- Discuss - lists.centos.org

Look for users in both LDAP and /etc/passwd
by Tronn Wærdahl 10 Oct '07

10 Oct '07

Im running CentOS 5 with samba configured as PDC, with samba 3.0.24 and openldap-servers-2.3.30-2. My /etc/nsswitch.conf is like this: passwd: files ldap shadow: files ldap group: files ldap The problem is when I try to restart LDAP (/etc/init.d/ldap restart) then the init script just hangs. I suppose it will try to run slapd as the ldap user The ldap user is not in LDAP only in /etc/passwd, how can i configure my system to look for users first in LDAP and then in /etc/passwd When I remove LDAP from my /etc/nsswitch.conf, so it looks like below passwd: files shadow: files group: files then ldap start up nicely, but then my LDAP users can't sign in I tried to do different changes in pam, but without any progress Please advice

3 3

yum $releasever thinks it's 1 instead of 3
by Steve Campbell 10 Oct '07

10 Oct '07

I just upgraded one of my Tao boxes to Centos 3. The usual procedure is to do a yum update twice, and all is fine. This time, I had to rebuilddb before I could run the second yum update, and once I started this, yum fails. It says that $releasever is "1.0". Now I realize I could manually edit my yum.conf and make it go to 3, but this may not fix the problem down the road. Can someone tell me where this variable is defined, and any suggestions on how to fix this problem, please? Might a reinstall of yum packages fix this, as a last resort? Thanks very much. Steve Campbell

4 5

yum $releasever thinks it's 1 instead of 3 - Nevermind
by Steve Campbell 10 Oct '07

10 Oct '07

Never mind. I updated with the centos-release rpm and that seemed to fix it. Thanks for any who may have offered already. Original below: I just upgraded one of my Tao boxes to Centos 3. The usual procedure is to do a yum update twice, and all is fine. This time, I had to rebuilddb before I could run the second yum update, and once I started this, yum fails. It says that $releasever is "1.0". Now I realize I could manually edit my yum.conf and make it go to 3, but this may not fix the problem down the road. Can someone tell me where this variable is defined, and any suggestions on how to fix this problem, please? Might a reinstall of yum packages fix this, as a last resort? Thanks very much. Steve Campbell

1 0

CentOS-announce Digest, Vol 32, Issue 7
by centos-announce-request＠centos.org 10 Oct '07

10 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0909 Moderate CentOS 4 s390(x) kdelibs - security update (Pasi Pirhonen) 2. CESA-2007:0905 Moderate CentOS 4 s390(x) kdebase - security update (Pasi Pirhonen) 3. CESA-2007:0932 Moderate CentOS 5 i386 pwlib Update (Karanbir Singh) 4. CESA-2007:0932 Moderate CentOS 5 x86_64 pwlib Update (Karanbir Singh) 5. CESA-2007:0957 Moderate CentOS 5 i386 opal Update (Karanbir Singh) 6. CESA-2007:0957 Moderate CentOS 5 x86_64 opal Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Oct 2007 15:17:37 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2007:0909 Moderate CentOS 4 s390(x) kdelibs - security update To: centos-announce(a)centos.org Message-ID: <20071009121737.GD9935(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0909 https://rhn.redhat.com/errata/RHSA-2007-0909.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/kdelibs-3.3.1-9.el4.s390.rpm updates/s390/RPMS/kdelibs-devel-3.3.1-9.el4.s390.rpm s390x: updates/s390x/RPMS/kdelibs-3.3.1-9.el4.s390x.rpm updates/s390x/RPMS/kdelibs-devel-3.3.1-9.el4.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Zimbra error on centos 4.4
by Indunil Jayasooriya 10 Oct '07

10 Oct '07

Hi, Is anybody out there that has successfully installed Zimbra on Centos 4.4. I downloaded .tgz for RHEL4 from Zimbra site. it is the opensource edition. * <http://www.zimbra.com/community/downloads.html>* this is the one I downloded. zcs-4.5.7_GA_1319.RHEL4.tgz I extracted and run istall.sh. Then, I got below error? Install anyway? [N] y The system will be modified. Continue? [N] y Removing /opt/zimbra Installing packages zimbra-core...basename: too few arguments Try `basename --help' for more information. ......FAILED ###ERROR### installation failed Installation cancelled YOUR COMMENTS ? -- Thank you Indunil Jayasooriya

8 12

Re: [CentOS] How to export X displays
by techlists＠comcast.net 10 Oct '07

10 Oct '07

-------------- Original message ---------------------- From: John R Pierce <pierce(a)hogranch.com> > techlists(a)comcast.net wrote: > > -------------- Original message ---------------------- > > From: Ow Mun Heng <Ow.Mun.Heng(a)wdc.com> > > > >> n Wed, 2007-10-10 at 02:14 +0000, techlists(a)comcast.net wrote: > >> > >>> I have a CentOS server at home and want to view the X display on a laptop > >>> > >> running Ubuntu, and not having much success. > >> > >>> Here's what's been tried so far: > >>> > >>> I ran this command on the CentOS server: > >>> > >>> export DISPLAY=192.168.0.18:0.0 > >>> > >> ssh -X -Y centos > >> > >> xclock & > >> > > > > I tried that and am getting this error message. Just ran an nmap scan on > 192.168.0.18 and the X server port doesn't appear to be open. How is that > enabled? > > > > connect 192.168.0.18 port 6000: Connection refused > > > > its tunnneld from localhost via SSH > > you don't mess with setting DISPLAY at all, the ssh -X session should do > that for you, DISPLAY will be set to something like... > > $ echo $DISPLAY > localhost:11.0 > > [where the :11 will be different for each ssh session] Thanks to John, Akemi and Ow. That seems to have worked. One other question. If a program is already running on the remote machine and you want to move the display to the local machine, can that be done? i.e. I have Thunderbird already running on the remote machine, and would like to move it to the local machine. Would that work? Or would it be necessary to kill the remote process and re-start it with the tunneled X session? Thanks, Paul

2 1

Re: [CentOS] How to export X displays
by techlists＠comcast.net 10 Oct '07

10 Oct '07

-------------- Original message ---------------------- From: Ow Mun Heng <Ow.Mun.Heng(a)wdc.com> > n Wed, 2007-10-10 at 02:14 +0000, techlists(a)comcast.net wrote: > > I have a CentOS server at home and want to view the X display on a laptop > running Ubuntu, and not having much success. > > > > Here's what's been tried so far: > > > > I ran this command on the CentOS server: > > > > export DISPLAY=192.168.0.18:0.0 > > > ssh -X -Y centos > > xclock & I tried that and am getting this error message. Just ran an nmap scan on 192.168.0.18 and the X server port doesn't appear to be open. How is that enabled? connect 192.168.0.18 port 6000: Connection refused Paul

2 1

ot: vlans and vmware
by Gordon McLellan 10 Oct '07

10 Oct '07

Does anyone have VLAN tagging working from within a guest on vmware-server? I'm running a centos 4.5 guest on a centos 5 host with vmware server 1.04and I've tried creating vlans using both the /etc/sysconfig/network-scripts method and just doing it from the cli via vconfig. Either way appears to work, the OS creates the vlans, but I think vmware's network adapter must be eating the tags or something, since the guest is not able to talk to the real vlan on the switch. On the host I setup vmnet3 to be bridged to eth1. I bring eth1 up on the host but don't configure it in anyway. Vmnet3 is configured as eth1 on the guest as well. If I create vlans on eth1 on the host, it is able to talk to corresponding vlans on the switch. I'm wondering if there's some trick to get it work or some configuration string needed in the vmx file? Right now I have the vlans setup on the host and then bridged to vmnetX adapters for the guests. But this is kind of messy since I have to take all my virtual machines down to change anything. Thanks! Gordon

3 3

Strange sound/browser problem on Centos5
by fred smith 10 Oct '07

10 Oct '07

I just did (the other day) a clean install of Centos 5 and am having a really weird problem that I never had before (on centos 4.5). when listening to nrk p2 (http://www.nrk.no/p2/) using Firefox, and when the small window for the player gets obscured by another window the sound stops playing. Move the obscuring window and it starts right up. I haven't yet been able to tell if it is paused, or if it is just silenced but still running. Anybody got any clues? -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For the word of God is living and active. Sharper than any double-edged sword, it penetrates even to dividing soul and spirit, joints and marrow; it judges the thoughts and attitudes of the heart." ---------------------------- Hebrews 4:12 (niv) ------------------------------

2 3

AW: [CentOS] CentOS 5 release for IBM z/Series?
by Nils.Reimann＠izb.de 09 Oct '07

09 Oct '07

Hi dag! Thx for your reply! So, there will be no release in the near future of centos 5 for Z? At the moment we got a realy small z/linux installation, but i love it. Keeping the TCO as low as we can was necessary to satisfy the decision-maker. So we decided to choos a free linux distribution, centos was a good decicion we thougt. (redhat / fedora was always my favorite flavor *g*) It would be great if we can give something to the community! Personaly i can't help very much cause i'm the only knowledge carrier here for z/linux, with anoter colleague, and so we havent much time. How is development going on for centos on z and how can we help so i can talk with my head. Thx for reading! Greetings nils -----Ursprüngliche Nachricht----- Von: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Im Auftrag von Dag Wieers Gesendet: Montag, 8. Oktober 2007 13:05 An: CentOS mailing list Betreff: Re: [CentOS] CentOS 5 release for IBM z/Series? On Mon, 8 Oct 2007, Nils.Reimann(a)izb.de wrote: > i got a short question about centos 5. > are there any plans to release it for System Z? > > i'm asking cause we are waiting for some mayor upgrades like php5. We definitely are looking for people to show their interest and to help out. If you feel strong about having an s390 release, maybe we could create an s390 Special Interest Group, hopefully if enough interest exists and we have to resources (mainly manpower) to build and support it once again, it can happen. More information about Special Interest Groups: http://wiki.centos.org/SpecialInterestGroup I have heard other people voice interest in a recent s390 build, but with nobody taking initiative and without hard numbers of interested people it may not be forthcoming. -- -- dag wieers, dag(a)centos.org, http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors] _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 2

PCI-X SATA RAID Controllers
by Steve Bluck 09 Oct '07

09 Oct '07

Hello All, What would be the lists recommendation for an 8 port controller with native support for Centos 5.0? Currently have a 3ware 9650SE which does not... Cheers Steve

4 3

expand physical volume
by Thomas Antony 09 Oct '07

09 Oct '07

Hi. I added a disk to a hardware raid 5 array and now i want to expand the LVM physical volume. There are now 4 sas 146GB disks in the server. The virtual disk /dev/sdb from the raid controller has been resized successfully with the server management software osma. [root@srv1 ~]# fdisk -l /dev/sdb Disk /dev/sdb: 438.4 GB, 438489317376 bytes 255 heads, 63 sectors/track, 53309 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdb1 * 1 35539 285466986 8e Linux LVM When i run "pvresize /dev/sdb1" the output tells me it has been resized, but actually the physical volume didn't expand to the partition size 438GB. [root@srv1 ~]# pvresize /dev/sdb1 Physical volume "/dev/sdb1" changed 1 physical volume(s) resized / 0 physical volume(s) not resized [root@srv1 ~]# pvdisplay /dev/sdb1 --- Physical volume --- PV Name /dev/sdb1 VG Name VolGroup01 PV Size 272.24 GB / not usable 24.17 MB Allocatable yes (but full) PE Size (KByte) 32768 Total PE 8711 Free PE 0 Allocated PE 8711 PV UUID TCE2wI-U5kt-e8hd-d4gU-ug7Y-aEp9-k5QwG6 How can i resize the physical volume sdb1 to the partition size 438GB? Thank you in advance, Thomas

3 9

forcing Y on yum upgrades
by Rogelio Bastardo 09 Oct '07

09 Oct '07

I'd like to be able to do a "yum upgrade" without having to hit Y each time. While "yum install -y [program]}" seems to work, "yum -y upgrade" doesn't seem to. Is there a way to easily do this?

4 5

File retrieval from outside hangs, internally is okay, only Centos5 affected
by Bent Terp 09 Oct '07

09 Oct '07

Hi! I have a really weird problem with some of my servers, namely all the ones running Centos5 When I try to download a file from the server to a machine outside our Cisco 6500 router/firewall, the download hangs about half the times (15 out of 40) when less than half a megabyte into the transfer (varied from 76 kb to 496 kb). One server has a portchannel (Cisco speak for ethernet bundle), others do not, some use e1000, some use broadcom, I've tried httpd and scp transfers, I've tried from three different clients, Here's the really annoying part: the problem only occurs when downloading from outside the firewall, not when transferring files internally in the serverroom! And the switch is the firewall is a modular chassis, so the data comes over the same backplane regardless. And there's 42 files in /proc/net/sys/ipv4 which differ between EL4 and Centos5, so I'm a little lost here Anybody got some ideas? with kind regards, Bent PS Crossposted from Centos Forum, in case sombody on the list, who doesn't read the forum, can help me

4 6

Intel G33 Compatibility for Centos Server
by Michael Rock 09 Oct '07

09 Oct '07

Been running rock solid servers on Centos 3 and 4 for years but equipment is starting to die so it is time. I was thinking along the lines of an Intel Q6600 on an Asus P5K-VM mobo with the new G33 chipset utilizing SATA. Is anyone having success with this board or any of the G33 chipsets where I am not going to run into all kinds of install problems? I see these other threads of install problems with the new chipsets so are a bit leary of making the purchase without hearing of some success stories. Any recommendations? thx -- Mike ____________________________________________________________________________________ Tonight's top picks. What will you watch tonight? Preview the hottest shows on Yahoo! TV. http://tv.yahoo.com/

4 3

IPV6 warnings/errors
by Steve Campbell 09 Oct '07

09 Oct '07

I have just installed my first CentOS 5 server. I run proftpd on the server and I am getting a lot of warnings about IPV6 things. I do not have ip6tables turned on, but figure there is something else I have not done properly. A few of the errors are like: Deprecated pam_stack module called from service "proftpd" pam_unix(proftpd:session): session opened for user steve by (uid=0) Deprecated pam_stack module called from service "proftpd" library2.cnpapers.com (::ffff:216.30.205.128[::ffff:216.30.205.128]) - error setting IPV6_V6ONLY: Protocol not available I also see, when I do an ifconfig, references to inet6 lines such as inet6 addr: ::1/128 Scope:Host for my loopback and similar lines for my eth devices. Am I in trouble and is there something I need to do? Thanks for any help. Steve Campbell

1 0

pam_ldap + nscd
by Felix Schwarz 09 Oct '07

09 Oct '07

Hi, I'd like to use nscd for passwd+group caching. pam_ldap is configured and works (e.g. 'id foo' returns the correct user id if foo is present in ldap). If I start nscd manually (not started by default), 'id foo' returns 'No such user'. As soon as I stop nscd, 'id foo' starts working again. I suspect nscd is only looking at /etc/passwd because 'id root' always works (root is present in /etc/passwd). This is on a CentOS 5 system. Disabling SELinux did not help. I did not attach any config files purposefully because I don't know where to look for the problem and attaching nsswitch.conf, ldap.conf etc. would result in a huge post. Nevertheless, I will consider any information needed to diagnose the problem although I suspect that this a very simple configuration problem. Thank you very much :-) fs

3 8

CentOS-announce Digest, Vol 32, Issue 6
by centos-announce-request＠centos.org 09 Oct '07

09 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0909 Moderate CentOS 4 ia64 kdelibs - security update (Pasi Pirhonen) 2. CESA-2007:0909 Moderate CentOS 4 ia64 kdelibs - security update (Pasi Pirhonen) 3. CESA-2007:0905 Moderate CentOS 4 ia64 kdebase - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Mon, 8 Oct 2007 21:49:50 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2007:0909 Moderate CentOS 4 ia64 kdelibs - security update To: centos-announce(a)centos.org Message-ID: <20071008184950.GB9935(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0909 https://rhn.redhat.com/errata/RHSA-2007-0909.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/kdelibs-3.3.1-9.el4.ia64.rpm updates/ia64/RPMS/kdelibs-devel-3.3.1-9.el4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

anaconda kernel parameter to load module
by Farkas Levente 09 Oct '07

09 Oct '07

hi, how can i add kernel parameters to anaconda to load a module? in a normal booting initrd contains an init script so i can modify it load a given module (after i put it into the initrd). but in case of installer the initrd contains a binary init so i can't modify it. in this case how can i define kernel param (eg: through isolinux.cfg) to load additional modules? suppose i've got an xfs partition on which the installer reside and i use lilo to load the kernel and initrd, but after that the kernel can't read anything from the partition since it's not load xfs. is there any way to load kernel modules in this case trough kernel params (ie. append)? thanks. -- Levente "Si vis pacem para bellum!"

1 0

firefox slow/unresponsive under KDE on CentOS 4
by Jaap Eldering 09 Oct '07

09 Oct '07

Hi, I'm a user of a CentOS 4.4 system at our department (personally I use Debian). I use KDE and when I run firefox, it sometimes tends to be very slow in response when clicking on links and especially when I click on the navigation bar to edit the url: it sometimes takes up to 2-3 seconds before firefox responds. Switching to Gnome completely solves the problem without any other changes. I've tried to install firefox directly from mozilla.com but that version exhibits exactly the same problems. Is this a known problem? I couldn't find anything about this by googling. Thanks, Jaap Eldering The version string from the CentOS installed firefox: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.2) Gecko/20070220 Firefox/2.0.0.2 The version string of the firefox I installed from mozilla.com: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.7) Gecko/20070914 Firefox/2.0.0.7 uname -a: Linux stofschoten 2.6.9-42.0.3.EL #1 Fri Oct 6 06:02:37 CDT 2006 x86_64 x86_64 x86_64 GNU/Linux

1 0

Supermicro X7DVL-E and Xeon L5320 installation problems
by Chris Boyd 09 Oct '07

09 Oct '07

Tearing our hair out on this one. Trying to install CentOS 5 x86_64 on a Supermicro X7DVL-E with 2 Xeon L5320 quad core CPUs, 3Ware SATA RAID controller in a mirrored setup and 4 GB of memory. Installation crashes at random places while copying the files. We've run memtest86 for 24 hours without any errors, replaced the RAID controller, motherboard and disks, but still no luck. Any thoughts, hints or LARTs appreciated. --Chris

4 4

re: Intel G33 Compatibility for Centos Server
by Michael Rock 09 Oct '07

09 Oct '07

John R Pierce >> that sounds more like a desktop system, not really >> what I'd consider >> server grade. no ECC support, no redundant power >> supplies, etc etc. Going this route has served me just as well for the last 3 years and at a cost I can afford. This is actually a major step up from what I am running and should see better mysql performance. (pretty high CPU utilization currently) Although these old servers were cutting edge when I originally installed Centos the installs were pretty smooth. But since have had a few bad experiences with some other Asus Nvidia chipsets on install. So I am looking for some proven success with the G33 chipset so I do not end up with a board which going to be a pain on install. ____________________________________________________________________________________ Moody friends. Drama queens. Your life? Nope! - their life, your story. Play Sims Stories at Yahoo! Games. http://sims.yahoo.com/

1 0

Where Can I find Perl-DBD-Sybase RPMs?
by Ow Mun Heng 09 Oct '07

09 Oct '07

It's not in CentosPlus or CentosBase or Rpmforge. Does anyone know? (Looking for it for Centos 4.4) Thanks

3 4

Xen crash
by Nicolas Sahlqvist 08 Oct '07

08 Oct '07

Hi, I'm new to this list and joined since I am volunteering as a tech admin for a non profit organization called CouchSurfing (.com) where we tried to move the web servers to Xen zones and this has proven quite unstable since the our defined zones tends to crash on a daily basis with the latest CentOS 5 Xen updates. The physical boxes have 2 quad core 1.6GHz Xeon CPU's and 4 GB RAM, there is currently only 1 domain on each box, configured with 2.2GB RAM. Domain 0: [root@nd10254 ~]# rpm -qa | grep xen xen-libs-3.0.3-25.0.4.el5 kernel-xen-2.6.18-8.1.8.el5 kernel-xen-2.6.18-8.1.14.el5 xen-3.0.3-25.0.4.el5 Web1: [root@web1 ~]# rpm -qa | grep xen kernel-xen-2.6.18-8.1.8.el5 kernel-xen-2.6.18-8.1.14.el5 The Domain0 zone is indeed rock stable, while the Web1 etc. are crashing daily with the 2.6.18-8.1.14 Xen kernel and the stack trace we see after a few hours is as follows: BUG: soft lockup detected on CPU#5! Call Trace: <IRQ> [<ffffffff802a76ad>] softlockup_tick+0xdb/0xed [<ffffffff8026ba66>] timer_interrupt+0x396/0x3f2 [<ffffffff80210a87>] handle_IRQ_event+0x2d/0x60 [<ffffffff802a79ec>] __do_IRQ+0xa4/0x105 [<ffffffff802699b3>] do_IRQ+0xe7/0xf5 [<ffffffff8038dde8>] evtchn_do_upcall+0x86/0xe0 [<ffffffff8025cc1a>] do_hypervisor_callback+0x1e/0x2c <EOI> [<ffffffff802063aa>] hypercall_page+0x3aa/0x1000 [<ffffffff802063aa>] hypercall_page+0x3aa/0x1000 [<ffffffff8026afe2>] raw_safe_halt+0x84/0xa8 [<ffffffff802684f8>] xen_idle+0x38/0x4a [<ffffffff80247bcd>] cpu_idle+0x97/0xba BUG: soft lockup detected on CPU#7! Etc., etc etc, It does not crash the Xen zones directly, but clogs up the Xen web1 console etc. We did not see this when running the 2.6.18-8.1.8 Xen kernel, instead the Xen zones crashed less frequent with a out of memory problem as follows: Call Trace: [<ffffffff802aeefc>] out_of_memory+0x4e/0x1d3 [<ffffffff8020efe8>] __alloc_pages+0x229/0x2b2 [<ffffffff8023fd5b>] __lock_page+0x5e/0x64 [<ffffffff80232637>] read_swap_cache_async+0x42/0xd1 [<ffffffff802b32a2>] swapin_readahead+0x4e/0x77 [<ffffffff8020929d>] __handle_mm_fault+0xae3/0xf46 [<ffffffff80260709>] _spin_lock_irqsave+0x9/0x14 [<ffffffff80262fe8>] do_page_fault+0xe48/0x11dc [<ffffffff80207138>] kmem_cache_free+0x77/0xca [<ffffffff8025cb6f>] error_exit+0x0/0x6e We think the whole problem is how the kernel fails to handle resource cloging (to many interrupts, heavy CPU and memory usage in the defined zones etc.) from stubmbling on some fuzzy posts on the net, example: http://article.gmane.org/gmane.comp.emulators.xen.user/26617 Is this problem known to you or new, any ideas on howto resolve it? Regards, Nicolas Sahlqvist CouchSurfing,.com

1 0

Need advice on 3rd party repository
by Jesse Cantara 08 Oct '07

08 Oct '07

Hello, I am looking for some advice on a way to update some packages to newer releases than are available in the standard CentOS repositories. Specifically, I am trying to update apache and PHP to conform to "Scanalert"'s "Hacker Safe" website security scan, and the required versions do not exist in the CentOS repositories. I'm using CentOS 5. I wish to stay within the realm of yum, in order to avoid RPM-dependency-heck which I have experienced before, trying to source random third party RPMs that never work out properly. I also wish to keep the system in a better state of maintenance by sticking to yum. It's just more organized (and easier) and will help keep things up to date in the future as well. Is there any other option than to go with a 3rd party repository to hopefully find later versions of apache and PHP? Does anybody have a recommended repository source? Thank you for any help and advice you can give, -Jesse Cantara

4 4

CentOS 5 release for IBM z/Series?
by Nils.Reimann＠izb.de 08 Oct '07

08 Oct '07

hi folks, i got a short question about centos 5. are there any plans to release it for System Z? i'm asking cause we are waiting for some mayor upgrades like php5. thx! greetings nils

2 1

dbus can't send to audit system
by Kenneth Porter 08 Oct '07

08 Oct '07

I'm seeing this in /var/log/messages: Oct 7 20:46:25 centos dbus: Can't send to audit system: USER_AVC avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?) Some googling suggested this was due to a policy issue a year ago, but I'm seeing it with selinux-policy-targeted-2.4.6-30.el5. I've got a game server program (Enemy Territory Quake Wars 1.1) that fails to resolve a DNS entry unless I setenforce 0, and I'd like to find the audit entry that tells me why. Is this messages entry an indication that that auditing is broken?

1 1

3Ware 9550SX and latency/system responsiveness
by Simon Banton 08 Oct '07

08 Oct '07

Dear list, I thought I'd just share my experiences with this 3Ware card, and see if anyone might have any suggestions. System: Supermicro H8DA8 with 2 x Opteron 250 2.4GHz and 4GB RAM installed. 9550SX-8LP hosting 4x Seagate ST3250820SV 250GB in a RAID 1 plus 2 hot spare config. The array is properly initialized, write cache is on, as is queueing (and supported by the drives). StoreSave set to Protection. OS is CentOS 4.5 i386, minimal install, default partitioning as suggested by the installer (ext3, small /boot on /dev/sda1, remainder as / on LVM VolGroup with 2GB swap). Firmware from 3Ware codeset 9.4.1.2 in use, firmware/driver details: //serv1> /c0 show all /c0 Driver Version = 2.26.05.007 /c0 Model = 9550SX-8LP /c0 Memory Installed = 112MB /c0 Firmware Version = FE9X 3.08.02.005 /c0 Bios Version = BE9X 3.08.00.002 /c0 Monitor Version = BL9X 3.01.00.006 I initially noticed something odd while installing 4.4, that writing the inode tables took a longer time than I expected (I thought the installer had frozen) and the system overall felt sluggish when doing its first yum update, certainly more sluggish than I'd expect with a comparatively powerful machine and hardware RAID 1. I tried a few simple benchmarks (bonnie++, iozone, dd) and noticed up to 8 pdflush commands hanging about in uninterruptible sleep when writing to disk, along with kjournald and kswapd from time to time. Loadave during writing climbed considerably (up to >12) with 'ls' taking up to 30 seconds to give any output. I've tried CentOS 4.4, 4.5, RHEL AS 4 update 5 (just in case) and openSUSE 10.2 and they all show the same symptoms. Googling around makes me think that this may be related to queue depth, nr_requests and possibly VM params (the latter from https://bugzilla.redhat.com/show_bug.cgi?id=121434#c275) These are the default settings: /sys/block/sda/device/queue_depth = 254 /sys/block/sda/queue/nr_requests = 8192 /proc/sys/vm/dirty_expire_centisecs = 3000 /proc/sys/vm/dirty_ratio = 30 3Ware mentions elevator=deadline, blockdev --setra 16384 along with nr_requests=512 in their performance tuning doc - these alone seem to make no difference to the latency problem. Setting dirty_expire_centisecs = 1000 and dirty_ratio = 5 does indeed reduce the number of processes in 'b' state as reported by vmstat 1 during an iozone benchmark (./iozone -s 20480m -r 64 -i 0 -i 1 -t 1 -b filename.xls as per 3Ware's own tuning doc) but the problem is obviously still there, just mitigated somewhat. The comparison graphs are in a PDF here: http://community.novacaster.com/attach.pl/7411/482/iozone_vm_tweaks_xls.pdf Incidentally, the vmstat 1 output was directed to an NFS-mounted disk to avoid writing it to the arry during the actual testing. I've tried eliminating LVM from the equation, going to ext2 rather than ext3 and booting single-processor all to no useful effect. I've also tried benchmarking with different blocksizes from 512B to 1M in powers of 2 and the problem remains - many processes in uninterruptible sleep blocking other IO. I'm about to start downloading CentOS 5 to give it a go, and after that I might have to resort to seeing if WinXP has the same issue. My only real question is "where do I go from here?" I don't have enough specific tuning knowledge to know what else to look at. Thanks for any pointers. Simon

7 56

GFS-kernel module - Version Magic Error
by Manish Kathuria 07 Oct '07

07 Oct '07

Are the RPMs for the latest GFS kernel module GFS-kernel-2.6.9-72.2.0.8 to be used with the version 2.6.9-55.0.9.EL available ? I tried to compile the Source RPMs available from the Red Hat site but the modules can't be loaded because of invalid module format arising from version magic issues. The syslog shows: node0 kernel: gfs: version magic '2.6.9-55.0.9.ELsmp SMP 686 REGPARM 4KSTACKS gcc-3.2' should be '2.6.9-55.0.9.ELsmp SMP 686 REGPARM 4KSTACKS gcc-3.4' node0 modprobe: FATAL: Error inserting gfs (/lib/modules/2.6.9-55.0.9.ELsmp/kernel/fs/gfs/gfs.ko): Invalid module format The error message is actually surprising since the Source RPM has been compiled on a system having gcc-3.4. To complicate matters the modinfo indicates vermagic: 2.6.9-55.0.9.ELsmp SMP 686 REGPARM 4KSTACKS gcc-3.2 When are the CentOS builds expected for this module ? Thanks, Manish

2 1

CentOS-announce Digest, Vol 32, Issue 5
by centos-announce-request＠centos.org 07 Oct '07

07 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0933 Moderate CentOS 4 i386 elinks - security update (Johnny Hughes) 2. CESA-2007:0933 Moderate CentOS 4 x86_64 elinks - security update (Johnny Hughes) 3. CESA-2007:0933 Moderate CentOS 5 x86_64 elinks - security update (Johnny Hughes) 4. CESA-2007:0933 Moderate CentOS 5 i386 elinks - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 06 Oct 2007 07:47:23 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2007:0933 Moderate CentOS 4 i386 elinks - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <470783DB.3040107(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2007:0933 https://rhn.redhat.com/errata/RHSA-2007-0933.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: elinks-0.9.2-3.3.5.2.i386.rpm src: elinks-0.9.2-3.3.5.2.src.rpm

1 0

Gnome panels
by fred smith 06 Oct '07

06 Oct '07

Hi! Just installed Centos 5 (I've been running 4.x which was an upgrade from previous versions, for a long time), but this one was a fresh install. Now Gnome gives me the two panel configuration (one at top, one at bottom) but I prefer the single, larger panel at the bottom. Anyone know how to tweak Gnome to revert to the single-panel form? Thanx! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The Lord detests the way of the wicked but he loves those who pursue righteousness. ----------------------------- Proverbs 15:9 (niv) -----------------------------

3 6

New launcher in Gnome
by fred smith 06 Oct '07

06 Oct '07

Hi! In Centos 5, when I add a launcher to the desktop, it doesn't allow me to choose an icon for the launcher. After creating it, right-click/properties also has no way to choose an icon. It seems to assign one itself, and the one i get looks like a small terminal window, or something. How can I pick the icon for a desktop launcher myself? My old Centos 4.5 installation allowed me to pick the icon. This seems to be a step backwards. Tks! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy--to the only God our Savior be glory, majesty, power and authority, through Jesus Christ our Lord, before all ages, now and forevermore! Amen." ----------------------------- Jude 1:24,25 (niv) -----------------------------

2 2

Slightly OT: Building latest ImageMagick on CentOS 3
by Bart Schaefer 06 Oct '07

06 Oct '07

I grabbed the latest ImageMagick.src.rpm (version 6.3.6, I believe) from imagemagic.org and verified that I can compile it by hand on CentOS 3. I then commented out all the BuildPrereq and BuildRequires lines and verified that "rpmbuild -bc ImageMagick.spec" behaved sensibly. However, when I try to run "rpmbuild -bb ImageMagick.spec" I get a failure not because of any compilation problems but because the PerlMagick got installed relative to the real root directory rather than relative to the temporary build root, so none of those files could be found when the final packaging step was done. Can anyone give me some quick instructions on how to get those files to install in the correct relative location? My spec file foo is a few years rusty.

1 0

near-realtime file system replication
by John R Pierce 06 Oct '07

06 Oct '07

Whats available for doing near-realtime master->slave file replication between two CentOS systems? Cronjobs running rsync won't cut it. Ideally, I'd like something that works like SLONY-I does for Postgres databases, where all file system block level transactions on the master get replicated to the 2nd system on a 'as fast as practical' basis (a second or two of lag is acceptable). If the slave is offline or connectivity is interrupted, these transactions should be journaled so they can be played back when things resume. I'm open to other approaches, so far I've found very little in this category... I briefly considered using LVM mirroring over iscsi to the slave, but A) this is synchronous, B) recovery from a service interruption would require remirroring the whole volume. I've been reading about GFS but am somewhat confused as to its capabilities. The examples given on redhat's pages seem to involve shared storage (SAN or whatever) and distributed cluster access, I don't need any of that, just simple master->slave one way asynchronous replication.

5 11

Asterisk
by Kenneth Porter 06 Oct '07

06 Oct '07

Is an RPM for Asterisk (the PBX system) available for CentOS 5? It looks like RPMforge is supposed to have one, as I can see dependent packages like asterisk-sounds, but the base package seems to be absent from the repository.

5 7

remote tar via ssh
by ann kok 06 Oct '07

06 Oct '07

Hi all Can I use ssh to have remote tar files from machine A to machine B? ssh from machine A to machine B tar all files in machine B to exact to machine A Thank you ____________________________________________________________________________________ Got a little couch potato? Check out fun summer activities for kids. http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&…

19 51

Duplicating My CentOS Install For Other Other Systems
by Antonio Dupont 06 Oct '07

06 Oct '07

Hello, I have a CentOS install that has updated packages, and different users with certain privileges and modified GNOME menus. When a user logs in they are very limited to what they can do. i.e. browse the internet, run some php scripts on the local MySQL database I have set and that's about it. I would like to take the stuff I setup and make it extremely easy for someone to duplicate the install with the same customizations on their own hardware with out having to answer any install questions and keeping the same security I have set up. My idea is to some how make a hybrid LiveCD/kickstart install. One where a non-technical user could put in the CD/DVD boot their system and have CentOS automatically installed with a predetermined partitioning scheme, security, users automatically created, packages, and etc. Essentially I want to take an image of my configured system and have it installed on another system with minimal input. I've done cloning and remimaging in the past to handle this, but now I won't have control of the hardware that CentOS will be installed on, so I want anaconda to take care of that. The only thing I can say to the user is that the computer has to be on the Red Hat Hardware compatibility list. I've searched the Internet for some suggestions, but have come up short. If you have any input or direction that you could help with, I am very appreciative. Thanks in advance. Antonio

2 1

Damaged rpm database?
by M. Fioretti 06 Oct '07

06 Oct '07

Hello, while doing some maintenance on a Centos 4.4 box, I ran rpm -qa --last and got: error: rpmdb: damaged header #91 retrieved -- skipping. ...lots of lines identical to the one above and finally: the_last_package_I_installed_yesterday.rpm all the other rpms in reverse installation order I've seen via google that this should mean there is a damaged rpm database and it should be rebuilt with one or two command, however: 1) how can I find out _why_ the damage happened? 2) what are the right command and options to restore the database? The examples I've found are 5+ years old, so I'm not really inclined to run them as they are. TIA, Marco

3 4

CESA-2007:0933 Moderate CentOS 4 x86_64 elinks - security update
by Johnny Hughes 06 Oct '07

06 Oct '07

CentOS Errata and Security Advisory 2007:0933 https://rhn.redhat.com/errata/RHSA-2007-0933.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: elinks-0.9.2-3.3.5.2.x86_64.rpm src: elinks-0.9.2-3.3.5.2.src.rpm

1 0

CESA-2007:0933 Moderate CentOS 4 i386 elinks - security update
by Johnny Hughes 06 Oct '07

06 Oct '07

CentOS Errata and Security Advisory 2007:0933 https://rhn.redhat.com/errata/RHSA-2007-0933.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: elinks-0.9.2-3.3.5.2.i386.rpm src: elinks-0.9.2-3.3.5.2.src.rpm

1 0

flex package marked as fc6 and no flex-devel?
by Steven Haigh 06 Oct '07

06 Oct '07

Hi all, I'm in the middle of setting up a build environment for OpenWRT and it looks like the packages need flex. Looking at the CentOS repositories, it looks as though the flex package is tagged as fc6 - it also looks like there is no flex-devel package at all. Does anyone know what the go is here? Available Packages Name : flex Arch : i386 Version: 2.5.4a Release: 41.fc6 Size : 124 k Repo : base -- Steven Haigh Email: netwiz(a)crc.id.au Web: http://www.crc.id.au Phone: (03) 9001 6090 - 0412 935 897

5 4

CentOS-announce Digest, Vol 32, Issue 4
by centos-announce-request＠centos.org 06 Oct '07

06 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Planet CentOS (Daniel de Kok) ---------------------------------------------------------------------- Message: 1 Date: Fri, 05 Oct 2007 14:53:24 +0200 From: Daniel de Kok <daniel(a)centos.org> Subject: [CentOS-announce] Planet CentOS To: centos-announce(a)centos.org Message-ID: <1191588804.3885.0.camel(a)mindbender.taickim.com> Content-Type: text/plain The CentOS team is pleased to announce the Planet CentOS website. Are you wondering what is cooking in the kitchens of the CentOS developers? Wait no longer, Planet CentOS aggregates the blogs of CentOS contributors, merging them into one feed. You can read Planet CentOS with your favorite RSS/Atom reader, or through the Planet CentOS website. The Planet CentOS website, with links to RSS and Atom feeds can be found at: http://planet.centos.org/ With kind regards, The CentOS team ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 32, Issue 4 **********************************************

1 0

Re: [CentOS] Re: Asterisk
by Les Bell 06 Oct '07

06 Oct '07

William Warren <hescominsoon(a)emmanuelcomputerconsulting.com> wrote: >> have you tried trixbox which is an asterisk version based off of Centos? << Seconded. I have an 8-extension, 2-POTS-line + VoIP Asterisk setup here which started life as an Asterisk@Home (precursor to trixbox) install the best part of 2 years ago. It's based on Centos 4.5, and I enabled various repos to keep the base distro up-to-date but have maintained the asterisk, asterisk-addons, zaptel, etc. packages manually ever since, no problem. >From my experience, building Asterisk is only where the fun starts - you then have to configure your phones and write a callplan. I did that for a basic installation, but trixbox will give you a nice web-based management interface with MySQL CDR integration, flash console and a bunch of other stuff (automated attendant, voicemail, wakeup calls, etc) working pretty much out of the box. I've tweaked the callplan and added some functionality, but my basic goal was to get a phone system up and running to support two professional consultancies without it becoming a full-time job in its own right. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

CentOS-announce Digest, Vol 32, Issue 3
by centos-announce-request＠centos.org 05 Oct '07

05 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0928-05: Low CentOS 2 i386 tzdata enhancement (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Fri, 05 Oct 2007 11:33:58 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2007:0928-05: Low CentOS 2 i386 tzdata enhancement To: centos-announce(a)centos.org Message-ID: <47059486.6010307(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHEA-2007:0928-05 tzdata enhancement update Files available: tzdata-2007h-1.el2_1.noarch.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 32, Issue 3 **********************************************

1 0

Problems suspending/hibernating Dell Latitude D810 with CentOS 5
by ArcosCom Linux User 05 Oct '07

05 Oct '07

Hi all. I'm having problems trying to suspend/hibernate my Dell Latitude D810 Laptop. Basically I have an ATI X600 videographics and SATA harddrive and run httpd and mysqld daemons on it. I use fglrx (ATI propietary drivers) and the open too with no success. I tried with 1 and 2 screens configurations with no success. I tried with CA and/or with battery with no success. I need some help to debug de suspend/hibernate proccess and help to discover at wich point the process is stopped. When I try to suspend/hibernate, the screens are powered off, but the system not go into suspend mode or power off (when hibernating). Then I have to use power button to power off/on the lapton and when I login into gnome, It says me that had a problem with suspend/hibernate process. All help is apretiated!! Regards

2 2

Cron job
by umair shakil 05 Oct '07

05 Oct '07

Dear All Salam, Is there a possibility that we can run MRTG command in seconds???? The only thing is know is we can run MRTG in one minute other than standard 5 minutes.... Like */1 * * * * root env LANG=C /usr/bin/mrtg /etc/mrtg/test.cfg what if, i want to monitor traffic in seconds??? Regards, Umair Shakil ETD

3 2

DNAT rule for vsftp --(PASSIVE FTP)
by Indunil Jayasooriya 05 Oct '07

05 Oct '07

Hi all, I want to run vsftp behind a firewall.(i.e DMZ zone) . It is runnig as passive ftp. the theroy behind passive ftp is , - FTP server's port 21 from anywhere ( Client initiates connection) - FTP server's port 21 to ports > 1024 (Server responds to client's control port) - FTP server's ports > 1024 from anywhere (Client initiates data connection to random port specified by server) - FTP server's ports > 1024 to remote ports > 1024 (Server sends ACKs (and data) to client's data port) Then, How can I write DNAT rules. pls assume 1.2.3.4 is the ip of the internert interface. #DNAT from Internet to the box running VSFTP @ 192.168.100.3 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 21 -j DNAT --to-destination 192.168.100.3:21 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 1024: -j DNAT --to-destination 192.168.100.3 And also #connect to below ip (actual destination ip) with below ports,due to DNATing iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 21 -m state --state NEW -j ACCEPT iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 1024: -m state --state NEW -j ACCEPT R u okay with the above 4 rules ? If WRONG, pls write down your rules. I am going to put this vsftp server in to PRODUCTION USE. Pls also make sure , my firewall has below rules such as DROP, ESTABLISHED,RELATED. iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT YOUR comments. -- Thank you Indunil Jayasooriya

3 4

Re: [CentOS] DNAT rule for vsftp --(PASSIVE FTP)
by Indunil Jayasooriya 05 Oct '07

05 Oct '07

On 10/5/07, Feizhou <feizhou(a)graffiti.net> wrote: > > > > Do you have ip_nat_ftp loaded too? > > > > > > YES, both ip_conntrack_ftp and ip_nat_ftp. > > pls see below > > > > #Enable tracking mechanism > > /sbin/modprobe -a ip_conntrack_ftp ip_nat_ftp > > Hmm, I think the NEW for port 1024: is not necessary in FORWARD then. > The nat_ftp should handle it and thus make it ESTABLISHED,RELATED and > the ESTABLISHED,RELATED rule should therefore be sufficient. > That meas I do not nedd below rule i FORWARD chain. iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 1024: -m state --state NEW -j ACCEPT So below 3 rules will be enough. iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 21 -j DNAT --to-destination 192.168.100.3:21 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 1024: -j DNAT --to-destination 192.168.100.3 iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 21 -m state --state NEW -j ACCEPT -- Thank you Indunil Jayasooriya

1 0

[OT] DNS queries issue
by Rick Barnes 04 Oct '07

04 Oct '07

Hello, I have a 2 bind nameservers on my network (both running C3.9). Over the last 3 weeks, I've seen a significant increase in the amount of denied cache queries to DNS service and I'm wondering if I should be worried or if there's something I can do to resolve or prevent this. I show millions of lines like: Oct 4 11:49:30 dns1 named[878]: client 68.13.16.20#53535: query (cache) denied If I trim out those and the last message repeated lines, I go from a messages log of 1.8GB to 1.3MB but 2 weeks earlier my messages log for the week was only 339M. Googling for the query (cache) denied didn't seem find anything useful, that this is other name servers attempting to query my servers for info. Its this something I need to bear with in having a publically available DNS server with authoritative domains? Is there a way to suppress these messages from going to syslog and is it a bad idea to do so? There have been no configuration changes except to add 1 or 2 domains to the nameservers. Any help in understanding this would be great. Thanks, Rick

4 3

Auditing software for a CentOS server
by israel.garcia＠cimex.com.cu 04 Oct '07

04 Oct '07

Hi, I'm running some databases's software on a CentOS 4.5 server and I'd like to know if there are any audit software in CentOS4.5 CDs packages?.....I need some software to audit all the files on the server, I mean, if some one delete a file, or change some permissions on any filesystems, if someone copy files to my server and some of this stuff... take in mind I'm not lookign for an IDS.. I just want to audit my server... thanks in advance Israel

4 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss