- Discuss - lists.centos.org

Dolphin fails to refresh files (cont'd)
by Nicolas Kovacs 25 Jun '18

25 Jun '18

Hi, Some time ago I reported a problem with Dolphin on bugs.centos.org. When extracting an archive, the new files don't appear, and I have to press F5 to refresh the current directory display. I just found out a specificity of this bug. This only seem to happen on those installations where I run the 4.4.x kernel (kernel-lt package from elrepo-kernel repository). Any idea how I could solve that problem ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

Re: [CentOS] NetworkManager updating resolv.cfg
by Maheshwari, Shagun 25 Jun '18

25 Jun '18

Hi, It will be bug on &.2 but we are facing this issue on CentOS 6.8. In 6.8 also has this issue? Please suggest. Regards, Shagun -----Original Message----- From: CentOS [mailto:centos-bounces@centos.org] On Behalf Of centos-request(a)centos.org Sent: Friday, June 22, 2018 5:30 PM To: centos(a)centos.org Subject: [EXTERNAL] CentOS Digest, Vol 161, Issue 22 Send CentOS mailing list submissions to centos(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdCA6hocG… or, via email, send a message with subject or body 'help' to centos-request(a)centos.org You can reach the person managing the list at centos-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS digest..." Today's Topics: 1. Re: Specifying different options for different " smb" type gvfs mount (John Hodrien) 2. Re: NetworkManager updating resolv.cfg (peter.winterflood) 3. Re: Updated krb5 rpm package altered existing krb5.conf - No go (G?tz Reinicke) 4. Re: CentOS-6.9 Bind-9.8.2 error messages (James B. Byrne) 5. Imap daemons for CentOS 6 (other then cyrus-imapd) (Robert Heller) 6. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (James (CentOS ML)) 7. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Frank Cox) 8. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Walter H.) 9. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Jonathan Billings) 10. Re: Specifying different options for different " smb" type gvfs mount (Gordon Messmer) 11. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Robert Heller) 12. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Valeri Galtsev) 13. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Marcelo Ricardo Leitner) 14. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Valeri Galtsev) 15. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Jonathan Billings) 16. Re: Specifying different options for different " smb" type gvfs mount (John Hodrien) 17. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Walter H.) 18. Re: Imap daemons for CentOS 6 (other then cyrus-imapd) (Walter H.) ---------------------------------------------------------------------- Message: 1 Date: Thu, 21 Jun 2018 13:09:38 +0100 (BST) From: John Hodrien <J.H.Hodrien(a)leeds.ac.uk> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Specifying different options for different " smb" type gvfs mount Message-ID: <nycvar.YEU.7.76.1806211308500.31795(a)pbzc-cp3201.yrrqf.np.hx> Content-Type: text/plain; charset=US-ASCII; format=flowed On Thu, 21 Jun 2018, Toralf Lund wrote: > I known that I might use mount.cifs and related "fstab" entries as an > alternative, but its password handling seems a lot less convenient. If you're in an AD environment, you can probably do nicely with mount.cifs: sec=krb5,multiuser That way you don't have to deal with usernames/passwords at all. jh ------------------------------ Message: 2 Date: Thu, 21 Jun 2018 13:14:08 +0100 From: "peter.winterflood" <peter.winterflood(a)ossi.co.uk> To: CentOS mailing list <centos(a)centos.org>, anax <anax(a)ayni.com> Subject: Re: [CentOS] NetworkManager updating resolv.cfg Message-ID: <16422442280.27db.2b6837a33dad96cb17d193f32630f285(a)ossi.co.uk> Content-Type: text/plain; format=flowed; charset="us-ascii" On 21 June 2018 12:13:02 "anax" <anax(a)ayni.com> wrote: > Hi Shagun > check your settings of PEERDNS and IPV6_PEERDNS... > > suomi > > On 06/21/2018 08:33 AM, Maheshwari, Shagun wrote: >> Hi, >> >> I am facing issue stoping NetworkManager to update resolv.cfg, I am >> using below configuration for eth0 interface: >> >> TYPE=Ethernet >> BOOTPROTO=dhcp >> DEFROUTE=yes >> IPV4_FAILURE_FATAL=no >> IPV6INIT=yes >> IPV6_AUTOCONF=yes >> IPV6_DEFROUTE=yes >> IPV6_FAILURE_FATAL=no >> IPV6_ADDR_GEN_MODE=stable-privacy >> NAME=eth0 >> UUID=93b90a46-dab5-4a67-8fd0-fefe8874a8b9 >> DEVICE=eth0 >> ONBOOT=no >> PEERDNS=no >> PEERROUTES=yes >> IPV6_PEERDNS=yes >> IPV6_PEERROUTES=yes >> DNS1=<ipv4 address> >> DNS2=<ipv6 address> >> >> >> Also, added dns=none in NetworkManager.conf file. >> >> Whenever I am restarting NetworkManager, resolv.cfg gets updated and >> only >> ipv4 nameserver is displaced, whether I am expecting both the ips >> (ipv6 and >> ipv4 address to be present in resolv.cfg file. >> >> Any suggestion here, how to achieve that?? >> >> Regards, >> Shagun >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdC >> A6hocGAkM=?d=jdUOEa0ursy6vviA72Wp9CQyzmNZP0ZhevOrPVBV93kfSdUe78CIUBKV >> Vt6xyIm5Y6SyitPu2KPA0ZGPNr5i96qIZELuM-zDuX-IcuPAbZtv9AIDkJ5sr21UTb0Pj >> QLFAB288PhGEyycPWXt6EcXQP4v75ttvql-G_l869C_llOrrtHDCxvG5N4tEBkTHwMA0Y >> 2NdN16Xz3TyRWMbTpUywmcFKgiWH39hDRz50bU4bEX5OoEqu5GwbkgYVm0wClHPhkWTB6 >> s2ljnB-_WaTuJTIyAqE92od3J9izxcFd-XfdbM8iNC4zZhyaL9UZinHIkddJdNI0zq8RF >> ZXXiXP90NcKqdy9-sKPHjq12lAdprOZoFtvUCIJXX3NKhw%3D%3D&u=https%3A%2F%2F >> lists.centos.org%2Fmailman%2Flistinfo%2Fcentos >> > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdCA > 6hocGAkM=?d=jdUOEa0ursy6vviA72Wp9CQyzmNZP0ZhevOrPVBV93kfSdUe78CIUBKVVt > 6xyIm5Y6SyitPu2KPA0ZGPNr5i96qIZELuM-zDuX-IcuPAbZtv9AIDkJ5sr21UTb0PjQLF > AB288PhGEyycPWXt6EcXQP4v75ttvql-G_l869C_llOrrtHDCxvG5N4tEBkTHwMA0Y2NdN > 16Xz3TyRWMbTpUywmcFKgiWH39hDRz50bU4bEX5OoEqu5GwbkgYVm0wClHPhkWTB6s2ljn > B-_WaTuJTIyAqE92od3J9izxcFd-XfdbM8iNC4zZhyaL9UZinHIkddJdNI0zq8RFZXXiXP > 90NcKqdy9-sKPHjq12lAdprOZoFtvUCIJXX3NKhw%3D%3D&u=https%3A%2F%2Flists.c > entos.org%2Fmailman%2Flistinfo%2Fcentos I think this was a bug in 7.2 have you updated your rpms. Peerdns ignored. Regards peter Sent with AquaMail for Android https://clicktime.symantec.com/a/1/dZe0_kxJdxrnAK4hEWUQEI2odnKSB2kkoxl3Vuci… ------------------------------ Message: 3 Date: Thu, 21 Jun 2018 16:24:04 +0200 From: G?tz Reinicke <goetz.reinicke(a)filmakademie.de> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Updated krb5 rpm package altered existing krb5.conf - No go Message-ID: <45ACB559-6295-4269-97EC-7353970C9F6F(a)filmakademie.de> Content-Type: text/plain; charset=utf-8 > Am 18.06.2018 um 16:33 schrieb me(a)tdiehl.org: > > On Mon, 18 Jun 2018, G?tz Reinicke wrote: > >> >> >>> Am 15.06.2018 um 01:04 schrieb Gordon Messmer <gordon.messmer(a)gmail.com>: >>> >>> On 06/14/2018 09:30 AM, me(a)tdiehl.org wrote: >>>> On Thu, 14 Jun 2018, Richard Grainger wrote: >>>> >>>>> I looked at the spec file in the source RPM for the krb5-libs >>>>> package and it it has the correct %config(noreplace) directive >>>>> next to that file in the %files section, so this is mysterious. >>>> >>>> I too can confirm this behavior. >>> >>> # rpm -qa krb\* --triggers >>> triggerun scriptlet (using /bin/sh) -- krb5-libs < 1.15.1-13 if ! >>> grep -q 'includedir /etc/krb5.conf.d' /etc/krb5.conf ; then >>> sed -i '1i # Other applications require this directory to perform >>> krb5 configuration.\nincludedir /etc/krb5.conf.d/\n' /etc/krb5.conf >>> fi >>> >>> >>> Looks like that's the culprit. >> >> >> Good to know, but writing a rpmnew or rpmsave file would be nice to check against the life used file. > > Agreed! IMO this is a packaging bug. Triggers do not drop rpmsave > files. I suspect the chances of getting Red Hat to fix it are slim to none. Fixing it would most likely break other things for them. > >> >> The samba people are aware of that problem regarding the include line and are working on a patch ? the support at SerNet told me. > > I agree they are aware of it but I suspect it is a low priority thing > given they have known about this since 2016-12-29. > > I do think it would be relatively easy for SerNet to patch around in > their paid for rpms. alas I do not have the budget for them. :-( > > The bug is available at > https://clicktime.symantec.com/a/1/VxaZZYzfeWRqqUBqdb5dituD6zJkUGPZLQ4 > oVo5wQHg=?d=jdUOEa0ursy6vviA72Wp9CQyzmNZP0ZhevOrPVBV93kfSdUe78CIUBKVVt > 6xyIm5Y6SyitPu2KPA0ZGPNr5i96qIZELuM-zDuX-IcuPAbZtv9AIDkJ5sr21UTb0PjQLF > AB288PhGEyycPWXt6EcXQP4v75ttvql-G_l869C_llOrrtHDCxvG5N4tEBkTHwMA0Y2NdN > 16Xz3TyRWMbTpUywmcFKgiWH39hDRz50bU4bEX5OoEqu5GwbkgYVm0wClHPhkWTB6s2ljn > B-_WaTuJTIyAqE92od3J9izxcFd-XfdbM8iNC4zZhyaL9UZinHIkddJdNI0zq8RFZXXiXP > 90NcKqdy9-sKPHjq12lAdprOZoFtvUCIJXX3NKhw%3D%3D&u=https%3A%2F%2Fbugzill > a.samba.org%2Fshow_bug.cgi%3Fid%3D12488 > <https://clicktime.symantec.com/a/1/VxaZZYzfeWRqqUBqdb5dituD6zJkUGPZLQ > 4oVo5wQHg=?d=jdUOEa0ursy6vviA72Wp9CQyzmNZP0ZhevOrPVBV93kfSdUe78CIUBKVV > t6xyIm5Y6SyitPu2KPA0ZGPNr5i96qIZELuM-zDuX-IcuPAbZtv9AIDkJ5sr21UTb0PjQL > FAB288PhGEyycPWXt6EcXQP4v75ttvql-G_l869C_llOrrtHDCxvG5N4tEBkTHwMA0Y2Nd > N16Xz3TyRWMbTpUywmcFKgiWH39hDRz50bU4bEX5OoEqu5GwbkgYVm0wClHPhkWTB6s2lj > nB-_WaTuJTIyAqE92od3J9izxcFd-XfdbM8iNC4zZhyaL9UZinHIkddJdNI0zq8RFZXXiX > P90NcKqdy9-sKPHjq12lAdprOZoFtvUCIJXX3NKhw%3D%3D&u=https%3A%2F%2Fbugzil > la.samba.org%2Fshow_bug.cgi%3Fid%3D12488> Patched https://clicktime.symantec.com/a/1/HFkDaIm7MZYydWwFqssly0lRa9BWoWEEbokgCi9n… <https://clicktime.symantec.com/a/1/HFkDaIm7MZYydWwFqssly0lRa9BWoWEEbokgCi9n…> /G?tz ------------------------------ Message: 4 Date: Thu, 21 Jun 2018 12:31:56 -0400 From: "James B. Byrne" <byrnejb(a)harte-lyne.ca> To: "Gordon Messmer" <gordon.messmer(a)gmail.com> Cc: centos(a)centos.org Subject: Re: [CentOS] CentOS-6.9 Bind-9.8.2 error messages Message-ID: <2720c48e462a326dad3d716c31325f43.squirrel(a)webmail.harte-lyne.ca> Content-Type: text/plain;charset=iso-8859-1 On Wed, June 20, 2018 15:37, Gordon Messmer wrote: > On 06/20/2018 11:19 AM, James B. Byrne via CentOS wrote: >> I am encountering messages similar to this in the system logfile: >> >> Jun 20 13:38:18 inet03 named[3720]: malformed transaction: >> dynamic/efa1f375d76194fa51a3556a97e641e61685f914d446979da50a551a4333f >> fd7.mkeys.jnl last serial 103538 != transaction first serial 103361 >> >> I have no idea what this means, what caused it, nor how to fix it. >> Any suggestions relevant to any of the above are most welcome. >> > > I think I've seen this before.?? Are you auto-signing a zone for > DNSSEC, Yes > and does that zone appear in multiple views? No I stopped and restarted the BIND daemon and this appears to have corrected whatever issue was causing the errors to be generated. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited https://clicktime.symantec.com/a/1/3qm1WpYWfhhR3CL-f_FUJqUD_XpMj733hnnofUT2… 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ------------------------------ Message: 5 Date: Thu, 21 Jun 2018 13:28:38 -0400 (EDT) From: Robert Heller <heller(a)deepsoft.com> To: centos(a)centos.org <centos(a)centos.org> Subject: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <20180621172838.D768226C2619(a)sharky3.deepsoft.com> Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently not compatible with postfix + procmail. I need an imap daemon that will work with a postfix + procmail system. -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services https://clicktime.symantec.com/a/1/eGcBdmqkFYbaGxldXqPflUsBamhj9GghI-bEbhZq… -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services ------------------------------ Message: 6 Date: Thu, 21 Jun 2018 13:32:16 -0400 From: "James (CentOS ML)" <centos(a)edwards.technology> To: CentOS mailing list <centos(a)centos.org> Cc: Robert Heller <heller(a)deepsoft.com> Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <b979bb1c0e1247e3b3e0b2e0de223952(a)edwards.technology> Content-Type: text/plain; charset=US-ASCII; format=flowed On 2018-06-21 13:28, Robert Heller wrote: > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is > appearently not compatible with postfix + procmail. I need an imap > daemon that will work with a postfix + procmail system. Try dovecot, I use that personally. There also appears to be good documentation for dovecot+procmail as well - https://clicktime.symantec.com/a/1/2p8upgUG3dyM_D-qXYLbNH70qIQuJaYvhV0kviNB… ------------------------------ Message: 7 Date: Thu, 21 Jun 2018 11:34:18 -0600 From: Frank Cox <theatre(a)sasktel.net> To: centos(a)centos.org Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <20180621113418.d7bd532565881109733f561e(a)sasktel.net> Content-Type: text/plain; charset=US-ASCII On Thu, 21 Jun 2018 13:28:38 -0400 (EDT) Robert Heller wrote: > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently > not compatible with postfix + procmail. I need an imap daemon that will work > with a postfix + procmail system. I use dovecot with postfix and procmail; works fine. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com ------------------------------ Message: 8 Date: Thu, 21 Jun 2018 20:42:50 +0200 From: "Walter H." <Walter.H(a)mathemainzel.info> To: centos(a)centos.org Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <5B2BF1AA.5030007(a)mathemainzel.info> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 21.06.2018 19:28, Robert Heller wrote: > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently > not compatible with postfix + procmail. I need an imap daemon that will work > with a postfix + procmail system. > the problem seems to be procmail, I use postfix and cyrus-imapd with no problems; ------------------------------ Message: 9 Date: Thu, 21 Jun 2018 14:49:09 -0400 From: Jonathan Billings <billings(a)negate.org> To: centos(a)centos.org Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <20180621184909.GE1693(a)caen-tethys.engin.umich.edu> Content-Type: text/plain; charset=us-ascii On Thu, Jun 21, 2018 at 01:28:38PM -0400, Robert Heller wrote: > > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is > appearently not compatible with postfix + procmail. I need an imap > daemon that will work with a postfix + procmail system. I suggest dovecot if you don't want to deal with Cyrus IMAP, but I can tell you from first-hand experience that you used to be able to use procmail to deliver to Cyrus IMAP, using 'deliver'. However, if you get postfix to deliver directly via lmtp, you can take advantage of SIEVE to filter your mail, which is quite powerful. (I miss it, work migrated to Google Apps and its filters are subpar.) -- Jonathan Billings <billings(a)negate.org> ------------------------------ Message: 10 Date: Thu, 21 Jun 2018 13:03:03 -0700 From: Gordon Messmer <gordon.messmer(a)gmail.com> To: centos(a)centos.org Subject: Re: [CentOS] Specifying different options for different " smb" type gvfs mount Message-ID: <b038b2e3-4f15-6890-3264-f11ca1136b88(a)gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed On 06/21/2018 05:09 AM, John Hodrien wrote: > On Thu, 21 Jun 2018, Toralf Lund wrote: > >> I known that I might use mount.cifs and related "fstab" entries as an >> alternative, but its password handling seems a lot less convenient. > > If you're in an AD environment, you can probably do nicely with > mount.cifs: > sec=krb5,multiuser > That way you don't have to deal with usernames/passwords at all. Interesting.? Seems like a lot of setup, but it's interesting.? I didn't know SMB supported this: https://clicktime.symantec.com/a/1/C-MtUYKskiDqrOo6AjZ3TiEoE538EEMOIEdNoqih… ------------------------------ Message: 11 Date: Thu, 21 Jun 2018 17:23:31 -0400 (EDT) From: Robert Heller <heller(a)deepsoft.com> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <20180621212332.3ECAA26C288A(a)sharky3.deepsoft.com> At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> wrote: > > On 21.06.2018 19:28, Robert Heller wrote: > > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently > > not compatible with postfix + procmail. I need an imap daemon that will work > > with a postfix + procmail system. > > > the problem seems to be procmail, I use postfix and cyrus-imapd with no > problems; No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use imap (or pop3) to access their E-Mail. It does not allow for other E-Mail methodologies, including using local UNIX utilies (eg mail or pine or mh or other tools like QWK). I have uninstalled cyrus-imapd and installed dovecot instead. This actually works. dovecot is even happy to use a Let's Encrypt cert for SSL. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdCA6hocG… > > -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services https://clicktime.symantec.com/a/1/eGcBdmqkFYbaGxldXqPflUsBamhj9GghI-bEbhZq… -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services ------------------------------ Message: 12 Date: Thu, 21 Jun 2018 16:29:29 -0500 From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> To: centos(a)centos.org Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <aa9ec9d3-e762-3c2b-91ba-ea50e7b9ded9(a)kicp.uchicago.edu> Content-Type: text/plain; charset=utf-8; format=flowed On 06/21/18 16:23, Robert Heller wrote: > At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> wrote: > >> >> On 21.06.2018 19:28, Robert Heller wrote: >>> Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently >>> not compatible with postfix + procmail. I need an imap daemon that will work >>> with a postfix + procmail system. >>> >> the problem seems to be procmail, I use postfix and cyrus-imapd with no >> problems; > > No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use > imap (or pop3) to access their E-Mail. It does not allow for other E-Mail > methodologies, including using local UNIX utilies (eg mail or pine or mh or > other tools like QWK). > > I have uninstalled cyrus-imapd and installed dovecot instead. This actually > works. dovecot is even happy to use a Let's Encrypt cert for SSL. I use postfix + dovecot since forever. I recently switched from amavisd-new to maia. It probably is same simple on Linux as it is on FreeBSD - I have servers under FreeBSD (or rather multiple jails on FreeBSD box). Good luck! Valeri > >> >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdCA6hocG… >> >> > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ ------------------------------ Message: 13 Date: Thu, 21 Jun 2018 18:46:01 -0300 From: Marcelo Ricardo Leitner <marcelo.leitner(a)gmail.com> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <20180621214559.GA27219(a)localhost.localdomain> Content-Type: text/plain; charset=us-ascii On Thu, Jun 21, 2018 at 05:23:31PM -0400, Robert Heller wrote: > At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> wrote: > > > > > On 21.06.2018 19:28, Robert Heller wrote: > > > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently > > > not compatible with postfix + procmail. I need an imap daemon that will work > > > with a postfix + procmail system. > > > > > the problem seems to be procmail, I use postfix and cyrus-imapd with no > > problems; > > No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use > imap (or pop3) to access their E-Mail. It does not allow for other E-Mail > methodologies, including using local UNIX utilies (eg mail or pine or mh or > other tools like QWK). So it's not that postfix + procmail + cyrus doesn't work, but that you have a requirement that cyrus can't fulfill. ------------------------------ Message: 14 Date: Thu, 21 Jun 2018 16:51:12 -0500 From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> To: centos(a)centos.org Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <a82ade4c-4892-0840-970b-184061e686e1(a)kicp.uchicago.edu> Content-Type: text/plain; charset=utf-8; format=flowed On 06/21/18 16:46, Marcelo Ricardo Leitner wrote: > On Thu, Jun 21, 2018 at 05:23:31PM -0400, Robert Heller wrote: >> At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> wrote: >> >>> >>> On 21.06.2018 19:28, Robert Heller wrote: >>>> Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently >>>> not compatible with postfix + procmail. I need an imap daemon that will work >>>> with a postfix + procmail system. >>>> >>> the problem seems to be procmail, I use postfix and cyrus-imapd with no >>> problems; >> >> No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use >> imap (or pop3) to access their E-Mail. It does not allow for other E-Mail >> methodologies, including using local UNIX utilies (eg mail or pine or mh or >> other tools like QWK). Just a bit of correction. Pine (which is so old, alpine replaced it) or alpine you can configure to talk through IMAP protocol, then it will not matter what sort of IMAP server do you have. Just minor correction. Valeri > > So it's not that postfix + procmail + cyrus doesn't work, but that you > have a requirement that cyrus can't fulfill. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdCA6hocG… > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ ------------------------------ Message: 15 Date: Thu, 21 Jun 2018 17:51:39 -0400 From: Jonathan Billings <billings(a)negate.org> To: centos(a)centos.org Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <20180621215139.dzzq57snoncik746@raspi3> Content-Type: text/plain; charset=us-ascii On Thu, Jun 21, 2018 at 05:23:31PM -0400, Robert Heller wrote: > No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use > imap (or pop3) to access their E-Mail. It does not allow for other E-Mail > methodologies, including using local UNIX utilies (eg mail or pine or mh or > other tools like QWK). I suppose it shouldn't be a huge surprise that an IMAP server expects you to use IMAP. The backend uses its own files in a manner that is optimised for running IMAP, which improves performance and load on the server. If you're using dovecot, at least try to avoid using mbox format, due to how terrible it is for performance. -- Jonathan Billings <billings(a)negate.org> ------------------------------ Message: 16 Date: Fri, 22 Jun 2018 09:24:53 +0100 (BST) From: John Hodrien <J.H.Hodrien(a)leeds.ac.uk> To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Specifying different options for different " smb" type gvfs mount Message-ID: <nycvar.YEU.7.76.1806220912370.31795(a)pbzc-cp3201.yrrqf.np.hx> Content-Type: text/plain; charset=utf-8; format=flowed On Thu, 21 Jun 2018, Gordon Messmer wrote: > On 06/21/2018 05:09 AM, John Hodrien wrote: >> On Thu, 21 Jun 2018, Toralf Lund wrote: >> >>> I known that I might use mount.cifs and related "fstab" entries as an >>> alternative, but its password handling seems a lot less convenient. >> >> If you're in an AD environment, you can probably do nicely with >> mount.cifs: >> sec=krb5,multiuser >> That way you don't have to deal with usernames/passwords at all. > > Interesting.? Seems like a lot of setup, but it's interesting.? I didn't know > SMB supported this: > > https://clicktime.symantec.com/a/1/C-MtUYKskiDqrOo6AjZ3TiEoE538EEMOIEdNoqih… That article makes it sound a whole lot harder than it is, as almost all of that is pre done in later versions of CentOS. You don't have to configure the upcall stuff as it's already done, you don't need to generate a credential cache for root as it can just use the keytab, and if you've already setup a machine to talk to AD with SSSD you've probably done everything else. Paired with wildcard automount entries, and you end up in a very usable setup with minimal config. jh ------------------------------ Message: 17 Date: Fri, 22 Jun 2018 10:31:45 +0200 From: "Walter H." <walter.h(a)mathemainzel.info> To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <bac82dd69b099fc5dc37c0766f5b4a95.1529656305(a)squirrel.mail> Content-Type: text/plain;charset=utf-8 On Thu, June 21, 2018 23:23, Robert Heller wrote: > At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> > wrote: > >> >> On 21.06.2018 19:28, Robert Heller wrote: >> > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is >> appearently >> > not compatible with postfix + procmail. I need an imap daemon that >> will work >> > with a postfix + procmail system. >> > >> the problem seems to be procmail, I use postfix and cyrus-imapd with no >> problems; > > No actually the problem is cyrus-imapd: cyrus-imapd expects all users to > use > imap (or pop3) to access their E-Mail. of course, what else do you expect? (SSL is not the problem, as I'm using cyrus-imapd with SSL) Walter ------------------------------ Message: 18 Date: Fri, 22 Jun 2018 10:43:20 +0200 From: "Walter H." <walter.h(a)mathemainzel.info> To: "CentOS mailing list" <centos(a)centos.org> Subject: Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd) Message-ID: <841a958996ff749537ac6f066a6b1283.1529657000(a)squirrel.mail> Content-Type: text/plain;charset=utf-8 On Thu, June 21, 2018 23:23, Robert Heller wrote: > At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> wrote: > >> >> On 21.06.2018 19:28, Robert Heller wrote: >> > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is >> appearently >> > not compatible with postfix + procmail. I need an imap daemon that >> will work >> > with a postfix + procmail system. >> > >> the problem seems to be procmail, I use postfix and cyrus-imapd with no problems; > > No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use > imap (or pop3) to access their E-Mail. of course, what else do you expect? (SSL is not the problem, as I'm using cyrus-imapd with SSL) here my settings in /etc/imapd.conf tls_cert_file: /etc/pki/cyrus-imapd/tls.crt/mail-host.crt tls_key_file: /etc/pki/cyrus-imapd/tls.key/mail-host.key tls_ca_file: /etc/pki/cyrus-imapd/tls.crt/server-chain-sslca.crt tls_cipher_list: EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA:EECDH:EDH+AESGCM:EDH:ECDH+AESGCM:ECDH+AES:ECDH:AES:HIGH:MEDIUM:3DES:!SSLv2:+SSLv3:!RC4:!MD5:!IDEA:!SEED:!aNULL:!eNULL:!LOW:!EXP:!DSS:!PSK:!SRP tls_prefer_server_ciphers: 1 tls_versions: tls1_0 tls1_1 tls1_2 Walter ------------------------------ Subject: Digest Footer _______________________________________________ CentOS mailing list CentOS(a)centos.org https://clicktime.symantec.com/a/1/GaRh-9mT7pT2BGk25Szya6j4lyfBTXokdCA6hocG… ------------------------------ End of CentOS Digest, Vol 161, Issue 22 ***************************************

1 0

failed to start guest with "<interface type='hostdev'>" type vf
by Maheshwari, Shagun 25 Jun '18

25 Jun '18

Hi, Issue mentioned in https://bugzilla.redhat.com/show_bug.cgi?id=1066825 is marked as fixed in CentOS 7. However I still see issue in CentOS 7 Domain vWAAS-12KK defined from vWAAS-12KK/vWAAS-12KK.xml error: Failed to start domain vWAAS-12KK error: internal error: couldn't find IFLA_VF_INFO for VF 2 in netlink response Domain vWAAS-12KK marked as autostarted Done launching [root@localhost home]# virsh list Id Name State ---------------------------------------------------- [root@localhost home]# [root@localhost home]# [root@localhost home]# virsh list --all Id Name State ---------------------------------------------------- - vWAAS-12KK shut off I can share more info if needed. Regards, Shagun

1 0

cannot print graphics from document viewer
by Michael Hennebry 24 Jun '18

24 Jun '18

I'm running KDE under C7. When I print a pdf from the document viewer, graphics does not come through, not even on print to file. lp will print the graphics. Any ideas on what is happening or what I can do about it? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

1 0

CentOS-announce Digest, Vol 160, Issue 5
by centos-announce-request＠centos.org 23 Jun '18

23 Jun '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:1957 Important CentOS 7 git Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 22 Jun 2018 17:15:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:1957 Important CentOS 7 git Security Update Message-ID: <20180622171523.GA41205(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:1957 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:1957 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 167fd79268f2b8fdfa6ee58092dcaf8236ccca141d5f7eae97ecfeed7ecd7b43 emacs-git-1.8.3.1-14.el7_5.noarch.rpm 55b0c4b3ae8ec08ef3ffd76cd439c8c9c7a8b14f0b3f2ba360a1e92f308eab4c emacs-git-el-1.8.3.1-14.el7_5.noarch.rpm fd449c6043c02bc1b4f887c0a2a49a363876ff74dca584193d0e0b2d2f626ad7 git-1.8.3.1-14.el7_5.x86_64.rpm a5c0ae80f60567126c4b5a6064f35f47b204225b4af133b86e6d1f95670f936b git-all-1.8.3.1-14.el7_5.noarch.rpm be9132d10409efd7ab01d6be469d2a0adf43bfcadeb7f4baeeb4ca1d0b398153 git-bzr-1.8.3.1-14.el7_5.noarch.rpm 62869df37659056de226a727e39c68e970912b4234195426d4be81f237e8c401 git-cvs-1.8.3.1-14.el7_5.noarch.rpm 1bbfbc68feb28abb5287f446ec3e7793fed9d02ec82ce6b1988de6a545e916f8 git-daemon-1.8.3.1-14.el7_5.x86_64.rpm c47eb38ac2d722f42506456386fcce3e9189d393440915e51d89ff62550541db git-email-1.8.3.1-14.el7_5.noarch.rpm c5bbdb6ba3c98007b2499cac78be95477e7af8a973e806e485556af2149f9289 git-gui-1.8.3.1-14.el7_5.noarch.rpm b3ba3bf4e07d848ecd00f27fda64f5fa29ace32b7057f67508181abb540e3498 git-hg-1.8.3.1-14.el7_5.noarch.rpm 3827997cf98b18a3c8772971b0b2e1d95047ec05c463d714d2e54f7b43fa0176 gitk-1.8.3.1-14.el7_5.noarch.rpm 4b37b601b4d5ebdafd001bd2030245f31380941d782c8ede357a166ed82fc890 git-p4-1.8.3.1-14.el7_5.noarch.rpm 76c0b861bef3543ed2d9b9f9816036417432ab8310ff26ade51fd41d37f8e44a git-svn-1.8.3.1-14.el7_5.x86_64.rpm 65d06e031321d768b1cf6828d745621777a596e220cc15cc9078435ee10ba67a gitweb-1.8.3.1-14.el7_5.noarch.rpm b83ca338e62ff77dbc73e0f35f1501cc7164d936d1b54f47dbbbdc0626490bec perl-Git-1.8.3.1-14.el7_5.noarch.rpm b5875a3f8d0a8e228625d5c9f59cf8116ab5112fcdb58d9ef2957a2dbd6123ec perl-Git-SVN-1.8.3.1-14.el7_5.noarch.rpm Source: 2877d887cac48bd998e54341ed6534afb0508759cddc6bee1cac899b3a3173b1 git-1.8.3.1-14.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 160, Issue 5 ***********************************************

1 0

Re: [CentOS] CentOS-6.9 Bind-9.8.2 error messages
by James B. Byrne 22 Jun '18

22 Jun '18

On Wed, June 20, 2018 15:37, Gordon Messmer wrote: > On 06/20/2018 11:19 AM, James B. Byrne via CentOS wrote: >> I am encountering messages similar to this in the system logfile: >> >> Jun 20 13:38:18 inet03 named[3720]: malformed transaction: >> dynamic/efa1f375d76194fa51a3556a97e641e61685f914d446979da50a551a4333ffd7.mkeys.jnl >> last serial 103538 != transaction first serial 103361 >> >> I have no idea what this means, what caused it, nor how to fix it. >> Any suggestions relevant to any of the above are most welcome. >> > > I think I've seen this before.Â Are you auto-signing a zone for > DNSSEC, Yes > and does that zone appear in multiple views? No I stopped and restarted the BIND daemon and this appears to have corrected whatever issue was causing the errors to be generated. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd)
by Walter H. 22 Jun '18

22 Jun '18

On Thu, June 21, 2018 23:23, Robert Heller wrote: > At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list <centos(a)centos.org> wrote: > >> >> On 21.06.2018 19:28, Robert Heller wrote: >> > Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is >> appearently >> > not compatible with postfix + procmail. I need an imap daemon that >> will work >> > with a postfix + procmail system. >> > >> the problem seems to be procmail, I use postfix and cyrus-imapd with no problems; > > No actually the problem is cyrus-imapd: cyrus-imapd expects all users to use > imap (or pop3) to access their E-Mail. of course, what else do you expect? (SSL is not the problem, as I'm using cyrus-imapd with SSL) here my settings in /etc/imapd.conf tls_cert_file: /etc/pki/cyrus-imapd/tls.crt/mail-host.crt tls_key_file: /etc/pki/cyrus-imapd/tls.key/mail-host.key tls_ca_file: /etc/pki/cyrus-imapd/tls.crt/server-chain-sslca.crt tls_cipher_list: EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA:EECDH:EDH+AESGCM:EDH:ECDH+AESGCM:ECDH+AES:ECDH:AES:HIGH:MEDIUM:3DES:!SSLv2:+SSLv3:!RC4:!MD5:!IDEA:!SEED:!aNULL:!eNULL:!LOW:!EXP:!DSS:!PSK:!SRP tls_prefer_server_ciphers: 1 tls_versions: tls1_0 tls1_1 tls1_2 Walter

1 0

Imap daemons for CentOS 6 (other then cyrus-imapd)
by Robert Heller 22 Jun '18

22 Jun '18

Are there any imap daemons (besides cyrus-imapd). cyrus-imapd is appearently not compatible with postfix + procmail. I need an imap daemon that will work with a postfix + procmail system. -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

7 10

Updated krb5 rpm package altered existing krb5.conf - No go
by Götz Reinicke 21 Jun '18

21 Jun '18

Hi, I did an centos update from 7.4 to 7.5 and the krb5 package altered the existing and used config file! That should be a no go from my pov, as in my setup it broke some services which had a problem with the includedir line which was added. Shouldn*t there be a rpmnew config file be created instead with the new/optional/added settings? Regards . Götz

4 8

NetworkManager updating resolv.cfg
by Maheshwari, Shagun 21 Jun '18

21 Jun '18

Hi, I am facing issue stoping NetworkManager to update resolv.cfg, I am using below configuration for eth0 interface: TYPE=Ethernet BOOTPROTO=dhcp DEFROUTE=yes IPV4_FAILURE_FATAL=no IPV6INIT=yes IPV6_AUTOCONF=yes IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no IPV6_ADDR_GEN_MODE=stable-privacy NAME=eth0 UUID=93b90a46-dab5-4a67-8fd0-fefe8874a8b9 DEVICE=eth0 ONBOOT=no PEERDNS=no PEERROUTES=yes IPV6_PEERDNS=yes IPV6_PEERROUTES=yes DNS1=<ipv4 address> DNS2=<ipv6 address> Also, added dns=none in NetworkManager.conf file. Whenever I am restarting NetworkManager, resolv.cfg gets updated and only ipv4 nameserver is displaced, whether I am expecting both the ips (ipv6 and ipv4 address to be present in resolv.cfg file. Any suggestion here, how to achieve that?? Regards, Shagun

3 2

Volunteers wanted: CentOS booth at DevConf.us
by Rich Bowen 20 Jun '18

20 Jun '18

DevConf.us will be held in Boston, August 17th - 19th. CentOS will have a booth/table in the expo area, and we need your help staffing that table. If you are able to volunteer for an hour (or more) to staff the table, please sign up here: https://docs.google.com/spreadsheets/d/1KDVgTO4M4UFdtONRHAjKTFRnwUMk4P2tTkZ… Volunteers will receive their choice of a CentOS polo shirt, or a CentOS long sleeve button-up shirt. Thanks. -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

CentOS-6.9 Bind-9.8.2 error messages
by James B. Byrne 20 Jun '18

20 Jun '18

I am encountering messages similar to this in the system logfile: Jun 20 13:38:18 inet03 named[3720]: malformed transaction: dynamic/efa1f375d76194fa51a3556a97e641e61685f914d446979da50a551a4333ffd7.mkeys.jnl last serial 103538 != transaction first serial 103361 I have no idea what this means, what caused it, nor how to fix it. Any suggestions relevant to any of the above are most welcome. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

gnome-shell killing KDE
by Michael Hennebry 19 Jun '18

19 Jun '18

I'm running KDE on C7, so why would I have a gnome-shell process spending rather a lot of its time in D mode? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

Problem with Network devices on boot
by Günther J. Niederwimmer 19 Jun '18

19 Jun '18

hello, I have a question about network devices ?? on my systems Centos 7.5 I have a Problem with starting Network devices! I set up two servers with KVM on the first I have 6 KVM installed Systems on the second I have 5 KVM installed systems? When I have to reboot my system (Kernel update....) the most time one Network Device is missing on the KVM Clients (eth0) I have configured my system with I/O Shared Network like this xxx.xml <interface type='hostdev' managed='yes'> <mac address='XX:XX:XX:XX:XX:XX'/> <source> <address type='pci' domain='0x0000' bus='0x03' slot='0x13' function='0x1'/> </source> <address type='pci' domain='0x0000' bus='0x00' slot='0x0a' function='0x0'/> </interface> and a second one! <interface type='hostdev' managed='yes'> ......... ............ This Interfaces are always starting But I have also a Bridge on the systems (eth0) configure for internal Networking (DNS, LDAP.....) <interface type='bridge'> <mac address='XX:XX:XX:XX:XX:XX'/> <source bridge='br0'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> This interface is failing the most time on some KVM Installs!! I have always to check is the Interface starting or not?? AFter 2 or 3 reboot with virsh reboot xxxxx the system is starting most time with the third Interface ! Can any tell me why this Problem exist?? Thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

1 0

CentOS Kernel Support
by Ken Young 18 Jun '18

18 Jun '18

Is anyone on the mailing list aware of anyone who supports older versions of CentOS kernels? Particularly, I am interested in getting security patches added to kernel-3.10.0-514.10.2.el7.src.rpm. Please let me know. Regards, Ken Y

9 16

Re: [CentOS] Passwords in plain text
by Richard 18 Jun '18

18 Jun '18

> Date: Monday, June 18, 2018 07:57:56 -0500 > From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> >> I agree with you .. unfortunately, gmail does not. They have >> enabled it for gmail users .. so if someone from yahoo xends a >> mail from a yahoo address, it gets rejected by gmail accounts. >> The list setting wrt dmarc doesn't matter .. it is totally gmail >> enabling it. >> >> What our settings do is NOT send the From (as the original >> sender), if the sender is on a domain where dmarc is enabled, so >> that gmail does not reject it. >> >> If it is rejected by gmail .. it causes (eventually) .. not he >> sender's, but the recipient's account on gmail to be disabled by >> the mailing list as non-existent. > > I'm surprised no one arrived at conclusion: don't use gmail then. > > Valeri > >> [OT] My (non-gmail) mail hosting provider also enforces the DMARC settings that others put in place, so this isn't (just) a gmail issue. Most people in the field find the p=reject setting that yahoo is using to be less than optimal, and come to the conclusion that the best course of action it to avoid sending mail (specifically to mailing lists) from such providers. All places like my provider and gmail are doing is enforcing the standard. That others have selected poorly considered settings is the fault of the site making those selections, not the site doing the enforcing of the standard. [the DMARC notifications are, in my view, a very serious privacy leak, so it should be avoided, but that's a whole separate off-topic discussion.] - Richard

1 0

Re: [CentOS] Passwords in plain text
by Richard 18 Jun '18

18 Jun '18

> Date: Friday, June 15, 2018 14:55:21 -0700 > From: Akemi Yagi <amyagi(a)gmail.com> > > On Fri, Jun 15, 2018 at 9:57 AM, Gianluca Cecchi > <gianluca.cecchi(a)gmail.com> wrote: >> >> Il Ven 15 Giu 2018, 18:45 Larry Martell <larry.martell(a)gmail.com> >> ha scritto: >> >>> On Fri, Jun 15, 2018 at 12:41 PM rj coleman >>> <rjcdevelop(a)gmail.com> wrote: >>> >>> > Am I the only one who just received this email from this group? >>> > Which came with my password in the email in plain text? > >>> > > Your membership in the mailing list CentOS has been disabled >>> > > due to excessive bounces The last bounce received from you >>> > > was dated 15-Jun-2018. You will not get any more messages >>> > > from this list until you re-enable your membership. You will >>> > > receive 3 more reminders like this before your membership in >>> > > the list is deleted. >>> > > >>> I got it as well. >>> >> Mee too > > I also received the "has been disabled" notification. It looks like > users with gmail addresses are affected. > > CentOS admins are looking into this issue (I believe). > > Akemi I believe this is a DMARC issue. Yahoo, among other places, has set their dmarc records to p=reject: dig +short txt _dmarc.yahoo.com "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_y_rua@yahoo.com;" So, if your mail hosting provider enforces dmarc,(gmail does) and you get mail from a list that doesn't rewrite the headers, and people from places like yahoo post to the list, you'll likely get some form of warning about being being kicked off the mailing list every now and then. The frequency depends on how often people from p=reject places post, and what the settings are for bounce handling of the mailing list in question. I believe that the current version of mailman can be configured to do the necessary header rewrites. Some lists I'm on only do the rewrites for headers of posts coming from p=reject sites (much less annoying than having them all rewritten).

8 12

DMARC test , please ignore (eom)
by Fabian Arrotin 18 Jun '18

18 Jun '18

1 0

wildcard certificate
by Jerry Geis 16 Jun '18

16 Jun '18

Hi all - I am trying to figure out how to add a wild card certificate given to me for a CentOS installation. I have a script that sets up HTTPS so I am a little familiar with things - but they provided me two files: name_ee.crt name_i1.crt I'm not sure how to apply that to the /etc/httpd/conf.d/ssl.conf file? Anyone done that before ? My initial searches were not helpful. Thanks, Jerry

5 8

CentOS-announce Digest, Vol 160, Issue 4
by centos-announce-request＠centos.org 16 Jun '18

16 Jun '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:1852 Moderate CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 16 Jun 2018 10:49:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:1852 Moderate CentOS 7 kernel Security Update Message-ID: <20180616104953.GA65098(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:1852 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:1852 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ea66a974143f533fddeffe8f3f1cd32c86c4e3f253622959d0c10e6efb4ab3c3 kernel-3.10.0-862.3.3.el7.x86_64.rpm 64f2e56ed123e1a167d317e003e21c40d1dcfb48305ba3c6c78d07731dd16741 kernel-abi-whitelists-3.10.0-862.3.3.el7.noarch.rpm e3337bc41e6c09efbd66931c6247383f9cb6b771f1e22b91d54cd90372a50e15 kernel-debug-3.10.0-862.3.3.el7.x86_64.rpm 41d72ae15f786aebf0cd63bb30a70d876247fa22ea7d4577b847c8b83aef12b4 kernel-debug-devel-3.10.0-862.3.3.el7.x86_64.rpm 3f870fdf26b2e000a061d7dd31d7742ca36127e5f7db7b87556612e808e680ae kernel-devel-3.10.0-862.3.3.el7.x86_64.rpm d2ee86a99c5fae77d7984dd087502a636bd5115ed3b93e3166014a65466f07ed kernel-doc-3.10.0-862.3.3.el7.noarch.rpm be7972c92f9ef5bebc69912025e18090a7850c0d1f6186fdb28816c4d43f9ada kernel-headers-3.10.0-862.3.3.el7.x86_64.rpm fceece180472bab1d582834e2673711ad29406cf50fe42445ffebd07f1d0b677 kernel-tools-3.10.0-862.3.3.el7.x86_64.rpm 76f864788ce7c4debc1d9252e78051b6f4e0baeabb1fb582370dfcc878f1b9f6 kernel-tools-libs-3.10.0-862.3.3.el7.x86_64.rpm 329fc0513bebdccc20cf02d282ac006bee327bc0f57d0882b2c07ab4bbce6302 kernel-tools-libs-devel-3.10.0-862.3.3.el7.x86_64.rpm adb57998b2c5a06b88b6002c2bc9635173fd51aa6000ff4326e6a7a490cb8ea3 perf-3.10.0-862.3.3.el7.x86_64.rpm 47b576e251ed21a547132daa240adaa377b91859cc6f9545c5b4a2f74d8000aa python-perf-3.10.0-862.3.3.el7.x86_64.rpm Source: 0a17d9113e2ddbf3ca76d1e24591083acf5b898d42609f6db180263c7dbfd72d kernel-3.10.0-862.3.3.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 160, Issue 4 ***********************************************

1 0

About the membership issue
by Leon Fauster 16 Jun '18

16 Jun '18

Concerning the disabled membership (yesterday). Is there anything that I should do? Visiting the "re-enable" link shows only a plain site with meta information about the list but without any feedback like "membership enabled". Albeit some postings are coming in again now (with "normalized" sender address <centos(a)centos.org>). Seems the work to resolve this issue is in progress ... -- Thanks LF

3 5

Passwords in plain text
by rj coleman 16 Jun '18

16 Jun '18

Am I the only one who just received this email from this group? Which came with my password in the email in plain text? Begin forwarded message: > From: centos-request(a)centos.org > Date: June 15, 2018 at 12:31:04 PM EDT > To: rjcdevelop(a)gmail.com > Subject: confirm a8e9e592b9d81e13e569ffa9f6f4267c3f2a8fe8 > > Your membership in the mailing list CentOS has been disabled due to > excessive bounces The last bounce received from you was dated > 15-Jun-2018. You will not get any more messages from this list until > you re-enable your membership. You will receive 3 more reminders like > this before your membership in the list is deleted. > > To re-enable your membership, you can simply respond to this message > (leaving the Subject: line intact), or visit the confirmation page at > > https://lists.centos.org/mailman/confirm/centos/a8e9e592b9d81e13e569ffa9f6f… > > > You can also visit your membership page at > > https://lists.centos.org/mailman/options/centos/rjcdevelop%40gmail.com > > > On your membership page, you can change various delivery options such > as your email address and whether you get digests or not. As a > reminder, your membership password is > > Removed For Security > > If you have any questions or problems, you can contact the list owner > at > > centos-owner(a)centos.org

9 10

shellinabox via proxy(apache)
by lejeczek 15 Jun '18

15 Jun '18

hi guys, cannot get it to work - shellinabox - not being programmer nor selinux sorcerer. shellinabox via apache, when I ausearch it all I get is: #============= unconfined_service_t ============== #!!!! The file '/usr/bin/bash' is mislabeled on your system. #!!!! Fix with $ restorecon -R -v /usr/bin/bash allow unconfined_service_t unconfined_t:process transition; I have shellinabox in Apache's: <Location /cmd> AuthType Basic AuthName "some more" AuthBasicProvider PAM AuthPAMService rstudio Require valid-user #Require all granted ProxyPasshttp://localhost:4200/ </Location> using: LoadModule authnz_pam_module modules/mod_authnz_pam.so So all seems to work there between apache & shellinabox. Last bit when you login to shell you get denied. I also see: $ ps -FZp 2909167 --cols 999 LABEL UID PID PPID C SZ RSS PSR STIME TTY TIME CMD system_u:system_r:unconfined_service_t:s0 shellin+ 2909167 1 0 10785 2740 7 Jun11 ? 00:00:00 /usr/sbin/shellinaboxd -u shellinabox -g shellinabox --cert=/var/lib/shellinabox --port=4200 --localhost-only --disable-ssl So it seems that shellinabox runs unconfined and the centos' policy forbids transitions between unconfined domains. Would that be right? Many thanks, L.

1 0

CentOS7: Setting up ldap over TLS in kickstart file
by Patrick Begou 15 Jun '18

15 Jun '18

Hi, I'm facing a problem with setting up LDAP+TLS client authentication in a kickstart script on CentOS7 for several days. Setting up manualy the config with system-config-authentication works but I need to automate this in kickstart for deploying cluster nodes. This show that the server side is running fine. At this time the message is #systemctl status sssd |.... sssd[be[default]][2732]: Could not start TLS encryption. error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate)| In my kickstart file I use: auth --useshadow --enableldaptls --enablecache --passalgo=sha512 --enableldap --enableldapauth --ldapserver="ldaps://my.ldap.server.fr" --ldapbasedn=dc=my,dc=base,dc=dn Then in a post install script I download the server and ca certificates and stops nslcd that I do not use: echo "TLS_REQCERT allow">>/etc/openldap/ldap.conf cd /etc/openldap/cacerts/ && wget http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/ca-bundle.crt && ln -s ca-bundle.crt $(openssl x509 -hash -in ca-bundle.crt -noout).0 cd /etc/openldap/certs/ && wget http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/server.crt cd / systemctl disable nslcd I'm unable to see what system-config-authentication is doing more in it's setup. Thanks for your help Patrick |||| || -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

3 3

CentOS-announce Digest, Vol 160, Issue 3
by centos-announce-request＠centos.org 15 Jun '18

15 Jun '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2018:1838 CentOS 7 linux-firmware BugFix Update (Johnny Hughes) 2. CESA-2018:1836 Important CentOS 7 plexus-archiver Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 14 Jun 2018 15:09:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:1838 CentOS 7 linux-firmware BugFix Update Message-ID: <20180614150926.GA32842(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:1838 Upstream details at : https://access.redhat.com/errata/RHBA-2018:1838 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 940bc02535d7fd581dba6d53f939ed13dbf9a7cb78f23a22db0b94d6dbdbc980 iwl1000-firmware-39.31.5.1-62.2.el7_5.noarch.rpm 722a5873cbe15ee2c12aaac92f04ec012daca4b9d524037d358ebeeeb9e3f65b iwl100-firmware-39.31.5.1-62.2.el7_5.noarch.rpm 21a7b490b6736e116524cb3c6b676a8428323d6c90dee62694bb9b73cd86e1d9 iwl105-firmware-18.168.6.1-62.2.el7_5.noarch.rpm 0838322f12f12d545404810b33a006f7d9e981e1d9e758de14b7a8aadb143d4d iwl135-firmware-18.168.6.1-62.2.el7_5.noarch.rpm d0190f3079c3b729cefdb4fbdbfaea858778cce7d7214d636595657bdd4c43b4 iwl2000-firmware-18.168.6.1-62.2.el7_5.noarch.rpm c7a7cc8c5195e291ffc2ff8b647e642135f050611379e86c1d9c980439b80c67 iwl2030-firmware-18.168.6.1-62.2.el7_5.noarch.rpm a7f1d6426f6bd1440610f0b929971737c9fc24039bf88413cb43e21ad4ae1657 iwl3160-firmware-22.0.7.0-62.2.el7_5.noarch.rpm 12d43466da1c3c8055403ddcac8b4efba651ee35393fba897162cf86abcf0e0e iwl3945-firmware-15.32.2.9-62.2.el7_5.noarch.rpm 6fd48dfeef9416d6fa7636a89be2875c892335d89af6970b62aede43a8dc5e5c iwl4965-firmware-228.61.2.24-62.2.el7_5.noarch.rpm 5d5ff923fe6beb5904d43a5660b2f65d14a88fb5ae2f865ea10d2e17115a7360 iwl5000-firmware-8.83.5.1_1-62.2.el7_5.noarch.rpm 5ae3fa0eab138bb889e46725795724617047134f1c5c04113e6235c16761ee4c iwl5150-firmware-8.24.2.2-62.2.el7_5.noarch.rpm 8136f0d62b4419c840f101ca64c93e334ad6aa92e3e3d6fff37620069308f5b1 iwl6000-firmware-9.221.4.1-62.2.el7_5.noarch.rpm a0f96e3088e72ab8de9846ee75bc6460116b73b77db1bcdacde1a00dd1f7a076 iwl6000g2a-firmware-17.168.5.3-62.2.el7_5.noarch.rpm 5cbe19cd8a9be34c3ece1ea1ded527db0ccd5f8919c8a6b9ce29358b7dedc4ac iwl6000g2b-firmware-17.168.5.2-62.2.el7_5.noarch.rpm 8d7274ccd14611cb5214163c944b2834330984aa5906b68a49e28a8b82b8f7c1 iwl6050-firmware-41.28.5.1-62.2.el7_5.noarch.rpm 73ad0e98045b5da8a2600789197ec98c58ee605d83c3c24547bd8e498bdc9072 iwl7260-firmware-22.0.7.0-62.2.el7_5.noarch.rpm 03a7febf9a8380d07216ef53dd9d7ef78a684a61acc8006916d515d9cdb23583 iwl7265-firmware-22.0.7.0-62.2.el7_5.noarch.rpm b3eae0bc8cf3c427455ce5108efe07c3a76b7cdf8a3ad69342720b716b9ce864 linux-firmware-20180220-62.2.git6d51311.el7_5.noarch.rpm Source: b23b4d21947a38e5fb5353c3b49ee8d271cd779ad6ecb6509472c5bf345658e8 linux-firmware-20180220-62.2.git6d51311.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 14 Jun 2018 15:10:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:1836 Important CentOS 7 plexus-archiver Security Update Message-ID: <20180614151015.GA32924(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:1836 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:1836 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9c26560f7b175d6e1455a7b9edf9c56be74c06a98f91074a36c3944a51ea110e plexus-archiver-2.4.2-5.el7_5.noarch.rpm 098c29d9f8e0b7703e1ded196eaa5ec3cbc68521fb4a46c9563cba2a9ceb7649 plexus-archiver-javadoc-2.4.2-5.el7_5.noarch.rpm Source: 3efde77b61ff8ce194ff060488b029ffbf3d465c8b9192b227ba8e3923d2d9ff plexus-archiver-2.4.2-5.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 160, Issue 3 ***********************************************

1 0

rpmbuild --define | some rpm sorcerer around?
by lejeczek 15 Jun '18

15 Jun '18

hi how do you pass vars to rpmbuild for definition? eg rpmbuild --define \'"${_definition2}"\' I've been fiddling with ways to escape, but none is fricking working.. I mean, rpmbuild rushes to work(no errors nor failure) so if you try just the command line do not believe it, because later as it executes %if you will see process does not see these definitions. many thanks, L

4 7

Custom ISO With Post Installation Scripts
by Earl Ramirez 15 Jun '18

15 Jun '18

Dear All I have been working on a custom ISO with kickstart and a couple of post installation scripts and would like to have the script run before the login prompt. The custom ISO works; however, the scripts fails because some of the services, e.g. mariadb does not start before the server installation has been completed and rebooted; therefore, I have been putting the scripts in /etc/profile.d/ and after logging in the scripts will execute and upon completion of the script will be deleted from /etc/profile.d/. DuckDuckGo suggested that I copy the script to /etc/rc.d/rc.local and make it executable; however, I have tried that a few times and the script simply does not execute. Below is an excerpt from the ks.cfg. export SRCDIR="/run/install/repo" export DSTDIR="/mnt/sysimage" # copy scripts to the destintion of the server cp -v $SRCDIR/postinstall/script1.sh $DSTDIR/etc/rc.d/rc.local/script1.sh # Make scripts executable chmod +x $DSTDIR/etc/rc.d/rc.local.sh Since this is a ISO for a community project, don't think that tools such as Ansible, Chef, Puppet, etc. will work here. Also, it is a one time execution; therefore, I did not consider using systemd because the goal would be to have visibility while the script is running just as I see after I login; however, just need the script to be executed after the OS was installed and restarted and before the login prompt. All suggestions are welcome. Thanks in advance. -- Earl Ramirez <earlaramirez(a)gmail.com>

5 6

Difficulty configuring RDMA in CentOS
by Pat Haley 13 Jun '18

13 Jun '18

Hi We are trying to configure RDMA for an infiniband connection between our data server (running CentOS 6.8) and our compute nodes (running CentOS 6.6). We have been trying to follow the instructions in https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/ht… however we are getting conflicting information on whether the RDMA is correctly configured. Some of what we have done and some of the data are below. Can you suggest what other tests and what other data we should get to debug this problem? /etc/rdma/mlx4.conf to set the port types properly for RoCE/IBoE usage. Edit /etc/modprobe.d/mlx4.conf to instruct the driver on which packet priority is configured for the “no-drop” service on the Ethernet switches the cards are plugged into. vim /etc/rdma/mlx4.conf You can find the right pci device to use for any given card by loading # the mlx4_core module, then going to /sys/bus/pci/drivers/mlx4_core and # seeing what possible PCI devices are listed there.The possible values # for ports are: ib, eth, and auto.However, not all cards support all # types, so if you get messages from the kernel that your selected port # type isn't supported, there's nothing this script can do about it. [root@mseas-data2 mlx4_core]# ls /sys/bus/pci/drivers/mlx4_core 0000:81:00.0bindmodulenew_idremove_idueventunbind mstconfig -d 81:00.0 query Device #1: ---------- Device type:ConnectX3Pro PCI device:81:00.0 Configurations:Current SRIOV_EN1 NUM_OF_VFS8 LINK_TYPE_P13 LINK_TYPE_P23 LOG_BAR_SIZE3 BOOT_PKEY_P10 BOOT_PKEY_P20 BOOT_OPTION_ROM_EN_P11 BOOT_VLAN_EN_P10 BOOT_RETRY_CNT_P10 LEGACY_BOOT_PROTOCOL_P11 BOOT_VLAN_P11 BOOT_OPTION_ROM_EN_P21 BOOT_VLAN_EN_P20 BOOT_RETRY_CNT_P20 LEGACY_BOOT_PROTOCOL_P21 BOOT_VLAN_P21 Needed packages: Most if not all packages appear to be installed on server [root@mseas-data2 ~]# service rdma status Low level hardware support loaded: mlx4_ib Upper layer protocol modules: ib_ipoib User space access modules: rdma_ucm ib_ucm ib_uverbs ib_umad Connection management modules: rdma_cm ib_cm iw_cm Configured IPoIB interfaces: none Currently active IPoIB interfaces: ib0

1 0

C 7: smpboot: CPU 16 is now offline
by m.roth＠5-cent.us 13 Jun '18

13 Jun '18

Current kernel, and I just booted, and dmesg shows, of the 32 cores, 0, 2, 4 and 6 ok, and *all* other show "is now offline. What's happening here? mark

1 3

CentOS-announce Digest, Vol 160, Issue 2
by centos-announce-request＠centos.org 13 Jun '18

13 Jun '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing release of HAProxy 1.8 on CentOS 7 x86_64 (Jan Stan?k) 2. Announcing release of MongoDB 3.6 on CentOS 7 x86_64 (Jan Stan?k) 3. Announcing release of Perl 5.26 on CentOS 7 x86_64 (Jan Stan?k) 4. Announcing release of PostgreSQL 10.0 on CentOS 7 x86_64 (Jan Stan?k) 5. Announcing release of Ruby 2.5 on CentOS 7 x86_64 (Jan Stan?k) 6. Announcing release of Varnish Cache 5 on CentOS 7 x86_64 (Jan Stan?k) ---------------------------------------------------------------------- Message: 1 Date: Tue, 12 Jun 2018 15:20:13 +0200 From: Jan Stan?k <jstanek(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing release of HAProxy 1.8 on CentOS 7 x86_64 Message-ID: <c2cb0e51-90f7-3c18-5dd1-884a545f2bdb(a)redhat.com> Content-Type: text/plain; charset="utf-8" I am pleased to announce the immediate availability of HAProxy in version 1.8 on CentOS Linux 7 x86_64, delivered via a Software Collection (SCL) built by the SCLo Special Interest Group (https://wiki.centos.org/SpecialInterestGroup/SCLo) QuickStart ---------- You can get started in three easy steps: # 1. Install a package with repository for your system: # On CentOS, install package centos-release-scl available in CentOS repository: $ sudo yum install centos-release-scl # On RHEL, enable RHSCL repository for you system: $ sudo yum-config-manager --enable rhel-server-rhscl-7-rpms # 2. Install the collection: $ sudo yum install rh-haproxy18 # 3. Start using software collections: $ scl enable rh-haproxy18 bash At this point you should be able to use varnish just as a normal application. Some usage examples follow: $ systemctl start rh-haproxy18-haproxy This collections is CentOS-based rebuild built by SCLo SIG community, and the packages have been available in Red Hat Software Collections 3.1 for RHEL: https://access.redhat.com/documentation/en-us/red_hat_software_collections/… So, for RHEL-based builds, follow the steps in the documentation above. About Software Collections -------------------------- Software Collections give you the power to build, install, and use multiple versions of software on the same system, without affecting system-wide installed packages. Each collection is delivered as a group of RPMs, with the grouping being done using the name of the collection as a prefix of all packages that are part of the software collection. The SCLo SIG in CentOS ---------------------- The Software Collections SIG group is an open community group co-ordinating the development of the SCL technology, and helping curate a reference set of collections. In addition to the collection NodeJS being released here, we also build and deliver databases, web servers, and language stacks including multiple versions of PostgreSQL, MariaDB, Apache HTTP Server, Python, Ruby, Ruby on Rails and others. You can learn more about Software Collections concepts at: http://softwarecollections.org You can find information on the SIG at https://wiki.centos.org/SpecialInterestGroup/SCLo ; this includes how to get involved and help with the effort. Enjoy! -- Jan Stan?k Associate Software Engineer, Brno Red Hat Czech jstanek(a)redhat.com IM: jstanek

1 0

centos+unsubscribe@centos.org
by Ahmed Hassan 13 Jun '18

13 Jun '18

1 0

Generic linux question: sysctl and swiotlb
by m.roth＠5-cent.us 12 Jun '18

12 Jun '18

Anyone know if I can increase the size of swiotlb using sysctl, rather than waiting to reboot? mark

1 0

Articles on OpenSSH and Personal Git
by Alice Wonder 11 Jun '18

11 Jun '18

Hi, Wrote a couple articles on OpenSSH and on running your Git server in a CentOS 7 environment https://notrackers.com/the-command-line/openssh-primer/ and https://notrackers.com/the-command-line/setting-up-your-own-git-server/ And the domain name is honest, there no trackers on that blog. None. (that blog is actually for a WordPress project not ready for general use but it seemed like a good place for the articles too) -=- I am sure they aren't perfect, but they may be of assistance to some. Any blatant mistakes, I am not above correction. Git article needs SELinux instructions added for web content served outside of /var/www/html and the public web git viewer I'm planning to fork to fix some issues I have it (I'll contribute patches back if they want them) I still need to find a CI solution (alternate to Travis-CI) that works just from standard Git - e.g. a git hook when pushing commits or tagging a release that pings the CI solution causing it to do a standard git pull to run the build and unit tests.

1 0

/etc/gai.conf fails to prefer IPv4 over IPv6 for NFS
by sr＠genyosha.net 11 Jun '18

11 Jun '18

Using CentOS 6.9 with IPv4 configured, and _not_ disabling IPv6 yet, we want this NFS client system to prefer the IPv4 address of a dual-stack remote NFS server, which has both A and AAAA records in DNS. Otherwise we get a minutes long pause while automounter tries to mount the IPv6 address -- I can see automounter's '/bin/mount' running, using the AAAA record of the server, until that times-out and the IPv4 address of the server mounts successfully. Disabling IPv6 altogether works around the problem as expected, but is a bigger hammer than we wanted to use. :-) I found posts from others in a similar situation, and proposed solutions included modifying /etc/gai.conf to use: precedence ::ffff:0:0/96 100 I cp'd /usr/share/doc/glibc-common-2.12/gai.conf to /etc/ and tried that, with several other permutations (e.g. uncommenting other blocks of "label" and "precedence" settings) but none achieved the desired effect. Am I misunderstanding how this is supposed to work? Cheers, sr. -- || Steve Rikli ||| Well, we've stared at it... that oughta || || Systems Administrator ||| fix it! Let's get outta here. || || Genyosha Networks ||| || || sr(a)genyosha.net ||| - Crow, MST3K ||

2 6

squishy bell
by Michael Hennebry 11 Jun '18

11 Jun '18

Both Gnome and KDE give me a loud squishy bell at the thought of the drop of a hat. I did not get that in C6. I infer it is a C7-specific thing. Short of disabling my audio altogether, how do I make it go away? Not one of C7's better features. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

3 3

C7, kernel oops, sllub.c
by m.roth＠5-cent.us 11 Jun '18

11 Jun '18

Anyone else seeing this: I've seen it with different line # as an upstream bug: kernel BUG at mm/slub.c:3601. When I look for slub.c, I think I found a slightly different version, since that's a blank line, but it's in the function slab_memory_callbac. On a possibly related note, one of my users who runs debian has been getting a ton of radeon errors... and guess what, it's to do with slab_callback. Anyone want me to post the backtrace from the abort? mark

1 0

Problem with bugs.centos.org
by Nicolas Kovacs 11 Jun '18

11 Jun '18

Hi, I wanted to create an account on bugs.centos.org to report a minor but annoying bug with Dolphin. After trying to register by providing the login (kikinovak) and email address (info(a)microlinux.fr) I'm told that the email is already in use. Uh oh. Maybe I already created an account years ago and then forgot about it. So I click on the field for forgotten passwords, only to be told that there is no one under that name or email address. So I'm hitting a wall. Maybe one of the admins of bugs.centos.org is reading this and can help me out? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

Centos 7 and priorities
by Michael Hennebry 11 Jun '18

11 Jun '18

I've recently changed to Centos 7. My recollection from C6 is that a couple useful repositories need yum priorities to prevent some mixups. I do not remember what they are. My C6 is gone. Google has not told me what C6 repositories were. In the near future, I will be installing nux and epel. My understanding is that they do play well with each other and with base. Are there common useful C7 repositories that need help playing well with the aforementioned repos? Is there a FAQ or a FM on this? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

C7, encryption, and clevis
by m.roth＠5-cent.us 11 Jun '18

11 Jun '18

We've been required to encrypt h/ds, and so have been rolling that out over the last year or so. Thing is, you need to put in a password, of course, to boot the system. My manager found a way to allow us to reboot without being at the system's keyboard, a package called clevis. Works fine... except in a couple of very special cases. Those systems, the problem is that, due to older software, and *very* expensive licenses that are tied to a MAC address, I have to spoof the MAC address since my users got new(er) machines. Clevis is trying to contact its password server, using the *real* MAC address, but our DHCP has to serve the *spoofed* MAC address. I know, from trying, that I can't have two entries for the same system. Can anyone suggest a solution? mark

7 17

Convert from LVM
by Matt 08 Jun '18

08 Jun '18

I have a Centos 7 install using EXT4 on LVM. Its running as a VM inside KVM. Issue I have run into is that fstrim does not work due to the LVM. Without fstrim snapshots have gotten huge. Is there a way convert it from LVM to non-LVM without a complete reinstall?

5 8

A touch conused on context
by m.roth＠5-cent.us 07 Jun '18

07 Jun '18

Ok, we've got a set of directories bind mounted on our standard mount point for the web. The directory tree's been set with semanage fcontext -t -e /var/www <ourmountpoint>. In one of the websites under there is <site>/cgi-bin, and under *there are a couple of subdirectories, and a .dat file that is written to (I thihnk it's a counter, or whatever). Yet I see sealerts complaining that, if it was in enforcing mode, would not allow the .cgi that's in the cgi-bin write access on the file. What am I missing here? mark

1 0

git public web frontends
by Alice Wonder 07 Jun '18

07 Jun '18

Hello, Set up a CentOS 7.5 VM linode for git now that github has been bought. I'm not anti-microsoft but I'm worried they will make changes that I don't like (e.g. requiring ms account, changing billing, etc.) so I figured better take control now. Currently moving my private repos and have them set up in my home directory there, but my public repos - I want to set them up with a web interface so people can browse them etc. and do a git clone w/o needing authentication. I'll be putting those in /srv/git and using a different username than the account for my private git repositories. But... can anyone recommend a web front end? It doesn't need to be as fancy as github but it does need to parse markdown as all my documentation is in markdown. Thanks for suggestions. Preferably something that "just works" with CentOS 7. -=- What would be fantastic is if someone made some kind of federation type service similar to how Mastodon works that lets public git repositories that opt in be found without needing to be on a centralized server. But I doubt that currently exists.

7 7

can you rpm rebuild R-core-3.5.0-1.el7.x86_64 from epel-testing..
by lejeczek 07 Jun '18

07 Jun '18

..successfully? many thanks, L.

1 0

Slightly OT : write bootable CentOS USB disk under Windows 10 and Mac OS X ?
by Nicolas Kovacs 07 Jun '18

07 Jun '18

Hi, I'm currently writing my fourth book about Linux, for the french editor Eyrolles. The book will cover Linux server basics for pros, and it will be based on CentOS 7. I have a quick question to those of you who use either Windows 10 or Mac OS X as their everyday desktop system. How do you write a bootable CentOS USB disk using either Windows 10 or Mac OS X ? I've googled this, of course, and there's quite a lot of possible solutions out there, so I'm curious about a more or less *orthodox* way of doing things. Me, I've been 100 % GNU/Linux since 2001, CentOS is running on my workstation and on my laptop, and I'm simply writing the ISO file to a USB stick using dd if=CentOS-XXXX.iso of=/dev/sdX. Thanks & cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

Distributed System Monitoring
by Chris Olson 07 Jun '18

07 Jun '18

We have recently been assigned to help with the development of a system that will power non-computer/non-network devices located at various places within a 10,000 square ft facility. Most of these devices will operate on a fairly wide range of DC input power. The availability of surplus Cat-5 cable and the availability of low cost POE switches has been suggested as a method of powering these devices. There also appears to be some good, low cost installation options for all of the required system elements. The activity and health of the devices is directly related to their power consumption. Is there a standard CentOS feature or commonly used App that would facilitate monitoring the power being supplied by each of the individual POE switch outputs? Thanks in advance for any information shared.

2 1

ldd question on CentOS 6.8 (64bit)
by ejm 07 Jun '18

07 Jun '18

Hi all, Will ldd display the paths to different libraries depending on their locations? I'm trying to build libxml2 version 2.9.6 in /usr/local with a newer version of zlib (1.2.8) than what are in the system folders for CentOS 6.8. I get the following output from ldd: $ ldd ./libxml2.so ./libxml2.so: /lib64/libz.so.1: version `ZLIB_1.2.3.3' not found (required by ./libxml2.so) linux-vdso.so.1 => (0x00007ffeb1789000) libdl.so.2 => /lib64/libdl.so.2 (0x00007fce9e824000) libz.so.1 => /lib64/libz.so.1 (0x00007fce9e60e000) <-- I expected /usr/local/lib here libm.so.6 => /lib64/libm.so.6 (0x00007fce9e389000) libc.so.6 => /lib64/libc.so.6 (0x00007fce9dff5000) /lib64/ld-linux-x86-64.so.2 (0x0000003d52a00000) Yet the make itself for libxml2 seemed to exit without error. >From otool on Mac OSX (same installation of libxml2/zlib) I see: %otool -L libxml2.2.dylib libxml2.2.dylib: /usr/local/lib/libxml2.2.dylib (compatibility version 12.0.0, current version 12.6.0) /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 88.1.12) /usr/local/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.8) /usr/local/lib/libiconv.2.dylib (compatibility version 9.0.0, current version 9.0.0) /usr/local/lib/libgcc_s.1.dylib (compatibility version 1.0.0, current version 1.0.0) libxml2, libz and libiconv were all installed in /usr/local so as not to over-write the OS versions. Will ldd show similar correct paths for component libraries as otool does? I'm trying to track down if there is an error in the Makefile target for the link phase of the library. Thanks, --Ed

2 1

Re: [CentOS] Firefox and Thunderbird freeze/crash followed by "nfs4_reclaim_open_state: Lock reclaim failed!" syslog messages
by Frank Thommen 07 Jun '18

07 Jun '18

I was afraid someone would say that :-). I am currently at 3.10.0-862.3.2 and downgrading to a 3.10.0-6xx kernel breaks some of the other packages. Is the mentioned bug documented somewhere? Cheers frank On 07/06/18 06:22, James Peltier wrote: > There was a kernel bug that affected all NFSv4 traffic that we ran into > and we had to downgrade the kernel to and older version > (3.10.0-693.2.2.el7.x86_64) which seemed to help with our NFSv4 issues. > We have not upgraded to a newer kernel to see if the issue has been > resolved. > > > > ------------------------------------------------------------------------ > *From:* CentOS <centos-bounces(a)centos.org> on behalf of James Pearson > <james-p(a)moving-picture.com> > *Sent:* June 6, 2018 2:49 PM > *To:* CentOS mailing list; Frank Thommen > *Subject:* Re: [CentOS] Firefox and Thunderbird freeze/crash followed by > "nfs4_reclaim_open_state: Lock reclaim failed!" syslog messages > Frank Thommen wrote: >> >> Hi, >> >> since I updated my workstation from CentOS 7.4 to 7.5, Firefox and >> Thunderbird (both 52.8.0, from CentOS repos) regularly freeze (or crash) >> and cannot be restarted afterwards.? Trying to start them results in a >> "Bus error (core dumped)" (Firefox) and "Killed" (Thunderbird).? The >> system log then shows: >> >>? ???? kernel: NFS: nfs4_reclaim_open_state: Lock reclaim failed! >> >> each time I try to start the applications (our homedirectories are >> mounted via NFS4).? As far as I can see, no other applications are >> affected.? The workstation needs to be rebooted to fix the situation. >> >> Has anyone else seen that or knows how to debug or fix this issue? I >> tried with strace and wireshark w/o finding anything helpful. > > I'm not sure what the el7 default for the Firefox > 'storage.nfs_filesystem' pref is - but you could try setting it to > 'true' to see if that makes a difference ? > > James Pearson > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos

1 0

Firefox and Thunderbird freeze/crash followed by "nfs4_reclaim_open_state: Lock reclaim failed!" syslog messages
by Frank Thommen 07 Jun '18

07 Jun '18

Hi, since I updated my workstation from CentOS 7.4 to 7.5, Firefox and Thunderbird (both 52.8.0, from CentOS repos) regularly freeze (or crash) and cannot be restarted afterwards. Trying to start them results in a "Bus error (core dumped)" (Firefox) and "Killed" (Thunderbird). The system log then shows: kernel: NFS: nfs4_reclaim_open_state: Lock reclaim failed! each time I try to start the applications (our homedirectories are mounted via NFS4). As far as I can see, no other applications are affected. The workstation needs to be rebooted to fix the situation. Has anyone else seen that or knows how to debug or fix this issue? I tried with strace and wireshark w/o finding anything helpful. Cheers frank

2 2

Docker Update 1.13.1-53 -> 1.13.1-63 certificate error
by Hans-Joachim Hetscher 07 Jun '18

07 Jun '18

Hello, I'm using the docker stuff from the extras repo on CentOS 7.x I'm using a secured local registry, which worked fine til 1.13.1-53 After the upgrade, I run into following error: > docker login repo.local:5000 Error response from daemon: Get https://repo.local:5000/v1/users/: x509: certificate is not valid for any names, but wanted to match repo.local > curl -v https://repo.local:5000/v1/users/ * About to connect() to repo.local port 5000 (#0) * Trying 1xx.xx.x.xx... * Connected to repo.local (1xx.xx.x.xx) port 5000 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 * Server certificate: * subject: CN=repo.local,OU=OU,O=Enterprise,L=City,ST=Country,C=DE * start date: Okt 09 14:31:40 2017 GMT * expire date: Aug 18 14:31:40 2027 GMT * common name: repo.local * issuer: CN=ROOTCA für xxx,OU=OU,O=Enterprise,L=City,ST=Contry,C=DE > GET /v1/users/ HTTP/1.1 > User-Agent: curl/7.29.0 > Host: repo.local:5000 > Accept: */* > < HTTP/1.1 404 Not Found < Content-Type: text/plain; charset=utf-8 < Docker-Distribution-Api-Version: registry/2.0 < X-Content-Type-Options: nosniff < Date: Thu, 07 Jun 2018 08:49:35 GMT < Content-Length: 19 < 404 page not found * Connection #0 to host bbgpvmdocker0.bbg.michelin.com left intact After downgrading to 1.13.1-53, all works again as expected. Any hints to solve this issue? Hans-Joachim

1 0

ARM64 CentOS AltArch release 7.5
by Frederik Lotter 07 Jun '18

07 Jun '18

Hi, I have two questions: (1) In 7.3 CentOS released a rootfs tar for ARM64. I can no longer find this under the 7.5 release. Furthermore, I could also not find anything on the ISO that seems rootfs-like in any near complete state. The closest was the LiveOS/rootfs.img, but it seems this is not a complete fs as yum is missing components, for example. So my question is: Is there any way to still use CentOS releases on new ARM64 development environments (without EFI boot support)? (2) In terms of UEFI firmware support in the ARM64 world (e.g. EDKII vs Uboot), is there any officially supported solution for CentOS, or do you simply support whatever supports the UEFI interface? Regards, Fred

2 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss