- Discuss - lists.centos.org

Re: Fix passwd/shadow/group files? -- Samba 3.0 v. ADS v. CIFS
by Bryan J. Smith 18 Jul '05

18 Jul '05

From: Feizhou > You assume too much and you are not clear enough in what > you post. You didn't even know what a KDC was, so my assumptions were pretty easy to make. You keep saying "Samba, Samba, Samba" over and over like Samba does it all. It does _not_. > Geez....I've been trying to get whether you are saying there was a way > to do the whole ADS DC thing without a MS-Kerberos in the mix. And I've been trying to tell you that: 1) MS Kerberos extensions are now part of UNIX/Linux Kerberos 5 implementations 2) Hence why Samba 3.0 does _not_ provide this, it merely uses it. So _yes_, you _can_ bypass the need for a native Windows ADS DC on your network! But _no_, Samba 3.0 does not provide functionality for sync'ing Samba DC to MS ADS DC. It's an "all Samba" or "all MS DC" choice. > How do you get centralized user account management without > MS Kerberos? Again, MS Kerberos are just extensions to Kerberos, ones supported in new, open source Kerberos 5 servers. If they hadn't, then Samba 3.0 would not be able to act as either a member server in a MS ADS network, or emultate a MS Kerberos KDC without one. This has *0* to do with Samba. There are thousands upon thousands of enterprises running with Novell eDirectory, NsDS, Sun One, etc.. using their own management suite for Windows clients. In many cases, a few are vastly more experienced, featured and superior IMHO. I think what you're looking for is an experience where all the interfaces and schema are emulated to you can run any Microsoft management tools, tools written explicitly for undocumented MS schema and interfaces. You're looking at the problem from an impossible solution standpoint. That's the problem.

2 4

Re: Fix passwd/shadow/group files? -- network architecture is always piecemeal
by Bryan J. Smith 18 Jul '05

18 Jul '05

From: Dag Wieers > Bryan, and you're still belittling people in discussions and get into long > arguments as a result. Pretty please stop doing that. I apologize for any belittling. It is not my intent, but I do see a repeat theme. People thing in single products/projects, not breaking down things into their multiple technologies. That's all I meant by "artificially limiting." > Even if you think you're right, leave some room for the > possibility you're not. It has nothing to do with right/wrong. There is just this farce out there that you must have ADS or every native Windows Server 2003 interface to have quality Windows client management. Various teams, including Samba, have done a wonderful job of reverse engineering many. But the reality is that if you can avoid deploying services that require MS' sprawling (and sometimes self-incomaptible) schema, then you don't need native MS ADS DCs. Enterprises do it all-the-time. > People always need some room in arguments, > unless you want to corner them. > And I'm sure that's not your intent anyway. I _did_ ask the questions, what is ... - ADS? - MS (schema) LDAP? It goes to the heart of the viewpoints and dicussion. Especially for components that are not Samba, but most people only look at for _limited_ Samba use. E.g., MS Kerberos _only_ for authentication of Samba as a member server in a MS ADS DC controller domain (NOT ;-). UNIX/Linux Kerberos servers can do _far_more_ than that, even for 200x/XP clients. Sometimes I think the best marketing done for Windows and Microsoft products is by UNIX/Linux people because they don't even know what services and capabilities are actually offered by UNIX/Linux platforms - be it open source, commercial, etc... ;->

2 4

Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 18 Jul '05

18 Jul '05

From: Les Mikesell <lesmikesell(a)gmail.com> > The problem is that nearly all of the people are windows users > that need samba accounts to work in addition to ftp/ssh. So? I've been authenticating Samba against NIS servers since the mid-'90s. I've even used NIS to distribute my smbpasswd files. See "Samba Unleashed," Appendix A (Solaris). ;-> [ NOTE: The book is 5 years old now, Samba 2.0 was latest. ] I wanted to put in more, but the main author (and my largest professional critic) wanted me to keep the NIS/NFS compatibility down because the rest of the book didn't address it. > Some maintain web content, some are customer support that need > write access to the ftp server and another set does some > development and testing on a different box. At various times > in the past, some of the boxes were solaris and freebsd. So? NIS is _universal_ to just about any UNIX flavor. Almost every UNIX C Library supports checking against it. Some include more modular options, like NSSwitch for telling it whether or not to check against NIS maps. > Now they are all Linux and I'm using smb authentication against > a windows domain controller but still create the accounts for each > permitted user manually. Dude ... 1) I specifically asked you if you had an true MS ADS DC. 2) I mentioned MS Services for UNIX (SFU) Dude, if you had a true MS ADS DC and were already authenticating Samba against it, you _should_also_ use SFU to share out NIS from the same. Now you just control your netgroups at your MS ADS DC. Furthermore, you can even setup true UNIX/Linux NIS "slave" servers to SFU, just like you can setup UNIX/Linux BIND "secondary" DNS servers to MS ADS-integrated DNS. That way if your MS ADS DC tanks, you're not down, because you still have UNIX/Linux DNS/NIS. > Can NIS/netgroups mesh with samba authentication against a > windows domain or would I have to use LDAP for better > integration? Think of NIS as "flat file" like old CIFS (except without the broadcast non-sense). Whereas CIFS moved the Reigstry-SAM password DB network-wide, used NT LAN Manager authentication and introduced WINS as a name resolution service, NIS basically does the same for _any_ UNIX files. You don't even need DNS. You can even use pGINA to replace your NT/200x/XP login to authenticate against other servers. I used to do similar with NISGINA back in the '90s (before MS ADS was even an option for Windows networks). GINA is NT's graphical login/authentication system when you logon. Now that MS has gotten serious, you can just use SFU on your MS ADS DC _directly_! Now you're hosting maps, and ensuring ADS objects _match_ those of NIS maps. Alternatively, if you're worried about security, you can use Kerberos for your password store (instead of NIS hashes in passwd). Now that gets a little more client-specific, but you _can_ use MS ADS' Kerberos to provide a "one-way trust" down to a Keberos realm. > Actually, I guess the next integration will be with Active Directory. Wait! Are you CIFS PDC/BDCs or ADS DCs? If you are the former, you _can_ switch _away_ from CIFS altogether! Not only does Samba 2.2+ provide _full_ CIFS replacement, but you can setup Samba 3.0+ as a BDC, mirror the existing, native CIFS PDC, and then _easily_ promote it to a PDC! Once your PDC is Samba, then it's cake to do NIS. If you already made your Network ADS' bitch, then just get MS SFU. Trust me on this, it makes life 100x easier! I wouldn't be surprised if management thinks UNIX/Linux "sucks" because the UNIX/Linux network is setup like crap, and not because it's not capable. > This company has been acquired and the corporate parent is in the > process of converting their domains now and will be including the > users at this location. Just FYI ... Once you ADS, you're _always_ going to be Microsoft-controlled. Samba will _never_ reverse engineer all of Microsoft's LDAP schema. I know MS ADS is required for a lot of new services. In such case, consider segmenting, maintaining and sychronizing the MS ADS to Red Hat Directory Server (fka Netscape Directory Server, NsDS). Florida Institute of Technology's (FIT's) "acctsync" is a ADS DC-side service designed to retrieves any changes or sends any updates (like password) back to their "master" NsDS tree (acctsync also now supports OpenLDAP, although limitedly). FIT did this because back in 1999, when Windows 2000 starting infiltrating their network, they did _not_ want to put UNIX/Linux reliability at the mercy of MS ADS. They were already running a full LDAP tree with NsDS, and even if they were still using legacy NIS, SFU 1.0 didn't offer a good NIS/NFS service yet (that wasn't really until 3.0 -- current version is 3.5 and _free_). You better decide soon whether or not you're going to put your entire network at the mercy of MS ADS, or if you want to maintain some anonymous control. You really need an independent architect to come in and make your life easier. Because it seems your department isn't aware of all your interoperability options. I'm sure your management must think that Windows is 100x easier to support than UNIX/Linux because of your current setup. I mean, NIS is circa 1982 (yes, _82_) UNIX design, and it would solve your problem quite nicely. -- Bryan J. Smith mailto:b.j.smith@ieee.org

4 8

Re: [CentOS] Re: Fix passwd/shadow/group files? -- network architecture is always piecemeal
by Bryan J. Smith 17 Jul '05

17 Jul '05

From: Feizhou > I know what a Kerberos authentication system is. > You mean a core component in Samba 3.0's functionality as an ADS client. You're still artificially limiting your understanding. Kerberos (with the MS extensions in the case of 200x/XP) is how objects authenticate each other and grant tickets for access in a Kerberos realm. Samba can use Kerberos how it sees fit. As a client/member server (with MS Extensions) to native MS ADS DCs, or to 200x/XP clients in the absence of native MS ADS DCs. The issue is when you have native MS ADS DCs, because Samba doea not understand MS ADS DC-to-DC replication. Otherwise, the authentication process to clients is no different. But that's only authentication. Again, stop thining "aggregate," think naming, directory, authentication and file services individually.

2 1

which rpm has libnss_files.a
by Robin Mordasiewicz 17 Jul '05

17 Jul '05

I need the file libnss_files.a for x86_64 Centos-3 Which rpm has this file. --

3 5

Re: Fix passwd/shadow/group files? -- Samba is not an enterprise ? irectory solution ...
by Bryan J. Smith 17 Jul '05

17 Jul '05

From: Feizhou > Yes, I was wondering whether you were trying to say that Samba > could do the extra cruff MS threw into their > Kerberos/LDAP/DNS thingamich. ? Microsoft uses SRV records in DNS. That was actually a _good_ move. Now their DNS-integrated ADS is another story. Although I do have to say the current, split dhcpd, named, nmbd strategy in the open source world is rather attrocious for private, enterprise network management. But their extensions to Kerberos, that was questionable. But _yes_, it has been documented, per their terms with MIT - even if delayed 2 years. Kerberos implementations for UNIX/Linux, which Samba uses, _does_fully_ support the extensions. This has *0* to do with Samba, although Samba 3.0 can integrate with late BIND8.2 and BIND9 w/SRV, as well as KDCs that also do the MS Kerberos extensions. I think you need to _stop_ attributing these things as Samba, there are other, piecemeal efforts involved. > So not Samba 3.0 + non-MS Kerberos New Kerberos/KDC implementations _support_ MS Kerberos. > + non-MS LDAP But what "MS LDAP"? LDAP is simply but a store! Saying LDAP is like saying XML. It is _not_ an end-usable standard, but standard ways of representing/accessing things. What is used, and if that is a standard, that's what matters. Samba 3.0 _can_ represent many things via SMB RPC to Windows clients and servers as if native. It all depends. > but Samba directing all to an ADS DC. Ah,I think your mega-oversimplifying things. You do _not_ need to run a single native MS ADS server on your network to: - Authenticate Windows clients via MS Kerberos (let alone with pGINA to standard Kerberos 5) - Serve out SAM and other MS schema from its LDAP, the ones that have been documented - Handle SMB signing and other protocol features (even ones that are mega-buggy in MS' own implementations) At this point, Samba 3.0 is a _better_ SMB service for Windows 2000 than Windows Server 2003. Microsoft has attested that it recommends only Windows XP Pro clients for full ADS 2003 support. Ziff-Davis testing has shown this to be true. Samba automagically optimizes for the client that is connecting, with Microsoft giving up on performance/features on anything pre-NT5.1 (XP/2003).

1 0

Java
by Lee w 17 Jul '05

17 Jul '05

Hi everyone, I'm a newbie to centos and having trouble upgrading java's jdk1.4 to jdk1.5. I assume I have to get the jdk from jpackage, but I'm having trouble locating it, let alone finding any instructions on how to upgrade. Much appreciated if anyone can help. Thanks!

6 8

pwc kernel module...
by Gilles CHAUVIN 17 Jul '05

17 Jul '05

Hi, I'm just curious about whether some people here were able to make their webcam work under CentOS 4 using the pwc module (with the stock kernel) ? Mine is a PCVC730K (ToUcam Fun) that I would like to connect to my private webserver but, as soon as I connect it, the system freeze (at least not the whole system but the current console, that's weird). Is there something particular to do to make it work or is it just impossible ? Thanks. Gilles.

1 0

Re: Fix passwd/shadow/group files? -- Samba is not an enterprise directory solution ...
by Bryan J. Smith <b.j.smith＠ieee.org> 17 Jul '05

17 Jul '05

From: "Bryan J. Smith <b.j.smith(a)ieee.org>" > So? I've been authenticating Samba against NIS servers since > the mid-'90s ... > You can even use pGINA to replace your NT/200x/XP login to > authenticate against other servers ... > If you are the former, you _can_ switch _away_ from CIFS altogether! > Samba will _never_ reverse engineer all of Microsoft's LDAP schema ... > You really need an independent architect to come in and make your > life easier. Because it seems your department isn't aware of all your > interoperability options. I want to point out one thing. Understand Samba is a collection of services designed of and for CIFS/SMB. It is _not_ a complete "enterprise directory solution." Samba includes: - A Legacy Registry-SAM compatible password store - A Legacy NetBIOS-WINS naming service and protocol - A Legacy NTLM (NT LAN Manager) authentication protocol And then "wraps into" traditional UNIX services like UNIX resolver (DNS, NIS, NSSwitch, etc...), UNIX authentication (files, NIS, PAM, LDAP, etc...), etc... Newer versions of Samba 2.2 include: - MS ADS subset schema for LDAP (OpenLDAP often used) And Samba 3.0 also introduces: - SASL authentication with Kerberos stores (either MS ADS Kerberos or a MS'ized UNIX Kerberos client/KDC services). Samba strives to be a "drop in replacement" for a native Windows DC and file server, including naming (browser) and authentication. But you do _not_ have to use Windows-centric naming or authentication. You can build a network where you either are UNIX/Linux NsDS/OpenLDAP "tree'd" with or without Kerberos, possibly authenticating against native MS ADS DCs or even Samba emulating ADS DCs, or maybe using pGINA on the clients, or you can even have a completely segmented NsDS/OpenLDAP tree/network from native MS ADS network, and use some synchronization between the two. Samba itself is definitely _not_ a UNIX client designed service. And even if you have native MS ADS deployed, you should be running services on the DCs to present UNIX-like interfaces for authentication, naming, etc... on the server, not trying adhoc, manual, kludge in things. And if you're old MS CIFS/PDC, get off of it. Get your network to NsDS (now Red Hat Directory Server) before it's too late -- even if just for your UNIX portion. Or at least introduce 23+ year-old NIS for things. Golden Rule: The _client_ is always right. Always present the _native_ interfaces of the client OS from a server when it comes to: 1) naming 2) directory/store 3) authentication 4) file services Whether you are a true UNIX, e.g., DNS/NIS, NIS, hash, NFS (NIS) DNS/NIS, NIS, Kerberos, NFS (NIS-Kerberos) NIS+, NIS+, RSA, NFS (NIS+) DNS, LDAP, RSA, NFS (Sun One) DNS, LDAP, hash, NFS (LDAP) DNS, LDAP, SASL/Kerberos, NFS (LDAP-SASL/Kerberos) Or maybe a Windows, e.g., NetBIOS/WINS, SAM, NTLM, SMB (CIFS) DNS, MS LDAP, MS Kerberos, SMB (ADS) Or maybe even a Novell, e.g., SAP, Bindery, hash/RSA, NCP (Bindery) NLSP, X.500/DAP, RSA, NCP (NDS aka eDirectory) You should interface with your clients with what _they_ expect, not what your "back-end" is by default. -- Bryan J. Smith mailto:b.j.smith@ieee.org

3 11

CentOS source code for a kernel rebuild
by G Gambill 17 Jul '05

17 Jul '05

Where does Centos expect to find the source for a kernel rebuild??? TIA George

2 1

Re: [CentOS] Logitech Marble Mouse on CentOS 4
by Angelo Machils 17 Jul '05

17 Jul '05

Op 17-jul-2005, om 14:00 heeft centos-request(a)centos.org het volgende geschreven: > Message: 6 > Date: Sat, 16 Jul 2005 07:51:36 -0500 > From: Johnny Hughes <mailing-lists(a)hughesjr.com> > Subject: Re: [CentOS] Logitech Marble Mouse on CentOS 4 > To: CentOS ML <centos(a)centos.org> > Message-ID: <1121518296.14097.191.camel(a)myth.home.local> > Content-Type: text/plain; charset="us-ascii" > > On Sat, 2005-07-16 at 14:41 +0200, Angelo Machils wrote: > >> Hello there! >> >> I just bought this trackball and connected it to a CentOS 4 box. I >> googled on how to edit xorg.conf for the 2 scrollbuttons, and they >> work while using this section: >> >> Section "InputDevice" >> Identifier "Mouse0" >> Driver "mouse" >> Option "Protocol" "ExplorerPS/2" >> Option "Device" "/dev/input/mice" >> Option "Emulate3Timeout" "50" >> Option "Buttons" "7" >> Option "ZAxisMapping" "6 7" >> Option "Emulate3Buttons" "on" >> EndSection >> >> But then the left button is for scrolling up, and the right for >> scrolling down. How can I reverse this?? I have tried several >> sections from the internet, but most have the same result or don't >> work at all. >> >> Thanks in advance for any help and/or tips. >> >> Angelo >> > > How about > > Option "ZAxisMapping" "7 6" > Yes, one would expect this logical change to work. But it has the same result as "6 7"....... Regards, Angelo

1 0

CentOS 4 post installation of all packages
by dan1 16 Jul '05

16 Jul '05

Hello. I have installed CentOS 4 on a server in a hosting company and I realise that not all packages have been installed. I would like to install all packages exactly like it is when we click on 'install everything' from the CentOS 4 installation. Is there a way of doing so with 'yum install' something ? My goal is to have the exact replicate as the default CentOS 4 'install everything' option. I am in fear that there would be other packages installed than only the ones from the default CentOS install by typing 'yum install *' if this is possible. Thanks, Daniel

8 14

Re: CentOS Digest, Vol 6, Issue 16
by Rohan Walsh 16 Jul '05

16 Jul '05

> This is also answer to everybody else who was nitpicking... > > I believe that OP ment a GUI front end when he said "no package > manager". If he's running CentOS, then he has rpm installed, and most > of his system (if not everything) was installed by rpm. I fail to > understand why so many people are trying to be smart, instead of being > helpfull. Luckily, at least Jay (haven't checked entire thread, maybe > there were others) gave a helpfull answer (hint to the OP, "man rpm" > contains answer to your question, as well as many other usefull options > for rpm command). > > You know, there's difference between "smart" and "smart ass". > Nitpicking will more often get you closer to later then the former ;-) Alexandar, he was asked the question in an interview, as far as we know not related to his CentOS system. Nobody, including the OP (and very possibly the interviewer) is really sure what the interviewer meant. I don't think anybody has been a "smart ass"

2 1

Logitech Marble Mouse on CentOS 4
by Angelo Machils 16 Jul '05

16 Jul '05

Hello there! I just bought this trackball and connected it to a CentOS 4 box. I googled on how to edit xorg.conf for the 2 scrollbuttons, and they work while using this section: Section "InputDevice" Identifier "Mouse0" Driver "mouse" Option "Protocol" "ExplorerPS/2" Option "Device" "/dev/input/mice" Option "Emulate3Timeout" "50" Option "Buttons" "7" Option "ZAxisMapping" "6 7" Option "Emulate3Buttons" "on" EndSection But then the left button is for scrolling up, and the right for scrolling down. How can I reverse this?? I have tried several sections from the internet, but most have the same result or don't work at all. Thanks in advance for any help and/or tips. Angelo

2 1

CentOS-announce Digest, Vol 5, Issue 6
by centos-announce-request＠centos.org 16 Jul '05

16 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:571 Moderate CentOS 3 i386 cups - security update (Tru Huynh) 2. CESA-2005:571 Moderate CentOS 3 x86_64 cups - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 15 Jul 2005 18:57:28 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2005:571 Moderate CentOS 3 i386 cups - security update To: centos-announce(a)centos.org Message-ID: <20050715165728.GA13273(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2005:571 cups security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2005-571.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/cups-1.1.17-13.3.29.i386.rpm updates/i386/RPMS/cups-devel-1.1.17-13.3.29.i386.rpm updates/i386/RPMS/cups-libs-1.1.17-13.3.29.i386.rpm source: updates/SRPMS/cups-1.1.17-13.3.29.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update cups\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

frozen centos 3 server
by Tom 16 Jul '05

16 Jul '05

Hi, Is there any way to reboot a server that I can't access via ssh, http, ftp or any port? But I can ping, traceroute & nmap it just fine. I have no idea what is causing this lockup or lock out, even after a reboot by the DC there's nothing in the logs to show what happened. :( regards tom

3 6

CentOS on Compaq Proliant Rackmount Servers
by Robert Hanson 15 Jul '05

15 Jul '05

Greetings, Can anyone relate experience(s) installing CentOS on Compaq rack mount servers units please? Easy no problem, easy some issues, or ghastly do not do it under any circumstances... ;) Basically, I'm looking at some used/refurb dual PIII units and will run RAID on Compaq built in SCSI or is it easy to pop in some 3ware SATA in them? Let me know in terms of CentOS 3 and/or 4 please. Regards and TIA, - rh

5 4

RE: [CentOS] CentOS on Compaq Proliant Rackmount Servers
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Mike Kercher <mike(a)CamaroSS.net> > I run Centos3 on many 1850R's, 5500's, 6400's and 6500's without issue. Those sound like Pentium Pro generation, not P2 on-ward. But I could be wrong, I've had too many DL series over the last 4+ years. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: [CentOS] CentOS on Compaq Proliant Rackmount Servers
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Robert Hanson <roberth(a)abbacomm.net> > Greetings, > Can anyone relate experience(s) installing CentOS on Compaq rack > mount servers units please? > Easy no problem, easy some issues, or ghastly do not do it under any > circumstances... ;) > Basically, I'm looking at some used/refurb dual PIII units Excellent buys for what you get, especially if they have ServerWorks chipsets with 64-bit x 66MHz PCI or even PCI-X slots. > and will run RAID on Compaq built in SCSI Some DL units use software RAID. Some have i960 microcontroller SCSI RAID, which is rather pathetic these days. You won't break 50MBps sustained writes very easily. > or is it easy to pop in some 3ware SATA in them? They'll take 3Ware cards in the expansion slots, but they typically have SCSI SCA bays, not SATA bays. Check with HP and see if you can get DL3xx series SATA bays (I assume these are DL3xx series)? If you're worried about reliability, buy 10,000rpm SATA drives that typically roll off the same line as their SCSI/FC counterparts. I'm fairly sure the 73/146GB WD Raptors are fabbed by Hatachi and match their specs. > Let me know in terms of CentOS 3 and/or 4 please. Have run RHL9/RHEL3 on the DL1xx and 3xx series, no major issues. It really comes down to the _exact_models_ and _revisions_ (part numbers will do). Do you have those? -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

J2SE1.4.2 SDK on x86_64
by Mike Kercher 15 Jul '05

15 Jul '05

I've been trying to get the J2SE1.4.2 SDK installed on a Centos 3.5 x86_64 box without success. Does anyone have an rpm for this? TIA Mike

1 0

Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Paul Heinlein <heinlein(a)madboa.com> > I think it'll only work for NIS passwd maps, but I think that the > netgroups map can come from NIS *or* live in /etc/netgroup. Right. But in a nutshell, I think we agree that NIS is the way to go. Totally forgot about netgroups and using the +:::::: limitations in /etc/passwd on each NIS client. All excellent suggestions. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: [CentOS] Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

Ignacio Vazquez-Abrams wrote: > Stuff pam_netgroups into system-auth then make a group per machine. > http://www2.physics.umd.edu/~payerle/Software/PAM/ Doh!!! I should have realized that. Yes, using NIS Netgroups and PAM authentication around them is much, much better on Linux (and even Solaris) than using multiple NIS domains. And even if he still replicates his files manually (he should at least consider automating their distribution via SSH), he can still setup just 1 file and use the same netgroups-PAM solution. Good catch. From: Paul Heinlein <heinlein(a)madboa.com> > If you set up netgroups, you can specify login rights easily: > * /etc/passwd > [...] > +@login-group > +:::::/dev/null:/sbin/nologin > * /etc/nsswitch.conf > passwd: compat > shadow: compat > group: files nis > netgroup: files nis Now that only works for NIS distributed passwd, netgroups, correct? Or will it work for local users as well? -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: How to query the package owning the file? (no packahe manger installed)
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Prasad Pillarisetti <prasad.pillarisetti(a)gmail.com> > Guys recently I had this question asked in a technical interview. > How do I find out the package owning a particular file, when no > package managers are installed? Impossible. I think he didn't know what he was talking about. He might have mistakenly been looking for... 1. Find the tarball on the system 2. Find the source directory of the system (/usr/local/src)? 3. Use Checkinstall (build package from tarball build) 4. Use rpmbuild -t to look inside of a tarball for SPEC files 5. Others? I guess I just had to be there. > I am assuimg SRPMs are used to install the software? An rpm -i blah.src.rpm merely dumps things into /usr/src/redhat. You go through the SPEC, SOURCE, etc... subdirectories. > Is this actually possible? > Install the Linux OS without a package manager? Of course! There are "packages"** distros like Debian, Fedora, etc... based. And then there are "tarball" distros with some meta-data** in the tarballs, such as Slackware. [ SIDE NOTE: Both DPKG and RPM are System V cpio archives, pretty much the same USTAR format as tar itself, but use 5KiB blocking instead of 10KiB blocking by default. ] Newer to Linux (but no stranger to BSD) are "ports" distros, such as Gentoo. It uses a centralized build system whereby instead of a "package manager" that creates the SPEC (RPM) file, config/Makefile and other commands and bundles it into a single file, the "ports" repository (e.g., Gentoo's portage) just gives you basic Makefiles and other meta-data, and you actually fetch the software. > I know "rpm -qf filename" gives the package owning the file. > But how to get the package name when I don't have any > package manager? Maybe this was a question to rattle me? Of course. People do it all-the-time. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

CentOS-announce Digest, Vol 5, Issue 5
by centos-announce-request＠centos.org 15 Jul '05

15 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:567 Important CentOS 4 ia64 krb5 - security update (Pasi Pirhonen) 2. CESA-2005:567 Important CentOS 3 ia64 krb5 - security update (Pasi Pirhonen) 3. CESA-2005:562 Important CentOS 3 s390(x) krb5 - security update (Pasi Pirhonen) 4. CESA-2005:571 Moderate CentOS 3 ia64 cups - security update (Pasi Pirhonen) 5. CESA-2005:571 Moderate CentOS 3 s390(x) cups - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Thu, 14 Jul 2005 21:09:43 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CESA-2005:567 Important CentOS 4 ia64 krb5 - security update To: centos-announce(a)centos.org Message-ID: <20050714180943.GA26208(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:567 https://rhn.redhat.com/errata/RHSA-2005-567.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/krb5-devel-1.3.4-17.ia64.rpm updates/ia64/RPMS/krb5-libs-1.3.4-17.ia64.rpm updates/ia64/RPMS/krb5-server-1.3.4-17.ia64.rpm updates/ia64/RPMS/krb5-workstation-1.3.4-17.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 14 Jul '05

14 Jul '05

From: Les Mikesell <lesmikesell(a)gmail.com> > Good call! That and the corresponding grpck found a couple of > duplicate lines that seemed to be confusing things. Any reason you haven't considered NIS? If you're worried about passwords, setup Kerberos for authentication. It's easier than you think. -- Bryan J. Smith mailto:b.j.smith@ieee.org

4 3

Re: Upgrading from RH AS-3 to ??
by Penelope Fudd 14 Jul '05

14 Jul '05

Oh, and after it's all done, when rpm looks like it's permanently broken with errors like this: # rpm --rebuilddb rpmdb: Program version 4.2 doesn't match environment version error: db4 error(22) from dbenv->open: Invalid argument error: cannot open Packages index # The solution is: # cd /var/lib/rpm # rm __* # rpm --rebuilddb Thank heavens for Google, and that pasting error messages into it is the fastest way to get help. -- Penelope Fudd <centos(a)ch.pkts.ca>

1 0

Re: [CentOS] Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 14 Jul '05

14 Jul '05

From: Les Mikesell <lesmikesell(a)gmail.com> > The machines in question were set up years ago when it wasn't so > easy and are on opposite sides of a firewall Setup an NIS slave local to each LAN (and a VPN to the NIS master, or consider SFS tunneling for portmap), and also run a name services cache daemon (nscd) on each client. > (but sometimes have NFS mounts in common). All the more reason to use NIS, for Automounter maps. ;-> I only recommend NIS because it's cake to setup. If you have ActiveDirectory Services (ADS), then consider Services for UNIX (SFU). You can even use one-way Kerberos trust from ADS to avoid password hashes (as well as clear text passwords using Kerberosized clients). I don't prefer ADS-SFU when you have UNIX platforms though. Especially Red Hat, who made NIS-Kerberos integration so seemless as of Red Hat Linux 7 onward. > One machine has all user accounts and things are managed > normally there. Great! It's so easy to turn that one system into an NIS master then. ;-> > The others only have small subsets of users (on purpose) > and I've pasted in the passwd entries from the machine that > has them all to keep the uids in sync for NFS and rsync'ing > chunks of stuff around. Then setup multiple NIS domains. It's easy to do even on one, physical NIS master for all. It'll easily repay you for the manual operations you do. [ But even then, why aren't you using a script run over ssh to minimize your manual workload? Just curious. ] > I just had some duplicated lines from the last OS version > change where I copied too much from the previous one. > I might re-do it with LDAP someday, but it's probably > more work to control the users that aren't supposed to > log into these machines than to separately add the ones > that are. Netscape Directory Server (NsDS), now Red Hat/Fedora Directory Server, is a great LDAP server. But when I just want something like you need, an NIS domain or a few from one system, with local NIS slaves and nscd running on all the clients does everything I need. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Fix passwd/shadow/group files?
by Les Mikesell 14 Jul '05

14 Jul '05

I've been copying old passwd/shadow/group files from system to system for ages across different distributions/updates and would like to get them back in sync with each other so the system tools will work. Now they hang like: #userdel irose hangs forever, syslog says: Jul 12 11:19:32 newftp userdel[30335]: delete user `irose' Jul 12 11:19:32 newftp userdel[30335]: delete `irose' from group `ftp' Jul 12 11:20:02 newftp last message repeated 373404 times Jul 12 11:21:04 newftp last message repeated 646597 times Jul 12 11:21:06 newftp last message repeated 29123 times Is there some kind of test/diagnostic tool I can use to clean up the parts that don't match anymore? Preferably one that doesn't hang forever when something is missing.... -- Les Mikesell lesmikesell(a)gmail.com

4 5

Upgrading from RH AS-3 to ??
by Penelope Fudd 14 Jul '05

14 Jul '05

I found my problem.. heh. The Centos-3.5 directories aren't set up to use the latest Yum; they don't have repomd.xml files. The secret is to use rpm -Uvh http://linux.duke.edu/projects/yum/download/2.0/yum-2.0.8-1.noarch.rpm and an /etc/yum.conf like this: ====8<-----cut-here------------ [main] exclude=mod_ssl* httpd* perl mysql* php* #add this line for cpanel servers cachedir=/var/cache/yum debuglevel=2 logfile=/var/log/yum.log pkgpolicy=newest distroverpkg=redhat-release tolerant=1 exactarch=1 [base] name=CentOS-$releasever - Base baseurl=http://mirror.centos.org/centos-3/3.5/os/$basearch/ gpgcheck=1 #released updates [update] name=CentOS-$releasever - Updates baseurl=http://mirror.centos.org/centos-3/3.5/updates/$basearch/ gpgcheck=1 #packages used/produced in the build but not released [addons] name=CentOS-$releasever - Addons baseurl=http://mirror.centos.org/centos-3/3.5/addons/$basearch/ gpgcheck=1 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras baseurl=http://mirror.centos.org/centos-3/3.5/extras/$basearch/ gpgcheck=1 -- Penelope Fudd <centos(a)ch.pkts.ca>

1 0

Upgrading from RH AS-3 to ??
by Penelope Fudd 14 Jul '05

14 Jul '05

Hi! I'm trying to upgrade my Redhat 3AS server, but I'm encountering problems. The first problem was, I didn't know what repository to use. I settled on http://mirror.centos.org/, but using it is strange, as not all mirror servers have all of the directories, and so sometimes links appear broken, but the problem goes away if I hit reload. A number of them have empty directories, like this one: http://mirrors.versaweb.net/centos/3.5/extras/i386/RPMS/ The second problem was, I didn't know what CentOS version to use. I'm guessing 3.5 is the right one for compatibility with RH 3AS. The third problem is, yum reports: # yum install centos-logos Setting up Install Process Setting up Repos http://mirror.centos.org/centos-3/3.5/extras/i386/repodata/repomd.xml: [Errno 4] IOError: HTTP Error 404: Not Found Trying other mirror. Cannot open/read repomd.xml file for repository: extras failure: repodata/repomd.xml from extras: [Errno 256] No more mirrors to try. # Am I using the wrong version of yum? Is there an official yum.conf to use? Thanks! -- Penelope Fudd <centos(a)ch.pkts.ca>

1 0

RE: [CentOS] Problem with mouse and keyboard
by Harper, Patrick 14 Jul '05

14 Jul '05

Looks like it is going to be a hardware problem, I did the unthinkable and put my windows hard drive in and same results. Sorry to take up your time. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Harper, Patrick Sent: Thursday, July 14, 2005 12:49 PM To: centos(a)centos.org Subject: [CentOS] Problem with mouse and keyboard This just started on my laptop yesterday. My mouse wants to go to the lower left corner of my screen, this seems to be triggered by using the keyboard. Once it is on its way I just have to wait for it to stop so I can move it where I need it or it will just drift back to that corner. I have tried several mice as well as just the onboard touchpad. I am on 4.1 running nightly updates. Thanks for any help you might be able to give. ----------------------------------------- Disclaimer: This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Problem with mouse and keyboard
by Harper, Patrick 14 Jul '05

14 Jul '05

This just started on my laptop yesterday. My mouse wants to go to the lower left corner of my screen, this seems to be triggered by using the keyboard. Once it is on its way I just have to wait for it to stop so I can move it where I need it or it will just drift back to that corner. I have tried several mice as well as just the onboard touchpad. I am on 4.1 running nightly updates. Thanks for any help you might be able to give. ----------------------------------------- Disclaimer: This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately.

1 0

htaccess authentication asks for MySQL table test.user_info
by dan1 14 Jul '05

14 Jul '05

Hello. For users interested in the MySQL authentication problem for SSL pages, there is another way to prevent mod_auth_mysql to do this mySQL authentication. This has been reported by Brent: In the /etc/httpd/conf/httpd.conf file, add the directive: <Directory xxxxxx/ AuthMySQLEnable off AllowOverride All </Directory> You can also add it to your .htaccess file. Thanks Brent ! Daniel ----- Original Message ----- From: dan1 To: centos at centos.org Subject: [CentOS] htaccess authentication asks for MySQL table test.user_info Hello again. I just found out a work-around to this problem. We have to remove the mod_auth_mysql module with 'rpm -e mod_auth_mysql' and then it works again. However, I think that the choice of going through file or database should not be done by installing or uninstalling an rpm, but merely by choosing that option from a tag in a file, and turning this on or off. Maybe I'm wrong, but that would be much better to my point of view. Also, it's strange to suddenly change the default behaviour of Apache and I'm quite surprised that so few of you seem to have had this problem. Here is another thread about it: http://www.redhatforums.org/ftopic4079.html Maybe should be add this in the bug list, or is it a RedHat issue ? Thanks, Daniel ----- Original Message ----- From: dan1 To: centos at centos.org Sent: Monday, May 16, 2005 11:40 AM Subject: [CentOS] htaccess authentication asks for MySQL table test.user_info Hello. I tried to create an access file with 'htpasswd -c /etc/httpd/conf/myfile.htaccess testuser'. In the SSL directory I have put a .htaccess file containing the followings: AuthUserFile /etc/httpd/conf/myfile.htaccess AuthName "Mydomain" AuthType Basic require valid-user This worked with CentOS 3. Now with CentOS 4, apache version 2.0.52, the access to the page is forbidden. The ssl_error_log indicates this error: [Mon May 16 10:03:21 2005] [error] [client 192.168.0.1] MySQL ERROR: Table 'test .user_info' doesn't exist: /myurl_to_ssl_address [Mon May 16 10:03:21 2005] [error] [client 192.168.0.1] MySQL user testuser not fou nd: /myurl_to_ssl_address It's like if apache would make a MySQL query to find the user I specified, but in fact I expected apache to look into the /etc/httpd/conf/myfile.htaccess for that, and not in MySQL. Another person had the same problem lately. Here is the post: http://groups.google.ch/group/alt.apache.configuration/browse_frm/thread/9e… Does anybody have an idea of what happens there ? Thanks for any help provided. Daniel _______________________________________________ CentOS mailing list CentOS at centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

aacraid monitoring tool?
by alex＠milivojevic.org 14 Jul '05

14 Jul '05

I've got myself an Adaptec 2200 HW RAID card to play for couple of days. Tha card uses aacraid device driver. Seems to work nicely, however just wandering if there's a tool (prefferably CLI) for CentOS that can read out RAID configuration data, status of individual drives, maybe even manage (create/delete) RAID devices? Thanks for any and all pointers. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

5 6

Re: Open Office 1.9.x -- Firefox i386 on x86-64
by Bryan J. Smith <b.j.smith＠ieee.org> 14 Jul '05

14 Jul '05

From: Karanbir Singh <Mail-Lists(a)karan.org> > Donno about FC3. When I installed FC3 x86_64, I got both for Mozilla, but only x86_64 for Firefox. Closer inspection showed that's exactly what the packages were in the repository. > You need to 'steal' from the i386 repo.. > ( apologies... I should have mentioned that before ) Yep. I have tried to "tap" the FC3 i386 repository with both APT and YUM and not always received what I expected. From my 2nd/3rd-hand understanding (i.e., I haven't done it ... yet), SmartPM let's you do all sorts of things to resolve this (like repository priority and other details). If I find a spare 4-6 hours in the next few weeks, I'm going to use SmartPM and document exactly how x86_64 platforms can benefit from its use. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: Open Office 1.9.x -- Firefox i386 on x86-64
by Bryan J. Smith <b.j.smith＠ieee.org> 14 Jul '05

14 Jul '05

From: Karanbir Singh <Mail-Lists(a)karan.org> > Just use the firefox-...-.i386.rpm and install all your standard > plugins, nothing elaborate about it. > Step.1 : yum install firefox.i386 > Step.2 : install all your plugins > Step.3 : Browse. Unfortunately some "wise" Red Hat people didn't bother to put Firefox i386 in the standard Fedora Core 3 x86-64 repository. They put both i386 and x86_64 packages for Mozilla, but only x86_64 for Firefox. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Eclipse on Centos 4...
by Francois Meehan 14 Jul '05

14 Jul '05

Hi all, Is it possible to run eclipse 3.1 on Centos 4? When I tried, I got a JVM error and it bailed out. Does it require anything special to run on Centos? Best regards, Francois Random Thought: --------------- After Goliath's defeat, giants ceased to command respect. - Freeman Dyson

2 2

kernel panic at install time centos-3.5-x86_64
by Robin Mordasiewicz 14 Jul '05

14 Jul '05

I have successfully kickstarted 3.4 x86_64, but after updating my repo to 3.5 I see a kernel panic when it loads vmlinuz. Funny thing is that I had one box that would kernel panic while trying to install centos-3.4-x86_64, which then would install fine after updating to 3.5, but now my other mahcines will not kickstart. --

2 1

X Windows
by Huzefa Zakir 14 Jul '05

14 Jul '05

Can someone please assist me on how to install Gnome /KDE ? I am running Centos 4.1, and I didn't install the packages durning the install, but would like to install them now, Thanks ZAK CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************

4 3

RPM Autorollback
by Maciej Żenczykowski 14 Jul '05

14 Jul '05

Hi, any idea if (when?) a new version of those RPMs with rollback included will become available for CentOS 4? Thanks, MaZe.

3 7

Yum package requiring yumconf
by Dag Wieers 13 Jul '05

13 Jul '05

Hi, I need yum-arch on RHEL4, yum does not come with RHEL4 so I took the CentOS package, but this one requires a yumconf package (satisfied by centos-yumconf) which I thought was pretty strange. Why does one require a yumconf package uberhaupt ? Why are we limiting a generally useful package to CentOS (or a system that provides yumconf) ? I know you can fix it in several ways, but I'm more concerned about having the dependency there in the first place. I always considered dependencies much like strictly necessary to use this package, and in this case it does not seem to be very mandatory. (config files you can add yourself easily one way or the other if you require them) My vote would go for removing the dependency. (now that I have installed centos-yumconf on RHEL4 and disabled all the functionality) -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [all I want is a warm bed and a kind word and unlimited power]

2 1

Problem unmounting loop device
by Matt Lawrence 13 Jul '05

13 Jul '05

I'm attempting to build a virtual disk image for qemu of CentOS4 on CentOS4. I'm having a problem after using yum --installroot to put a minimal filesystem on a partition located within the virtual disk. When I go to unmount it, I get "device is busy" errors. I know that I haven't left anything using that filesystem and lsof doesn't show anything, so I'm wondering if there is some sort of odd problem with the loop device. So far, I haven't been able to find anything applicable using google. Any ideas? -- Matt

3 4

CLI BT tracker/tracker
by William Warren 13 Jul '05

13 Jul '05

I have been hunting around the inet trying to find a CLI BT tracker/hoster. I want to use one of my linux servers as a BT torrent hoster/tracker. Anyone have any good informaiton they can point me to? -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/

4 4

CentOS-announce Digest, Vol 5, Issue 4
by centos-announce-request＠centos.org 13 Jul '05

13 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:562 Critical CentOS 3 i386 krb5 - security update (Tru Huynh) 2. CESA-2005:562 Critical CentOS 3 x86_64 krb5 - security update (Tru Huynh) 3. CESA-2005:567 Important CentOS 4 i386 krb5 - security update (Johnny Hughes) 4. CESA-2005:567 Important CentOS 4 x86_64 krb5 - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 13 Jul 2005 01:06:13 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2005:562 Critical CentOS 3 i386 krb5 - security update To: centos-announce(a)centos.org Message-ID: <20050712230613.GA11031(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2005:562 krb5 security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2005-562.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/krb5-devel-1.2.7-47.i386.rpm updates/i386/RPMS/krb5-libs-1.2.7-47.i386.rpm updates/i386/RPMS/krb5-server-1.2.7-47.i386.rpm updates/i386/RPMS/krb5-workstation-1.2.7-47.i386.rpm source: updates/SRPMS/krb5-1.2.7-47.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update krb5\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Cetos 4 with Secure Linux - Apache perl problems...
by Scott Heisler 13 Jul '05

13 Jul '05

I'm trying to get perl working correctly on a new server and have a tough time. The server works fine for all standard web pages and hosts about 10 domains. Here's is my test.cgi CGI script I'm trying to run: #!/usr/bin/perl print "Content-type: text/html\n\n"; print "Hello!"; When I attempt to access the file via a web browers, I get this: [Tue Jul 12 16:46:11 2005] [error] [client 209.74.180.78] (13)Permission denied: exec of '/var/www/cgi-bin/test.cgi' failed [Tue Jul 12 16:46:11 2005] [error] [client 209.74.180.78] Premature end of script headers: test.cgi However, if I run it locally, I get the "Hello" output. I gave the file 777 and 755 rights (neither worked) and even gave apache ownership (apache:apache owns the file). Still get the Error 500 web page and the above errors. So I went further and dug more. In the httpd.conf, I established this: AddHandler cgi-script .cgi .pl ; set this: ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" ; <Directory "/var/www/cgi-bin"> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory> Still no luck.... What am I missing? Thanks. Scott

5 4

RE: [CentOS] gpg
by Ash Christopher 13 Jul '05

13 Jul '05

If you search the centos mailing list, this has been covered quite extensively. http://centos.org/modules/newbb/viewtopic.php?topic_id=1262&forum=32&pos t_id=3695#forumpost3695 -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Mark Jarvis Sent: Tuesday, July 12, 2005 1:49 PM To: CentOS discussion and information list Subject: [CentOS] gpg In a general re-configuration of my box, I deleted and re-installed CentOS. OK, I need the gpg key. When, as suggested, I run rpm --import public.gpg.key I get: error: public.gpg.key: import read failed. So what do I do now? -mj- _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

3 2

Re: bad rpm openssh
by Traxhosting Tech 12 Jul '05

12 Jul '05

> Anything in /var/log/secure or /var/log/messages SSH is down, remember :) It's has become more complicated. It's best you visit http://forums.cpanel.net/showthread.php?p=195455#post195455 if you wanna stay updated on this issue... Tnx for replying, doh...

3 2

gpg
by Mark Jarvis 12 Jul '05

12 Jul '05

In a general re-configuration of my box, I deleted and re-installed CentOS. OK, I need the gpg key. When, as suggested, I run rpm --import public.gpg.key I get: error: public.gpg.key: import read failed. So what do I do now? -mj-

2 1

Red Hat Cluster Suite
by Adam Breaux 12 Jul '05

12 Jul '05

Is there an equivalent for CentOS? Adam Breaux Sr. Network Administrator Domain Bank, Inc. 23 W 4th St. Bethlehem, PA 18015 Phone: 610.317.9606 Fax: 610.317.9570 abreaux(a)domainbank.com http://www.domainbank.com

3 3

HAL and mounting volume
by Petr Klíma 12 Jul '05

12 Jul '05

Hi, is there anybody understanding HAL? I use CentOS 4 (RHEL 4) I need set specific mount options for USB flash disk. I found I can do it in /usr/share/hal/fdi/95userpolicy/storage-policy.fdi <?xml version="1.0" encoding="ISO-8859-1"?> <deviceinfo version="0.2"> <device> <match key="volume.fstype" string="vfat"> <merge key="volume.policy.mount_option.uid" type="string">nobody</merge> <merge key="volume.policy.mount_option.gid" type="string">mounter</merge> <merge key="volume.policy.mount_option.umask" type="string">077</merge> <merge key="volume.policy.mount_option.codepage" type="string">852</merge> <merge key="volume.policy.mount_option.iocharset" type="string">utf8</merge> <merge key="volume.policy.mount_option.exec" type="string">true</merge> </match> </device> </deviceinfo> "lshal" is showing this, but disc is mounted with standard options... uudi = '/org/freedesktop/Hal/devices/block_4223-CC71' volume.policy.mount_option.exec = 'true' (string) volume.policy.mount_option.iocharset = 'utf8' (string) volume.policy.mount_option.codepage = '852' (string) volume.policy.mount_option.umask = '077' (string) volume.policy.mount_option.gid = 'mounter' (string) volume.policy.mount_option.uid = 'nobody' (string) volume.policy.mount_option.noatime = true (bool) volume.policy.mount_option.sync = true (bool) volume.policy.desired_mount_point = 'usbdisk' (string) volume.policy.mount_filesystem = 'vfat' (string) volume.policy.should_mount = true (bool) info.udi = '/org/freedesktop/Hal/devices/block_4223-CC71' (string) volume.size = 130023424 (0x7c00000) (uint64) volume.block_size = 512 (0x200) (int) volume.num_blocks = 253952 (0x3e000) (int) volume.is_disc = false (bool) volume.is_mounted = true (bool) volume.mount_point = '/media/usbdisk' (string) volume.label = '' (string) volume.uuid = '4223-CC71' (string) volume.fsversion = 'FAT12' (string) volume.fsusage = 'filesystem' (string) volume.fstype = 'vfat' (string) info.product = 'Volume (vfat)' (string) info.parent = '/org/freedesktop/Hal/devices/block_8_16' (string) info.category = 'volume' (string) info.capabilities = 'block volume' (string) info.bus = 'block' (string) block.no_partitions = false (bool) block.have_scanned = false (bool) block.is_volume = true (bool) block.device = '/dev/sdb' (string) block.major = 8 (0x8) (int) block.minor = 16 (0x10) (int) block.storage_device = '/org/freedesktop/Hal/devices/block_8_16' (string) what is wrong? -- Petr Klíma e-mail: petr.klima(a)jihomilk.cz JIHOMILK a.s. phone: +420 389 136 209 Rudolfovská 246/83 web: http://www.jihomilk.cz 370 50 České Budějovice Czech Republic

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss