2.1-18? When trying to use the embedded browser, I get the error: No more handles (java.lang.UnsatisfiedLinkError: no swt-mozilla-gtk-3235 in java.library.path). I have a gre.conf, have set MOZILLA_FIVE_HOME, and LD_LIBRARY_PATH, but continue to get that error. If you have any ideas, I'd be very grateful. Thanks -Tom

2 1

Re: OT: RIP settings for private netblocks
by James B. Byrne 06 Oct '08

06 Oct '08

James B. Byrne wrote: > You can accomplish this much easier by simply using > a firewall. I like OpenBSD firewalls in layer 2 > bridging mode. Put the firewall in-line between the > router and the rest of the network, no other network > changes needed. The difficulty with this is that it requires yet another host, a reconfiguration of the existing wiring plan, and dealing with a number of other issues which directly arise from the first two requirements. We already use IPtables, and we already have some of our older hosts secured behind sshd linux boxes so that network traffic to them is only carried en clair across direct x-wired patch cables. > If your not well versed in routing I wouldn't recommend > going around making a bunch of changes to a system that > I assume has been more or less working for more than > a decade. Which is why I asked the question if by making a single change to the network parameter of the Cisco Router could I avoid: 1. Physically segmenting my LAN 2. Having to commission an additional host or reconfigure an existing host to multi-homed. Routing is something I do not go at very often and I do not trust my memory for such things in consequence. The manuals and books that I have give sketchy coverage of this aspect and use examples much more narrow in scope than I contemplate. It would be a gross over-statement to say that I am unfamiliar with the concepts of routing. But I am asking for specific guidance on specific software (CISCO ISO 12.x) and hardware (CISCO 26xx series) from someone with experience in these matters. I recognize that this is not the precise forum to ask, thus the OT. On the other hand, I trust that my situation cannot be very dissimilar to those faced previously by many system administrators who also happen to run CentOS. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

OT: RIP settings for private netblocks
by James B. Byrne 06 Oct '08

06 Oct '08

I am contemplating converting some of our internal networks from routable to private IPv4 address space. I have a question about RIP as implemented under Cisco IOS 12.x. Presently the setting for rip is: router rip version 2 passive-interface [[FastEthernet]]0/0 network aaa.bbb.ccc.0 no auto-summary What I would like to know is how one routes the entire 192.168/16 address space using rip. My perusal of the various Cisco manuals, technical documents and various O'Rielly books is not giving me any clear answer and I am rather reluctant to experiment on our live Internet connection. Will this do what I imagine it might, treat any address 192.168.x.y or 10.x.y.z as an internal network? router rip version 2 passive-interface [[FastEthernet]]0/0 network aaa.bbb.ccc.0 network 192.168.0.0 network 10.0.0.0 no auto-summary Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 4

need ur kind advice
by fabian dacunha 06 Oct '08

06 Oct '08

Dear All, apprecite ur kind help n advice I have a Centos 5 server running only squid for sometime and its workin great. i am concerned about security so i have a shorewall firewall on the machine runnign squid n works grt now i would like to know the follwing 1) does anyone one know of any good antivirus software i could install on the centos OS squid server so as to scan for viruses so i cd periodically scan the server thnks and apprecite regards fabian -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 3

ejabberd 2.0.2 vs SELinux vs CentOS 5
by Damian S 06 Oct '08

06 Oct '08

Lordy, I've been having problems with this darn thing, so I hope someone can help me. :s My troubles started when I downloaded the latest erlang and ejabberd packages. I crashed and burned very quickly, trying two or three different versions of erlang along with several of ejabberd 2.0.x. Finally, after a week of pain, I admitted defeat, wiped the whole lot and installed the binary on the process-one website. Initially, the binary worked well, but mysteriously stopped working whenever I changed the config file and restarted the file. Anyway, to cut a long story short, I have discovered that SELinux is preventing erlang from accessing its crypto libs. This message appears in the SELinux audit logs: type=AVC msg=audit(1223133076.770:102): avc: denied { execmod } for pid=3878 comm="beam.smp" path="/opt/ejabberd-2.0.2_2/lib/crypto-1.5.2/priv/linux-x86/lib/crypto_drv.so" dev=dm-0 ino=26738869 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file What do I need to do, for selinux to allow this? (Or should I take this question to an SELinux list?) FWIW, ejabberd seems to run fine while selinux is enabled. Its just when starting up, that it needs selinux to stay out of the way.

5 8

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss