- Discuss - lists.centos.org

Netscape Directory Server 6?
by Sean Carolan 05 Feb '08

05 Feb '08

I understand that Red Hat has purchased and open-sourced (well sort of) what was formerly known as Netscape Directory Server. I am looking for version 6 of netscape directory server, does anyone know if this is available somewhere? http://www.redhat.com/docs/manuals/dir-server/release-notes/ds60relnotes.ht… Or can you only get the newest Fedora Directory Server now?

2 3

log outbound port 80 connections
by Tony Schreiner 05 Feb '08

05 Feb '08

Is there a way to log outbound connections to a specific port (80)? CentOS 4.6. iptables? Thanks Tony Schreiner Boston College

5 9

Re: [CentOS] 32 bit applications on 64 bit machine
by Rozsa Sandor 05 Feb '08

05 Feb '08

----- Original Message ---- From: John R Pierce <pierce(a)hogranch.com> To: CentOS mailing list <centos(a)centos.org> Sent: Tuesday, February 5, 2008 6:58:42 PM Subject: Re: [CentOS] 32 bit applications on 64 bit machine Rozsa Sandor wrote: > Hi people, > > I have a 64 bit Centos machine. My problem is that I can't run 32 bit > applications on that. I can compile with the 32 bit option my sources, > but when I'm trying to run them I obtain the following error message: > > -bash: ./a.out: cannot execute binary file > And the file a.out returns the following: > a.out: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for > GNU/Linux 2.6.9, dynamically linked (uses shared libs), for GNU/Linux > 2.6.9, not stripped $ ldd ./a.out should list any required .so libraries it says $ ldd ./a.out /usr/bin/ldd: line 161: /lib/ld-linux.so.2: cannot execute binary file not a dynamic executable _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping

1 0

Removing a disc from a software mirror
by Joseph L. Casale 05 Feb '08

05 Feb '08

If I needed to remove a disc from a software mirror for a quick backup before a test, how can I remove it cleanly so that it has a good copy of the OS on it? If I use mdadm to fail then remove it, this would be done while CentOS is running (It's a mirror of the system disc) and I suspect the data on it would not be in a clean state? Is there a way to say have it not involved in the mirror after the next boot for instance? Thanks! jlc

3 4

Enterprise-class monitoring system for CentOS and Win2k3 server
by Sean Carolan 05 Feb '08

05 Feb '08

Can anyone recommend an enterprise-class monitoring system for both Linux and Windows servers? Here are my requirements: SNMP trap collection, ability to import custom MIBs isup/isdown monitoring of ports and daemons Server health monitors (CPU, Disk, Memory, etc) SLA reporting with nice graphs Pager/Email/SMS alerts with groups, filters and escalations Built-in MTBF and MTTR reporting Robust parent-child relationships between monitors or probes. For example, the system must be smart enough to know that if 25 URLs have gone down all at once, that they belong to an apache process that has died. I don't want 25 alerts, I want *one* alert telling me that the parent apache daemon is down. Ability to easily create dashboards from various monitors. We want this so we can see all components of a website in one place, eg, apache URL, database server, disk storage, etc. Attractive, easy to use GUI. We don't want a homebrew project with ugly graphs and a web 1.0 GUI. So far the products I have looked at are: NimBUS SolarWinds IP Monitor WhatsUPGold GroundWork Open Source Nagios And none of them have met all my requirements. Any suggestions?

6 8

Creating a Roaming imap account
by Anne Wilson 05 Feb '08

05 Feb '08

This (CentOS5.1) box is my new imap server. Using system-config-security-level I opened port 143 tcp, and mail is readable throughout the LAN. I want a Roaming account on my laptop so that I can read mail while away from home. I have set up the account in kmail, and I know that that part is correct, as it worked on my old, less-secured, imap server. However, I haven't been able so far to make a connection. Do I need 143 udp open? What else must I do to allow me to connect over WAN? Thanks Anne

4 6

32 bit applications on 64 bit machine
by Rozsa Sandor 05 Feb '08

05 Feb '08

Hi people, I have a 64 bit Centos machine. My problem is that I can't run 32 bit applications on that. I can compile with the 32 bit option my sources, but when I'm trying to run them I obtain the following error message: -bash: ./a.out: cannot execute binary file And the file a.out returns the following: a.out: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.9, dynamically linked (uses shared libs), for GNU/Linux 2.6.9, not stripped Any suggestions what I have to install or any links. Thanx s --------------------------------- Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.

4 4

cpu type
by Jimmy Bradley 05 Feb '08

05 Feb '08

I have a quick question. The board and CPU that I'm using in one of my machines was given to me. I didn't take the time to look up the info on the board or anything. I was busy, so I just put the board in a pc case, hooked everything up, and loaded the os on the machine. I didn't know it at the time, but there's a chance it may be a 64bit board and cpu. I don't want to pull the machine out of the desk, and open it up to find out. Is there a command entered by way of the terminal window that will tell me what kind of cpu I have? I want to say that it's an AMD sempron 3000+, but I'm not sure. Thanks Jim

11 14

Re: [CentOS] system gets suspended automatically!
by David G. Miller 05 Feb '08

05 Feb '08

Chandra <shekharc.2004(a)gmail.com> wrote: > Hello! > > I am running CentOS-5 with latest kernel available by deault (2.6.23). > I installed it on a Dell XPS machine having Intel Quad processors (4 > parallel cpus). I use it to run a computational program and I need to > keep the program running for 1-2 months continuously. I generally boot > it in runlevel-3 with network ON without X and use ssh from another > machine to connect and run the program using the "nohup" utility. > > However, the system automatically gets suspended (the computational > program stops, ssh stops working, whole the OS seems to be freezing) > after 4-5 hours. I have stopped the "acpid" daemon and boot the kernel > with "acpi=off" option in "grub.conf" but no help. The kernel log ( > /var/log/messages) doesn't show anything special. After the instant of > suspension, kernel also stops logging into "/var/log/messages". > > Please help me out. I think there is a kernel problem. I have run > programs for days and days continuously using FC5 (which had older > kernel). I can't use FC5 or older version of CentOS because I need > GCC-4.1.2+ to compile parallel OpenMP program. > > Thank you, > > Chandra What do you have to do to get the box out of "suspend?" If the system is frozen and you have to reboot the box to "unfreeze" it, I'd guess it's a heat issue. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

Cluster fun
by Scott Ehrlich 05 Feb '08

05 Feb '08

I've priced some 1 and 2U Dell servers. Now, I'd like to perform a price comparison of COTS hardware for 1 and 2U servers. What VAR companies do people recommend I check out for putting machines together? I'm perfectly capable of installing and swapping hardware components when/where needed, so on-sight support is not needed. Thanks much. Scott

4 3

Re: Install on two discs with Software Raid and LVM
by David G. Miller 05 Feb '08

05 Feb '08

Scott Silva <ssilva(a)sgvwater.com> wrote: > on 2/4/2008 2:43 PM Joseph L. Casale spake the following: > >>> >> Create a swap lv in the vg you created out of /dev/md1, assuming /dev/md0 is /boot. >>> >> >>> >> -Ross >>> >> > >> > Oh, I thought it wasnâ€™t good to run swap inside software raid? If I was wrong, >> > I assume this is beneficial since if one of the HDâ€™s tanks while its running, > it will survive the failure and not need to reboot? > >> > >> > Thanks! >> > jlc >> > That is an old assumption from the infancy of software raid, less than optimal > installed ram, and slower processors. When ram was expensive, you used more > swap because it was cheaper. But ram is so much cheaper now that it make no > sense to run a machine that needs to touch swap except in an emergency. > Not really a valid assumption about install enough memory and swap won't get used. *nixes have a design feature that swaps out programs that aren't used "just in case" the some other program needs the space. Sun workstations back in the '80s and '90s used to be the worst at this. It was faster to shutdown at night and restart in the morning since leaving the system up all night would result in most everything getting swapped out to disk "just in case" the space would be needed. Try to use the system in the morning and it would be busy swapping everything back into RAM for quite a while. So with 2GB of RAM on my desktop, I still see 144K of swap getting used with me generating very little activity as I read my e-mail. If my swap "went away", I would have a problem if Linux tried to swap back in whatever that 144k of program is. Better to have swap on a RAID volume. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

CentOS-announce Digest, Vol 36, Issue 1
by centos-announce-request＠centos.org 05 Feb '08

05 Feb '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0055 Moderate CentOS 4 x86_64 kernel - security update (Johnny Hughes) 2. CESA-2008:0055 Moderate CentOS 4 i386 kernel - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 04 Feb 2008 11:59:19 -0600 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2008:0055 Moderate CentOS 4 x86_64 kernel - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <47A75277.5020701(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2008:0055 https://rhn.redhat.com/errata/RHSA-2008-0055.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: kernel-2.6.9-67.0.4.EL.x86_64.rpm kernel-devel-2.6.9-67.0.4.EL.x86_64.rpm kernel-doc-2.6.9-67.0.4.EL.noarch.rpm kernel-largesmp-2.6.9-67.0.4.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-67.0.4.EL.x86_64.rpm kernel-smp-2.6.9-67.0.4.EL.x86_64.rpm kernel-smp-devel-2.6.9-67.0.4.EL.x86_64.rpm kernel-xenU-2.6.9-67.0.4.EL.x86_64.rpm kernel-xenU-devel-2.6.9-67.0.4.EL.x86_64.rpm src: kernel-2.6.9-67.0.4.EL.src.rpm

1 0

Strange gpg problem
by Anne Wilson 05 Feb '08

05 Feb '08

When I read a message signed by a gpg key that is not already on my keyring I have runaway cpu usage. To end it I have to 'killall gpg' - at which the display returns, but of course it has not connected with the keyserver, so the key is not downloaded and I get a 'signature not verified' error message.. What's more, although the display has returned, I have to 'killall gpg' a second time, to return cpu usage to normal. I'm at a loss where to start troubleshooting this. Could it be a firewall problem? Anne

1 0

Need help in analyzing ntop data
by ankush grover 04 Feb '08

04 Feb '08

Hi, I want to do some analysis of NTOP data. Currently I have installed NTOP on Centos 5.1 and I am able to see some network data being graphed. But there is no documentation given whether NTOP is showing Network Throughput in MBytes or MBits for ex I am getting Throughput Min: 163.7k , Max: 3.0 M and Last 859.4k and there are some options like anomalia, upper,lower and trend (30min). Under All Protocols -> Traffic I can see per hour data received and data sent but I am not able to figure out how NTOP is currently the percentage of this data Time Tot. Traffic Sent %Traffic Sent Tot. Traffic Rcvd % Traffic Rcvd 10 AM 287.8 MBytes 0.3% 32.9 MBytes 1.4 % How NTOP is calculating %Traffic Sent /Rcvd? Please let me know if you need any further inputs . Regards Ankush

1 0

tail command
by Scott McClanahan 04 Feb '08

04 Feb '08

In centos 4 we used tail in the following way: tail +83 file That would tail the contents of the file starting at line 83. In centos 5 that same command complains about the file +83 not being found. It appears that the + option in tail doesn't work the same way in centos 5. Is there another easy way to grab the contents of a file starting at a certain line number and beyond.

5 6

Install on two discs with Software Raid and LVM
by Joseph L. Casale 04 Feb '08

04 Feb '08

I am mirroring two drives during install, what's the best practice here for the swap partition? Maybe two separate lv's from independent vg's *not* mirrored for swap and the let the OS manage it? Boot and the / vg will be mirrored. Thanks! jlc

3 2

Re: [CentOS] Install on two discs with Software Raid and LVM
by Ross S. W. Walker 04 Feb '08

04 Feb '08

Create a swap lv in the vg you created out of /dev/md1, assuming /dev/md0 is /boot. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: 'centos(a)centos.org' <centos(a)centos.org> Sent: Mon Feb 04 17:29:45 2008 Subject: [CentOS] Install on two discs with Software Raid and LVM I am mirroring two drives during install, what's the best practice here for the swap partition? Maybe two separate lv's from independent vg's *not* mirrored for swap and the let the OS manage it? Boot and the / vg will be mirrored. Thanks! jlc _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

3 2

Re: [CentOS] Install on two discs with Software Raid and LVM
by Ross S. W. Walker 04 Feb '08

04 Feb '08

That's old information, kernel swapper can handle all types of dev mapper setups these days (well all types on fixed media). -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: 'CentOS mailing list' <centos(a)centos.org> Sent: Mon Feb 04 17:43:50 2008 Subject: RE: [CentOS] Install on two discs with Software Raid and LVM >Create a swap lv in the vg you created out of /dev/md1, assuming /dev/md0 is /boot. > >-Ross Oh, I thought it wasn’t good to run swap inside software raid? If I was wrong, I assume this is beneficial since if one of the HD’s tanks while its running, it will survive the failure and not need to reboot? Thanks! jlc ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

2 1

Large RAID volume issues
by Rob Lines 04 Feb '08

04 Feb '08

I have just finished creating an array on our new enclosure and our CentOS 5 server has recognized it. It shows as the full 6tb in the LSI configuration utility as well as when I ran fdisk: [root@HOST sbin]# fdisk /dev/sdb Note: sector size is 2048 (not 512) The number of cylinders for this disk is set to 182292. There is nothing wrong with that, but this is larger than 1024, and could in certain setups cause problems with: 1) software that runs at boot time (e.g., old versions of LILO) 2) booting and partitioning software from other OSs (e.g., DOS FDISK, OS/2 FDISK) Command (m for help): p Disk /dev/sdb: 5997.6 GB, 5997628227584 bytes 255 heads, 63 sectors/track, 182292 cylinders Units = cylinders of 16065 * 2048 = 32901120 bytes Device Boot Start End Blocks Id System I was then created a parition in fdisk and it appeared to work until I formated it (here is the output of the formating) [root@HOST ~]# mkfs -t ext2 -j /dev/sdb1 mke2fs 1.39 (29-May-2006) Filesystem label= OS type: Linux Block size=4096 (log=2) Fragment size=4096 (log=2) 195264512 inodes, 390518634 blocks 19525931 blocks (5.00%) reserved for the super user First data block=0 Maximum filesystem blocks=4294967296 11918 block groups 32768 blocks per group, 32768 fragments per group 16384 inodes per group Superblock backups stored on blocks: 32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208, 4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968, 102400000, 214990848 Writing inode tables: done Creating journal (32768 blocks): done Writing superblocks and filesystem accounting information: done When I did a df I got the following (only included the array entry) [root@HOST etc]# df -h Filesystem Size Used Avail Use% Mounted on ... /dev/sdb1 1.5T 198M 1.5T 1% /home1 I then tried removing it and working with parted. [root@HOST etc]# parted /dev/sdb Warning: Device /dev/sdb has a logical sector size of 2048. Not all parts of GNU Parted support this at the moment, and the working code is HIGHLY EXPERIMENTAL. GNU Parted 1.8.1 Using /dev/sdb Welcome to GNU Parted! Type 'help' to view a list of commands. (parted) p Error: Unable to open /dev/sdb - unrecognised disk label. (parted) mklabel gpt *** glibc detected *** <unknown>: double free or corruption (!prev): 0x0000000016760800 *** ======= Backtrace: ========= /lib64/libc.so.6[0x3435c6f4f4] /lib64/libc.so.6(cfree+0x8c)[0x3435c72b1c] /usr/lib64/libparted-1.8.so.0[0x3436c1a5c5] /usr/lib64/libparted-1.8.so.0[0x3436c48a54] ======= Memory map: ======== 00400000-00410000 r-xp 00000000 08:05 130761 /sbin/parted 00610000-00611000 rw-p 00010000 08:05 130761 /sbin/parted 00611000-00612000 rw-p 00611000 00:00 0 00810000-00812000 rw-p 00010000 08:05 130761 /sbin/parted 1673d000-1677f000 rw-p 1673d000 00:00 0 3435800000-343581a000 r-xp 00000000 08:05 4765445 /lib64/ld-2.5.so 3435a19000-3435a1a000 r--p 00019000 08:05 4765445 /lib64/ld-2.5.so 3435a1a000-3435a1b000 rw-p 0001a000 08:05 4765445 /lib64/ld-2.5.so 3435c00000-3435d46000 r-xp 00000000 08:05 4765452 /lib64/libc-2.5.so 3435d46000-3435f46000 ---p 00146000 08:05 4765452 /lib64/libc-2.5.so 3435f46000-3435f4a000 r--p 00146000 08:05 4765452 /lib64/libc-2.5.so 3435f4a000-3435f4b000 rw-p 0014a000 08:05 4765452 /lib64/libc-2.5.so 3435f4b000-3435f50000 rw-p 3435f4b000 00:00 0 3436000000-3436013000 r-xp 00000000 08:05 4765602 /lib64/libdevmapper.so.1.02 3436013000-3436213000 ---p 00013000 08:05 4765602 /lib64/libdevmapper.so.1.02 3436213000-3436215000 rw-p 00013000 08:05 4765602 /lib64/libdevmapper.so.1.02 3436400000-3436402000 r-xp 00000000 08:05 4765458 /lib64/libdl-2.5.so 3436402000-3436602000 ---p 00002000 08:05 4765458 /lib64/libdl-2.5.so 3436602000-3436603000 r--p 00002000 08:05 4765458 /lib64/libdl-2.5.so 3436603000-3436604000 rw-p 00003000 08:05 4765458 /lib64/libdl-2.5.so 3436800000-3436802000 r-xp 00000000 08:05 4765478 /lib64/libuuid.so.1.2 3436802000-3436a02000 ---p 00002000 08:05 4765478 /lib64/libuuid.so.1.2 3436a02000-3436a03000 rw-p 00002000 08:05 4765478 /lib64/libuuid.so.1.2 3436c00000-3436c5c000 r-xp 00000000 08:05 464724 /usr/lib64/libparted-1.8.so.0.0. 1 3436c5c000-3436e5b000 ---p 0005c000 08:05 464724 /usr/lib64/libparted-1.8.so.0.0. 1 3436e5b000-3436e5f000 rw-p 0005b000 08:05 464724 /usr/lib64/libparted-1.8.so.0.0. 1 3436e5f000-3436e60000 rw-p 3436e5f000 00:00 0 3437000000-3437035000 r-xp 00000000 08:05 463236 /usr/lib64/libreadline.so.5.1 3437035000-3437234000 ---p 00035000 08:05 463236 /usr/lib64/libreadline.so.5.1 3437234000-343723c000 rw-p 00034000 08:05 463236 /usr/lib64/libreadline.so.5.1 343723c000-343723d000 rw-p 343723c000 00:00 0 343b000000-343b00d000 r-xp 00000000 08:05 4765466 /lib64/libgcc_s-4.1.2-20070626.s o.1 343b00d000-343b20d000 ---p 0000d000 08:05 4765466 /lib64/libgcc_s-4.1.2-20070626.s o.1 343b20d000-343b20e000 rw-p 0000d000 08:05 4765466 /lib64/libgcc_s-4.1.2-20070626.s o.1 343c000000-343c03b000 r-xp 00000000 08:05 4765743 /lib64/libsepol.so.1 343c03b000-343c23b000 ---p 0003b000 08:05 4765743 /lib64/libsepol.so.1 343c23b000-343c23c000 rw-p 0003b000 08:05 4765743 /lib64/libsepol.so.1 343c23c000-343c246000 rw-p 343c23c000 00:00 0 343c400000-343c415000 r-xp 00000000 08:05 4765744 /lib64/libselinux.so.1 343c415000-343c615000 ---p 00015000 08:05 4765744 /lib64/libselinux.so.1 343c615000-343c617000 rw-p 00015000 08:05 4765744 /lib64/libselinux.so.1 343c617000-343c618000 rw-p 343c617000 00:00 0 3448e00000-3448e4e000 r-xp 00000000 08:05 464701 /usr/lib64/libncurses.so.5.5 3448e4e000-344904e000 ---p 0004e000 08:05 464701 Aborted Any suggestions or direction would be appreciated. Thank you, Rob

4 11

Update problem
by Ugo Bellavance 04 Feb '08

04 Feb '08

Hi, I was doing updates on a server and I think that the network connection got reset. So I guess the yum update didn't complete and I now get this when I run 'yum update': ======================= Setting up Update Process Setting up repositories Reading repository metadata in from local files Resolving Dependencies --> Populating transaction set with selected packages. Please wait. ---> Package system-config-printer-gui.i386 0:0.6.116.10-1.2 set to be updated ---> Package system-config-packages.noarch 0:1.2.23-2 set to be updated ---> Package cvs.i386 0:1.11.17-9.RHEL4 set to be updated ---> Package kernel-hugemem-devel.i686 0:2.6.9-67.0.4.EL set to be updated ---> Package kudzu.i386 0:1.1.95.23-1 set to be updated ---> Package glibc-kernheaders.i386 0:2.4-9.1.100.EL set to be updated ---> Package procps.i386 0:3.2.3-8.9 set to be updated ---> Package postgresql-contrib.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package gnome-keyring.i386 0:0.4.0-1.2.EL4 set to be updated ---> Package tcpdump.i386 14:3.8.2-12.el4_6.1 set to be updated ---> Package at.i386 0:3.1.8-80_EL4 set to be updated ---> Package system-config-date.noarch 0:1.7.15-0.RHEL4.3 set to be updated ---> Package cyrus-sasl.i386 0:2.1.19-14 set to be updated ---> Package postgresql-libs.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package foomatic.i386 0:3.0.2-3.1 set to be updated ---> Package kdelibs.i386 6:3.3.1-9.el4 set to be updated ---> Package nss_ldap.i386 0:226-20 set to be updated ---> Package cups.i386 1:1.1.22-0.rc1.9.20.2.el4_5.2 set to be updated ---> Package dbus-glib.i386 0:0.22-12.EL.9 set to be updated ---> Package nfs-utils.i386 0:1.0.6-84.EL4 set to be updated ---> Package gd-devel.i386 0:2.0.28-5.4E set to be updated ---> Package kernel.i686 0:2.6.9-67.0.4.EL set to be installed ---> Package dbus-python.i386 0:0.22-12.EL.9 set to be updated ---> Package postgresql-server.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package samba-common.i386 0:3.0.25b-1.el4_6.4 set to be updated ---> Package system-config-lvm.noarch 0:1.0.23-1.0 set to be updated ---> Package authconfig-gtk.i386 0:4.6.10-rhel4.3 set to be updated ---> Package xorg-x11-xauth.i386 0:6.8.2-1.EL.33.0.2 set to be updated ---> Package bind.i386 20:9.2.4-28.el4 set to be updated ---> Package pciutils.i386 0:2.1.99.test8-3.4 set to be updated ---> Package nscd.i386 0:2.3.4-2.39 set to be updated ---> Package gnupg.i386 0:1.2.6-9 set to be updated ---> Package openssh-clients.i386 0:3.9p1-8.RHEL4.24 set to be updated ---> Package gcc-java.i386 0:3.4.6-9 set to be updated ---> Package curl-devel.i386 0:7.12.1-11.el4 set to be updated ---> Package cyrus-sasl-md5.i386 0:2.1.19-14 set to be updated ---> Package gnome-vfs2.i386 0:2.8.2-8.6.EL4 set to be updated ---> Package mc.i386 1:4.6.1-0.8.5 set to be updated ---> Package squid.i386 7:2.5.STABLE14-1.4E.el4_6.1 set to be updated ---> Package authconfig.i386 0:4.6.10-rhel4.3 set to be updated ---> Package yum-utils.noarch 0:0.5-2.el4.centos set to be updated ---> Package bind-libs.i386 20:9.2.4-28.el4 set to be updated ---> Package cups-libs.i386 1:1.1.22-0.rc1.9.20.2.el4_5.2 set to be updated ---> Package crypto-utils.i386 0:2.1-4.2 set to be updated ---> Package libwnck.i386 0:2.8.1-7.el4 set to be updated ---> Package qt.i386 1:3.3.3-13.RHEL4 set to be updated ---> Package logwatch.noarch 0:5.2.2-2.EL4 set to be updated ---> Package NetworkManager.i386 0:0.3.1-4.el4 set to be updated ---> Package postgresql-pl.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package pam_krb5.i386 0:2.1.17-1 set to be updated ---> Package pam_ccreds.i386 0:3-3.rhel4.2 set to be updated ---> Package bluez-utils.i386 0:2.10-2.2 set to be updated ---> Package ntp.i386 0:4.2.0.a.20040617-6.el4 set to be updated ---> Package cyrus-sasl-plain.i386 0:2.1.19-14 set to be updated ---> Package dhcpv6_client.i386 0:0.10-17_EL4 set to be updated ---> Package openssl-devel.i586 0:0.9.7a-43.17.el4_6.1 set to be updated ---> Package libxml2-devel.i386 0:2.6.16-10.1 set to be updated ---> Package mdadm.i386 0:1.12.0-5 set to be updated ---> Package mkinitrd.i386 0:4.2.1.13-1 set to be updated ---> Package emacs.i386 0:21.3-19.EL.4 set to be updated ---> Package bind-utils.i386 20:9.2.4-28.el4 set to be updated ---> Package python-urlgrabber.noarch 0:2.9.8-2 set to be updated ---> Package xorg-x11-Mesa-libGL.i386 0:6.8.2-1.EL.33.0.2 set to be updated ---> Package system-config-samba.noarch 0:1.2.21-1.el4.1 set to be updated ---> Package initscripts.i386 0:7.93.31.EL-2.centos4 set to be updated ---> Package krb5-workstation.i386 0:1.3.4-54 set to be updated ---> Package xorg-x11-font-utils.i386 0:6.8.2-1.EL.33.0.2 set to be updated ---> Package libxml2-python.i386 0:2.6.16-10.1 set to be updated ---> Package glibc-devel.i386 0:2.3.4-2.39 set to be updated ---> Package postgresql-tcl.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package curl.i386 0:7.12.1-11.el4 set to be updated ---> Package libgcj.i386 0:3.4.6-9 set to be updated ---> Package hal.i386 0:0.4.2-7.EL4 set to be updated ---> Package gd.i386 0:2.0.28-5.4E set to be updated ---> Package system-config-network-tui.noarch 0:1.3.22.0.EL.4.4-1 set to be updated ---> Package lm_sensors.i386 0:2.8.7-2.40.5 set to be updated ---> Package pdksh.i386 0:5.2.14-30.6 set to be updated ---> Package system-config-printer.i386 0:0.6.116.10-1.2 set to be updated ---> Package netdump.i386 0:0.7.16-14 set to be updated ---> Package rhnlib.noarch 0:2.1.1-3.el4 set to be updated ---> Package SysVinit.i386 0:2.85-34.4 set to be updated ---> Package quota.i386 1:3.12-6.el4 set to be updated ---> Package policycoreutils.i386 0:1.18.1-4.13 set to be updated ---> Package usermode-gtk.i386 0:1.74-2 set to be updated ---> Package system-config-network.noarch 0:1.3.22.0.EL.4.4-1 set to be updated ---> Package openldap.i386 0:2.2.13-8.el4_6.2 set to be updated ---> Package vixie-cron.i386 4:4.1-49.EL4 set to be updated ---> Package rpm.i386 0:4.3.3-23_nonptl set to be updated ---> Package dhclient.i386 7:3.0.1-59.EL4 set to be updated ---> Package dovecot.i386 0:0.99.11-8.EL4 set to be updated ---> Package setools.i386 0:2.3-4 set to be updated ---> Package libpcap.i386 14:0.8.3-12.el4_6.1 set to be updated ---> Package glibc-headers.i386 0:2.3.4-2.39 set to be updated ---> Package slocate.i386 0:2.7-13.el4.8 set to be updated ---> Package tcsh.i386 0:6.13-9.el4.1 set to be updated ---> Package kernel-smp-devel.i686 0:2.6.9-67.0.4.EL set to be updated ---> Package system-config-users.noarch 0:1.2.27-0.EL4.5 set to be updated ---> Package postgresql-python.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package fetchmail.i386 0:6.2.5-6.0.1.el4 set to be updated ---> Package postgresql.i386 0:7.4.19-1.el4_6.1 set to be updated ---> Package xorg-x11-xfs.i386 0:6.8.2-1.EL.33.0.2 set to be updated ---> Package kbd.i386 0:1.12-2.el4.5 set to be updated ---> Package autofs.i386 1:4.1.3-231 set to be updated ---> Package net-snmp.i386 0:5.1.2-11.el4_6.11.2 set to be updated ---> Package sendmail.i386 0:8.13.1-3.2.el4 set to be updated ---> Package up2date.i386 0:4.6.2-7.el4_6.1 set to be updated ---> Package kernel-devel.i686 0:2.6.9-67.0.4.EL set to be installed ---> Package python-devel.i386 0:2.3.4-14.4.el4_6.1 set to be updated ---> Package mod_ssl.i386 1:2.0.52-38.ent.centos4.2 set to be updated ---> Package ipsec-tools.i386 0:0.3.3-6.rhel4.1 set to be updated ---> Package elinks.i386 0:0.9.2-3.3.5.2 set to be updated ---> Package lockdev.i386 0:1.0.1-6.2 set to be updated ---> Package wireshark.i386 0:0.99.7-1 set to be updated ---> Package vsftpd.i386 0:2.0.1-5.EL4.7 set to be updated ---> Package openssh.i386 0:3.9p1-8.RHEL4.24 set to be updated ---> Package mutt.i386 5:1.4.1-12.0.3.el4 set to be updated ---> Package rp-pppoe.i386 0:3.5-22.2.RHEL4.1 set to be updated ---> Package createrepo.noarch 0:0.4.4-2 set to be updated ---> Package selinux-policy-targeted.noarch 0:1.17.30-2.149 set to be updated ---> Package system-config-language.noarch 0:1.1.8-4 set to be updated ---> Package samba.i386 0:3.0.25b-1.el4_6.4 set to be updated ---> Package krb5-devel.i386 0:1.3.4-54 set to be updated ---> Package python-elementtree.i386 0:1.2.6-5.el4.centos set to be updated ---> Package rpm-python.i386 0:4.3.3-23_nonptl set to be updated ---> Package yum.noarch 0:2.4.3-4.el4.centos set to be updated ---> Package cyrus-sasl-devel.i386 0:2.1.19-14 set to be updated ---> Package openldap-devel.i386 0:2.2.13-8.el4_6.2 set to be updated ---> Package kernel-utils.i386 1:2.4-13.1.105 set to be updated ---> Package gcc.i386 0:3.4.6-9 set to be updated ---> Package openssh-server.i386 0:3.9p1-8.RHEL4.24 set to be updated ---> Package kernel-smp.i686 0:2.6.9-67.0.4.EL set to be installed ---> Package httpd.i386 0:2.0.52-38.ent.centos4.2 set to be updated ---> Package module-init-tools.i386 0:3.1-0.pre5.3.4.el4_6.1 set to be updated ---> Package samba-client.i386 0:3.0.25b-1.el4_6.4 set to be updated ---> Package GConf2.i386 0:2.8.1-1.el4 set to be updated ---> Package oprofile.i386 0:0.8.1-33 set to be updated --> Running transaction check --> Processing Dependency: gcc = 3.4.5 for package: libtool --> Processing Dependency: httpd = 2.0.52-22.ent.centos4 for package: httpd-manual --> Processing Conflict: python-devel conflicts python < 2.3.4-14.4.el4_6.1 --> Processing Dependency: rpm = 4.3.3-13_nonptl for package: rpm-devel --> Processing Dependency: libgssapi for package: nfs-utils --> Processing Dependency: httpd = 2.0.52-22.ent.centos4 for package: httpd-suexec --> Processing Dependency: libgcj = 3.4.5 for package: libgcj-devel --> Processing Dependency: base-fonts for package: xorg-x11-xfs --> Processing Dependency: gcc = 3.4.5-2 for package: gcc-g77 --> Processing Dependency: librpcsecgss.so.1 for package: nfs-utils --> Processing Dependency: bind = 20:9.2.4-2 for package: bind-chroot --> Processing Dependency: rpm = 4.3.3-13_nonptl for package: rpm-build --> Processing Dependency: gcc = 3.4.5-2 for package: gcc-c++ --> Processing Dependency: nfs-utils-lib for package: nfs-utils --> Processing Dependency: postgresql = 7.4.8-1.RHEL4.1 for package: postgresql-docs --> Processing Dependency: postgresql = 7.4.8-1.RHEL4.1 for package: postgresql-test --> Processing Dependency: libgssapi.so.1 for package: nfs-utils --> Processing Dependency: lockdev = 1.0.1-6.1 for package: lockdev-devel --> Processing Dependency: libnfsidmap.so.0 for package: nfs-utils --> Processing Dependency: postgresql-server = 7.4.8-1.RHEL4.1 for package: postgresql-test --> Restarting Dependency Resolution with new changes. --> Populating transaction set with selected packages. Please wait. ---> Package fonts-xorg-base.noarch 0:6.8.2-1.EL set to be updated ---> Package libgssapi.i386 0:0.8-1 set to be updated ---> Package nfs-utils-lib.i386 0:1.0.6-8.z1 set to be updated --> Running transaction check --> Processing Dependency: gcc = 3.4.5 for package: libtool --> Processing Conflict: python-devel conflicts python < 2.3.4-14.4.el4_6.1 --> Processing Dependency: postgresql = 7.4.8-1.RHEL4.1 for package: postgresql-docs --> Processing Dependency: httpd = 2.0.52-22.ent.centos4 for package: httpd-suexec --> Processing Dependency: libgcj = 3.4.5 for package: libgcj-devel --> Processing Dependency: bind = 20:9.2.4-2 for package: bind-chroot --> Processing Dependency: rpm = 4.3.3-13_nonptl for package: rpm-build --> Processing Dependency: gcc = 3.4.5-2 for package: gcc-c++ --> Processing Dependency: rpm = 4.3.3-13_nonptl for package: rpm-devel --> Processing Dependency: gcc = 3.4.5-2 for package: gcc-g77 --> Processing Dependency: postgresql = 7.4.8-1.RHEL4.1 for package: postgresql-test --> Processing Dependency: httpd = 2.0.52-22.ent.centos4 for package: httpd-manual --> Processing Dependency: lockdev = 1.0.1-6.1 for package: lockdev-devel --> Processing Dependency: postgresql-server = 7.4.8-1.RHEL4.1 for package: postgresql-test --> Finished Dependency Resolution Error: Missing Dependency: gcc = 3.4.5 is needed by package libtool Error: Missing Dependency: httpd = 2.0.52-22.ent.centos4 is needed by package httpd-manual Error: python-devel conflicts with python < 2.3.4-14.4.el4_6.1 Error: Missing Dependency: rpm = 4.3.3-13_nonptl is needed by package rpm-devel Error: Missing Dependency: httpd = 2.0.52-22.ent.centos4 is needed by package httpd-suexec Error: Missing Dependency: libgcj = 3.4.5 is needed by package libgcj-devel Error: Missing Dependency: gcc = 3.4.5-2 is needed by package gcc-g77 Error: Missing Dependency: bind = 20:9.2.4-2 is needed by package bind-chroot Error: Missing Dependency: rpm = 4.3.3-13_nonptl is needed by package rpm-build Error: Missing Dependency: gcc = 3.4.5-2 is needed by package gcc-c++ Error: Missing Dependency: postgresql = 7.4.8-1.RHEL4.1 is needed by package postgresql-docs Error: Missing Dependency: postgresql = 7.4.8-1.RHEL4.1 is needed by package postgresql-test Error: Missing Dependency: lockdev = 1.0.1-6.1 is needed by package lockdev-devel Error: Missing Dependency: postgresql-server = 7.4.8-1.RHEL4.1 is needed by package postgresql-test =========================== Is there a way I can clean that mess up? I think I got into some kind of circular dependencies. Example: [root@server ~]# yum update lockdev Setting up Update Process Setting up repositories Reading repository metadata in from local files Resolving Dependencies --> Populating transaction set with selected packages. Please wait. ---> Package lockdev.i386 0:1.0.1-6.2 set to be updated --> Running transaction check --> Processing Dependency: lockdev = 1.0.1-6.1 for package: lockdev-devel --> Finished Dependency Resolution Error: Missing Dependency: lockdev = 1.0.1-6.1 is needed by package lockdev-devel Then, [root@server ~]# yum update lockdev-devel Setting up Update Process Setting up repositories Reading repository metadata in from local files Could not find update match for lockdev-devel No Packages marked for Update/Obsoletion rpm --rebuilddb didn't help. Any help would be appreciated. Regards, Ugo

2 1

kickstart post install show in a window
by Jerry Geis 04 Feb '08

04 Feb '08

Is there a way to get all the commands in the post install section from kickstart to show in a window on the X window screenas they are being executed? Jerry

2 1

IPTables GUIs
by Miskell, Craig 04 Feb '08

04 Feb '08

Hi, This is semi-OT, but is Centos-related. I'm looking for an IPTables GUI to help us with our expanding network configuration. I know there's plenty out there, but most of them seem to manage the firewall on the computer on which they run, or only handle one firewall at a time. I need one that can easily manage multiple firewalls from some sort of central location/repository, i.e. sharing definitions of services, hosts etc. I've googled and hunted, and FWBuilder seems reasonably good from what I've seen so far. Are there any other packages out there? Are there any recommendations (to look at or to avoid)? Thanks, Craig Miskell, Technical Support, AgResearch Invermay 03 489-9279 "There are no problems that cannot be solved by the judicious use of high explosives" -- British Commando quote, circa WWII. ======================================================================= Attention: The information contained in this message and/or attachments from AgResearch Limited is intended only for the persons or entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipients is prohibited by AgResearch Limited. If you have received this message in error, please notify the sender immediately. =======================================================================

5 6

Connect to local console from SSH session
by Joseph L. Casale 04 Feb '08

04 Feb '08

I need to see what is happening on the local console to see the status of something I left running, is there a way to do this? Thanks! jlc

5 6

One approach to dealing with SSH brute force attacks.
by James B. Byrne 04 Feb '08

04 Feb '08

Message-ID: <479F2A63.2070408(a)centos.org> On: Tue, 29 Jan 2008 07:30:11 -0600, Johnny Hughes <johnny(a)centos.org> Subject Was: [CentOS] Unknown rootkit causes compromised servers > > SOME of the script kiddies check higher ports for SSH *_BUT_* I only see > 4% of the brute force attempts to login on ports other than 22. > > I would say that dropping brute force login attempts by 96% is quite a > good reason to move the SSH port from 22 to something else. I am not a fan of security through obscurity. If a port is open to the internet then it must be secured whether it is well known or not and if it is properly secured then changing the port number customarily assigned provides no measurable benefit. In my opinion, arbitrarily switching port numbers for well known services provides only the illusion of security while often inconveniencing the legitimate users in unpredictable, and sometimes expensively resolved, fashions. To deal with brute force attacks (not just on ssh) I spent some time tracking down how others had dealt with the problem. I discovered thereby that one can use the simple linux firewall iptables to restrict the number of connections to a given port from a single source over a specified interval. I therefore added these rules to my /etc/sysconfig/iptables file: ... # This is usually present in all setups but, you never know.... # Established connections go right through. -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ... # Block brute force attacks # Drop repeated ssh connection attempts within 20 seconds interval -A RH-Firewall-1-INPUT -p tcp -m tcp -m state -m recent -i eth0 --dport 22 --state NEW -j DROP --rcheck --seconds 20 --name THROTTLE --rsource # Accept ssh connection if not attempted within past 20 sec. -A RH-Firewall-1-INPUT -p tcp -m tcp -m state -m recent -i eth0 --dport 22 --state NEW -j ACCEPT --set --name THROTTLE --rsource You can change the interval from 20 seconds to whatever you feel represents a decent compromise between user satisfaction and security. Many authorities considered a value between 3 and 6 seconds sufficient to render brute force attacks impractical. These rules can be trivially modified to protect any destination port (-dport 21 for ftp for instance) or protocol (-p udp). I hope this information is of use to some of you. I find this list and its archives very helpful myself. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

11 12

New hardware to run CentOS
by israel.garcia＠cimex.com.cu 04 Feb '08

04 Feb '08

As I say before, I'm running databases with a lot of users on a CentOS4x server. Somebody ask me to search the latest hardware to migrate my databases to this new server. I have now an HP EVA8000 storage with a lot of hdds, so I want know which is the best hardware to get the best performance with my storage (HP-EVA8000). Any idea will be appreciate. Thanks in advance. Regards, Israel,

2 1

dmcrypt on install with centos 5.1?
by Andrew Henry 04 Feb '08

04 Feb '08

Im new to the list and CentOS and wonder if there is any option to do full disk encryption with dmcrypt and LUKS during the install stage of CentOS 5.1? I use Debian Etch at the moment and Debian is able to to this. If not possible, are there any good guides that anyone knows about that explain how to dmcrypt everything but /boot on CentOS manually? --andrew -- GnuPG Key ID: ECB18ABA Fingerprint: FDF3 91FC F5BC 1164 E217 315E 337E 219B ECB1 8ABA

3 3

RE: Strong security in user's accounts and paswords..[SOLVE]
by israel.garcia＠cimex.com.cu 04 Feb '08

04 Feb '08

Hi Mark and thanks for your soon answer.. I found this excellent guide on internet http://www.puschitz.com/SecuringLinux.shtml... here I could fine all I was looking for about securing my database server running on CentOS.. Regards Israel, >I'm running RHEL 4.6 and am using the features you are looking to >implement. PAM is the direction to look. I have included my >/etc/pam.d/system-auth file as example: >#%PAM-1.0 ># This file is auto-generated. ># User changes will be destroyed the next time authconfig is run. >auth required /lib/security/$ISA/pam_env.so ># The following was added on 12-Apr-06 to count failed password >and "su" attempts >auth required /lib/security/$ISA/pam_tally.so onerr=fail no_magic_root ># End of changes >auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok>> auth required /lib/security/$ISA/pam_deny.so >account required /lib/security/$ISA/pam_unix.so ># The following was added on 12-Apr-06 to count failed password >and "su" attempts >account required /lib/security/$ISA/pam_tally.so per_user >deny=3 no_magic_root reset # End of changes >account sufficient /lib/security/$ISA/pam_succeed_if.so uid < 100 quiet >account required /lib/security/$ISA/pam_permit.so #password requisite /lib/security/$ISA/pam_cracklib.so retry=3 #password requisite /lib/security/$ISA/pam_cracklib.so retry=3 minlen=10 ucredit=-2 lcredit=-2 dcredit=-2 ocredit=-2 difok=3 # Changed to 15 character length password password requisite /lib/security/$ISA/pam_cracklib.so retry=3 minlen=15 ucredit=-2 lcredit=-2 dcredit=-2 ocredit=-2 difok=3 # Remember the last 15 passwords password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow remember=15 password required /lib/security/$ISA/pam_deny.so session required /lib/security/$ISA/pam_limits.so session required /lib/security/$ISA/pam_unix.so ~ I haven't dealt with this for a while so there my be other changes required. This should be a start for a search with your favorite search engine.

1 0

Re: [CentOS] Re: Monitor power save question
by David G. Miller 04 Feb '08

04 Feb '08

I wrote and now I'm answering my own post: > nate" <centos(a)linuxpowered.net> wrote: >> > David G. Miller wrote: >> > >> > >> >>>> >> > >>>> >> > Section "Device" >>>> >> > Identifier "Videocard0" >>>> >> > Driver "vesa" >>>> >> > EndSection >>>> >>> >> >>> >> > >> > [..] >> > >> > >> >>>> >> > and the video card is (this is a single card that shows up twice in lspci): >>>> >> > >>>> >> > 04:00.0 VGA compatible controller: ATI Technologies Inc RV516 [Radeon >>>> >> > X1300/X1550 Series] (prog-if 00 [VGA]) >>>> >>> >> >>> >> > >> > any particular reason why your using the vesa driver on what seems to >> > be a fairly recent ATI card instead of the ATI specific drivers? Perhaps >> > the vesa driver doesn't work as well with power management(never used it >> > myself for very long). >> > >> > I'd try the ATI drivers and see if it fixes the behavior, you'll probably >> > get much better performance at the same time, with perhaps a bit less >> > stability depending on what you do. >> > >> > nate >> > It's what the install configurator came up with and the ati driver > doesn't work with this video card (output from startx): > > ... > (WW) RADEON: No matching Device section for instance (BusID PCI:4:0:1) found > (WW) R128: No matching Device section for instance (BusID PCI:4:0:1) found > (EE) No devices detected. > > Fatal server error: > no screens found > XIO: fatal IO error 104 (Connection reset by peer) on X server ":0.0" > after 0 requests (0 known processed) with 0 events remaining. > > I like getting a new install stable and fully functional with open > source drivers before introducing perturbations like using a proprietary > display driver. That being said, I just installed the ATI proprietary > driver. So far the system is stable. I'll see whether the monitor > correctly goes to a low power mode tonight. The ATI proprietary driver seems to have fixed the problem. The monitor was in power save mode when I checked it this morning. The ATI Linux Driver wiki at http://wiki.cchtml.com/index.php/Red_Hat_Enterprise_Linux is very badly out of date. It has lots of dire warnings about things not working, work arounds required, etc. I pulled down the driver package from the ATI site, ran it to create a Red Hat rpm and installed the RPM. After I rebooted, everything just worked. I added some comments to the wiki to indicate that the problems described there only apply to RHEL/CentOS 5.0. Upgrading a 5.0 install to 5.1 or installing from 5.1 images and then installing the ATI proprietary driver is a piece of cake. It would be nice if the open source "ati" display driver got extended to include more recent ATI video cards. I'm now running a "tainted" kernel since I have the proprietary fglrx kernel module. Unfortunately, as with how this thread got started, lots of functionality isn't there with the "vesa" display driver. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

Re: [CentOS] One approach to dealing with SSH brute force attacks.
by Les Bell 04 Feb '08

04 Feb '08

mouss <mouss(a)netoyen.net> wrote: >> If you consider this security through obscurity, then why not publish the list of your users on a public web page? after all, you should use strong passwords, so why hide usernames? << Usernames are comparatively hard to guess, and chosen from a large space - although email addresses often provide a huge clue. By contrast, there are only 64K port numbers (and only 1K privileged ports, all of which will be scanned by default with nmap) - and to make it worse, the attacker only has to telnet or nc to a port and sshd will obligingly send back its version number and protocol version info as plaintext. So, the added "obscurity" is effectively zero. I sort of half-buy the log volume/noise argument, but rate-limiting and good analysis tools deal with this as well. And it does nothing for the stress level, since the serious adversary will see through your non-standard port number in seconds. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

3 2

Strong security in user's accounts and paswords..
by israel.garcia＠cimex.com.cu 04 Feb '08

04 Feb '08

Hi, I have some databases running on CentOS4 with users accessing the shell (bash), so I'd like to strong the security on my server in user's accounts and passwords.. I mean, enforcing strong passwords, min/max age passwords, locking passwords when you fail 3 times, and all this stuff. Is there any package which do this work? Any tutorial? Thanks in advance Regards Israel

2 1

CentOS 5 loses ip address (newbie question)
by frankly3d-centos 04 Feb '08

04 Feb '08

Reserved ip in 192.168.x.x range for CenOS 5 (Samba Server) loses samba clients due to eth0 losing it's ip. eth0 Link encap:Ethernet HWaddr 00:04:61:72:AB:98 inet addr:169.254.66.122 Bcast:169.254.255.255 Mask:255.255.0.0 inet6 addr: fe80::204:61ff:fe72:ab98/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1492 Metric:1 RX packets:60058 errors:0 dropped:0 overruns:0 frame:0 TX packets:66564 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:11387965 (10.8 MiB) TX bytes:45451041 (43.3 MiB) Interrupt:193 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:23 errors:0 dropped:0 overruns:0 frame:0 TX packets:23 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2340 (2.2 KiB) TX bytes:2340 (2.2 KiB)

7 7

Overclocking core 2 duo on centos 5
by Ern jura 04 Feb '08

04 Feb '08

Anyone out there ever overclocked core 2 duo on centos 5

2 1

cannot rewrite shadow password file
by Samuel Rochas 04 Feb '08

04 Feb '08

Hi, I run Centos 4. I can't add users using the adduser command, I get this error: adduser: cannot rewrite shadow password file I can't change the users passwords with passwd, I get this error: passwd: Authentication token manipulation error What is wrong? Thank you Samuel

5 13

CentOS 5.1 on Dell R200 with 6iR?
by Plant, Dean 04 Feb '08

04 Feb '08

Hello list, Can anyone confirm if CentOS 5.1 works happily on a Dell R200 with a SAS 6iR RAID controller. Thanks Dean

2 1

Java and Xalan
by http://www.pas-world.com 04 Feb '08

04 Feb '08

Hello, I have some problems running some tools of java in CentOS. Anyone know where is the problem for this? > [jv@localhost ~]$ java org.apache.xalan.xslt.Process > Exception in thread "main" java.lang.NoClassDefFoundError: org.apache.xalan.xslt.Process > at gnu.java.lang.MainThread.run(libgcj.so.7rh) > Caused by: java.lang.ClassNotFoundException: org.apache.xalan.xslt.Process not found in gnu.gcj.runtime.SystemClassLoader{urls=[file:./], parent=gnu.gcj.runtime.ExtensionClassLoader{urls=[], parent=null}} > at java.net.URLClassLoader.findClass(libgcj.so.7rh) > at gnu.gcj.runtime.SystemClassLoader.findClass(libgcj.so.7rh) > at java.lang.ClassLoader.loadClass(libgcj.so.7rh) > at java.lang.ClassLoader.loadClass(libgcj.so.7rh) > at gnu.java.lang.MainThread.run(libgcj.so.7rh) > [jv@localhost ~]$ Thanks in advance. -- -- Publicidad http://www.pas-world.com

2 1

NTP server
by Scott Ehrlich 04 Feb '08

04 Feb '08

I have a Centos 5 64-bit server that has ntp service enabled. Windows XP with SP2 cannot properly sync to it for time, but can communicate with it via samba, ssh, and anything else. I also disabled the Windows Firewall. The C5 system does not have any firewall enabled. Other C5 workstations can successfully sync to it via ntpdate. What else could cause the XP machine to not be able to time sync with the C5 server? Thanks. Scott

7 7

Re: [CentOS] Re: Monitor power save question
by David G. Miller 03 Feb '08

03 Feb '08

"nate" <centos(a)linuxpowered.net> wrote: > David G. Miller wrote: > > >> > >> > Section "Device" >> > Identifier "Videocard0" >> > Driver "vesa" >> > EndSection >> > > [..] > > >> > and the video card is (this is a single card that shows up twice in lspci): >> > >> > 04:00.0 VGA compatible controller: ATI Technologies Inc RV516 [Radeon >> > X1300/X1550 Series] (prog-if 00 [VGA]) >> > > any particular reason why your using the vesa driver on what seems to > be a fairly recent ATI card instead of the ATI specific drivers? Perhaps > the vesa driver doesn't work as well with power management(never used it > myself for very long). > > I'd try the ATI drivers and see if it fixes the behavior, you'll probably > get much better performance at the same time, with perhaps a bit less > stability depending on what you do. > > nate It's what the install configurator came up with and the ati driver doesn't work with this video card (output from startx): ... (WW) RADEON: No matching Device section for instance (BusID PCI:4:0:1) found (WW) R128: No matching Device section for instance (BusID PCI:4:0:1) found (EE) No devices detected. Fatal server error: no screens found XIO: fatal IO error 104 (Connection reset by peer) on X server ":0.0" after 0 requests (0 known processed) with 0 events remaining. I like getting a new install stable and fully functional with open source drivers before introducing perturbations like using a proprietary display driver. That being said, I just installed the ATI proprietary driver. So far the system is stable. I'll see whether the monitor correctly goes to a low power mode tonight. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

kiskstart question
by Jerry Geis 03 Feb '08

03 Feb '08

Is there a way that using kickstart I can tell it once its done install to go right ahead and do a "yum update" Thanks, Jerry

6 8

DVD support on CentOS 5.1
by Sysadmin＠dte.net 03 Feb '08

03 Feb '08

Hello out there! Been around the block trying to get DVD support for Totem, but I keep running into dead ends everywhere I go. Looking for CentOS 5.1-compatible xine and xine-lib packages as that seems to be the answer, but the only ones I find (like on DAG) seem to be just dead links or I get a message that the mirrors are unavailable when I try to run the rpm. Can anyone provide a link for rpm's that will provide DVD support on CentOS 5.1 32bit? I installed the Gstream rpm's so at least I have mp3 and mpeg support, I just really want DVD support as well. Many thanks in advance, Manuel Alvarez P.S. If anyone can chime in the question below I would greatly appreciate it. I still have no idea on this one. L From: Sysadmin(a)dte.net [mailto:Sysadmin@dte.net] Sent: Tuesday, January 22, 2008 5:14 PM To: 'centos(a)centos.org' Subject: Wireless PCMCIA/PC Card for CentOS 5.1? Hello everyone, I would really like to get wireless working on my CentOS 5.1 install. I have a LinkSys WPC54G (I guess version 1 since no version is listed) but everything I've read indicates that this would be a nightmare for a Linux newbie like myself. I got as far as NDISWrapper, but right off the bat I am getting issues with KBuild and I guess my kernel source so I can't even get as far as compiling NDISWrapper. My question is mainly: Can anyone recommend a PC Card for a laptop that will work on CentOS without NDISWrapper? If not, is there an idiot guide for installing NDISWrapper on Centos 5.1? Thanks and best wishes, Manuel Alvarez

7 8

SSH listen audio from client
by Sergio Belkin 02 Feb '08

02 Feb '08

Can I open via SSH, say, Kaffeine o whattever video app and listen audio from client? Thanks in advance -- Sergio Belkin ----------------------------------------

3 2

Re: [CentOS] DVD support on CentOS 5.1
by David G. Miller 02 Feb '08

02 Feb '08

On Feb 1, 2008 2:17 AM, Ross Cavanagh <ross-cavanagh(a)bm-sms.co.jp> wrote: > > > >> > > >> > > The package that you want to install from rpmforge is: >> > > >> > > gstreamer-ugly-plugins >> > > >> > > It should make gstreamer (and totem on centos5) be able to play dvds. >> > > >> > > I am not sure if it works, as I use mplayer on my personal workstation :D >> > > >> > > Thanks, >> > > Johnny Hughes >> > > Also, you may require libdvd, this is available from the rpmforge repo. > > > > -Ross- > > > That should be gstreamer-plugins-ugly. I usually only make such transpositions with numbers. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

3 2

Monitor power save question
by David G. Miller 02 Feb '08

02 Feb '08

I decided to try the x86_64 version of CentOS 5 on my new desktop since it has an Athlon 64 X2 CPU. The one really perplexing oddity is that the monitor no longer goes to power save mode (standby) if the system is idle long enough (e.g., overnight). The "power management" option is set to put the display to sleep after thirty minutes. The display gets blanked but it never goes to standby. The weird thing is that the display behaved as expected when I still had the 32 bit version of CentOS installed so the hardware supports powering down the monitor. I don't see anything incriminating in dmesg, /var/log/messages or /var/log/Xorg.0.log. I'll switch the system to boot to runlevel 3 so I can see if X is spewing something to the first alternate console that isn't getting written to the log file. Anyone have other any suggestions as to diagnosing of fixing the problem? Thanks, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

4 4

Networking issue (after latest 5.1 update?)
by Bart Schaefer 02 Feb '08

02 Feb '08

I'm not *entirely* sure but this began happening at about the time I installed the latest kernel updates for CentOS 5.1 (kernel-2.6.18-53.1.6.el5.i686.rpm from January 24). Shortly before that I changed the encryption on my wireless router and switched from ndiswrapper back to the standard bcm43xx driver, but I'm pretty sure the network was OK before that update for the simple reason that I was able to download the update itself. In any case, for the past week or so wireless network connectivity from my CentOS 5 laptop has been terrible. The wireless router is set up as my DNS server, and connectivity is as expected for wired-connected computers and wirelessly from my Mac, from the game consoles, from my work laptop (currently running ubuntu), and from the CentOS laptop when re-booted into Windows XP. So the problem is restricted to CentOS 5. It takes minutes to do DNS lookups, and to establish a connection in the first place takes so long that "stateless" stuff like web surfing ranges from impossible (timeout) to merely unbearable. The automatic software updater hasn't succeeded in connecting ("Details: None") since the 24th. However, SSH connections seem to work OK (if perhaps a little bursty) once I manage to get connected (often by ssh'ng to the destination by IP address rather than by name). I can ping computers on the wired LAN on the other side of the router: PING 192.168.0.100 (192.168.0.100) 56(84) bytes of data. 64 bytes from 192.168.0.100: icmp_seq=1 ttl=64 time=0.094 ms 64 bytes from 192.168.0.100: icmp_seq=2 ttl=64 time=0.084 ms 64 bytes from 192.168.0.100: icmp_seq=3 ttl=64 time=0.082 ms 64 bytes from 192.168.0.100: icmp_seq=4 ttl=64 time=0.084 ms 64 bytes from 192.168.0.100: icmp_seq=5 ttl=64 time=0.085 ms 64 bytes from 192.168.0.100: icmp_seq=6 ttl=64 time=0.088 ms 64 bytes from 192.168.0.100: icmp_seq=7 ttl=64 time=0.085 ms 64 bytes from 192.168.0.100: icmp_seq=8 ttl=64 time=0.085 ms 64 bytes from 192.168.0.100: icmp_seq=9 ttl=64 time=0.086 ms 64 bytes from 192.168.0.100: icmp_seq=10 ttl=64 time=0.087 ms 64 bytes from 192.168.0.100: icmp_seq=11 ttl=64 time=0.087 ms 64 bytes from 192.168.0.100: icmp_seq=12 ttl=64 time=0.085 ms --- 192.168.0.100 ping statistics --- 12 packets transmitted, 12 received, 0% packet loss, time 10997ms rtt min/avg/max/mdev = 0.082/0.086/0.094/0.003 ms But when I ping the router itself: PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data. 64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=32.1 ms 64 bytes from 192.168.0.1: icmp_seq=4 ttl=64 time=2.36 ms 64 bytes from 192.168.0.1: icmp_seq=5 ttl=64 time=1.89 ms 64 bytes from 192.168.0.1: icmp_seq=7 ttl=64 time=1.76 ms 64 bytes from 192.168.0.1: icmp_seq=8 ttl=64 time=1.80 ms 64 bytes from 192.168.0.1: icmp_seq=9 ttl=64 time=1.78 ms 64 bytes from 192.168.0.1: icmp_seq=10 ttl=64 time=1.84 ms 64 bytes from 192.168.0.1: icmp_seq=12 ttl=64 time=1.94 ms 64 bytes from 192.168.0.1: icmp_seq=12 ttl=64 time=3.58 ms (DUP!) 64 bytes from 192.168.0.1: icmp_seq=13 ttl=64 time=1.88 ms 64 bytes from 192.168.0.1: icmp_seq=14 ttl=64 time=1.99 ms 64 bytes from 192.168.0.1: icmp_seq=16 ttl=64 time=1.76 ms --- 192.168.0.1 ping statistics --- 17 packets transmitted, 11 received, +1 duplicates, 35% packet loss, time 15997ms rtt min/avg/max/mdev = 1.765/4.562/32.120/8.323 ms At one point I had 15 consecutive DUP packets during a ping run before things finally settled down. Any idea what could cause this, or how to diagnose it further? I've run "arping -D" and there is only one responder on 192.168.0.1.

2 3

rsync question
by Jerry Geis 02 Feb '08

02 Feb '08

I have an external USB that I backup to. Rsync uses a bunch of memory in the process. So I thought I would build the file list and output that to a file then let rsync read the file names from a file list (hopefully not taking TONS of memory)... I do the command: rsync --only-write-batch=rsync_file_list -a /home ./rsync_file_list.sh . seems good and some files do copy. however I get a bunch of messages like: (No batched update for "home/jerry/signisam.nx") and then this file is not copied. Why is that and how can I get it to copy. This all works fine when I execute "rsync -a /home ." as I normally do. Thanks Jerry

1 0

USB failure (was: Networking issue (after latest 5.1 update?))
by Bart Schaefer 02 Feb '08

02 Feb '08

On Feb 2, 2008 1:54 PM, Bart Schaefer <barton.schaefer(a)gmail.com> wrote: > Something else nasty is going on because for the last three reboots > the machine has only remained up for about 5 minutes at a time before > it becomes unable to execute any new programs and has to be > power-cycled to restart it. I got one console message about a failed > journal write before the second of those forced reboots. This appears to be happening because the root filesystem is on a USB drive and the system has lost track of the device, as if the cable had been unplugged (even though it was not). I was accidentally able to see this happen while booted from the 5.0 CD in rescue mode, although I can't determine steps to reproduce it. In any case it's probably unrelated to the networking question, and certainly unrelated to the new kernel.

1 0

Re: Monitor power save question
by David G. Miller 02 Feb '08

02 Feb '08

Robert Nichols <rnicholsNOSPAM(a)comcast.net> wrote: > nate wrote: > >> > David G. Miller wrote: >> > >> >>> >> I don't see anything incriminating in dmesg, /var/log/messages or >>> >> /var/log/Xorg.0.log. I'll switch the system to boot to runlevel 3 so I >>> >> can see if X is spewing something to the first alternate console that >>> >> isn't getting written to the log file. Anyone have other any >>> >> suggestions as to diagnosing of fixing the problem? >>> >> > >> > Are there any DPMS options set in your xorg.conf ? What is your >> > video card/monitor and what driver are you using in X ? >> > >> > Another thing to check is see if DPMS is enabled as an extension >> > by your setup: >> > >> > xdpyinfo |grep DPMS >> > >> > should return "DPMS" >> > > And, see what "xset q" has to say about whether DPMS is currently > enabled or not. I've noticed that mplayer disables DPMS on entry, > but neglects to re-enable it on termination. Answering both suggestions: [dave@bend ~]# xdpyinfo |grep DPMS DPMS [dave@bend ~]# xset q Keyboard Control: auto repeat: on key click percent: 0 LED mask: 00000002 auto repeat delay: 500 repeat rate: 30 auto repeating keys: 00ffffffdffffbbf fadfffdfffdfe5ef ffffffffffffffff ffffffffffffffff bell percent: 50 bell pitch: 400 bell duration: 100 Pointer Control: acceleration: 2/1 threshold: 4 Screen Saver: prefer blanking: yes allow exposures: yes timeout: 0 cycle: 0 Colors: default colormap: 0x20 BlackPixel: 0 WhitePixel: 16777215 Font Path: unix/:7100,built-ins Bug Mode: compatibility mode is disabled DPMS (Energy Star): Standby: 0 Suspend: 0 Off: 0 DPMS is Enabled Monitor is On Font cache: Server does not have the FontCache Extension File paths: Config file: /etc/X11/xorg.conf Modules path: /usr/lib64/xorg/modules Log file: /var/log/Xorg.0.log These appear to be the same as another CentOS 5 box (but 32 bit) that correctly shuts down the monitor. xorg.conf looks like: [dave@bend ~]# cat /etc/X11/xorg.conf # Xorg configuration created by system-config-display Section "ServerLayout" Identifier "single head configuration" Screen 0 "Screen0" 0 0 InputDevice "Keyboard0" "CoreKeyboard" EndSection Section "InputDevice" Identifier "Keyboard0" Driver "kbd" Option "XkbModel" "pc105" Option "XkbLayout" "us" EndSection Section "Device" Identifier "Videocard0" Driver "vesa" EndSection Section "Screen" Identifier "Screen0" Device "Videocard0" DefaultDepth 24 SubSection "Display" Viewport 0 0 Depth 24 Modes "1600x1200" "1400x1050" "1280x1024" "1152x864" "1024x768" "800x600" "720x400" "640x480" "640x400" "640x350" EndSubSection EndSection and the video card is (this is a single card that shows up twice in lspci): 04:00.0 VGA compatible controller: ATI Technologies Inc RV516 [Radeon X1300/X1550 Series] (prog-if 00 [VGA]) Subsystem: Diamond Multimedia Systems Unknown device 3000 Flags: bus master, fast devsel, latency 0, IRQ 10 Memory at d0000000 (64-bit, prefetchable) [size=256M] Memory at febf0000 (64-bit, non-prefetchable) [size=64K] I/O ports at e000 [size=256] Expansion ROM at febc0000 [disabled] [size=128K] Capabilities: [50] Power Management version 2 Capabilities: [58] Express Endpoint IRQ 0 Capabilities: [80] Message Signalled Interrupts: 64bit+ Queue=0/0 Enable- 04:00.1 Display controller: ATI Technologies Inc RV516 [Radeon X1300 Pro] (Secondary) Subsystem: Diamond Multimedia Systems Unknown device 3001 Flags: bus master, fast devsel, latency 0 Memory at febe0000 (64-bit, non-prefetchable) [size=64K] Capabilities: [50] Power Management version 2 Capabilities: [58] Express Endpoint IRQ 0 When I know I'm going to be away from the system for "a while" I use the KVM to point to a vacant port. The monitor detects no signal and powers down but I have to remember to do this and I can't always predict how long I'll be away from the monitor. This is a traditional CRT (ViewSonic G220fb) so I'd rather no enrich the power company by supplying power to it for a black screen. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

Olivier Castien/Roncq/Infofrance/FRA/TZG est absent.
by Olivier_Castien＠zieglergroup.com 02 Feb '08

02 Feb '08

Je serai absent(e) à partir du 02/02/2008 de retour le 10/02/2008. Je répondrai à votre message dès mon retour. En cas d'urgence, vous pouvez contacter l'équipe technique d'infofrance.

1 0

centos 4.6 and openssl
by Paul A 02 Feb '08

02 Feb '08

Hi, I was compiling a new version of bind on my centos 4.6 server and I discovered that the openssl version (openssl-0.9.7a-43.17.el4_6.1) has several exploits associated with it. I was wondering aside from removing the RPM and compiling a new version of openssl how can I upgrade my current openssl-0.9.7a-43.17.el4_6.1 to a newer version that is affected by the exploits. I know I can yum update openssl as that's is the last version for openssl for version 4. What can I do upgrade openssl? Is it possible to update the server from 4.6 to 5?, is this something that I want to do or is there a better way? TIA, Paul

4 5

CentOS plus mysql server
by David Hrbáč 02 Feb '08

02 Feb '08

Hi, a few days there was thread about Centos Plus mysql. Today Mysql released mysql-5.0.51a. Where does Centos Plus mysql-5.0.54 come from? Thanks, David

7 9

CentOS 5 (Final): where is Xemacs?
by Kenneth Wolcott 01 Feb '08

01 Feb '08

CentOS 5 (Final): where is Xemacs? RH 5 doesn't have Xemacs? Why not?

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss