- Discuss - lists.centos.org

DNS maybe problems
by Robert Moskowitz 11 Jan '06

11 Jan '06

I am setting up a new DNS server. It will be primary for my domain. This server is in an active subnet with a real public address. It is not setup yet properly in .com, but that is in the works. In the var/named/chroot/etc I added: named.custom (which I 'included' in named.conf) and my various zone files. All the log entries look good. Oh in /etc/resolv.conf, I added my system as one of the namewervers. When I go into nslookup and type any host name I get the error: ** server can't find foo:NXDOMAIN where foo is whatever I typed in. so what else did I forget to change?

8 17

CentOS x64 on non-64 bit systems
by Fong Vang 10 Jan '06

10 Jan '06

In our environment, we have a mixture of 32 and 64 bit systems. Would the 64-bit CentOS flavor work 32 bit systems? What kind of impact would this have on performance if the 64-bit OS on 32-bit hardware?

3 2

Re: [CentOS] eclipse 3.1 rpm for centos
by Phil Schaffner 10 Jan '06

10 Jan '06

On Mon, 2006-01-09 at 14:29 +0100, Jean Lee wrote: > Hi all, Please start a new thread with a new message rather than hijacking an existing one with a reply/change-subject. > Does anybody knows where I can found an eclipse 3.1 package for Centos ? Doesn't seem likely. I had a crack at rebuilding the latest FC4 package from source and the build-dep requirements seem daunting... http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/SRPMS/ecl… $ rpmbuild --rebuild eclipse-3.1.1-1jpp_1fc.FC4.12.src.rpm error: Failed build dependencies: ant is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 gcc-java >= 4.0.2 is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 java-gcj-compat-devel >= 1.0.33 is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-antlr is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-apache-bcel is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-apache-log4j is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-apache-oro is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-apache-regexp is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-apache-resolver is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-commons-logging is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-javamail is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-jdepend is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-jmf is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-junit is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-nodeps is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-swing is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-trax is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 ant-jsch is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jsch >= 0:0.1.18-1jpp is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-beanutils is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-collections is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-digester is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-dbcp is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-el is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-fileupload is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-launcher is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-logging is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-modeler is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 jakarta-commons-pool is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 mx4j >= 2.1 is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 tomcat5 is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 tomcat5-jasper is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 tomcat5-servlet-2.4-api is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 lucene is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 lucene-demo is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 regexp is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 junit >= 3.8.1-3jpp is needed by eclipse-3.1.1-1jpp_1fc.FC4.12.x86_64 Might try requesting the package from RPMforge or ATrpms, but don't hold your breath as many of the packages above are not available for EL4. Users rpmforge <users(a)lists.rpmforge.net> ATrpms user list <atrpms-users(a)ATrpms.net> Phil

3 3

RE: [CentOS] pci sata raid card
by Noel Sanchez 10 Jan '06

10 Jan '06

Thanks for your help. This IS WHILE installing centos 4.2. I can't install centos because of this problem with the card or the drives (not sure which one). My install is i386 while the drivers that are on the software cd are rhel4 i686. The file is uploaded here: http://d.turboupload.com/d/269154/dd.img-i686.html -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Tuesday, January 10, 2006 10:22 AM To: CentOS ML Subject: Re: [CentOS] pci sata raid card On Tue, 2006-01-10 at 09:56 -0800, Noel Sanchez wrote: > Using centos 4.2. Trying to install pci sata raid card, Pacific > Digital QM-4300R10. Raid card box reads that it supports linux. raid > software has rhel 4.0 dd image. I write to floppy and use linux dd to > "try" install drivers on my centos 4.2. I see the card in the list > that centos gives me after loading the drivers, but when I try to use > them, it doesn't do anything. Nothing works. I've read that rhel 4.0 > drivers will not work on centos 4.2. What I do? Is it my sata drives > or the pci raid card or both? What is recommended? Should one use > regular sata drives and use them on the motherboard and use linux > software raid? What do others use? and how? Should one contact Pacific > Digital for correct drivers? Do i need to compile centos drivers from > the rhel 4.0 drivers? Are there any pci sata raid controllers that > work right out of the box on centos 4.2? > First ... a dd image is used to do an image WHILE installing RH or CentOS. You need a different image for normal operations. Is this during an install of CentOS, or are you adding it to an already running server? Second ... Precompiled drivers are for a specific kernel version, and if you want to use the precompiled driver, you need to use the kernel it was built for. CentOS kernels WILL USE drivers compiled for RHEL AS IS. I tried looking up that card on the internet, but could find no drivers or website that was in English.

2 1

pci sata raid card
by Noel Sanchez 10 Jan '06

10 Jan '06

Using centos 4.2. Trying to install pci sata raid card, Pacific Digital QM-4300R10. Raid card box reads that it supports linux. raid software has rhel 4.0 dd image. I write to floppy and use linux dd to "try" install drivers on my centos 4.2. I see the card in the list that centos gives me after loading the drivers, but when I try to use them, it doesn't do anything. Nothing works. I've read that rhel 4.0 drivers will not work on centos 4.2. What I do? Is it my sata drives or the pci raid card or both? What is recommended? Should one use regular sata drives and use them on the motherboard and use linux software raid? What do others use? and how? Should one contact Pacific Digital for correct drivers? Do i need to compile centos drivers from the rhel 4.0 drivers? Are there any pci sata raid controllers that work right out of the box on centos 4.2? duel

4 3

Best pratice for this scenario
by RNuno 10 Jan '06

10 Jan '06

Hello all, I'm in the middle of the migration of an old web-server to a new CentOS. Let me explain how things work now, I have a group of devs that use the same user to work on the sites, this have a problem because we never know who alter witch file. Most of the files on the old web-server are owned like devuser:apache and in the new one I setup LDAP-Auth to get the real users but the problem that I see here is this: All users of the devgroup should change/delete/create files So if I have a file owned userA:devgroup and so on since every dev belongs to the devgroup this will work fine but then I have to put the user apache on the mix, right? Some sites have to write files so in that case I have a problem because i will have a file owned userA:devgroup and for apache write it I have to make it world write. My english is a lilte lame I dunno if I explain myself correctly here, but how do you manage this types of permissions? Thanks Regards, -- Ricardo

3 2

Apache on CentOS
by James B. Byrne 10 Jan '06

10 Jan '06

Does the Apache rpm shipped with CentOS 4.x have UTF-8 enabled as the default document encoding for all virtual servers? If so, then why? Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

4 3

Web Cam - No X
by Tom Brown 10 Jan '06

10 Jan '06

Hi Got a server running 4.2 and it does not have X on it - does anyone know any capture software for a logitech webcam that would work with this setup? Just want to put the cam in a room with the box - thanks

6 9

centos and wine and fonts
by Jerry Geis 10 Jan '06

10 Jan '06

I am using wine on centos 4.2, I have installed the corefonts package. however, when running power point viewer under centos Some fonts or symbols really dont show up quote right. Example: what should be a chevron shows up as a little rain cloud. What font package might I be missing to get the correct fonts? THanks for any suggestions. jerry

1 0

RE: [CentOS] LVM
by Miskell, Craig 10 Jan '06

10 Jan '06

I use it everywhere, wouldn't be without it, especially on Centos/RHEL 4 where you can resize filesystems live (you have to umount the partition in Centos/RH 3) Once you've had just one major instance of resizing a filesystem without having to mess about copying to/from backup or a temporary partition, you'll never go back. Craig Miskell > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of Peter Kitchener > Sent: Tuesday, 10 January 2006 3:33 p.m. > To: centos(a)centos.org > Subject: [CentOS] LVM > > How many people use LVM's in their production servers? Are > they reliable > for use in these sorts of systems? I am asking this because i was > reading the LVM Howto about upgrading discs etc. > > Regards, > > Peter > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > ======================================================================= Attention: The information contained in this message and/or attachments from AgResearch Limited is intended only for the persons or entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipients is prohibited by AgResearch Limited. If you have received this message in error, please notify the sender immediately. =======================================================================

1 0

denying access from ip address with iptables
by Andrew Rice 10 Jan '06

10 Jan '06

Can someone tell me if I edit the iptables file manually to create a rule to deny ANY access to a server or do I need to use the gui? -- Andrew Rice Jr

5 4

Kernel panic in usbserial - now in 2.6.9-22.0.1.106.unsupported, previous in 2.6.9-22.0.1.EL
by J.J.Garcia 09 Jan '06

09 Jan '06

Hi all again, I found this kernel panic past days, now using the unsuported kernel and comes out again the same error. This time on '2.6.9-22.0.1.106.unsupported' kernel See attached logs, Env is the same with the same box, Hope it helps. TIA. JJ Garcia -------- Original Message -------- Subject: Kernel panic in usbserial. Date: Thu, 15 Dec 2005 12:09:53 +0100 From: J.J.Garcia <stigmatedbrain(a)gmail.com> To: CentOS mailing list <centos(a)centos.org> Hi all, Running a Centos 4.2 default config in a P4 1.7 Mhz 512 MB Usb 1.1 (Acer Aspire 1400 XV Laptop) with a usb2serial interface plugged from the system boot, and using that line as console line for a remote device, i had the following kernel panic after few times performing the "reset" command in the gnome-terminal due font corruption, i had this kernel panic: Dec 14 23:58:10 smarteyebox kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000080 Dec 14 23:58:10 smarteyebox kernel: printing eip: Dec 14 23:58:10 smarteyebox kernel: e0b598da Dec 14 23:58:10 smarteyebox kernel: *pde = 00000000 Dec 14 23:58:10 smarteyebox kernel: Oops: 0000 [#1] Dec 14 23:58:10 smarteyebox kernel: Modules linked in: ppdev nfs lockd radeon parport_pc lp parport autofs4 eeprom i2c_sensor i2c_i801 i2c_dev i2c_core sunrpc ds ipt_REJECT ipt_state ip_conntrack iptable_filter ip_tables dm_multipath button battery ac hci_usb bluetooth joydev ftdi_sio usbserial yenta_socket pcmcia_core uhci_hcd shpchp snd_intel8x0m snd_intel8x0 snd_ac97_codec snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore e100 mii floppy dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod Dec 14 23:58:10 smarteyebox kernel: CPU: 0 Dec 14 23:58:10 smarteyebox kernel: EIP: 0060:[<e0b598da>] Not tainted VLI Dec 14 23:58:10 smarteyebox kernel: EFLAGS: 00210246 (2.6.9-22.0.1.EL) Dec 14 23:58:10 smarteyebox kernel: EIP is at ftdi_set_termios+0x1d/0x479 [ftdi_sio] Dec 14 23:58:10 smarteyebox kernel: eax: 00000000 ebx: def08500 ecx: c035c940 edx: def08500 Dec 14 23:58:10 smarteyebox kernel: esi: dfdc2c00 edi: dedd8c00 ebp: dedd8c00 esp: dad56e6c Dec 14 23:58:10 smarteyebox kernel: ds: 007b es: 007b ss: 0068 Dec 14 23:58:10 smarteyebox kernel: Process cat (pid: 16510, threadinfo=dad56000 task=d9fa2780) Dec 14 23:58:10 smarteyebox kernel: Stack: dedd8c00 0000869d 00000000 def08500 dfdc2c00 dedd8c00 00000000 e0b58b24 Dec 14 23:58:10 smarteyebox kernel: 00000040 00000000 00000000 dad56ea7 00000000 00001388 c018103f dad56f58 Dec 14 23:58:10 smarteyebox kernel: 00000000 c0178317 c17c6630 dfdccf80 0804c9c0 00000000 00200246 00000101 Dec 14 23:58:10 smarteyebox kernel: Call Trace: Dec 14 23:58:10 smarteyebox kernel: [<e0b58b24>] ftdi_open+0x88/0x20a [ftdi_sio] Dec 14 23:58:10 smarteyebox kernel: [<c018103f>] dput+0x33/0x423 Dec 14 23:58:10 smarteyebox kernel: [<c0178317>] link_path_walk+0x90/0xb9 Dec 14 23:58:10 smarteyebox kernel: [<e0b172d5>] serial_open+0x95/0xd9 [usbserial] Dec 14 23:58:10 smarteyebox kernel: [<c0223c23>] tty_open+0x182/0x3a6 Dec 14 23:58:10 smarteyebox kernel: [<c01724cc>] chrdev_open+0x325/0x3b9 Dec 14 23:58:10 smarteyebox kernel: [<c0167287>] dentry_open+0xbd/0x180 Dec 14 23:58:10 smarteyebox kernel: [<c01671c4>] filp_open+0x36/0x3c Dec 14 23:58:10 smarteyebox kernel: [<c030e078>] __cond_resched+0x14/0x3b Dec 14 23:58:10 smarteyebox kernel: [<c01e5d8e>] direct_strncpy_from_user+0x3e/0x5d Dec 14 23:58:10 smarteyebox kernel: [<c0167688>] sys_open+0x31/0x7d Dec 14 23:58:10 smarteyebox kernel: [<c030f8cb>] syscall_call+0x7/0xb Dec 14 23:58:10 smarteyebox kernel: Code: e8 2d 7d 5c df 83 c4 14 59 5b 5e 5f 5d c3 55 57 56 89 c6 53 83 ec 0c 8b 00 83 3d 80 f4 b5 e0 00 8b 96 18 01 00 00 8b 28 8b 46 04 <8b> 80 80 00 00 00 89 54 24 04 8b 00 89 04 24 74 17 68 e1 a4 b5 Dec 14 23:58:10 smarteyebox kernel: <0>Fatal exception: panic in 5 seconds Dec 15 00:11:05 smarteyebox syslogd 1.4.1: restart. I'm not sure if it is due to the usb2serial adapter but i think so because no panic in that system before. To reproduce it: a) In a gnome-terminal im executing a bash script like this: FILE=/root/dump rm $FILE stty cs8 ignbrk cread clocal raw 4800 -echo $1 < /dev/ttyUSB0 killall cat cat /dev/ttyUSB0 | tee $FILE & cat > /dev/ttyUSB0 ; kill %% b) The other side is a modem with an available console via serial line where i connect the USB2serial cable c) From the modem power-on i start detecting hard font corruption in gnome-terminal, if i break the link (CTRL+C) and i perform the '$ reset' command, everything comes back ok, but after connecting again using the script im having the same thing if the modem restarts (no matter if there is a modem hard reset or sw reset, i mean, power on all the time in the modem) d) After few 'resets' in gnome console, the kernel panic is happening. Don't know where to send this panic, im sending it to this list, feel free to tell me if i have to inform others or use other reporting tools for kernel panics... help appreciated. TIA Jose. -- Linux smarteyebox.stigmatedbrain.net 2.6.9-22.0.1.EL i686 GNU/Linux 11:55:01 up 11:36, 12 users, load average: 4.52, 3.40, 2.53 --------------------------------------------------------- XXXI: The optimum committee has no members. XXXII: Hiring consultants to conduct studies can be an excellent means of turning problems into gold -- your problems into their gold. XXXIII: Fools rush in where incumbents fear to tread. XXXIV: The process of competitively selecting contractors to perform work is based on a system of rewards and penalties, all distributed randomly. XXXV: The weaker the data available upon which to base one's conclusion, the greater the precision which should be quoted in order to give the data authenticity. -- Norman Augustine -- Linux smarteyebox.stigmatedbrain.net 2.6.9-22.0.1.106.unsupported i686 GNU/Linux 20:15:01 up 17 min, 5 users, load average: 0.39, 0.48, 0.46 --------------------------------------------------------- "The simple rights, the civil liberties from generations of struggle must not be just fine words for patriotic holidays, words we subvert on weekdays, but living, honored rules of conduct amongst us...I'm glad the American Civil Liberties Union gets indignant, and I hope this will always be so." -- Senator Adlai E. Stevenson Jan 9 19:48:57 smarteyebox kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000080 Jan 9 19:48:57 smarteyebox kernel: printing eip: Jan 9 19:48:57 smarteyebox kernel: c0228213 Jan 9 19:48:57 smarteyebox kernel: *pde = 00000000 Jan 9 19:48:57 smarteyebox kernel: Oops: 0000 [#1] Jan 9 19:48:57 smarteyebox kernel: Modules linked in: ppdev ftdi_sio usbserial nfs lockd radeon parport_pc lp parport autofs4 sunrpc ds ipt_REJECT ipt_state ip_conntrack iptable_filter ip_tables dm_multipath button battery ac hci_usb bluetooth yenta_socket pcmcia_core uhci_hcd shpchp snd_intel8x0m snd_intel8x0 snd_ac97_codec snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc gameport snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore e100 mii floppy dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod Jan 9 19:48:57 smarteyebox kernel: CPU: 0 Jan 9 19:48:57 smarteyebox kernel: EIP: 0060:[<c0228213>] Not tainted VLI Jan 9 19:48:57 smarteyebox kernel: EFLAGS: 00010246 (2.6.9-22.0.1.106.unsupported) Jan 9 19:48:57 smarteyebox kernel: EIP is at tty_get_baud_rate+0x3/0x41 Jan 9 19:48:57 smarteyebox kernel: eax: 00000000 ebx: 00000000 ecx: 00000000 edx: c14dd000 Jan 9 19:48:57 smarteyebox kernel: esi: 00000000 edi: dd83dc80 ebp: e0c655e9 esp: dc461e3c Jan 9 19:48:57 smarteyebox kernel: ds: 007b es: 007b ss: 0068 Jan 9 19:48:57 smarteyebox kernel: Process cat (pid: 17337, threadinfo=dc461000 task=cf50f3a0) Jan 9 19:48:57 smarteyebox kernel: Stack: c1687400 e0c63267 c1687400 cc35f8a0 dd83dc80 d7e64800 e0c631fc 00000008 Jan 9 19:48:57 smarteyebox kernel: c1687400 00000cbc d7e64800 e0c64b65 00000000 dd83dc80 00000000 dd83dc80 Jan 9 19:48:57 smarteyebox kernel: c1687400 d7e64800 00000000 e0c63b24 00000040 00000000 00000000 dc461ea7 Jan 9 19:48:57 smarteyebox kernel: Call Trace: Jan 9 19:48:57 smarteyebox kernel: [<e0c63267>] get_ftdi_divisor+0x19/0x25a [ftdi_sio] Jan 9 19:48:57 smarteyebox kernel: [<e0c631fc>] change_speed+0x2d/0x7f [ftdi_sio] Jan 9 19:48:57 smarteyebox kernel: [<e0c64b65>] ftdi_set_termios+0x2a8/0x479 [ftdi_sio] Jan 9 19:48:57 smarteyebox kernel: [<e0c63b24>] ftdi_open+0x88/0x20a [ftdi_sio] Jan 9 19:48:57 smarteyebox kernel: [<c0180dc7>] dput+0x33/0x423 Jan 9 19:48:57 smarteyebox kernel: [<c017809f>] link_path_walk+0x90/0xb9 Jan 9 19:48:57 smarteyebox kernel: [<e0c6d2d5>] serial_open+0x95/0xd9 [usbserial] Jan 9 19:48:57 smarteyebox kernel: [<c0226837>] tty_open+0x182/0x3a6 Jan 9 19:48:57 smarteyebox kernel: [<c0172254>] chrdev_open+0x325/0x3b9 Jan 9 19:48:57 smarteyebox kernel: [<c016700f>] dentry_open+0xbd/0x180 Jan 9 19:48:57 smarteyebox kernel: [<c0166f4c>] filp_open+0x36/0x3c Jan 9 19:48:57 smarteyebox kernel: [<c0317a38>] __cond_resched+0x14/0x3b Jan 9 19:48:57 smarteyebox kernel: [<c01e6de6>] direct_strncpy_from_user+0x3e/0x5d Jan 9 19:48:57 smarteyebox kernel: [<c0167410>] sys_open+0x31/0x7d Jan 9 19:48:57 smarteyebox kernel: [<c03192db>] syscall_call+0x7/0xb Jan 9 19:48:57 smarteyebox kernel: Code: 10 74 1c 89 d1 83 e1 0f 74 0b 8d 41 0f 3b 05 3c 8e 37 c0 76 08 80 e6 ef 89 53 08 eb 02 89 c1 5b 8b 04 8d c0 8d 37 c0 c3 53 89 c3 <8b> 80 80 00 00 00 e8 ba ff ff ff 3d 00 96 00 00 75 2a 83 bb 78 Jan 9 19:48:57 smarteyebox kernel: <0>Fatal exception: panic in 5 seconds Jan 9 19:48:58 smarteyebox kernel: Unable to handle kernel NULL pointer dereference at virtual address 000000a0 Jan 9 19:48:58 smarteyebox kernel: printing eip: Jan 9 19:48:58 smarteyebox kernel: e0c6d40c Jan 9 19:48:58 smarteyebox kernel: *pde = 00000000 Jan 9 19:48:58 smarteyebox kernel: Oops: 0000 [#2] Jan 9 19:48:58 smarteyebox kernel: Modules linked in: ppdev ftdi_sio usbserial nfs lockd radeon parport_pc lp parport autofs4 sunrpc ds ipt_REJECT ipt_state ip_conntrack iptable_filter ip_tables dm_multipath button battery ac hci_usb bluetooth yenta_socket pcmcia_core uhci_hcd shpchp snd_intel8x0m snd_intel8x0 snd_ac97_codec snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc gameport snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore e100 mii floppy dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod Jan 9 19:48:58 smarteyebox kernel: CPU: 0 Jan 9 19:48:58 smarteyebox kernel: EIP: 0060:[<e0c6d40c>] Not tainted VLI Jan 9 19:48:58 smarteyebox kernel: EFLAGS: 00010246 (2.6.9-22.0.1.106.unsupported) Jan 9 19:48:58 smarteyebox kernel: EIP is at serial_write+0x3c/0x86 [usbserial] Jan 9 19:48:58 smarteyebox kernel: eax: d48a3000 ebx: ffffffea ecx: 08f79858 edx: 00000001 Jan 9 19:48:58 smarteyebox kernel: esi: 00000000 edi: 08f79858 ebp: 00000001 esp: cc92eee0 Jan 9 19:48:58 smarteyebox kernel: ds: 007b es: 007b ss: 0068 Jan 9 19:48:58 smarteyebox kernel: Process cat (pid: 17339, threadinfo=cc92e000 task=c47af1a0) Jan 9 19:48:58 smarteyebox kernel: Stack: dfec2a00 00000001 00000000 08f79858 c022bb16 00000001 08f79858 c5c1cd80 Jan 9 19:48:58 smarteyebox kernel: d48a3000 00000000 c47af1a0 c011cf0a 00000000 00000000 c47af1a0 c011cf0a Jan 9 19:48:58 smarteyebox kernel: 00000000 00000000 c47af1a0 c011cf0a d48a3994 d48a3994 d85d7080 00000246 Jan 9 19:48:58 smarteyebox kernel: Call Trace: Jan 9 19:48:58 smarteyebox kernel: [<c022bb16>] write_chan+0x17c/0x1d5 Jan 9 19:48:58 smarteyebox kernel: [<c011cf0a>] default_wake_function+0x0/0xc Jan 9 19:48:58 smarteyebox last message repeated 2 times Jan 9 19:48:58 smarteyebox kernel: [<c02254fe>] tty_write+0x27e/0x38b Jan 9 19:48:58 smarteyebox kernel: [<c022b99a>] write_chan+0x0/0x1d5 Jan 9 19:48:58 smarteyebox kernel: [<c0167f6d>] vfs_write+0xb6/0xe2 Jan 9 19:48:58 smarteyebox kernel: [<c0168037>] sys_write+0x3c/0x62 Jan 9 19:48:58 smarteyebox kernel: [<c03192db>] syscall_call+0x7/0xb Jan 9 19:48:58 smarteyebox kernel: Code: 0c 0a 00 00 bb ea ff ff ff 74 20 ff 74 24 14 0f b6 46 08 50 68 e6 f4 c6 e0 68 8f f7 c6 e0 68 0a f8 c6 e0 e8 c8 41 4b df 83 c4 14 <83> be a0 00 00 00 00 75 22 83 3d 04 30 c7 e0 00 74 31 68 e6 f4 Jan 9 19:48:58 smarteyebox kernel: <0>Fatal exception: panic in 5 seconds Jan 9 20:03:06 smarteyebox syslogd 1.4.1: restart.

1 0

php with OCI support
by RNuno 09 Jan '06

09 Jan '06

Hi, I'm trying to get OCI support in php on RHEL 4. So i installed the oracle-client and php.src.rpm and then typed: rpmbuild -bb --with oci /usr/src/redhat/SPECS/php.spec It rebuild fine, but no oci support, on the spec file of the PHP package it's there the OCI support, it's not --with oci that i should use? Thanks Regards, Ricardo

2 1

Scheduling tasks using cron...
by Jose Alburquerque 09 Jan '06

09 Jan '06

Hi all. Can anyone help me with scheduling tasks? I'm running Centos4.2 (updated via yum starting from 4.0). I know I have vixie-cron and anacron packages installed (came like that, from first install, I guess). I read the crontab syntax man page (man 5 crontab) and I made an entry as a normal user (using crontab -e) that looks like the following: 30 0 9 1 1 /bin/ls -F /home/jose > /home/jose/home-listing.txt when I run the command "/bin/ls -F /home/jose > /home/jose/home-listing.txt" it produces a file named "home-listing.txt" in my home directory. However, if I delete the file and wait for the cron process to take place, the cron process never takes place at the exact time of scheduling. In fact I don't think it ever takes place because the file just does not appear. Am I doing something wrong? Can someone please help me! I really need to be able to schedule processes at *very* *specific* *times*. Anyone? Thank you.

4 4

Partition labelling
by Matt Lawrence 09 Jan '06

09 Jan '06

When doing a network install with a kickstart file, how do I prevent the partition label on the root filesystem from being changed? I'm building a system with multiple flavors of CentOS in separate partitions and I would really like to have the partition labels be something meaningful. So far, the only idea I've come up with is to use the --noformat flag on the partition definintion in the kick start file and then format it in the %pre section.

1 0

enable suexec
by Mickael Maddison 09 Jan '06

09 Jan '06

Hello CentOS, I don't usually use RPM's for apache, but I'm playing with a centos 4.2 w/apache and suexec. I've got the suexec apache RPM installed, but I'm not sure how to actually get apache to use it. The /etc/httpd/conf/httpd.conf does show it in the modules: LoadModule suexec_module modules/mod_suexec.so but httpd -l doesn't list suexec as being loaded. I'm sure it's simple, but a pointer would be great, thanks! -- Best regards, Mickael mailto:centos@silverservers.com

1 1

OpenLDAP Problem
by Peter Kitchener 09 Jan '06

09 Jan '06

Everyone, We currently are running a Centos3 directory server, I am currently testing centos4 as an upgrade of this machine in the future. There is a special user we have called cn=samba,ou=special in our directory, this user is for samba to use when binding to the directory. On the production replica server, i have taken an offline slapcat ldif of the entire tree. I then copied this file to the test centos4 machine running ldap with the same configuration as the centos3 production server. I did a slapadd of this ldif file, then fixed some minor import errors as a result. The problem occurs now when we try to bind to the test machine, with ldapsearch or smbd, as this special samba user, ldap comes back and tells me the credentials are incorrect. From what i understand about the userPassword attribute is that it is outputted by slapcat as a base64 encoded MD5 hash. I have compared the hashes between the production server and the test server, and they are both identical. I can however do all this successfully with the admin user. I am lost as to the cause of this error. Thanks Peter

2 1

cgi based tracroute or ping question
by Robin Mordasiewicz 08 Jan '06

08 Jan '06

I need to install a web based cgi that provides an attractive interface for doing traceroutes, ping, and possibly mtr. I know it is not very difficult to write this but does anyone know of a good package that provides tools like this. The target audience is upper level management that have never seen a command line.

2 2

Disable Network Browsing
by WipeOut 08 Jan '06

08 Jan '06

Hi, I have a PC that is just for internet access, I don't want it to be able to access any of the windows or samba servers on the network.. I removed samba-client thinking this would solve the problem but the network can still be browsed via Nautilus.. Is there a way to disable network browsing through any of the GUI interfaces? Thanks..

4 3

Recommendation on a PC Firewire-800 host adapter
by CentOS-List＠jamesplace.net 08 Jan '06

08 Jan '06

I'm looking for a recommendation on a PC Firewire-800 host adapter compatible with Linux. Any suggestions for known good ones. I'm connecting a few LACIE external hard drives. Thanks.

1 0

GUI User Disk Mount Tool
by B.J. McClure 08 Jan '06

08 Jan '06

Disk mount tool gives message "There are no filesystems you are allowed to mount. Reolacing "pamconsole" with "user" in /etc/fstab solves the issue temporarily. This was fixed in FC4. Is there a fix for CentOS 4.2? Thanks in advance. bj Cent OS 4, Linux 2.6.9-22.0.1.EL athlon 07:42:11 up 1 day, 23:01, 3 users, load average: 0.42, 0.24, 0.09

1 0

Can I install CentOS 4.2 on Sun X4100?
by Sungsoo Kim 08 Jan '06

08 Jan '06

Hi, all! I want to change current RHEL 4.0 ES into CentOS 4.2 on Sun X4100 server. The server has SAS SCSI based two 2.5" hard disks. I could only install RHEL 4.0 Update 1 because the server is equipped with RHEL 4.0 Update 1's device driver only. I've included below the boot process messages concerned with SCSI controller. If it's possible for me to install CentOS 4.0 on my X4100, I am ready to switch to it. TIA Sungsoo Kim ------------------- SCSI subsystem initialized Fusion MPT base driver 3.02.18 Copyright (c) 1999-2005 LSI Logic Corporation ACPI: PCI interrupt 0000:02:03.0[A] -> GSI 28 (level, low) -> IRQ 209 mptbase: Initiating ioc0 bringup ioc0: SAS1064: Capabilities={Initiator} Fusion MPT SCSI Host driver 3.02.18 scsi0 : ioc0: LSISAS1064, FwRev=01040000h, Ports=1, MaxQ=203, IRQ=209 Vendor: FUJITSU Model: MAV2073RCSUN72G Rev: 0301 Type: Direct-Access ANSI SCSI revision: 04 SCSI device sda: 143374738 512-byte hdwr sectors (73408 MB) SCSI device sda: drive cache: write through sda: sda1 sda2 sda3 Attached scsi disk sda at scsi0, channel 0, id 2, lun 0 Vendor: FUJITSU Model: MAV2073RCSUN72G Rev: 0301 Type: Direct-Access ANSI SCSI revision: 04 SCSI device sdb: 143374738 512-byte hdwr sectors (73408 MB) SCSI device sdb: drive cache: write through sdb: sdb1 Attached scsi disk sdb at scsi0, channel 0, id 3, lun 0

4 5

RE: [CentOS] High Availability using 2 sites
by Todd Reed 07 Jan '06

07 Jan '06

I agree, BGP is important to route the IP's, but I've been exploring this same option with a different thought. I'd like to hear what others say about this! Here is my plan (although not implemented or tested) for Web Services. At our main data center we have the primary DNS server and our primary web server. The remote location houses the secondary DNS server and our secondary web server. Also at that second location is "hidden" master DNS server. Your registrar name records only point to the primary and secondary, therefore, the internet knows nothing of the hidden master. Then, the hidden master contains a similar set of DNS records that point to the secondary site. Here's the trick! The secondary DNS server syncs with the primary DNS server every x minutes. If the secondary DNS server cannot communicate with the primary DNS server, it then looks at the "hidden" master DNS server and syncs the records (which is pointing at your secondary site). Then, when your data center site comes back up, the secondary tries to communicate with the true master DNS server...it can...therefore it updates its records. That is the theory in a nutshell. I've read that this is possible, but I haven't had a chance to test it. What do others think about this? This is no substitution for BGP, but for those that don't run BGP or need to re-route the IP networks, this may work. --Todd -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Bryan J. Smith Sent: Thursday, January 05, 2006 12:22 AM To: CentOS mailing list Subject: Re: [CentOS] High Availability using 2 sites Tim Edwards <tim(a)registriesltd.com.au> wrote: > We currently have a backup site at a different location to > our main site. This backup site mirrors (as closely as > possible) our main services, particularly web serving. > Is there a way to have the backup site act as a failover > for the main site using something like Linux-HA? > They are on seperate internet connections with different IP > ranges. Yes and no. Yes in that you have a couple of options -- one common, one pretty much a hack. The common one is to have your own autonomous system number and run BGP. That way you control your IP assignments, failover, etc... in ways that are efficient and quickly propogated. The hack is to put routers and/or 1-to-1 NAT devices at each site, which can redirect traffic to the other site. That is less efficient and can cause some headaches. No in the fact that there's really no "software" or "service" facility to deal with this. Round robin DNS does nothing to solve this. Name propogation is always an issue. So it's something you can only address at the IP-level -- either by having your own, Internet-recognized autonomous system number, or redirecting IPs from each site to the other when servers/sites go down. -- Bryan J. Smith Professional, Technical Annoyance b.j.smith(a)ieee.org http://thebs413.blogspot.com ---------------------------------------------------- *** Speed doesn't kill, difference in speed does *** _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

8 15

CentOS-announce Digest, Vol 11, Issue 2
by centos-announce-request＠centos.org 07 Jan '06

07 Jan '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0164 Critical CentOS 4 i386 mod_auth_pgsql - security update (Johnny Hughes) 2. CESA-2006:0164 Critical CentOS 4 x86_64 mod_auth_pgsql - security update (Johnny Hughes) 3. CESA-2006:0164 Critical CentOS 3 i386 mod_auth_pgsql - security update (Tru Huynh) 4. CESA-2006:0164 Critical CentOS 3 x86_64 mod_auth_pgsql - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 06 Jan 2006 07:06:53 -0600 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2006:0164 Critical CentOS 4 i386 mod_auth_pgsql - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1136552813.4584.53.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0164 https://rhn.redhat.com/errata/RHSA-2006-0164.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: mod_auth_pgsql-2.0.1-7.1.i386.rpm src: mod_auth_pgsql-2.0.1-7.1.src.rpm

1 0

centos3 reiserfs quota
by Jure Pečar 07 Jan '06

07 Jan '06

Hi all, is any of the "unsupported" centos3 kernels built with quota for reiserfs patches? -- Jure Pečar http://jure.pecar.org/

1 0

CMS centos3
by Dave 07 Jan '06

07 Jan '06

Anyone using or recomend a content management system that will install without out a lot of mucky muck on a Centos3 system? I looked at Zope but it needs a newer Python, Midgaard looks likes it's geared towards RHEL4. OpenCMS looks like it runs on java so that might work. I have yet to look at Rubyrails and Django.

7 9

User ID's with Special Characters??
by Kirti S. Bajwa 07 Jan '06

07 Jan '06

Hello List: I am new to this list and this is my first posting. Presently, I am using Red Hat 9.0 and soon planning to switch over to CentOS. I have one question. In RH user names can not contain special characters. For example my UID is 'kbajwa' and my email address is kbajwa(a)tibonline.net. Since '@' in the email address is a special character, I can not use my email as my UID. Can I use email address as UID in CentOS? Kirti

4 10

Extending Network - OT
by Alain Reguera 06 Jan '06

06 Jan '06

Hello, What things come to your minds and consider when need to upgrade a network, extending it? I'm trying to extend the faculty network to optimize services. Know this is a little out of topic but your experienced suggestions can be useful for other newbies like me (think so). I'll strongly appreciate the knowledge and time involved in your replays. PD: some howto or docs would be appreciated too.

7 13

Re: [CentOS] 3ware disk failure -> hang
by David Thompson 06 Jan '06

06 Jan '06

"Bryan J. Smith" wrote: > >Had you used the 3Ware's intelligent hardware RAID, it would >have hidden the drive disconnect from the system. You'd see >a log entry on the failure, and that the array was in a >"downgraded" state. > >Instead, you're using software RAID, and it's up to the >kernel to not panic on itself because a disk is no longer >available. The problem isn't the 3Ware controller, it's the >software RAID logic in the kernel. <smile>As much as I hate to agree with Bryan </smile>, this has been our experience also. We have many TB of disk running with 3ware controllers. We used to use software RAID, because at that time we found 3ware's tools to notify us of disk/array problems unusable. During that time, we could always tell when a disk failed, because we would have a crashed server. The data would always be there after we rebooted, but a reboot was necessary. A few years ago we migrated everything to 3ware hardware RAID, and now we rely on our alert system, instead of our users, to tell us when a drive fails. Dave Thompson The University of Wisconsin - Madison

2 1

Centos 3.5 x86_64 yum update conflict with perl
by Les Mikesell 06 Jan '06

06 Jan '06

On some machines that haven't been updated for a while I'm getting: Errors reported doing trial run file /usr/bin/c2ph from install of perl-5.8.0-90.4 conflicts with file from package perl-5.8.0-89.10 for a ton of perl-related files. Hmmm... another machine that has had intermediate updates didn't complain but now says: # rpm -q perl perl-5.8.0-89.10 perl-5.8.0-90.4 Is that bad? -- Les Mikesell lesmikesell(a)gmail.com

2 1

Installing Java 1.4.2
by Robert Moskowitz 06 Jan '06

06 Jan '06

For scalix on Centos the Scalix forum provides instructions for convincing Scalix that Centos is Redhat: http://www.scalix.com/community/viewtopic.php?t=516&highlight=centos I am up to the point of getting Java JDK1.4.2 installed. I did a: yum list|grep "java" and got: gcc-java.i386 3.4.4-2 installed java-1.4.2-gcj-compat.noarch 1.4.2.0-27jpp installed db4-java.i386 4.2.52-7.1 base gcc4-java.i386 4.0.1-4.EL4.2 base java-1.4.2-gcj-compat-devel.noarch 1.4.2.0-27jpp base Do I got what I need? I tried: yum install jdstk-1.4.2 and got nothing to install... I don't see tomcat in my list of installed rpms. Do I follow the instructions listed, or is there a yummy way to get it? ;-) Thanks!

4 5

Centos locking up system with mptscsih driver error
by Paul R. Ganci 06 Jan '06

06 Jan '06

I have a Tyan Tiger S2466 MPX motherboard with Dual Atlon MP 2800+ CPUs and 1GB PC2100 DDR SDRAM. For disk drive I have an LSI53C1030 and 4 Seagate ST336607LWs in a software raid 5 configuration. I installed Centos 4.1 and everything was fine running kernel-smp-2.6.9-11.EL. However when I upated to Centos 4.2 I have run into problems. Namely after a finite amount of disk traffic the system locks completely up. On the monitor console I get message after message from the MPT Fusion SCSI driver mptscsih indicating that there was a failure and that an "ABORT was successful". Unfortunately I don't have the exact message, but I have tracked the problem to kernel-smp-2.6.9-22.0.1.EL. Since I updated from 4.1 I still had the smp-2.6.9-11 kernel around and as long as I boot into kernel-smp-2.6.9-11.EL with all other 4.2 updates installed everything is stable. I can reliably get the mptscsih driver to fail after a few minutes of system uptime (or shorter time if doing disk writes) when booted into kernel-smp-2.6.9-22.0.1.EL. I checked the Centos archives and did not find anything related to this SCSI card or motherboard. Now before I get lambasted for not having the exact SCSI error message (yes I am willing boot into kernel-smp-2.6.9-22.0.1.EL despite that my raid partition has to be rebuilt afterwards) to get the message. I was wondering if anyone else has had problems with this hardware/driver and/or kernel-smp-2.6.9-22.0.1.EL. If this is a new mptscsih problem I will post more details of my system but I thought I would start with just a general question in case I missed something. -- Paul (ganci(a)nurdog.com)

5 14

RE: [CentOS] Installing Java 1.4.2
by Todd Reed 06 Jan '06

06 Jan '06

I don't know what the specifications for scalix are, but I run OpenNMS (runs on tomcat4) and this install seems to work...at least for me. --Todd Installing Java 1.4: Download Sun Java J2SE 1.4 SDK and JRE from java.sun.com to the Local PC (http://java.sun.com) Use SCP to copy them to the server in the /downloads directory. The file names look like j2sdk-1_4_2_10-linux-i586.bin or j2re-1_4_2_10-linux-i586.bin. [service@webber ~]$ su - Password: [root@webber ~]# mkdir /usr/local/java [root@webber ~]# cp /downloads/j2sdk* /usr/local/java [root@webber ~]# cp /downloads/j2re* /usr/local/java [root@webber ~]# cd /usr/local/java [root@webber java]# chmod +x * [root@webber java]# ./j2sdk* [root@webber java]# ./j2re* [root@webber java]# rm -rf *.bin [root@webber java]# chown -R root:root j* [root@webber java]# ln -s j2sdk* j2sdk [root@webber java]# ln -s j2re* j2jre [root@webber java]# echo "" >> /etc/profile [root@webber java]# echo "if ! echo \${PATH} | grep -q /usr/local/java/j2sdk/bin ; then" >> /etc/profile [root@webber java]# echo "export PATH=/usr/local/java/j2sdk/bin:\${PATH}" >> /etc/profile [root@webber java]# echo "fi" >> /etc/profile [root@webber java]# echo "if ! echo \${PATH} | grep -q /usr/local/java/j2jre/bin ; then" >> /etc/profile [root@webber java]# echo "export PATH=/usr/java/local/j2jre/bin:\${PATH}" >> /etc/profile [root@webber java]# echo "fi" >> /etc/profile [root@webber java]# echo "export JAVA_HOME=/usr/local/java/j2sdk" >> /etc/profile [root@webber java]# echo "export CLASSPATH=.:/usr/local/java/j2sdk/lib/tools.jar:/usr/local/java/j2jre/lib/rt.jar" >> /etc/profile [root@webber java]# exit [root@webber ~]# su - Password: [root@webber ~]# java -version java version "1.4.2_10" Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_10-b03) Java HotSpot(TM) Client VM (build 1.4.2_10-b03, mixed mode) ________________________________________ From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Robert Moskowitz Sent: Friday, January 06, 2006 9:36 AM To: CentOS mailing list Subject: [CentOS] Installing Java 1.4.2 For scalix on Centos the Scalix forum provides instructions for convincing Scalix that Centos is Redhat: http://www.scalix.com/community/viewtopic.php?t=516&highlight=centos I am up to the point of getting Java JDK1.4.2 installed. I did a: yum list|grep "java" and got: gcc-java.i386 3.4.4-2 installed java-1.4.2-gcj-compat.noarch 1.4.2.0-27jpp installed db4-java.i386 4.2.52-7.1 base gcc4-java.i386 4.0.1-4.EL4.2 base java-1.4.2-gcj-compat-devel.noarch 1.4.2.0-27jpp base Do I got what I need? I tried: yum install jdstk-1.4.2 and got nothing to install... I don't see tomcat in my list of installed rpms. Do I follow the instructions listed, or is there a yummy way to get it? ;-) Thanks!

1 0

RE: [CentOS] rc script not running on shutdown
by Bowie Bailey 06 Jan '06

06 Jan '06

Mark Belanger wrote: > Maciej Zenczykowski wrote: > > And are you creating the /var/lock/subsys/chnghst > > file when the subsystem starts up? > > Is that required to make scripts run on shutdown? Yes. I ran into this problem myself not too long ago. Your script must create a lockfile on startup if you want it to run during shutdown. -- Bowie

1 0

question on tcl.tk
by Jerry Geis 06 Jan '06

06 Jan '06

I am playing with tcl/tk on centso 4.2. I am trying to trap a signal and I get an error that invalid command name signal. My line is: signal trap SIGCONT ReadMessage where ReadMessage is a proc Is centos 4.2 missing a package or some thing for tcl? The example I found did not mention any restrictions. Any ideas, thank you. Jerry

1 0

x86_64 and memory reservation
by Maciej Żenczykowski 06 Jan '06

06 Jan '06

Hi, I have an Athlon 64 2800+ with an ASUS K8V-MX mATX motherboard. 2x512 MB DDR400 Ram. Now the problem: 8MB of RAM is used by the shared memory of the video card, so I would expect 1016MB RAM to be available for Linux (that's how much the BIOS shows). Indeed if I go into memtest86+ v1.50 then I see: in e820-Std mode: 1015MB ram, with 432K reserved in e820-All mode: 1016MB ram, with 0K reserved This seems OK and everything works as expected. However when I boot CentOS 4.2 x86_64 (latest kernel) I end up with _way_ less available RAM - 21.5 MB is listed as reserved by the kernel - why??? To quote from dmesg: Memory: 1017796k/1040000k available (2398k kernel code, 21460k reserved, 1303k data, 164k init) This seems to make little sense... is this reserved area actually used by the kernel for something? or is it just sitting idly waiting for a better tomorrow? Cheers, MaZe.

1 0

CentOS-announce Digest, Vol 11, Issue 1
by centos-announce-request＠centos.org 06 Jan '06

06 Jan '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0159 Moderate CentOS 4 ia64 httpd - security update (Pasi Pirhonen) 2. CESA-2006:0159 Moderate CentOS 3 ia64 httpd - security update (Pasi Pirhonen) 3. CESA-2006:0159 Moderate CentOS 4 axp httpd - security update (Pasi Pirhonen) 4. CESA-2006:0159 Moderate CentOS 3 i386 httpd - security update (Tru Huynh) 5. CESA-2006:0159 Moderate CentOS 3 x86_64 httpd - security update (Tru Huynh) 6. CESA-2006:0159 Moderate CentOS 4 x86_64 httpd - security update (Johnny Hughes) 7. CESA-2006:0159 Moderate CentOS 4 i386 httpd - security update (Johnny Hughes) 8. CESA-2006:0159 Moderate CentOS 4 s390(x) httpd - security update (Pasi Pirhonen) 9. CESA-2006:0159 Moderate CentOS 3 s390(x) httpd - security update (Pasi Pirhonen) 10. CESA-2006:0164 Critical CentOS 3 s390(x) mod_auth_pgsql - security update (Pasi Pirhonen) 11. CESA-2006:0164 Critical CentOS 3 ia64 mod_auth_pgsql - security update (Pasi Pirhonen) 12. CESA-2006:0164 Critical CentOS 4 ia64 mod_auth_pgsql - security update (Pasi Pirhonen) 13. CESA-2006:0164 Critical CentOS 4 s390(x) mod_auth_pgsql - security update (Pasi Pirhonen) 14. CESA-2006:0164 Critical CentOS 4 axp mod_auth_pgsql - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Thu, 5 Jan 2006 23:38:50 +0200 From: Pasi Pirhonen <upi(a)papat.org> Subject: [CentOS-announce] CESA-2006:0159 Moderate CentOS 4 ia64 httpd - security update To: centos-announce(a)centos.org Message-ID: <20060105213850.GA7374(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0159 https://rhn.redhat.com/errata/RHSA-2006-0159.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/httpd-2.0.52-22.ent.centos4.ia64.rpm updates/ia64/RPMS/httpd-devel-2.0.52-22.ent.centos4.ia64.rpm updates/ia64/RPMS/httpd-manual-2.0.52-22.ent.centos4.ia64.rpm updates/ia64/RPMS/httpd-suexec-2.0.52-22.ent.centos4.ia64.rpm updates/ia64/RPMS/mod_ssl-2.0.52-22.ent.centos4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

RE: Linux HA may not be the best choice in your situation. [CentOS]High Availability using 2 sites
by Todd Reed 06 Jan '06

06 Jan '06

Ok...I see some of your points, but if SITE_A talked to SITE_B via the internet and they use a 1:1NAT, if the internet goes down at SITE_A, it breaks the 1:1 NAT. Servers down are different than the Internet connection being down. I never said RRD should be used for failover. I said it could be in combination with my idea. I guess it would help to know if the web services are serving only the company, or are they serving the public/Internet? --Todd -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Bryan J. Smith Sent: Thursday, January 05, 2006 2:55 PM To: CentOS mailing list Subject: RE: Linux HA may not be the best choice in your situation. [CentOS]High Availability using 2 sites Todd Reed <treed(a)astate.edu> wrote: > As for Brian's Message: > 1) You are right, to a point. To what point? Round-robin DNS is not, and never will be, failover. And even some logic we've discussed here is rather subjective and arbitrary, even for one, specific app -- working on a corporate network (before considering across the Internet). > I'm not saying that my idea was a replacement for BGP. I even > state that by saying "This is no substitution for BGP". Again, I wish I would have _never_ said BGP. I mean an AS. > 2) You are correct in saying that you need to change in how > the world sees you (whether that be in the application or > layer3 routing). That can be done at the application layer or > at layer 3. But, if you are a small company that has only 1 > internet link at your primary site and 1 internet connection at > your remote site and you rely on the internet for > communications between the sites, then you technically do > not qualify for an AS number. That makes BGP useless. > That makes your solution be somewhere in the upper layer of > the OSI model. That's why I gave a _second_ recommendation. If you can guarantee your borders will _at_least_ be up, even if the servers behind it are down, you can implement 1-to-1 NAT at the border. I.e., if site A's servers are down, site A's border can use 1-to-1 NAT to target site B's servers. Please recognize I'm giving not just the "high end" solution, but I'm also giving a "feasible" solution for SMBs too. ;-> [ SIDE NOTE: I was _not_ the person who brough up Google either. But when someone did, I (as well as at least 1 other) showed that I wasn't off-the-mark on how Google does it either. ;-] > 3) My idea was more on the lines of internet failure at the > primary site and using RRDNS on top of that. If the secondary > DNS server kicked in and pulled it's configs from the hidden > master, then the hidden record wouldn't be configured for RRDNS > because it is only used when the primary site fails. The problem is _still_ propogation. That's why, in the absence of your own AS, you need the failed site to redirect all traffic under the guise of 1-to-1 NAT to the site that is up. It's very simple to do, and they even have affordable devices to do so with Linux+ASICs (i.e., faster than a host-based Linux solution). > 4) My idea was also an application layer solution. > Last time I checked, BGP was in Layer 3. Forget I even mentioned ASNs for a moment. I _also_ mentioned using 1-to-1 NAT between sites, and it works _well_ too. It not only _avoids_ the propogation issue, but better yet, it work work _while_ propogation is still occuring. > 5) Yes, there are some delays when using DNS. Likewise > there are delays with BGP. Certainly BGP delays are a lot > quicker. No argument there. Sigh, you're not getting my point at all on layer-3. You've totally missed it. It's not comparable to application-level. It's absolute. > But again, my idea is looking at it from an application layer > POV. _Eventually_ you'd have to change the application-layer as well, _if_ the site was down awhile. But in the meantime, you _need_ to do layer-3 redirection for the immediate failover. 1-to-1 NAT does this. It's very simple. It just works. -- Bryan J. Smith Professional, Technical Annoyance b.j.smith(a)ieee.org http://thebs413.blogspot.com ---------------------------------------------------- *** Speed doesn't kill, difference in speed does *** _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

4 7

RE: Linux HA may not be the best choice in yoursituation. [CentOS]High Availability using 2 sites
by Todd Reed 06 Jan '06

06 Jan '06

In a nutshell and very first of all, you need at least 2 internet connections. Those ISP must be willing to setup BGP peering between your routers and theirs. Once that agreement has been made, you need to get their AS Numbers and submit the ASN request located on ARIN's website (http://www.arin.net) After some paperwork and money exchanges, ARIN assigns you an AS number. At that point, you can configure the BGP peering. There's more details to it, but that's what I went through in a nutshell. ARIN has a pretty good flowchart of their process located at http://www.arin.net/education/asn_process/index.html --Todd -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Tim Edwards Sent: Thursday, January 05, 2006 6:33 PM To: CentOS mailing list Subject: Re: Linux HA may not be the best choice in yoursituation. [CentOS]High Availability using 2 sites Bryan J. Smith wrote: > Exactly! That's why I keep both agreeing _and_ dismissing > many suggestions, because most are only feasible _if_ they > are for a corporate intranet. Most are too arbitrary for the > Internet. > > I believe the original poster was talking about the Internet, > but I could be wrong. Yes I am talking about the Internet, not an Intranet. Thanks for all your replies, especially Brian, they've helped me see more clearly what the options are. I'd already given up on Round Robin or any other kind of DNS 'solution' before I posted, after reading this: http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-round-robin-is-use less.html I don't think the difficulties and expense of getting an AS number and setting up BGP to work with our ISP will be worth it, but I'm not sure - what steps exactly are involved in doing that? -- Tim Edwards _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

CentOS x64 crashed
by Fong Vang 06 Jan '06

06 Jan '06

I just installed CentOS 4.2 x64 bit version. After installaton, the system boots but kernel panics with this message: Badness in i8042_panic_blink at drivers/input/serio/i8042.c:992 The kernel seems to load completely. It gets passed the point where it prompts to press "I" for interactive mode. Something after that probably caused a module to load that crashed the kernel. Any idea what to do to get around this? Thanks for any help. FONGVANG

2 1

High Availability using 2 sites
by Tim Edwards 06 Jan '06

06 Jan '06

We currently have a backup site at a different location to our main site. This backup site mirrors (as closely as possible) our main services, particularly web serving. Is there a way to have the backup site act as a failover for the main site using something like Linux-HA? They are on seperate internet connections with different IP ranges. Thanks -- Tim Edwards

6 15

rc script not running on shutdown
by Mark Belanger 06 Jan '06

06 Jan '06

I've create a script and associated links(via chkconfig). The script runs in the expected runlevels at boot time, but does not run at all during shutdown(halt, reboot, etc). I swear I've done this a million times. What am I overlooking? # cat /etc/issue CentOS release 3.5 (Final) Kernel \r on an \m # chkconfig --list chnghst chnghst 0:off 1:on 2:off 3:off 4:off 5:off 6:off localhost:# find /etc/rc* |grep chngh /etc/rc.d/init.d/chnghst /etc/rc.d/rc0.d/K07chnghst /etc/rc.d/rc1.d/S10chnghst /etc/rc.d/rc2.d/K87chnghst /etc/rc.d/rc3.d/K07chnghst /etc/rc.d/rc4.d/K07chnghst /etc/rc.d/rc5.d/K07chnghst /etc/rc.d/rc6.d/K07chnghst # uname -a Linux localhost 2.4.21-32.ELsmp #1 SMP Wed May 18 17:49:28 EDT 2005 i686 i686 i386 GNU/Linux tia, -mark -- Mark Belanger LTX Corporation

2 5

RE: Linux HA may not be the best choice inyoursituation. [CentOS]High Availability using 2 sites
by Todd Reed 06 Jan '06

06 Jan '06

One final consideration I forgot to mention, make sure you have a beefy router. Depending on your BGP configurations, if you want to receive all routes from the internet, that can seriously bog down a low end router. I'm not saying you can't get by with a low-end router, just make sure your router can handle the results of your BGP configs. --Todd -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Todd Reed Sent: Thursday, January 05, 2006 7:01 PM To: CentOS mailing list Subject: RE: Linux HA may not be the best choice inyoursituation. [CentOS]High Availability using 2 sites In a nutshell and very first of all, you need at least 2 internet connections. Those ISP must be willing to setup BGP peering between your routers and theirs. Once that agreement has been made, you need to get their AS Numbers and submit the ASN request located on ARIN's website (http://www.arin.net) After some paperwork and money exchanges, ARIN assigns you an AS number. At that point, you can configure the BGP peering. There's more details to it, but that's what I went through in a nutshell. ARIN has a pretty good flowchart of their process located at http://www.arin.net/education/asn_process/index.html --Todd -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Tim Edwards Sent: Thursday, January 05, 2006 6:33 PM To: CentOS mailing list Subject: Re: Linux HA may not be the best choice in yoursituation. [CentOS]High Availability using 2 sites Bryan J. Smith wrote: > Exactly! That's why I keep both agreeing _and_ dismissing > many suggestions, because most are only feasible _if_ they > are for a corporate intranet. Most are too arbitrary for the > Internet. > > I believe the original poster was talking about the Internet, > but I could be wrong. Yes I am talking about the Internet, not an Intranet. Thanks for all your replies, especially Brian, they've helped me see more clearly what the options are. I'd already given up on Round Robin or any other kind of DNS 'solution' before I posted, after reading this: http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-round-robin-is-use less.html I don't think the difficulties and expense of getting an AS number and setting up BGP to work with our ISP will be worth it, but I'm not sure - what steps exactly are involved in doing that? -- Tim Edwards _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re[4]: [CentOS] *tangent* High Availability using 2 sites -- yep, "propogation."
by Mickael Maddison 06 Jan '06

06 Jan '06

Hello Les, Thanks for that info. I'm playing with this now and although the 'failover' process seems rather slow, it does seem to be doing what I need. I setup a subdomain entry to point to 4 IP's, only one if which is actually working, and indeed, when IE get's a non-active IP, it eventually goes to the next one until it finally finds the actual live IP. Once it gets the live one, the site works as expected (of course). I'm glad I stumbled onto this thread... for my client's current need, this will do the trick nicely. -- Best regards, Mickael mailto:mikelists@silverservers.com Thursday, January 5, 2006, 12:05:19 PM, you wrote: > On Thu, 2006-01-05 at 13:33, Mickael Maddison wrote: >> Forgive me for this sidestep, but you are saying that Windows/IE >> actually ignores bad IP addresses if a site lists multiple IP's in a >> DNS lookup? I tried this approach for some redundancy a couple years >> ago and it didn't seem to work as you suggest. If it has indeed >> changed to work that way, this will help one of my clients immensely. > The versions of IE I've tried have been very good at this although > it doesn't work for other stock windows apps. You may need > to make sure that ICMP 'unreachable' packets are not firewalled > so down hosts are detected quickly. You can test it easily by > setting up a dummy DNS name with a bunch of A records where some > point to working servers and some don't.

3 2

Re: [CentOS] "dumb" SATA controller recommendation
by David Thompson 06 Jan '06

06 Jan '06

Chris Mauritz wrote: >Just wondering if any 4.2 users out there have a favourite "dumb" PCI >controller to add a couple of SATA ports to a motherboard that doesn't >include SATA support. I'm not looking for anything fancy, just 2 SATA >ports that a recent vintage kernel will recognize without a lot of >configuration gymnastics. The intended use is for relatively light >weight internet browser workstations for younger students. I benchmarked a number of low-end sata controllers for add-on, JBOD applications, and found that some give significantly lower performance than others. One of the good cards performance-wise turned out to be based on a SiI 3112 chipset, delivering performance very similar to intel's ICH6 (i865-based) motherboard sata controllers, and better than any others I found. That being said, I have not been able to deploy that card in a PCI-X based system; it hangs the (64-bit PCI-X) bus and won't let the computer boot. We use lots of 3ware sata controllers, and for jbod, they deliver significantly lower performance than either the ICH6- or 3112- based controllers. So I'm also looking for a 'yeah, it's cheap, it just works, and it delivers the full performance of the disk' sata controller. Dave Thompson The University of Wisconsin - Madison

4 4

"dumb" SATA controller recommendation
by Chris Mauritz 05 Jan '06

05 Jan '06

Just wondering if any 4.2 users out there have a favourite "dumb" PCI controller to add a couple of SATA ports to a motherboard that doesn't include SATA support. I'm not looking for anything fancy, just 2 SATA ports that a recent vintage kernel will recognize without a lot of configuration gymnastics. The intended use is for relatively light weight internet browser workstations for younger students. Suggestions would be very much appreciated. Cheers,

3 2

Disk Partition questions
by Robert Moskowitz 05 Jan '06

05 Jan '06

I selected the defaults in partitioning my drive and df -h shows: Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup00-LogVol00 18G 2.5G 15G 15% / /dev/hda1 99M 12M 82M 13% /boot none 126M 0 126M 0% /dev/shm Now I am getting ready to install Scalix CE and it is telling me a whole story about what my partitions should be. Note that I did the install with 256Mb memory, and I may upgrade to 512Mb. / (root) partition of 6Gb recommended. /boot partition of 75Mb (that seems to be met) /swap partition of x2 installed memory /var partition of at least 10Gb (well that is based on a 100 users and 100mb and that is enough for me) There is also the note: Some versions of Linux include the Logical Volume Manager (LVM). Scalix Corporation recommends using a LVM volume for the /var partition. This enables you to increase the size of the /var partition and back up the Scalix Server without having to shut down the system. So what do I do? leave things alone Use a partition manager (whcih?) to adjust and create partitions Reinstall and select manual partitioning

2 2

RE: [CentOS] Apache reverse proxy authentication problem on RHEL based distribs only
by Todd Reed 05 Jan '06

05 Jan '06

Not sure, but instead of using the domain\user, try using user@domain. That is what we tell our users to use and it seems to work. We are using OWA with form-based login...not HTTP_AUTH. We do this because our SSO connector does not support HTTP Autentication. I wonder if it is something in the passing of the \ that causes it. I don't know. I don't know if it will help, but it is something easy to try. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Steve Johnson Sent: Thursday, January 05, 2006 2:43 PM To: centos(a)centos.org Subject: [CentOS] Apache reverse proxy authentication problem on RHEL based distribs only Hi, I'm currently setting up an Apache SSL reverse proxy for Exchange 2003 Outlook Web Access. The setup that I have works fine on my Gentoo laptop or on a Trustix server, however, when I try to set it up on an RHEL based distro, with the exact same virtual host settings, I get some weird error with the authentication mechanism. I have tried with both CentOS 4.2, based off the server CD and Whitebox 4 and I get the same result. We did a network trace off the Exchange server, and noticed we noticed what is the problem, but can't figure out why only the configuration from those distros are causing it. When getting the HTTP authentication prompt from the Apache front-end, I enter "domain\user" for the user, but the Apache front-end only sends back part of the authentication string to the exchange. As an example, "domain\user" would only send back "d\u" to the Exchange server. This does not happen at all with the other distributions, as I get the full "domain\user" string sent back to the Exchange. Does anyone have any idea as to what could be causing this, and how I might go about fixing it? All our environment consists of the same distribution and I would prefer not to introduce a different one just for this purpose. Here is my virtual host configuration for this: ================================== <VirtualHost xxx.xxx.xxx.xxx:443> ServerName testproxy.domain.com SSLEngine On SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key RequestHeader set Front-End-Https "On" ProxyRequests Off ProxyPreserveHost On LogLevel debug <Location /exchange> ProxyPass http://yyy.yyy.yyy.yyy/exchange ProxyPassReverse http://yyy.yyy.yyy.yyy/exchange SSLRequireSSL </Location> <Location /exchweb> ProxyPass http://yyy.yyy.yyy.yyy/exchweb ProxyPassReverse http://yyy.yyy.yyy.yyy/exchweb SSLRequireSSL </Location> <Location /public> ProxyPass http://yyy.yyy.yyy.yyy/public ProxyPassReverse http://yyy.yyy.yyy.yyy/public SSLRequireSSL </Location> </VirtualHost> ================================== Any information will be appreciated. Thanks, Steve Johnson _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

RE: Linux HA may not be the best choice in your situation. [CentOS] High Availability using 2 sites
by Todd Reed 05 Jan '06

05 Jan '06

Just to clarify, I'm looking at this from an application layer Point of View. One of the reasons why I'm looking at it that way, is because Tim said he was looking at LinuxHA..."application level" redundancy that uses IP. Tim, just to let you know, I don't believe that LinuxHA will work in the way you described, only because of the different IP ranges. It looks like Linux HA wants to take the main machines IP. With them being on 2 separate networks, that wouldn't work. I haven't looked, but you may want to look at some sort of load balancing solution that you can "weight" which server get's the majority of the request. But, this would require clients hitting the load balancer at one of the facilities, therefore defeating your purpose of redundancy...if they can't hit the load balancer, they can't hit the secondary site! As for Brian's Message: 1) You are right, to a point. I'm not saying that my idea was a replacement for BGP. I even state that by saying "This is no substitution for BGP". 2) You are correct in saying that you need to change in how the world sees you (whether that be in the application or layer3 routing). That can be done at the application layer or at layer 3. But, if you are a small company that has only 1 internet link at your primary site and 1 internet connection at your remote site and you rely on the internet for communications between the sites, then you technically do not qualify for an AS number. That makes BGP useless. That makes your solution be somewhere in the upper layer of the OSI model. 3) My idea was more on the lines of internet failure at the primary site and using RRDNS on top of that. If the secondary DNS server kicked in and pulled it's configs from the hidden master, then the hidden record wouldn't be configured for RRDNS because it is only used when the primary site fails. 4) My idea was also an application layer solution. Last time I checked, BGP was in Layer 3. 5) Yes, there are some delays when using DNS. Likewise there are delays with BGP. Certainly BGP delays are a lot quicker. No argument there. But again, my idea is looking at it from an application layer POV. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Bryan J. Smith Sent: Thursday, January 05, 2006 11:34 AM To: CentOS mailing list Subject: RE: [CentOS] High Availability using 2 sites Todd Reed <treed(a)astate.edu> wrote: > I agree, BGP is important to route the IP's, but I've been > exploring this same option with a different thought. I guess you missed my point. It's _not_ just a matter of using BGP for your dynamic routing. It's a matter of getting an assigned, autonomous system number so the Internet addressing your multiple networks as the same network. [ There's a lot more to the Internet than just IPs ;-] That's the proper way to do it. > I'd like to hear what others say about this! I also made the suggestion to enable 1-to-1 NAT at each facility. Should the servers on one site go down, your 1-to-1 NAT devices would redirect requests to servers at the other site. That doesn't require an additional, "external" registration/administration. Of course it means packets are now routed to your first site first, then your second site, so if the first site is wiped out (with no equipment), that doesn't help you. > Here is my plan (although not implemented or tested) for > Web Services. > At our main data center we have the primary DNS server and > our primary web server. The remote location houses the > secondary DNS server and our secondary web server. Also at > that second location is "hidden" master DNS server. > .. cut ... > That is the theory in a nutshell. I've read that this is > possible, but I haven't had a chance to test it. The problem with the theory is that names are cached all over the Internet. That's why DNS server/name changes don't do squat when it comes to failover. Now you could _consider_ setting a very low time-to-live (TTL) on your servers -- like 5 minutes. But that doesn't always work either. > What do others think about this? This is no substitution > for BGP, but for those that don't run BGP or need to re-route > the IP networks, this may work. Again, it's _more_ than just BGP. ;-> You have to modify how the Internet sees you. Not just what you provide to the Internet. ;-> That's a key distinction that most people don't consider. -- Bryan J. Smith Professional, Technical Annoyance b.j.smith(a)ieee.org http://thebs413.blogspot.com ---------------------------------------------------- *** Speed doesn't kill, difference in speed does *** _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Apache reverse proxy authentication problem on RHEL based distribs only
by Steve Johnson 05 Jan '06

05 Jan '06

Hi, I'm currently setting up an Apache SSL reverse proxy for Exchange 2003 Outlook Web Access. The setup that I have works fine on my Gentoo laptop or on a Trustix server, however, when I try to set it up on an RHEL based distro, with the exact same virtual host settings, I get some weird error with the authentication mechanism. I have tried with both CentOS 4.2, based off the server CD and Whitebox 4 and I get the same result. We did a network trace off the Exchange server, and noticed we noticed what is the problem, but can't figure out why only the configuration from those distros are causing it. When getting the HTTP authentication prompt from the Apache front-end, I enter "domain\user" for the user, but the Apache front-end only sends back part of the authentication string to the exchange. As an example, "domain\user" would only send back "d\u" to the Exchange server. This does not happen at all with the other distributions, as I get the full "domain\user" string sent back to the Exchange. Does anyone have any idea as to what could be causing this, and how I might go about fixing it? All our environment consists of the same distribution and I would prefer not to introduce a different one just for this purpose. Here is my virtual host configuration for this: ================================== <VirtualHost xxx.xxx.xxx.xxx:443> ServerName testproxy.domain.com SSLEngine On SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key RequestHeader set Front-End-Https "On" ProxyRequests Off ProxyPreserveHost On LogLevel debug <Location /exchange> ProxyPass http://yyy.yyy.yyy.yyy/exchange ProxyPassReverse http://yyy.yyy.yyy.yyy/exchange SSLRequireSSL </Location> <Location /exchweb> ProxyPass http://yyy.yyy.yyy.yyy/exchweb ProxyPassReverse http://yyy.yyy.yyy.yyy/exchweb SSLRequireSSL </Location> <Location /public> ProxyPass http://yyy.yyy.yyy.yyy/public ProxyPassReverse http://yyy.yyy.yyy.yyy/public SSLRequireSSL </Location> </VirtualHost> ================================== Any information will be appreciated. Thanks, Steve Johnson

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss