- Discuss - lists.centos.org

gnbd help on centos
by William (Bill) Triest 17 Aug '06

17 Aug '06

I've googled for this, but everything I find tends to talk about cluster and doesn't give an example close enough that I can figure this out. I have read the Red Hat Cluster Suite Configuring and Managing a Cluster <http://www.redhat.com/docs/manuals/csgfs/browse/rh-cs-en/> links from http://www.redhat.com/docs/manuals/csgfs/. (I think these are mirred on centos.org, but I read them off of redhat's site) Basically I currently have two servers. The file server is a dell power edge 2850 with an attached power vault. The power vault's file systems are all gfs. I would like to export these to a second server via gnbd. I realize I *could* use nfs, which we do use elsewhere, but I was interested in figuring out gnbd. On the file server if I run gnbd_export -d /dev/vg_home/lv_home -e home Then on the other server modprobe gnbd and then run gnbd_import -i fileserver the devices get created can be mounted etc (well I might need to modprobe gfs before mounting) Anyways, what's the "correct" way of having this happen on boot? I've been reading the cluster docs, but I haven't found something that makes it click for me. Hooking up the poweredge to the powervault won't work, because eventually we're getting a third server, going to put the power vault into cluster mode and directly connect it to the powervault (thus the decision to use gfs initially, instead of just a "normal" file system and exporting via nfs). Any help would greatly be appreciated, especially helpful links. Thanks, Bill

2 1

proxy server - ipcop vs CentOS
by Craig White 17 Aug '06

17 Aug '06

I have purchased a used Compaq DL360 which I was going to use as a proxy server. Presently, we are using a cheap box with ipcop which is working fine but it didn't have much RAM (64MB), etc. This new box we will want to run squid and perhaps dansguardian for filtering (this is a non-profit company) and I'm wondering if I should just put ipcop on it or would it be smarter/better to install CentOS 4, squid and I see Dag has dansguardian package which suggests that I might get more and better options from this. Anyone have opinions on ipcop vs. CentOS Craig

9 10

Nvidia Geforce 5200 graphic card
by Josep M. 17 Aug '06

17 Aug '06

Hello. I have a Nvidia Geforce 5200 graphic card, the quality much is less that in windows, I would like how I can adjust this. Image quality is good, but usual desktop have much less quality, I use 1024*768 in both. Thanks ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

11 17

Re: Openswan 2.4.6rc5 under CentOS 4.3
by Bas Rijniersce 17 Aug '06

17 Aug '06

Hello, My problem was solved by the excellent support of the openswan people (Paul Wouters). If other people run into the same problem, this whas the solution: I wanted to keep the stock kernel but wanted KLIPS, I don't need NAT-Traversal When the current release is used (2.4.6rc5) the module caused a kernel panic when unloading (that means also rebooting) the system. A bad thing for a firewall that is probably locked somewhere in a closet. The current CVS version contains the fix for the unload bug. The CVS version can be retrieved by: cd /usr/src rm -rf openswan-2 cvs -d :pserver:anoncvs@anoncvs.openswan.org:/public/cvs login cvs -d :pserver:anoncvs@anoncvs.openswan.org:/public/cvs co openswan-2 Then edit /usr/src/openswan-2/packaging/linus/config-all.h and change the define for NAT_TRAVERSAL for 1 to 0 Compile the programs and module with: make KERNELSRC=/lib/modules/`uname -r`/build programs module make KERNELSRC=/lib/modules/`uname -r`/build install minstall This solved the problem for me Bas

1 0

Wifi WEP / Cisco aironet wireless internal card 802.11b
by Guillermo Garron 17 Aug '06

17 Aug '06

Hi, I have a IBM ThinkPat T30 a Cisco Aironet wireless internal in the laptop 802.11b only. It works great with open Acess points, but when i try to connect to encripted ones. I got the dialog box asking for the passphrase 128 bit, I enter it and after that i receive the dialog box again! Maybe my card do not support WEP or I am doing something wrong? Here is part of what i can see on /var/log/messages thanks! Guillermo Garron _________- Aug 9 20:25:43 t30 NetworkManager: FORCE: device '/org/freedesktop/NetworkManager/Devices/eth1', network 'DIPLOMAT' Aug 9 20:25:43 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:45 t30 kernel: Setting key 0 Aug 9 20:25:46 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:48 t30 NetworkManager: AUTO: Best wired device = (null) Aug 9 20:25:48 t30 NetworkManager: AUTO: Best wireless device = eth1 () Aug 9 20:25:48 t30 NetworkManager: SWITCH: need to associate with new access point Aug 9 20:25:48 t30 NetworkManager: nm_state_modification_monitor(): beginning activation for device 'eth1' Aug 9 20:25:48 t30 NetworkManager: nm_device_wireless_activate(eth1) using essid 'NETGEAR' Aug 9 20:25:48 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:50 t30 NetworkManager: HAVELINK: act=1 && (dev_crypt=0 <= prev_crypt=0) Aug 9 20:25:50 t30 dhclient: wifi0: unknown hardware address type 801 Aug 9 20:25:50 t30 dhclient: wifi0: unknown hardware address type 801 Aug 9 20:25:50 t30 dhclient: DHCPREQUEST on eth1 to 255.255.255.255 port 67 Aug 9 20:25:52 t30 NetworkManager: AUTO: Best wired device = (null) Aug 9 20:25:52 t30 NetworkManager: AUTO: Best wireless device = eth1 (NETGEAR) Aug 9 20:25:53 t30 NetworkManager: FORCE: device '/org/freedesktop/NetworkManager/Devices/eth1', network 'DIPLOMAT' Aug 9 20:25:54 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:56 t30 kernel: Setting key 0 Aug 9 20:25:56 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:58 t30 NetworkManager: AUTO: Best wired device = (null) Aug 9 20:25:58 t30 NetworkManager: AUTO: Best wireless device = eth1 () Aug 9 20:25:58 t30 NetworkManager: SWITCH: need to associate with new access point Aug 9 20:25:59 t30 NetworkManager: nm_state_modification_monitor(): beginning activation for device 'eth1' Aug 9 20:25:59 t30 NetworkManager: nm_device_wireless_activate(eth1) using essid 'NETGEAR'

2 4

help with Intel GMA 950 3D graphics card
by Julio E. Gonzalez P. 17 Aug '06

17 Aug '06

Hi!. I recently buy a new notebook, and install CentOS 4.3 on it. This because I'm in charge of a lot a servers with Centos installed, and want to use only one distro in all my machines. And, because of course I really like Centos for desktop too. :) The notebook comes with Intel GMA 950 video graphics. I can use it with the vesa driver of Xorg, but I also want 3D graphics, for some games, wine, etc. Is there _*a easy way*_ to use 3D in Centos 4.3 with the GMA 950 video graphics card? I believe that Xorg 7.1 have support for this card, but Centos comes with a older Xorg. Also... the same cuestion, but for configure and install the intel wireless 3945ABG card. I already tried ndiswrapper (don't work for me) and the open source drivers (compilation problem). Thanks. Julio.

1 0

XFS and CentOS 4.3
by Mark Strong 17 Aug '06

17 Aug '06

Hi All, after looking around for info on XFS(the filesystem) and its use on CentOS and/or RHEL 4. There seems to be a lot of noise about 4K Stacks (especially on linux-xfs(a)oss.sgi.com) So what is the best way to get XFS working with CentOS 4.3 ? And not have something like this happening. A quote from the xfs list at sgi >On Tue, 18 Jul 2006 at 10:29am, Andrew Elwell wrote > >using the 2.6.9-34 centosplus SMP kernel (3GHz P4 with >hyperthreading enabled) > >what we normally (~once a day) is simply > >do_IRQ: stack overflow: 416 >[<c0107a27>] >You don't want to use the XFS in the centosplus kernel. It has major >known issues with 4K stacks (leading to overflows). Use the >kernel-module-xfs (or somesuch) RPM instead, and you should have better >luck. Do I need a kernel with 8K stacks? and is this http://dev.centos.org/centos/4/testing/i386/RPMS/kernel-module-xfs-2.6.9-34… the "kernel-module-xfs" RPM he was talking about (or equivalent for `uname -r` equals 2.6.9-34.ELsmp). Regards Mark Strong This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Transaction Network Services. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.

11 19

Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk
by Asky Lee 17 Aug '06

17 Aug '06

HI Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk? Asky

3 2

Email dictionary attacks and firewall
by John Hinton 17 Aug '06

17 Aug '06

I keep seeing 'Joe Average compromised computer on broadband' being used to do email dictionary attacks on our systems. Seems I always have several domains going through these. One in particular has been in the 'a-' list for weeks with about 20,000 attempts per day from various systems. Yeah, I do have a system which blocks email from these systems for a period of time after 3 bad email address attempts.... throttling... Anyway, this brought to mind.... Joe Average! Joe Average buys a broadband connection, has someone hook up his computer.. talks to tech support about everything and eventually, an AV subscription dies or something and Joe just doesn't care or doesn't know how to deal with that. Meanwhile Joe's computer gets a virus allowing some baddy to start sending email. Joe notices his computer is getting a little slow.. but it's not bad enough to worry about. So, this made me start wondering about how to do something that makes Joe's computer so slow that he finally gives up and calls in tech support to fix the damned thing. I wonder if there is a way that a firewall rule could be written, that would let a trickle of the connection from Joe through, so as his dictionary attack gets backed up with a huge number of connections which are trickling through at such a slow rate, with maybe just enough delay built in to make it keep trying.... Basically making Joe's compromised computer useless.. and maybe he'd at least turn it off if it didn't lock up all by itself.... It is so very sad that some providers don't monitor their own people. I see where comcast has now slid down to number 8 after holding the number one spot as the biggest spammer network for a very long time. Good for them! It seems the undisputed king of this world now is verizonbusiness.com.... bad bad very bad.... Sorry.. yeah.. a bit off topic...... John Hinton

10 11

RE: [CentOS] Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk
by Asky Lee 17 Aug '06

17 Aug '06

SATA controller is Interl(R) 82801GR/GH SATA/RAID Controller Thanks. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Matt Hyclak Sent: 2006年8月17日 19:17 To: CentOS mailing list Subject: Re: [CentOS] Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk On Thu, Aug 17, 2006 at 06:59:02PM +0800, Asky Lee enlightened us: > HI > Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk? > It depends on what your SATA controller is. The OS could care less about the disk in most cases. Matt -- Matt Hyclak Department of Mathematics Department of Social Work Ohio University (740) 593-1263 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

CentOS-announce Digest, Vol 18, Issue 11
by centos-announce-request＠centos.org 17 Aug '06

17 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0602 Moderate CentOS 3 i386 wireshark (was ethereal) - security update (Tru Huynh) 2. CESA-2006:0602 Moderate CentOS 3 x86_64 wireshark (was ethereal) - security update (Tru Huynh) 3. CESA-2006:0602-01: Moderate CentOS 2 i386 wireshark security update (was ethereal) (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 16 Aug 2006 21:29:57 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2006:0602 Moderate CentOS 3 i386 wireshark (was ethereal) - security update To: centos-announce(a)centos.org Message-ID: <20060816192957.GA24898(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2006:0602 wireshark (was ethereal) security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2006-0602.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/wireshark-0.99.2-EL3.1.i386.rpm updates/i386/RPMS/wireshark-gnome-0.99.2-EL3.1.i386.rpm source: updates/SRPMS/wireshark-0.99.2-EL3.1.src.rpm You may update your CentOS-3 i386 installations by running the command: yum upgrade ethereal\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Openswan 2.4.6rc5 under CentOS 4.3
by Bas Rijniersce 17 Aug '06

17 Aug '06

Hello, I'm trying to get Openswan running in a CentOS 4.3 environment. I want to modify as little as possible so that the machine can be kept up to date easily. I'd rather not compile a special kernel, but if that's the only solution, no problem (I don't need NAT traversal). It's running kernel 2.6.9-34.0.2.EL. Installed the kerneldevel RPM (and kernel src rpm as well). I compiled openswan with: make KERNELSRC=/lib/modules/`uname -r`/build/ module minstall (and same for progs) Module seems to load fine, lsmod shows as loaded. I do get quite a bit of output on the console that I don't know is normal: ---- Aug 15 12:44:15 INAKFW001 kernel: klips_debug:ipsec_eroute_get_info: buffer=0pc9cce000, *start=0p00000000, offset=61, length=1024 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: for: rn=0pcce7a5a8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: processing leaves, rn=0pcfc9c280 rj_b=-1 rj_flags=4 leaf key = 0a010000->0a020000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pcce7a5a8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: for: rn=0pcfc9c280 rj_b=-1 rj_flags=4 leaf key = 0a010000->0a020000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: processing leaves, rn=0pcce7a5d8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pcfc9c280 rj_b=-1 rj_flags=4 leaf key = 0a010000->0a020000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:ipsec_rj_walker_procprint: rn=0pcfc9c280, w0=0pcc83df20 ---- The problem is when I restart the machine, or just restart the service. It panic's :-) Not a good thing for a box that will be hidden in a closet in India :) I video of the crash can be found at: http://www.brijn.nu/openswan_crash.avi (151Kb) This machine is running in VMware at the moment. I have the same problem in a "real" machine (identical setup) Can I build the module as I did, should that work OK? Any other suggestion on what might be wrong? Thank you very much for your time! Bas

2 3

Centos 4.4
by Feizhou 17 Aug '06

17 Aug '06

Hi, Anybody knows when the new kernel package will be ready? regards,

7 9

Printing problem with CUPS and lp/lpr
by Alfred von Campe 17 Aug '06

17 Aug '06

I know that printing on Linux is somewhat of an art form, but I have a fairly simple problem. I used the following command to configure a networked printer (HP LaserJet 8150): lpadmin -p name -E -v socket://name -m laserjet.ppd -u allow:all - u deny:none This added and enabled the printer, and I can print to it using the print command from within a GUI application and PostScript utilities like enscript. However, printing simple text files from the command line using lpr or lp produces undesirable output that looks like this: Line 1 Line 2 Line 3 It seems rather obvious that the printer is expecting carriage returns and not getting any. What is the "right" way to fix this using CUPS, which "owns" the /etc/printcap file. I can't be the first one to run into this issue... Thanks, Alfred

3 10

Help: Marvell sk98lin driver missing from Centos 3 PXE initrd.img
by Mike Valenzuela 17 Aug '06

17 Aug '06

I'm new to the lists so sorry about any faux pas I may have made. Also I apologize for the length, but I wanted to be sure I covered most of the details. I'm trying to do a PXE install on an Intel 1435VP2 server machine. The PXE install has worked on all the older machines in the cluster, so I know PXE is working. However, these new Intel server machines only support PXE booting from their Marvell NIC (I already tried getting the latest BIOS to avoid this hassle). Since the cluster is running open mosix, Centos 3.7 is which the latest which can be used. The kernel and initrd image in the isolinux directory (on cd or in the repos) has no driver for the Marvell NIC. lspci -n and lspci shows the following information for the Marvell NIC : 02:00.0 Class 0200: 11ab:4361 (rev 17) 02:00.0 Ethernet Controller: Marvell Technology Group Ltd. 88E8050 Gigabit Ethernet Controller (rev 17) I have tried the following: cp /tftpboot/linux-install/initrd.img /tmp/initrd.img.gz cp /tftpboot/linux-install/initrd.img /tftpboot/linux-install/initrd.img.orig cd /tmp gzip -d initrd.img.gz mkdir /tmp/initrd.fs mount -o loop initrd.img initrd.fs gzip -d < /mnt/initrd.fs/modules/modules.cgz | cpio -i --make-directories This makes the folders /tmp/2.4.21-40.ELBOOT/i386/ filled with the drivers in the initrd.img file. Then I grabbed a copy of the vanilla 2.4.21-40, went to Intel's website to grab the driver files I needed (turns out that they were included in the vanilla source, hence a patch file of size 0 was generated), and continued to build the sk98lin driver for i386 (I tried both default settings processor type and i386). The first iteration through all I did was make menuconfig and turn on Marvell as a module, the second time I specified processor type as i386. I grabbed the sk98lin.o file and threw it in /tmp/2.4.21-40.ELBOOT/i386/, where all the other drivers were located. To compress this back into a .cgz file I did the following cd /tmp/ find 2.4.21-40.ELBOOT -print | cpio -o -H crc | gzip -9 > modules.cgz Then I made a copied over the modules.cgz in /tmp/initrd.fs/modules. I edited /tmp/initrd.fs/modules/pcitable adding the line: 0x11ab 0x4361 "sk98lin" "Gigabit Ethernet Controller" (With tabs not spaces) I also added the following line to /tmp/initrd.fs/modules/modules.pcimap sk98lin 0x000011ab 0x00004361 0xffffffff 0xffffffff 0x00000000 0x00000000 0x00000000 After unmounting initrd.fs, I re-gziped initrd.img, and copied over /tftpboot/linux-install/initrd.img However, my problem still remains. When I pxe boot, the machine is detected and everything. Just before getting the kickstart file, it complains "Unable to find any devices of the type needed for this installation type". Obviously I did something wrong, but I don't know why it is still broken or how to fix it. I suspect that somehow I built the the sk98lin module incorrectly. Has anyone already made a fix for this initrd file? I'd appreciate an easy download. Thanks in advanced for any pointers and/or help.

1 0

Problem Installing rrdtool
by dennis 17 Aug '06

17 Aug '06

hi to all, im currently installing rrdtool-1.2.15 with my box CentOS 4.3 final ,before i installed rrdtools there 2 files suggested need to installed the FreeType 2 and libart_lgpl 2.3 everything is fine when installed two files but when i try to installed rrdtool when i issue command ./configure --prefix=/usr/local/rrdtool-1.2.15 this should the output ,any suggestion what's the problem ,thanks to all in advance [root@support rrdtool-1.2.15]# ./configure --prefix=/usr/local/rrdtool-1.2.15 checking build system type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu checking target system type... i686-pc-linux-gnu checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for gawk... gawk checking whether make sets $(MAKE)... yes Audit Compilation Environment checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ANSI C... none needed checking for style of include used by make... GNU checking dependency style of gcc... gcc3 checking how to run the C preprocessor... gcc -E checking for a sed that does not truncate output... /bin/sed checking for egrep... grep -E checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for /usr/bin/ld option to reload object files... -r checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes checking how to recognise dependent libraries... pass_all checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for dlfcn.h... yes checking for g++... g++ checking whether we are using the GNU C++ compiler... yes checking whether g++ accepts -g... yes checking dependency style of g++... gcc3 checking how to run the C++ preprocessor... g++ -E checking for g77... g77 checking whether we are using the GNU Fortran 77 compiler... yes checking whether g77 accepts -g... yes checking the maximum length of command line arguments... 32768 checking command to parse /usr/bin/nm -B output from gcc object... ok checking for objdir... .libs checking for ar... ar checking for ranlib... ranlib checking for strip... strip checking if gcc static flag works... yes checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC checking if gcc PIC flag -fPIC works... yes checking if gcc supports -c -o file.o... yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes configure: creating libtool appending configuration tag "CXX" to libtool checking for ld used by g++... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking for g++ option to produce PIC... -fPIC checking if g++ PIC flag -fPIC works... yes checking if g++ supports -c -o file.o... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes appending configuration tag "F77" to libtool checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for g77 option to produce PIC... -fPIC checking if g77 PIC flag -fPIC works... yes checking if g77 supports -c -o file.o... yes checking whether the g77 linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if gcc likes the -fno-strict-aliasing flag... yes checking if gcc likes the -Wall flag... yes checking if gcc likes the -std=gnu99 flag... yes checking if gcc likes the -pedantic flag... yes checking if gcc likes the -Wshadow flag... yes checking if gcc likes the -Wpointer-arith flag... yes checking if gcc likes the -Wcast-align flag... yes checking if gcc likes the -Wmissing-prototypes flag... yes checking if gcc likes the -Wmissing-declarations flag... yes checking if gcc likes the -Wnested-externs flag... yes checking if gcc likes the -Winline flag... yes checking if gcc likes the -W flag... yes Checking for Header Files checking for ANSI C header files... (cached) yes checking for dirent.h that defines DIR... yes checking for library containing opendir... none required checking for sys/stat.h... (cached) yes checking for sys/types.h... (cached) yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking time.h usability... yes checking time.h presence... yes checking for time.h... yes checking locale.h usability... yes checking locale.h presence... yes checking for locale.h... yes checking fp_class.h usability... no checking fp_class.h presence... no checking for fp_class.h... no checking malloc.h usability... yes checking malloc.h presence... yes checking for malloc.h... yes checking for unistd.h... (cached) yes checking ieeefp.h usability... no checking ieeefp.h presence... no checking for ieeefp.h... no checking math.h usability... yes checking math.h presence... yes checking for math.h... yes checking sys/time.h usability... yes checking sys/time.h presence... yes checking for sys/time.h... yes checking sys/times.h usability... yes checking sys/times.h presence... yes checking for sys/times.h... yes checking sys/param.h usability... yes checking sys/param.h presence... yes checking for sys/param.h... yes checking sys/resource.h usability... yes checking sys/resource.h presence... yes checking for sys/resource.h... yes checking float.h usability... yes checking float.h presence... yes checking for float.h... yes checking for an ANSI C-conforming const... yes checking whether time.h and sys/time.h may both be included... yes checking whether struct tm is in sys/time.h or time.h... time.h checking for acos... no checking for acos in -lm... yes Test Library Functions checking for strftime... yes checking for vprintf... yes checking for _doprnt... no checking whether byte ordering is bigendian... no checking for tzset... yes checking for mbstowcs... yes checking for opendir... yes checking for readdir... yes checking for chdir... yes checking for chroot... yes checking for getuid... yes checking for setlocale... yes checking for strerror... yes checking for strerror_r... yes checking for snprintf... yes checking for vsnprintf... yes checking for fpclass... no checking for class... no checking for fp_class... no checking for isnan... yes checking for memmove... yes checking for strchr... yes checking for mktime... yes checking for getrusage... yes checking for gettimeofday... yes checking for stdlib.h... (cached) yes checking for unistd.h... (cached) yes checking for getpagesize... yes checking for working mmap... yes IEEE Math Checks checking for fpclassify... no checking for fpclassify with <math.h>... yes checking for finite... yes checking for isinf... yes checking if IEEE math works out of the box... yes Resolve Portability Issues checking if realloc can deal with NULL... yes checking if ctime_r need special care to act posixly correct... no checking for the pthreads library -lpthreads... no checking whether pthreads work without any flags... no checking whether pthreads work with -Kthread... no checking whether pthreads work with -kthread... no checking for the pthreads library -llthread... no checking whether pthreads work with -pthread... yes checking for joinable pthread attribute... PTHREAD_CREATE_JOINABLE checking if more special flags are required for pthreads... no checking for cc_r... gcc checking do we need malloc/malloc.h... nope, works out of the box Findr 3rd-Party Libraries checking for art_vpath_add_point in -lart_lgpl_2... yes checking libart_lgpl/libart.h usability... no checking libart_lgpl/libart.h presence... no checking for libart_lgpl/libart.h... no checking for pkg-config... pkg-config configure: WARNING: ---------------------------------------------------------------------------- * I found a copy of pkgconfig, but there is no libart-2.0.pc file around. You may want to set the PKG_CONFIG_PATH variable to point to its location. ---------------------------------------------------------------------------- configure: WARNING: ---------------------------------------------------------------------------- * I could not find a working copy of libart-2.0. Check config.log for hints on why this is the case. Maybe you need to set LDFLAGS and CPPFLAGS appropriately so that compiler and the linker can find libart_lgpl_2 and its header files. If you have not installed libart-2.0, you can get it either from its original home on ftp://ftp.gnome.org/pub/GNOME/sources/libart_lgpl/2.3/ You can find also find an archive copy on http://oss.oetiker.ch/rrdtool/pub/libs The last tested version of libart-2.0 is 2.3.17. LIBS=-lm LDFLAGS= CPPFLAGS= -I/usr/include/libart-2.0 ---------------------------------------------------------------------------- checking for zlibVersion in -lz... yes checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes checking for png_access_version_number in -lpng... yes checking png.h usability... yes checking png.h presence... yes checking for png.h... yes checking for FT_Init_FreeType in -lfreetype... yes checking ft2build.h usability... no checking ft2build.h presence... no checking for ft2build.h... no checking for pkg-config... (cached) pkg-config configure: WARNING: ---------------------------------------------------------------------------- * I found a copy of pkgconfig, but there is no freetype2.pc file around. You may want to set the PKG_CONFIG_PATH variable to point to its location. ---------------------------------------------------------------------------- configure: WARNING: ---------------------------------------------------------------------------- * I could not find a working copy of freetype2. Check config.log for hints on why this is the case. Maybe you need to set LDFLAGS and CPPFLAGS appropriately so that compiler and the linker can find libfreetype and its header files. If you have not installed freetype2, you can get it either from its original home on http://prdownloads.sourceforge.net/freetype/ You can find also find an archive copy on http://oss.oetiker.ch/rrdtool/pub/libs The last tested version of freetype2 is 2.1.10. LIBS=-lpng -lz -lm LDFLAGS= CPPFLAGS= -I/usr/include/freetype2 ---------------------------------------------------------------------------- configure: error: Please fix the library issues listed above and try again.

7 9

RE: [CentOS] OT WAS: Johnny's postfix/dovecot/squirrelmail/virus scanning+ Centos4 Walk Through...
by Alex Palenschat 17 Aug '06

17 Aug '06

> > This website say "hacked..." > > Please i seafch a lot for a guide with these products... if > anyone have > the guide, please put the url or something like... > > Thanks a lot. OK, I'll bite. I'm aware of how annoying it is to have someone peering over your shoulder when you are in the middle of a crisis asking questions, but I'm curious what it is that is making johnny's site so vulnerable. Is it forum software? I hope it's not a hack against a package in the base... Anyway, just wondering because I have user's complaining about the fact that I don't have their forum up and running. They may have to wait for a long time. Alex

8 7

Building a basic router with two nic's
by centos 16 Aug '06

16 Aug '06

I need help setting up a basic routing between two nic's on my CentOS desktop. I thought I'd understood the basics, but ... I don,t want a nat router, just packets forwarded back and fort. This is what I thought would do the trick, but didn't. Can someone please give me some pointers or links so I can get this right. # echo "1" > /proc/sys/net/ipv4/ip_forward # route add -net 192.168.2.0 netmask 255.255.255.0 eth1 # route add -net 192.168.2.0 netmask 255.255.255.0 gw 192.168.1.150 eth1 # # route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.2.0 192.168.1.150 255.255.255.0 UG 0 0 0 eth1 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1 0.0.0.0 192.168.1.150 0.0.0.0 UG 0 0 0 eth1

6 6

Johnny's postfix/dovecot/squirrelmail/virus scanning + Centos4 Walk Through...
by Chris Mauritz 16 Aug '06

16 Aug '06

Is anyone mirroring Johnny's write up on this? As fate would have it, I've finally got some time to sit down and configure a spare box to be my new mail server and Johnny's site has been defaced again. :-( Sigh....I even checked to make sure it was up this morning, drove to the office so I could do everything from the terminal and my handy dandy roadmap is gone.... Any pointers to another source would be greatly appreciated. Best regards,

4 7

Customizing Gnome
by Alfred von Campe 16 Aug '06

16 Aug '06

This is not really CentOS specific, but I'm using and supporting Gnome on CentOS 4.3 systems, and there are a few Gnome issues that I haven't been able to resolve that I thought this list might be able to help with. On my home CentOS 4.3 system, which was originally a CentOS 3.X system (i.e., I ran Gnome from the same user account then as I do now), when I log in to the Gnome desktop, I only have a "menu bar" at the bottom of the screen. On the new 4.3 systems at work, I have a menu bar at the top of the screen and another bar at the bottom of the screen. Each one is about half the height of the one on my home system. It appears that some setting in a Gnome configuration file in my home directory must be causing this, but I haven't figure out which one. Any ideas? The next issue is that one of my users asked me if it was possible to add additional entries to the Applications menu. I haven't found anything in the on-line help to point me in the right direction. Finally, another user would like to be able to open up a Terminal window with the working directory set to whatever is currently shown in the Nautilus file browser, and again, I haven't found a way to do this. I do realize that you can drag a folder icon from a Nautilus window to a Terminal window and that it will past the path into the Terminal window which you can use as an argument to cd, but it's not as elegant as say right-clicking on a folder and picking "Open in Terminal Window". Any pointer to a fine manual to read are appreciated, as are outright solutions of course :-). Alfred

1 0

Running firefox on a remote host on centos-4
by Joshua Baker-LePain 16 Aug '06

16 Aug '06

Back in the day (read: before the latest firefox update), I used to be able to ssh to a remote box, run 'firefox -local', and have that box fire up its own firefox session even if I was running firefox on the system from I which I sshed. Those days seem to be gone. No matter what I try, if I've got firefox running on my local desktop, the remote firefox command just fires off another instance of the local firefox session. I've got several boxes running monitoring daemons reporting via http only to the localhost, so this was a handy feature for me. Is there any official way to get it back? If not, I guess I'll have to hack a 'localfirefox' script that doesn't do the nasty mozilla-xremote-client trick. Ah, progress... *sigh* -- Joshua Baker-LePain Department of Biomedical Engineering Duke University

10 17

Big Thanks to Johnny
by Chris Mauritz 16 Aug '06

16 Aug '06

As a result of following Johnny's handy dandy guide, the postfix/clamav/spamassassin/squirrelmail/dovecot install on one of my new 4.3 boxes was mostly painless. I've been using postfix and keeping in touch with Wietse since 98-ish so I'm quite comfy with postfix, but all this new fangled mail scanning stuff is a bit confusing to an old dog like me. :-) It seems to mostly work, although one of the components seems to have a hair trigger and flags known-clean binary attachments and dumps them into the "hold" bin. I guess my next task is to figure out how to corral that cruft into a "bulk" folder like gmail or figure out how to turn down the naughty threshold a bit. In any case, it probably would have taken me days to sort it all out without Johnny's guide. Thanks! I'm hoping to get things to the point that I'm comfortable downloading mail onto my little HTC Wizard (Cingular 8125) mobile windows/phone thing without worrying too much about catching a social disease. :) Cheers, Chris

3 2

Managing updates to non-centos packages
by Lucas Chan 16 Aug '06

16 Aug '06

Hi, I'm looking for some documentation (or advice) on how to best manage a -mostly- upstream binary compatible CentOS installation. I enabled the rpmforge repository in order to install a few packages not available in base/updates/centosplus. But, now when I do a "yum check-update" yum wants to update a whole stack of packages because it's found newer versions at rpmforge. Is there a way to tell yum to only pull updates from rpmforge for packages that were initially installed from rpmforge? I've been using the includepkgs directive with some success; although installing a package that has a dozen or so dependancies (from rpmforge) quickly makes this method seem not so elegant. Is there a better way? I'm going around in circles a bit with the official yum documentation. Obviously what I'm aiming for is to be as close to 100% binary compatible with the upstream provider as possible, and to also easily pull the latest updates for all my packages. Thanks in advance, I hope you're all having a good week. Regards, LC.

2 4

ntpd 4.2.0 'broadcastclient' broken
by Thomas Brown [pft] 16 Aug '06

16 Aug '06

I'm running latest CentOS 4.3 (2.6.9-34.0.2.ELsmp) and found that the included 'ntpd' 4.2.0a(a)1.1190-r will not accept NTP broadcast packets. There is a documented bug in ntpd 4.2.0 to this effect, resolved way back in 2004: https://ntp.isc.org/bugs/show_bug.cgi?id=267 Any chance someone can include a more recent version of 'ntpd' in the next CentOS RPM update distribution? The current stable version is 4.2.2p3, 8/5/2006. Thanks! -Tom

2 1

Bluetooth anyone?
by Robert Moskowitz 15 Aug '06

15 Aug '06

Can anyone give me some pointers for bluetooth? I see the bluetooth service is running. I plug my usb bluetooth adapter in. And nothing. And Kudzu does not discover the adapter Are there drivers I have to install?

1 0

Where to get last firefox for Centos please?
by Josep M. 15 Aug '06

15 Aug '06

Hello All. Before was in centosplus repository http://mirror.centos.org/centos/4.3/centosplus/i386/RPMS/ But now 1.5.0.2 is last release, I know that never versions have security updates, but don't know if Linux versions of firefox was affected or not. Thanks in advance --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

3 2

Where is wpa_gui?
by Robert Moskowitz 15 Aug '06

15 Aug '06

I am seeing references to wpa_gui on the madwifi WiKi. But I do not see it in the Enterprise Redhat 4 directories with the other madwifi and wpa_supplicant rpms. only wpa_cli Anyone have information as to the whereabouts of this program?

1 0

Building a live CD and live PXE
by John Newbigin 15 Aug '06

15 Aug '06

I have updated my instructions on how to roll your own CentOS-4 Live CD. I also made a script which does it all for you. I have also got instructions on how to turn the Live CD into a PXE bootable Live version. All the details can be found here: http://www.byteclub.net/wiki/CentOS_Live John. -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin

5 13

RE: [CentOS] XFS and CentOS 4.3
by Kemal Bozdağ 15 Aug '06

15 Aug '06

Hi all, I'm looking turkish knowledge for centos... anybody help me please thank you very much Kemal Bozdağ Devri Alem Turizm Yatırım Danışmanlık A.Ş. Cumhuriyet Cad. No 217 Harbiye 34373 İSTANBUL T 0212 444 83 83 D 0212 368 17 03 F 0212 368 17 19 www.devrialem.com -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Tuesday, August 15, 2006 12:18 PM To: CentOS ML Subject: Re: [CentOS] XFS and CentOS 4.3 On Tue, 2006-08-15 at 14:13 +1000, Mark Strong wrote: > Hi All, after looking around for info on XFS(the filesystem) and its use > on CentOS and/or RHEL 4. There seems to be a lot of noise about 4K > Stacks (especially on linux-xfs(a)oss.sgi.com) > > So what is the best way to get XFS working with CentOS 4.3 ? And not > have something like this happening. > > A quote from the xfs list at sgi > >On Tue, 18 Jul 2006 at 10:29am, Andrew Elwell wrote > > > >using the 2.6.9-34 centosplus SMP kernel (3GHz P4 with > >hyperthreading enabled) > > > >what we normally (~once a day) is simply > > > >do_IRQ: stack overflow: 416 > >[<c0107a27>] > > >You don't want to use the XFS in the centosplus kernel. It has major > >known issues with 4K stacks (leading to overflows). Use the > >kernel-module-xfs (or somesuch) RPM instead, and you should have better > >luck. > > Do I need a kernel with 8K stacks? > > and is this > > http://dev.centos.org/centos/4/testing/i386/RPMS/kernel-module-xfs-2.6.9-34… > > the "kernel-module-xfs" RPM he was talking about (or equivalent for > `uname -r` equals 2.6.9-34.ELsmp). > > > Regards > Mark Strong > Personally, I would not use xfs on Linux ... maybe take a look here: http://distrowatch.com/weekly.php?issue=20060814 And see what several debain devel's say about XFS. RedHat says it is not stable enough to use in RHEL. I don't think everyone can be wrong. If you really want to use it, you can use the module you referenced above and our kernel. The standard RHEL kernel will not compile w/ anything except 4k stacks (that is how the CentOS kernel is released too) ... so if you want to do that, you'll need to figure it out.

1 0

Subversion: 400 Bad request error
by Jean Figarella 15 Aug '06

15 Aug '06

Here is my problem, On my network there is a subversion server to which everybody connects to and checks in/out code and documents. The workstations on the network are all based on Fedora core 3. And everybody's home directory is on a nfs share. This nfs share is mounted via the fstab. So no matter to which box a user logs in, his/her home dir is gonna be the same. Again, /home is a nfs mounted dir. Now, if I am on Fedora and I cd into /home/jean/dev/ for exmaple, and then I do svn update everything works fine. But if I do the same on centos 4.3; cd /home/jean/dev and then svn update, it gives me this error: bash-3.00$ cd ~/dev/sysadmin/ bash-3.00$ svn update svn: REPORT request failed on '/svn/code/!svn/vcc/default' svn: REPORT of '/svn/code/!svn/vcc/default': 400 Bad Request (https://subversion) bash-3.00$ bash-3.00$ cd /local/new_dev/sysadmin/ bash-3.00$ svn update At revision 30009. bash-3.00$ As you can see if I am still on centos and I create a /local on the *local drive*, then I can check out code or documents there and do everything else. Again, while I am on the nfs mounted dir it does not works, once I get out of the nfs dir then it works. Authentication is done via NIS, so uid and gid is the same under both distributions and computers. I also checked nfs access permision on the /etc/exports files and both computers or hosts have the same set of permissions. The subversion version on Fedora is 1.2.1 and in centos 4.3 it is 1.1.4. I have already tried upgrading to the same subversion version and to more recent ones, and that did not work. I am thinking that maybe this is not a subversion error because I can sucessfully use it from fedora 3 anf 5, and debian. I think it has to do with CentOS. I was looking to upgrade all of the FC3 boxes in my network to CentOS (about 30 of them), but with this problem Ill have to stick with Fedora. Any ideas? Thanks, Jean

3 4

Video Card Not Recognized Installing CentOS 3.7
by Corwin Burgess 14 Aug '06

14 Aug '06

I set up a new system that includes the following: ASUS AE8N-E Motherboard (NVIDIA nForce 4 Ultra Chipset) AMD Athlon 64 3800+ Processor OCZ PC3200 Gold Edition 1GB Memory EVGA GeForce 6600 PCI-Express x16 Video Card CentOS 3.7 The video card wasn't detected and I had to use the VESA driver (generic) when I installed CentOS 3.7. As this is the first time I've used a NVIDIA video card with Linux my knowledge is nil on this subject. After a quick review of the available video drivers that come with CentOS 3.7 I did a Google search and came up with this link: http://www.nvidia.com/object/linux_display_ia32_1.0-8762.html Linux Display Driver - IA32 Version: 1.0-8762 Operating System: Linux IA32 Release Date: May 22, 2006 I downloaded this driver and attempted to install it. When I run this # sh NVIDIA-Linux-x86-1.0-8762-pkg1.run to install the driver I'm told that I'm running an X server and that I need to exit X before installing the NVIDIA driver. After some experimenting I'm left with two questions: 1. How do I exit the X server to install this video driver? 2. How do I restart the X server when the driver is installed? Any other comments about this subject would be welcome. Thanks, Corwin Burgess

3 5

OT: Gigabit Rated Eth Cables - Cat 6 v. Gigatrue
by Karl Balsmeier 14 Aug '06

14 Aug '06

Hi, In populating our racks with several gigbit switches over the next few days, i'm wondering this: Is it over-engineering to seek out 550mhz rated cables over the typical Cat 6 250mhz rated cables? I've been advised (if you can a salesperson's words advice, heh.) that 250mhz is enough to handle traffic up to 10GB's. Should I just be happy with Cat6 for my GB switches or is is worth getting more into the details and seeking 550mhz-rated cable? Just curious what your experience is in migrating away from the typical 10/100 cables of yore to the spiffier world of gb rated traffic. -karlski __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

MadWiFi and WPA working only on base kernel, not plus kernel
by Robert Moskowitz 14 Aug '06

14 Aug '06

Interesting situation: First my system - HP NC4010, with Atheros pci mini card. Latest MadWiFi drivers from: http://atrpms.net/dist/el4/madwifi/ and wpa from: http://atrpms.net/dist/el4/wpa_supplicant/ I had just the madwifi working back in Jul at the IETF conference. But as open only. I had upgraded to the plus kernel, thinking it would get my internal SD card reader working (it hasn't but I have to follow up on that multi-drive usb drive thread). Once i upgraded to the plus kernel, kudzu could not see the Atheros card. I put everything on hold, but I had at it today. I discovered that if I boot with the standard kernel, it detects the Atheros card and I even got WPA-PSK working. But I boot with the plus kernel, and kudzu goes and removes the Atheros information from the /etc/sysconfig/hwconf file. So why doesn't the plus kernel, which is suppose to have all the drivers on that the upstream turned off not work with my Atheros card??????

1 0

RE: [CentOS] yum updates
by Bowie Bailey 14 Aug '06

14 Aug '06

Johnny Hughes wrote: > On Tue, 2006-08-08 at 14:42 -0400, Bowie Bailey wrote: > > Johnny Hughes wrote: > > > > > > Yum has no option to install an older file on top of a newer file > > > > > > An update probably installed the 34.0.2.EL-xxxx-devel file ... so 34.0.1 > > > will never install instead of the newer one. > > > > The installed package was older. I have already removed the package > > on the system I was working with, but here is an example from another > > one that is identical except for being x86_64 instead of i686. > > > > # yum info installed kernel-smp-devel > > Installed Packages > > Name : kernel-smp-devel > > Arch : x86_64 > > Version: 2.6.9 > > Release: 34.EL > > Size : 11 M > > Repo : installed > > > > # yum update kernel-smp-devel-2.6.9-34.0.1.EL > > Setting up Update Process > > Setting up repositories > > Reading repository metadata in from local files > > Could not find update match for kernel-smp-devel-2.6.9-34.0.1.EL > > No Packages marked for Update/Obsoletion > > > > I have verified that the package does exist in the repo: > > > > kernel-smp-devel-2.6.9-34.0.1.EL.x86_64.rpm > > > > It looks like a "yum update" will only update to the newest package > > version. > > yum install should install a newer ... but not necessarily the newest > package (I think) :) Based on the example I gave and other testing I have done, I believe that I am correct. I was unable to find any syntax that would let me select a newer-but-not-newest version for an update. -- Bowie

1 0

Several files's checksum change without reason
by kadafax 14 Aug '06

14 Aug '06

Hi list, I'm a bit worried here. On a server, Centos 4.3 fully-patched SELinux activated, Osiris (a decentralized scanner for files changes on distant servers) signaled me several changes on files who were not (at first sight) affected by a recent update (the list is below). Is there a logic explanation for those changes to happen ? The "rpm -Va" command does not output md5sum change for those files. compare time: Sat Aug 12 05:35:14 2006 host: server scan config: server (abcdefg) log file: no log file generated, see system log. base database: 56 compare database: 57 [211][server][cmp][/usr/bin][mtime][Sun Aug 6 04:02:20 2006][Sat Aug 12 04:02:22 2006] [213][server][cmp][/usr/bin][ctime][Sun Aug 6 04:02:20 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/afs5log][checksum][b838bb6106250fdfd95ae8a7dc7fa95b8f762df4][a4c817dd8ca12449dc1a8bdf7f972c19aa3ffd7b] [206][server][cmp][/usr/bin/afs5log][inode][22423][22422] [213][server][cmp][/usr/bin/afs5log][ctime][Thu Jun 29 21:43:54 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/dig][checksum][9d34eb65d61c9f43efc9b6141f727e7fdbb618bf][69d94a240e415b5f22a220fe71dcf865a9a5608c] [206][server][cmp][/usr/bin/dig][inode][25755][25759] [213][server][cmp][/usr/bin/dig][ctime][Thu Jun 29 21:43:48 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/elinks][checksum][a62ab203cc0126aa846419ca25e2e2a6524ab58d][a66553759b6392f20b4f4c61d798585636feea9e] [206][server][cmp][/usr/bin/elinks][inode][26239][25433] [213][server][cmp][/usr/bin/elinks][ctime][Thu Jul 27 04:02:16 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/host][checksum][f6e94925f133d1a9fe088da757ec60b493800adc][c47534726541474f7a1e1b7d23ec41ed44169118] [206][server][cmp][/usr/bin/host][inode][25133][22958] [213][server][cmp][/usr/bin/host][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/ipmi_ui][checksum][e106a461a907d0dec9f622919ddaed1a84552063][1bb99621c20d3e66f362a355d8d8e09340f748d6] [206][server][cmp][/usr/bin/ipmi_ui][inode][25973][21341] [213][server][cmp][/usr/bin/ipmi_ui][ctime][Thu Jun 29 21:43:53 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/ipmish][checksum][f4f38f1f45f83d057b32deb2dbae9940f9d9dcc0][6e13d56f5457213de8302e08c311badcd49b1e46] [206][server][cmp][/usr/bin/ipmish][inode][25042][25755] [213][server][cmp][/usr/bin/ipmish][ctime][Thu Jun 29 21:43:50 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/nslookup][checksum][7f7087ace44e1d14e984cd367df3b794cc1859a3][655c9d0f1328aa07f45a061825989809ae5b9885] [206][server][cmp][/usr/bin/nslookup][inode][25595][25317] [213][server][cmp][/usr/bin/nslookup][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/nsupdate][checksum][721695ed63aed8b55d6978b1384a0250d26d4d15][cac7585a8520d619d1a507b160e7a35651db3563] [206][server][cmp][/usr/bin/nsupdate][inode][21341][25780] [213][server][cmp][/usr/bin/nsupdate][ctime][Thu Jun 29 21:43:53 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/openssl][checksum][c728d401456ee2003a329eb74e1ea3f008ddcf17][ddc4e323567fac0696dd9aeacea7402869837ff7] [206][server][cmp][/usr/bin/openssl][inode][22379][22423] [213][server][cmp][/usr/bin/openssl][ctime][Thu Jun 29 21:43:54 2006][Sat Aug 12 04:02:22 2006] [211][server][cmp][/usr/sbin][mtime][Fri Jul 28 12:45:00 2006][Sat Aug 12 04:02:23 2006] [213][server][cmp][/usr/sbin][ctime][Fri Jul 28 12:45:00 2006][Sat Aug 12 04:02:23 2006] [204][server][cmp][/usr/sbin/postalias][checksum][f338a0c58cfe235db579d20bea4326fab24f8cb3][c95b319b6cf1427f6c4bcce2c73d6a616b2df0c9] [206][server][cmp][/usr/sbin/postalias][inode][25433][25404] [213][server][cmp][/usr/sbin/postalias][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/postcat][checksum][fc47304764134988383104ef304f60252dcae749][df49b7fa733d217bb7f0ccec4d7b24b1417f8d21] [206][server][cmp][/usr/sbin/postcat][inode][22626][25579] [213][server][cmp][/usr/sbin/postcat][ctime][Fri Jun 30 03:20:48 2006][Sat Aug 12 04:02:20 2006] [204][server][cmp][/usr/sbin/postconf][checksum][f9d25482431b3a5988e1025bb8abc5033a7517cb][86f6fb5dec3746aa6879a57f1acfac6dac31b85a] [206][server][cmp][/usr/sbin/postconf][inode][25780][25556] [213][server][cmp][/usr/sbin/postconf][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postdrop][checksum][6c46e31450d7ac78dce9e840310af5859517eeeb][4409c5e06ec3e9c4e95bbec1ac46e2127cc6e568] [206][server][cmp][/usr/sbin/postdrop][inode][25556][26239] [213][server][cmp][/usr/sbin/postdrop][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postkick][checksum][22f2b85a6e64a9828ed2d715464d4252177049f9][174444e88e6a6225a5be5cf91b96a79bffcee751] [206][server][cmp][/usr/sbin/postkick][inode][26373][25973] [213][server][cmp][/usr/sbin/postkick][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postlock][checksum][8f294ff26d9ae1cc310c66067eb681fc73d87adc][1615d52feaab658f03ebb2f8b48886998722a478] [206][server][cmp][/usr/sbin/postlock][inode][26379][22379] [213][server][cmp][/usr/sbin/postlock][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postlog][checksum][05e084e009f24c6dfec12569fee9c2244495fc0f][39974a2952de785a4eb348c21a01e6caa5c666be] [206][server][cmp][/usr/sbin/postlog][inode][24994][22800] [213][server][cmp][/usr/sbin/postlog][ctime][Fri Jun 30 03:20:50 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/postmap][checksum][61a735999ec1ad6d865fceec01f1c21c78627519][9208a41a41b480664cb0110b945b206b1621fc3d] [206][server][cmp][/usr/sbin/postmap][inode][25404][25310] [213][server][cmp][/usr/sbin/postmap][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/postqueue][checksum][67e91f182df00d3f1f37a6877bb8d82447eeb705][1c8a80fe7622f6ab8d5b80d5758cd478b430ec68] [206][server][cmp][/usr/sbin/postqueue][inode][26375][26254] [213][server][cmp][/usr/sbin/postqueue][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postsuper][checksum][c22c5bb67ae4e726632d882ca500890ad517f8fe][0960a054e31de1e43fceb1a90657eb906cf441da] [206][server][cmp][/usr/sbin/postsuper][inode][21335][26257] [213][server][cmp][/usr/sbin/postsuper][ctime][Fri Jun 30 03:20:50 2006][Sat Aug 12 04:02:23 2006] [204][server][cmp][/usr/sbin/rpc.gssd][checksum][00d368ba2e50ccd8e7818b033ecc2e760482fb58][94cd32ba2be8b42250371bb0b320db885d80ec13] [206][server][cmp][/usr/sbin/rpc.gssd][inode][25317][25133] [213][server][cmp][/usr/sbin/rpc.gssd][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/rpc.idmapd][checksum][c2e1487fa3a2b3c6920113794aa736cda1afbc23][f64318ecfebef5d775817c31f7125cd24e6c18fe] [206][server][cmp][/usr/sbin/rpc.idmapd][inode][26225][21340] [213][server][cmp][/usr/sbin/rpc.idmapd][ctime][Thu Jun 29 21:43:56 2006][Sat Aug 12 04:02:23 2006] [204][server][cmp][/usr/sbin/rpc.svcgssd][checksum][057aba4745e26e079cdcf3e25ff758a8fe8b99ac][6b5dbe025fee9c33e36143d7b77cd53a60395028] [206][server][cmp][/usr/sbin/rpc.svcgssd][inode][26814][25042] [213][server][cmp][/usr/sbin/rpc.svcgssd][ctime][Thu Jun 29 21:43:50 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/saslauthd][checksum][1aa8edafae567d6b6fb14f2eb49cdf4d830ca279][c3ebd0c10c4cfac0e0f85a91c7f679a149057026] [206][server][cmp][/usr/sbin/saslauthd][inode][26815][26256] [213][server][cmp][/usr/sbin/saslauthd][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/sendmail.postfix][checksum][50825933dd6029af8aa3c3cb7611a6c5e39252bd][33cc264aec19f9fb6386b6addca71e114cea982a] [206][server][cmp][/usr/sbin/sendmail.postfix][inode][22800][25595] [213][server][cmp][/usr/sbin/sendmail.postfix][ctime][Fri Jun 30 03:20:48 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/smtp-sink][checksum][0cf6dac0dcb97d0910e843bf6a58ee8cec5278b1][3c3a2470a467d258e49eb17af3591fa8cbf20fe6] [206][server][cmp][/usr/sbin/smtp-sink][inode][25310][24994] [213][server][cmp][/usr/sbin/smtp-sink][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/smtp-source][checksum][892d51b76c4685ac3917c0dad1e0a6fe7ce50cd1][46ad415f1b9dbf6d0761c1f22ee8f12a9f153108] [206][server][cmp][/usr/sbin/smtp-source][inode][22958][26253] [213][server][cmp][/usr/sbin/smtp-source][ctime][Fri Jun 30 03:20:48 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/stunnel][checksum][77254c773406659daab7d70cb190a82b3b45d4cd][561ea970463ccc9ef6ef7f78eb26681645c24a31] [206][server][cmp][/usr/sbin/stunnel][inode][21340][21335] [213][server][cmp][/usr/sbin/stunnel][ctime][Thu Jun 29 21:43:56 2006][Sat Aug 12 04:02:23 2006] Change Statistics: ---------------------------------- checksums: 27 SUID files: 0 root-owned files: 29 file permissions: 0 new: 0 missing: 0 total differences: 85 kfx.

3 5

AMD AM2 motherboard with supported SATA chipsets
by Feizhou 14 Aug '06

14 Aug '06

Hello all, Anybody know of any good and reliable AMD AM2 socket motherboards with SATA chipsets that support NCQ such as SIL3124, NForce 570 Ultra and offer six or more SATA channels?

1 0

proftpd problem
by nightrid3r 13 Aug '06

13 Aug '06

i installed proftpd on a fully updated centos 4.3 server. the servers sits on a private lan (192.168.1.*) when trying to acces the ftp (both from inside the lan and from outside trough a nat router) i cannot login port forwarding is ok as i can enteer both username and password error : 530 login incorrect any ideas? thanks

5 4

Problems with x86_64 kickstart
by Tracy R Reed 13 Aug '06

13 Aug '06

I have successfully set up a very nice kickstart install with the i386 version of CentOS 4.3 and it works great. I am using a custom kickstart script and the kernel and initrd from disc1/images. But when I try to duplicate this for a 64 bit setup (changing paths in my tftp server, ks.cfg, etc to point to the 64 bit stuff) it successfully tftp's everything just as it should (tethereal output follows): 0.000000 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/pxelinux.0, Transfer type: octet 0.002503 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/pxelinux.0, Transfer type: octet 0.039763 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/pxelinux.cfg/01-00-0c-29-14-3a-c5, Transfer type: octet 0.045674 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/msgs/boot.msg, Transfer type: octet 0.522788 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/CentOS4.3/x86_64/vmlinuz, Transfer type: octet 2.487047 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/CentOS4.3/x86_64/initrd.img, Transfer type: octet But then it never tries to get the ks.cfg. I am booting it with: label centos kernel CentOS4.3/x86_64/vmlinuz append initrd=CentOS4.3/x86_64/initrd.img ramdisk_size=7000 ksdevice=eth0 ks=http://192.168.0.7/network-install/ks.cfg.x86_64 (that last line should be all one line) in the /tftpboot/linux-install/pxelinux.cfg/01-00-0c-29-14-3a-c5 config file which it tftp's so it should know that it needs to get the ks.cfg.x86_64 file. I have this same setup working for i386 and it seems to work fine. I would guess there might be some difference in the initrd's but for some reason /linuxrc is a symlink to sbin/init which is a binary executable instead of a shell script. Anyone know why it isn't a shell? And why would my x86_64 kickstart be behaving different from my i386? Any help is very much appreciated! -- Tracy R Reed http://ultraviolet.org A: Because we read from top to bottom, left to right Q: Why should I start my reply below the quoted text

3 6

cpuspeed causing hangs on warm boots
by Dan Halbert 12 Aug '06

12 Aug '06

We are using CentOS-4.3 (x86_64) with Opteron servers, and noticed a problem with cpuspeed: If we reboot by doing "# reboot" or similar from a shell, the boot will hang not long after cpuspeed starts. The machine freezes: ctrl-alt-del doesn't work, and only pressing the reset button or a power cycle will restart the machine. If we reboot from power-up or by pressing the reset button, there is no hang, and the boot proceeds normally. Another strange thing is that only some boxes have this problem. Others, seemingly identical, reboot just fine. We've compared the BIOS settings, the CPU steppings, etc., and they seem to be identical. It's very odd. Maybe we're missing a BIOS setting, but we couldn't find a difference. We've fixed this just by turning off the cpuspeed service. It took some trial and error to figure out this was caused by cpuspeed. Misleadingly, the hang doesn't occur immediately after "Starting cpuspeed: [OK]" prints. Instead it occurs when trying to bring up a network interface, which is almost right after cpuspeed starting. With the original 2.6.9-34.ELsmp, it's at "Bringing up interface eth0". With the 2.6.9-34.0.2.ELsmp (and all other rpms updated), it hangs at "Bringing up loopback interface". This may just be a timing thing. We can just forget about cpuspeed, but if any of you have any advice, we'd appreciate it. Otherwise I am basically posting this to save diagnostic time for those who encounter these symptoms in the future. These are dual-core dual Opteron 265/270 servers with Tyan K8SD Pro motherboards. Thanks, Dan

2 1

RE: [CentOS] yum updates
by Bowie Bailey 12 Aug '06

12 Aug '06

Johnny Hughes wrote: > On Tue, 2006-08-08 at 13:08 -0400, Bowie Bailey wrote: > > Johnny Hughes wrote: > > > > > > (or you can remove the package with rpm -e kernel-smp-devel ... then > > > > > > yum install kernel-smp-devel-2.6.9-34.0.1.EL.i686 > > > > > > or > > > > > > yum install kernel-smp-devel-2.6.9-34.0.1.EL.x86_64 ) > > > > I found the updates repo shortly after sending the first email. I > > followed your second suggestion and was able to have "yum install" see > > it after removing the old package. > > > > Why is the "rpm -e" required? It seems like I should be able to do > > "yum update" and specify the package version as long as it is newer > > than what is currently installed. > > > > Yum has no option to install an older file on top of a newer file > > An update probably installed the 34.0.2.EL-xxxx-devel file ... so 34.0.1 > will never install instead of the newer one. The installed package was older. I have already removed the package on the system I was working with, but here is an example from another one that is identical except for being x86_64 instead of i686. # yum info installed kernel-smp-devel Installed Packages Name : kernel-smp-devel Arch : x86_64 Version: 2.6.9 Release: 34.EL Size : 11 M Repo : installed # yum update kernel-smp-devel-2.6.9-34.0.1.EL Setting up Update Process Setting up repositories Reading repository metadata in from local files Could not find update match for kernel-smp-devel-2.6.9-34.0.1.EL No Packages marked for Update/Obsoletion I have verified that the package does exist in the repo: kernel-smp-devel-2.6.9-34.0.1.EL.x86_64.rpm It looks like a "yum update" will only update to the newest package version. -- Bowie

2 1

yum not showing mirror with php/mysql
by Melinda Odom 11 Aug '06

11 Aug '06

Hi, I have had a new server installed using CentOS 4.3 and no matter what settings I try in the /etc/yum.repos.d/CentOS-Base.repo file I cannot get the CentOS mysql and php which are clearly listed in this mirror to even show up: http://mirror.centos.org/centos/4/os/i386/headers/ and only get this: Setting up repositories Reading repository metadata in from local files This is the CentOS-Base.repo listing: [base] #name=CentOS-$releasever - Base name=CentOS-4 - Base #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch &repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ baseurl=http://mirror.centos.org/centos/4/os/i386/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 I have tried this with the same results: [base] name=CentOS-$releasever - Base #name=CentOS-4 - Base mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch& repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ #baseurl=http://mirror.centos.org/centos/4/os/i386/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 I have also tried both listings with the gpgcheck=1 and gpgkey=etc.. commented out # with no success. I appreciate any help with this. Sincerely, Melinda Odom Design Hosting, Inc. www.designhosting.biz 479-471-0891 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.10.9/416 - Release Date: 8/10/2006

3 2

Server Hacked: Cpanel
by Timothy J Rice 11 Aug '06

11 Aug '06

cPanel or ANY server solution should never be deployed until it is locked down! We have been using cPanel for years as well as Hsphere and Plesk for both linux and windows. They all are hackable if not locked down and hardened. We use Trustix, RHEL & CentOs for our Linux environments. The more you allow (in cPanel or any control panel), the less secure. Fix the tmp directory BEFORE you plug it in to the network. File there should NOT be executed by ANYONE. About 3 and a half years ago, we learned this the hard way and every index.* file on a particular server that had cpanel installed was defaced (RH 7 I believe). This was NOT a cPanel issue. It was a combination of a PHP exploit, tmp not being secured, and my lack of knowledge. cPanel has a utility to secure the tmp directory. On a machine that has cPanel installed type the below command: /scripts/securetmp I have never had a problem with this sort of attack after I secured the tmp directory. I also recommend not giving shell access by default. Only give it out to people who need it. Make it a little difficult for the end user. Ask them them to fax a copy of their DL and/or copy of the first page of a utility bill. Sure a bad person can create these documents, but it typically is not worth their time. Also if a user needs ssh bad enough, they will send this info in and they probability will be good users. It also lets them know that you are "security conscious". You can also install a keystroke auditing system such as eas / easd so you can review ssh sessions should you suspect something. If you grant a user ssh rights, reset the end users password to a secure password and let them know that they should maintain a strong password. If their account is bruteforced due to a weak password, cancel their account, as they are too much of a risk for you (or ask them to go dedicated). Install some type of BFD (Brute Force Detection) software. I like http://www.rfxnetworks.com/bfd.php (free and easy to install) Disable things like gcc, wget, lynx . . .etc. I also like to chattr +i files. A very good application is another product from rfnetworks called LES http://www.rfxnetworks.com/les.php Disable root direct login via ssh. Block all incoming traffic except needed ports in iptables (22, 80, 443, 21, . . . ). I like to block all outgoing traffic to all users except for root with the exception of common API's such as Domain registration, Credit Card Gateway etc.) Enable suexec and php safemode if possible. Also disable the mod_dl and other php modules known to have caused problems. If you have users who need every module known to man, setup a server with the php modules needed and only place these users on these systems who specifically need them. Why introduce more risk to users who do NOT need all these features? Install mod_evasive to help against Ddos as well as Mod Security. Run updated rootkit checkers (rkhunter & chkrootkit) daily. This is not perfect, but it will help determine a systems integrity. If a machine has been hacked or owned - you MUST setup a new machine and restore the non binary files to the new machine. This is the sad truth, but you never know what is hiding on a machine after its hacked (owned). Do NOT allow cPanel to automatically update your software or you are asking for problems. Have a cheap server or virtual server with cpanel running on it and update that "test" machine and make sure that nothing breaks. We have 50 beta users who we give hosting to. We place on these users on beta (test) machines. The beta users are aware that these machines are at greater risk than the production machines and they are 100% responsible for backups. It is worth giving away 50 free accounts and place them on test beta platforms so that we can actually simulate a "real" environment while testing cpanel upgrades. If testing is successful, then roll out in production. cPanel has broke many things in the past that were easily fixed by their support staff but why take chances??? I recommend the above measures for any system (cPanel installed or not). cPanel is the most popular control panel for Linux. It allows the end user to control their site and cpanel ties into many billing systems so account provisioning can be automatic. We use it because it offers features that end users demand. Without it, we can't compete . . . so we have to adapt by securing the system as much as possible. Tim Rice Host It Now Networks http://hostitnow.com/ Timothy Rice Host It Now Networks http://hostitnow.com

1 0

Server Hacked: Cpanel
by Karl Balsmeier 11 Aug '06

11 Aug '06

Hi, I have servers of mixed OS, some Centos, some Fedora, and after the flame war that erupted last week (where I said basically nothing and just watched), my server was hacked by this team of hackers, actually their friend: http://www.sibersavascilar.com/ This made Karanbir's statements about mixing Cpanel and Centos (any maybe any linux distro) come true very quickly. If one of the top package maintainers says this, it bears weight. I'd like to know more about this subject, specifically on the package front, for security's sake. Karanbir, can you restate the issues with Cpanel please? They are trying to recommend CentOS as the OS to install on, and even that Linux Journal article did -and before anyone else wastes their time, -let's get everything out in the open so that there's a pipermail archive trail for future folks 'googling' for info later on pros/cons of using, or avoiding use of, non-complimentary projects/technologies. Is the issue that both parties maintain separate packaging/updating regimes and have little or no successful communication as far as keeping thing secure and up to date? That seemed to be what you said, -and if I had the old email, i'd just run with it's advice. Also, can you list the IRC channels you mentioned last time that contain the various hackers bragging about freshly broken Cpanel/Centos builds? Freenode right? Any others? I've been on IRC back when BITNET was still active and there wasn't even mosaic yet, but have always avoided it after 1992 because of hackers 'sniffing for future targets'. William, Jim, Johnny, -any comments are truly welcome, -anyone really. Basically i'd like to help stop or curtail the 'open season' this set of circumstances is creating for hackers, -I have already decided to avoid Cpanel on Centos as it is, -my server that was hacked with Cpanel was not a Centos box, and those that have it, have been shut down. The server next to it was *also* hacked, and that *was* a centos machine, with only a yum update from 3 days prior. Is it really recommeded that I run yum update evry night then? It was stunning to have a box up for 3 days and then get owned so fast. Luckily this was for my personal business entity, and not my full-time job, which indeed does run 50-70 Centos servers behind layers of firewalls and other protections, and *no* commercial products, only centos packages by Dag or Karanbir. To anyone in the mood for scolding, please hold off OK? I'm not in the mood for overbearing attitudes right now. I'm trying to run a business and seek solid answers. I see Centos as a reliable alternative to commercial offerings *if* you pay careful attention to what the senior staff and relevant discussion groups advise. As for the team of hackers, if anyone knows who this is, or can point out who they might be or how to ban them, -that is also most welcome. Hacked By Crackers_Child For Peace DONT WAR ! Greetz : X_Alperen_X, XTech Inc , Metlak, Root_Mor,Dr Hacker, Dr.Jr7 ,Dr,Dermann,Code_Power,CukurOvalý ALL My Friends And All SiberSavascilar.Com Members ! --------------------------------- Stay in the know. Pulse on the new Yahoo.com. Check it out.

9 23

Lang packs (extensions) not found with firefox-1.5.0.5-0.el4.1.centos4 ?
by Vincent Knecht 11 Aug '06

11 Aug '06

Hello, with CentOS 4.3 (i386), after updating firefox to 1.5 from update repo, I can't get it to have menu in my native language (french), altough french language pack appears in extension list. I've tried many things, like moving it on top/down, disabling/removing other languages packs, creating a fresh new user, and reinstalling firefox, to no avail (yes, I restarted firefox between these attempts). I also searched in upstream's bugzilla, and didn't find any issue for v4 & firefox... Finally, launching firefox through strace, I find that it searches for /usr/lib/firefox-1.5.0.5/chrome/fr-FR.jar and can't find it, since french lang pack seems to be /usr/lib/firefox-1.5.0.5/extensions/langpack-fr(a)firefox.mozilla.org/chrome/fr.jar I filed the issue in CentOS bugtracker: http://bugs.centos.org/view.php?id=1442 PS: if that matters, I'm using KDE from kde-redhat repo...

1 0

Multi-Card reader (SD, MMC, etc) and CONFIG_SCSI_MULTI_LUN kernel option in 34.0.2. Workaround
by J.J. Garcia 11 Aug '06

11 Aug '06

Hi folks, Im trying to get a multi-card reader on centos (SD, MMC, and so, 4 card slots) and i have read (http://www.cs.sfu.ca/~ggbaker/personal/cf-linux) that CONFIG_SCSI_MULTI_LUN should be enabled on kernel (=Y) but current 34.0.2 doesn't have it enabled by default, is there any particular reason to not be enabled? By the other hand i've also tweak the /etc/grub.conf file to boot the kernel with max_luns=32 and results are the same, only scsc lun=0 is recognized. At the same time using the workaround mentioned in the link pasted b4 regarding to modify the /etc/modules.conf to include 'options scsi_mod max_scsi_luns=8' gives the same results, no detection at all for the card slots. [root@sparkbox ~]# cat /proc/bus/usb/devices T: Bus=01 Lev=01 Prnt=01 Port=06 Cnt=03 Dev#= 7 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1 P: Vendor=0644 ProdID=0200 Rev= 4.00 S: Manufacturer=TEAC S: Product=CA-200 S: SerialNumber=0000020307B2 C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=500mA I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb- storage E: Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=125us E: Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms and /var/log/dmesg still shows: <...> scsi3 : SCSI emulation for USB Mass Storage devices Vendor: TEAC Model: USB HS-CF Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Attached scsi removable disk sdc at scsi3, channel 0, id 0, lun 0 USB Mass Storage device found at 7 <...> Instead of (if i understand well for this scsi3 line) after a [root@sparkbox]# sg_scan -i (it should show) /dev/sg2: scsi3 channel=0 id=0 lun=0 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] /dev/sg3: scsi3 channel=0 id=0 lun=1 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] /dev/sg4: scsi3 channel=0 id=0 lun=2 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] /dev/sg5: scsi3 channel=0 id=0 lun=3 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] But actually, [root@sparkbox ~]# sg_scan -i [root@sparkbox ~]# (shows nothing) And [root@sparkbox ~]# sg_map Stopping because no sg devices found Strange, could not find device /dev/sda mapped to sg device?? Strange, could not find device /dev/sdb mapped to sg device?? Strange, could not find device /dev/sdc mapped to sg device?? Strange, could not find device /dev/sdd mapped to sg device?? Looking at SCSI: [root@sparkbox ~]# cat /proc/scsi/scsi Attached devices: Host: scsi0 Channel: 00 Id: 00 Lun: 00 Vendor: ATA Model: HDS728080PLA380 Rev: PF2O Type: Direct-Access ANSI SCSI revision: 05 Host: scsi2 Channel: 00 Id: 00 Lun: 00 Vendor: Genesys Model: USB to IDE Disk Rev: 0002 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 00 Vendor: TEAC Model: USB HS-CF Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi4 Channel: 00 Id: 00 Lun: 00 Vendor: Model: USB DISK Pro Rev: 1.1b Type: Direct-Access ANSI SCSI revision: 02 And finally doing the last workaround found in the link from Greg Baker article for my scsi3 chain: [root@sparkbox ~]#echo >/proc/scsi/scsi "scsi add-single-device 3 0 0 1" [root@sparkbox ~]#echo >/proc/scsi/scsi "scsi add-single-device 3 0 0 2" [root@sparkbox ~]#echo >/proc/scsi/scsi "scsi add-single-device 3 0 0 3" Solves the identification: [root@sparkbox ~]# cat /proc/scsi/scsi Attached devices: <...> Host: scsi3 Channel: 00 Id: 00 Lun: 00 Vendor: TEAC Model: USB HS-CF Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 01 Vendor: TEAC Model: USB HS-xD/SM Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 02 Vendor: TEAC Model: USB HS-MS Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 03 Vendor: TEAC Model: USB HS-SD Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Now, even without update the udev rules with a new rule It seems to work after inserting the SD (1GB card) card on card-reader, from dmesg: <...> SCSI device sdg: 2012160 512-byte hdwr sectors (1030 MB) sdg: Write Protect is off sdg: Mode Sense: 23 00 00 00 sdg: assuming drive cache: write through SCSI device sdg: 2012160 512-byte hdwr sectors (1030 MB) sdg: Write Protect is off sdg: Mode Sense: 23 00 00 00 sdg: assuming drive cache: write through sdg: sdg1 <...> Mounting the correct SD card on fstab and only remaining to update permissions/udev or pamconsole (not sure where) to get RW access for user space. Hope it helps and just to clarify for mentionned CONFIG_SCSI_MULTI_LUN option in kernel. Jose.

3 7

CentOS-announce Digest, Vol 18, Issue 10
by centos-announce-request＠centos.org 11 Aug '06

11 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0612 Important CentOS 4 i386 krb5 - security update (Johnny Hughes) 2. CESA-2006:0612 Important CentOS 4 x86_64 krb5 - security update (Johnny Hughes) 3. CESA-2006:0619 Moderate CentOS 3 i386 httpd - security update (Tru Huynh) 4. CESA-2006:0619 Moderate CentOS 3 x86_64 httpd - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 10 Aug 2006 12:30:52 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2006:0612 Important CentOS 4 i386 krb5 - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1155231052.3805.77.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0612 https://rhn.redhat.com/errata/RHSA-2006-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: krb5-devel-1.3.4-33.i386.rpm krb5-libs-1.3.4-33.i386.rpm krb5-server-1.3.4-33.i386.rpm krb5-workstation-1.3.4-33.i386.rpm src: krb5-1.3.4-33.src.rpm

1 0

RE: [CentOS] OT: Measure 2U Server Amp Usage
by Mark Schoonover 10 Aug '06

10 Aug '06

Robert Moskowitz wrote: > Karl R. Balsmeier wrote: >> Hi, >> >> Running a bunch of CentOS servers on 2U supermicro equipment, >> usually with 8 drives on Adaptec SmartRAID V or LSI Megaraid. >> >> In designing a rack in a data center, the question arises as to how >> to measure the amperage the server uses, prior to investing in power >> drops that actually do that for you, even remotely, for about >> $260.00-300USD per unit. This number is the important one these >> days in determining rack/datacenter design. >> > I use the Radio Shack Amp meter. It has an inductance jaw that you > put over ONE wire to the device. This means you need a place on the > circuit that separates the hot and neutral wires. I have a special > rig: Mail plug - separate wires - Female receptacle. Of course I > have to unplug the device, put this rig in, test, then put things > back. > That's one way to measure the current, then multiply by the input voltage to get watts. I think a better way is to determine the max current that the system will use. If you have a 500 watt PSU, assume 85% efficiency, then by using the input voltage you can calculate the max input power the server is going to draw. I'd design the datacenter to support the max power level the server will need, not just what it takes to run the thing. Start up will draw the most power, approaching the max power output of the PSU, then it'll lower some once all the drives are up and spinning. It's somewhat an art, but you can get reasonably close to the entire power draw of your rack. In a pinch, I've added up all the UPSes and told the electrician 12000VA. They'll know what to do with that number. HTH Mark

5 5

Help...about migration from redhat to centos in dell poweredge 2800
by Roberto Barrientos Molina 10 Aug '06

10 Aug '06

guau..first, i never think the response about my post, really really thanks all, i am not alone here..:-). ok, i send a second message with the other method than i don´t know if result. first, i am install the redhat 3 AS then i will apply the next sequence: "Import GPG Keys: rpm --import http://mirror.centos.org/centos/3.7/os/i386/RPM-GPG-KEY-CentOS-3 Install yum: rpm -Uvh --nodeps http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/yum-2.0.8-1.centos.… http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/centos-yumconf-1-11… http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/centos-yumcache-3.1… Update Release information: rpm -e redhat-release-3ES-13.6.2 && rpm -ivh http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/centos-release-3-7.… then just: yum upgrade " then i will hope upgrade to centos 4 :-) if result. in relations to my machine config is: Dell Power edge 2800 ,PROCESSOR, 80546K, 3.0G, 2M, XEON IRWINDALE, 4 scsi disk, 4 ethernet Gigabit. i have the software server assistant and open manage. i install de redhat 3 with the server assistant and configure RAID 5 by hardware (i select raid 5 after of read any docs...i hope my selecction was correct?). thanks all guys and thank to traduce me Guillermo "guau.. que respuesta, estoy emocionado, no estoy acostumbrado a la cooperacion entre pares en mi institucion...gracias" regards, roberto.-

4 3

centos with qemu and kqemu
by Jerry Geis 10 Aug '06

10 Aug '06

Any one using qemu with centos and bridged network mode? I am running qemu as: qemu-system-x86_64 -hda centos4.i386.img -boot c -net nic -net tap I am still getting a 10.X.X.X address instead of a DHCP address on my local network. I have the /etc/qemu-ifup script as: #!/bin/sh sudo /sbin/ifconfig $1 0.0.0.0 promisc up sudo /usr/sbin/brctl addif br0 $1 sleep 2 which does run.... I have kqemu running and it is pretty zippy. I just cant get bridged network to work. I am running centos 4.3 on x86_64 (amd 4800+) and trying to emulate and centos4 i386 image. The image works its just not on my network. Jerry

1 0

RE: [CentOS] Server Hacked: Cpanel
by Bowie Bailey 10 Aug '06

10 Aug '06

William L. Maltby wrote: > On Wed, 2006-08-09 at 17:26 -0400, Bowie Bailey wrote: > > William L. Maltby wrote: > > > The solution to that is a secure password manager. > > http://passwordsafe.sourceforge.net/ > > > > You just have to remember the one password and the program will track > > all of the rest for you. This way you can use gibberish passwords for > > important sites such as online banking and you don't have to remember > > them or write them down anywhere. The password database is encrypted > > using Twofish and SHA-256. > > I don't care for that concept. One password cracked gives access to all. > I would rather take the admitted risk of writing them down (in *my* > scenario, rather secure at home) and referring to that when needed. True, but if you make that one a good one and use it only for that purpose, the risks are minimal. > The ones I use frequently will be remembered. I don't use them on the > road at all, so that's reasonable. I prefer to not have passwords stored > on computers any more that necessary. I don't think it's a problem to have the passwords stored on the computer. Just make sure they're securely encrypted. > No I'll admit I fudge a *small* amount. Those who have access in my home > know windows only, not Linux and I have no shares with them. They are > TDU (Typical Dumb Users) and don't know how to use SSH, FTP, ... or even > how to find my comps on the LAN (now SMB node or Domain Controllers > here). > > > > The only real downside is that if you don't have access to the > > password manager, you don't have access to anything else either. > > Well, I do consider the one password exposes all a downside. But I also > grant that it is more secure than many alternatives. You know what they say: "You can put all your eggs in one basket, but WATCH THAT BASKET!" As long as you are extremely careful with the access password, you shouldn't have a problem. I will take this risk for the advantage of being able to easily use highly secure passwords. For example, my online banking password is a sequence of random characters. I don't have to remember it or type it. If I didn't have a tool like this, I would have to either write it down somewhere or use a less-secure password that I could remember. > > Oh...and don't forget backup the password database! :) > > I'm finalizing my LVM-based snapshots with aging of deleted files right > now, so I will be covered. That works, but a simple backup copy to a floppy disk or external hard drive works as well. > Thanks for the URL. I will go take a look. My mind is not yet > rusted closed even if (... *when*) I think I'm right! :-) The creator of this tool is a rather paranoid security expert. I figure if he is willing to use it, it's worth a look. http://schneier.com/ (note that the Password Safe information on that page refers to an older version that used Blowfish rather than Twofish) -- Bowie

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss