- Discuss - lists.centos.org

Upgrade CentOS 7.4 to 7.5 and don't want to upgrade it to 7.6
by Kaushal Shriyan 07 Jan '19

07 Jan '19

Hi, Is there a way to upgrade from Centos Linux release 7.4.1708 (Core) to Centos Linux release 7.5.1804 (Core) and not up to CentOS Linux release 7.6.1810 (Core) as the product does not support the latest CentOS Linux release 7.6.1810 (Core) version as of now. It is still a work in progress. Any help will be highly appreciable. I look forward to hearing from you. Thanks in Advance. Best Regards, Kaushal

10 12

libvirt guest on host's shutdown/reboot - problem
by lejeczek 07 Jan '19

07 Jan '19

hi guys I have just two guest after which libvirt looks and when I shutdown those guests: $ virsh shutdown $_dom that domain takes little time to power down, as expected one would say(~20sec) But! I reboot the hosts and I have in my: /etc/sysconfig/libvirt-guests : ON_SHUTDOWN=shutdown PARALLEL_SHUTDOWN=1 SHUTDOWN_TIMEOUT=300 I see libvirtd service shut down takes minutes, a few good minutes to deal with guests shutdown(I suppose?) How could I dig into it and troubleshoot? Would you have any idea as why libvirtd shutdown takes that long? many thank, L.

2 1

CentOS-announce Digest, Vol 167, Issue 1
by centos-announce-request＠centos.org 07 Jan '19

07 Jan '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0022 Important CentOS 7 keepalived Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sun, 6 Jan 2019 12:09:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0022 Important CentOS 7 keepalived Security Update Message-ID: <20190106120918.GA3507(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0022 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0022 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4171b23d7282f67bd3938bcac81eee43583a4936513b5e5346e958087bed3b86 keepalived-1.3.5-8.el7_6.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 167, Issue 1 ***********************************************

1 0

ipmi_sdr_cache_create: internal IPMI error
by Ralf Prengel 07 Jan '19

07 Jan '19

Hallo, this happens using freeipmi here on Centos 7 [root@srvdockerndxx etc]# ipmi-sensors Caching SDR repository information: /root/.freeipmi/sdr-cache/sdr-cache-srvdockerndxx.localhost ipmi_sdr_cache_create: internal IPMI error [root@srvdockerndxx etc]# The problem: It is my first try to use freeipmi. The goal is to use it with check-mk to monitor the system. Has anyone a good tutorial or a hint to solve the problem? Thanks Ralf

1 0

Mate from EPEL
by James Pearson 07 Jan '19

07 Jan '19

Slightly off topic, but might be of interest to people using Mate on CentOS 7 from EPEL ... I've just had a comment added to a open Bugzilla report I have with Mate from EPEL, where the current EPEL/Mate maintainer (Wolfgang Ulbrich <fedora at raveit.de>) just states: New maintainer is wanted for MATE epel7 repo! (it looks like he has added this comment to all open EPEL/Mate BZ's) So I guess if anyone is interested in taking over as EPEL/Mate maintainer - then contact fedora at raveit.de ... James Pearson

1 0

how to set proxy systemwide (wget and docker)
by Ralf Prengel 07 Jan '19

07 Jan '19

Hallo, what is the right way to set a proxy systemwide using centos 7? I need this for wget and docker. My first idea was /etc/environment but allthough the proxy is set wget and docker don‘ t connect to their target-systems. Thanks for hints Ralf

3 4

Docker on Centos 7
by H 07 Jan '19

07 Jan '19

I recently updated docker to version 18.09 and I seem to have lost the container id in the command prompt when I exec into a running container, a very useful feature in the previous version I was running. I have not found any information in the Docker General Forum. Has anyone else seen this?

2 6

Mail server with both postfix and sendmail installed, active MTA gets switched.
by Lamar Owen 05 Jan '19

05 Jan '19

Ok, so a bit of a long subject line there... I'm running an email server using postfix, but a critical third-party package being used requires 'sendmail' the package. No, I can't uninstall that package, please don't suggest that, and I don't have control of its requires. So both postfix and sendmail are installed, and that's just the way it has to be. Amavisd-new and clamav/clamd, from EPEL are also installed. I have had updates twice now switch the active MTA to sendmail, and I have to manually 'systemctl disable sendmail; systemctl stop sendmail' and 'systemctl enable postfix;systemctl start postfix' afterwards. I am trying to find out what package update caused this to switch; or which logfile to look at to show me the systemctl messages that show the enable/disable sequence and points me to the correct package to file the bug against. The packages updated today when this happened were: # cat /var/log/yum.log Jan 04 16:42:47 Updated: clamav-filesystem-0.101.0-1.el7.noarch Jan 04 16:42:48 Updated: clamav-lib-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamav-update-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamd-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamav-server-systemd-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamav-scanner-systemd-0.101.0-1.el7.x86_64 Jan 04 16:42:49 Updated: clamav-0.101.0-1.el7.x86_64 Jan 04 16:42:54 Updated: clamav-data-0.101.0-1.el7.noarch Jan 04 16:42:55 Updated: python2-certbot-apache-0.29.1-1.el7.noarch # Sendmail hasn't had updated packages in a long time, since August 2017. None of the package scriptlets from the above packages look like they would affect the sendmail setup. So, I'm looking for suggestions on where to start looking for the data to ferret this out; no clues are in /var/log/messages or /var/log/yum.log.

2 2

thunderbird & firefox
by mark 05 Jan '19

05 Jan '19

I *really* dislike the new photon UI. I WANT the arrow buttons top and bottom of the scrollbars. Does anyone know how to bring them back, or is that "that's *sooo* last year, you can't ever have them again"? mark

4 5

How to troubleshoot partial shutdown problem?
by Marko Vojinovic 04 Jan '19

04 Jan '19

Hi folks, I've never encountered the following problem before (but I guess there is a first time for everything) --- after issuing a regular shutdown, the system starts the shutdown procedure, but stalls at some point, and never finishes. It gets to the console, writes the "powering down" message and stops there --- the hardware never actually powers off. At that time, the machine is completely unresponsive to anything, I have to hold the power button for 5 seconds to actually force it to turn off. This is a clean install of C7, fully updated. I doubt that hardware is at fault, since it *does* properly shut down when I boot it from the C7 live usb (which was used to install the system in the first place). The only difference is that the live usb is not updated at all, while the os on the hard drive has received cca 1000 updates after initial installation. So I'm guessing that something in the updates broke something in the shutdown procedure. Btw, rebooting the machine works properly, no issues. How am I to troubleshoot this? Most importantly, what is the best way to check (after the power cycle) if the hard drive had been unmounted properly during the previous shutdown, i.e. if the unmounting finished before the stall? I don't want the hard drive to "suffer" from unclean shutdowns, if possible. Also, what piece of code prints the "powering off" message in the console (since that appears to be the last thing working)? What else to look for, and where? Is this maybe a known issue, is there a fix? Other than shutting down, the machine works completely ok, so arguably this is not such a big problem (as I plan to have it running 24/7), but still, failing to shutdown when I want it to feels somewhat disturbing, I'd rather have that fixed. Any suggestions? Best, :-) Marko P.S. Happy new year to everyone! ;-)

3 3

OT: but if anyone here knows...
by Fred Smith 04 Jan '19

04 Jan '19

I know this is offtopic, but I hope someone here can give me some guidance. I'm attempting to build sleepyhead (not even on Centos, so it is really OT) and I hit this error: Project ERROR: Unknown module(s) in QT: help Makefile:44: recipe for target 'sub-sleepyhead-make_first-ordered' failed make: *** [sub-sleepyhead-make_first-ordered] Error 3 I don't know anything about using QT, and I've spent hours trying to find a solution to this. there is a qt5help module and it is installed, and I haven't been smart enough to figure out what else this needs. thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

1 0

Measure system resources consumptions by ClamAV File scanner
by Kaushal Shriyan 03 Jan '19

03 Jan '19

Hi, I am running ClamAV process which is invoked by Cron scheduler around 3:00 AM ( Midnight) on remote server running CentOS Linux release 7.6.1810 (Core). Is there a way to measure what was the system resources consumptions like CPU, Network, I/O, Memory and Computing load is being used and is it possible to find out how much time it took to complete the scan? Any help will be highly appreciated. Thanks in Advance. Best Regards, Kaushal

2 1

install AWX without docker
by Ralf Prengel 03 Jan '19

03 Jan '19

Hallo, I want to use awx without docker for the moment and found this tutorial: https://www.howtoforge.com/tutorial/centos-ansible-awx-installation/ Are there any other docs available? Thanks for hints Ralf Von meinem iPad gesendet

2 2

Erratic local hostname resolution with Dnsmasq
by Nicolas Kovacs 03 Jan '19

03 Jan '19

Hi, My local server is running CentOS 7. The machine has two NICs and is acting as a gateway. For DHCP and DNS, I'm using Dnsmasq. I have a strange little problem with local hostname resolution. Before going into more details, here's my configuration. [root@nestor:~] # ifconfig enp2s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.0.2 netmask 255.255.255.0 broadcast 192.168.0.255 ether 2c:27:d7:15:54:a1 txqueuelen 1000 (Ethernet) RX packets 17122 bytes 17596130 (16.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 13426 bytes 2144915 (2.0 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 18 memory 0xfe8e0000-fe900000 enp3s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.2.1 netmask 255.255.255.0 broadcast 192.168.2.255 ether 00:22:64:8a:4c:c2 txqueuelen 1000 (Ethernet) RX packets 6597320 bytes 9692134059 (9.0 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 534283 bytes 57365155 (54.7 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 16 memory 0xfe9e0000-fea00000 [root@nestor:~] # cat /etc/hostname nestor [root@nestor:~] # cat /etc/hosts # /etc/hosts 127.0.0.1 localhost.localdomain localhost 192.168.2.1 nestor.microlinux.lan nestor 192.168.2.252 hp-officejet.microlinux.lan hp-officejet 192.168.2.253 nas.microlinux.lan nas 192.168.2.254 wifi.microlinux.lan wifi [root@nestor:~] # cat /etc/resolv.conf # /etc/resolv.conf nameserver 127.0.0.1 [root@nestor:~] # cat /etc/dnsmasq.conf # /etc/dnsmasq.conf domain-needed bogus-priv interface=enp3s0 dhcp-range=192.168.2.100,192.168.2.200,24h local=/microlinux.lan/ domain=microlinux.lan expand-hosts # Cloudflare server=1.1.1.1 server=1.0.0.1 # Google #server=8.8.8.8 #server=8.8.4.4 no-resolv # Google dhcp-host=D4:85:64:B2:B2:1B,alphamule,192.168.2.2 dhcp-host=00:1E:C9:43:A7:BF,bernadette,192.168.2.3 dhcp-host=00:1D:09:15:4A:D8,raymonde,192.168.2.4 dhcp-host=00:1E:C9:42:84:7B,amandine,192.168.2.5 dhcp-host=B8:CA:3A:D6:5A:43,1C:3E:84:32:7E:87,buzz,192.168.2.6 dhcp-host=90:E6:BA:CF:04:8F,64:70:02:9A:AC:93,balthazar,192.168.2.7 dhcp-host=08:00:27:00:00:01,centosbox,192.168.2.10 dhcp-host=08:00:27:00:00:02,susebox,192.168.2.11 dhcp-host=10:62:E5:D4:95:60,hp-officejet,192.168.2.252 dhcp-host=00:11:32:26:63:A5,nas,192.168.2.253 Now here's the problem. Some of the hostname are correctly resolved, while others are not. Here's what it looks like when invoked from the server. [root@nestor:~] # host alphamule alphamule has address 192.168.2.2 [root@nestor:~] # host bernadette bernadette has address 192.168.2.3 [root@nestor:~] # host raymonde Host raymonde not found: 3(NXDOMAIN) [root@nestor:~] # host amandine Host amandine not found: 3(NXDOMAIN) [root@nestor:~] # host buzz [root@nestor:~] # host balthazar balthazar has address 192.168.2.7 [root@nestor:~] # host centosbox Host centosbox not found: 3(NXDOMAIN) [root@nestor:~] # host susebox Host susebox not found: 3(NXDOMAIN) [root@nestor:~] # host hp-officejet hp-officejet has address 192.168.2.252 [root@nestor:~] # host nas nas has address 192.168.2.253 Of course I could add all these hosts to /etc/hosts, but as far as I understand, this *should* work with the hosts appearing only in /etc/dnsmasq.conf. Or have I overlooked something ? Any suggestions ? Cheers & happy new year, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

upg. CentOS 7.5 to 7.6: unable to mount smb shares - samba NT domain member using ldap
by Miroslav Geisselreiter 02 Jan '19

02 Jan '19

Originally I posted this question at CentOS forum 20.12.2018. https://www.centos.org/forums/viewtopic.php?f=48&t=69193 Hi all, I am not able to mount samba shares after upgrading CentOS 7.5 to 7.6. I have been searching and trying to configure samba and winbind but no success. I find a lot of manuals and help pages about setting samba and winbind for machine acting as AD DC member but almost nothing about machine acting as NT4 style DC member and that is my case. Samba version before upgrade: samba-4.7.1-9.el7_5.x86_64, after upgrade: samba-4.8.3-4.el7.x86_64. I noticed that now it is necessary to use winbind which I did not use before upgrade. My network: Machine with CentOS 6.9 is PDC (NT4 style) configured with ldap and kerberos, providing domain logon services to Windows and Samba clients of an NT4-like domain. openldap-2.4.40-16.el6.x86_64, krb5-server-1.10.3-65.el6.x86_64, samba-3.6.23-51.el6.x86_64. Machine with CentOS 7.6 is domain member offering network shares to windows clients. Before upgrade my samba-4.7 run only smb and nmb services and everything were fine. After upgrade samba-4.8.3 runs smb nmb and winbind services. smb.conf: workgroup = NT4DOMAIN netbios name = NT4MEMBER |# wbinfo -m --verbose Domain Name DNS Domain Trust Type Transitive In Out BUILTIN Local NT4MEMBER Local NT4DOMAIN INTRANET.XX Workstation Yes No Yes # wbinfo --own-domain NT4DOMAIN | I discovered that winbind is not authenticating users with NT4DOMAIN but only with NT4MEMBER. In this case NT4MEMBER users ARE NT4DOMAIN users (there is only one user1 in ldap database). It can be seen in logs bellow. I set debug level 3 for smbd and winbindd. Windows machines have joined NT4DOMAIN but now cannot mount shares from NT4MEMBER. Windows mount command net use /user:NT4DOMAIN\user1 \\NT4MEMBER\share1 is equal to linux command smbclient //NT4MEMBER/share1 -U NT4DOMAIN\\user1. From linux machine I can mount share by this command: smbclient //NT4MEMBER/share1 -U NT4MEMBER\\user1 but from windows machine it is not possible. Normally (before upgrade) Windows users mapped shares from startup script with this command: net use \\NT4MEMBER\share1. What is going wrong can be seen from logs: |# smbclient //NT4MEMBER/share1 -U NT4DOMAIN\\user1 smbd log: check_ntlm_password: Checking password for unmapped user [NT4DOMAIN]\[user1]@[NT4MEMBER] with the new password interface check_ntlm_password: mapped user is: [NT4DOMAIN]\[user1]@[NT4MEMBER] check_ntlm_password: Authentication for user [user1] -> [user1] FAILED with error NT_STATUS_NO_MEMORY, authoritative=1 Auth: [SMB2,(null)] user [NT4DOMAIN]\[user1] at [Wed, 19 Dec 2018 13:56:08.989053 CET] with [NTLMv2] status [NT_STATUS_NO_MEMORY] workstation [NT4MEMBER] remote host [ipv4:X.X.X.X:40488] mapped to [NT4DOMAIN]\[user1]. local host [ipv4:X.X.X.X:445] log_no_json: JSON auth logs not available unless compiled with jansson gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_MEMORY smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NO_MEMORY] || at ../source3/smbd/smb2_sesssetup.c:137 Server exit (NT_STATUS_END_OF_FILE) Terminated winbind log: [ 9232]: request interface version (version = 30) [ 9232]: request location of privileged pipe [ 9232]: pam auth crap domain: [NT4DOMAIN] user: user1 set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize [ 9228]: pam auth crap domain: NT4DOMAIN user: user1 set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 0) The connection to netlogon failed, retrying set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 1) This is again a problem for this particular call, forcing the close of this connection The connection to netlogon failed, retrying set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 2) This is again a problem for this particular call, forcing the close of this connection This is the third problem for this particular call, adding DC to the negative cache list: NT4DOMAIN (null) The connection to netlogon failed, retrying set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 3) This is again a problem for this particular call, forcing the close of this connection This is the third problem for this particular call, adding DC to the negative cache list: NT4DOMAIN (null) NTLM CRAP authentication for user [NT4DOMAIN]\[user1] returned NT_STATUS_NO_MEMORY # smbclient //NT4MEMBER/share1 -U NT4MEMBER\\user1 smbd log: check_ntlm_password: Checking password for unmapped user [NT4MEMBER]\[user1]@[NT4MEMBER] with the new password interface check_ntlm_password: mapped user is: [NT4MEMBER]\[user1]@[NT4MEMBER] init_sam_from_ldap: Entry found for user: user1 auth_check_ntlm_password: sam authentication for user [user1] succeeded Auth: [SMB2,(null)] user [NT4MEMBER]\[user1] at [Wed, 19 Dec 2018 14:00:37.714900 CET] with [NTLMv2] status [NT_STATUS_OK] workstation [NT4MEMBER] remote host [ipv4:X.X.X.X:40494] became [NT4MEMBER]\[user1] [S-1-5-21-x-x-x-21020]. local host [ipv4:X.X.X.X:445] log_no_json: JSON auth logs not available unless compiled with jansson check_ntlm_password: authentication for user [user1] -> [user1] -> [user1] succeeded NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088215 init_group_from_ldap: Entry found for group: 544 init_group_from_ldap: Entry found for group: 100000 Adding homes service for user 'user1' using home directory: '/posta/user1' adding home's share [user1] for user 'user1' at '/data/osobni/%S' Allowed connection from X.X.X.X (X.X.X.X) Connect path is '/tmp' for service [IPC$] Initialising default vfs hooks Initialising custom vfs hooks from [/[Default VFS]/] NT4MEMBER (ipv4:X.X.X.X:40494) connect to service IPC$ initially as user user1 (uid=10010, gid=513) (pid 7874) get_referred_path: |share1| in dfs path \NT4MEMBER\share1 is not a dfs root. smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:312 NT4MEMBER (ipv4:X.X.X.X:40494) closed connection to service IPC$ Allowed connection from X.X.X.X (X.X.X.X) Connect path is '/samba1/664' for service [share1] Initialising default vfs hooks Initialising custom vfs hooks from [/[Default VFS]/] Initialising custom vfs hooks from [recycle] load_module_absolute_path: Module '/usr/lib64/samba/vfs/recycle.so' loaded NT4MEMBER (ipv4:X.X.X.X:40494) connect to service share1 initially as user user1 (uid=10010, gid=513) (pid 7874) winbind log: [ 9238]: request interface version (version = 30) [ 9238]: request location of privileged pipe sids_to_xids sam_sid_to_name sam_sid_to_name sam_sid_to_name StartTLS issued: using a TLS connection smbldap_open_connection: connection opened ldap_connect_system: successful connection to the LDAP server | I can provide more details (config parameters etc.) later if it is necessary. I played with all winbind parameters, idmap config parameters but no success. Can anyone please help me to solve this problem? Please find more logs. wbinfo -i user1 (without prepending domain) should show NT4DOMAIN\user1 not NT4MEMBER\user1. The same should be for wbinfo -i NT4DOMAIN\\user1. |# wbinfo -i user1 NT4MEMBER\user1:*:10010:513::/posta/user1:/bin/false winbindd log: [ 9747]: request interface version (version = 30) [ 9747]: request location of privileged pipe getpwnam user1 sam_name_to_sid name_to_sid: user1 for domain init_sam_from_ldap: Entry found for user: user1 name_to_sid: user1 for domain init_sam_from_ldap: Entry found for user: user1 sam_rids_to_names for NT4MEMBER sam_sid_to_name # wbinfo -i NT4MEMBER\\user1 NT4MEMBER\user1:*:10010:513::/posta/user1:/bin/false winbindd log: [ 9744]: request interface version (version = 30) [ 9744]: request location of privileged pipe getpwnam NT4MEMBER\user1 sam_name_to_sid name_to_sid: NT4MEMBER\user1 for domain NT4MEMBER init_sam_from_ldap: Entry found for user: user1 name_to_sid: NT4MEMBER\user1 for domain NT4MEMBER init_sam_from_ldap: Entry found for user: user1 sam_rids_to_names for NT4MEMBER sam_sid_to_name # wbinfo -i NT4DOMAIN\\user1 Could not get info for user NT4DOMAIN\user1 winbindd log: [ 9746]: request interface version (version = 30) [ 9746]: request location of privileged pipe getpwnam NT4DOMAIN\user1 sam_name_to_sid name_to_sid: NT4DOMAIN\user1 for domain NT4DOMAIN name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED name_to_sid: NT4DOMAIN\user1 for domain NT4DOMAIN name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED | wbinfo -u should list all users from NT4DOMAIN but list nothing. wbinfo -u --domain="NT4MEMBER" list all users which are from ldap - they are NT4DOMAIN users. |# wbinfo -u winbindd log: [ 9754]: request interface version (version = 30) [ 9754]: request location of privileged pipe [ 9754]: request interface version (version = 30) [ 9754]: request misc info [ 9754]: request netbios name [ 9754]: request domain name [ 9754]: domain_info [NT4DOMAIN] list_users NT4DOMAIN samr: sequence number # wbinfo -u --domain="NT4MEMBER" NT4MEMBER\dovecot NT4MEMBER\root NT4MEMBER\nobody NT4MEMBER\user1 winbindd log: [ 9756]: request interface version (version = 30) [ 9756]: request location of privileged pipe list_users NT4MEMBER samr_query_user_list smbldap_search_paged: base => [ou=Users,dc=intranet,dc=xx], filter => [(&(uid=*)(objectclass=sambaSamAccount))],scope => [2], pagesize => [1000] smbldap_search_paged: search was successful samr: sequence number sam_rids_to_names for NT4MEMBER | Mirek

3 10

CentOS Dojo at FOSDEM, Feb 1st, 2019
by Rich Bowen 02 Jan '19

02 Jan '19

We're looking forward to seeing all of you in Brussels next month! The annual FOSDEM CentOS Dojo will be happening, as usual, on the Friday before FOSDEM starts - February 1st, 2019 - at the Marriott Grand Place, just a few minutes walk from Grand Place. We do ask that you register, so that we can plan for space, budget, and coffee breaks. We are currently about half full, so don't wait! More details, including the full schedule of presentations, and the registration link, are on the event website: https://wiki.centos.org/Events/Dojo/Brussels2019 See you in Brussels! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

Centos for Power7 no longer available ?
by christian.sonnemans＠xs4all.nl 01 Jan '19

01 Jan '19

Hello Centos fellows, I liked to run Centos on my IBM Power7 machine and therefore I used to download the images form: <http://isoredirect.centos.org/altarch/7/isos/ppc64/> http://isoredirect.centos.org/altarch/7/isos/ppc64/ But not it seems that this link is not working: The requested branch/release/arch/filename does not seem to be valid, please check your input Is Centos 7 no longer supporter for IBM Power 7 machines witch uses centos Big Endian 64 bits ? Any answer is appreciated Greetings Christian Sonnemans. --- Deze e-mail is gecontroleerd op virussen door AVG. http://www.avg.com

3 4

IPv6: ADDRCONF(NETDEV_UP): link is not ready after upgrading to 7.6
by Luigi Rosa 01 Jan '19

01 Jan '19

Hi, after upgrading to 7.6, kernel 3.10.0-957.1.3.el7.x86_64, at boot instead of the GUI login screen I got two lines like this: IPv6: ADDRCONF(NETDEV_UP): em1: link is not ready IPv6: ADDRCONF(NETDEV_UP): em1: link is not ready The server is accessible via ssh on IPv4 Server: DELL PowerEdge T 110 II NIC: Broadcom, driver tg3, lspci -v: 04:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5722 Gigabit Ethernet PCI Express Subsystem: Dell Device 04de Flags: bus master, fast devsel, latency 0, IRQ 33 Memory at c4a00000 (64-bit, non-prefetchable) [size=64K] Expansion ROM at <ignored> [disabled] Capabilities: [48] Power Management version 3 Capabilities: [50] Vital Product Data Capabilities: [58] Vendor Specific Information: Len=78 <?> Capabilities: [e8] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [d0] Express Endpoint, MSI 00 Capabilities: [100] Advanced Error Reporting Capabilities: [13c] Virtual Channel Capabilities: [160] Device Serial Number f8-db-88-ff-fe-fe-b4-57 Capabilities: [16c] Power Budgeting <?> Kernel driver in use: tg3 Kernel modules: tg3 dmesg says: [ 8.075141] tg3 0000:04:00.0 em1: Link is up at 1000 Mbps, full duplex [ 8.075153] tg3 0000:04:00.0 em1: Flow control is off for TX and off for RX [ 8.075174] IPv6: ADDRCONF(NETDEV_CHANGE): em1: link becomes ready IPv6 is configured as IGNORE in NetworkManager. I tried the following with the same result: net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.all.disable_ipv6 = 1 and reboot, no effect Setting an automatic IPv6 address: no effect. Suggestions? -- Ciao, luigi / +--[Luigi Rosa]-- \

2 2

daemon core dump
by Alice Wonder 30 Dec '18

30 Dec '18

I have a daemon I can conistently cause a crash on. https://iangilham.com/2016/12/08/core-dump-from-centos-7.html Is that the best way (obviously with debug packages installed) to get the core dump or is there a better way? It is NOT a CentOS/EPEL maintained daemon.

2 1

upgrading 7.5 ==> 7.6
by Fred Smith 30 Dec '18

30 Dec '18

hI ALL! There have been a large enough number of people posting here about difficulties when upgrading from 7. to 7.6 that I'm being somewhat paranoid about it. I have several machines to upgrade, but so far the only one I've dared to work on (least critical if it goes bad) is my new-to-me-but-used laptop. First I did a 'dd' backup of the whole drive onto an external USB drive then did the upgrade. Since I use the Mate desktop, I enabled the epel testing repo (per postings on Mate troubles at the time of the upgrade). Result: Boots to GDM just fine, but Mate is a black screen. Switching to Gnome, works fine, but I can't stand Gnome. Not knowing what else to try I restored the dd backup. Later I inserted a spare HD and did a new install from the DVD media. This installed without issue, but now no desktop works. Switching to a console (CTRL-ALT-F2) I did a full "yum update", which installed quite a few packages, but upon reboot nothing had improved. So I added the epel repo (and testing) and installed Mate. Ditto, nothing had changed. This laptop is fairly old, and according to lshw, has a RV635/M86 [Mobility Radeon HD 3650]I] video chipset, in case it matters. CPU is identified as: Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz Having previously installed 7.5 on it without trouble, on which Mate works just fine, I wonder what could have become so broken that neither an upgrade nor a fresh install works. I have, as I said, several other machines to upgrade, too, some of them have Nvidia grahics (esp. my main desktop box, which also uses Linux software RAID-1) and all run Mate. Then there is a netbook (low priority) a couple of VMs (in virtualbox) and at work several other VMS as well as bare-metal on a Lenovo deskside machine, and I'm afraid to do an update on all of them because I need them to be in usable condition. The Lenovo box in my office is somewhat urgent, as I am about to retire and turn it over to someone else who doesn't know much about Linux. I'd appreciate any advice I can get on how to get these systems upgraded without breaking them. thanks in advance for your help! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

8 13

openiam or freeipa ?
by Ilyass Kaouam 30 Dec '18

30 Dec '18

Hi, What is the best OpenIAM or FreeIPA ? Thank's -- *Ilyass kaouam* *Ingénieur System OpenSource* *Mastère européen Manager de Projets Informatiques*

2 2

Slider bars...
by mark 30 Dec '18

30 Dec '18

Anyone have a clue how to add back the buttons at the top and bottom of the slider bars, or at least change how the sliders work? Most of the time, I want to scroll up faster, *NOT* got 500 emails back, or to the top of the page.... mark "c7.6"

3 2

[Fwd: Centos 7.6 and Aeskulap]
by Gregory P. Ennis 30 Dec '18

30 Dec '18

Everyone, Apparently, aeskulap is broken during the upgrade fro 7.5 to 7.6, and is no longer available in the epel repos. I had some difficulty having it function, and during the debug process I decided to do a yum remove, but when I tried a yum install to reinstall it, aeskulap was no longer present. This problem may also affect other modules. I have placed a bug report : https://bugzilla.redhat.com/show_bug.cgi?id=1659667 The depracation of tcp wrappers may be involved in this https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers -- Greg Ennis

4 8

Trying To Move From CentOS 6.10 To CentOS 7.5
by Eugene Poole 29 Dec '18

29 Dec '18

I have this machine running CentOS 6.10 x86_64 and it's ripe to be moved to CentOS 7.5. I mounted the DVD and rebooted and went through the graphic install until I reached the point of allocating the disks. It showed no available disk drives. There are 6 disk drives on this machine: 4 - 1 TB and 2 - 2 TB all WD Black - they have been made up with /dev/sda1 (1024 MB) and /dev/sdd1 (1024 MB) as /dev/md0 (software RAID-1); with the remainder as software RAID-10 using LVM. The machine has the following allocations: /boot = /dev/md0 software RAID-1 /dev/md1 as /dev/vg_jpdsys3 totaling 2.72 TB software RAID-10. Why can't the CentOS 7 installer see a CentOS 6 definition? Out of all of the LVS built I would only need to format the file systems the apply to the OS and swap. If I have to rebuild I will loose everything! Any suggestions? -- Eugene Poole Woodstock, Georgia

1 0

centos docker which repo (centos or docker)
by ralf.prengel＠comline.de 28 Dec '18

28 Dec '18

Hallo, I planning to migrate ouch dockerfarm from debian to centos. Most of our customers are using redhat or centos and some oft eh books I m using are written for centos too. My question: Should I use docker from the standard repo or the version from the docker-repo? Thanks for hints Ralf Ralf Prengel Teamleiter Customer Care Comline AG Hauert 8 D-44227 Dortmund/Germany ... Telefon: +49 231 97575 157 Mobil: +49 151 10831 157 Fax: +49 231 97575 257 E-Mail: ralf.prengel(a)comline.de ... www.comline.de<http://www.comline.de> Vorstand: Stephan Schilling Aufsichtsrat: Otto Prange (Vorsitzender) HR Dortmund B 14570 USt.-ID-Nr. DE 124727422

3 2

kickstart configuration is working fine but some questions
by ralf.prengel＠comline.de 28 Dec '18

28 Dec '18

Hallo, my kickstart configuration (Centos 7.6) is working fine using pxe now but I ve two little problems: 1) The installation stops in the last screen "installation finished" and doesn't switch to the login-screen. 2) How can I configure the profile for users to answer all question that are asked after the first login. Thanks Ralf Ralf Prengel Teamleiter Customer Care Comline AG Hauert 8 D-44227 Dortmund/Germany Telefon:+49 231 97575 157 Mobil:+49 151 10831 157 Fax:+49 231 97575 257 E-Mail:ralf.prengel@comline.de www.comline.de Vorstand: Stephan Schilling Aufsichtsrat: Otto Prange (Vorsitzender) HR Dortmund B 14570 USt.-ID-Nr. DE 124727422

2 1

recording session
by Ilyass Kaouam 28 Dec '18

28 Dec '18

Hi, Please if you know any opensource tools he can recording session ? Freeipa can do this ? Thank's -- *Ilyass kaouam* *Ingénieur System OpenSource* *Mastère européen Manager de Projets Informatiques*

3 3

compiling fedora srpm on CentOS
by sthustfo 27 Dec '18

27 Dec '18

I tried installing fedora grpc srpm on CentOS and ran into following error when installing srpm. I understand fedora makes use of more recent versions of openssl, glibc etc but why should this happen when installing source rpm? Any pointers/articles on how to go about building fedora srpms on CentOS? Any way out other than building directly using sources? rpm -i grpc-1.17.1-3.fc30.i686.rpm warning: grpc-1.17.1-3.fc30.i686.rpm: Header V3 RSA/SHA256 Signature, key ID cfc659b9: NOKEY error: Failed dependencies: libc.so.6(GLIBC_2.28) is needed by grpc-1.17.1-3.fc30.i686 libcrypto.so.1.1 is needed by grpc-1.17.1-3.fc30.i686 libcrypto.so.1.1(OPENSSL_1_1_0) is needed by grpc-1.17.1-3.fc30.i686 libm.so.6(GLIBC_2.29) is needed by grpc-1.17.1-3.fc30.i686 libprotobuf.so.17 is needed by grpc-1.17.1-3.fc30.i686 libssl.so.1.1 is needed by grpc-1.17.1-3.fc30.i686 libssl.so.1.1(OPENSSL_1_1_0) is needed by grpc-1.17.1-3.fc30.i686 libstdc++.so.6(GLIBCXX_3.4.20) is needed by grpc-1.17.1-3.fc30.i686 libstdc++.so.6(GLIBCXX_3.4.21) is needed by grpc-1.17.1-3.fc30.i686

3 2

Docker + ipv6
by Joe 27 Dec '18

27 Dec '18

Hello, i want to use docker with ipv6. i install docker and edit the /etc/docker/daemon.json: { "ipv6": true } Message: [root@froodo network-scripts]# systemctl status docker ● docker.service - Docker Application Container Engine Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Do 2018-12-27 12:46:22 CET; 1min 17s ago Docs: http://docs.docker.com Main PID: 15041 (code=exited, status=1/FAILURE) Dez 27 12:46:21 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:21.570534716+01:00" level=info msg="libcontainerd: new containerd process, pid: 15045" Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.673394351+01:00" level=info msg="Graph migration to content-addressability took 0.00 seconds" Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.674651938+01:00" level=info msg="Loading containers: start." Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.700417054+01:00" level=info msg="Firewalld running: true" Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.903025438+01:00" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Dez 27 12:46:22 froodo.org dockerd-current[15041]: Error starting daemon: Error initializing network controller: Error creating default "bridge" network: could not find an available, non-overlapping IPv6 address pool among the defaults to assign to the network Dez 27 12:46:22 froodo.org systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE Dez 27 12:46:22 froodo.org systemd[1]: Failed to start Docker Application Container Engine. Dez 27 12:46:22 froodo.org systemd[1]: Unit docker.service entered failed state. Dez 27 12:46:22 froodo.org systemd[1]: docker.service failed. My ip config: [root@froodo network-scripts]# ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 96:00:00:17:06:a4 brd ff:ff:ff:ff:ff:ff inet 116.203.40.3/32 brd 116.203.40.3 scope global dynamic eth0 valid_lft 84360sec preferred_lft 84360sec inet6 2a01:4f8:1c0c:7c6c::1/64 scope global valid_lft forever preferred_lft forever inet6 fe80::9400:ff:fe17:6a4/64 scope link valid_lft forever preferred_lft forever I tried a lot of things from differnt howtos, but only with no success. What the next steps to running docker with ipv6? Thx. Joe

2 1

Re: [CentOS] You removed Weboob package over political reasons? Whole Internet laughs at you
by Alice Wonder 26 Dec '18

26 Dec '18

On 12/24/18 7:21 AM, vsnsdualce(a)memeware.net wrote: > Debian is not ruled by the men who actually write the software, but > instead women. *snip* Can we please ban the person who sent that disgusting rant to the list?

7 8

CentOS-announce Digest, Vol 166, Issue 8
by centos-announce-request＠centos.org 25 Dec '18

25 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3831 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2018:3833 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 21 Dec 2018 19:07:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3831 Critical CentOS 6 firefox Security Update Message-ID: <20181221190759.GA3322(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3831 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:3831 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 429981c764d258970b014425dfe4a26573613bb5941d254e0deac4aa21ed0c91 firefox-60.4.0-1.el6.centos.i686.rpm x86_64: 429981c764d258970b014425dfe4a26573613bb5941d254e0deac4aa21ed0c91 firefox-60.4.0-1.el6.centos.i686.rpm 2e436d3c160a06bb442a4caea811f40855a07579a69a4de4d67e3da4ec30a605 firefox-60.4.0-1.el6.centos.x86_64.rpm Source: 705857e68c4510628e0d571b8dbc702ffee6b512bbd6ad496b19cba8855daed6 firefox-60.4.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 21 Dec 2018 19:08:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3833 Critical CentOS 7 firefox Security Update Message-ID: <20181221190851.GA3402(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3833 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:3833 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9db402dc9f056bf640dc02800014ad688ac988ad10c7359fc66ea2b5538a951a firefox-60.4.0-1.el7.centos.i686.rpm 5553ef981d4841a3041e728e07169aad5a2d4ab0a4cd3fba5cddaefe7c9d0be9 firefox-60.4.0-1.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 8 ***********************************************

1 0

Fedora Server - as an alternative ?
by lejeczek 22 Dec '18

22 Dec '18

hi guys I wonder if any Centosian here have done something different than only contemplated using Fedora Server, actually worked on it in test/production envs. If here are some folks who have done it I want to ask if you deem it to be a viable option to put it on at least portion of servers stack. Anybody? Many thanks, L.

9 11

Gnome-shell memory
by Jerry Geis 21 Dec '18

21 Dec '18

So after much research it seems the only way to "help" the gnome-shell memory leak issue (I still see it on CentOS 7.6) is to do "export DISPLAY=:0.0; gnome-shell --replace" periodically. Perhaps in cron. Is that an OK solution for the LONG haul? Seems to knock the memory back down and box appears to keep running. Thanks, Jerry

2 3

Re: [CentOS] Fedora Server - as an alternative ?
by mark 21 Dec '18

21 Dec '18

Robert Moskowitz wrote: > On 12/20/18 10:33 AM, mark wrote: >> lejeczek via CentOS wrote: >>> >>> I wonder if any Centosian here have done something different than >>> only contemplated using Fedora Server, actually worked on it in >>> test/production envs. >>> >>> If here are some folks who have done it I want to ask if you deem it >>> to be a viable option to put it on at least portion of servers stack. >>> >>> Anybody? >>> >>> >> I would not run it as a server. In a server and workstation >> environment, you do *not* want to have daily multiple updates to >> software, you want stability, or you're likely to have your users >> seriously aggravated by you, for breaking their jobs far too frequently. > > Where do you get that with Fedora server you have to do daily multiple > updates? > I frequently see my manager's fedora box doing updates, multiple times a week. mark

2 1

CentOS-announce Digest, Vol 166, Issue 7
by centos-announce-request＠centos.org 21 Dec '18

21 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Updates in 7.6.1810/os Repository from the CR Announce List (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 20 Dec 2018 07:50:09 -0600 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Updates in 7.6.1810/os Repository from the CR Announce List Message-ID: <776565e3-dfea-45ba-a4a6-ef909464ceac(a)centos.org> Content-Type: text/plain; charset="utf-8" As part of the CR process ( https://wiki.centos.org/AdditionalResources/Repositories/CR ), the following updates were done and are included in the CentOS base ( os/ ) repository for CentOS Linux 7.6.1810. https://lists.centos.org/pipermail/centos-cr-announce/2018-November/thread.… https://lists.centos.org/pipermail/centos-cr-announce/2018-December/thread.… There was an issue with the announcement generation scripting that used the errata API to pull information for the announcements (that is now fixed), so some of the announcements happened later than the actual build date and release date of the packages (as an example, the date we created the man-db announcement was December 19th ( https://lists.centos.org/pipermail/centos-cr-announce/2018-December/005800.… ) .. the actual date of the package build was 30 Oct 2018 08:26:54 PM UTC .. and it was signed and then released initially into CR on 12 Nov 2018. We have since generated any missing announcements to the CR announce list and also any updates to the os/ repo (that live in the udpates/ repo) were announced to this centos-announce list. Thanks, Johnny Hughes

1 0

grpc packages
by sthustfo 20 Dec '18

20 Dec '18

Is there any repository/location where we can grab prebuilt grpc packages for CentOS? Any pointers appreciated. Thanks.

2 2

Rsyslog warning
by SternData 20 Dec '18

20 Dec '18

I see this error every day. What should I be looking at to fix it? rsyslogd: sd_journal_get_cursor() failed: 'Cannot assign requested address' [v8.24.0-34.el7] -- -- Steve

1 0

abrt-watch-log -F BUG: WARNING:
by Ilyass Kaouam 20 Dec '18

20 Dec '18

Hi, Please what is this error ? /usr/bin/abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected ernel BUG at list_del corruption list_add corruption do_IRQ: stack overflow: ear stack overflow (cur: eneral protection fault nable to handle kernel ouble fault: RTNL: assertion failed eek! page_mapcount(page) went negative! adness at NETDEV WATCHDOG ysctl table check failed : nobody cared IRQ handler type mismatch Kernel panic - not syncing: Machine Check Exception: Machine check events logged divide error: bounds: coprocessor segment overrun: invalid TSS: segment not present: invalid opcode: alignment check: stack segment: fpu exception: simd exception: iret exception: /var/log/messages -- /usr/bin/abrt-dump-oops -xtD uname -a 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux CentOS Linux release 7.5.1804 (Core) Thank's --

1 0

kickstart install
by Jerry Geis 20 Dec '18

20 Dec '18

In changing from a 7.5 to 7.6 automated install. 7.6 is not happy and the install process stops and shows the screen where the "Install Source" is not happy. I enter 3 to see what its set for, I select network, I select http and I see my URL that my kickstart file has. It looks right - but its not happy. I tried looking in other consoles (text mode) to see any error and nothing is showing. How do I see what the error is about the install source ? Thanks, Jerry

1 1

Updates in 7.6.1810/os Repository from the CR Announce List
by Johnny Hughes 20 Dec '18

20 Dec '18

As part of the CR process ( https://wiki.centos.org/AdditionalResources/Repositories/CR ), the following updates were done and are included in the CentOS base ( os/ ) repository for CentOS Linux 7.6.1810. https://lists.centos.org/pipermail/centos-cr-announce/2018-November/thread.… https://lists.centos.org/pipermail/centos-cr-announce/2018-December/thread.… There was an issue with the announcement generation scripting that used the errata API to pull information for the announcements (that is now fixed), so some of the announcements happened later than the actual build date and release date of the packages (as an example, the date we created the man-db announcement was December 19th ( https://lists.centos.org/pipermail/centos-cr-announce/2018-December/005800.… ) .. the actual date of the package build was 30 Oct 2018 08:26:54 PM UTC .. and it was signed and then released initially into CR on 12 Nov 2018. We have since generated any missing announcements to the CR announce list and also any updates to the os/ repo (that live in the udpates/ repo) were announced to this centos-announce list. Thanks, Johnny Hughes

1 0

Atomic ISO unavailable
by Eric Lehmann 20 Dec '18

20 Dec '18

Hello The http://cloud.centos.org/centos/7/atomic/images/CentOS-Atomic-Host-7-Install… provided in https://wiki.centos.org/SpecialInterestGroup/Atomic/Download is down. Does anybody know if there is a reason for that? Regards

2 1

A question about why the function "recv" return 0
by yf chu 20 Dec '18

20 Dec '18

I am a website developer. We deploy a Nginx server on centos to provide HTTP services. Recently, some customers of our website were complaining about that occasionally they could not open the webpage, the web browser show that the tcp connection was reset. I checked the Nginx logs and source code and found that the function "recv" return 0 when some customers made HTTP requests. Our customers have confirmed that their network was ok at that time. Now, I could not find any clue about this issue. Is there any solution to find the reason? Does it have something to do with firewall, or ISP? Can we find something from the system log?

3 3

CentOS-announce Digest, Vol 166, Issue 6
by centos-announce-request＠centos.org 20 Dec '18

20 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3854 Low CentOS 6 ntp Security Update (Johnny Hughes) 2. CEBA-2018:3847 CentOS 7 pacemaker BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Dec 2018 23:46:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3854 Low CentOS 6 ntp Security Update Message-ID: <20181219234654.GA25454(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3854 Low Upstream details at : https://access.redhat.com/errata/RHSA-2018:3854 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8d4c7f5edb0fb14af55ff6f74ee15349e69f5a8ff180b39b2fbbd01d99c0199a ntp-4.2.6p5-15.el6.centos.i686.rpm a9a5283906f361f4b2d85be307eb8c7574bc749ec6e9d03988831b628e2bd273 ntpdate-4.2.6p5-15.el6.centos.i686.rpm 18edea5cb7d5a13afc34464fd4cef7cbd46e6d6a7b91acbf1a6dd58a9997a411 ntp-doc-4.2.6p5-15.el6.centos.noarch.rpm ba4d8eff03ce5ffdd42025c0aa9e21ca1429f02909e2e0f39a2d838c22e04eae ntp-perl-4.2.6p5-15.el6.centos.i686.rpm x86_64: b6ee6afaf3ff4b90b3a3f0077e111362a9ce6912384799b4798cfba3984a60ec ntp-4.2.6p5-15.el6.centos.x86_64.rpm 0bd3608f6a5a0935529f9e16de6b875ac810e89f25fc03a034e1e11e763b9bf9 ntpdate-4.2.6p5-15.el6.centos.x86_64.rpm 18edea5cb7d5a13afc34464fd4cef7cbd46e6d6a7b91acbf1a6dd58a9997a411 ntp-doc-4.2.6p5-15.el6.centos.noarch.rpm c638a5e57e7895b4c605f63077902c141ada8a26bf2a94272dc0d11f0a35bc30 ntp-perl-4.2.6p5-15.el6.centos.x86_64.rpm Source: b41d310c7c14b58374dfd75e55b5b9b9f7105ca983e0a3ac4cf43be95e47da8b ntp-4.2.6p5-15.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Dec 2018 23:47:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3847 CentOS 7 pacemaker BugFix Update Message-ID: <20181219234722.GA25572(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3847 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3847 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2e35900146ccf77ab81cb32e8a7957c10aa678bae36c55744e9b18f1750a95e8 pacemaker-1.1.19-8.el7_6.2.x86_64.rpm 5b54875eaccb9c93054e5eef35caf5ff46e2f0cfbd2acb859b813cb3f473301f pacemaker-cli-1.1.19-8.el7_6.2.x86_64.rpm e2312c85fc1373cf28748db20cfee3135a390b48b9c0abce874e9939af9377fb pacemaker-cluster-libs-1.1.19-8.el7_6.2.i686.rpm 302e43e36b0262d23fb2cd34f393eb5834c7f82944d79d3e46923f9d6544cb54 pacemaker-cluster-libs-1.1.19-8.el7_6.2.x86_64.rpm a7b495377398e9c514391716bc0a34c66287be8fbad4b47c4d6ff48c9edfa1b0 pacemaker-cts-1.1.19-8.el7_6.2.x86_64.rpm e295d5e858815ad9b39d2498e24de56a7c4aef479f04dedc0e86cee13aaf1727 pacemaker-doc-1.1.19-8.el7_6.2.x86_64.rpm 3d8ca4d2a12878da0d49541b27c8266d6d7e01f8c984b66443f8b1a87b55c004 pacemaker-libs-1.1.19-8.el7_6.2.i686.rpm a19e6555225e34aed04e981aad4925a85c67452b92cece2000e76d03fce500dc pacemaker-libs-1.1.19-8.el7_6.2.x86_64.rpm 65952d9647e01febadc9e68a438e2ca1cf4ab15deaace176761edcbe094ec380 pacemaker-libs-devel-1.1.19-8.el7_6.2.i686.rpm bfa7aa216dab27e96169eb2b63ed0e233eaba1368dd2bbb00e22eaa52348f321 pacemaker-libs-devel-1.1.19-8.el7_6.2.x86_64.rpm db71a78725c41b66642e5ed756d0b7bfeee2ca1230cbf9433ee1cfbc27d245f0 pacemaker-nagios-plugins-metadata-1.1.19-8.el7_6.2.x86_64.rpm 51f9cbc0b8ccf236667e2b6bf057b662a44abdb4633efa58c4961362a9e3bf6a pacemaker-remote-1.1.19-8.el7_6.2.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 6 ***********************************************

1 0

VNC question
by isdtor 20 Dec '18

20 Dec '18

We have run into the infamous black screen problem with tigervnc under CentOS7, which prompted me to look into how vnc is configured here. https://access.redhat.com/solutions/966063 Am I reading this correctly - root needs to set up a systemd vnc service for every user and display individually? Compared to e.g. CentOS before 7, or indeed any other Linux/Unix system where vnc is completely under user control?

4 7

how to implement rate-limiting measures on interfaces using IPTables?
by Sean Son 19 Dec '18

19 Dec '18

Hello all I have been tasked to implement rate-limiting measures on interfaces using IPTables in RHEL 7. I know that in order to implement it using FirewallD, I will need to run the following command: firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -p tcp -m limit --limit 25/minute --limit-burst 100 -j ACCEPT How would I do the same using IPtables? Thanks!! Sean

2 1

Cgroups : memory.limit_in_bytes and memory.usage_in_bytes includes file cache?
by valleru＠cbio.mskcc.org 19 Dec '18

19 Dec '18

Hello All, We were under the assumption that Cgroups memory controller, limits memory based on just the RSS size of the process. However, i see that the process is getting killed even when the RSS size is very low compared to the limit in bytes. For example: cat memory.stat cache 85880266752 rss 2441216 rss_huge 0 mapped_file 8192 swap 0 pgpgin 29265847812 pgpgout 29244880354 pgfault 48530374728 pgmajfault 20 inactive_anon 0 active_anon 2441216 inactive_file 85879496704 active_file 770048 unevictable 0 hierarchical_memory_limit 85899345920 hierarchical_memsw_limit 85899345920 total_cache 85880266752 total_rss 2441216 total_rss_huge 0 total_mapped_file 8192 total_swap 0 total_pgpgin 29265847812 total_pgpgout 29244880354 total_pgfault 48530374728 total_pgmajfault 20 total_inactive_anon 0 total_active_anon 2441216 total_inactive_file 85879496704 total_active_file 770048 total_unevictable 0 cat memory.usage_in_bytes 85885800448 cat memory.limit_in_bytes 85899345920 What is confusing is that , why is memory.usage_in_bytes being shown as 85885800448, when the RSS is just 2441216? Is it true that memory.usage_in_bytes/memory.limit_in_bytes takes files cache into consideration when calculating the usage? Regards, Lohit

1 0

Out of memory
by Jerry Geis 19 Dec '18

19 Dec '18

Hi, I have three machines running CentOS 7.6 in desktop mode. 2 are fine. 1 of them is having a memory issue that is Out of memory [17878] 1000 17878 2069991 42311 11898880 0 0 gnome-shell This gnome-shell looking at /var/log/messages after reboot - is the HIGHEST amount of memory. Looking at "top" now - it certainly does not use that amount of ram at this time. These are the gnome-shell packages installed. rpm -qa | grep gnome-shell gnome-shell-extension-alternate-tab-3.28.1-5.el7.noarch gnome-shell-extension-top-icons-3.28.1-5.el7.noarch gnome-shell-extension-window-list-3.28.1-5.el7.noarch gnome-shell-extension-launch-new-instance-3.28.1-5.el7.noarch gnome-shell-extension-apps-menu-3.28.1-5.el7.noarch gnome-shell-extension-common-3.28.1-5.el7.noarch gnome-shell-extension-user-theme-3.28.1-5.el7.noarch gnome-shell-extension-places-menu-3.28.1-5.el7.noarch gnome-shell-3.28.3-6.el7.x86_64 Why is gnome-shell eating my memory? What can I do? Basically - the machine isn't even doing anything. Boots up and shows one static web page. At this time that is all. Then about 24 hours later its out of memory. The other 2 machines that seem fine - are showing the same web page. But not out of memory. Thanks, Jerry

3 2

Spamassassin + Postfix : delete spam mail on the server ?
by Nicolas Kovacs 19 Dec '18

19 Dec '18

Hi, My mail server is running on CentOS 7 with Postfix, Dovecot and Spamassassin. I get quite a lot of spam on a few accounts, and Spamassassin does its job fine. Spam mail is identified correctly, and it looks like there are no false positives, e. g. valid mail is never identified as spam. When a message is flagged as spam, the subject line is rewritten to begin with [SPAM]. Then, a filter in Mozilla Thunderbird is setup, and when a subject line begins with [SPAM] the message is directly sent to Trash. I've documented the whole configuration here: * https://blog.microlinux.fr/spamassassin-centos/ The problem with this setup is that spam mail is still delivered, and I need Thunderbird's filters to weed out incoming mail. And when I'm using my webmail (running SquirrelMail), my inbox is a tsunami of unread [SPAM] messages. So I'd like to go a step further and delete all messages flagged [SPAM] directly on the server. It doesn't look like Spamassassin provides this functionality. Did any of you guys succeed in doing this anyway? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

10 12

CentOS-announce Digest, Vol 166, Issue 5
by centos-announce-request＠centos.org 19 Dec '18

19 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2018:3832 CentOS 7 resource-agents BugFix Update (Johnny Hughes) 2. CESA-2018:3834 Important CentOS 7 ghostscript Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Dec 2018 03:21:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3832 CentOS 7 resource-agents BugFix Update Message-ID: <20181219032152.GA890(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3832 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3832 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 79aa7b8a924f66da70481041e131df1d717800eeb0e11f9ffe9a7ace6e3a9d2c resource-agents-4.1.1-12.el7_6.7.x86_64.rpm b36f781db6ae516889a79178393d14200ab4bdeffce8ca9d159abee4ac25a19b resource-agents-aliyun-4.1.1-12.el7_6.7.x86_64.rpm 134ad788dcf01a4d360e4afef1b60b9f0fc2e443ad3d0565a54e44659628c36b resource-agents-gcp-4.1.1-12.el7_6.7.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Dec 2018 03:22:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3834 Important CentOS 7 ghostscript Security Update Message-ID: <20181219032211.GA983(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3834 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3834 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b02281b3f40e29efcc842714d9704763bce7f21f0b358a4246074513ec71da18 ghostscript-9.07-31.el7_6.6.i686.rpm 94a6c73acd88ad8c61fae422a2557f25d016c8301a5904ad416794934512af1e ghostscript-9.07-31.el7_6.6.x86_64.rpm 1a986c609ec1e7b11daeae3052847fabee509bfb40fe6188011673d990441223 ghostscript-cups-9.07-31.el7_6.6.x86_64.rpm 16c32cdf0ba38d3e109b5855a735c4d23d0cf11c2775a4dff31934a4c6c183fa ghostscript-devel-9.07-31.el7_6.6.i686.rpm 1ff0115fd9a2c9479bf9d1e490786303e53253d0aaa6b508728e671a19abfd0f ghostscript-devel-9.07-31.el7_6.6.x86_64.rpm 896fdf02ca354030aad6e2e71ffbcd49eb5a9d285d19e9f18ef03a5241e9a9be ghostscript-doc-9.07-31.el7_6.6.noarch.rpm 08a063cfd502e270eb11bee7c13b68c7d1a1fed4b13f0a8060490c704d75f3c7 ghostscript-gtk-9.07-31.el7_6.6.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 5 ***********************************************

1 0

Updating 7.5->7.6
by mark 18 Dec '18

18 Dec '18

I've got a user with a legacy NVidia card. I've got kmod-nvidia. Last time I did an update, all I did was yum update --disableexcludes. This time, it fails, with Error: Package: nvidia-x11-drv-304xx-304.135-1.el7.elrepo.x86_64 (@elrepo) Requires: xorg-x11-server-Xorg <= 1.19.99 Removing: xorg-x11-server-Xorg-1.19.5-5.el7.x86_64 (@base) xorg-x11-server-Xorg = 1.19.5-5.el7 Updated By: xorg-x11-server-Xorg-1.20.1-5.1.el7.x86_64 (updates) xorg-x11-server-Xorg = 1.20.1-5.1.el7 Available: xorg-x11-server-Xorg-1.20.1-3.el7.x86_64 (base) xorg-x11-server-Xorg = 1.20.1-3.el7 Available: xorg-x11-server-Xorg-1.20.1-5.el7.x86_64 (updates) xorg-x11-server-Xorg = 1.20.1-5.el7 I'd appreciate any help understanding what this is telling me. It *looks* like it wants to update vidia-x11-drv-304xx-304.135-1.el7.elrepo.x86_64 with vidia-x11-drv-304xx-304.135-5.el7.elrepo.x86_64 (or maybe 135-6) and then it wants to replace the elrepo mods with base or updates. Is this saying there's no update for the xorg-x11-server-Xorg (I don't see one) on elrepo? Does this mean I'll have to go back to the proprietary driver? mark

3 11

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss