- Discuss - lists.centos.org

Re: [CentOS] Ideas for stopping ssh brute force attacks
by Les Bell 23 Jul '08

23 Jul '08

Ned Slider <ned(a)unixmail.co.uk> wrote: >> I don't think anyone is suggesting running SSH on a non-standard port as a sole means of defence << I should hope not, but the point does bear making. >> We should also remember that public/private key authentication is only secure as the host the private key is stored on when keys without passphrases are employed (all too common where users don't want to trade using a password for a passphrase). << Another good point. This is why I strongly recommend the use of ssh-agent (or Pageant for those with a Windows desktop) as a mechanism for minimising the inconvenience of constant prompting for a strong key passphrase. Of course, this has to be coupled with awareness of the need to lock the workstation or unload the keys when leaving the desk. The other piece of the puzzle is agent forwarding, so that I only need to keep a private key on my workstation, even when logging in to a gateway machine and then to a server beyond it. They private key file is always under my local physical control - in fact, the truly paranoid can keep their private keys on a USB device or a smartcard. Using this approach, I can sit at my university office desk, provide a passphrase once when loading a key into the ssh agent, and then connect through firewalls to machines in my home office, with no further prompting or inconvenience and very low probability of the private key being compromised. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Printer recommendations
by Ron Loftin 22 Jul '08

22 Jul '08

Since my old Epson C86 has finally managed to clog up the print heads, I'm in the market for a replacement. I'd like to know what the people on this list are using for printers that are currently available, since we are using versions of CUPS and foomatic that are frozen, and any other issues or "gotchas" that you are aware of. For the replacement printer, I'm considering a color laser printer instead of the inkjets that I've been using, and I'm dithering back and forth over the question of direct-connect or networked printer. Suggestions, warnings, and horror stories are welcome. Thanks in advance. -- Ron Loftin reloftin(a)twcny.rr.com "God, root, what is difference ?" Piter from UserFriendly

7 6

screen detatch
by David Mackintosh 22 Jul '08

22 Jul '08

The man page for screen says that I can create a detatched screen running with a set command in it by doing this: $ screen -dm $command However, it doesn't work. Screen exits without creating the detached screen. If I say $ screen $command ...I get dropped into a screen session running $command as I would expect. What's the magic invocation I'm missing? Also, the next step will be for root to launch said screen session as someone else during boot time; am I asking for trouble by trying it? # su - user -c screen -dmS $Label $command Thanks for any insights or pointers to web resources I can use to learn from. -- /\oo/\ / /()\ \ David Mackintosh | dave(a)xdroop.com | http://www.xdroop.com

4 4

extending 'ProxyTimeout'
by Craig White 22 Jul '08

22 Jul '08

CentOS 5 Using Proxy BalanceMember... <Proxy balancer://mongrel_cluster> BalancerMember http://localhost:3000 BalancerMember http://localhost:3001 BalancerMember http://localhost:3002 </Proxy> and I am having problems with a particular process taking longer than 2 minutes at which point the proxy seems to time out and I get an error. I added: 'ProxyTimeout 600' to the end of httpd.conf but that doesn't seem to have any impact (yes, I restarted httpd) and I'm still timing out in about 2 minutes. Any suggestions? Craig

2 2

harddisc or nfs based install
by Joseph L. Casale 22 Jul '08

22 Jul '08

When choosing either of these methods and using an iso, how does CentOS determine the right iso file to mount? Is there an expected file name format? Thanks! jlc

4 5

Oracle apps form server issue with Piranha Load balancer
by lingu 22 Jul '08

22 Jul '08

Hi all, First of all sorry for writing such a big mail.I am facing problem while implementing Piranha Load balancer on CENTOS 4 for my two oracle 11i application server running on linux. Oracle Real server details Instance Name - test url's - 1 . dev.xxx.com:8004 2 . uat.xxx.com:8004 Architecture - Services installed on dev are 1. Database Server 2.Concurrent Processing Server 3. Administration Server 4. Forms Server 5. Web server And services installed on uat are 1.Web server 2.Form server Note: Form server running on port 9004 on both hosts. Piranha details eth0 192.168.23.2 --- external physical ip eth0:1 192.168.23.3 ---EXTERNAL VIP eth2 192.168.17.125 --internal physical ip eth2:1 192.168.17.121 --INTERNAL VIP Client Network: 192.168.23.0/24 Real Server Network: 192.168.17.0/24 Client are accessing oracle application using VIP of piranha by http://192.168.23.3:8004/ Real server ips, hostname and gateway 192.168.17.16 dev.xxx.com having gateway of piranha Internal vip 192.168.17.121 192.168.17.17 uat.xxx.com having gateway of piranha Internal vip 192.168.17.121 my ipvsadm rule is like below 192.168.23.3:8004 ---->>192.168.17.16:8004 192.168.23.3:8004 ---->>192.168.17.17:8004 For me load balancing is working fine for http://192.168.23.3:8004/ . But once i logged in when ever i tried to browse any Oracle Application Forms then it is giving me error "Failed to connect to the server" uat. xxx.com:9004 Note: Form server running on port 9004 on my both oracle application sever when ever i click on any forms it is trying to connect to uat.xxx.com[which is aliased to the VIP of piranha that is 192.168.23.3 in my client host entry] so it is clearly trying to connect to 192.168.23.3:9004 but there is no service or ipvsadm rule on that vip of piranha for that 9004 port. Note: Telnet to Form server on both oracle apps server is working on 9004 from piranha server. So i created the ipvsadm rules on piranha on same vip on 9004 port like below. 192.168.23.3:9004 ---->>192.168.17.16:9004 192.168.23.3:9004 ---->>192.168.17.17:9004 But i am getting below error on my syslog ################################################################################ Jul 21 20:25:38 testlvs nanny[5064]: starting LVS client monitor for 192.168.23.3:9004 Jul 21 20:25:38 testlvs nanny[5065]: starting LVS client monitor for 192.168.23.3:9004 Jul 21 20:25:43 testlvs pulse[5040]: gratuitous lvs arps finished Jul 21 20:25:47 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short Jul 21 20:25:47 testlvs nanny[5064]: READ from 192.168.17.17:9004 was too short Jul 21 20:25:53 testlvs nanny[5061]: making 192.168.17.16:8004 available Jul 21 20:25:53 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short Jul 21 20:25:53 testlvs nanny[5059]: making 192.168.17.124:80 available Jul 21 20:25:53 testlvs nanny[5062]: making 192.168.17.17:8004 available Jul 21 20:25:53 testlvs nanny[5064]: READ from 192.168.17.17:9004 was too short Jul 21 20:25:59 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short Jul 21 20:25:59 testlvs nanny[5064]: READ from 192.168.17.17:9004 was too short Jul 21 20:26:05 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short Jul 21 20:26:05 testlvs nanny[5064]: READ from 192.168.17.17:9004 was too short Jul 21 20:26:11 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short Jul 21 20:26:11 testlvs nanny[5064]: READ from 192.168.17.17:9004 was too short Jul 21 20:26:17 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short Jul 21 20:26:17 testlvs nanny[5064]: READ from 192.168.17.17:9004 was too short Jul 21 20:26:23 testlvs nanny[5065]: READ from 192.168.17.16:9004 was too short ################################################################################ I am not able to see any thing for 9004 whenever i try ipvsdam -L. So i need some one help to solve this issue,i am facing problem only with forms rest of all of my other apps are working fine under piranha.Also forms are working fine whenever i bypassed piranha server. Regards, lingu

1 0

RE: [CentOS] sticky folder permissions
by Bowie Bailey 22 Jul '08

22 Jul '08

Tom Brown wrote: > > What are the applications? What is the directory structure? Is the > > permission problem on a directory or a file? What user account owns > > the application process? Is the app un-doing your manual permission > > changes on existing files and directories, or just not granting > > read permission to new objects? > > > > > > in house apps running out of /opt/<appname> and logging into > /opt/<appname>/logs and are running as user <appname> > > need to have world read on /opt/<appname>/logs > > when permissions are 'manually' set when the app is redeployed it > seems that the world read is removed (i am investigating why this is) If it is the permissions on the directory that are the problem, then you may be able to change the owner of the logs directory and then give the application rw permissions. That way the application will be able to write its logs, but would not be able to change permissions on the directory. -- Bowie

2 1

sticky folder permissions
by Tom Brown 22 Jul '08

22 Jul '08

Hi I have a situation where i need to blanketly allow read permissions on /opt to any user at all. I have some bad behaving apps though that seem to overwrite these permissions and do not set world read on their log directories. Is there any way i can make /opt world readable and make sure these permissions stick to all subfolders and not allow users other than root/sudo to change them? thanks

4 5

wireshark install did not seem to work
by Robert Moskowitz 22 Jul '08

22 Jul '08

I needed wireshark on a test system; I had not installed it at setup time. So I did a yum install wireshark This seemed to have worked, but there is no executable that I can locate, and wireshark in not in the gnome panel. So I looked at a system were I had installed wireshark intitally, and I see a symlink for it in /usr/bin to consolehelper. What do I do to get wireshark working?

2 2

Peter Kastegård is out of the office.
by Peter.Kastegard＠cygrids.com 22 Jul '08

22 Jul '08

I will be out of the office starting Fri 07/18/2008 and will not return until Mon 09/01/2008. If you have any questions or technical issues please contact the support at support(a)cygrids.com or call +46-(0)413-19280. Cheers, //Peter

1 0

Swatch monitor for inactivity?
by Sean Carolan 22 Jul '08

22 Jul '08

I would like to use swatch to tail a log file for "PageTurnEvent", and if this is not seen in the past 15 minutes then a restart script should be run. Does anyone know if this is possible with the swatch program?

3 3

OCI
by Mad Unix 22 Jul '08

22 Jul '08

Am running centos5 , I want to compile my apache with php to support the following './configure' '--with-apxs2=/usr/local/apache/bin/apxs' '--with-mysql=/usr/local/mysql' '--with-zlib-dir=/usr/lib/' '--enable-versioning' '--enable-track-vars=yes' '--enable-url-includes--enable-sysvshm=yes' '--enable-sysvsem=yes' '--with-gettext' '--enable-mbstring' '--enable-ftp' '--enable-calendar' '--with-config-file-path=/etc' '--with-oci8=/u01/app/oracle/product/10g/db' '--enable-soap' '--with-gd' '--enable-xml' '--with-xml' '--enable-sysvsem' '--enable-sysvshm' '--enable-sysvmsg' '--with-regex=system' '--with-png' '--with-ttf=/usr/lib' '--with-freetype=/usr/lib' '--enable-sigchild' '--with-openssl' '--with-iconv' My current Config: './configure' '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--cache-file=../config.cache' '--with-libdir=lib64' '--with-config-file-path=/etc' '--with-config-file-scan-dir=/etc/php.d' '--disable-debug' '--with-pic' '--disable-rpath' '--without-pear' '--with-bz2' '--with-curl' '--with-exec-dir=/usr/bin' '--with-freetype-dir=/usr' '--with-png-dir=/usr' '--enable-gd-native-ttf' '--without-gdbm' '--with-gettext' '--with-gmp' '--with-iconv' '--with-jpeg-dir=/usr' '--with-openssl' '--with-png' '--with-pspell' '--with-expat-dir=/usr' '--with-pcre-regex=/usr' '--with-zlib' '--with-layout=GNU' '--enable-exif' '--enable-ftp' '--enable-magic-quotes' '--enable-sockets' '--enable-sysvsem' '--enable-sysvshm' '--enable-sysvmsg' '--enable-track-vars' '--enable-trans-sid' '--enable-yp' '--enable-wddx' '--with-kerberos' '--enable-ucd-snmp-hack' '--with-unixODBC=shared,/usr' '--enable-memory-limit' '--enable-shmop' '--enable-calendar' '--enable-dbx' '--enable-dio' '--with-mime-magic=/usr/share/file/magic.mime' '--without-sqlite' '--with-libxml-dir=/usr' '--with-xml' '--with-system-tzdata' '--with-apxs2=/usr/sbin/apxs' '--without-mysql' '--without-gd' '--without-odbc' '--disable-dom' '--disable-dba' '--without-unixODBC' '--disable-pdo' '--disable-xmlreader' '--disable-xmlwriter' How can I add the support of OCI8 to bind it with Oracle10g? since my Apache server run with Oracle10g DB... -- Your search - madunix - did not match any documents.

6 9

Personal Wiki for CentOS
by Joseph L. Casale 22 Jul '08

22 Jul '08

For ages I have been keeping docs and notes in Public Folders inside an Exchange server and want to move this out to a more modern facility that allows tagging and searching via a web interface for keywords so I can keep all my notes more organized. Anyone have any personal recos for the slickest system to do this with. Given the nature of my home setup, its routinely used to lab stuff up so I would want something that can be easily migrated to a new install if need be. Thanks! jlc

9 10

RE: [CentOS] Personal Wiki for CentOS
by Bowie Bailey 21 Jul '08

21 Jul '08

Joseph L. Casale wrote: > For ages I have been keeping docs and notes in Public Folders inside > an Exchange server > and want to move this out to a more modern facility that allows > tagging and searching via > a web interface for keywords so I can keep all my notes more > organized. > > Anyone have any personal recos for the slickest system to do this > with. Given the nature of my home setup, its routinely used to lab > stuff up so I would want something that can be easily migrated to a > new install if need be. I use MoinMoin. http://moinmoin.wikiwikiweb.de/ -- Bowie

2 1

Re: [CentOS] Ideas for stopping ssh brute force attacks
by Les Bell 21 Jul '08

21 Jul '08

"Lanny Marcus" <lmmailinglists(a)gmail.com> wrote: >> The above link is mostly dead. The data isn't there yet. << I did a write-up on generating SSH keys on both Windows and Linux, along with some additional tips on OpenSSH configuration. It's at http://www.lesbell.com.au/Home.nsf/web/SSH+for+Server+Administration?OpenDo… if anyone needs it. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Re: [CentOS] Ideas for stopping ssh brute force attacks
by Les Bell 21 Jul '08

21 Jul '08

"Bo Lynch" <blynch(a)ameliaschools.com> wrote: >> Just wanted to know if anyone had any experience with anything like these programs or have any other advice. << No need for any add-ons. Just do two things: 1. Disable password logins. In /etc/ssh/sshd_config, add PasswordAuthentication no Now you will have to authenticate by private key, but that's always been the best idea, anyway. Now the script kiddies can bang on your system all day and they won't get anywhere. 2. If the bandwidth they're wasting continues to annoy you, then rate-limit connections to the ssh port. Using the default firewall config in /etc/sysconfig/iptables, add this: # Rate limit connections to port 22 to slow SSH brute force attacks -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -m limit --limit 1/minute -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -m recent --set -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -m recent --update --seconds 180 --hitcount 3 -j DROP Then restart the iptables service. That'll slow them right down, if they can even figure out what's going on. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

copy
by Mad Unix 21 Jul '08

21 Jul '08

I want to copy all the following files/folder/subfolders under /usr/local/apache/htdocs to a remote server within this directory /var/www/html/ Am I correct with this command, or far away offff tar zcvf - /usr/local/apache/htdocs | ssh root(a)1.2.3.4 "cat > /var/www/html/htdocs.tar.gz" Thanks -- Your search - madunix - did not match any documents.

4 5

ps to pdf
by Craig White 21 Jul '08

21 Jul '08

I need a way to convert files that I save with Firefox as a 'print to file' to 'pdf' I tried 'convert' but that rendered the text as graphics which grew the file and wasn't what I wanted. How would someone accomplish this - or can I just print to a PDF? Craig

7 8

perl module to parse httpd log on C5
by Mark Pryor 21 Jul '08

21 Jul '08

hello, Looking for alternative ideas to parse the combined Apache log: /var/log/httpd/access_log (is how I named it) What I've tried so far is a CPAN search, which pointed me to a recently created module called ApacheLog::Parser >From the C5 shell, I used something like this (heavily refined from how I started) ---------- sh script --------- #rpm --import http://download.fedora.redhat.com/pub/epel/RPM-GPG-KEY-EPEL yum install ncftp --disablerepo=\* --enablerepo=epel yum -y install perl-Test-Pod \ perl-YAML \ perl-Test-Pod-Coverage \ perl-Class-Accessor \ perl-IPC-Run \ perl-Time-modules \ perl-DateTime \ perl-Date-Simple perl -MCPAN -e 'install Class::Accessor::Classy' perl -MCPAN -e 'install Time::Piece' perl -MCPAN -e 'install Date::Piece' perl -MCPAN -e 'install File::Fu' # yum install perl-IPC-Run3 perl -MCPAN -e 'install Getopt::Helpful' perl -MCPAN -e 'install ApacheLog::Parser' ------------------ end snip ----------- the above worked on a fresh install of C5.2 with a LAMP setup. CPAN asked for ncftp in its setup. I must have tried 50-60 commands before I settled on the abbreviated version above. As an exercise, I took a shot at using cpan2rpm to package the tar.gz's into RPM's the resulting RPM's are here: http://www.tlviewer.org/fostats they are signed with my RPM-GPG key http://www.tlviewer.org/centos/RPM-GPG-KEY-mpryor.txt -- Mark

1 0

configuration request
by Sam Drinkard 21 Jul '08

21 Jul '08

I've apparently gotten myself into somewhat of a bind. I've been trying to exclude various packages from the different repos, and while I *think* I've gotten a working configuration again, it it still pulling stuff in that I have excluded I think in the right repos, but things I have no use for whatsoever. Items like kernel-hugemem-devel, kernel-hugemem, and anything involving kernel development. I run a stock kernel and am not doing any building of any kind at this point. The machine is an i-686 machine, and a single processor. I'd be very much appreciative if someone could send me,, or post a proper repo config that points to the various exclude lines to get rid of some of the unnecessary files. It's taken me about 2 hours of modifying stuff to finally get a yum repo config to make it all the way thru. Any type of help here would be great! Thanking you in advance, Sam

5 9

recommended repo for php 5.2.3 +
by dnk 21 Jul '08

21 Jul '08

Good day all, I have been searching on google for the recommended repo for php 5.2.3 + for centos... I saw at one point it was in the testing repo, but was pulled due to no one testing it. Is there a recommended repo that people feel is safe for a CentOS 5.x to get php 5.23 + ? I know i can compile and install, but i like to keep as "vanilla" as possible. Thanks in advance. Dustin

2 2

where is printconf-tui on CENTOS 5.2 (migrate printer configuration)????
by mcclnx mcc 21 Jul '08

21 Jul '08

we are migrated CENTOS from 4.X to 5.2 on seperate DELL servers. For printer definition migrate on CENTOS 4.X , we can use following command: printconf-tui --Ximport < printers.xml I can not find "printconf-tui" command on CENTOS 5.2. Does anyone know how to migrate printer configuration on CENTOS 5.2? Thanks. _______________________________________________________________________________________________________ 總會在某些時刻，突然想起舊情人？他現在過得還好嗎？ http://sev.search.yahoo.net

2 1

Kernels From CentOS Plus
by Bob Taylor 21 Jul '08

21 Jul '08

I found I have the following kernels installed last night: kernel-devel-2.6.18-53.1.21.el5 kernel-headers-2.6.18-92.1.6.el5.centos.plus kernel-devel-2.6.18-92.1.6.el5 kernel-2.6.18-53.1.21.el5 kernel-2.6.18-92.1.6.el5.centos.plus kernel-2.6.18-92.1.6.el5 kernel-devel-2.6.18-92.1.6.el5.centos.plus Evidently I have a wrong priority for centos plus? I have the priority in every item in CentOS-base.repo set to 1. I *think* the kernel in centos plus was a special one. Thanks, Bob -- Bob Taylor

2 4

Memory for crash kernel
by Mad Unix 21 Jul '08

21 Jul '08

when I run dmesg PE2950 Dell Server I see the following line Linux version 2.6.18-92.1.6.el5 (mockbuild(a)builder15.centos.org) (gcc version 4.1.2 20071124 (Red Hat 4.1.2-42)) #1 SMP Wed J un 25 13:45:47 EDT 2008 Command line: ro root=/dev/VolGroup00/LogVol00 rhgb quiet BIOS-provided physical RAM map: BIOS-e820: 0000000000000000 - 00000000000a0000 (usable) BIOS-e820: 0000000000100000 - 00000000cfb50000 (usable) ..... BIOS-e820: 0000000100000000 - 0000000230000000 (usable) DMI 2.5 present. ACPI: RSDP (v002 DELL ) @ 0x00000000000f21c0 ACPI: XSDT (v001 DELL PE_SC3 0x00000001 DELL 0x00000001) @ 0x00000000000f225c ACPI: FADT (v003 DELL PE_SC3 0x00000001 DELL 0x00000001) @ 0x00000000cfb83524 .............0000000cfb6a974 ACPI: EINJ (v001 DELL PE_SC3 0x00000001 DELL 0x00000001) @ 0x00000000cfb6a9a4 ACPI: TCPA (v001 DELL PE_SC3 0x00000001 DELL 0x00000001) @ 0x00000000cfb834bc ACPI: DSDT (v001 DELL PE_SC3 0x00000001 INTL 0x20050624) @ 0x0000000000000000 No NUMA configuration found Faking a node at 0000000000000000-0000000230000000 Bootmem setup node 0 0000000000000000-0000000230000000 Memory for crash kernel (0x0 to 0x0) notwithin permissible range ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ any input about this issue? -- Your search - madunix - did not match any documents.

4 4

Boot from iso file (xen)
by Sergio Belkin 21 Jul '08

21 Jul '08

Hi, I don't remember how to boot from iso file. My current config file is: name = "devel" uuid = "4223e2e8-a3a7-91a7-aabf-e7b9f6f8a4a8" maxmem = 256 memory = 256 vcpus = 1 boot= "d" on_poweroff = "destroy" on_reboot = "restart" on_crash = "restart" vfb = [ "type=vnc,vncunused=1,keymap=en-us" ] disk = [ "phy:/dev/xen/devel,xvda,w", 'file:/tmp/mindi.iso,hdc:cdrom,r' ] vif = [ "mac=00:16:3e:19:63:7f,bridge=xenbr0" ] cdrom = "/tmp/mindi.iso" EOF Please, could you help me about it? I use Centos 5 + xen-3.0.3-41.el5_1.6. Thanks in advance!! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

1 0

crontab for nobody
by Anne Wilson 21 Jul '08

21 Jul '08

Every day I see this in chkrootkit's log - Checking `crontab'... Warning: crontab for nobody found, possible Lupper.Worm... not infected I know I met this once before, but I can't remember whether there is any cure for it. It doesn't seem possible to remove nobody in kcron, and there are no tasks set. What could/should I do about it? Anne

8 20

Nautilus Behavior
by Michael A. Peters 21 Jul '08

21 Jul '08

In CentOS 5.1 - if I had a folder open on my desktop on one worskspace screen and I was in another workspace, and I double clicked the folder icon on my desktop, it would bring the open folder to my current workspace. In CentOS 5.2 it does not do that. I can't find a setting to change the behavior to what I like. Any suggestions?

1 0

OT - Windows slowdown?
by MHR 20 Jul '08

20 Jul '08

I know this isn't the right forum for this (do I ever!), but you-all know so much about everything I thought I'd ask. About two months ago I resurrected my daughter's Compaq laptop (cracked screen - replaced it) and ran an update on it. It's running Windows XP, SP1 (I think), but since the update it has run about 1/3 as fast as it used to. Does anyone know if there was a WXP update that killed performance on laptops? None of my other XP installs, SP1 or SP2, suffers from this. (Actually, I should say "their other" 'cuz I don't use Windows unless I can't avoid it, and then I try to do it on my WXP VM where it's still relatively safe.) Thanks. mhr

16 25

moving software RAIDed disks to other machine
by Kai Schaetzl 20 Jul '08

20 Jul '08

I just replaced two md-raided (RAID1) disks with bigger ones and decided to check out how far I get with them when I put them in another machine. The kernel boots and then panics when it wants to mount the root filesystem on the disk. md: Autodetecting RAID arrays md: autorun md: autorun DONE < not sure if this means it was successful or failed, I rather think it failed because it doesn't list any md devices? > Creating root device Mounting root filesystem EXT3-fs: unable to read superblock I pxe-booted in rescue mode. Interestingly, the rescue mode detects and mounts the RAID partitions just fine and mdadm sees them all as healthy. It mounts them under /tmp/md0 and /tmp/md1. Shouldn't the installed system be able to do the same, mount under /dev/md0 and /dev/md1 and then find root on /dev/md1 as told by grub.conf? Or could it be that the installed system also mounts them under /tmp? I'm not sure how I can troubleshoot this. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

2 2

Send smtp email with mailx on centos
by Miguel A. Velasco 20 Jul '08

20 Jul '08

Hi all, I´d like to know what may I configure to send emails from my server with mailx please. I need to send mails to my email adress (name(a)mydomain.com) with logs and I am not able to do. Best regards and thanks for your time, Miguel

3 2

Cannot boot from DVD on an Intel Svr to install CentOS 5.2
by saltorres＠lvcoxmail.com 20 Jul '08

20 Jul '08

Hi, I'm new to CentOS and I want to install CentOS 5.2 on an intel computer to use it as a server. I downloaded the CentOS 5.2 DVD iso i386 and did the md5sum, burned the DVD and everything was Ok but when I try to boot the server with the DVD, it simply does nto boot, like if nothing were in the DVD drive. I tried with a Vista DVD and it boots. It can even boot from the LiveCD. Have anybody seen this behavior and how to solve it? I'm using Free Create/Burn ISO from NBXSOFT and I believe this is not the problem because with this software I created the LiveCD. I'm working on a Vista Ultimate computer to download, checksum and burn the DVD. Thanks

4 5

Exploit 'in the wild' for Trixbox
by Nigel Kendrick 20 Jul '08

20 Jul '08

Just in case anyone else needs to know - there's an exploit 'in the wild' for Trixbox (which is CentOS based) that allows malicious code to be installed on a server. I discovered that one of my Trixbox servers was running 3 instances of a perl-based IRC botnet process called httpdse and this was pegging the CPU at 100%. Notes, comments, removal instructions, patches etc. here: http://trixbox.org/forums/trixbox-forums/open-discussion/critical-remote-roo t-exploit-trixbox-wild Guess that teaches me not to open the Trixbox Web interface to the world. Regards, Nigel Kendrick

1 0

Plone
by David Hláčik 20 Jul '08

20 Jul '08

Hello, is someone using Plone on CentOs 5.2? What is the best way to install lastest version? Using their unified installer? Thanks in advance! D.

2 2

Disable hid debug
by Mag Gam 20 Jul '08

20 Jul '08

Just compiled a kernel. And I have hid-debug enabled. Whenever I move the mouse or type anything on the keyboard I get all action messages on the console. How can I disable this? TIA

1 0

CD Vendors List Submission
by David Latham 19 Jul '08

19 Jul '08

Hi CentOS List, I was wondering if the "cdvendors(a)centos.org" is still being looked after. I submitted a request to have my on-line store added about a month ago but heard nothing back. Have recently resubmitted my request and, although I haven't waited all that long, I thought I would ask the question here. Thanks for your time, Regards David Latham http://www.thelinuxcdstore.com

1 0

CentOS-announce Digest, Vol 41, Issue 10
by centos-announce-request＠centos.org 19 Jul '08

19 Jul '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0598 Critical CentOS 4 s390(x) firefox - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 18 Jul 2008 15:45:06 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0598 Critical CentOS 4 s390(x) firefox - security update To: centos-announce(a)centos.org Message-ID: <20080718124506.GB31936(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0598 https://rhn.redhat.com/errata/RHSA-2008-0598.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/firefox-1.5.0.12-0.21.el4.centos.s390.rpm s390x: updates/s390x/RPMS/firefox-1.5.0.12-0.21.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Howto: Java Plugin for Firefox 3.0.1?
by James B. Byrne 19 Jul '08

19 Jul '08

Can anyone here give me the magic decoder ring recipe for getting jre "plugged" into Firefox 3.0.1? The plugins directory is gone and the Firefox FAQ regarding this issue cryptically mentions that plugin support has been dropped. It then points one to a early adopter SUN jre1.6-10 page that has innumerable dependencies which my version of CentOS-5.2 does not meet. Firefox 3.0.0 had a plugins directory and it did support the logical link plugin: ls -s libjavaplugin_oji.so /usr/java/default/plugin/i386/ns7/libjavaplugin_oji.so I have no clue how to get java to work in FF3.0.1 at the moment. Any help would be appreciated. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Re: [CentOS] Getting printer to work under 5.2
by Donald Buchan 19 Jul '08

19 Jul '08

Yes on both counts. That's where I was dealing with the parts about the one-dependancy-mentionned-at-a-time part. No luck, hence the reason for uninstalling it and reverting to the yum repository. > From: Anne Wilson <cannewilson(a)googlemail.com> > Subject: Re: [CentOS] Getting printer to work under 5.2 > To: CentOS mailing list <centos(a)centos.org> > Message-ID: <200807171028.02611.cannewilson(a)googlemail.com> > Content-Type: text/plain; charset="utf-8" > > On Thursday 17 July 2008 04:04, Donald Buchan wrote: > > I have a standard hplip install on my 5.2 box installed from the repos > > (it originally was installed from the 5.1 disks and followed any upgrade > > that may have occured in the transition to 5.2). My printer is a HP > > Deskjet F4180 connecting via USB. > > Did you run hp-setup (as root, of course)? > > Anne

3 4

semi OT: logwatch results
by Robert - elists 19 Jul '08

19 Jul '08

Semi Off Topic My searching hasn't found what I consider superior info, and we are wondering from others experience on this list... In the logwatch results we all see the info below on almost a daily basis I have taken the liberty of combining logwatch results from centos 4 and 5 machines for extra info and future searchability ----- Centos 4 ----- --------------------- httpd Begin ------------------------ GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s) 404 1 responses GET http://thecric.free.fr/AZenv/azenv.php HTTP/1.1 with response code(s) 404 1 responses ----- Centos 5 ----- --------------------- httpd Begin ------------------------ Requests with error response codes http://scifi.pages.at/myproxies/azenv.php: 2 Time(s) http://thecric.free.fr/AZenv/azenv.php: 2 Time(s) GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s) 404 3 responses GET http://thecric.free.fr/AZenv/azenv.php: 2 Time(s) HTTP/1.1 with response code(s) 404 3 responses Is it like people are setting up servers to do advertising in our logs while looking for some vulnerabilities? Thanks in advance for your insight... :-) - rh

3 2

How to examine crash dump of Centos Kernel
by Nataraj 19 Jul '08

19 Jul '08

Hi, I have been able to successfully use crash to examine a crash dump of kernel-PAE-2.6.18-92.1.6.el5 using the following command: crash /boot/System.map-2.6.18-92.1.6.el5PAE /usr/lib/debug/lib/modules/2.6.18-92.1.6.el5PAE/vmlinux ./vmcore I then installed the package kernel-debug-2.6.18-92.1.6.el5 and rebooted with that (there is no PAE debugging kernels in the repository). I reproduced my crash and collected a crash dump, however when I try to examine the dump I get the following error: crash /boot/System.map-2.6.18-92.1.6.el5debug /usr/lib/debug/lib/modules/2.6.18-92.1.6.el5/vmlinux ./vmcore crash: v2 module syment space malloc (2005518689 symbols): Cannot allocate memory I have used ulimit in the shell to set all of the limits to unlimited and I still continue to have this problems. Any ideas? Is it possible that I would need a 64 bit OS in order to examine a 4gb crash dump with symbols and debugging information? I have the following kernel-debuginfo packages installed: kernel-debuginfo-common-2.6.18-92.1.6.el5 kernel-PAE-debuginfo-2.6.18-92.1.6.el5 kernel-debuginfo-2.6.18-92.1.6.el5 I am running CentOS 5.2 on a dual Xeon Server with 4gb of memory. Thanks, Nataraj

1 0

Setting max limits in /etc/security/limits.conf
by Dr R L Oswald 18 Jul '08

18 Jul '08

2 1

2 questions on diskless client setup.
by centos＠mjt1.com 18 Jul '08

18 Jul '08

Using Centos 5.2 upgraded from 5.0 using yum on a couple of old Dells in a lab environment. I don't think hardware is part of the problem, just need configuration help. 1: I can boot the diskless client and it come up, but when I do a "mount" command on the client, the output is indistinguishable from the output of the mount command on the server. Currently the fstab in .../root and .../snapshot/<diskless client name> have no entries in them. I set this up using the "how-to" from the Centos web site, I might be missing something. I was wondering if someone could point me to information on how NFS mounts and fstab files work as well as how the "root" and "snapshot" directories work. I'm guessing that snapshot is where you set up the unique personality of each client, while "root" is global to all clients, but I would like info on how it all works together. I could continue to guess and try to figure it out on my own, but my experience has shown that I might get a working solution that is NOT the best. 2: I am running NFS4. I also set up all the diskless clients in an /export directory that is shared with several other exported directories (its a lab, so the devices do double or triple duty). My export file has /exports with the "fsid=0" flag. So, when I mount, I don't have to have "/exports" in the directory string. All is fine until the initial mount done by netboot(?), it issues the first mount command with "/export/diskless/i386/centos5.2/" as the directory string and fails. To work around this, I put a link in that links /export to /export/export and exported /export/export. UGLY I know, but it was the work around I discovered. Anyone know a better way of dealing with this?

1 0

configuration request
by Sam Drinkard 18 Jul '08

18 Jul '08

I've apparently gotten myself into somewhat of a bind. I've been trying to exclude various packages from the different repos, and while I *think* I've gotten a working configuration again, it it still pulling stuff in that I have excluded I think in the right repos, but things I have no use for whatsoever. Items like kernel-hugemem-devel, kernel-hugemem, and anything involving kernel development. I run a stock kernel and am not doing any building of any kind at this point. The machine is an i-686 machine, and a single processor. I'd be very much appreciative if someone could send me,, or post a proper repo config that points to the various exclude lines to get rid of some of the unnecessary files. It's taken me about 2 hours of modifying stuff to finally get a yum repo config to make it all the way thru. Also, can I perhaps just yum erase some of the software I never use, like seamonkey and probably others so it does not even have to look for updates for those packages? Would that be the proper way to eliminate the fluff? Any type of help here would be great! Thanking you in advance, Sam

1 0

configuration request
by Sam Drinkard 18 Jul '08

18 Jul '08

I've apparently gotten myself into somewhat of a bind. I've been trying to exclude various packages from the different repos, and while I *think* I've gotten a working configuration again, it it still pulling stuff in that I have excluded I think in the right repos, but things I have no use for whatsoever. Items like kernel-hugemem-devel, kernel-hugemem, and anything involving kernel development. I run a stock kernel and am not doing any building of any kind at this point. The machine is an i-686 machine, and a single processor. I'd be very much appreciative if someone could send me,, or post a proper repo config that points to the various exclude lines to get rid of some of the unnecessary files. It's taken me about 2 hours of modifying stuff to finally get a yum repo config to make it all the way thru. Also, can I perhaps just yum erase some of the software I never use, like seamonkey and probably others so it does not even have to look for updates for those packages? Would that be the proper way to eliminate the fluff? Any type of help here would be great! Thanking you in advance, Sam

1 0

Re-initialized luci database
by Lopez, Denise 18 Jul '08

18 Jul '08

Hi all, I was just wondering if there was a way to re-initialize a luci database installation. I am trying to setup a 2 node cluster and keep getting "error retrieving batch xxxxxxx information" Also noticed a "Configuration Version" error so I wanted to recreate the luci database and start over. Thanks in advance. Denise Lopez UCLA - Center for Digital Humanities Network Services Linux Systems Engineer 337 Charles E. Young Drive East PPB 1020 Los Angeles, CA 90095-1499 310/206-8216

1 0

Re: [CentOS] semi OT: logwatch results
by Brent L. Bates 18 Jul '08

18 Jul '08

We've been seeing the same type of entries in our Web server logs for at least a couple months now and not just a few entires. It isn't just `azenv.php', but references to other PHP files that do not exist on our systems. They've hit some of our servers so hard I figured it must be some kind of attempt to break in or a weird kind of DOS attack. -- Brent L. Bates (UNIX Sys. Admin.) M.S. 912 Phone:(757) 865-1400, x204 NASA Langley Research Center FAX:(757) 865-8177 Hampton, Virginia 23681-0001 Email: B.L.BATES(a)larc.nasa.gov http://www.vigyan.com/~blbates/

1 0

Yum strangeness
by Sam Drinkard 18 Jul '08

18 Jul '08

Hi all, I was about to do an update on my server, but looking at what the output was and here's the output from the beginning with other parts left off. I currently don't even have the clamav server installed, but am using the 0.93 version of clamav-milter. I've never seen yum throw in so many packages that aren't even installed. I understand the dependencies has to be met, and such, but why is yum trying to install older version of clamav? Perhaps I missed something, but don't think so. Many thanks, Sam Here is the output from yum update ============================================================================= Package Arch Version Repository Size ============================================================================= Installing: clamav-data i386 0.88.2-2.el4.kb kbs-CentOS-Extras 4.1 M replacing clamav-db.i386 0.93.1-1.el4.rf clamav-server i386 0.88.2-2.el4.kb kbs-CentOS-Extras 48 k replacing clamd.i386 0.93.1-1.el4.rf kernel i686 2.6.9-67.0.20.EL update 12 M kernel-devel i686 2.6.9-67.0.20.EL update 3.9 M Updating: autofs i386 1:4.1.3-231.el4_6.2 update 264 k bind i386 20:9.2.4-28.0.1.el4 update 581 k bind-chroot i386 20:9.2.4-28.0.1.el4 update 35 k bind-libs i386 20:9.2.4-28.0.1.el4 update 567 k bind-utils i386 20:9.2.4-28.0.1.el4 update 141 k bluez-libs i386 2.10-3 update 39 k bluez-utils i386 2.10-2.4 update 150 k caching-nameserver noarch 7.3-3.0.1.el4_6 update 22 k clamav i386 0.93.3-1.el4.rf rpmforge 1.3 M clamav-milter i386 0.93.3-1.el4.rf rpmforge 76 k firefox i386 1.5.0.12-0.21.el4.centos update 15 M freetype i386 2.1.9-8.el4.6 update 764 k freetype-devel i386 2.1.9-8.el4.6 update 533 k kernel-hugemem-devel i686 2.6.9-67.0.20.EL update 3.9 M kernel-smp-devel i686 2.6.9-67.0.20.EL update 3.9 M openldap i386 2.2.13-8.el4_6.5 update 237 k openldap-clients i386 2.2.13-8.el4_6.5 update 121 k openldap-devel i386 2.2.13-8.el4_6.5 update 1.3 M perl-Compress-Raw-Zlib i386 2.011-1.el4.rf rpmforge 158 k perl-IO-Compress-Base noarch 2.011-1.el4.rf rpmforge 55 k perl-IO-Compress-Zlib noarch 2.011-1.el4.rf rpmforge 140 k php i386 4.3.9-3.22.12 update 1.3 M php-ldap i386 4.3.9-3.22.12 update 36 k php-mysql i386 4.3.9-3.22.12 update 37 k php-pear i386 4.3.9-3.22.12 update 481 k procps i386 3.2.3-8.9.el4_6.1 update 189 k seamonkey i386 1.0.9-16.4.el4.centos update 8.7 M seamonkey-nspr i386 1.0.9-16.4.el4.centos update 101 k seamonkey-nss i386 1.0.9-16.4.el4.centos update 745 k selinux-policy-targeted noarch 1.17.30-2.150.el4 update 125 k Installing for dependencies: clamav-lib i386 0.88.2-2.el4.kb kbs-CentOS-Extras 144 k Updating for dependencies: clamav-db i386 0.93.3-1.el4.rf rpmforge 15 M clamd i386 0.93.3-1.el4.rf rpmforge 82 k Transaction Summary ============================================================================= Install 5 Package(s) Update 32 Package(s) Remove 0 Package(s) Total download size: 76 M Is this ok [y/N]: n Exiting on user Command Complete!

5 6

Firefox 3.0.1 print error
by Olaf Mueller 18 Jul '08

18 Jul '08

Hello, if trying to print http://www.test.de/themen/versicherung-vorsorge/test/-Unfallversicherung/12… by button "Seite drucken" firefox-3.0.1-1.el5.centos ends in error '(Gecko:4820): Gtk-WARNING **: Unknown paper size A4' and wants to print in "Letter". This also happens under Fedora 8 and with the sources for linux from mozilla.com, but not under Windows XP. Please, could someone test this under Fedora 9, maybe gtk is broken under CentOS 5.1 and Fedora 8? Any idea for a workaround? $ rpm -qa | grep gtk gnome-python2-gtkhtml2-2.14.2-6.el5 gtk+-1.2.10-56.el5 gtk-qt-engine-0.8-4.el5 gtk2-2.10.4-20.el5 pygtk2-2.10.1-12.el5 gtkmm24-2.10.9-1.el5.rf usermode-gtk-1.88-3.el5.1 gtk2-engines-2.8.0-3.el5 gtkhtml2-2.11.0-3 gtkspell-2.0.11-2.1 authconfig-gtk-5.3.21-3.el5 pygtk2-libglade-2.10.1-12.el5 libgtk-java-2.8.7-3.el5 gtk2-devel-2.10.4-20.el5 regards Olaf

1 0

Difference between system-config-* and system-config-*-tui ?
by Fabrice La Farina 18 Jul '08

18 Jul '08

Hello List, I have a little question. What is the difference between the system-config-* and system-config-*-tui ? Thank you. Fabrice

2 2

lvm errors after replacing drive in raid 10 array
by Mike 18 Jul '08

18 Jul '08

I thought I'd test replacing a failed drive in a 4 drive raid 10 array on a CentOS 5.2 box before it goes online and before a drive really fails. I 'mdadm failed, removed', powered off, replaced drive, partitioned with sfdisk -d /dev/sda | sfdisk /dev/sdb, and finally 'mdadm add'ed'. Everything seems fine until I try to create a snapshot lv. (Creating a snapshot lv worked before I replaced the drive.) Here's what I'm seeing. # lvcreate -p r -s -L 8G -n home-snapshot /dev/vg0/homelv Couldn't find device with uuid 'yIIGF9-9f61-QPk8-q6q1-wn4D-iE1x-MJIMgi'. Couldn't find all physical volumes for volume group vg0. Volume group for uuid not found: I4Gf5TUB1M1TfHxZNg9cCkM1SbRo8cthCTTjVHBEHeCniUIQ03Ov4V1iOy2ciJwm Aborting. Failed to activate snapshot exception store. So then I try # pvdisplay --- Physical volume --- PV Name /dev/md3 VG Name vg0 PV Size 903.97 GB / not usable 3.00 MB Allocatable yes PE Size (KByte) 4096 Total PE 231416 Free PE 44536 Allocated PE 186880 PV UUID yIIGF9-9f61-QPk8-q6q1-wn4D-iE1x-MJIMgi Subsequent runs of pvdisplay eventually returns nothing. pvck /dev/md3 seems to restore that but creating a snapshot volume still fails. It's as if the "PV stuff" is not on the new drive. I (probably incorrectly) assumed that just adding the drive back in to the raid array would take care of that. I've searched quite a bit but have not found any clues. Any one? -- Thanks, Mike

2 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss