- Discuss - lists.centos.org

Could this be an advantage of CentOS over the PNAELV distribution?
by Luigi Perroti 11 Jun '08

11 Jun '08

Hello all, I understand that when releasing updates the CentOS team strips logos and such things from the upstream sources. If I'm not mistaken there is also a certain QA process going on before the actual releases, at least for major updates like the upcoming 5.2 version. Does this happen also for security updates? Since I don't mind the small delay from the upstream releases I was wondering if the additional QA process could actually be an advantage over the PNAELV distribution. This could be even more true if the QA isn't only related to CentOS specific changes but it's done even for practically untouched updates. Is this assumption correct? Thanks for reading, Luigi

2 1

Required for CentOS4.4 ia64 Clustersuite package
by Balaji 11 Jun '08

11 Jun '08

Dear All, I am new in Itanium server Installation and I have installed all the CentOS4.4 ia64 CDs and kernel version is 2.6.9-42.EL and I need the Cluster Suite Package for the same. I tried to google-out and i can't find out the Clustersuite package for CentOS4.4 and I findout the CentOS4.5 Clustersuite package from CentOS Website can any one send me path of the Clustersuite package for CentOS4.4 ia64 Please, do the needful. Regards -S.Balaji

3 2

yum upgrade 4.3 -> current ?
by Chris Boyd 11 Jun '08

11 Jun '08

Got a box running 4.3 x86 and we're trying up get it updated to 4.6, but yum is consuming all available memory (1GB) and swap (2GB), and then the oom starts killing processes. I've disabled all the optional repositories, done yum clean all, and still have the same problem even if I try to just update a specific package. Google got me this link, but no obvious resolution: http://www.centos.org/modules/newbb/viewtopic.php? forum=8&topic_id=5588&viewmode=flat Any pointers appreciated. --Chris

8 15

Bind Standard Practise
by Joseph L. Casale 11 Jun '08

11 Jun '08

In a chroot Bind installation, named.conf is located in /var/named/chroot/etc/. In that file, references to files for includes and other zones can be made as "filename" without a path. What is the expected location when no path is used, simply up one dir under chroot/? While moving a DNS from one machine to another, I noticed all ref's are "/etc/filename" and they are in the same dir as named.conf which obviously looks different from all the sample files. Thanks! jlc

2 2

Excluded files from repos?
by Sam Drinkard 11 Jun '08

11 Jun '08

Ok.. I'm way behind the 8-ball on setting things up correctly, but after going over the protection things in yum, I ran a yum check-update and it returned with having 318 files excluded because of protection. Is that too high a number? I have the numerical protection set to 1. Is there a good tutorial about how to correctly set up the protect base. Sorry if this is a noobie question.. I've been away from CentOS for some time and needing to get back into the swing of things. Thanks.. Sam

6 8

CentOS-announce Digest, Vol 40, Issue 5
by centos-announce-request＠centos.org 11 Jun '08

11 Jun '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0529 Moderate CentOS 3 i386 net-snmp - security update (Tru Huynh) 2. CESA-2008:0529 Moderate CentOS 3 x86_64 net-snmp - security update (Tru Huynh) 3. CESA-2008:0528-01: Moderate CentOS 2 i386 ucd-snmp security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 Jun 2008 22:39:52 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0529 Moderate CentOS 3 i386 net-snmp - security update To: centos-announce(a)centos.org Message-ID: <20080610203952.GA706(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0529 net-snmp security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0529.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/net-snmp-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-devel-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-libs-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-perl-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-utils-5.0.9-2.30E.24.i386.rpm source: updates/SRPMS/net-snmp-5.0.9-2.30E.24.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update net-snmp Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

RHEL/CentOS5.2 and rsyslogd
by Laurence Alexander Hurst 11 Jun '08

11 Jun '08

Hi there, I am slightly confused by the RHEL release notes and an earlier thread here about rsyslogd, so I hope someone can clear this up for me; I see that rsyslog is included in RHEL as of 5.2 (and so will be available in CentOS when 5.2 is ready) however there is no indication of whether it has been made the default syslogger or not - is it an optional package or installed by default on a fresh install? (I would check myself, but I do not have any RHEL5 machines to hand.) Thanks -Laurence

3 2

top in xen
by Robert - elists 11 Jun '08

11 Jun '08

I haven't setup a xen box yet Will try tonight. Was wondering, what does top look like on a dual processor xen box in a virtual ? Do you see more than one processor or is it configurable from the xen master or? - rh

2 1

RE: [CentOS] School Server Setup
by Harry Sukumar 11 Jun '08

11 Jun '08

Hi Gopinath, Thank you for the reply, All the client machines have 1GB Ram and 80GB of hard disk so I don't think its efficient to run think client setup on the machines But thank any way Cheers Harry -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of gopinath Sent: Tuesday, 10 June 2008 6:55 PM To: CentOS mailing list Subject: Re: [CentOS] School Server Setup Please check the attachment ----- Original Message ----- From: "Les Mikesell" <lesmikesell(a)gmail.com> To: "CentOS mailing list" <centos(a)centos.org> Sent: Tuesday, June 10, 2008 10:56 AM Subject: Re: [CentOS] School Server Setup > Harry Sukumar wrote: > > > > I was wondering if you can help me little bit.... > > > > I am trying to help (voluntary service) a country side school > > (Aboriginal community) in Northern Queensland Australia setup lab > > infrastructure, it's a very remote school and they don't have enough > > funds to go commercial > > > > The school has only till grade 6 > > > > They have 25 machines that was bought out of the government grant but > > none of the machines come with windows > > > > I was asked by the school president to setup lab infrastructure > > currently they have Internet (Dynamic) with only two machines connected > > > > I have asked them to change the plan to Static IP address which I > > presume will be done some time this week > > > > I have decided to go Linux on all the machines including the server > > > > Could some one please cast some light on how I can carry on with this > > project, I am not sure where to start and I am fairly new to Linux and > > system administration world > > > > Currently what's in my mind is to setup fedora on all desktop and > > CentOS5 as my server with following services configured > > If you have one machine that could reasonably act as a server, you could > load k12ltsp (a CentOS based distribution that adds the ability to > network-boot thin clients and some educational programs) on it and be > done. In any case you might find the information here useful: > http://k12ltsp.org/mediawiki/index.php/Main_Page along with their mail list. > > -- > Les Mikesell > lesmikesell(a)gmail.com > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

3 2

RE: [CentOS] School Server Setup
by Harry Sukumar 11 Jun '08

11 Jun '08

does/will this school have a website, or at least one web page somewhere, where it presents itself and mentions that it uses Free Software? If yes, please let me know, I'd like to add a link to it on this page: At this stage they have nothing and this is where I am getting involved to setup website for them as well Marco once I get the project going I will send you the link to the school website and you can add the link on http://digifreedom.net/node/55 -- Thanks Harry S

1 0

TFP inside firewall
by lingu 11 Jun '08

11 Jun '08

Hi, I have a setup where the tftp server is inside the firewall. Now the issue is tftp client send request on dynamic udp port. Can anyone give some idea, how i can bind the fixed port for client udp requests ? Otherwise i hope, it is not a solution that i will open all port related to UDP in the firewall. Regards, lingu

3 3

Newer GNOME than base release
by MHR 10 Jun '08

10 Jun '08

I have asked about this before, but I don't have a workable answer yet. I would like to know if there is a way to install a more recent GNOME package on CentOS 5.x than 2.16.0. 1) GNOME Bugzilla does not support this version any more - all bugs go into the bit bucket. 2) Having been exposed to Fedora 8 at work and seeing how much more flexible GNOME 2.22 is, I would REALLY like to take a shot at using it on my CentOS systems. 3) I asked about this on the GNOME list and I was told I should build it, and that jhbuild or garnome would do the job for me. This has not been my experience - both of them have major hangups building on my home desktop (the 64-bit hybrid CentOS 5.1 environment). 4) Johnny suggested I try mock to build in a chroot, pure 64-bit environment. I was unable to locate a mock that actually installed and worked on my system. (Yeah, yeah, I know, I'm the only person for whom this does not work. Heard it, can't believe it, must be doing something most others don't, whatever.... ;*) I have trouble believing that the ONLY ways to get a newer GNOME are to wait for CentOS 6, run a different distro (not likely) or build it myself. This is Linux, after all, isn't it? (That's a rhetorical question - no answer required, unless those /really are/ the only options....) TIA. mhr

5 11

Setting up a chroot
by MHR 10 Jun '08

10 Jun '08

I'm trying to build GNOME (to run a more recent version than 2.16.* on CentOS 5.1) and I keep running into a lot of rather strange problems. I'm wondering if this might have something to do with my hybrid 64 and 32 bit general environment, so I want to try a pure 64-bit chroot. I've never done this before, and I'm not entirely sure how to, and I didn't see anything particularly on point, either at centos.org or google. If I missed it, just say where and that should be enough. Guidelines? Suggestions (other than "go away" or other physically difficult crudities :-)? Thanks. mhr

3 4

OT: Contract job assignment in Huntsville AL for Embedded Linux Developer
by Lanny Marcus 10 Jun '08

10 Jun '08

I have never seen an hourly rate like the one below, before this. If anyone on the list is qualified and interested in applying, email me, off list, and I will give you the contact information. Embedded Linux Developer Description: 12-18 month project for embedded Linux developer. Looking for strong skills in kernel/driver development and modification. Primarily new development, but may entail some enhancements to existing systems. Work centers around communications and data capture systems. More details upon request Job Number: HTSV1 Job Location: Huntsville, AL Rate: 100-115 HR Per Diem: Yes Overtime: Yes Duration: 12-18 months Input Date: 06/10/2008

2 1

RE: [CentOS] Copying files from specific date.
by Bowie Bailey 10 Jun '08

10 Jun '08

Rajeev R. Veedu wrote: > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Steve Huff > Sent: Monday, June 09, 2008 7:34 PM > To: centos(a)centos.org > Subject: Re: [CentOS] Copying files from specific date. > > > On Jun 9, 2008, at 11:16 AM, Rajeev R. Veedu wrote: > > Does anyone aware of any utility to copy files which are created > > or modify form a specific date ?. > > > > > > to copy all files in /dir1 modified within the last 5 days to > > > /dir2: > > > > $ find /dir1 -mtime -5 | xargs -I {} cp {} /dir2 > > > > if the filenames have whitespace in them, you can use this trick: > > > > $ find /dir1 -mtime -5 -print0 | xargs -0 -I {} cp {} /dir2 > > > > for more details on selecting by time: > > > > $ man find > > > > pay particular attention to the options -atime, -amin, -ctime, > > > -cmin, -mtime, -mmin, and -daystart. > > > > -steve > > Actually I need to copy this on to another server with same folder > structure. I think I need to explain bit of history. > > I had a server crash last week, and we have restored the files from > the tape. However during this period of making the server up, the > users having adding or changed files from our backup Server (Samba > server which rsync to production server every night.) now I need to > copy the files which user added/ modify last 7 days. Ideally if I can > get this option in rsync it would be better. Otherwise I need to have > a method so that all changed files to go on the relevant folder on > the production server. I cannot take the full files in the backup > files since they are historical backup and there are some unwanted > files. > > Can I use scp instead of cp in your statement?. But how does it take > the same directory name as the original location? > > Eg:from ServerA/FLDR2/FLDR3/Filename should go to > ServerB/FLDR2/FLDR3/FILENAME > > Only change is the server name all other values will remain same. > > Any help would be really appreciated. One approach would be to use the find command given above to generate a list of files that have changed. Then pass that list to rsync via the '--files-from' option to transfer them to the other server. -- Bowie

6 5

Kernel Panic
by Ryan Nichols 10 Jun '08

10 Jun '08

I am very very new to the linux world.. I am having problems with CentOS5.1 with kernel panics. I belive the cause of the kernel panics are a software that I am running on the machine, but I cannot find any information as to what the system was doing prior to the crash, i have looked in the /var/log/messaging to no solution. I guess what I am asking is what do i need to turn on for when this kernel crash comes again? It happens with in hours or days of running this software, it is random and sudden. Thanks, Ryan Nichols

2 1

Help!
by Sam Drinkard 10 Jun '08

10 Jun '08

Folks, I have a bit of a problem and can't seem to figure out what is getting broken or why. I've been pulling my hair out trying to get clamav or clamav-milter to install and permit yum update to continue. What is happening is this: I yum install the clamav package, but when I try to do an update on the system, it constantly returns with an error of a Missing Dependency for clamd and clamav-db. I've installed and erased clamav several times, and that's the only way I can do a yum update on the system. The files are coming from sourceforge, and the version is 0.93-2.el4rf. Perhaps I'm not installing in the correct sequence or something, so could someone please tell me how to go about getting all the dependencies for the clamav package? This is the x86_64 version I've been working with. Many thanks.... Sam

6 15

Dependency problem with libgaim.so.0 when installing GNOME
by Leonardo Vilela Pinheiro 10 Jun '08

10 Jun '08

CentOS 5.1 - I have already executed 'yum clean all' but the error persists. What could be the problem? $ yum groupinstall "GNOME Desktop Environment" Loading "installonlyn" plugin Setting up Group Process Setting up repositories Setting up repositories Reading repository metadata in from local files Package gnome-panel - 2.16.1-6.el5.i386 already installed and latest version Package metacity - 2.16.0-8.el5.i386 already installed and latest version Package at-spi - 1.7.11-2.fc6.i386 already installed and latest version Package gtk2-engines - 2.8.0-3.el5.i386 already installed and latest version Package gnome-screensaver - 2.16.1-5.el5_1.1.i386 already installed and latest version Resolving Dependencies <snip> --> Processing Dependency: foomatic for package: system-config-printer-libs --> Processing Dependency: lockdev for package: gphoto2 --> Processing Dependency: libgaim.so.0 for package: nautilus-sendto --> Processing Dependency: libpq.so.4 for package: apr-util --> Processing Dependency: PyXML for package: system-config-printer-libs --> Restarting Dependency Resolution with new changes. --> Populating transaction set with selected packages. Please wait. ---> Package foomatic.i386 0:3.0.2-38.1.el5 set to be updated ---> Package PyXML.i386 0:0.8.4-4 set to be updated ---> Package lockdev.i386 0:1.0.1-10 set to be updated ---> Package postgresql-libs.i386 0:8.1.11-1.el5_1.1 set to be updated --> Running transaction check --> Processing Dependency: libgaim.so.0 for package: nautilus-sendto --> Finished Dependency Resolution Error: Missing Dependency: libgaim.so.0 is needed by package nautilus-sendto

2 1

sendmail not sending after reboot
by Ray Leventhal 10 Jun '08

10 Jun '08

HI folks, I've an up-to-date CentOS 5.x box on a small intranet (<20 users). We did a reboot over the weekend and all appears well except that clients on the LAN can no longer send email. Just hangs/times out. No clear identifiers in the /var/log/maillog or /var/log/messages. We're not setup for ESMTP as it's a closed network and I'm really hoping for a kickstart as to where to look to get this going. In case it helps, my sendmail.cf file is below. Thanks in advance. -R divert(-1)dnl dnl # dnl # This is the sendmail macro config file for m4. If you make changes to dnl # /etc/mail/sendmail.mc, you will need to regenerate the dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is dnl # installed and then performing a dnl # dnl # make -C /etc/mail dnl # include(`/usr/share/sendmail-cf/m4/cf.m4')dnl VERSIONID(`setup for linux')dnl OSTYPE(`linux')dnl dnl # dnl # Do not advertize sendmail version. dnl # dnl define(`confSMTP_LOGIN_MSG', `$j Sendmail; $b')dnl dnl # dnl # default logging level is 9, you might want to set it higher to dnl # debug the configuration dnl # dnl define(`confLOG_LEVEL', `9')dnl dnl # dnl # Uncomment and edit the following line if your outgoing mail needs to dnl # be sent out through an external mail server: dnl # dnl # define(`SMART_HOST', `smtp.your.provider')dnl dnl # define(`confDEF_USER_ID', ``8:12'')dnl dnl define(`confAUTO_REBUILD')dnl define(`confTO_CONNECT', `1m')dnl define(`confTRY_NULL_MX_LIST', `True')dnl define(`confDONT_PROBE_INTERFACES', `True')dnl define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl define(`ALIAS_FILE', `/etc/aliases')dnl define(`STATUS_FILE', `/var/log/mail/statistics')dnl define(`UUCP_MAILER_MAX', `2000000')dnl define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl define(`confAUTH_OPTIONS', `A')dnl dnl # dnl # The following allows relaying if the user authenticates, and disallows dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links dnl # dnl define(`confAUTH_OPTIONS', `A p')dnl dnl # dnl # PLAIN is the preferred plaintext authentication method and used by dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do dnl # use LOGIN. Other mechanisms should be used if the connection is not dnl # guaranteed secure. dnl # Please remember that saslauthd needs to be running for AUTH. dnl # dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl # dnl # Rudimentary information on creating certificates for sendmail TLS: dnl # cd /usr/share/ssl/certs; make sendmail.pem dnl # Complete usage: dnl # make -C /usr/share/ssl/certs usage dnl # dnl define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl dnl # dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's dnl # slapd, which requires the file to be readble by group ldap dnl # dnl define(`confDONT_BLAME_SENDMAIL', `groupreadablekeyfile')dnl dnl # dnl define(`confTO_QUEUEWARN', `4h')dnl dnl define(`confTO_QUEUERETURN', `5d')dnl dnl define(`confQUEUE_LA', `12')dnl dnl define(`confREFUSE_LA', `18')dnl define(`confTO_IDENT', `0')dnl dnl FEATURE(delay_checks)dnl FEATURE(`no_default_msa', `dnl')dnl FEATURE(`smrsh', `/usr/sbin/smrsh')dnl FEATURE(`mailertable', `hash -o /etc/mail/mailertable.db')dnl FEATURE(`virtusertable', `hash -o /etc/mail/virtusertable.db')dnl FEATURE(redirect)dnl FEATURE(always_add_domain)dnl FEATURE(use_cw_file)dnl FEATURE(use_ct_file)dnl dnl # dnl # The following limits the number of processes sendmail can fork to accept dnl # incoming messages or process its message queues to 20.) sendmail refuses dnl # to accept connections once it has reached its quota of child processes. dnl # dnl define(`confMAX_DAEMON_CHILDREN', `20')dnl dnl # dnl # Limits the number of new connections per second. This caps the overhead dnl # incurred due to forking new sendmail processes. May be useful against dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address dnl # limit would be useful but is not available as an option at this writing.) dnl # dnl define(`confCONNECTION_RATE_THROTTLE', `3')dnl dnl # dnl # The -t option will retry delivery if e.g. the user runs over his quota. dnl # FEATURE(local_procmail, `', `procmail -t -Y -a $h -d $u')dnl FEATURE(`access_db', `hash -T<TMPF> -o /etc/mail/access.db')dnl FEATURE(`blacklist_recipients')dnl EXPOSED_USER(`root')dnl dnl # dnl # For using Cyrus-IMAPd as POP3/IMAP server through LMTP delivery uncomment dnl # the following 2 definitions and activate below in the MAILER section the dnl # cyrusv2 mailer. dnl # dnl define(`confLOCAL_MAILER', `cyrusv2')dnl dnl define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl dnl # dnl # The following causes sendmail to only listen on the IPv4 loopback address dnl # 127.0.0.1 and not on any other network devices. Remove the loopback dnl # address restriction to accept email from the internet or intranet. dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl dnl # dnl # The following causes sendmail to additionally listen to port 587 for dnl # mail from MUAs that authenticate. Roaming users who can't reach their dnl # preferred sendmail daemon due to port 25 being blocked or redirected find dnl # this useful. dnl # dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl dnl # dnl # The following causes sendmail to additionally listen to port 465, but dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1. dnl # dnl # For this to work your OpenSSL certificates must be configured. dnl # dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl dnl # dnl # The following causes sendmail to additionally listen on the IPv6 loopback dnl # device. Remove the loopback address restriction listen to the network. dnl # dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl dnl # dnl # enable both ipv6 and ipv4 in sendmail: dnl # dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6') dnl # dnl # We strongly recommend not accepting unresolvable domains if you want to dnl # protect yourself from spam. However, the laptop and users on computers dnl # that do not have 24x7 DNS do need this. dnl # FEATURE(`accept_unresolvable_domains')dnl dnl # dnl FEATURE(`relay_based_on_MX')dnl dnl # dnl # Also accept email sent to "localhost.localdomain" as local email. dnl # LOCAL_DOMAIN(`localhost.localdomain')dnl dnl # dnl # The following example makes mail from this host and any additional dnl # specified domains appear to be sent from mydomain.com dnl # dnl MASQUERADE_AS(`mydomain.com')dnl dnl # dnl # masquerade not just the headers, but the envelope as well dnl # dnl FEATURE(masquerade_envelope)dnl dnl # dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well dnl # dnl FEATURE(masquerade_entire_domain)dnl dnl # dnl MASQUERADE_DOMAIN(localhost)dnl dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl dnl MASQUERADE_DOMAIN(mydomain.lan)dnl MAILER(smtp)dnl MAILER(procmail)dnl dnl MAILER(cyrusv2)dnl DAEMON_OPTIONS(`Name=smtp,Modifiers=b')

6 21

mod_security
by Tony Schreiner 10 Jun '08

10 Jun '08

I've set up a CentOS 5 system as a server for http installs. Currently up-to-date with httpd-2.2.3-11.el5_1.centos.3 mod_security-2.1.7-1.el5 my installs were failing just after the root password set up, before software selection. I tracked it down to a server error 500 and it was due to mod_security claiming the comps.xml file was too big The error: [Tue Jun 10 09:59:01 2008] [error] [client XXX.XXX.XXX.XXX] ModSecurity: Output filter: Content-Length (934390) over the limit (524288). [hostname "XXX.XXX"] [uri "/install/centos/5/x86_64/ repodata/comps.xml"] [unique_id "VJNb-4inMQIAACd0XcwAAAAA"] This is set in /etc/httpd/mod_security.d/modsecurity_crs_10_config.conf SecResponseBodyLimit 524288 I increased that size and all is now well, but can somebody enlighten me as to the purpose of that setting? I've started reading the document in /usr/share/doc/mod_security-2.1.7/doc/modsecurity2-apache-reference.pdf is there other good documentation for mod_security? Cheers, Tony Schreiner Boston College

1 0

RE: [CentOS] Confirming grub installation
by Bowie Bailey 10 Jun '08

10 Jun '08

Peter Farrell wrote: > > 2008/6/9 Bowie Bailey <Bowie_Bailey(a)buc.com>: > > I have two drives in a software mirror. Other than setting the > > bios to boot from the second drive, is there any way to confirm > > that grub is installed properly on the second drive? > > When installing CentOS - sometimes the RAID-1 /boot partition, usually > /dev/md0 fails to boot. > > The bug is known and exists on the bugtracker for CentOS as well as > RedHat. > > The fix is to re-install GRUB on on each partition of the RAID-1 > array. > > I think you could use the same method to answer your question. <SNIP> > If you then want to test it, disconnect one of your drives - or just > drop into grub at boot > and tell it to boot from the partition of another drive. I already know how to install grub on the second drive. The issue is that this is a production server and I'm trying to avoid rebooting it if possible. I'm looking for a way to determine whether grub is installed on a drive WITHOUT having to actually attempt to boot from it. If I redo the installation, then I can be sure it's installed, but if it's already there, I'd rather leave it alone. There's no point in messing with it if it's already installed. -- Bowie

2 1

Clustersuite package installation failed in Itanium server
by Balaji 10 Jun '08

10 Jun '08

Dear All, I am new in Itanium server Installation and I have installed all the CentOS4.4 ia64 CDs and I have try to install clustersuite packages and i am getting the following error messages like error: %post(package name here) scriptlet failed, exit status 255 and error: %pre(package name here) scriptlet failed, exit status 255 problem Cluster Suite RPMS are ccs-1.0.7-0.i686.rpm ccs-devel-1.0.7-0.i686.rpm cman-1.0.11-0.i686.rpm cman-devel-1.0.11-0.i686.rpm cman-kernel-2.6.9-45.4.centos4.i686.rpm cman-kernel-hugemem-2.6.9-45.4.centos4.i686.rpm cman-kernel-smp-2.6.9-45.4.centos4.i686.rpm cman-kernheaders-2.6.9-45.4.centos4.i686.rpm dlm-1.0.1-1.i686.rpm dlm-devel-1.0.1-1.i686.rpm dlm-kernel-2.6.9-42.12.centos4.i686.rpm dlm-kernel-hugemem-2.6.9-42.12.centos4.i686.rpm dlm-kernel-smp-2.6.9-42.12.centos4.i686.rpm dlm-kernheaders-2.6.9-42.12.centos4.i686.rpm fence-1.32.25-1.i686.rpm gulm-1.0.8-0.i686.rpm gulm-devel-1.0.8-0.i686.rpm iddev-2.0.0-3.i686.rpm iddev-devel-2.0.0-3.i686.rpm ipvsadm-1.24-6.i386.rpm kernel-hugemem-2.6.9-42.EL.i686.rpm kernel-smp-2.6.9-42.EL.i686.rpm magma-1.0.6-0.i686.rpm magma-devel-1.0.6-0.i686.rpm magma-plugins-1.0.9-0.i386.rpm perl-Net-Telnet-3.03-3.noarch.rpm piranha-0.8.2-1.i386.rpm rgmanager-1.9.54-1.i386.rpm system-config-cluster-1.0.25-1.0.noarch.rpm We are not sure why this is happening. Can some one throw light on this. Regards -S.Balaji

3 4

mac address in prompt
by Gergely Buday 10 Jun '08

10 Jun '08

Hi there, for some reasons bash writes out my host's mac address as a result of including \h in PS1. Do you know why? This was not always so. [gergoe@x0-13-xx-xx-xx-xx ~]$ echo $PS1 [\u@\h \W]\$ - Gergely

2 3

School Server Setup
by Harry Sukumar 10 Jun '08

10 Jun '08

Hello All!!! I was wondering if you can help me little bit.... I am trying to help (voluntary service) a country side school (Aboriginal community) in Northern Queensland Australia setup lab infrastructure, it's a very remote school and they don't have enough funds to go commercial The school has only till grade 6 They have 25 machines that was bought out of the government grant but none of the machines come with windows I was asked by the school president to setup lab infrastructure currently they have Internet (Dynamic) with only two machines connected I have asked them to change the plan to Static IP address which I presume will be done some time this week I have decided to go Linux on all the machines including the server Could some one please cast some light on how I can carry on with this project, I am not sure where to start and I am fairly new to Linux and system administration world Currently what's in my mind is to setup fedora on all desktop and CentOS5 as my server with following services configured Proxy-squid (all the traffic to pass through) Firewall Apache Squirrel mail DNS DHCP I am not sure where to start with this project Your help will be highly appreciated by the little kids who have never even touched a computer before in there life!!! -- Many Thanks Harry

11 13

Hardware Specs
by Victor Padro 10 Jun '08

10 Jun '08

Hello all! I was wondering if you can help me a little bit... My boss wants me to do some research in finding which hardware is most used under Linux(ex. Dell servers, Barebones Kits, HP & Compaq servers, etc.) This is just for budgeting issues...he wants to get rid of some old and obsolete hardware we run and wants to know which hardware could be easy to deploy on the server side and workstations side(common user boxes will be decided for HP or Dell leasing quotes - Obviously M$ Windows Vista). So if you could just state your hardware I'll be very greatful. We run several servers based on RHEL, Debian(Couple Ubuntus), CentOS, running services such as Sendmail, Apache, JBoss, Postgres, Oracle, Samba and DNS. We have around 5000 users logging on these servers. Workstations are basically used for CAD, monitoring, developing in Java, PHP, Oracle, etc. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Hola a todos! Me preguntaba si me pueden ayudar un poco... Mi jefe quiere que haga un poco de investigacion para ver que hardware es el que mas se usa corriendo Linux(ej. servidores Dell, servidores HP & Compaq, equipos armados, etc.) Esto es por el presupuesto que tendremos ademas se quiere deshacer del equipo viejo y obsoleto que tenemos, quiere saber que tipo de hardware es el que facil de desplegar/utilizar en el lado de los servidores y de las estaciones de trabajo(los equipos de los usuarios comunes[los mortales] serian decidos por los leasing que Dell o HP nos cotize, obviamente con M$ Windows Vista) Asi que si pueden describir su hardware se los agradecere. Corremos varios servidores basados en RHEL, Debian(un par de Ubuntus), CentOS usando servicios como Sendmail, Apache, JBoss, Postgres, Oracle, Samba y DNS. Tenemos mas o menos 5000 usuarios loggeandose en estos servidores. Las estaciones de trabajo son basicamente usadas con software CAD, monitoreo, desarrollando en Java, PHP, Oracle, etc. Thank you/Gracias. Victor Padro

6 5

Confirming grub installation
by Bowie Bailey 10 Jun '08

10 Jun '08

I have two drives in a software mirror. Other than setting the bios to boot from the second drive, is there any way to confirm that grub is installed properly on the second drive? -- Bowie

2 1

new hardware & centos / fedora
by rmoktali＠vsnl.net 10 Jun '08

10 Jun '08

hi, Hardware: core2duo(E8400)/Intel Classic Board DG33FBC / 2x2GB I have been trying to install 5.1x64 for it's longterm support and xen but it just does not install till acpi=off is passed. works with one core after that and does not power off. Install stops at ACPI: PCI Root Bridge [PCI0] (0000:00) below is the reply from intel. ============================================================== Thank you for contacting Intel(R) Technical Support. Regarding your technical question, we regret to inform you that Linux* is not a supported Operating system for the Intel(R) Desktop Board DG33FB. Please review the following list for supported Operating systems for your Desktop Board. http://intel.com/support/motherboards/desktop/sb/CS-008326.htm Intel(R) Technical Support cannot provide assistance or drivers on operating systems that are not supported by the specific motherboard. Also, be aware that Intel(R) Desktop Boards do not support manually changing the IRQs, as the OS usually handles this. You can try disabling the onboard audio to check if you get rid of the POST error message. ============================================================== the dmesg from Centos5.1 install after acpi=off is here http://www.pastebin.ca/1043584 Fedora 9 does not seem to have problem and installs fine. the dmesg is here http://www.pastebin.ca/1043590 Maybe we need to wait for another year or two for upstream and centos to catchup. :) -- rm

2 1

vsftp 553 Could not create file
by lingu 10 Jun '08

10 Jun '08

HI, I am facing problem in connecting ftp from the windows client. CENTOS5U1 Running vsftp daemon. From linux client i am able to upload and download. When i do an ftp upload of any files or folders from windows command line i am getting below error . *vsftp 553 Could not create file* *NOTE: SELINUX IS DISABLED AND THERE IS NO FIREWALL RUNNING* See my user permission and ownership details User i am using is paps ll -ld /home/paps/ drwxr-xr-x 2 paps dba 4096 Jun 10 23:09 /home/paps/ My vsftp configuration cat /etc/vsftpd/vsftpd.conf |grep -v \# anonymous_enable=YES local_enable=YES write_enable=YES local_umask=022 dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES xferlog_file=/var/log/vsftpd.log xferlog_std_format=YES listen=YES pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES Regards lingu

3 4

netboot, vnc and no keyboard/mouse/monitor
by dnk 10 Jun '08

10 Jun '08

hey guys, I just created a custom netboot cd, that launches and loads from a http source, but connects to a vnc listening viewer. All in all, not hard to do, but what is different with this one is that it skips the media check, has no prompts and allows you to start the install on a machine that has no keyboard/mouse/monitor. Was handy for me as when i have some boxes to load, I just plug in power and ethernet in the corner (or where ever I have room) and go through the install. I know it also works with a cd as a source (if you use it from cd 1), and assume it would also work with a DVD (have not tested yet). If you would like it, I can add to the wiki if anyone would like it. DNK

5 6

Device Mapper and pretty names
by Joseph L. Casale 10 Jun '08

10 Jun '08

How does one view the dm-{n} names wrt the actual dev names? I assume it involves dmsetup but I cant figure it out. I am using iostat to track some busy disk io and don't know which dm-{n} to watch :) Thanks! jlc

3 3

Re: Help, PHP/Mysql connections are so slow.
by Jun Salen 10 Jun '08

10 Jun '08

>>I've got a new Centos 5.1 x86-64 server that uses PHP to >>communicate with MySQL5. On this server, PHP/Mysql connections are dead >>slow and unresponsive. It takes sometimes up to a minute to list tables >>in phpmyadmin for example. My suggestion is just for the test and see if it will improve, try to update from RPMForge both your apache, php and mysql one at a time then test. I believe Dag's repo has more recent version. Thanks, junji aisalen.wordpress.com Linux Registered User #253162 CentOS User Send instant messages to your online friends http://uk.messenger.yahoo.com

1 0

Help, PHP/Mysql connections are so slow.
by Pro Green European 09 Jun '08

09 Jun '08

Hi. I've got a new Centos 5.1 x86-64 server that uses PHP to communicate with MySQL5. On this server, PHP/Mysql connections are dead slow and unresponsive. It takes sometimes up to a minute to list tables in phpmyadmin for example. I've verified on the server that the issue has to be PHP/Mysql related. If I use a CGI based Mysql admin tool, communication is fast and there are no delays. The server is Xeon based and has 4GB of RAM. SElinux is enabled, and ModSecurity for Apache too. Disabling these two does not help. SElinux allows Apache to network connect. Some php.ini settings: =============================== safe_mode = On max_execution_time = 60 max_input_time = 60 memory_limit = 128M open_basedir is active, and there are no conflicts. disable_functions also contain several functions in order to secure server. allow_fopen_url is disabled =============================== Could there be a bug somewhere that is causing this slowness for PHP/Mysql connections. Feedback and tips for solving this problem will be greatly appreciated :) Regards, /PGE (aka mysteron) --- Link to forum post: http://www.centos.org/modules/newbb/viewtopic.php?topic_id=14575&start=… --- Answer I've recieved and answered: Q: Sounds like the server is trying to do a reverse DNS lookup and timing out after a minute plus. Is DNS set up on the server correctly? A: Yes, DNS is working correctly. I tried with the IP address of the database server instead of its DNS name, but there is no difference, PHP/Mysql connections are still dead slow. ---

9 17

Olivier Castien/Roncq/Infofrance/FRA/TZG est absent.
by Olivier_Castien＠zieglergroup.com 09 Jun '08

09 Jun '08

Je serai absent(e) à partir du 06/06/2008 de retour le 30/06/2008. Je répondrai à votre message dès mon retour. En cas d'urgence, vous pouvez contacter l'équipe technique d'infofrance.

3 4

Software raid tutorial and hardware raid questions.
by drew einhorn 09 Jun '08

09 Jun '08

I remember seeing one with an example migrating from an old fashioned filesystem on a partition to a new filesystem on a mirrored lvm logical volume but one only one side of the mirror is set up at this time. First I need to copy stuff from what will become the second side of the mirror to filesystem on the first side or the mirror Then I will be ready to follow the rest of the tutorial and build and attach the second side of the mirror. Wish I could remember where I saw that tutorial. Want to embellish the example and stripe each side of the mirror. Understanding a mirrored pair of stripes, seems easier than understanding a striped pair of mirrors. But this seems like a place where counterintuitive results are not a big surprise. I can do mirroring and striping in lvm, mdadm, or a hardware raid controller. There are lots of configurations to ponder. What about recovery after a hardware raid controller? What are the chances of being able to replace the controller and start up successfully from drives? I know that assuming the failed controller did write bad stuff to the drives while it was crashing and burning. I would not be surprised if the controller firmware revisions had to match. I would be surprised but not astonished if the board hardware revision level had to match, too. I hope we are past those days. Anybody know about the LSI Logic MegaRAID 8480 Storage controller in particular. -- Drew Einhorn -- Drew Einhorn

2 2

Re: RE-export nfs mounted share
by whoami i 09 Jun '08

09 Jun '08

Hi Barry, First of all thanx for your reply but i already used the options crossmnt,fsid=0 in my exports file still i am not able to re-export it. Regards lingu On Fri, May 30, 2008 at 5:30 PM, <centos-request(a)centos.org> wrote: > Send CentOS mailing list submissions to > centos(a)centos.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.centos.org/mailman/listinfo/centos > or, via email, send a message with subject or body 'help' to > centos-request(a)centos.org > > You can reach the person managing the list at > centos-owner(a)centos.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CentOS digest..." > > > Today's Topics: > > 1. CentOS-announce Digest, Vol 39, Issue 13 > (centos-announce-request(a)centos.org) > 2. Re: Low-memory Centos5? (Anne Wilson) > 3. Re: Low-memory Centos5? (Wojtek Pilorz) > 4. Re: Low-memory Centos5? (Max Hetrick) > 5. RE-export nfs mounted share (whoami i) > 6. Re: Low-memory Centos5? (Anne Wilson) > 7. Re: Low-memory Centos5? (Robert Moskowitz) > 8. RE: PPPoE client help (John) > 9. Re: kernel-2.6.18-53.1.21.el5 centosplus? (Johnny Hughes) > 10. Re: Low-memory Centos5? (Ned Slider) > 11. Re: 40 second delay on automounts with 2.6.18-53.1.21.el5 > kernel (Johnny Hughes) > 12. Config for NFSv4 an Kerberos on CentOS 5.1 (Sebastian Marten) > 13. Re: Low-memory Centos5? (Wojtek Pilorz) > 14. openafs kernel module (Markus Hetzenecker) > 15. RE: Low-memory Centos5? (Sorin@Gmail) > 16. Re: openafs kernel module (Johnny Hughes) > 17. Re: Config for NFSv4 an Kerberos on CentOS 5.1 (Barry Brimer) > 18. Re: RE-export nfs mounted share (Barry Brimer) > 19. Re: Low-memory Centos5? (Bob Taylor) > 20. servercd i386 5.1 (Jerry Geis) > 21. Re: CentOS 5.2 ? (Johnny Hughes) > 22. RE: CentOS 5.2 ? (Ross S. W. Walker) > 23. Re: servercd i386 5.1 (Ned Slider) > 24. centos on ebox (Jerry Geis) > 25. Re: CentOS 5.2 ? (Ned Slider) > 26. Re: centos on ebox (Ralph Angenendt) > 27. nfsnobody 65534 vs 4294967294 (David Halik) > 28. Re: centos on ebox (Jerry Geis) > 29. Re: centos on ebox (Tru Huynh) > 30. Re: centos on ebox (Jerry Geis) > 31. Re: Re: centos on ebox (Tru Huynh) > 32. Re: Re: centos on ebox (Johnny Hughes) > 33. Re: FireFox (Scott Silva) > 34. Re: Low-memory Centos5? (MHR) > 35. Re: centos on ebox (Jerry Geis) > 36. Re: Re: centos on ebox (Johnny Hughes) > 37. Setting up a chroot (MHR) > 38. Frequent Gnome Terminal crashes in CentOS 5.1 (Alfred von Campe) > 39. Re: centos on ebox (Jerry Geis) > 40. Re: Frequent Gnome Terminal crashes in CentOS 5.1 > (Gregg McClintic) > 41. Re: Re: centos on ebox (Johnny Hughes) > 42. Re: Frequent Gnome Terminal crashes in CentOS 5.1 (Johnny Hughes) > 43. Re: centos on ebox (Jerry Geis) > 44. Re: Setting up a chroot (Johnny Hughes) > 45. RE: /etc/sysctl.conf edit not permanent (Joseph L. Casale) > 46. Re: 40 second delay on automounts with 2.6.18-53.1.21.el5 > kernel (Joe Pruett) > 47. Re: centos on ebox (Jerry Geis) > 48. Re: Frequent Gnome Terminal crashes in CentOS 5.1 > (Alfred von Campe) > 49. Re: centos on ebox (Scott Silva) > 50. Re: 40 second delay on automounts with 2.6.18-53.1.21.el5 > kernel (Ned Slider) > 51. Re: 40 second delay on automounts with 2.6.18-53.1.21.el5 > kernel (Scott Silva) > 52. Re: Re: 40 second delay on automounts with 2.6.18-53.1.21.el5 > kernel (Johnny Hughes) > 53. Re: Frequent Gnome Terminal crashes in CentOS 5.1 (MHR) > 54. Re: FireFox (William L. Maltby) > 55. Re: Centosplus vmware kernels....??? (Tom Bishop) > 56. Negative Values in delay pools (Sergio Belkin) > 57. Re: Frequent Gnome Terminal crashes in CentOS 5.1 > (Filipe Brandenburger) > 58. Re: Frequent Gnome Terminal crashes in CentOS 5.1 > (Filipe Brandenburger) > 59. Re: GFS (Jay Leafey) > 60. Re: Learning some sad things about the state of IPv6 > (Christopher Chan) > 61. Re: Learning some sad things about the state of IPv6 > (Matt Shields) > 62. Re: Learning some sad things about the state of IPv6 (Rob Townley) > 63. Re: Learning some sad things about the state of IPv6 > (Christopher Chan) > 64. Re: FireFox (Robert Spangler) > 65. Re: Config for NFSv4 an Kerberos on CentOS 5.1 (Sebastian Marten) > 66. offline file shares (gopinath) > 67. Re: offline file shares (John R Pierce) > 68. Re: offline file shares (Christopher Chan) > 69. Re: offline file shares (Fabian Arrotin - oxygen) > 70. Re: Centosplus vmware kernels....??? (Tru Huynh) > 71. Re: offline file shares (gopinath) > 72. Hasp Driver required (Balaji) > 73. Re: Hasp Driver required (Anne Wilson) > 74. Re: GFS (Karanbir Singh) > 75. Re: Learning some sad things about the state of IPv6 > (Karanbir Singh) > 76. Re: Frequent Gnome Terminal crashes in CentOS 5.1 > (Alfred von Campe) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 29 May 2008 12:00:14 +0000 (UTC) > From: centos-announce-request(a)centos.org > Subject: [CentOS] CentOS-announce Digest, Vol 39, Issue 13 > To: centos-announce(a)centos.org > Message-ID: <20080529120014.8BC3EF3C973(a)mail.centos.org> > Content-Type: text/plain; charset="us-ascii" > > Send CentOS-announce mailing list submissions to > centos-announce(a)centos.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.centos.org/mailman/listinfo/centos-announce > or, via email, send a message with subject or body 'help' to > centos-announce-request(a)centos.org > > You can reach the person managing the list at > centos-announce-owner(a)centos.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CentOS-announce digest..." > > > Today's Topics: > > 1. CESA-2008:0288 Critical CentOS 3 i386 samba - security update > (Tru Huynh) > 2. CESA-2008:0288 Critical CentOS 3 x86_64 samba - security > update (Tru Huynh) > 3. CESA-2008:0288-01: Critical CentOS 2 i386 samba security > update (John Newbigin) > 4. CESA-2008:0506-05: Low CentOS 2 i386 tzdata enhancement > update (John Newbigin) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 28 May 2008 22:10:34 +0200 > From: Tru Huynh <tru(a)centos.org> > Subject: [CentOS-announce] CESA-2008:0288 Critical CentOS 3 i386 samba > - security update > To: centos-announce(a)centos.org > Message-ID: <20080528201034.GA10630(a)sillage.bis.pasteur.fr> > Content-Type: text/plain; charset="us-ascii" > > CentOS Errata and Security Advisory CESA-2008:0288 > > samba security update for CentOS 3 i386: > https://rhn.redhat.com/errata/RHSA-2008-0288.html > > The following updated file has been uploaded and is currently syncing to > the mirrors: > > i386: > updates/i386/RPMS/samba-3.0.9-1.3E.15.i386.rpm > updates/i386/RPMS/samba-client-3.0.9-1.3E.15.i386.rpm > updates/i386/RPMS/samba-common-3.0.9-1.3E.15.i386.rpm > updates/i386/RPMS/samba-swat-3.0.9-1.3E.15.i386.rpm > > source: > updates/SRPMS/samba-3.0.9-1.3E.15.src.rpm > > You may update your CentOS-3 i386 installations by running the command: > > yum update samba\* > > Tru > -- > Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B >

2 1

Compact Flash..
by Ryan Nichols 09 Jun '08

09 Jun '08

Ok.. Im curious.. Can I install CentOS on a compact flash card, then have the MySQL on another drive? to have the compact flash like read only for the OS to boot from, then do the swap, mysql,etc from the other drive? How hard would this be to do? Thanks, Ryan Nichols

7 9

Re: [CentOS] sendmail not sending after reboot UPDATE
by Ray Leventhal 09 Jun '08

09 Jun '08

<snip> > > where does the server point to for its dns? if it's (supposed to be) > running a nameserver (e.g., you're pointing to 127.0.0.1) but the dns > server isn't running you'll get a timeout. if you have a second > nameserver configured in /etc/resolv.conf you'll likely ultimately > get a response, but only after you time out on the first. > > by the way, you may want to look at the server's "client" sendmail > queue ("mailq -Ac"). the remote clients dump to the regular queue > (/var/spool/mqueue), but localhost mail goes into the clientmqueue > (/var/spool/clientmqueue). if mail is hanging there it might give > hints that are easier to debug than are remote connections. [you may > also want to try originating mail from localhost and see what > happens.] > > > > - Rick > > The server points to another server on the network for dns, which is running and accepting queries on 53, as expected. resolv.conf points to the correct nameserver IP. I'll check the client queue..hadn't thought of that. Thanks, -Ray

1 0

Re: [CentOS] sendmail not sending after reboot UPDATE
by Ray Leventhal 09 Jun '08

09 Jun '08

lists-centos wrote: > are you configured for spamassassin or clamav as milters on the > server (in the sendmail.cf) and either/both of these didn't start up > on the reboot? sendmail will still accept mail with sa/clamav not > running, but it takes a bit longer. > there's also the possibility of an inverse-map lookup on the > ipnumbers of the inbound client machines. if the server is trying to > do the lookups but is having trouble reaching the appropriate > in-addr.arpa server you'll get long hangs. > > - Rick > Hi Rick, no milters are configured...this is a really small intranet with absolutely no connectivity to the outside world. I'm baffled. Regarding your mention of a dns issue...it may be, but i'm still baffled as this was all working before the weekend. I rebooted the box on Sunday and am in this <pun intended> bind today :) Thanks for your input...much appreciated. -R

1 0

new install of 5.1 with KVM-over-IP - can't install with GUI - need assistance
by Alon 09 Jun '08

09 Jun '08

Hi All, I have several dozens of CentOS and WhiteBox servers. Most of them are CentOS 4.6. Our installation service is done in the datacenter where the servers are located. When we install a fresh clean install, we use the GUI menus, while using the KVMoverIP. That was working great with CentOS 4.x In CentOS 5.x, the installation process 'annonces" that "Hey,. I know you are using a KVM and don't have a monitor attached" (who cares??). But, "since you are using a KVM and no monitor is attached,. you CANNOT use the GUI installation". Why??? 4.x didn't care for this. Why make my life difficult? I have to 'cheat' by calling the datacenter to plug a monitor for the first minute of the install and then plug back the KVM cable. Isn't this stupid? of course it is! I am looking for a solution such as a parameter that I can pass to the boot sequence (vga=nommconf or something like that) so that it won't do the probing for the VGA and just let me go about my business. Mind you that this is a problem both with DELL PowerEdge 1950iii with DRAC5 remote consule as well as with just plain PCs that use ATEN KVM 9116. Once the probe understand that we don't use a monitor it prompts the 'can't use the GUI'. Any pointers about this? Thanks, -Sup.

5 7

RE: [CentOS] Copying files from specific date.
by Rajeev R. Veedu 09 Jun '08

09 Jun '08

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Steve Huff Sent: Monday, June 09, 2008 7:34 PM To: centos(a)centos.org Subject: Re: [CentOS] Copying files from specific date. On Jun 9, 2008, at 11:16 AM, Rajeev R. Veedu wrote: > Does anyone aware of any utility to copy files which are created > or modify form a specific date ?. > >>to copy all files in /dir1 modified within the last 5 days to /dir2: >>$ find /dir1 -mtime -5 | xargs -I {} cp {} /dir2 >>if the filenames have whitespace in them, you can use this trick: >>$ find /dir1 -mtime -5 -print0 | xargs -0 -I {} cp {} /dir2 >>for more details on selecting by time: >>$ man find >>pay particular attention to the options -atime, -amin, -ctime, -cmin, >>-mtime, -mmin, and -daystart. >>-steve -- Actually I need to copy this on to another server with same folder structure. I think I need to explain bit of history. I had a server crash last week, and we have restored the files from the tape. However during this period of making the server up, the users having adding or changed files from our backup Server (Samba server which rsync to production server every night.) now I need to copy the files which user added/ modify last 7 days. Ideally if I can get this option in rsync it would be better. Otherwise I need to have a method so that all changed files to go on the relevant folder on the production server. I cannot take the full files in the backup files since they are historical backup and there are some unwanted files. Can I use scp instead of cp in your statement?. But how does it take the same directory name as the original location? Eg:from ServerA/FLDR2/FLDR3/Filename should go to ServerB/FLDR2/FLDR3/FILENAME Only change is the server name all other values will remain same. Any help would be really appreciated. Thanks Rajeev

1 0

Copying files from specific date.
by Rajeev R. Veedu 09 Jun '08

09 Jun '08

Dear all, Does anyone aware of any utility to copy files which are created or modify form a specific date ?. Thanks Rajeev R. Veedu

3 2

Re: [CentOS] Dell 1950 Perc 6/i with centos 4.5
by Steve Moccio 09 Jun '08

09 Jun '08

Jeff, I cant thank you enough. I not only did this for the kernel but I did this for the pxeboot's jumpstart installation of 4.5. Thanks again for taking the time to respond. ---- On Sat, 7 Jun 2008, Jeff Collins (jeff(a)chpscchome.org) wrote: I had a somewhat similar problem with a Dell 2600 running Centos 4.4. I found that 4.6 no longer had the megaraid driver for my card, so I:Here is a detailed description of what I did, and perhaps this may be of help if you adapt it to your situation.============================================================================================== This is a brief description of how to set up the 4.6 kernel so that it will boot on list.The reason that the stock CentOS 4.6 kernel will not boot on list is that LSI and Dell madethe decision to remove support for the PERC/LSI controller adapter shipped with the PowerEdge2600 from the 4.6 kernel. The new megaraid subsystem supports the PERC/LSIcontrollers shipped with the newer PowerEdge 2900 models. The stock 4.5 and 4.6 kernelswill not boot on an older 2600.The 4.4 kernel is called 2.6.9-42.EL or 2.6.9-42.ELsmp in the symmetric multiprocessor version.The 4.6 kernel that first shipped is called 2.6.9-67. The current topof tree is 2.6.9-67.0.15 as of May 13 2008). When we compare the megaraid_sas.cdrivers (for example), we see that a lot of generic support has been taken out of the newerversion, compared with the driver from 4.4 (2.6.9-42.EL).For a full scan of the differences between all source files in the megaraid directory, seenewdifftxt in this directory.So what we have to do is take out a top of tree 4.6 kernel, wipe out all the code in themegaraid directory, put back all the old megaraid code, then build a kernel. To get theold source kernel, use www.rpmfind.org to search for the proper kernel:kernel-2.6.9-42.EL.src.rpm. The current top of tree source magically appears in/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9 when we performyum install kernel* and follow the instructions to build a custom kernel.This is not trivial, but all the instructions are athttp://wiki.centos.org/HowTos/Custom_KernelThe basic steps I took were slightly different:-----------------------------------------------1) Download the stock 4.4 kernel source using rpmfind2) Build the stock 4.4 kernel, install, and test boot it to validate the process.3) Save off the megaraid directory code which is probably in/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9/drivers/scsi/megaraid4. Change the name of the prior kernel to something like/usr/src/redhat/BUILD.old, etcSo you get [root@list scsi]# ls /usr/src/redhat/BUILD BUILD.old RPMS SOURCES SOURCES.old SPECS SPECS.old SRPMS5. Download the top of tree kernel sources for the version we are on (Centos 4)6. Blast the contents of/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9/drivers/scsi/megaraidand replace with the old megaraid code you saved.7. Build and test the kernel (The instructions tell us to use rpmbuild to create a full rpmpackage, but I took the shortcut of just making a stock kernel from the top of theBUILD/kernel-2.6.9/linux-2.6.9 directory. The steps area. make oldconfigb. make menuconfig (you can take out extra modules if you wish, but make sureyou know what you are doing. It is easy to create a kernel that does not boot)c. make -j 4 bzImaged. cp ./arch/i386/boot/bzImage /boot/vmlinuz-2.6.9-your-versione. cp System.map /boot/System.map-2.6.9-your-versionf. make -j 4 modulesg. make modules_installh. mkinitrd /boot/mkinitrd-2.6.9-your-version.img 2.6.9-your-versioni. edit /etc/grub.conf to add your kerneli. sync; rebootj. Choose your kernel (do not make it the default until it has been tested!)k. Test your kernelSo on list we end up with four Linux kernels:The first is the old smp kernel first shipped as CentOS 4.4.The second is a test kernel for use in creating a custom install CD set.The third is the patched 4.6 kernel we are running.The fourth is the uniprocessor stock kernel shipped as CentOS 4.4.Since grub counting is 0 based, we have set the default to 2 so we boot thethird kernel by default (2.6.9-jgc).Here is the grub.conf file in /etc===========================================================================# grub.conf generated by anaconda## Note that you do not have to rerun grub after making changes to this file# NOTICE: You have a /boot partition. This means that# all kernel and initrd paths are relative to /boot/, eg.# root (hd0,1)# kernel /vmlinuz-version ro root=/dev/sda6# initrd /initrd-version.img#boot=/dev/sda2default=2timeout=5splashimage=(hd0,1)/grub/splash.xpm.gzhiddenmenutitle CentOS-4 i386 (2.6.9-42.ELsmp) root (hd0,1) kernel /vmlinuz-2.6.9-42.ELsmp ro root=LABEL=/ rhgb quiet initrd /initrd-2.6.9-42.ELsmp.imgtitle CentOS-4 i386 (2.6.9-prep) root (hd0,1) kernel /vmlinuz-2.6.9-prep ro root=LABEL=/ rhgb quiet initrd /initrd-2.6.9-prepimgtitle CentOS-4 i386 (2.6.9-jgc) root (hd0,1) kernel /vmlinuz-2.6.9-jgc ro root=LABEL=/ rhgb quiet initrd /initrd-2.6.9-jgc.imgtitle CentOS-4 i386-up (2.6.9-42.EL) root (hd0,1) kernel /vmlinuz-2.6.9-42.EL ro root=LABEL=/ rhgb quiet initrd /initrd-2.6.9-42.EL.imgtitle dos rootnoverify (hd0,0) chainloader +1 ============================================================================Perhaps this will be of some help to you, Jeff CollinsCommunity Health Partnership of Santa Clara County

1 0

Re: RE-export nfs mounted share
by David G. Miller 09 Jun '08

09 Jun '08

"whoami i" <hicheerup(a)gmail.com> wrote: > Hi Barry, > > First of all thanx for your reply but i already used the options > crossmnt,fsid=0 in my exports file still i am not able to re-export it. > > > Regards > lingu > > On Fri, May 30, 2008 at 5:30 PM, <centos-request(a)centos.org> wrote: > > >> > Send CentOS mailing list submissions to >> > centos(a)centos.org >> > >> > To subscribe or unsubscribe via the World Wide Web, visit >> > http://lists.centos.org/mailman/listinfo/centos >> > or, via email, send a message with subject or body 'help' to >> > centos-request(a)centos.org >> > >> > You can reach the person managing the list at >> > centos-owner(a)centos.org >> > >> > When replying, please edit your Subject line so it is more specific >> > than "Re: Contents of CentOS digest..." >> > >> > >> > Today's Topics: >> > >> > 1. CentOS-announce Digest, Vol 39, Issue 13 >> > (centos-announce-request(a)centos.org) >> > 2. Re: Low-memory Centos5? (Anne Wilson) >> > 3. Re: Low-memory Centos5? (Wojtek Pilorz) I think we just found another argument as to why top-posting is a bad idea... You can easily miss the fact that you included the whole digest and not just the message you're actually replying to. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

OT: really dumb question about APC UPS
by Jamie Lists 09 Jun '08

09 Jun '08

We have about 4 servers connected to an APC UPS. The UPS only has one UPS connection. So my question is, in a power outage how do i get all my servers to safely shutdown? Do i run a USB hub? Do i write a script on the one machine connected to turn off all the other machines? I'm confused. Jamie

5 4

Chroot'ed SSH
by Filipe Brandenburger 09 Jun '08

09 Jun '08

Hi, Is anyone chrooting users that connect through SSH? I looked for it on Google and I basically saw several methods: - OpenSSH 5 supports ChrootDirectory (FC9 apparently has RPMs that probably could be rebuilt under CentOS 5) - There seem to be several patches for OpenSSH 4.x to do the chroot, the most popular seems to be http://chrootssh.sf.net/ - There appears to be a pam_chroot - There are solutions based on setting the user's shell to a script/binary that does the chroot By quickly looking at yum list, it doesn't seem like neither RHEL nor CentOS directly support any of those, at least I didn't find any RPMs for any of those. If anyone is doing it, I would like to know what were your experiences and if you would recommend doing it or not. I'm specially interested in anything that doesn't involve replacing the OpenSSH that comes with CentOS, after all, that's what CentOS is all about, if you start replacing the pieces, what's the point... Thanks a lot! Filipe

3 3

Hardening CentOS by removing "hacker" tools
by Filipe Brandenburger 09 Jun '08

09 Jun '08

Hi, My boss asked me to harden a CentOS box by removing "hacker" tools, such as nmap, tcpdump, nc (netcat), telnet, etc. I would like to know which list of packages would you remove from a base install. I would appreciate if someone could point me to a "standard" way of doing this. I know there are procedures for hardening a machine (I remember reading about Bastille Linux) but I don't know how effective they are and if they include the removal of such tools in their procedures. Any advice would be very appreciated! Thanks, Filipe

13 17

Regd: Linux Boot-Up Front-end show details and hide details configuration files
by Balaji 09 Jun '08

09 Jun '08

Dear All, During CentOS Boot-Up user can See all of the standard messages within this front-end by clicking on the 'show details' link. and hide the standard messages within this front-end by clicking on the 'hide details' link. I need to implement my own software like this, so i need yours help I tried to google-out and i can't find out the show details and hide details configuration files Please, do the needful. Regards -S.Balaji

1 0

RE-export nfs mounted share
by whoami i 09 Jun '08

09 Jun '08

Hi Is there any way to re-export an nfs mounted directory? I am having three servers runnning on centos4.5 and i am trying to implement nfs share in an below manner [bcoz there is no alternative way for me to setup nfs share] HOST A--->>>EXPORTS /prod/data ------->>>HOST B HOST B ---->>MOUNTED ------>>> /prod/data-----UNDER---/PROD1 [working fine] HOST B EXPORTS /PROD1 ------>>>>HOST C HOST C ----->>TRY MOUNTING ----->>>RESULT IN BELOW ERROR BUT WHEN I TRY TO MOUNT THE ALREADY MOUNTED NFS SHARE IN "HOST C " I AM GETTING BELOW ERROR. #################MOUNT ERROR########################################## mount: 10.65.64.30:/PROD1 failed, reason given by server: Permission denied ########################################################################## Can anyone suggest me the way to work out aboVE scenario. Note: I find no -r(-re-export) option in rpc.mountd REGARDS LINGU

4 3

syslog - python
by David Hláčik 09 Jun '08

09 Jun '08

Hello , i want all my log messages from python to have in /var/log/python Now they are in /var/log/messages: Jun 9 12:10:51 sx1 kernel: klogd 1.4.1, log source = /proc/kmsg started. Jun 9 12:11:01 sx1 python: MM_MEMBERS [it] Nothing to do. Jun 9 12:11:02 sx1 python: MM_MEMBERS [research] Nothing to do. Jun 9 12:12:01 sx1 python: MM_MEMBERS [it] Nothing to do. Jun 9 12:12:01 sx1 python: MM_MEMBERS [research] Nothing to do. So i have added to the end of the syslog.conf # Python python.* /var/log/python and restarted syslog, then i have created /var/log/python and for sure addedd u+rw, g +rw, o+rw permissions But, nothing, /var/log/python is empty What am i doing wrong? (Centos 5.1) Thanks

5 8

Change from gnome to KDE desktop
by Kai Schaetzl 09 Jun '08

09 Jun '08

What's the best way to do this? Remove the yum group gnome (does this set default init to 3?), install the yum group KDE and then set default init to 5 again (as I assume installing KDE not during the setup will not automatically set the system to start the gui?). Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss