- Discuss - lists.centos.org

CentOS 5.2 ?
by Florin Andrei 29 May '08

29 May '08

Anybody knows when CentOS 5.2 will be made available? http://www.linux.com/feature/135980 -- Florin Andrei http://florin.myip.org/

15 16

openafs kernel module
by Markus Hetzenecker 29 May '08

29 May '08

We start to use centos 5 for our workstation at our site (University Innsbruck) and we use openafs to hold the home directories. There would be a big advantage to have the openafs kernel module (and the additional rpms) in the centos extras (or addons) repository with an automatic compile for the available kernels. If you need any help to do this i would be happy to participate in any way. Cheers, Markus. --- fork() off; LinuxBetreuung Uni Ibk, fon: +43 512 507 2369 GnuPG key: http://www.uibk.ac.at/~c102130/public_key.asc

2 1

kernel-2.6.18-53.1.21.el5 centosplus?
by Matthew Kent 29 May '08

29 May '08

Been a week, any eta? :) Thanks! -- Matthew Kent \ SA \ bravenet.com

3 4

PPPoE client help
by Robert Moskowitz 29 May '08

29 May '08

Please point me in the right direction.... My ISP is giving me an IPv6 prefix, but to get that I have to: The current Speedstream ADSL router will be configured as a bridge. I will have to set up a Linux (read Centos, I hope) router that will connect ethernet to the Speedstream but run PPPoE to his network and get both the IPv4 and IPv6 route delegations. There is no easy way that I know of to test this ahead of time. I basically have to get the box configed, have my ISP switch the Speedstream to briding mode, and GO! So I need to do some reading....

3 2

CentOS-announce Digest, Vol 39, Issue 13
by centos-announce-request＠centos.org 29 May '08

29 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0288 Critical CentOS 3 i386 samba - security update (Tru Huynh) 2. CESA-2008:0288 Critical CentOS 3 x86_64 samba - security update (Tru Huynh) 3. CESA-2008:0288-01: Critical CentOS 2 i386 samba security update (John Newbigin) 4. CESA-2008:0506-05: Low CentOS 2 i386 tzdata enhancement update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 28 May 2008 22:10:34 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0288 Critical CentOS 3 i386 samba - security update To: centos-announce(a)centos.org Message-ID: <20080528201034.GA10630(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0288 samba security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0288.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/samba-3.0.9-1.3E.15.i386.rpm updates/i386/RPMS/samba-client-3.0.9-1.3E.15.i386.rpm updates/i386/RPMS/samba-common-3.0.9-1.3E.15.i386.rpm updates/i386/RPMS/samba-swat-3.0.9-1.3E.15.i386.rpm source: updates/SRPMS/samba-3.0.9-1.3E.15.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update samba\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

RE: [CentOS] centos 5.1 i386 on a 1GIG flash
by Plant, Dean 29 May '08

29 May '08

Jerry Geis wrote: > I have found this link http://owlriver.com/tips/tiny-centos > for installing centos on a minimal system. I am looking at putting > centos on a 1 GIG flash drive. The above page talks about removing > packages after install to attain the small size. > > however, I am getting blocked at the install page about not enough > room > to install. > All I have selected is the base package. nothing else. > > Is there a way to install "less thank" base... I tried to option off > items in the base package > but the last message I got was about 1044 was my packages size... > > Anyone have suggestions or have tried to install on a small device. > THanks, > > Jerry Create a kickstart file with the packages removed as shown in the appendix on their web page. Dean

1 0

CentOS Boot-Up Progress Bar Show Details Menu is Not Working
by Balaji 29 May '08

29 May '08

Dear All, I have Installed CentOS 4.4 Linux and Linux Boot-Up Progress bar "Show Details" Menu when i enable the Menu it shows the start-up services details. Then i have done some changes in Linux but i am forgotten the changes. After some changes the Linux Boot-Up Progress bar "Show Details" Menu when i enable the Menu it will not shows the start-up services details. I tried to google-out the problem in vain Any clues as to whats the problem and the remedy? Regards -S.Balaji

2 1

centos 5 2.6.18-53.1.21.el5 kernel and ipsec
by Joe Pruett 29 May '08

29 May '08

i had previously been having issues with automount being slow with this new kernel and i tracked it down to dns delays which were being caused by ipsec not working. i have spent a few hours poking around and ipsec seems quite broken with this new kernel. esp packets go in and out just fine, but when i look at ip xfrm stats on the machine with the new kernel, i see that for input packets, the ah layer is being processed just fine, but the esp layer is showing 0 bytes/packets and no errors. i can't find any errors or other indications of what is going on. is anyone else running a standard ipsec tunnel (using the standard ifcfg method for creating the tunnel) under this new kernel? i know that a new 5.2 kernel should be coming soon, but i worry that whatever broke this version may happen there as well.

3 3

centos 5.1 i386 on a 1GIG flash
by Jerry Geis 29 May '08

29 May '08

I have found this link http://owlriver.com/tips/tiny-centos for installing centos on a minimal system. I am looking at putting centos on a 1 GIG flash drive. The above page talks about removing packages after install to attain the small size. however, I am getting blocked at the install page about not enough room to install. All I have selected is the base package. nothing else. Is there a way to install "less thank" base... I tried to option off items in the base package but the last message I got was about 1044 was my packages size... Anyone have suggestions or have tried to install on a small device. THanks, Jerry

5 4

Adding new drivers to the pxeboot initrd/kernel
by Drew Weaver 28 May '08

28 May '08

Does anyone have a howto or documentation on how to add new drivers to the pxeboot initrd/kernel? It appears that although some newer dells (t300) have Broadcom NetXtreme IIs in them, 4.6 won't recognize them for some reason (possibly because they're dual port?) -Drew

3 4

raw device change back to root after reboot
by mcclnx mcc 28 May '08

28 May '08

We are setup new DELL 6800 server fro Informix database. We create "raw" partitions and change "raw" partitions owner to "informix:informix". After reboot owner change back to "root". we don't have problem on CENTOS 3.X, but this problem happen on CENTOS 4.6. I double check "SELINUX" is "disable". does anyone know why it work on 3.X, but NOT on 4.6? do I need modify /etc/udev/permissions.d/50-udev.permissions? if "yes", anyone have sample? Thanks. 付費才容量無上限？Yahoo!奇摩電子信箱2.0免費給你，信件永遠不必刪！ - 馬上體驗！

2 1

Question about delay pools
by Sergio Belkin 28 May '08

28 May '08

Hi, I configured delay pools on squid. I get the following from squidclient: Delay pools configured: 2 Pool: 1 Class: 1 Aggregate: Disabled. Pool: 2 Class: 1 Aggregate: Max: 187500 Restore: 187500 Current: -6 Memory Used: 624 bytes End of Output What does mean Current with a negative value? Thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

1 0

Bind Help
by Joseph L. Casale 28 May '08

28 May '08

How does one include a view in another? I have a view which matches one client that I also want to be able to see the view right after, but it stops at its first match. Thanks! jlc

2 4

Problem accessing to Windows Terminal Server in load balancing.
by ArcosCom Linux User 28 May '08

28 May '08

Hi guys, I have this configuration: LAN -- LINUX BRIDGE -- LINUX BRIDGE -- TS The linux's bridges are for wifi purposes (2 centos machines) and is working fine. The problem I have is that the TS are 3 windows TS in load balancing configuration. There is 1 IP for general purposes and every TS has its own IP. For example, the configuration is: 192.168.0.1/24 TS1 192.168.0.2/24 TS2 192.168.0.3/24 TS3 192.168.0.10/24 (TS server IP for load balancing) The problem I encountered is that every PC into the LAN has access from the LAN to every TS (tested with ping), but them have no access to the IP for load balancing. I observed that all TSn IP's has their ARP entry in the ARP table, but the IP for load balancing not. How can I solve this problem at the bridge level? I think that there is something that the bridges are filtering and perhaps is because the TS load balancing software uses various "virtual macs" for the load balancing IP. Perhaps I must change any /proc/sys/net/ipv4/conf/<dev>/ file to bypass this filter, I'm thinking in "arp_ignore", put a "1" into it, but is a production environment and I don't want to loss the access to the devices. Any help?

2 3

How to move my MBR
by Scott Moseman 28 May '08

28 May '08

I removed an ATA drive (/home) for a new SATA and my system would not boot. I'm guessing that it put the MBR on that drive instead of the drive that holds the / partition. What's the best way confirm where the MBR resides and, after I verify that's my problem, how I can move (or make a copy) onto a different drive? Thanks, Scott

4 9

IPChains
by Chris Heiner 28 May '08

28 May '08

How can I tell if its running? Where is the default location? Thanks..

3 3

smp falls back to up mode on quad core
by Julian Echave 28 May '08

28 May '08

Hi, I'm running Centos 5.1 on an Intel Quad 2 Core with four Q6600 processors. Despite Centos 5 supporting multiple cores (SPM), it doesn't seem to work for me: 1) a dmesg shows that only one processor is seen: "SPM alternatives: switching to UP code", etc. 2) file /proc/cpuinfo shows only one processor 3) top with option 1 (to toggle between seeing all processors or an average) shows only 1 processor. I've googled this, and other people have found this kind of trouble, but I was not able to find any solutions. By the way: I've installed windows xp to see if it was a bios problem, but windows sees the 4 processors just fine. Any ideas? Thanks, Julian.

4 8

get widescreen 1280x800 for intel 965GM chipset
by Chen Xu 28 May '08

28 May '08

Dear All, I come from FreeBSD world. This is my first time setting up a CentOS on my laptop Dell Vostro 1400 with intel 965GM chipset. I am having problem here and need your help. I have 5.1 release installed. I have trouble to get 1280x800 resolution. The driver used is I810. I don't know if the chipset is too new for the xorg driver, and can anyone tell me if there is a fix, maybe with 915resolution? Any information is helpful. Thanks here in advance. -Chen

3 2

Secure iptables settings
by Joseph L. Casale 28 May '08

28 May '08

Is it feasible to write protect the /etc/sysconfig/iptables file so nothing can overwrite it, such that at least the config is persistent through a reboot? If not, is there a better way to accomplish this? Thanks! jlc

3 3

CPU temperature in an PowerEdge 860, LM85 chip
by Santi Saez 28 May '08

28 May '08

Dear Srs, I'm trying to monitor CPU temperatures in a PowerEdge 860 server, running CentOS 5.1 with 2.6.18-53.1.6.el5 kernel, using lm-sensors v2.10.0. Running "sensors-detect" I get: ====================================================================== (..) We can start with probing for (PCI) I2C or SMBus adapters. You do not need any special privileges for this. Do you want to probe now? (YES/no): Probing for PCI bus adapters... Use driver `i2c-i801' for device 00:1f.3: Intel ICH7 Probe succesfully concluded. We will now try to load each adapter module in turn. Load `i2c-i801' (say NO if built into your kernel)? (YES/no): Module loaded succesfully. (..) (..) Next adapter: SMBus I801 adapter at 08c0 Do you want to scan it? (YES/no/selectively): Client found at address 0x08 Client found at address 0x2e (..) (..) Probing for `National Semiconductor LM85 or LM96000'... Success! (confidence 7, driver `lm85') (..) (..) Client found at address 0x50 Probing for `SPD EEPROM'... Success! (confidence 8, driver `eeprom') Probing for `DDC monitor'... Failed! Probing for `Maxim MAX6900'... Failed! Client found at address 0x52 Probing for `SPD EEPROM'... Success! (confidence 8, driver `eeprom') Client found at address 0x60 Client found at address 0x69 (..) ====================================================================== This is the result of running "lm-sensors": ====================================================================== Driver `lm85' (should be inserted): Detects correctly: * Bus `SMBus I801 adapter at 08c0' Busdriver `i2c-i801', I2C address 0x2e Chip `National Semiconductor LM85 or LM96000' (confidence: 7) Driver `eeprom' (should be inserted): Detects correctly: * Bus `SMBus I801 adapter at 08c0' Busdriver `i2c-i801', I2C address 0x50 Chip `SPD EEPROM' (confidence: 8) * Bus `SMBus I801 adapter at 08c0' Busdriver `i2c-i801', I2C address 0x52 Chip `SPD EEPROM' (confidence: 8) ====================================================================== So, lm85 chip is correctly detected. Running "sensors" I get this output: ====================================================================== # sensors lm85-i2c-0-2e Adapter: SMBus I801 adapter at 08c0 V1.5: +0.00 V (min = +1.42 V, max = +1.58 V) VCore: +0.00 V (min = +1.03 V, max = +1.14 V) V3.3: +0.00 V (min = +3.13 V, max = +3.47 V) V5: +0.00 V (min = +4.74 V, max = +5.26 V) V12: +0.00 V (min = +11.38 V, max = +12.62 V) CPU_Fan: 0 RPM (min = 4000 RPM) ALARM fan2: 0 RPM (min = 0 RPM) ALARM fan3: 0 RPM (min = 0 RPM) ALARM fan4: 0 RPM (min = 0 RPM) ALARM CPU: +0Â°C (low = +10Â°C, high = +50Â°C) Board: +0Â°C (low = +10Â°C, high = +35Â°C) Remote: +0Â°C (low = +10Â°C, high = +35Â°C) CPU_PWM: 255 Fan2_PWM: 255 Fan3_PWM: 255 vid: +1.088 V (VRM Version 10.0) ====================================================================== Extraneous output, all temperature values returned are +0ºC, it's possible to monitor this motherboard sensors using lm-sensors? Also I have tried to monitor PowerEdge 860 using OpenIPMI, but I get: ====================================================================== # ipmitool sdr elist | grep -i temp Temp | 01h | ns | 3.1 | Disabled Planar Temp | 04h | ok | 7.1 | 28 degrees C Temp Interface | 53h | ns | 7.1 | Disabled ====================================================================== What means "Planar Temp"? And why "Temp" and "Temp Interface" params are disabled? Can I get CPU temperature with using IMPI? If I can't get temperatures using lm-sensors or OpenIPMI, what utility is available for Linux? thanks!! Regards, -- Santi Saez

1 0

Alberto Varesio is out of the office.
by A.Varesio＠spaziosystem.com 28 May '08

28 May '08

I will be out of the office starting 05/28/2008 and will not return until 05/29/2008. prova

1 0

simple load balancing/failover for OWA
by Ruslan Sivak 28 May '08

28 May '08

We are building an exchange cluster with two front end Outlook Web Access servers. We would like to at least have some sort of failover, and prefereably load balancing for them. The MS recommended way is to use NLB, but for various reasons that's not working with our set up. We are looking to set up a single linux server and use something like LVS to load balance/fail over the connections. Looking at LVS, it looks like it hasn't been updated in a while. Is it stable? Is it still the preferred solution? Since OWA has sessions, but no session replication, we would need something that can keep directing the same client to the same server (either by IP, or preferably by cookie). Can LVS handle this? I also saw that the latest version of Apache has some sort of load balancing support. Can it be used to set something like this up? We are looking for the simplest solution that won't require a lot of maintanence. We understand that having a single LVS box creates a single point of failure, and are willing to accept the risk for now to keep things simpler. Russ

4 5

memorial day kernel panic
by sbeam 28 May '08

28 May '08

I have a simple Tyan server with RAID1 on a 3ware 7002 that has been running updated Centos 5.1 for almost 3 weeks with no problem, it runs low-traffic Apache/PHP/mySQL and vsftpd sites exclusively - last night it crashed. The console showed something about a process named 'php' and gave a process id with the panic message, but that's all I can remember. Hard-rebooted and all was well... Then about 55 minutes later I was logged in with ssh and it froze. Another fun holiday trip back to the datacenter. This time I brought a camera, but found a message totally different - this seems more like a ext3/disk problem? http://www.flickr.com/photos/sbeam/2525251590/sizes/l/ the logs contain nothing unusual. I have set up a script to do a vmstat/ps dump every 10 minutes. Anything else advised by this kernel dump or places to look? Thanks much- Sam

8 11

USB modem on centos
by Jerry Geis 27 May '08

27 May '08

I am playing with a USR (us robotics) USB modem model 5637. in the past I used internal modems and had no issues. One this unit I plugged it in, dmesg says its recogized. I did "ln -s /dev/ttyACM0 /dev/ttyS4" this works. I then did "cu -l /dev/ttyS4" type "AT" and I get OK... looking good. When I "ATDT my number" I get a connection at 1200 baud (which I should) and funny characters... I thought looks like a parity thing. I then did "cu -e -l /dev/ttyS4" type "AT" and I get OK... Now when I do "ATDT my number" I get a connection at 1200 baud and I get readable characters. In the past internal PCI modems I never had to do anything special, just the cu -l /dev/ttyS4. I thought modem to modem handled all that speed/parity stuff and computer to modem just always worked given the correct baud rate. Does anyone know what the issue might be here. The reason I am asking is my program that talks to the modems (computer to modem) has always been setup for 8 data no parity and has always worked. When I use my program on the USB modem it is not working and I assumed from the parity issue above using "cu" to demonstrate. When I change my program to be 7 data bits and even parity it still did not work. Was wondering if anyone had any USB modem experience on centos and might know what is going on? Thanks, Jerry

2 1

why there is no liblua5.1.so in /usr/lib?
by bqj123 27 May '08

27 May '08

hello all: I want to install ModSecurity v2.5.4 in my system. I do the following setup to install the lua tar -xzvf lua-5.1.3.tar.gz cd lua-5.1.3/src make linux cd .. make install The ModSecurity ask me to add "LoadFile /usr/lib/liblua5.1.so" to the http.conf,but there is no liblua5.1.so in /usr/lib. I have search it and i didn't find the solution. Can any one tell me why there is no liblua5.1.so in /usr/lib Thanks for any reply.

4 4

clustered mail server?
by Rudi Ahlers 27 May '08

27 May '08

Hi all I'm looking for a working HOWTO / Tutorial / sample setup of setting up a clustered email server. I know I can setup a CentOS cluster with Heartbeat & drbd, but I'm not 100% convinced it will work for the email as well. Ideally, I'd like to use an open source groupware server, like say open exchange, php groupware, Scalix (free / community version), etc. So, if anyone can please point me in the right direction? I've already setup a heartbeat cluster, and use rsync to sync files for Samba, Apache & NFS, and also setup a Master-Master MySQL replication, but don't yet know how to setup the email server, -- Kind Regards Rudi Ahlers CEO, SoftDux Web: http://www.SoftDux.com Check out my technical blog, http://blog.softdux.com for Linux or other technical stuff, or visit http://www.WebHostingTalk.co.za for Web Hosting stuff

19 57

Fault tolerance with webservers
by gopinath 27 May '08

27 May '08

dear all i have a web server on centos 4.6. i have configured one more back up Webserver with the same configuration as the same on the primary web server Now how to configure this servers for fault tolerance. that is. if one server gets down the other should automatically become up. Please any one help me out how to configure the above. i am new to Linux ... Regards, Gopinath M Signal Networks Pvt. Ltd. Smile... it increases your face value!

6 5

Xen tools
by Ruslan Sivak 27 May '08

27 May '08

I have been playing around with Citrix XenServer Express. It seems pretty cool, and mostly meets my needs, except that the Express (Free) version only supports up to 4GB of RAM. I have 8GB on my machines. Since XenServer is based on Xen, I should be able to just install a base install of CentOS and use a third party management client to get all (most?) of the functionality of the XenServer without having to be limited to 4GB of RAM. Can someone recommend tools that I can use to manage the Xen hosts? I see there is Ganeti, but that seems to be linux only. I would prefer a windows or a web client, as I intend to have the actual Xen hosts be as stripped down installation as possible. As far as being able to utilize 8GB in CentOS do I need to install the x86_64 version, or is there some sort of AWE support? I remember reading that x86_64 version has some compatibility issues. Thanks in advance, Russ

1 0

Re: [CentOS] Strange slapd behavior...
by Ramon Nieto 27 May '08

27 May '08

Hi Are you using nss_ldap on that server? have you modified /etc/nsswitch.conf? If that's the case try adding the following line to /etc/ldap.conf nss_initgroups_ignoreusers root,ldap Best. --- El mar 27-may-08, Stjepan Gros <stjepan.gros(a)gmail.com> escribió: De:: Stjepan Gros <stjepan.gros(a)gmail.com> Asunto: [CentOS] Strange slapd behavior... A: centos(a)centos.org Fecha: martes, 27 mayo, 2008, 10:56 am Hi all, I have problems on one CentOS 4.6 with slapd. Namely, after trying to start it (via /etc/init.d/ldap start) it waits for very long in configuration check. Interestingly, when I try to start it manually, but without "-u ldap" option it starts immediately. What puzzles me more is the use of NETLINK socket when started with -u option that doesn't appear in strace output without using the option. I did grep through the source of the openldap for NETLINK but nothing was found. Can someone shed some lite on what's happening? Thanks, Stjepan _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ____________________________________________________________________________________ Yahoo! Deportes Beta ¡No te pierdas lo último sobre el torneo clausura 2008! Entérate aquí http://deportes.yahoo.com

2 1

Re: memorial day kernel panic {Scanned}
by Ross S. W. Walker 27 May '08

27 May '08

Scott Silva wrote: > on 5-27-2008 10:16 AM Ross S. W. Walker spake the following: > > sbeam wrote: > > > On Tuesday 27 May 2008 11:39, Scott Silva wrote: > > > > > > > > Running memtest for 24 hours should be enough to test the ram. > > > > A 3ware 7006 is a fairly old card. Does it have the latest bios available > > > > from 3ware? > > > > > > > > You could always eliminate the 3ware controller by installing a drive on > > > > whatever built in controller it has. > > > > > > this is a production server, so running an extended memtest not going to > > > happen. But I can swap it out and put it in a backup system to do the test. > > > It's beginning to look a lot like a RAM issue as I have now seen a couple > > > segfaults from programs that have always run fine. Every kernel panic message > > > is different (crashed again 1 hour ago). Fans and case temp are nominal. > > > > > > the 3ware card was just purchased last month, it has the latest firmware and > > > bios installed. > > > > > > the memory is from PQI - supposed to be an OK brand right? it has a lifetime > > > warranty... heh > > > > > > next steps... HA and fault-tolerant clustering, per the adjacent thread... > > > this is the cautionary tale come to life. > > > > It would be great if there were a simple machine that you could plug > > a bunch of dimms of varying types into and it will perform high-speed > > tests on them continuously and flag ones that show an error. > > > > Then you could test all memory modules thoroughly before putting them > > into production servers (or any server for that matter). > > That is why a good long burn in test is a worthwhile thing to > plan for. That is unless you need to rush a replacement > server out quickly. Yes, but even then, with say 16GB or 32GB of memory it happens that some errors just fall through the cracks. > I usually run memtest86 for 48 hours, and then run a burn in > test with some load. > > There are simple machines for testing memory, but they tend > to be very expensive and time consuming. Manufacturers can't > take the time to do thorough memory tests before they ship, > so they usually do some quick go-nogo tests and depend on > their warranty dept. to do the hard tests. > > I don't think it would pay for anyone to buy one of these > testers, unless you are a very large var like Dell or HP. It > is easier (and probably cheaper) to just send new ram out and > send the returns back to your supplier for them to check. I actually found a memory testing system for around $4K, yes it's about the cost of a well equiped server, but if it works well it should earn it's keep pretty quick. It's called RAMCHECK, I priced out the DDR/DDR2 unit, but there is add-ons for SODIMM, SDRAM, EDO, if you got it fully loaded I suspect it would be around $5K. Company's called Innovations http://www.memorytesters.com/ They're Government registered and CDW seems to resell it, so it isn't completely suspect. -Ross ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

1 0

Strange slapd behavior...
by Stjepan Gros 27 May '08

27 May '08

Hi all, I have problems on one CentOS 4.6 with slapd. Namely, after trying to start it (via /etc/init.d/ldap start) it waits for very long in configuration check. Interestingly, when I try to start it manually, but without "-u ldap" option it starts immediately. What puzzles me more is the use of NETLINK socket when started with -u option that doesn't appear in strace output without using the option. I did grep through the source of the openldap for NETLINK but nothing was found. Can someone shed some lite on what's happening? Thanks, Stjepan

1 0

Centos on new intel processor
by nightduke 27 May '08

27 May '08

Hi i wish to know if anyone has installed Centos in a new type of processor, intel atom. Thanks Nightduke

1 0

IPTables help
by Joseph L. Casale 27 May '08

27 May '08

I have a dual homed server in an install for someone who is very cost sensitive. This server originally is being setup as an Asterisk server, but now the simplest thing for me to do is also set it up to provide internet access for the small shop as well. So it will have one external, WAN facing nic that needs all incoming ports except UDP 5060 and 10000 -> 60000 blocked for all but two ips. The internal, LAN facing NIC will need all ports except voip/dns/http blocked to it, and need to provide masquerading. I have limited experience with iptables and would love some guidelines. Any pointers would be greatly appreciated! Thanks, jlc

6 17

Existenial doubt about Xen and LVMs
by Sergio Belkin 27 May '08

27 May '08

Hi, I have a Dom0 with LVMs. Also, I have 2 DomU's. What happen with DomU partitions if I resize Dom0 volumes? They changes of size too? Thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 2

Re: RAID5 or RAID50 for database?
by Scott Silva 26 May '08

26 May '08

on 5-22-2008 9:58 PM Bahadir Kiziltan spake the following: > You need at least 6 drives for RAID5. I don't know if Perc 4e/Di > allows configuring the RAID5. > Where did you get this bit of information? You can create a raid 5 with 3 or more disks. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!!

7 11

best disk configuration
by Mag Gam 26 May '08

26 May '08

I have 12 750GB drive appliance from HP. I was wondering what is the best disk configuration? I suppose a large RAID5 would be bad since rebuilding would take too long. What do you recommend? TIA

4 4

read only root file system
by Fred Noz 26 May '08

26 May '08

On Saturday 24 May 2008 12:05:30 Fred Noz wrote: > Responding to a question posted earlier this month, Centos 5.1 > includes configuration files for enabling the read-only root > filesystem. Actually, all filesystems can be mounted read-only with > particular files and directories mounted on a read-write tmpfs (in > RAM). This capability comes directly from the upstream provider. > When your computer comes back up, the root and any other system > partitions will be mounted read-only. All the files and directories > listed in /etc/rwtab will be mounted read-write on a tmpfs filesystem. > You can add additional files and directories to rwtab to make them > writable after reboot. > > Note that this system is stateless. When you reboot again, everything > written to the tmpfs filesystem vanishes and the system will be > exactly as it was the last time it was booted. You could add a > writable filesystem on disk or NFS for writing files you want to > retain after rebooting. This is very interesting. Thanks for the sharing Fred. So, it's somekind of Live CD on a disk? I can't think of a practical benefit of using such system, is it to protect it from unwanted modification? Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial ----- Fajar, There are many practical reasons why one would want to run a Linux system, whether it be desktop or server, with a read-only root. One reason is for ease of maintenance, especially when there are many systems to maintain. You might be administering computers in a classroom, internet access point, or library and you want to be certain that after reboot, the system is exactly as it was the last time it was rebooted, even if the users mess with the system accidentally or on purpose. For example, if a user fills up the /tmp filesystem and causes the system to crash, after booting, the system will have an empty /tmp filesystem. It will not require that fsck to be run because the other filesystems were mounted read-only. This implies no risk of filesystem corruption (except due to physical failures on the disk). Not needing fsck saves time on boot. You could use read-only root on embedded systems where there is no way an administrator could get to the system to fix it. Read-only root is beneficial on a system running on flash media because this avoids having recurring writes wear out some sectors on the media. This is a practical way to run a large group of diskless systems. A single read-only root filesystem can be made available on a network from an NFS server. Many diskless clients can use this readonly-root simultaneously. Of course, this is a way to implement a live CD. In addition to easy maintenance, readonly-root adds a layer of security. The security is broken if someone gains access to the root user, but then many security protections are lost if someone gains root. Even a Database server can benefit from being run on read-only root. The data disk would certainly be mounted read-write, but there is no reason why the operating system and database application software need to be on disks mounted read-write. When an administrator wants to perform an update, upgrade, software, installation. or other system change, the administrator sets the readonly filesystems to read-write using a simple mount command. After the administrator finishes making the changes, a simple mount command (or reboot) sets the readonly filesystems back to read-only. Of course, on systems where the root and system filesystems have no physical write capability, such as on a live CD, they cannot be set to read-write. - Fred --------- Fred Noz Fred(a)Noz.net

5 7

Chip set support
by John Bowden 26 May '08

26 May '08

Hi folks. I,m thinking of purchasing an ASUS mother board with this chip set in it. NVIDIA® nForce® 430 MCP Lan= NVIDIA® nForce® 430 MCP built-in Gigabit MAC with external Attansic PHY. Any one know how well the chip set is supported. Any comments? Thanks John -- Guy Fawkes, the only man to enter the houses of Parliament with honest intentions, (he was going to blow them up!) Registered Linux user number 414240

2 2

COBOL
by Michael 26 May '08

26 May '08

Just curious, maybe some old timers could help me out. I am working with a company that is migrating 20 years of Mainframe Software Development to Unix, HPUX. How much harder would it be to go to Linux, Centos Linux? Also, anyone have any experience with Fujitsu Cobol on Centos? The Fujitsu people only support Red Hat, and said I'd be on my own with Centos. In other words if it works, then I don't care about Fujitsu support. I know some of you are thinking, did someone say "COBOL"? Nobody uses COBOL anymore! If so, let me say "You are wrong". Many large corporations are taking their old business logic that was written in COBOL decades ago, and moving it to new modern platforms, like Linux. Programatically giving these applications a GUI face-lift, while maintaining their original business logic. I know because many companies pay me to do just that. I have a client that wants to use Centos Linux with Fujistu Cobol, and Fujitsu says it's gotta be Red Hat, any help will much appreciated. Thanks, -- Michael Anderson, J3k Solutions Sr.Systems Programmer/Analyst 832.515.3868

14 14

RAID5 or RAID50 for database?
by mcclnx mcc 26 May '08

26 May '08

we have DELL 6800 server with 12 internal disks in it. O.S. is CENTOS 4.6 and SCSI control card is PERC 4e/di. We plan to configure 4 disks (5,8,9,10) as RAID5 or RAID50. This logical volume will be use as file systems and store database backup files. Can anyone tell me which one is better on performance? Thanks. 付費才容量無上限？Yahoo!奇摩電子信箱2.0免費給你，信件永遠不必刪！ - 馬上體驗！

14 36

I/O statistics per PID
by Sergio Belkin 26 May '08

26 May '08

Hi, I've found a great tool called pidstat which is able to report I/O disks statistic. But, it's only for kernels 2.6.20 and later only, is there any tool for Centos xen kernel? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 1

1333/8GB Intel motherboard for C5.1
by Drew Weaver 25 May '08

25 May '08

Hi there, has anyone run into any Desktop/Workstation Intel brand motherboards that work with CentOS 5.1 (4.6/3.9 out of box compatibility is a very large plus) and work with the 1333MHZ cpus such as the 8400/9450 and accept 8GB of RAM? The closest we've found so far is the DG31PR which is alright but it has the limitation of 4GB of RAM and an unsupported Realtek NIC. The DQ35JO is also ok, but requires quite a bit of 'jostling' to get to work such as pci=nommconf and other tweaks, we need something that will work out of box, anyone found anything recently? Thanks in advance if anyone has any hints. -Drew

10 15

how to debug ssh slow connection issues.
by Jason Pyeron 25 May '08

25 May '08

I do not have any ideas on this. Where should I start. [root(a)192.168.1.80 security]# date && time ssh -v 192.168.1.21 date Fri May 23 11:43:53 EDT 2008 OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003 debug1: Reading configuration data /root/.ssh/config debug1: Applying options for 192.168.1.21 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to 192.168.1.21 [192.168.1.21] port 22. debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1 debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_dsa type 2 debug1: Remote protocol version 1.99, remote software version OpenSSH_4.6 debug1: match: OpenSSH_4.6 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_3.9p1 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-cbc hmac-md5 none debug1: kex: client->server aes128-cbc hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host '192.168.1.21' is known and matches the RSA host key. debug1: Found key in /root/.ssh/known_hosts:4 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received Paused 9 seconds. debug1: Authentications that can continue: publickey,password debug1: Next authentication method: publickey debug1: Trying private key: /root/.ssh/identity debug1: Trying private key: /root/.ssh/id_rsa debug1: Offering public key: /root/.ssh/id_dsa debug1: Server accepts key: pkalg ssh-dss blen 433 debug1: read PEM private key done: type DSA Paused 9 seconds. debug1: Authentication succeeded (publickey). debug1: channel 0: new [client-session] debug1: Entering interactive session. Paused 16 seconds. debug1: Sending command: echo debug1: client_input_channel_req: channel 0 rtype exit-status reply 0 debug1: channel 0: free: client-session, nchannels 1 debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 13.5 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.0 debug1: Exit status 0 real 0m34.027s user 0m0.014s sys 0m0.083s Fri May 23 11:51:32 EDT 2008 [root@statics31 security]# And the log from 192.168.1.21 (different run so the dates won't match): ==> /var/log/secure <== May 23 12:01:56 192.168.1.21 pam_stack[23836]: called for "PAM_ACCOUNT" May 23 12:01:56 192.168.1.21 pam_stack[23836]: called from "sshd" May 23 12:01:56 192.168.1.21 pam_stack[23836]: initializing May 23 12:01:56 192.168.1.21 pam_stack[23836]: creating child stack `system-auth' May 23 12:01:56 192.168.1.21 pam_stack[23836]: creating environment May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_AUTHTOK to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_CONV to child May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_FAIL_DELAY to child: source not set May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_OLDAUTHTOK to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_RHOST to child May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_RUSER to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_SERVICE to child May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_TTY to child May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_USER to child May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_USER_PROMPT to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing data to child May 23 12:01:56 192.168.1.21 pam_stack[23836]: calling substack May 23 12:01:56 192.168.1.21 pam_stack[23836]: substack returned 0 (Success) May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_AUTHTOK to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_CONV to parent May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_FAIL_DELAY to parent: source not set May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_RHOST to parent May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_RUSER to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_SERVICE to parent May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_TTY to parent May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing PAM_USER to parent May 23 12:01:56 192.168.1.21 pam_stack[23836]: NOT passing PAM_USER_PROMPT to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing data back May 23 12:01:56 192.168.1.21 pam_stack[23836]: passing former back May 23 12:01:56 192.168.1.21 pam_stack[23836]: returning 0 (Success) May 23 12:01:56 192.168.1.21 pam_stack[23844]: called for "PAM_OPEN_SESSION" May 23 12:01:56 192.168.1.21 pam_stack[23844]: called from "sshd" May 23 12:01:56 192.168.1.21 pam_stack[23844]: initializing May 23 12:01:56 192.168.1.21 pam_stack[23844]: found previously-used child stack `system-auth' May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_CONV to child May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to child: source not set May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to child May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to child May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_TTY to child May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_USER to child May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to child: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing data to child May 23 12:01:56 192.168.1.21 pam_stack[23844]: calling substack May 23 12:01:56 192.168.1.21 pam_stack[23844]: substack returned 0 (Success) May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_CONV to parent May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to parent: source not set May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to parent May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to parent May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_TTY to parent May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing PAM_USER to parent May 23 12:01:56 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to parent: source is NULL May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing data back May 23 12:01:56 192.168.1.21 pam_stack[23844]: passing former back May 23 12:01:56 192.168.1.21 pam_stack[23844]: returning 0 (Success) ==> /var/log/messages <== May 23 12:01:56 192.168.1.21 sshd[23836]: Accepted publickey for root from 192.168.1.80 port 39910 ssh2 May 23 12:01:56 192.168.1.21 sshd(pam_unix)[23844]: session opened for user root by (uid=0) ==> /var/log/secure <== May 23 12:02:01 192.168.1.21 pam_stack[23844]: called for "PAM_SETCRED" May 23 12:02:01 192.168.1.21 pam_stack[23844]: called from "sshd" May 23 12:02:01 192.168.1.21 pam_stack[23844]: initializing May 23 12:02:01 192.168.1.21 pam_stack[23844]: found previously-used child stack `system-auth' May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to child: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_CONV to child May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to child: source not set May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to child: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to child May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to child: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to child May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_TTY to child May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_USER to child May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to child: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing data to child May 23 12:02:01 192.168.1.21 pam_stack[23844]: calling substack May 23 12:02:01 192.168.1.21 pam_stack[23844]: substack returned 0 (Success) May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to parent: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_CONV to parent May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to parent: source not set May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to parent May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to parent: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to parent May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_TTY to parent May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing PAM_USER to parent May 23 12:02:01 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to parent: source is NULL May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing data back May 23 12:02:01 192.168.1.21 pam_stack[23844]: passing former back May 23 12:02:01 192.168.1.21 pam_stack[23844]: returning 0 (Success) ==> /var/log/messages <== May 23 12:02:16 192.168.1.21 sshd[23844]: error: channel 0: chan_read_failed for istate 3 ==> /var/log/secure <== May 23 12:02:16 192.168.1.21 pam_stack[23844]: called for "PAM_SETCRED" May 23 12:02:16 192.168.1.21 pam_stack[23844]: called from "sshd" May 23 12:02:16 192.168.1.21 pam_stack[23844]: initializing May 23 12:02:16 192.168.1.21 pam_stack[23844]: found previously-used child stack `system-auth' May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to child: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_CONV to child May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to child: source not set May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to child: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to child May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to child: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to child May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_TTY to child May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_USER to child May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to child: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing data to child May 23 12:02:16 192.168.1.21 pam_stack[23844]: calling substack May 23 12:02:16 192.168.1.21 pam_stack[23844]: substack returned 0 (Success) May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to parent: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_CONV to parent May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to parent: source not set May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to parent May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to parent: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to parent May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_TTY to parent May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing PAM_USER to parent May 23 12:02:16 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to parent: source is NULL May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing data back May 23 12:02:16 192.168.1.21 pam_stack[23844]: passing former back May 23 12:02:16 192.168.1.21 pam_stack[23844]: returning 0 (Success) May 23 12:02:21 192.168.1.21 pam_stack[23844]: called for "PAM_CLOSE_SESSION" May 23 12:02:21 192.168.1.21 pam_stack[23844]: called from "sshd" May 23 12:02:21 192.168.1.21 pam_stack[23844]: initializing May 23 12:02:21 192.168.1.21 pam_stack[23844]: found previously-used child stack `system-auth' May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to child: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_CONV to child May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to child: source not set May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to child: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to child May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to child: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to child May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_TTY to child May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_USER to child May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to child: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing data to child May 23 12:02:21 192.168.1.21 pam_stack[23844]: calling substack May 23 12:02:21 192.168.1.21 pam_stack[23844]: substack returned 0 (Success) May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_AUTHTOK to parent: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_CONV to parent May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_FAIL_DELAY to parent: source not set May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_OLDAUTHTOK to parent: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_RHOST to parent May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_RUSER to parent: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_SERVICE to parent May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_TTY to parent May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing PAM_USER to parent May 23 12:02:21 192.168.1.21 pam_stack[23844]: NOT passing PAM_USER_PROMPT to parent: source is NULL May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing data back May 23 12:02:21 192.168.1.21 pam_stack[23844]: passing former back May 23 12:02:21 192.168.1.21 pam_stack[23844]: returning 0 (Success) ==> /var/log/messages <== May 23 12:02:16 192.168.1.21 last message repeated 2 times May 23 12:02:21 192.168.1.21 sshd(pam_unix)[23844]: session closed for user root -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, purge the message from your system and notify the sender immediately. Any other use of the email by you is prohibited.

4 14

cups causing segfault
by Gregory P. Ennis 25 May '08

25 May '08

Everyone, I have a new installation of Centos 5.1 that I am using on a gateway server that also has dhcp, named servers. I also have cups set up to function as a print server, and sendmail is being used as a relay to our mail server. yum-cron appears to be updating everything daily as desired. This Centos 5.1 gateway was created to replace a Fedora Core 5 system with the same functions. When I set up cups I copied the FC5 subdirectory into the Centos 5.1 system. Everything appears to work as expected. For some reason I am having sendmail crator without giving me a notice in the logs as far as I can determine. However, when I looked at the messages logs I found it filled with many entries in the form of : kernel: ipp[24519]: segfault at 0000000000000000 rip 00002aaaabf2abc0 rsp 00007fff25495348 error 4 I've done a google search and there appeared to be a problem with doubled printer entries in the printer.conf causing the log entry, but after checking my printer.conf file everything appears to be ok. This file also worked on FC5 without a problem. I am not sure if the cups problem is related to the sendmail problem. Any ideas? Greg Ennis

2 6

RE: [CentOS] Hourly restart
by Gregg McClintic 25 May '08

25 May '08

To be honest I have no idea what is needed by the kernel for the bios to beable to check that the os is responding correctly. I enabled it on a test server and had the same issue on a default 4.6 cent install. I could have the name in the bios (the service ) incorrect ie, watch guard,watch dog , watch "something" I know it is psent on serval types of motherboad manufactures. Take a look should be easy to find

2 1

Opinions about SSH and DNS
by Clint Dilks 25 May '08

25 May '08

Hi People, As part of securing SSH we currently have UseDNS set to yes. But we are finding that a number of ISP's are deliberately refusing to configure matching forward and reverse DNS records. So I am wondering how many of you are still using this option?

2 1

saslauthd for sendmail SMTP relay
by Bernd Bartmann 25 May '08

25 May '08

Hi, I'm running a Centos 5.1 server that uses saslauthd to allow sendmail SMTP relaying for some clients. saslauthd is configured to use method "shadow" to lookup the username / password directly from /etc/shadow. This setup has been working for several month now, but is broken since last Monday. I haven't changed anything neither on the server nor on the clients. Now whenever a client tries to relay email I see this messages in the logs: /var/log/maillog: AUTH failure (LOGIN): authentication failure (-13) SASL(-13): authentication failure: checkpass failed /var/log/messages: saslauthd[3665]: do_auth : auth failure: [user=username] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Does someone have an idea how to debug this further, esp. how to find the real reason as the message [reason=Unknown] is not very helpful at all. Thanks in advance, Bernd.

2 5

RE: [CentOS] Hourly restart
by Gregg McClintic 25 May '08

25 May '08

Anything in the bios called watchdog turned on?

2 1

Hourly restart
by Linux 25 May '08

25 May '08

Hi, Without any update, hardware/software modification, etc... one of my systems "Hourly restart" problem started again. Currently, I counted 5 restarts at 59th minute. No log entry, no console error, nothing really interesting. If I do not see camera records with my own eyes, I'll suspect about someone from D.C. hardreseting the box. Now, I guess /var failed mounting and ssh not available. Maybe next hour restart does a magic... Last time, a kernel update solved hourly restart problem. Before loosing access, I checked and saw a new kernel with -21 ending number (x86_64, forgot to mention) and waiting for XFS module to be ready (Well, I wish I had left it ext3) After that, perhaps update will solve the problem again, but why? Last time I stopped all crons, unneeded services, remote access, etc.. Put a man in front of the monitor and made him monitor everything. Only thing he saw was a welcoming BIOS without any sign at the 60th minute. Replaced power cords, power supply, some disks, RAM modules, etc... Currently I have the last recovered remote logs of temperature and voltage sensors of the system, all seems fine, nothing suspicious. I am out of ideas. I have many gentoo boxes on the almost same hardware and a few centos boxes. Only this one failes continuously... I'd like to hear advice and suggestions about how to debug / repair this situation. Thanks. P.S.: Complete hardware replacement plan is currently in action, new hardware will be ready soon but I'm not so sure about hardware failure. Why did it stopped last time after a simple kernel update?

1 0

How is this possible?
by MHR 25 May '08

25 May '08

As an experiment, I am attempting to build a more recent version of GNOME than 2.16.0 on CentOS 5.1. I've tried both garnome and jhbuild, and neither one works quite right. Jhbuild blows out looking for a dbus-glib-1 revision >= 0/74 (the release rev is 0.70), so I downloaded that and tried to build it. This results in the following error: gcc -g -O2 -Wall -Wchar-subscripts -Wmissing-declarations -Wmissing-prototypes -Wnested-externs -Wpointer-arith -Wcast-align -Wfloat-equal -Wsign-compare -o .libs/dbus-binding-tool dbus-binding-tool-glib.o dbus-glib-tool.o ./.libs/libdbus-gtool.a -L/lib64 ./.libs/libdbus-glib-1.so -ldbus-1 -lgobject-2.0 -lglib-2.0 /usr/lib/libexpat.so -lnsl /usr/lib/libexpat.so: could not read symbols: File in wrong format collect2: ld returned 1 exit status make[4]: *** [dbus-binding-tool] Error 1 make[4]: Leaving directory `/home/mhr/Download/dbus-glib-0.74/dbus' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/home/mhr/Download/dbus-glib-0.74/dbus' make[2]: *** [all] Error 2 make[2]: Leaving directory `/home/mhr/Download/dbus-glib-0.74/dbus' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/mhr/Download/dbus-glib-0.74' make: *** [all] Error 2 When I try to use garnome, it eventually runs into exactly the same error. I've checked /usr/lib/libexpat.so, and this is what I get: $ ls -l /usr/lib/libexpat.so lrwxrwxrwx 1 root root 27 Jan 8 13:11 /usr/lib/libexpat.so -> ../../lib/libexpat.so.0.5.0 $ ls -l /lib/libexpat.so.0.5.0 -rwxr-xr-x 1 root root 133056 Jan 6 2007 /lib/libexpat.so.0.5.0 $ file /lib/libexpat.so.0.5.0 /lib/libexpat.so.0.5.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped When I look at this library with nm, lld and objdump, they all seem to be able to read it just fine. There is also the 64 bit version that lives in /ib64 and has a .ink from /usr/lib64, and that also reads fine. What did I miss here? Thanks. mhr

4 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss