- Discuss - lists.centos.org

Re: [CentOS] Re: Need help with rsync. [solved]
by James B. Byrne 23 May '08

23 May '08

In-Reply-To: <f4e013870805211022r36194b29gb74ca4421dc2ee77(a)mail.gmail.com> On: Wed, 21 May 2008 10:22:19 -0700, MHR <mhullrich(a)gmail.com> wrote: >> On Wed, May 21, 2008 at 8:37 AM, James B. Byrne <byrnejb(a)harte-lyne.ca> >> wrote: >> >> This indeed turned out to be an SELinux policy problem which I have since >> resolved. > > Whoa, whoa, whoa, nice shooting, Tex! (Ghostbusters) > > Not so fast - please post the solution, too, for posterity (and those > of us who don't use SELinux but might, someday, in the not too distant > far future...). > > Thanks. > > mhr Dealings with SELinux issues typically do not lend themselves to short answers. SELinux is like an onion, each each exception blocks access until resolved. Thus each policy change has to be made individually and then the process retested so that the next impediment evidences itself. On CentOS-5 your friends are: # grep avc /var/log/messages # grep <process> /var/log/audit/audit.log and some of the more useful utilities are: # audit2allow # audit2why # chcon # restorecon # sealert # semanage When I suspect (and that is often the hardest part of the whole exercise, realizing that SELinux is the problem) that SELinux is involved in a problem I start by checking the system log file /var/log/messages with grep avc. If I see things like this: # grep avc /var/log/messages May 16 04:02:33 inet01 kernel: audit(1210924952.785:22973): avc: denied { read } for pid=22282 comm="prelink" name="setserial" dev=dm-0 ino=3309644 scontext=user_u:system_r:prelink_t:s0 tcontext=system_u:object_r:rsync_data_t:s0 tclass=file Then I infer that I have a problem with either the SELinux file contexts or the system policy file. If the SELinux problem is announced at the desktop then you may also find it useful to check for this: # grep setroubleshoot /var/log/messages In which case you may see something like this: Dec 17 14:13:24 inet01 setroubleshoot: SELinux is preventing /usr/sbin/httpd (httpd_t) "write" to virtual.d (etc_t). For complete SELinux messages. run sealert -l 15618e2e-044c-4c4c-b3fc-ec1eba554d02 In this case you can follow the suggestion given in the log message and run sealert: # sealert -l 15618e2e-044c-4c4c-b3fc-ec1eba554d02 Summary SELinux is preventing /usr/sbin/httpd (httpd_t) "write" to virtual.d (etc_t). Detailed Description SELinux is preventing /usr/sbin/httpd (httpd_t) "write" to virtual.d (etc_t). The SELinux type %TARGET_TYPE, is a generic type for all files in the directory and very few processes (SELinux Domains) are allowed to write ... yada-yada-yada... ... Allowing Access You can attempt to fix file context by executing restorecon -v virtual.d The following command will allow this access: restorecon virtual.d And then you can try that, although I have rarely had a problem with SELinux solved so simply: # cd /path/to/virtual.d # restorecon virtual.d Anyway, if that does not work, or one never received an setroubleshoot report to begin with, then I end up turning to audit2allow. I do something like this (where rsync is the process that I am having difficulty with, it could be httpd, vsftp or anything else): # grep rsync /var/log/audit/audit.log | audit2allow Which may yield a report something like this: #============= prelink_t ============== allow prelink_t rsync_data_t:file read; Now, if this does not look too alarming in terms of the access that rsync seems to be seeking (being able to read files to be transferred seems a logical enough expectation and the benefit/limitations of prelink seem to require access in this instance) then we can add this permission to our policy via a local module. You make one of these in this fashion: # # grep rsync /var/log/audit/audit.log | audit2allow -M localrsyncmod ******************** IMPORTANT *********************** To make this policy package active, execute: semodule -i localrsyncmod.pp # Again, you simply follow the instructions given in the report. # semodule -i localrsyncmod.pp Now you do yet another test and check the log files. If the problem is fixed, then great, you are finished. Usually, however, SELinux issues continually reveal one permission problem after another, sometimes with different processes, until, at last, they have all been accommodated. Consequently you end up re-running your tests, checking the audit files, and modifying the local policy one item at a time. Note that simply overriding what SELinux is prohibiting is not what I am advocating here. Sometimes the problem is that the software needs its file system access expectations trimmed back and that requires filing a bug report with the maintainers. However, in a production environment you normally just have to get things working and what I usually do is weigh what the program is requesting against what I want it to do for me. Often the problem is that the default policy is simply too restrictive. On rare occasions I do actually file a bug report but almost always override the local policy anyway just to get on with the job. I hope this helps. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Interface bonding?
by Timothy Selivanow 23 May '08

23 May '08

I'm try to bond a few interfaces together with the hopes of getting increased throughput, and I'm using a cisco Catalyst 2900 as the switch. I've tried using mode 0, 5, and 6 with nothing special on the switch, and mode 4 with some ports "trunked" together (I have a feeling that the "trunking" that the 2900 does is not 802.3ad, as it disabled the ports it saw as redundant), yet xfer speeds always cap out at about 10MB/s. Has any body accomplished bonding with increased throughput as the goal, with or without (without might be preferable) doing something special on the switch (preferably the afore-mentioned Catalyst 2900, as that is what I have to work with as a non-sactioned side-project ;)? --Tim ___________________________________________________ < When pleasure remains, does it remain a pleasure? > --------------------------------------------------- \ \ \ \ /\ ( ) .( o ).

10 42

CentOS-announce Digest, Vol 39, Issue 11
by centos-announce-request＠centos.org 23 May '08

23 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0492 Important CentOS 4 i386 gnutls Update (Johnny Hughes) 2. CESA-2008:0492 Important CentOS 4 x86_64 gnutls Update (Johnny Hughes) 3. CESA-2008:0287 Important CentOS 4 i386 libxslt Update (Johnny Hughes) 4. CESA-2008:0287 Important CentOS 4 x86_64 libxslt Update (Johnny Hughes) 5. CEEA-2008:0274 CentOS 5 i386 xenpv Update (Karanbir Singh) 6. CEEA-2008:0274 CentOS 5 x86_64 xenpv Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 May 2008 08:49:09 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2008:0492 Important CentOS 4 i386 gnutls Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <483579D5.3090501(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2008:0492 Imporant Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0492.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: gnutls-1.0.20-4.el4_6.i386.rpm gnutls-devel-1.0.20-4.el4_6.i386.rpm src: gnutls-1.0.20-4.el4_6.src.rpm

1 0

kaffeine installation
by secrookie＠gmail.com 23 May '08

23 May '08

Anyone got kaffeine installed. When I do a #yum install kaffeine I get a transaction check error with kde-libs. Is this a known issue and is their a workaround? regards, secrookie

2 1

centos sparc distro?
by tblader 23 May '08

23 May '08

Hello All. I've a couple Sun SPARC Ultra 60 machines I'd like to install Linux on. Is the Centos 4.2 Beta distro* still in development? Looks like 2005 was the last beta release. Thanks, Thomas [*] - http://beta.centos.org/centos/4.2beta/isos/sparc/ -- Flambeau Inc. Technology Center - Baraboo, WI Email : tblader(a)flambeau.com Keyserver: http://pgp.mit.edu KeyID: 0x00E9EC2C

3 2

Re:Re:Can't get past the splash screen
by Eon Strife 22 May '08

22 May '08

Hi, Thanks, it's Gnome, and I'm stuck when I login as root. By using Putty, I managed to create a new user, and then I tried to login to desktop(using nomachine) as that user, and yes, it works. The problem now is that I stuck when I login as the root. Then, I compared the runlog (the one I wrote in that previous email), between the root's and the new user's and, they're the same. Then, I compared the sshlog, and I found discrepancies. In the sshlog of the root, there are some additional lines saying unable to open a file and unable to start the sesion: === NX> 285 Identified internal connection NX> 285 Using default mode encrypted NX> 285 Identified options: nx/nx,options=/cygdrive/C/Users/EONSTR~1/NX73F8~1/S-8728~1.ORG/options:1000 NX> 280 Proxy opened with local: 7 remote: 8 NX> 285 Switching descriptors: 4 and: 5 to: 7 NX> 287 Redirected I/O to channel descriptors NX> 280 Proxy in: 4 out: 5 transport in: 8 out: 8 NX> 596 Session startup failed. <- The additional line in the sshlog of the root NX> 1004 Error: NX Agent exited with exit status 1. Can't open /var/lib/nxserver/db/running/sessionId{0C2C8B077AB56ED37F7A5A72FE8FA7BF}: No such file or directory. mv: cannot stat `/var/lib/nxserver/db/running/sessionId{0C2C8B077AB56ED37F7A5A72FE8FA7BF}': No such file or directory NX> 1006 Session status: closed Exited with status 0. User pressed Ok. === I checked the permission of that var/lib/nxserver/ (and folders (including /db/running/ ) and files inside it), the permission is 0700 (read,write,execute enabled for the owner), with the group is root and owner is the nx. And yes, also using the root I can view the content of the var/lib/nxserver. If I login using that new user, I can't view the content. Oh,yeah, pressing start and leaving for few hours don't solve the problem. Checking the .bash_history file, these are the commands I issued around the time when I messed up : === useradd aaa useradd --help useradd abc passwd aaa useradd --help useradd -d /home/aaaa/ -p aaaaaa aaa which useradd /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop userdel --help userdel aaa passwd aaa /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop cd /home/ ls rmdir --help cd aaa ls del --help delfile --help cd \. cd /. cd /home/ rm -r /home/aaa/ ls /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs reload /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start ls /etc/rc.d/init.d/autofs stop exit ypcat ypcat group group grouplist groupls groups users uname uname -s -n -m -r id whoami w root w ps ps ps -f ps -a === Thanks. === I am not in front of a machine with the nxclient on it, I will be in the morning and can see what some of the logs look like there; however, the ling concerning automatic reconnect to true makes me think the device is attempting to start up a session that doesn't exist. I can't prove that, but I will have more information tomorrow. Concerning your screen shot, I've only ever been stuck at that screen once and simply hitting enter at the keyboard made it vanish. The splash screen should time out anyhow once the start up stuff times out if gnome/kde/xfce's initialization routine takes too long. What desktop (window manager?) are you using? Is it Gnome, KDE or something else? I've not seen selinux create an issue, but for posterity is it running? Does it log anything on the system you're attempting to connect with? Oh, what about permissions for the user? Does the user have the ability to write to his/her home directory properly? You could be getting stuck on the splash screen because the user can't write any data for the initialization. Sincerely, Alex White === Send instant messages to your online friends http://uk.messenger.yahoo.com

3 2

Current Chipset Compatibility
by John Paulson 22 May '08

22 May '08

Can someone make a recommedation as far as best chipset for Centos 5.0 or 5..1 using a Q6600 series CPU with chipsets that have onboard VGA? From poking around it looks like the G33 and P35 are not supported or have problems until the newer 2.6.22 kernel (the iso's appear to be earlier than that, think it was .18)? So I am considering boards with the Intel G965 chipset but not sure if is supported yet? Can someone make a recommedation as far as best chipset for this scenario? thx -- John

2 1

Dear centos@centos.org May 82% 0FF
by VIAGRA � Official Site 22 May '08

22 May '08

1 0

AW: [CentOS] question on minimal install using CF as /dev/sda
by Marc Rebischke 22 May '08

22 May '08

Hi all, We're attempting to use CentOS 5.1 on a test platform which uses a CF card as it's primary storage. (MB: ETX-LX) The BIOS supports booting from CD and/or the CF. Issues we've run into are: During installation of CentOS 5.1, it appears all goes well through partitioning, package selection, interface configuration. Once the install starts in earnest, errors pop up...a snippet is: ================ Traceback (most recent call first): File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 640, in returnNewestByName raise PackageSackError, 'No Package Matching %s' % name File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 318, in returnNewestByName return bestofeach.returnNewestByName(name) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1093, in getBestKernalByArch pkgs= ayum.pkgSack.returnNewestByName(pkgname) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1102, in selectBestKernel kpkg = getBestKernalByArch("kernel", self.ayum) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1236 in doPostSelection self.selectBestKernel(anaconda) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/backend.py", line 177 in doPostSelection return anaconda.backend.doPostSelection(anaconda) ================== It appears that we're not writing to the CF and a driver is needed. We have the driver, but are uncertain how to pass the information to the installer. No Floppy is present. Any thoughts or suggestions or pointers to resources would be greatly appreciated. Regards, -Ray _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ########################## Ray, Which Driver do you mean ? Since CF-Cards are IDE/ATA-Compatible there's normally no need to install any Drivers to Access the CF. If you really need a driver for a Hardware-Component during install you could copy the driver to an USB-Stick instead a floppy... Some more Ideas/Hints... You could/should check if the md5/sha-checksum of the downloaded CentOS ISO(s) is/are OK. Did you made any changes to the "minimal Installation" Package-List ? If you are using the netinstall.iso you could give the "full" CD/DVD-ISO(s) a try. Just my 2 Cents for now. Regards Marc Rebischke

1 0

RE: [CentOS] COBOL
by James B. Byrne 22 May '08

22 May '08

On : Wed, 21 May 2008 16:57:37 -0400, "Ross S. W. Walker" <rwalker(a)medallion.com> wrote: > I would just buy the RH licenses for the project. CentOS may work well > for development and testing platform, but the production code should > be on fully supported RHEL. Having been on RHEL support, and having had occasion to use that support quite extensively, I have formed an opinion to the contrary. My experience did not lead me to the conclusion that licensed RHEL distributions, together with the highest available level of support offered by RedHat, provided any measurable benefit over CentOS and community support. In fact, my experiences with RedHat Support, which were not in the least bit negative, led me to abandon RedHat, first to WhiteBox and thence to CentOS. The practical matter is that RedHat Support is provided in layers, with minimally experienced person filtering support calls. This was, and I expect still is, the case regardless of what level of support is purchased. By the time a serious problem got to a person in RedHat who possessed anywhere near my own experience with the systems under consideration either I had already solved the issue (usually with help from Goole or project specific mailing lists), identified a satisfactory workaround, or had determined that the problem was unsolvable in the timeframe required with the resources available. RedHat support people were unfailingly polite and helpful, but the fact remains that the value for fee was not evident. Immediate support (which is really the only kind that matters to an organization, anything else is really a development project of some sort) for open source systems comes in two basic flavors, enlightenment and custom consulations. Enlightenment is provided by informed individuals who are willing to share their knowledge and experience with others who problems are products of their own ignorance. Members of this mailing list have provided enlightenment to me on many, many occasions. Custom work is either provided from ones own resources or is contracted out to people who really know the system you need fixed/enhanced within a minimal amount of time. I have engaged open source software authors to enhance their products with features that our firm desired on many occasions and in fact am doing so with one at the present time. I cannot perceive any measurable advantage to having a support contract for OSS, other than perhaps with the actual core team of the exact product you are using. RH is a packager, which is not to denigrate either the value of the integration work that they do, or its technical merit. Nonetheless, most OSS support problems are either resolved by re-reading the specific package documentation, having an obscure feature identified and explained by someone that knows about it, bypassing the impediment, or when all else fails writing and submitting your own patch. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Strange NTP problem
by Alfred von Campe 22 May '08

22 May '08

I have 30 identical Lenovo desktop systems running CentOS 5.1. On one of those systems the clock is running slow (5+ minutes from yesterday to this morning and another minute since this morning) despite the fact that NTP is running on all of them and they all have the exact same /etc/ntp.conf file (I compared the MD5 sums of that file on all the systems). Here is the output of "grep ntp /var/log messages" on the system with the problem since I restarted the NTP daemon earlier today: May 20 11:35:38 hepdsw03 ntpd[31791]: ntpd 4.2.2p1(a)1.1570-o Sat Nov 10 12:33:50 UTC 2007 (1) May 20 11:35:38 hepdsw03 ntpd[31792]: precision = 1.000 usec May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface wildcard, 0.0.0.0#123 Disabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface wildcard, ::#123 Disabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface lo, :: 1#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface eth0, fe80::210:c6ff:feab:dd92#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface lo, 127.0.0.1#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface eth0, 10.66.42.109#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: kernel time sync status 0040 May 20 11:35:38 hepdsw03 ntpd[31792]: frequency initialized 0.000 PPM from /var/lib/ntp/drift May 20 11:38:55 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:38:55 hepdsw03 ntpd[31792]: kernel time sync disabled 0001 May 20 11:39:59 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 11:40:58 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:42:09 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 11:47:26 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:49:31 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 11:52:48 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:54:54 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 12:01:26 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 Any idea what could be causing this? For now I have disabled the NTP daemon and am running ntpdate once an hour. What complicates the matter is that we are using Kerberos for authentication, and after a day or so the user can not log into his system anymore because of the time skew. Alfred

4 9

Failed boot drive
by Dean Maluski 22 May '08

22 May '08

Unclear on how to recover from failed boot drive? SDA has failed but I'm still able to boot. I need to replace primary boot drive. Upon initial build I created a RAID 1 mirror of /boot dir/partition. How do I get system to boot off second or third drive so that I can replace /sda? I've successfully replaced /sdb & sdc raid 5 drives in the past but have always struggled to get primary boot drive replaced. Read HOWTO's in the past but it's been an unsuccessful pain and eventually just did a full rebuild. I just read another HOWTO and as confused as I was several months ago, nothing on getting system to boot from alternate drive.

2 1

question on minimal install using CF as /dev/sda
by Ray Leventhal 22 May '08

22 May '08

Hi all, We're attempting to use CentOS 5.1 on a test platform which uses a CF card as it's primary storage. (MB: ETX-LX) The BIOS supports booting from CD and/or the CF. Issues we've run into are: During installation of CentOS 5.1, it appears all goes well through partitioning, package selection, interface configuration. Once the install starts in earnest, errors pop up...a snippet is: ================ Traceback (most recent call first): File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 640, in returnNewestByName raise PackageSackError, 'No Package Matching %s' % name File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 318, in returnNewestByName return bestofeach.returnNewestByName(name) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1093, in getBestKernalByArch pkgs= ayum.pkgSack.returnNewestByName(pkgname) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1102, in selectBestKernel kpkg = getBestKernalByArch("kernel", self.ayum) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1236 in doPostSelection self.selectBestKernel(anaconda) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/backend.py", line 177 in doPostSelection return anaconda.backend.doPostSelection(anaconda) ================== It appears that we're not writing to the CF and a driver is needed. We have the driver, but are uncertain how to pass the information to the installer. No Floppy is present. Any thoughts or suggestions or pointers to resources would be greatly appreciated. Regards, -Ray

1 0

CentOS-announce Digest, Vol 39, Issue 10
by centos-announce-request＠centos.org 22 May '08

22 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0275 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2008:0275 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) 3. CEBA-2008:0280 CentOS 5 i386 xen Update (Karanbir Singh) 4. CEBA-2008:0280 CentOS 5 x86_64 xen Update (Karanbir Singh) 5. CESA-2008:0287 Important CentOS 3 i386 libxslt - security update (Tru Huynh) 6. CESA-2008:0287 Important CentOS 3 x86_64 libxslt - security update (Tru Huynh) 7. CESA-2008:0287 Important CentOS 5 i386 libxslt Update (Karanbir Singh) 8. CESA-2008:0287 Important CentOS 5 x86_64 libxslt Update (Karanbir Singh) 9. CESA-2008:0489 Critical CentOS 5 i386 gnutls Update (Karanbir Singh) 10. CESA-2008:0489 Critical CentOS 5 x86_64 gnutls Update (Karanbir Singh) 11. CESA-2008:0287-01: Important CentOS 2 i386 libxslt security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 May 2008 13:48:13 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0275 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20080521124813.GA3073(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0275 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0275.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e16e0e18187d9d931228c6e11c2d89bf kernel-2.6.18-53.1.21.el5.i686.rpm 84a3d53a655a9abbaa1bbc9e2a74d007 kernel-debug-2.6.18-53.1.21.el5.i686.rpm 54854a7515043387932785d0ca5a5b37 kernel-debug-devel-2.6.18-53.1.21.el5.i686.rpm cacfe849df6d086fe0df5ba2548e54d2 kernel-devel-2.6.18-53.1.21.el5.i686.rpm bc8dc922d73b61515b0b502b60e5e084 kernel-doc-2.6.18-53.1.21.el5.noarch.rpm 52cc1bf88bc8d423151a6841c2705166 kernel-headers-2.6.18-53.1.21.el5.i386.rpm 5539c13872ad6708ab0377e85d50e372 kernel-PAE-2.6.18-53.1.21.el5.i686.rpm dae280d46074f4d34a4a2386c04aa972 kernel-PAE-devel-2.6.18-53.1.21.el5.i686.rpm 4ab36b9e7adf36ca15b337c1bcb4021d kernel-xen-2.6.18-53.1.21.el5.i686.rpm 3fcf05e0c22b3a6eaaf13bd73554960a kernel-xen-devel-2.6.18-53.1.21.el5.i686.rpm Source: 6db1dbe7a05d80061bd593bfa16b90ea kernel-2.6.18-53.1.21.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 21 May 2008 13:48:13 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0275 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20080521124813.GA3086(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0275 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0275.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 78271de2d69838649627edabf22065a3 kernel-2.6.18-53.1.21.el5.x86_64.rpm 867eea6bf5aad07eb555ebbdaf1ffbd4 kernel-debug-2.6.18-53.1.21.el5.x86_64.rpm c43110331d753e6a8bdd9d92648fb367 kernel-debug-devel-2.6.18-53.1.21.el5.x86_64.rpm 42779778f08052c98118eecbb3952880 kernel-devel-2.6.18-53.1.21.el5.x86_64.rpm 3417b759c192526d881d73af4b12d5d8 kernel-doc-2.6.18-53.1.21.el5.noarch.rpm 9b23032f049ad4aecd77a83cd2b328d4 kernel-headers-2.6.18-53.1.21.el5.x86_64.rpm 51bdb647b793105738ff423845bcc11f kernel-xen-2.6.18-53.1.21.el5.x86_64.rpm 4d8896b2d8495b5f043e298cac809f67 kernel-xen-devel-2.6.18-53.1.21.el5.x86_64.rpm Source: 6db1dbe7a05d80061bd593bfa16b90ea kernel-2.6.18-53.1.21.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 21 May 2008 14:01:45 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0280 CentOS 5 i386 xen Update To: centos-announce(a)centos.org Message-ID: <20080521130145.GA3738(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0280 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0280.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: fe1476d70e4b6587e5b400aa87d98e33 xen-3.0.3-41.el5_1.6.i386.rpm d816b1d9bcd821873c2795fc5653a50d xen-devel-3.0.3-41.el5_1.6.i386.rpm 446c29eeb926276cee3958194e888edb xen-libs-3.0.3-41.el5_1.6.i386.rpm Source: 16062424fe0d1d8f0e60d69c6a1e82ad xen-3.0.3-41.el5_1.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 21 May 2008 14:01:45 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0280 CentOS 5 x86_64 xen Update To: centos-announce(a)centos.org Message-ID: <20080521130145.GA3752(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0280 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0280.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 00aac74a24738e20b60422d7f6095c20 xen-3.0.3-41.el5_1.6.x86_64.rpm 550be917a166ef10df70d94347ad4a4c xen-devel-3.0.3-41.el5_1.6.i386.rpm d11145a16d9781dc33d5368c2e76e317 xen-devel-3.0.3-41.el5_1.6.x86_64.rpm 34a5389dbc59e7feefcd0c1bda13ba79 xen-libs-3.0.3-41.el5_1.6.i386.rpm f9623d0a717a6d1f7fd3d391432d04d7 xen-libs-3.0.3-41.el5_1.6.x86_64.rpm Source: 16062424fe0d1d8f0e60d69c6a1e82ad xen-3.0.3-41.el5_1.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 21 May 2008 15:50:56 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0287 Important CentOS 3 i386 libxslt - security update To: centos-announce(a)centos.org Message-ID: <20080521135056.GA12715(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0287 libxslt security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0287.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/libxslt-1.0.33-6.i386.rpm updates/i386/RPMS/libxslt-devel-1.0.33-6.i386.rpm addons/i386/RPMS/libxslt-python-1.0.33-6.i386.rpm source: updates/SRPMS/libxslt-1.0.33-6.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update libxslt Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

broken GFS
by Doug Tucker 22 May '08

22 May '08

This is the 2nd time this has happened to me. There was a kernel release over the weekend to .67.0.15, yet, they did not release the updated GFS to go along with it, so when the machine rebooted, there was no gfs file system in the new running kernel which in turn wreaked havoc on my cluster. I truly wish they would not do that :). I guess I shall have to not allow automatic yum updates from these machines.

40 110

Maybe OT: Some strange problem with postfix
by carlopmart 22 May '08

22 May '08

Hi all, I have a strange problem with postfix on a CentOS 5.1 (fully patched). Every time that postfix sends a message to public smtp servers generates an autoresponse mail to sender about delay ... Somebody knows how can I fix this?? -- CL Martinez carlopmart {at} gmail {d0t} com

7 12

Need help with rsync.
by James B. Byrne 21 May '08

21 May '08

I have two hosts which have their respective keys loaded into each others .ssh/authorized-keys2 file for root. I want to move a directory tree from one host to the other via rsync to maintain a shadow structure of the application provided on the main host. This is the relevant part of the command: rsync -avz --rsh=ssh --delete-after /var/data/pas-redmine root@inet01.mississauga.harte-lyne.ca:/var/data The connection is made and a good deal of material is successfully transferred. I am however getting a number of permission errors: rsync: readlink "/var/data/pas-redmine/lib/tabular_form_builder.rb" failed: Permission denied (13) rsync: readlink "/var/data/pas-redmine/lib/redmine.rb" failed: Permission denied (13) rsync: readlink "/var/data/pas-redmine/lib/diff.rb" failed: Permission denied (13) and many more: The permissions and owner for these are: -rw-r--r-- 1 pas pas 2341 May 9 13:57 \ /var/data/pas-redmine/lib/tabular_form_builder.rb -rw-r--r-- 1 pas pas 7934 May 9 13:57 \ /var/data/pas-redmine/lib/redmine.rb -rw-r--r-- 1 pas pas 5602 May 9 13:57 \ /var/data/pas-redmine/lib/diff.rb ... The host application directory structure is a checked out svn repository, but some of the files that are giving errors are created locally such as the database dump file. I am at a loss to explain this since the rsync and ssh user, so far as I can tell, is root and this, so far as I understand, should allow unrestricted access to the files regardless of the ownership or permissions. If someone can clue me in as to what I am misapprehending here I would be much appreciative. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 4

service --status-all hangs CentOS-4.6?
by James B. Byrne 21 May '08

21 May '08

Is there a problem with running # service --status-all as root over ssh? A system that I performed this command upon has become non-responsive on all ports, leading me to conclude that it is either hung or the cpu is completely consumed with some task. Regards, Output to point of failure: ... Active Mount Points: -------------------- hcid is stopped sdpd is stopped hidd is stopped cpuspeed is stopped crond (pid 3334) is running... cupsd (pid 3806) is running... cups-config-daemon (pid 3404) is running... dc_client is stopped dc_server is stopped dhcpd is stopped Device not specified in /etc/sysconfig/diskdump Usage: /etc/init.d/dkms_autoinstaller {start|stop} -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS-announce] CESA-2008:0275 Important CentOS 5 i386 kernel Update
by Ralph Angenendt 21 May '08

21 May '08

Karanbir Singh wrote: > > CentOS Errata and Security Advisory 2008:0275 Important > > Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0275.html This update seems to break IPsec in the kernel, see <http://bugs.centos.org/view.php?id=2853>. Cheers, Ralph

1 0

Re:Can't get past the splash screen
by Eon Strife 21 May '08

21 May '08

Hi, Thanks for the reply. I already checked the the current user logged in the freenx by using "nxserver --list", it's only the root (the one I currently using). And yeah, I'm stuck in this screen : http://img.photobucket.com/albums/v708/EonStrife/stuck.jpg I wonder, just say if we don't use the remote desktop, but we access or use the computer directly/physically as usual, what do we do if we're stuck on that screen ? About the log of the nomachine, I think the most interesting part is the bottomost part. Note, there are many occurences of "NXFileMonitor::readData", and some 'stop' and 'destructor' words in the end, even though the nomachine is still running. === [Wed 21. May 09:48:18 2008]: Setting environment variable 'NX_HANDLEPROXY' to '28077c' [Wed 21. May 09:48:18 2008]: NXService::getWin32DisplayHandler: NX_HANDLEPROXY=28077c [Wed 21. May 09:48:18 2008]: NXService::getWin32DisplayHandler: end [Wed 21. May 09:48:18 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: LoginDialog: Agent found closing windows... [Wed 21. May 09:48:21 2008]: LoginDialog: Slotsingleapplication: setting automatic reconnect to true. [Wed 21. May 09:48:21 2008]: Settings::flush [Wed 21. May 09:48:21 2008]: Settings::flush [Wed 21. May 09:48:21 2008]: LoginDialog: closeEvent received! [Wed 21. May 09:48:21 2008]: LoginDialog::destructor called begin [Wed 21. May 09:48:21 2008]: LoginDialog: stopAllTimers [Wed 21. May 09:48:21 2008]: LoginDialog: stopProgressTimer [Wed 21. May 09:48:21 2008]: Utility::getPreferencesFile: 'nxclient' -> 'C:\Users\Eon Strife/.nx/config/nxclient.cfg' [Wed 21. May 09:48:21 2008]: Settings::flush [Wed 21. May 09:48:21 2008]: Called destructor for protocol class [Wed 21. May 09:48:21 2008]: LoginDialog::destructor called end === Thanks === Eon Strife wrote: > > Hi, > I have a remote frontend (it's kept in the room which I don't have access) which is installed with CentOS 4 and Rocks . So, to use the desktop(Gnome) of the frontend I use the freenx + nomachine following the guide in http://www.centos.org/modules/newbb/viewtopic.php?forum=20&topic_id=1640&vi…. It worked. Then, I intended to add user, but I couldn't create the home folder in /home/ for the new user. After browsing, I found that somebody mentioned it's because of the automounter/autofs. So, I played around, enabled and disabled the autofs, and yes, I could create the home folder for the new user. The problem is that, when I tried to log-in to the front end using nomachine (using root) again, I could only get as far as the splash screen of the CentOS. I tried to connect using the putty (terminal), and I could interact (issuing command to the terminal), but I couldn't use the Gnome anymore. So, why in the nomachine I could not pass the splash > screen anymore ? Any solution ? Thanks. Although I can not answer your question directly, did you see anything logged on the system that you are connecting to via the nomachine client? Also, the Nomachine client provides some logging of its own as well. You may want to check for any error or permissions related information in the client's directory. That may point you in the right direction. Sincerely, Alex White -- ethericalzen at gmail.com Life is a prison, death is a release=== Send instant messages to your online friends http://uk.messenger.yahoo.com

2 1

Show IP Traffic on a port
by Joseph L. Casale 21 May '08

21 May '08

I am trying to determine the root of an issue I am having. How can I watch traffic destined to a specific port on my CentOS 5.1 box to see if its even hitting it? It would be udp traffic. Thanks! jlc

5 5

How to connect a bluetooth mouse with CentOS?
by Leo Willems 21 May '08

21 May '08

How to connect a bluetooth mouse with CentOS? hcitool scan Scanning ... 00:07:61:96:D1:A0 Bluetooth Laser Travel Mouse hcitool name 00:07:61:96:D1:A0 Bluetooth Laser Travel Mouse hcitool cc 00:07:61:96:D1:A0 hcitool auth 00:07:61:96:D1:A0 The Bluetooth Manager ask for the pass key. No connection / mouse function after entering the passkey. How to connect a bluetooth mouse with CentOS?

2 2

RE: [CentOS] Need help with rsync.
by Bowie Bailey 20 May '08

20 May '08

James B. Byrne wrote: > I have two hosts which have their respective keys loaded into each > others .ssh/authorized-keys2 file for root. I want to move a > directory tree from one host to the other via rsync to maintain a > shadow structure of the application provided on the main host. > > This is the relevant part of the command: > > rsync -avz --rsh=ssh --delete-after /var/data/pas-redmine > root@inet01.mississauga.harte-lyne.ca:/var/data > > The connection is made and a good deal of material is successfully > transferred. I am however getting a number of permission errors: > > rsync: readlink "/var/data/pas-redmine/lib/tabular_form_builder.rb" > failed: Permission denied (13) > rsync: readlink "/var/data/pas-redmine/lib/redmine.rb" failed: > Permission denied (13) > rsync: readlink "/var/data/pas-redmine/lib/diff.rb" failed: > Permission denied (13) > > and many more: > > > The permissions and owner for these are: > -rw-r--r-- 1 pas pas 2341 May 9 13:57 \ > /var/data/pas-redmine/lib/tabular_form_builder.rb > -rw-r--r-- 1 pas pas 7934 May 9 13:57 \ > /var/data/pas-redmine/lib/redmine.rb > -rw-r--r-- 1 pas pas 5602 May 9 13:57 \ > /var/data/pas-redmine/lib/diff.rb > ... > > > The host application directory structure is a checked out svn > repository, but some of the files that are giving errors are created > locally such as the database dump file. I am at a loss to explain > this since the rsync and ssh user, so far as I can tell, is root and > this, so far as I understand, should allow unrestricted access to the > files regardless of the ownership or permissions. > > If someone can clue me in as to what I am misapprehending here I > would be much appreciative. Maybe you need to specify the uid and gid for rsyncd on the server. If it's defaulting to nobody, that could be your problem. uid The "uid" option specifies the user name or user ID that file transfers to and from that module should take place as when the daemon was run as root. In combination with the "gid" option this determines what file permissions are available. The default is uid -2, which is normally the user "nobody". gid The "gid" option specifies the group name or group ID that file transfers to and from that module should take place as when the daemon was run as root. This complements the "uid" option. The default is gid -2, which is normally the group "nobody". For one machine that I'm backing up via rsync, my /etc/rsyncd.conf looks like this: [backup] path = /backupdir hosts allow = xx.xx.xx.xx auth users = alloweduser secrets file = /etc/rsyncd.secrets uid = 0 gid = 0 -- Bowie

2 1

IMAPS error with Dovecot?
by Benjamin Smith 20 May '08

20 May '08

I'm using Dovecot to support IMAPS on CentOS4 on port 993. Stock RPMS, absolutely nothing special done or even anything compiled on the system. About as usual as usual usually gets. But, using KMail on my Fedora Linux laptop, I keep getting the following message: (in part) "This means that although the resource, Changing the flags of message imaps://me@myserver.com:993/INBOX/;UID=0,0,1866921748,1866921754,1866921769,1866921777:1866921783,1866921795,1866921800,1866921824:1866921828,1866921834 failed., was able to be opened, an error occurred while writing to the resource. Changing the flags of message imaps://my@myserver.com:993/INBOX/;UID=0,1866921748,1866921754,1866921769,1866921777:1866921783,1866921795,1866921800,1866921824:1866921828,1866921834 failed." It happens whever I mark a message as "read" and then resynch up with imap. I can *delete* messages just fine, I just can't change the flags on a message. I've scanned thru the /var/log/maillog, /var/log/secure, /var/log/messages and found nothing out of the ordinary. I've checked the permissions of the /var/spool/mail/myaccount and /home/myaccount/Mail folders - both are fine. I have another, almost identically configured mail server that is not having the same issue. I've tried refreshing my cache, and rebuilding indexes in my email program. I'm stumped. Any idea where to go next for this? -Ben -- -- Only those who reach toward a goal are likely to achieve it. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

I need some NFS explanations, please.
by Steve Campbell 20 May '08

20 May '08

I have a problem with NFS that I can't start to resolve. All servers are CentOS 5 servers. One server exports a directory and two others mount it. Simple so far. A file is created on the server, and the two nfs clients do an "ls -al" and get a common (meaning the same) result as the server. Over the course of a day, and after the file on the server has been modified on the server, the results of the "ls -al" show the original common result on the two clients, and an obviously different result on the server. So I figure it's some kind of caching problem. But I figure it's a server caching problem. I next go to one of the clients and "cat" the file, and then do another "ls -al". Now the server and this client agree on the file attributes, but not on the second client which shows the original wrong result still. So now I think it's a client caching problem. Can anyone explain the above situation and perhaps some settings that will resolve this without requiring the nfs client to open the file in some way before it gets the proper file attributes? "nfsstat -m" of the client returns the following: Flags: rw,vers=3,rsize=32768,wsize=32768,acregmax=3,acdirmin=3,acdirmax=3,hard, intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=10.0.12.152 Thanks for any help. Steve Campbell

2 2

OT: Building NFS server with LVM and snapshots enabled
by carlopmart 20 May '08

20 May '08

Hi all, I need to build a NFS CentOS 5.1 based server with LVM and snaphosts for disaster recovering to serve storage to three ESX servers for a development dept. I have 500 GB for storage. Data that I need to store on this server is 150 GB and can grow to 210 GB to the end of year ... My questions are: - Is it possible to do some type of scripting to do data snapshots every day and then copy to a remote server?? Some example, please?? - How can I restore snapshot data on the production server if I need to recover it?? Openfiler or FreeNAS isn't an option to do this task (customer requeriment). -- CL Martinez carlopmart {at} gmail {d0t} com

3 3

awstats, webalizer or...
by Ray Van Dolson 20 May '08

20 May '08

So what does everyone out there use to generate web statistics these days? Are the tried and true awstats or webalizer still the best out there? Ray

6 5

Can't get past the splash screen
by Eon Strife 20 May '08

20 May '08

Hi, I have a remote frontend (it's kept in the room which I don't have access) which is installed with CentOS 4 and Rocks . So, to use the desktop(Gnome) of the frontend I use the freenx + nomachine following the guide in http://www.centos.org/modules/newbb/viewtopic.php?forum=20&topic_id=1640&vi…. It worked. Then, I intended to add user, but I couldn't create the home folder in /home/ for the new user. After browsing, I found that somebody mentioned it's because of the automounter/autofs. So, I played around, enabled and disabled the autofs, and yes, I could create the home folder for the new user. The problem is that, when I tried to log-in to the front end using nomachine (using root) again, I could only get as far as the splash screen of the CentOS. I tried to connect using the putty (terminal), and I could interact (issuing command to the terminal), but I couldn't use the Gnome anymore. So, why in the nomachine I could not pass the splash screen anymore ? Any solution ? Thanks. Send instant messages to your online friends http://uk.messenger.yahoo.com

2 1

Best Motherboard
by Ryan Nichols 20 May '08

20 May '08

To all.. I was using a Gigabyte motherboard, and the board seems like a bad choice. What do you guys recommend for a decent server board that would use a Dual Core processor and DDR2 ram. I dont want to replace the CPU and Mem i already have, just find a decent board that supportsthe existing.. Thanks, Ryan Nichols

16 31

tar spanning
by CentOS List 20 May '08

20 May '08

Hi, I have a directory with 18GB worth of files and I would like to tar span and burn it into a few DVDs after that. How can I do this in command line? Thanks Regards

21 50

Convert a real system in a DomU
by Sergio Belkin 20 May '08

20 May '08

Hi, I was a server running Fedora 6. I want to migrate it to Xen on a Centos 5.1. Can I make something like dd if=/dev/sdaX of=fedora6.img (on FC6) and then on Centos 5.1 dd if=fedora6.img of=/dev/sdaX Could I run this system into Xen? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

3 4

kickstart question with 2 network cards
by Jerry Geis 19 May '08

19 May '08

I am using kickstart to automate installs. working nicely. I now have a box with 2 NIC cards and I am getting prompted for which nick to use. I have a line like: network --device eth0 --bootproto dhcp --hostname tmp.msgnet.com in my kickstart. This line does not seem to be enough to say install with eth0 even though there may be an eth1. How do I tell kickstart to not prompt for which network and just use eth0. Thanks, Jerry

2 1

RE: [CentOS] symbolic linking
by Bowie Bailey 19 May '08

19 May '08

Frank Cox wrote: > I have a number directories under /opt on computer jack. I want some > (not all) of them to appear in /opt on computer jill. > > I have the /opt directory on jack mounted on jill under /mnt/jack > > If I go into the /opt directory on jill and do this: > > ln -s /mnt/jack/opt/files . > > I get /opt/files/files on jill. What I want is /opt/files and I > can't see what I'm doing wrong. I don't see anything wrong with that command. A quick test on one of my systems confirms that it should do what you expect. Try specifying the target explicitly: ln -s /mnt/jack/opt/files /opt/files (no trailing slashes on either the source or destination) -- Bowie

3 2

yum problem after last kernel
by Alex Palenschat 19 May '08

19 May '08

Hello all, I've been googling and haven't found an answer. I have a Centos 4.6 box that is having an issue since the last yum update. The nss_ldap and kernel packages were the only packages installed/updated. When I try to run yum I now receive: [root@ns1 ~]# yum update There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: /usr/lib/librpmdb-4.3.so: undefined symbol: xdr___db_get_name_reply[rpmdb Please install a package which provides this module, or verify that the module is installed correctly. It's possible that the above module doesn't match the current version of Python, which is: 2.3.4 (#1, Dec 11 2007, 05:27:57) [GCC 3.4.6 20060404 (Red Hat 3.4.6-9)] If you cannot solve this problem yourself, please go to the yum faq at: http://wiki.linux.duke.edu/YumFaq [root@ns1 ~]# rpm -qi rpm-libs Name : rpm-libs Relocations: (not relocatable) Version : 4.3.3 Vendor: CentOS Release : 23_nonptl Build Date: Sat 17 Nov 2007 06:13:56 AM CST Install Date: Mon 07 Jan 2008 11:57:33 AM CST Build Host: builder6 Group : Development/Libraries Source RPM: rpm-4.3.3-23_nonptl.src.rpm Size : 1739984 License: GPL Signature : DSA/SHA1, Sun 18 Nov 2007 02:55:20 PM CST, Key ID a53d0bab443e1821 Summary : Libraries for manipulating RPM packages. Description : This package contains the RPM shared libraries. [root@ns1 ~]# rpm -Vv rpm-libs ........ /usr/lib/librpm-4.3.so ........ /usr/lib/librpmbuild-4.3.so prelink: /usr/lib/librpmdb-4.3.so: prelinked file was modified S.?..... /usr/lib/librpmdb-4.3.so ........ /usr/lib/librpmio-4.3.so Anyone have an idea? Alex

1 1

Re: [CentOS-announce] Impact of the Debian OpenSSL vulnerability
by Chris Butler 19 May '08

19 May '08

[please CC me on replies] On Thu, May 15, 2008 at 08:08:39PM +0200, Daniel de Kok wrote: > Questions on how this may affect CentOS users should be directed to > the CentOS users list. List subscription information is available > from: In addition to the fixed OpenSSL packages, Debian also released an update to OpenSSH that includes a blacklist of the weak keys. With this update, any connections attempting to authenticate with a weak key are rejected. There's also a utility which searches through user ~/.ssh directories for blacklisted keys. This blacklist would help in securing non-Debian systems as well. Are there any plans to include this ssh update in CentOS? -- Chris Butler Zedcore Systems Ltd UK tel: 0114 238 1828 We have moved to: Lydgate House, Lydgate Lane, Sheffield S10 5FH

7 10

CentOS-announce Digest, Vol 39, Issue 9
by centos-announce-request＠centos.org 19 May '08

19 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2008:0258 CentOS 5 i386 mcstrans Update (Karanbir Singh) 2. CEBA-2008:0258 CentOS 5 x86_64 mcstrans Update (Karanbir Singh) 3. CEBA-2008:0219 CentOS 5 i386 device-mapper-multipath Update (Karanbir Singh) 4. CEBA-2008:0219 CentOS 5 x86_64 device-mapper-multipath Update (Karanbir Singh) 5. CESA-2008:0270 Important CentOS 5 x86_64 libvorbis Update (Karanbir Singh) 6. CESA-2008:0270 Important CentOS 5 i386 libvorbis Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 May 2008 02:01:02 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0258 CentOS 5 i386 mcstrans Update To: centos-announce(a)centos.org Message-ID: <20080519010102.GA3976(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0258 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 97f048f9e25b96598e6666ce8ade3f79 mcstrans-0.2.7-1.el5.i386.rpm Source: c4d891a0a78fa4b39e186671862bf38e mcstrans-0.2.7-1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 19 May 2008 02:01:02 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0258 CentOS 5 x86_64 mcstrans Update To: centos-announce(a)centos.org Message-ID: <20080519010102.GA3990(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0258 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6fe63939ed264c22999fb31a32824c29 mcstrans-0.2.7-1.el5.x86_64.rpm Source: c4d891a0a78fa4b39e186671862bf38e mcstrans-0.2.7-1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 19 May 2008 02:15:53 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0219 CentOS 5 i386 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20080519011553.GA4619(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0219 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0219.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 595507777df9907e6a514156a1a39e91 device-mapper-multipath-0.4.7-12.el5_1.4.i386.rpm 6dbc1f26ff888504fdc312c5d0cfd72d kpartx-0.4.7-12.el5_1.4.i386.rpm Source: ad4f7bc83160d9902ba03b2467d06558 device-mapper-multipath-0.4.7-12.el5_1.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 19 May 2008 02:15:54 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0219 CentOS 5 x86_64 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20080519011554.GA4639(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0219 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0219.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6848614cc3bdb00abf10b5de1570098b device-mapper-multipath-0.4.7-12.el5_1.4.x86_64.rpm 5937c6cdf355f631c930961278748573 kpartx-0.4.7-12.el5_1.4.x86_64.rpm Source: ad4f7bc83160d9902ba03b2467d06558 device-mapper-multipath-0.4.7-12.el5_1.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Mon, 19 May 2008 02:19:21 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 5 x86_64 libvorbis Update To: centos-announce(a)centos.org Message-ID: <20080519011921.GA4824(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0270 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 78cf5b45956016f3bd4200f4ab68e51b libvorbis-1.1.2-3.el5_1.2.i386.rpm 199d2dadd24c01fa42c0ee842b924b6f libvorbis-1.1.2-3.el5_1.2.x86_64.rpm 65dc9e0a84a6d88dff25e80f1b64d2c4 libvorbis-devel-1.1.2-3.el5_1.2.i386.rpm 7e732e8fb57ca2978cb1dd5d5ee61295 libvorbis-devel-1.1.2-3.el5_1.2.x86_64.rpm Source: d63e5567c1dd8a2ee1624799505c3c2b libvorbis-1.1.2-3.el5_1.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Mon, 19 May 2008 02:19:21 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 5 i386 libvorbis Update To: centos-announce(a)centos.org Message-ID: <20080519011921.GA4807(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0270 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 1f3bee2fa8673179621849948da4bb8b libvorbis-1.1.2-3.el5_1.2.i386.rpm 78bd9e7a4be68f85f06fc314800d4eed libvorbis-devel-1.1.2-3.el5_1.2.i386.rpm Source: d63e5567c1dd8a2ee1624799505c3c2b libvorbis-1.1.2-3.el5_1.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 39, Issue 9 **********************************************

1 0

ndiswrapper and 4K stacks problem (system freezes)
by Timothy Kesten 18 May '08

18 May '08

Hi Folks, I'm trying tio install WLAN - USB - Stick Netgear WG111v3. ndiswrapper -i wg111v3 works. I can see ndiswrapper -l wg111v3: driver installed device (0846:4260) present But after modprobe ndiswrapper the system freezes. Troublshooting on ndiswrapper-sites says: It's a problem of "kernel is using 4K stacks (CONFIG_4KSTACKS)" Solution: recompile the kernel. That's no good solution. Is there a knowing "CentOS-like" solution for this problem? Thx Timothy

2 2

problem of building stardict
by cjzjm100 18 May '08

18 May '08

Hi guys! today i tried to install the latest stardict. When i configure it.The result is : [cjzjm100@localhost stardict-3.0.1]$ ./configure --prefix=/usr --sysconfdir=/etc --mandir=/usr/share/man checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether to enable maintainer-specific portions of Makefiles... no checking for gconftool-2... /usr/bin/gconftool-2 checking for style of include used by make... GNU checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking dependency style of gcc... gcc3 checking for intltool >= 0.22... 0.36.2 found checking for perl... /usr/bin/perl checking for XML::Parser... ok checking build system type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu checking for a sed that does not truncate output... /bin/sed checking for grep that handles long lines and -e... /bin/grep checking for egrep... /bin/grep -E checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for /usr/bin/ld option to reload object files... -r checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes checking how to recognize dependent libraries... pass_all checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for dlfcn.h... yes checking for g++... g++ checking whether we are using the GNU C++ compiler... yes checking whether g++ accepts -g... yes checking dependency style of g++... gcc3 checking how to run the C++ preprocessor... g++ -E checking for g77... no checking for xlf... no checking for f77... no checking for frt... no checking for pgf77... no checking for cf77... no checking for fort77... no checking for fl32... no checking for af77... no checking for xlf90... no checking for f90... no checking for pgf90... no checking for pghpf... no checking for epcf90... no checking for gfortran... gfortran checking whether we are using the GNU Fortran 77 compiler... yes checking whether gfortran accepts -g... yes checking the maximum length of command line arguments... 98304 checking command to parse /usr/bin/nm -B output from gcc object... ok checking for objdir... .libs checking for ar... ar checking for ranlib... ranlib checking for strip... strip checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC checking if gcc PIC flag -fPIC works... yes checking if gcc static flag -static works... yes checking if gcc supports -c -o file.o... yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... no configure: creating libtool appending configuration tag "CXX" to libtool checking for ld used by g++... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking for g++ option to produce PIC... -fPIC checking if g++ PIC flag -fPIC works... yes checking if g++ static flag -static works... yes checking if g++ supports -c -o file.o... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate appending configuration tag "F77" to libtool checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... no checking for gfortran option to produce PIC... -fPIC checking if gfortran PIC flag -fPIC works... yes checking if gfortran static flag -static works... yes checking if gfortran supports -c -o file.o... yes checking whether the gfortran linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking for library containing strerror... none required checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking dependency style of gcc... (cached) gcc3 checking whether we are using the GNU C++ compiler... (cached) yes checking whether g++ accepts -g... (cached) yes checking dependency style of g++... (cached) gcc3 checking for a BSD-compatible install... /usr/bin/install -c checking whether make sets $(MAKE)... (cached) yes checking for stdlib.h... (cached) yes checking for unistd.h... (cached) yes checking for getpagesize... yes checking for working mmap... yes checking locale.h usability... yes checking locale.h presence... yes checking for locale.h... yes checking for LC_MESSAGES... yes checking libintl.h usability... yes checking libintl.h presence... yes checking for libintl.h... yes checking for ngettext in libc... yes checking for dgettext in libc... yes checking for bind_textdomain_codeset... yes checking for msgfmt... /usr/bin/msgfmt checking for dcgettext... yes checking if msgfmt accepts -c... yes checking for gmsgfmt... /usr/bin/msgfmt checking for xgettext... /usr/bin/xgettext checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking for ENCHANT... yes checking for GUCHARMAP... no configure: error: Gucharmap library not found or too old. Use --disable-gucharmap to build without gucharmap plugin. I dont want to disable the gucharmap. I know i should install the newer gucharmap package.what other packages i should install?By the way ,can you tell me the function of these packages? should i pay attention to the result like this: checking for g77... no? If i install the software from source code,how can i uninstall it?

3 2

howto use kvm-amd on centos 5.1
by Jerry Geis 18 May '08

18 May '08

Is there a way to use kvm-amd on centos 5.1? I dont want to mess with XEN. I want the hardware virtualization that is on my AMD chip. I played with putting 2.6.24 and centos 5.1 on my AMD laptop, got kvm-amd and that works. However I want to put this on my desktop that is running 2.6.18-53.1.14.el5. Is there a way or do I just wave to use 2.6.24 or 25. Thanks, Jerry

4 5

Re: [CentOS] Re: [CentOS-announce] Impact of the Debian OpenSSL vulnerability
by Les Bell 18 May '08

18 May '08

Ralph Angenendt <ra+centos(a)br-online.de> wrote: >> I don't think the OpenSSH devels really do care about that - there is no discussion whatsoever on the secureshell list or on the devel list. No idea about our upstream, but I don't think so either. << Correct: all that needs to be said was said years ago, by Dr. Robert E. Coveyou, of Oak Ridge National Laboratory (now NIST): "The generation of random numbers is to important to be left to chance". Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

3 2

CentOS-DS
by Jason Ross 18 May '08

18 May '08

Hey all, I am looking at deploying a directory server in a small network. Currently looking at Fedora-ds and I noticed that CentOS is currently working on one. Does anyone know if the CentOS-DS is working well at this point? I noticed a how to is up on the wiki and was wondering if maybe it was preferable to Fedora-ds at this point. Thanks, Jason Ross

6 8

Fedora IRC
by James Bunnell 18 May '08

18 May '08

There is a IRC channel in the Freenode network for #fedora-newmexico users, if interested.

1 0

OOM condition with file-4.17-9.0.1.el5
by John 18 May '08

18 May '08

Hello all, We just encountered several serious Out of Memory Problems caused by the file 4.17-9.0.1.EL5 utility on our mail Gateway. CentOS 5.1 kept it self alive by killing it parent process Amavisd-new. Manually restarting Amavisd-new and flushing the mail queue caused same problem. Disabling file for the moment, caused Amavisd-new to fail, and also defer all mail. My quick and dirty solution was the download the Fedora Core 9's file.4.23-5.src.rpm. and rebuild it on CentOS 5 After upgrading file, restarting Amavisd-new and flushing the Postfix queue, all mail was delivered without problems. Because our mail system went down, it didn't have the time to trace the message causing the problem. But I want to share here that the Redhat / CentOS EL5 file utility has problems and provide a quick workaround for the problem. Regards, John The Netherlands

6 8

Centos Freezing
by Robert Spangler 17 May '08

17 May '08

Hello, For some reason at different times Centos will freeze and not allow me to do anything. This doesn't happen while I'm working on the system but after I have locked my session and then return. It could goes days without a lockup and then the next time I try to log in it'll be frozen. I would like to know if anyone else has seen this or knows of a fix or where I could start to look to find out if there is a process or something causing this. I normally have the same programs running so I don't think it could be caused by me starting and then leaving something new running. Thanks for your help. -- Regards Robert Smile... it increases your face value! Linux User #296285 http://counter.li.org

5 8

ext3 errors
by Les Mikesell 17 May '08

17 May '08

I recently set up a new system to run backuppc on centOS 5 with the archive stored on a raid1 of 750 gig SATA drives created with 3 members with one specified as "missing". Once a week I add the 3rd partition, let it sync, then remove it. I've had a similar system working for a long time using a firewire drive as the 3rd member, so I don't think the raid setup is the cause of the problem. I may have had problems with the drive power connectors initially but I think that is fixed now and I can't see any hardware errors being logged (the system/log files are on different drives). About once a week, I get an error like this, and the partition switches to read-only. --- Feb 24 04:48:20 linbackup1 kernel: EXT3-fs error (device md3): htree_dirblock_to_tree: bad entry in directory #869973: directory entry across bloc ks - offset=0, inode=3915132787, rec_len=42464, name_len=11 Feb 24 04:48:20 linbackup1 kernel: Aborting journal on device md3. Feb 24 04:48:20 linbackup1 kernel: ext3_abort called. Feb 24 04:48:20 linbackup1 kernel: EXT3-fs error (device md3): ext3_journal_start_sb: Detected aborted journal Feb 24 04:48:20 linbackup1 kernel: Remounting filesystem read-only Feb 24 04:48:33 linbackup1 kernel: EXT3-fs error (device md3): htree_dirblock_to_tree: bad entry in directory #4212181: rec_len % 4 != 0 - offse t=0, inode=4054525677, rec_len=1183, name_len=121 ---- 'fsck -y' seems to fix it up, but it keeps happening. Is this likely to be leftover cruft from the hardware issues or are there problems in ext3/raid1/sata drivers? The way backuppc stores data with millions of hardlinks in the archive it isn't really practical to copy it off, reformat, and start over. -- Les Mikesell lesmikesell(a)gmail.com

4 10

xen kernel showing only one processor on SMP machine
by gen2 17 May '08

17 May '08

Hi there, I'm running an ibm xseries 345/dual Xeon 2.66GHz, 2.6.18-53.1.14.el5xen #1 SMP, and cat /proc/cpuinfo shows me only one processor. Apparently something strange happening with ACPI. What am I doing wrong? Thank you! Selected bits from dmesg: ------------------------- Using ACPI (MADT) for SMP configuration information SMP alternatives: switching to UP code ACPI: Core revision 20060707 CPU 1 irqstacks, hard=c0728000 soft=c0708000 CPU 2 irqstacks, hard=c0729000 soft=c0709000 CPU 3 irqstacks, hard=c072a000 soft=c070a000 ENABLING IO-APIC IRQs SMP alternatives: switching to SMP code Initializing CPU#1 Initializing CPU#2 Brought up 4 CPUs ACPI Exception (acpi_processor-0681): AE_NOT_FOUND, Processor Device is not present [20060707] ACPI: Getting cpuindex for acpiid 0x3 ACPI Exception (acpi_processor-0681): AE_NOT_FOUND, Processor Device is not present [20060707] ACPI: Getting cpuindex for acpiid 0x1

1 0

RE: [CentOS] clustered mail server?
by Rajeev R. Veedu 17 May '08

17 May '08

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Christopher Chan Sent: Saturday, May 17, 2008 2:02 PM To: centos(a)centos.org Subject: Re: [CentOS] clustered mail server? > Thank you for your input. I can't justify exchange (and don't want MS) > for 10 users. I do want IMAP though, and the calendar & address book > would be nice. This IMO has nothing todo with CentOS though, but at the > same time it shouldn't be limited to which Linux distro I'm using. As > you have said I may need to look at file system clustering instead, but > have never attempted it, so I don't know where to begin even. I know a > lot of MTA's can support a central user DB, but that won't sync the > emails. And this won't be a commercial installation either, it's for a > for a project in a rural community about 700km's from me, so it's more a > matter of if 1 server dies / crashes / packes up, and I can only get to > it 5 days later, the mail server still works :) > > If you are looking exchange like functionality use POSTPATH. It comes with almost all features in exchange except the webmail. We are using it for the last 5 months, and look good so far. It can do load balance and clustering. You can download a 12 user version form www.postpath.com Thanks Rajeev _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

kernel-2.6.9-67.0.15.plus.c4.i586.rpm
by Barry Brimer 17 May '08

17 May '08

Are there plans to release kernel-2.6.9-67.0.15.plus.c4.i586.rpm ?? Thanks, Barry

3 3

CentOS-announce Digest, Vol 39, Issue 8
by centos-announce-request＠centos.org 17 May '08

17 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0270 Important CentOS 3 ia64 libvorbis - security update (Pasi Pirhonen) 2. CESA-2008:0270 Important CentOS 3 s390(x) libvorbis - security update (Pasi Pirhonen) 3. CESA-2008:0270 Important CentOS 4 ia64 libvorbis - security update (Pasi Pirhonen) 4. CESA-2008:0270 Important CentOS 4 s390(x) libvorbis - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 May 2008 19:42:11 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 3 ia64 libvorbis - security update To: centos-announce(a)centos.org Message-ID: <20080516164211.GJ2456(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0270 https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libvorbis-1.0-10.el3.ia64.rpm updates/ia64/RPMS/libvorbis-devel-1.0-10.el3.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

samba & samba-common installed then erased, but by whom?
by Johnny Tan 17 May '08

17 May '08

I saw this in Logwatch today for one of my servers: --------------------- yum Begin ------------------------ Packages Installed: samba-common.i386 3.0.23c-2.el5.2.0.2 samba.i386 3.0.23c-2.el5.2.0.2 Packages Erased: samba-common samba ---------------------- yum End ------------------------- No one, including myself, has even logged into this box in the past few days (verified by asking the only other two people who have access and also looking at the last & secure logs). And neither /var/log/yum.log or /var/log/rpmpkgs shows samba at all being installed/erased/present. I ran both chkrootkit and rkhunter, and both turned up clean. Since this box is behind a firewall with only a few IPs given access to it, I'm thinking that it's not been rooted, but I can't seem to find any other explanation for this. The only thing that runs on this server is httpd and jetty. Everything else is done manually including yum updates. And nothing that runs on this machine would ever need samba. Has anyone ever encountered something like this? johnn

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss