- Discuss - lists.centos.org

Re: Mini-centOS -- "Thin Clients" and lack of read-only boot
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: Greg Knaddison <greg.knaddison(a)gmail.com> > If you want to compare CentOS to this, then you have to realize that > this "lightweight" version of MS will only run a remote desktop > session (Terminal Service), a browser (IE), a music app (MSWindows > Media Player), a virus scanner and a file navigation utility > (Explorer). They are basically "Thin Clients" using a PXE boot, although local installation is an option. Long story short, Microsoft has _never_ produced a "consumer" Windows product, not DOS7 "Chicago" nor NT, that is "read-only" bootable. That's been a major limitation of DOS/NT versus UNIX systems, they _require_ the filesystem to be "read/write" during the boot process. Most of this is due to the more "consumer" libraries designed for DOS7 "Chicago" Windows (9x/Me). At the most they've created an ultra-light Win32 kernel with just enough to RDesktop out of a EEPROM. But even when they did, companies like Wyse and many others opted for a BSD kernel with Citrix code instead of Microsoft's. This is a totally different issue. Microsoft is trying to do what UNIX X-Terminals, Workstations and other UNIX-based Thin Clients have done for years. This isn't "innovative" it's "catching up" to UNIX. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: About strongs passwords! -- PAM
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: israel.garcia(a)cimex.com.cu > 1. My users have to work on the shell because, they run a C++ > scritp to work in tha database.. If it's just 1 or 2 scripts, consider limiting access to programs with another shell and/or a web or other front-end that only lets them launch a specific process. > 2. So I want to force my users to pick a strong password.. Is there some > command, tool to do this? Actually, modifying PAM rules are highly recommended for this. So it not only does it for a single program, but all programs that change the password. But ideally, you should consider _not_ using passwords for SSH. You should enable either public key authentication or Kerberos. It increases security ten-fold because the actual communication sent is a challenge -- i.e., a one-time, random password that is not good ever again. In the case of public key authentication, you'll want to use passphrases, and enforce strong rules on those. The passphrases protect the private key on the client, which you never want to store whole. You'll need to research how to enforce that with "ssh-keygen" and the local "/etc/ssh/*config*" on each system where they are using the SSH client. If you're really anal, you can use smart cards. Then no system ever has even the private key. It's actually easier to setup for SSH than most people think. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: [CentOS] Mini-centOS
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: Doug Koobs <dkoobs(a)dkoobs.com> > If it helps any, I'm running CentOS4 on an old PII 400Mhz, 192MB laptop. Under > Gnome, it's not exactly snappy, but it is usable. Unser XFCE4.2, i'm quite ahppy > with it. I know you stated that you need Gnome, and I also prefer it. But if you > haven't tried some of the lightweight alternatives, give them a shot, you may be > surprised. The nice thing about XFCE is that it is a _total_ session+file+window solution, like KDE and GNOME. And if you don't like XFCE's session+file managers, you can always use Rox-Filer (which works flawlessly with XFCE's xfwm window manager). > Intereating article about the new lightweight Windows OS. There's _no_ such thing on the retail shelf or in volume Windows license. Unless you link from the _Embedded_ NT/2000/XP releases, you can't "unlink" all sorts of crap that "leeches" on the NTkernel, GDI, etc... These so-called "lightweight" Windows OS releases are nothing more than some things not bundled. It's a 100% marketing gimmick. Unfortunately, "Chicago"-designed MS IE is required by all apps since the mid-'90s, which is the crux of the resource and, more relevantly, security in the current bastardization of Win32 we call NT5.1 (XP/2003). So it's hard to get rid of if you run anything that was developed with Visual Studio. It's really sad. Some Windows architects are really sharp guys, but the "applications" developers still develop like NT is DOS7 "Chicago" -- assuming the world is safe and users have full access over the system. No wonder Marc left for Google! > However, I don't think it will meet your needs, as it will be extremely crippled, > to the point it won't even run MS Office if I read correctly. Depends on what is left out. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Mini-centOS
by kenkensmile＠netscape.net 13 May '05

13 May '05

Chris Mauritz <chrism(a)imntv.com> wrote: >kenkensmile(a)netscape.net wrote: > >>I am using centOS for my server and centOS is extremely stable. I almost love centOS more than my wife. However, centOS is a bit heavy to run on my notebook (P III 1G, 256MB RAM). I need gnome, firefox, openoffice, realplayer, gaim, acrobat and thunderbird on my notebook, but if I install all of them (plus base-system), my notebook becomes very slow. I wish I could have a lighter version of centOS for notebooks and old desktops. Is there any project that I could have a mini-centOS in the future??? >> >> >> > > >The slowness isn't really CentOS's fault. That's not really enough >memory for an X+gnome environment if you're going to be running piggy >applications like openoffice. Also, I suspect an older P3 notebook >probably has rather slow video hardware which may make things seem worse >than they really are. The best thing you can do to speed things up is >to bump your memory up to 512mb. I suspect that will make a big >difference in perceived speed. > >Cheers, > >C > Thanks for the reply. Yes, you are exactly right. My notebook has a slow video hardware(8MB). Unfortunately, I cannot upgrade memory up to 512MB, because 256MB is the maximum capacity. I have also found an article that MS is making a new OS for old computers, so I just simply thought I would like to have a mini-centOS. http://news.com.com/2100-1016_3-5705456.html Cheers, Joe __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp

5 4

Re: [CentOS] About strongs passwords!
by israel.garcia＠cimex.com.cu 13 May '05

13 May '05

Message: 5 Date: Thu, 12 May 2005 08:41:20 -0400 From: Matt Hyclak <hyclak(a)math.ohiou.edu> Subject: Re: [CentOS] About strongs passwords! To: centos(a)centos.org Message-ID: <20050512124120.GB5989(a)math.ohiou.edu> Content-Type: text/plain; charset="us-ascii" On Thu, May 12, 2005 at 08:35:03AM -0500, israel.garcia(a)cimex.com.cu enlightened us: > List, It's amazing the soon the messages on this list are answered, I am > glad and I want to thank you all for that... > > Here is my question, I have a DataBase CentOS server working with about > 150 users connected via ssh, so I want to set up for all users strongs > passwords, I mean, 8 or more caracters, with ,.;* , ect....... Is there > some option, bash command which do that? > Great, but: 1. My users have to work on the shell because, they run a C++ scritp to work in tha database.. 2. So I want to force my users to pick a strong password.. Is there some command, tool to do this? Regards, Israel The mkpasswd command included in the expect RPM can generate them for you. A little shell scripting will change the passwords for the users. Matt

2 1

When .. isnt the same? (not a problem
by Ulrik S. Kofod 13 May '05

13 May '05

I dont understand why ".." isnt working the same way for "ls" and "cd" when inside a symbolic link. The reason I ask is that I made a link to a directory with some scripts that saves output in "../output.txt" and I could not find the output until I found that ".." isnt the directory you see when you do a $pwd. I solved the problem by making a directory and then make a link to each script in there. I would just like to know: 1) if there is a good reason to this behaviour. 2) if there is a rule, so you know when ".." is level up from $ pwd and when it is one level up from the link target. 3) if there is an alternativ way to point to the parent directory. Personally I can't see why you would ever need ".." to be one level up from the link target. Example: $ ln -s /home link_to_home; cd link_to_home $ ls .. bin dev home lib misc $ cd ..;ls link_to_home Have a nice weekend Ulrik -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.

2 1

RE: [CentOS] When ".." isn't the same? (not a problem
by Marc Powell 13 May '05

13 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Maciej Zenczykowski > Sent: Friday, May 13, 2005 9:19 AM > To: CentOS mailing list > Subject: RE: [CentOS] When ".." isn't the same? (not a problem > > > I believe I understand what you're describing and it's been a long time > > since I've had this 'issue' but if I remember correctly, it's a function > > of your shell, which I believe is going to be bash. It tries to be > > intelligent about its symlink handling. It remembers the cd path you > > used to get to that symlink and 'cd ..' sends you back the same way you > > got in. It basically treats symlinks as real directories, not pointers. > > This can be very useful but it can also be annoying. I'll bet if you use > > tcsh, which uses a more literal interpretation of the file-structure, it > > would work as you expect. I wasn't ever interested in it enough to see > > if it could be disabled in bash. > > I believe the proper option is -P as in "set -P" in bash to disable this > feature (IMHO very useful). Indeed -- -P If set, the shell does not follow symbolic links when executing commands such as cd that change the current working directory. It uses the physical directory structure instead. By default, bash follows the logical chain of directories when performing commands which change the current directory. -- Marc

1 0

Apache config for Squirrelmail?
by James B. Byrne 13 May '05

13 May '05

This is my corrected configuration file for squirrelmail over ssl if anyone is interested: # squirrelmail.conf 2005 May 13 James B. Byrne JBB8 # # SquirrelMail is a webmail package written in PHP. # This configuration file forces users to connect via SSL # # If the incoming request is already https:// then this # file will only be processed if the directive: # # Include /etc/httpd/conf.d/squirrelmail.conf # # is appended to ssl.conf for the default server or added # to the virtual host configuration file of the virtual # host used to process webmail. Note that ssl requires # IP addressed virtual hosts to work and that the necessary # Listen directives must be placed in the appropriate # configuration files as well. # Alias /webmail /usr/share/squirrelmail <Directory /usr/share/squirrelmail> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory> RewriteEngine on RewriteLog "/var/log/httpd/rewrite_log" RewriteLogLevel 0 # AIDE-MEMOIRE # Arguments $1, $2 etc. refer to () matches in the # CURRENT RewriteRule line. # Arguments %1, %2 etc. refer to () matches in the # LAST matched RewriteCond. # Do not process established ssl squirrelmail sessions RewriteCond %{HTTPS} on RewriteCond %{REQUEST_URI} ^/webmail(/?|/.*)$ RewriteRule (^.*$) - [L,R] # Rewrite short form URLs whether SSL or not for forms # webmail.anything.dom and www.webmail.anything.dom RewriteCond %{HTTP_HOST} ^(www\.)?(webmail\.)(..+\.)(..+)$ [NC] RewriteCond %{REQUEST_URI} !^/webmail/ RewriteRule (^.*$) https://webmail.%3%4/webmail/ [L,R] # Force SSL otherwise RewriteCond %{HTTPS} off RewriteCond %{REQUEST_URI} ^/webmail(/?|/.*)$ RewriteCond %{HTTP_HOST} ^(.*\.)?(..+\.)(..+)$ [NC] RewriteRule (^.*$) https://webmail.%2%3/webmail/ [L,R] #EOF -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

RE: [CentOS] When ".." isn't the same? (not a problem
by Marc Powell 13 May '05

13 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Ulrik S. Kofod > Sent: Friday, May 13, 2005 2:25 AM > To: centos(a)centos.org > Subject: [CentOS] When ".." isn't the same? (not a problem > > I don't understand why ".." isn't working the same way for "ls" and "cd" > when inside > a symbolic link. The reason I ask is that I made a link to a directory > with some > scripts that saves output in "../output.txt" and I could not find the > output until I > found that ".." isn't the directory you see when you do a $pwd. I solved > the problem > by making a directory and then make a link to each script in there. > > I would just like to know: > 1) if there is a good reason to this behaviour. > 2) if there is a rule, so you know when ".." is level up from $ pwd and > when it is > one level up from the link target. > 3) if there is an alternativ way to point to the parent directory. > I believe I understand what you're describing and it's been a long time since I've had this 'issue' but if I remember correctly, it's a function of your shell, which I believe is going to be bash. It tries to be intelligent about its symlink handling. It remembers the cd path you used to get to that symlink and 'cd ..' sends you back the same way you got in. It basically treats symlinks as real directories, not pointers. This can be very useful but it can also be annoying. I'll bet if you use tcsh, which uses a more literal interpretation of the file-structure, it would work as you expect. I wasn't ever interested in it enough to see if it could be disabled in bash. -- Marc

2 1

Re: Mini-centOS -- static libraries, XFCE
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

kenkensmile(a)netscape.net wrote: > However, centOS is a bit heavy to run on my notebook (P III 1G, 256MB > RAM). I need gnome, firefox, openoffice, realplayer, gaim, acrobat and > thunderbird on my notebook, but if I install all of them (plus base- > system), my notebook becomes very slow. I wish I could have a lighter > version of centOS for notebooks and old desktops. CentOS isn't the issue, but your application selection. In fact, I have a 4 year-old Toshiba Satellitte 2805-S402 with a P3-850MHz, 256MB of RAM that runs Fedora Core 3 just fine -- with _full_ GNOME. OpenOffice 1.x, Acrobat and RealPlayer have their own, statically-linked widget-sets. I'm sure that's massively bloating the memory footprint. Consider switching to OpenOffice 2.0 [betas] (natively GTK+ now I believe?), HelixPlayer (GTK+ based) with the RealPlayer libraries added (HelixPlayer is from Real, and the new RealPlayer is Helix+non-free libs). As far as Acrobat 7, I'm not sure, but I think it's still statically linked Motif. But that leaves only one application that is not native. I don't leave Acrobat running, which really saves me. As far as GNOME, you do _not_ need to run GNOME session with nautilus and metacity (GNOME 2.x file/window) to get full GNOME compatibility. Run XFCE session with xffm and xfwm (XFCE file/window) and you'll see your footprint go way down. Shortly after Fedora Core 2 (what I call "RHCL4.0") was introduced with XFCE as a new, 3rd session/file/window standard option, which RHEL4 inherited its selection, I remember Alan Cox boasting he was running it on a WinChip2 225MHz with only 48MB of RAM. XFCE is GTK+ based, but much, much lighter than a full GNOME environment, while being 100% GNOME compatible at the same time. Johnny Hughes wrote: >It won't get much faster if you choose those products :) As I mentioned, OpenOffice 2.0 and the new HelixPlayer are far more "native" in their libraries. OpenOffice 2.0 is in beta and HelixPlayer should (?) be included in FC3/RHEL4, and it's simply a matter of adding the non-free libraries which turns it into RealPlayer. I have to give Real a "thank you" for doing everything they could to make their offering to the community. >There is XFCE-4.2 that you could install instead of GNOME or KDE Well, you typically want to install XFCE _along_with_ GNOME, so it can use GNOME components when necessary. But just have the user (as well as system for new users) default to XFCE. XFCE takes some getting used to, but it's definitely worth it for older systems. >If you want to change permanently ... do: >switchdesk XFCE That's the 1 command I make sure I let _everyone_ know when they are installing FC/RHEL on any new system and memory is going to be limited. I really tire of the "Red Hat is bloated" comments, especially as of FC2+. Yes, you _do_ need a i686 class (PPro, K6, M2), but that's more to do NPTL and other details than "bloat." You can make Fedora-based distros as "lean" or as "bloated" as you want. And it's only going to get better in the future with more Fedora development and a YUM-integrated installer. > You can get a minimum install by doing a minimal install from > anaconda ... Yet another excellent recommendation that I see people forget about. 600MB of everything you should need to get using the system. In actuality, there is also a really, really "lean" 90MB install that you can do from any FC2+ distro, but not from Anaconda. > then doing: > yum groupinstall XFCE-4.2 "X Window System" "Office/Productivity" > then install the individual things you want via yum... > I'll do that on a test box and tell you how much space it is :) With that said, I've seen no less than 5 YUM GUIs. What does everyone like? -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

CentOS-announce Digest, Vol 3, Issue 6
by centos-announce-request＠centos.org 13 May '05

13 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:412-01: Moderate CentOS 2 i386 openmotif security update (John Newbigin) 2. CEBA-2005:428 BUG fix CentOS 3 ia64 bonobo-activation - bug fix update (Pasi Pirhonen) 3. CEBA-2005:428 BUG fix Centos 3 s390(x) bonobo-activation - bug fix update (Pasi Pirhonen) 4. CEBA-2005:428 BUG fix CentOS 3 i386 bonobo-activation - bug fix update (Tru Huynh) 5. CEBA-2005:428 BUG fix CentOS 3 x86_64 bonobo-activation - bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 13 May 2005 09:58:58 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2005:412-01: Moderate CentOS 2 i386 openmotif security update To: centos-announce(a)centos.org Message-ID: <4283EDC2.9070508(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:412-01 Moderate: openmotif security update Files available: openmotif-2.1.30-13.21AS.5.i386.rpm openmotif-devel-2.1.30-13.21AS.5.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Fri, 13 May 2005 06:23:26 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CEBA-2005:428 BUG fix CentOS 3 ia64 bonobo-activation - bug fix update To: centos-announce(a)centos.org Message-ID: <20050513032326.GO13577(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CEBA-2005:428 https://rhn.redhat.com/errata/RHBA-2005-428.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/bonobo-activation-2.2.2-1.2E.ia64.rpm updates/ia64/RPMS/bonobo-activation-devel-2.2.2-1.2E.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

DNS master slave update issue
by James B. Byrne 13 May '05

13 May '05

I have a situation where the slave nameservers for a zone are being notified by the master that a change has occurred but the slaves are not requesting a zone file transfer in consequence. Is there some special flag or directive that I must set somewhere in order for this activity to be automatic upon receipt of such notices? All systems involved are running DNS 9.2.4. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

4 3

Has anybody managed to get native IPSec working?
by Aleksandar Milivojevic 13 May '05

13 May '05

I've just wrote a lenghty email on Fedora ML as reply to Phillip who seems to be in the same trouble as myself... Found that while searching all mailing list archives and bugzillas I could think off (not really successfully, many people with same problems, no answers other than "works for me" -- glad to hear it works for somebody else, but it would be nice if he/she was a bit more elaborate why it "works for me"). I'd really like to get IPSec VPN working. I know about OpenVPN, and I know it works very well, and all that. But being userland application based on SSL, it works only between Linux and Windows machines. While it would do as temporary solution for short period of time, I might need something that has possiblity to interoperate with things such as Cisco routers and/or dedicated VPN boxes too, if need for it arises in the future (and I see it comming, since I do have some Cisco routers around, and some dedicated VPN boxes, all capable of IPSec). So, OpenVPN woudn't be a good way to go (maybe as temporary solution, until I'm able to get IPSec stuff working). Anyhow, the machines in question are CentOS 4.0 with all updates installed. And since what I actually use is labeled CentOS, thought about asking here also... It seems something is broken in IPSec implementation. Either as distributed by RedHat (and therefore present in CentOS), or maybe in the upstream kernel or userland tools. By searching the archives of various mailing lists, I found many people having problems with it. I'm attempting to setup IPSec (host2host for now, VPN when I'm done with simpler host2host setup) as I write this. Using native 2.6 kernel implementation, between two fully updated CentOS 4.0 boxes. I found this bug report that affects VPN configuration, not really relevant to my case (host 2 host). I've applied the patches since configuring VPN is going to be my next step anyhow: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=146169 There are two proposed patches for ifup-ipsec and ifdown-ipsec scripts that will go into RHEL3 U6 and RHEL4 U2. Probably Fedora Core has the same issues. Looking at log files and monitoring the network with tcpdump (when doing "ping host-b" from host-a), this seems to be happening. The first packet from host-a doesn't fly anywhere, as expected. Subsequent packets are sent, but no response is ever received from host-b. Pinging from host-b doesn't work at all (no packet leaving host-b, ever). Sumarized: - host-a attempts to negotiate automatic keying with host-b (success) - sends encrypted ICMP echo packet to host-b - host-b attempts to negotiate automatic keying with host-a (looks like success) - host-b repeats previous step indefinetly and never sends back encrypted ICMP echo-reply packet to host-a Looking at the output of "setkey -D" on both hosts, the key tables are huge after some time. Something doesn't look righ, and I can't pinpoint down what's wrong. It looks like new pair of keys is generate each time host-b is supposed to send packet to host-a. The /etc/sysconfig/network-scripts/ifcfg-IPSecToHostB on host-a looks something like this: DST=192.168.1.100 TYPE=IPSEC ONBOOT=no IKE_METHOD=X509 IKE_CERTFILE=/etc/racoon/certs/host-a IKE_PEER_CERTFILE=/etc/racoon/certs/host-b The /etc/sysconfig/network-scripts/ifcfg-IPSecToHostA on host-b looks similar (DST and IKE_*CERTFILE pointing the other way). Keys and certificates for host-a are stored in host-a.private (no passphrase, so that racoon can read the key) and host-a.public and likewise for host-b, just the way ifup-ipsec script expects them to be. After doing "ifup IPSecToHostB" on host-a, and "ifup IPSecToHostA" on host-b, the generated racoon configuration looks good (long certificate_type line might get wrapped around by my mail client, but it is a single line in the configuration file). This is store in /etc/racoon/192.168.1.100.conf, which is included from racoon.conf. remote 192.168.1.100 { exchange_mode aggressive, main; my_identifier asn1dn; peers_identifier asn1dn; certificate_type x509 "/etc/racoon/certs/host-a.public" "/etc/racoon/certs/host-a.private"; peers_certfile "/etc/racoon/certs/host-b.public"; proposal { encryption_algorithm 3des; hash_algorithm sha1; authentication_method rsasig; dh_group 2; } } The racoon.conf file looks like this (I made no changes to it, as installed by ipsec-tools, include statement added by ifup-ipsec script): # Racoon IKE daemon configuration file. # See 'man racoon.conf' for a description of the format and entries. path include "/etc/racoon"; path pre_shared_key "/etc/racoon/psk.txt"; path certificate "/etc/racoon/certs"; sainfo anonymous { pfs_group 2; lifetime time 1 hour ; encryption_algorithm 3des, blowfish 448, rijndael ; authentication_algorithm hmac_sha1, hmac_md5 ; compression_algorithm deflate ; } include "/etc/racoon/192.168.120.165.conf"; Configuration on host-b looks similar, referencing back to host-a. When I ping host-b, the first packet is dropped, as expected (while Racoon does its job with automatic keying). I've included excerpt from /var/log/message from both host-a and host-b as attachments (messages-host-*.txt), as well as output of "tcpdump host-b" that was running on host-a (tcpdump-host-a.txt). I've put them as attachments to avoid my mail client making them unreadable by wrapping around long lines. All in all, either I'm missing something really obvious, or something is really broken as distributed in Fedora/RHEL (and clones)... -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 May 12 10:11:54 host-a kernel: NET: Registered protocol family 15 May 12 10:11:54 host-a racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) May 12 10:11:54 host-a racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) May 12 10:11:55 host-a racoon: INFO: 192.168.0.100[500] used as isakmp port (fd=8) May 12 10:11:55 host-a racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=9) May 12 10:12:32 host-a racoon: INFO: IPsec-SA request for 192.168.1.100 queued due to no phase1 found. May 12 10:12:32 host-a racoon: INFO: initiate new phase 1 negotiation: 192.168.0.100[500]<=>192.168.1.100[500] May 12 10:12:32 host-a racoon: INFO: begin Aggressive mode. May 12 10:12:32 host-a racoon: INFO: ISAKMP-SA established 192.168.0.100[500]-192.168.1.100[500] spi:b962c618a3d1137c:d99254c172eb5de5 May 12 10:12:33 host-a racoon: INFO: initiate new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=165105177(0x9d74e19) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=65841791(0x3ecaa7f) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=197556428(0xbc678cc) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=227305975(0xd8c69f7) May 12 10:12:59 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=80675908(0x4cf0444) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=198278184(0xbd17c28) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=142149191(0x8790647) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=220511737(0xd24bdf9) May 12 10:13:00 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=236322388(0xe15fe54) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=23039671(0x15f8eb7) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=168473301(0xa0ab2d5) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=34968109(0x215922d) May 12 10:13:01 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=129055629(0x7b13b8d) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=97213500(0x5cb5c3c) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=12584766(0xc0073e) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=113731845(0x6c76905) May 12 10:12:02 host-b kernel: NET: Registered protocol family 15 May 12 10:12:03 host-b racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) May 12 10:12:03 host-b racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) May 12 10:12:03 host-b racoon: INFO: 192.168.1.100[500] used as isakmp port (fd=8) May 12 10:12:03 host-b racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=9) May 12 10:12:31 host-b racoon: INFO: respond new phase 1 negotiation: 192.168.1.100[500]<=>192.168.0.100[500] May 12 10:12:31 host-b racoon: INFO: begin Aggressive mode. May 12 10:12:31 host-b racoon: INFO: ISAKMP-SA established 192.168.1.100[500]-192.168.0.100[500] spi:b962c618a3d1137c:d99254c172eb5de5 May 12 10:12:32 host-b racoon: INFO: respond new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=197556428(0xbc678cc) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=227305975(0xd8c69f7) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=165105177(0x9d74e19) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=65841791(0x3ecaa7f) May 12 10:12:58 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=142149191(0x8790647) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=220511737(0xd24bdf9) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=80675908(0x4cf0444) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=198278184(0xbd17c28) May 12 10:12:59 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=168473301(0xa0ab2d5) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=34968109(0x215922d) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=236322388(0xe15fe54) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=23039671(0x15f8eb7) May 12 10:13:00 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=12584766(0xc0073e) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=113731845(0x6c76905) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=129055629(0x7b13b8d) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=97213500(0x5cb5c3c) 10:12:32.116735 IP host-a.isakmp > host-b.isakmp: isakmp: phase 1 I agg 10:12:32.266347 IP host-b.isakmp > host-a.isakmp: isakmp: phase 1 R agg 10:12:32.266374 IP host-b > host-a: udp 10:12:32.370155 IP host-a.isakmp > host-b.isakmp: isakmp: phase 1 I agg 10:12:32.370228 IP host-a > host-b: udp 10:12:32.370944 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I inf[E] 10:12:32.389413 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R inf[E] 10:12:33.411478 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:33.435885 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:12:33.436808 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:59.369421 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x1): ESP(spi=0x0d8c69f7,seq=0x1) 10:12:59.393050 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:12:59.416746 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:59.418339 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:00.369018 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x2): ESP(spi=0x0d8c69f7,seq=0x2) 10:13:00.392529 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:00.413340 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:13:00.414949 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:01.369325 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x3): ESP(spi=0x0d8c69f7,seq=0x3) 10:13:01.392868 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:01.415756 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:13:01.417302 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 11:00:33.407722 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 11:00:33.432074 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 11:00:33.433031 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] host-a# setkey -D 192.168.1.100 192.168.0.100 esp mode=transport spi=97213500(0x05cb5c3c) reqid=0(0x00000000) E: 3des-cbc 985da9c3 28e552dc c477cdce 66512651 13afbca9 a1984bcf A: hmac-sha1 71458a89 4717fcf1 781c4588 930e9b5f 98f3376a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:02 2005 diff: 241(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=15 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=129055629(0x07b13b8d) reqid=0(0x00000000) A: hmac-sha1 7dba1ffc aedf1719 8fb451c7 ee81826a 67b1be0a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:02 2005 diff: 241(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=14 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=23039671(0x015f8eb7) reqid=0(0x00000000) E: 3des-cbc dc20f03c 9c483a84 f4b28e0e 42def71a e88720f1 9c0ac34f A: hmac-sha1 64caede6 fda16b7d 0a94c78c a0da465d 72421e78 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:03 2005 diff: 243(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=13 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=236322388(0x0e15fe54) reqid=0(0x00000000) A: hmac-sha1 2c01e096 86e02e30 59d16c86 3adcd917 d94a6bba seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:03 2005 diff: 243(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=12 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=198278184(0x0bd17c28) reqid=0(0x00000000) E: 3des-cbc b6a82412 4263eca7 276e33a7 2c170e4c 36391465 2e808e08 A: hmac-sha1 3eae5cc8 83896894 53ccb18e bfa23ba0 d4c8fdb8 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:03 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=11 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=80675908(0x04cf0444) reqid=0(0x00000000) A: hmac-sha1 6dda1c62 afb2e99e d55e320e 7245fdf9 df1a8c61 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:03 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=10 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=65841791(0x03ecaa7f) reqid=0(0x00000000) E: 3des-cbc 899e241e db481177 88e14620 3fc0eaad dbc3d769 6d10c818 A: hmac-sha1 150afe5b bbd82d7d fb9917cc 28891bb5 828d5315 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:03 2005 diff: 270(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=9 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=165105177(0x09d74e19) reqid=0(0x00000000) A: hmac-sha1 ce7cc6b4 86b9dfab 67928a3a 71d1b074 d2703603 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:03 2005 diff: 270(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=8 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=113731845(0x06c76905) reqid=0(0x00000000) E: 3des-cbc 38b74d9c 71b443d6 23f383db b63f7c19 ef6b506f adf34372 A: hmac-sha1 34884873 8e20a3b3 5dd9a80a 07b7597e 6d578b8b seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:03 2005 diff: 242(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=7 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=12584766(0x00c0073e) reqid=0(0x00000000) A: hmac-sha1 617f44e0 f22ab543 9728e3cd 3739d7b7 11e73e02 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:03 2005 diff: 242(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=6 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=34968109(0x0215922d) reqid=0(0x00000000) E: 3des-cbc 5ed41af5 e628d951 6ca215e2 3b82e59f 86e09e5b b4a156bf A: hmac-sha1 2aa99103 66c4332c b3b15a5c 032b1b69 4d23b730 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:04 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=5 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=168473301(0x0a0ab2d5) reqid=0(0x00000000) A: hmac-sha1 dc9ebbf3 c3e56d7c 0ee1a666 389952f0 86b4ac91 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:04 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=4 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=220511737(0x0d24bdf9) reqid=0(0x00000000) E: 3des-cbc cb79158c 491dad95 6641aea1 efebd408 72499132 caeb2692 A: hmac-sha1 5b5b2a54 a40b8b84 3899e885 2f2bfd0a dbbe71a0 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:04 2005 diff: 245(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=142149191(0x08790647) reqid=0(0x00000000) A: hmac-sha1 4ed8c044 b86f1911 53894bee 2260bd8a 0fb04d51 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:04 2005 diff: 245(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=227305975(0x0d8c69f7) reqid=0(0x00000000) E: 3des-cbc 562387fe f3e94364 36132d0c 9ab1380d 252026c0 3644312a A: hmac-sha1 3c358c51 6aa4cec0 dca37231 28398fec c1838efa seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:04 2005 diff: 271(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:59 2005 hard: 0(s) soft: 0(s) current: 360(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=1 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=197556428(0x0bc678cc) reqid=0(0x00000000) A: hmac-sha1 144d8dca 0554524c 99eb29e7 fd697910 f5dfadef seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:04 2005 diff: 271(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:59 2005 hard: 0(s) soft: 0(s) current: 432(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=0 pid=4067 refcnt=0 host-b# setkey -D 192.168.1.100 192.168.0.100 esp mode=transport spi=97213500(0x05cb5c3c) reqid=0(0x00000000) E: 3des-cbc 985da9c3 28e552dc c477cdce 66512651 13afbca9 a1984bcf A: hmac-sha1 71458a89 4717fcf1 781c4588 930e9b5f 98f3376a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=11 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=23039671(0x015f8eb7) reqid=0(0x00000000) E: 3des-cbc dc20f03c 9c483a84 f4b28e0e 42def71a e88720f1 9c0ac34f A: hmac-sha1 64caede6 fda16b7d 0a94c78c a0da465d 72421e78 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=10 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=198278184(0x0bd17c28) reqid=0(0x00000000) E: 3des-cbc b6a82412 4263eca7 276e33a7 2c170e4c 36391465 2e808e08 A: hmac-sha1 3eae5cc8 83896894 53ccb18e bfa23ba0 d4c8fdb8 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=9 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=65841791(0x03ecaa7f) reqid=0(0x00000000) E: 3des-cbc 899e241e db481177 88e14620 3fc0eaad dbc3d769 6d10c818 A: hmac-sha1 150afe5b bbd82d7d fb9917cc 28891bb5 828d5315 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=8 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=113731845(0x06c76905) reqid=0(0x00000000) E: 3des-cbc 38b74d9c 71b443d6 23f383db b63f7c19 ef6b506f adf34372 A: hmac-sha1 34884873 8e20a3b3 5dd9a80a 07b7597e 6d578b8b seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=7 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=12584766(0x00c0073e) reqid=0(0x00000000) A: hmac-sha1 617f44e0 f22ab543 9728e3cd 3739d7b7 11e73e02 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=6 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=34968109(0x0215922d) reqid=0(0x00000000) E: 3des-cbc 5ed41af5 e628d951 6ca215e2 3b82e59f 86e09e5b b4a156bf A: hmac-sha1 2aa99103 66c4332c b3b15a5c 032b1b69 4d23b730 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=5 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=168473301(0x0a0ab2d5) reqid=0(0x00000000) A: hmac-sha1 dc9ebbf3 c3e56d7c 0ee1a666 389952f0 86b4ac91 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=4 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=220511737(0x0d24bdf9) reqid=0(0x00000000) E: 3des-cbc cb79158c 491dad95 6641aea1 efebd408 72499132 caeb2692 A: hmac-sha1 5b5b2a54 a40b8b84 3899e885 2f2bfd0a dbbe71a0 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=142149191(0x08790647) reqid=0(0x00000000) A: hmac-sha1 4ed8c044 b86f1911 53894bee 2260bd8a 0fb04d51 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=227305975(0x0d8c69f7) reqid=0(0x00000000) E: 3des-cbc 562387fe f3e94364 36132d0c 9ab1380d 252026c0 3644312a A: hmac-sha1 3c358c51 6aa4cec0 dca37231 28398fec c1838efa seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:58 2005 hard: 0(s) soft: 0(s) current: 192(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=1 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=197556428(0x0bc678cc) reqid=0(0x00000000) A: hmac-sha1 144d8dca 0554524c 99eb29e7 fd697910 f5dfadef seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:58 2005 hard: 0(s) soft: 0(s) current: 300(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=0 pid=2730 refcnt=0

2 1

CentOS Live?
by Dominik Składanowski 13 May '05

13 May '05

Hello list. I've just read this news (http://distrowatch.com/?newsid=02638) - in my opinion very good idea. What do you think? Regards.

8 12

Re: Hardware RAID Controller -- Risers and 66+MHz ...
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

From: Lee W <centos-list(a)unassemble.co.uk> > Shouldn't be a problem as it's probably going in a 1U Rack case > with a Riser/extender card. Be sure to hit the 3Ware site to read about _incompatible_ risers! At 66+MHz PCI/PCI-X signaling, many cards/risers have issues. Many are only designed for 33MHz. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

RE: [CentOS] About strongs passwords!
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

israel.garcia(a)cimex.com.cu wrote: > Here is my question, I have a DataBase CentOS server working with > about 150 users connected via ssh, so I want to set up for all users > strongs passwords ... cut ... In addition to the password considerations, I recommend the following. 1) Disable SSH v1 access 2) Disable all authentication, including password authentication, except public key authentication. 3) Generate all public keys with passphrases. Alternatively, if you have either a UNIX Kerberos realm, or you are already synchronizing UNIX and ADS authentication, consider Kerberos authentication instead (e.g., one-way ADS trust, if you are are already using ADS for authentication of UNIX). Otherwise, public key would be far better than password authentication. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

WIFI
by cents＠samson-solutions.ca 12 May '05

12 May '05

Does anyone know of an easy to install/use WIFI PCMCIA card for Linux. I am currently running Cent OS 4.0 on my laptop and I have a D-Link DWL-G650 Ver B which will run off of the madwifi Beta drivers. Now I know I can get this to work but I would feel a little better using software that is in production development. Any suggestions and input would be helpful on my new card purchase. The card should be able to run 802.11G/B and be compatible with most of the airsnort type tools. This will be used for wireless troubleshooting, site surveys etc. Thanks Steve ---------------------------------------------------------------------- This mail sent through Horde-Toaster (http://qmailtoaster.clikka.com/)

2 1

Upgrade from yum
by israel.garcia＠cimex.com.cu 12 May '05

12 May '05

Can I upgrade my CentOS using yum? Regards, israel

4 3

Hardware RAID Controller
by Lee W 12 May '05

12 May '05

Hi Everyone, Has anyone had any experience of using the Promise FastTrak SX4000 or SuperTrak SX6000 IDE RAID Controllers under Centos (if it matters I'm using version 4). I've seen it listed on linuxcompatible.org as working but would prefer to find out any first-hand experince before I buy. I'm looking to build a new mini server based on Mini-ITX and have found a great 1U case that support upto 4 IDE drives. It would be good to muck around with hardware RAID. If not, can anyone suggest another make of RAID Controller that will support upto 4 IDE RAIDS (preferably with support for RAID 5). And is also available in the UK. Thanks in advance. Regards Lee

11 20

centos 3.5 ?
by Ceg Ryan 12 May '05

12 May '05

Hi all, I see centos 3.5Beta in the beta.centos.org. Is this the next release of version 3 ? Strangely, 3.4 is not the final release of version 3 ? Thx Ceg Ryan

7 16

RE: [CentOS] About strongs passwords!
by Marc Powell 12 May '05

12 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of israel.garcia(a)cimex.com.cu > Sent: Thursday, May 12, 2005 8:35 AM > To: centos(a)centos.org > Subject: [CentOS] About strongs passwords! > > List, It's amazing the soon the messages on this list are answered, I am > glad and I want to thank you all for that... > > Here is my question, I have a DataBase CentOS server working with about > 150 users connected via ssh, so I want to set up for all users strongs > passwords, I mean, 8 or more caracters, with ,.;* , ect....... Is there > some option, bash command which do that? I use apg. It's very flexible allowing you to create secure, yet pronounceable passwords that are easy to remember, as well as completely random passwords using special symbols and mixed case. http://www.adel.nursat.kz/apg/ -- Marc

1 0

Unsupported Kernel for X86_64 and i386
by Johnny Hughes 12 May '05

12 May '05

All, There have been many requests for added kernel features that the upstream provider left out of the standard kernel. (ReiserFS, Video4Linux, Firewire support, XFS, NTFS, JFS, etc.). We want the main release CDs to contain a standard kernel for compatibility and stability reasons. CentOS is created as a clone, and it needs to be as close as possible to the upstream distro. That being said, the 2.6.9 kernel has lots of features that are not turned on in the default kernel. Until now the answer has been ... if you want that, you must make recompile the kernel yourself. Well ... now there is another option for x86_64 and i386. I have created an unsupported kernel for the CentOS-4 i386 and x86_64 distros. It is in the CentOS-Plus repository and is the latest released CentOS-4 Kernel (currently 2.6.9-5.0.5.EL), with the configuration files modified to turn on optional modules. It is called: kernel-2.6.9-5.0.5.106.unsupported Turned on (as kernel modules) are the following: NTFS XFS JFS ReiserFS UFS (FreeBSD default file system ... Read Only) BeOS (Read Only) Video4Linux and all supported cards (including Video, Audio, Radio and DVB) all Video Cards all Alsa Sound Cards Support for AppleTalk and DECNET ----------------------- I am running this kernel on 5 machines for testing and have had no problems ... but it is NOT officially supported by CentOS {even less than the other stuff :)} You should evaluate whether you want to use this kernel ... and you should test it appropriately prior to putting it on any important machines :) We are also working on a Single CD version of CentOS-4 (similar to the CentOS-3.4 Server ISO). This CD will have as much stuff as we can fit on a single CD that can be used to set up a server (no X though). All other programs will be available via the standard CentOS repositories using the "yum groupinstall" feature. It is my plan to take that CentOS-4 Single Server Edition CD as a template and make one (called Single Server unsupported) that will boot with this kernel (and contain XFS tools, JFS tools, ReiserFS tools) so that people who know how can install reisferfs, XFS, or JFS partitions via the command line at install time. If you are going to use this kernel, you need to enable the CentOS-Plus repo from your chosen install method ... for yum, you can do it via the command line: yum --enablerepo=centosplus install kernel The tools for XFS, JFS, and ReiserFS are also now in the CentOS-Plus repository. This should make CentOS a more robust desktop solution :) Some notes: I will update this kernel after normal kernel updates have been completed, it may be a day or 2 later. So if you are using features of this kernel (like ReiserFS, XFS, etc.) then you may want to turn off auto kernel updates, as a new version of the main kernel will be installed when available. You can do this in Up2date, yum and apt inside the config files. You can also get it via http from your favorite CentOS mirror in the CentOS-Plus repository or from here (i386): http://mirror.centos.org/centos/4/centosplus/i386/RPMS/ or here (x86_64): http://mirror.centos.org/centos/4/centosplus/x86_64/RPMS/ Source RPM is here: http://mirror.centos.org/centos/4/centosplus/SRPMS/ Enjoy, Johnny Hughes

9 8

RE: [CentOS] Hewlett Packard Server support packs
by Mark A. Lewis 12 May '05

12 May '05

I recently spent 2 days fighting with a bug in CentOS 4 relating to the PSP for RHEL4. I am still putting the details together, but there is definitely a bug that impacts the Qlogic 2214 HBA driver under CentOS 4, but not RHEL 4. That being said, I was able to install PSPs on a DL580 G2 under Centos 3 and 4 by changing redhat/centos-release. > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of Chris Hammond > Sent: Wednesday, May 11, 2005 12:40 PM > To: CentOS mailing list > Subject: [CentOS] Hewlett Packard Server support packs > > I am trying to install the HP PSP on a CentOS 3.4 server but > it keeps telling me, only on certain rpms mind you, that the > OS is not supported. I have made the modifications to > redhat-release which cleared up some of the initial errors I > was having but not all. Where else would the rpms be getting > the OS info from? Better yet, has anyone managed to get the > Linux PSP to install on a CentOS box? > > Thanks > Chris > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > > -- > This message has been scanned for viruses and dangerous > content by MailScanner, and is believed to be clean. > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

Software RAID on Centos-4/Proliant ML330 (FINAL)
by Nigel Kendrick 12 May '05

12 May '05

Thanks again to everyone who offered help with this - I have ended up with one drive on the integrated MegaRAID controller and one on the ITE8212 plug-in card and this works fine. Nigel

1 0

CentOS-announce Digest, Vol 3, Issue 5
by centos-announce-request＠centos.org 12 May '05

12 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:429 Critical CentOS 4 i386 gaim - security update (Karanbir Singh) 2. CESA-2005:429 Critical CentOS 3 x86_64 gaim - security update (Tru Huynh) 3. CESA-2005:429 Critical CentOS 3 i386 gaim - security update (Tru Huynh) 4. CESA-2005:417 Moderate CentOS 4 i386 tcpdump - security update (Karanbir Singh) 5. CESA-2005:421 Moderate CentOS 3 x86_64 tcpdump - security update (Tru Huynh) 6. CESA-2005:421 Moderate CentOS 3 i386 tcpdump - security update (Tru Huynh) 7. CESA=2004:412 Moderate CentOS 3 x86_64 openmotif - security update (Tru Huynh) 8. CESA=2004:412 Moderate CentOS 3 i386 openmotif - security update (Tru Huynh) 9. CESA-2005:429 Critical CentOS 4 x86_64 gaim - security update (Johnny Hughes) 10. CESA-2005:417 Moderate CentOS 4 x86_64 tcpdump - security update (Johnny Hughes) 11. CESA-2005:412 Moderate CentOS 4 i386 and x86_64 openmotif - security update (Johnny Hughes) 12. CESA-2005:417 Moderate CentOS 3 ia64 tcpdump - security update (Pasi Pirhonen) 13. CESA-2005:417 Moderate CentOS 4 ia64 tcpdump - security update (Pasi Pirhonen) 14. CESA-2005:429 Moderate CentOS 3 ia64 gaim - security update (Pasi Pirhonen) 15. CESA-2005:429 Moderate CentOS 4 ia64 gaim - security update (Pasi Pirhonen) 16. CESA-2005:417 Moderate CentOS 3 s390(x) tcpdump - security update (Pasi Pirhonen) 17. CESA-2005:412 Moderate CentOS 4 ia64 openmotif - security update (Pasi Pirhonen) 18. CESA-2005:412 Moderate CentOS 3 ia64 openmotif - security update (Pasi Pirhonen) 19. CESA-2005:432-01: Critical CentOS 2 i386 gaim security update (John Newbigin) 20. CESA-2005:429 Critical CentOS 3 s390(x) gaim - security update (Pasi Pirhonen) 21. CESA-2005:412 Moderate CentOS 3 s390(x) openmotif - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 11 May 2005 15:48:17 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2005:429 Critical CentOS 4 i386 gaim - security update To: centos-announce(a)centos.org Message-ID: <42821B31.7060202(a)centos.org> Content-Type: text/plain; charset=us-ascii -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CentOS Errata and Security Advisory CESA-2005:429 https://rhn.redhat.com/errata/RHSA-2005-429.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: gaim-1.2.1-6.el4.i386.rpm src: gaim-1.2.1-6.el4.src.rpm To get the update run : yum update gaim - -- Karanbir Singh <kbsingh(a)centos.org> Web: http://www.centos.org/ irc: #centos @ irc.freenode.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFCghsxI2ImR47onK8RAhyrAJ0eBu2KEOEtRkJMFv3XG3qcYh2niACfYA1Q TvOIKAOLI+TBJUUtJYHgBXk= =MvEG -----END PGP SIGNATURE----- ------------------------------ Message: 2 Date: Wed, 11 May 2005 16:59:00 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2005:429 Critical CentOS 3 x86_64 gaim - security update To: centos-announce(a)centos.org Message-ID: <20050511145900.GA14981(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:429 gaim security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2005-429.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/gaim-1.2.1-6.el3.x86_64.rpm source: updates/SRPMS/gaim-1.2.1-6.el3.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update gaim Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Hewlett Packard Server support packs
by Chris Hammond 12 May '05

12 May '05

I am trying to install the HP PSP on a CentOS 3.4 server but it keeps telling me, only on certain rpms mind you, that the OS is not supported. I have made the modifications to redhat-release which cleared up some of the initial errors I was having but not all. Where else would the rpms be getting the OS info from? Better yet, has anyone managed to get the Linux PSP to install on a CentOS box? Thanks Chris

4 6

RE: [CentOS] LAN based In/Out board
by Marc Powell 12 May '05

12 May '05

Did either of you see these when you were searching? http://freshmeat.net/search/?q=in+out+board&section=projects&Go.x=0&Go.y =0 -- Marc > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Ty R. McMichael > Sent: Wednesday, May 11, 2005 11:54 AM > To: CentOS mailing list > Subject: Re: [CentOS] LAN based In/Out board > > Greg, > > > I apologize for any ambiguity; your description is exactly what I am > looking for. Thanks > > Ty > > > On Tue, 2005-05-10 at 22:19 -0600, Greg Knaddison wrote: > > On 5/10/05, Ty R. McMichael <ty_mcmichael(a)po.cfec.state.ak.us> wrote: > > > Can anyone recommend an electronic In/Out board for a small office (32 > > > people). Needs to run on a 3.4 CentOS server, preferably free. :) > > > > > > I'm not hung up on the technology, could be Java, Perl, PHP, etc. > > > > > Are you looking for an application to run on an intranet that would > > keep track of where the people in your office are currently located? > > So that someone could update their status as "out to lunch until 1:00" > > or "out for doctor's appointment from 2:00 to 3:30" or something like > > that? It's not clear to me from your post what you are looking for. > > > > If that _is_ what you are looking for...I don't know of it and > > couldn't find it anywhere. I'd be interested in whatever you find. > > > > Greg > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > http://lists.centos.org/mailman/listinfo/centos > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

Re: [CentOS] CentOS Live?
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

From: Johnny Hughes <mailing-lists(a)hughesjr.com> > I was looking at that :) > Question is ... does it really serve a purpose? > The purpose of the distro is to install on servers and workstations. A > live CD doesn't do that. Knoppix is very good in this market, so I > think the usefulness is limited. Especially since there are already "Fedora Live" CDs anyway. One of the reasons for RHEL is for a fixed, integrated tested package set based on but beyond that of Fedora Core. If I want to start playing around with a "customized" Fedora-based distro, then I'm just going to go with Fedora itself, instead of RHEL (or CentOS). > BUT ... one good thing it would do is allow you an easy way to see if > your hardware works without downloading the whole shebang ... which is a > positive. "Fedora Live CDs" should do the same. Just line up the kernel version. > We may look at doing this after CentOS-4.1 is done and I have some of > the automated scripts working the way I want. The more CentOS would get away from RHEL, the more I'd just do my own configuration management from Fedora Core instead. I mean, I've built equivalent APT-RPM repositories of Fedora Core by lining up the packages. The reason why I like to use CentOS is so I don't have to do my own configuration management of Fedora Core to get the same thing of RHEL. It saves me a lot of effort. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Fwd: usb 2.0 hardware problem
by Michel Daggelinckx 11 May '05

11 May '05

---------- Forwarded message ---------- From: Michel Daggelinckx <03taxi(a)gmail.com> Date: May 11, 2005 11:43 PM Subject: usb 2.0 hardware problem To: CentOS discussion and information list <centos(a)caosity.org> i just installed a trust usb 2.0 card in my dell poweredge 2400 centos 3.4 detected the card and loaded all needed kernel modules after this the systeems slowed down to almost being unuseable. also it detects plugged in devices (usb thumbrive and samsung usb dvd writer) but doesn't allow acces (to thumbdrive) or just goes into error (samsung dvd writer). any ideas

1 0

Re: [CentOS] SATA RAID on CentOS!
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: israel.garcia(a)cimex.com.cu > I want to install CentOS 4.0 on my new server (two SATA hdds, Intel 865 > mainboard), now, I want to configure a RAID 1 using this hardware..., my > question is: > 1. Setting up a RAID 1 on SATA hdds is different from a normal hdds > (PATA)? SATA channels are designed to be legacy compatible with software for legacy ATA channels, _unless_ you put them in Advanced Host Controller Interface mode. In AHCI, instead of individual I/O ports, the system presents a single device of up to 32 devices, along with some capabilities for each drive (e.g., native command queuing, NCQ). In legacy ATA mode, each drive is assigned a device. AHCI support varies in Linux right now (i.e., don't use yet!). True Hardware ATA RAID controllers provide queuing natively, since they are queuing with an on-board intelligence (microcontroller or ASIC), and not just a "dumb" interface to the drive. In essence, the "intelligence" moves from the driver to the on-board firmware, and the OS driver becomes "dumb" (and GPL as a result ;-). > 2. Is there some SATA RAID Linux Howto available? The same HOWTOs/documentation for LVM/MD applies regardless of ATA, SATA or SCSI when using software LVM and/or MD. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Hewlett Packard Server support packs
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Johnny Hughes <mailing-lists(a)hughesjr.com> > maybe /etc/issue and /etc/issue.net /etc/issue and /etc/issue.net are typically generated on Fedora-based systems in /etc/rc.d/rc.sysinit at boot-time using uname and/or /etc/*-release. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Hardware RAID Controller
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

Lee W wrote > However I've noticed that it is a 64-Bit PCI Card. Can I still use this > in a 32-Bit Slot. I think that I read something once that said it would > work but at a reduced bandwidth. Joshua Baker-LePain wrote: >Page 16 of the Installation Guide says a 32bit slot is fine. From: Peter Farrow <peter(a)farrows.org> > I use one of my 8500-8s in a 32bit slot on an MSI Dual PIII > motherboard with no problems... Two things of note: 1) 66MHz capable cards The "6" in 7506 and 8506 indicate it is 66MHz capable. The 7500 (fka 7850) and 8500 are 33MHz capable, as are all prior models. All 7000/8000 series cards are 64-bit _except_ the 7000-2 (fka 7200) and 7006-2 (66MHz, but 32-bit). 2) Multiple PCI/PCI-X busses The most important consideration beyond bandwidth is the PCI bus. I have seen far too many people stick a 3Ware card into a system that has a _single_ 32-bit@33MHz PCI bus. Back in the 1999-2001 timeframe, I made a buttload of money just coming in and ripping out i440BX and i440GX mainboards and putting in ServerWorks ServerSet IIILE/HE mainboards for Pentium II/III systems. 3-4x performance is achievable by just getting the storage and NIC on separate PCI (or PCI-X) busses. Especially at today's disk transfer rates and GbE on the same system. [ SIDE NOTE: A good GbE card with 256KB SRAM and using 9000 byte jumbo frames also helps. ] -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Re: Hardware RAID Controller -- not a "bug"
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Joshua Baker-LePain <jlb17(a)duke.edu> > I'm in the midst of testing a dual 9500-12 based system, and I've got all > sorts of results (I posted tiobench numbers for XFS and ext3 recently). Until the Escalade 9500S series matures, I've been recommending the following: 3Ware Escalade 7506/8506 for RAID-10. 3Ware Escalade 7506/8506 for RAID-5 when it is largely a read-only setup. LSI Logic MegaRAID SATA 300-8X (XScale) for RAID-5. Unless you absolutely need the maximum disk efficiency of RAID-5, or you have 99% reads (e.g., typical MySQL Internet server), then RAID-10 is often far better than RAID-5. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] SATA RAID on CentOS!
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Aleksandar Milivojevic <amilivojevic(a)pbl.ca> > I believe Intel 865 uses ICH5? If so, it is a sofware RAID emulation in > BIOS. You do not have RAID in hardware. It's just a marketing trick > that has nothing to do with reality. Exactomundo. Even AHCI is still software-driven. It is my sincerest hope that the term "FRAID" (or something else) catches on to describe this "Free RAID" / "trick BIOS" approach. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

SATA RAID on CentOS!
by israel.garcia＠cimex.com.cu 11 May '05

11 May '05

I want to install CentOS 4.0 on my new server (two SATA hdds, Intel 865 mainboard), now, I want to configure a RAID 1 using this hardware..., my question is: 1. Setting up a RAID 1 on SATA hdds is different from a normal hdds (PATA)? 2. Is there some SATA RAID Linux Howto available? Thanks in advance israel

2 1

Re: [CentOS] Software RAID on Centos 4 - new issue
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Aleksandar Milivojevic <amilivojevic(a)pbl.ca> > MegaRAID drivers (and hardware they drive) doesn't have very bright > history. When it works, it works. When it doesn't work, you are simply > out of luck. From what you wrote, seems you belong in "out of luck" > category. > BTW, shouldn't MegaRAID cards be hardware RAID? Many are, but not all. The ones that do have an Intel IOP 8030# (i960-based) or 8032#/8033# (StrongARM/XScale-based). > If you configure RAID in card's BIOS, instead of using software RAID, > does it than work correctly? The BIOS is _only_ for 16-bit Int13h (interupt 13 hexadecimal) services. I.e., boot-time and DOS (including DOS7 aka Win9x/Me in "compatibiltiy mode"). The presence of a BIOS does _not_ mean it's "hardware" RAID. In fact, that's how 98% of the "FRAID" cards work -- totally _useless_ once a 32/64-bit kernel boots. -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Yum repomd.xml error
by Alex White 11 May '05

11 May '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 List, I searched google for this error, but apparently I'm either lacking the necessary 1337 skillz, or you know I just am not gettin' a google friendly search put into it. The error is below. [prata@crane ~]# sudo yum update Setting up Update Process Setting up Repos http://apt.sw.be/redhat/el4/en/i386/dag/repodata/repomd.xml: [Errno 4] IOError: HTTP Error 304: Not Modified Trying other mirror. Cannot open/read repomd.xml file for repository: dag failure: repodata/repomd.xml from dag: [Errno 256] No more mirrors to try. Has anyone else received this error? Did I perhaps miss an announcement? I looked about the list, but nothing regarding this was apparent to me. TIA - -- Alex White prata(a)kuei-jin.org Fingerprint = 58DC 9199 CE73 74E8 B2C1 442E ACF5 92E0 E068 C46C gpg key location: http://www.kuei-jin.org/GPG-KEY-PRATA ~From the withered tree, a flower blooms --Zen Proverb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org iD8DBQFCgMlwrPWS4OBoxGwRArUIAJ9Qr6ST5/9acQD6XwQoaZJ7lI8ztwCeK4pU ukvh3E6R1POrNkAkZRejjFg= =J5+I -----END PGP SIGNATURE-----

8 15

intall problems
by rado 11 May '05

11 May '05

I have just migrated to CentOS 4 from fc3. 3 machines involved k. 2 machines w/raid 1 arrays. Installing these were the problems. 1st machine: just a reg install hda for all the sys and a big drive: hdc for all my backups. This install worked fine. the other 2 machines, w/raid 1 drives...grrrrrrrrrr first of these 2: tried to do a reg install...of course, I had to use disk druid to map out the drives etc then just my reg (everything) install. all seemed to go fine but then when it rebooted...omg!!! 1st thing I saw was a fedora screen then like little things here and there kept referring to fedora...I ended up doing the following install choosing hda drive only...did minimal install (worked fine) then install choosing hdc drive only did minimal install (worked fine) then did my reg disk druid mapping raid 1 arrays and then this install finally worked fine. 2nd machine of these 2: Followed the same procedure as the above and when it rebooted, it hung on (I think it said grub 2) :sigh: I then did the same above procedure as above and it finally took! wow...was not a nice stable experience tho! I keep thinking that it would be a good time if the install systems would do a complete zeroing of the hds, if need be, before formatting the file systems...I just used zeroing as an example but it did kinda freak me out seeing fedora stuff on a brand new CentOS 4 install! thx John Rose -- ...you ever notice the look on your neighbors face when you start talking about linux?

1 0

Kernel panic on Dell 1850
by Jason Dixon 11 May '05

11 May '05

I'm attempting to upgrade to kernel-smp-2.4.21-27.0.4.EL (x86_64) on a Dell 1850. The new kernel is panicing on reboot. When comparing against the current working kernel, I just noticed that we're currently running the "UP" kernel: [root@polaris root]# uname -srvp Linux 2.4.21-27.0.2.EL #1 SMP Wed Jan 19 11:49:43 CST 2005 x86_64 First question... why is the kernel version reporting as SMP when this is the UP kernel package? I thought it might have something to do with HT, but no, it's seeing both processors: [root@polaris root]# cat /proc/cpuinfo | grep proc processor : 0 processor : 1 processor : 2 processor : 3 Second question... has anyone else experienced problems with kernel-smp-2.4.21-27.0.4.EL on x86_64? I installed the newer kernel and it paniced on reboot. I'm offsite without console, so I'll be going in tomorrow to take a closer look. Just FYI, here is the information on each kernel we're working with: [root@polaris root]# rpm -qi kernel Name : kernel Relocations: (not relocatable) Version : 2.4.21 Vendor: CentOS Release : 27.0.2.EL Build Date: Wed 19 Jan 2005 12:56:58 PM EST Install Date: Fri 08 Apr 2005 05:44:16 AM EDT Build Host: head Group : System Environment/Kernel Source RPM: kernel-2.4.21-27.0.2.EL.src.rpm Size : 33381631 License: GPLv2 Signature : DSA/SHA1, Thu 20 Jan 2005 10:52:57 AM EST, Key ID 7049e44d025e513b Summary : The Linux kernel (the core of the Linux operating system) Description : The kernel package contains the Linux kernel (vmlinuz), the core of your CentOS operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. [root@polaris root]# rpm -qi kernel-smp Name : kernel-smp Relocations: (not relocatable) Version : 2.4.21 Vendor: CentOS-3 Release : 27.0.4.EL Build Date: Fri 22 Apr 2005 06:47:22 PM EDT Install Date: Wed 11 May 2005 10:16:23 AM EDT Build Host: tru64 Group : System Environment/Kernel Source RPM: kernel-2.4.21-27.0.4.EL.src.rpm Size : 26669758 License: GPLv2 Signature : DSA/SHA1, Fri 22 Apr 2005 07:12:58 PM EDT, Key ID 7049e44d025e513b Packager : Pasi Pirhonen <upi(a)iki.fi> - http://iki.fi/upi/ Summary : The Linux kernel compiled for SMP machines. Description : This package includes a SMP version of the Linux kernel. It is required only on machines with two or more CPUs. Install the kernel-smp package if your machine uses two or more CPUs. Thanks in advance, -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

3 10

LAN based In/Out board
by Ty R. McMichael 11 May '05

11 May '05

All, Can anyone recommend an electronic In/Out board for a small office (32 people). Needs to run on a 3.4 CentOS server, preferably free. :) I'm not hung up on the technology, could be Java, Perl, PHP, etc. Thanks in advance!

3 3

Software RAID on Centos 4 - new issue
by Nigel Kendrick 11 May '05

11 May '05

OK, I have managed to get software RAID 1 running on my wonderful Proliant server but now have two challenges: 1) Fresh after an OS install and reboot, the RAID array starts to do its stuff but straight away (as part of the boot messages) I am told that the second disk is 'not ready for command' and the system hangs as soon as resyncing starts. I think this is fixed by adding an hdparm line to turn on DMA (I was also losing ticks), but cannot check this because... 2) As part of the testing, I rebooted the system with the second drive pulled out, the whole lot then boots and I can use mdadm -a to add the second drive to the mirrored pair. The drives resync at a decent speed and the pair works fine for the duration, but when I reboot the second drive is not part of the mirrored pair unless I manually add it again. Looking at the md superblock for the second disk, I am wondering if all the attempts at setting up the RAID array have confused it as this is what I get - the last section looks wrong (??) mdadm -E /dev/hde /dev/hde: Magic : a92b4efc Version : 00.90.00 UUID : b0dcd24f:7044414a:1f0ba458:adabce9e Creation Time : Thu Sep 16 06:21:59 2004 Raid Level : raid1 Device Size : 193157440 (184.21 GiB 197.79 GB) Raid Devices : 2 Total Devices : 2 Preferred Minor : 0 Update Time : Wed May 11 09:13:50 2005 State : clean Active Devices : 1 Working Devices : 2 Failed Devices : 1 Spare Devices : 1 Checksum : 2652883e - correct Events : 0.15217 Number Major Minor RaidDevice State this 2 33 0 2 spare /dev/hde 0 0 22 3 0 active sync /dev/hdc3 1 1 0 0 1 faulty removed 2 2 33 0 2 spare /dev/hde Any suggestions on getting this pair talking properly? Thanks Nigel

3 7

Multi-homed faq or docs needed
by Michael Rock 11 May '05

11 May '05

I tried to implement a multi-homed box using this faq 4.2.1 split access http://www.tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.rpdb.multiple-links.html But it says table is invalid. Can someone tell me what the difference is in Centos? I assume the FAQ is leaving out how to add tables to the iproute files? I am trying to have eth0 and eth1 service two different subnets for apache and not act as a router. If I use redhat-network-config and set one or both with default gateways one side will not work. So I assume I need to create two routing table files? Can someone point me in the right direction or a better FAQ. thx __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

MIrrored drives won't boot after installation
by Jerry Geis 11 May '05

11 May '05

On Cent OS 4 the very last screen says REBOOT. Before click that do CTRL-ALT_F2 and get a prompt. then enter the following commands. This will allow the software raid arrays to boot. grub find /boot/grub/stage1 device (hd0) /dev/hda root (hd0,0) setup (hd0) This is easier the setting up mdXXX commands after boot. Jerry

2 1

Backing up my server...
by israel.garcia＠cimex.com.cu 11 May '05

11 May '05

Helo, I've just installed a CentOS 4.0, postgress,iptables, ect.. on a P 4 Intel using sotf RAID 1 ...and everything is fine. I bought a HP DLT 40/80G tape device for being use as tape backup to my server. My questions are: 1. What you recomended me to use as a soft backUP. (amanda, dump/restore, TAR scipts, other)? 2. How can I backUP my entire filesystem ..(I mean everything using one the above software)? 3. What software can I use to put this data into my tape device (HP DLT 40/80 G).? 4. Is there only one software which do everything I want? NOTE: I am looking for some software which makes me a quick/easy backUP and quick/easy restore... thanks in advance israel

3 2

CentOS-announce Digest, Vol 3, Issue 4
by centos-announce-request＠centos.org 11 May '05

11 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. php-5.0.4-0.iva.0.centos4.src.rpm (built for x86_64 and i386) in CentOS Plus (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 May 2005 16:41:53 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] php-5.0.4-0.iva.0.centos4.src.rpm (built for x86_64 and i386) in CentOS Plus To: centos-announce(a)centos.org Message-ID: <1115761313.3693.69.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" All, Ignacio Vazquez-Abrams has created php-5.0.4-0.iva.0.centos4.src.rpm that works with CentOS-4. After testing this version of php, we have decided to include it in CentOS-Plus for CentOS-4. It is available for i386 and x86_64. There are several files in each distro: x86_64: php-5.0.4-0.iva.0.centos4.x86_64.rpm php-devel-5.0.4-0.iva.0.centos4.x86_64.rpm php-gd-5.0.4-0.iva.0.centos4.x86_64.rpm php-imap-5.0.4-0.iva.0.centos4.x86_64.rpm php-ldap-5.0.4-0.iva.0.centos4.x86_64.rpm php-mbstring-5.0.4-0.iva.0.centos4.x86_64.rpm php-mysql-5.0.4-0.iva.0.centos4.x86_64.rpm php-ncurses-5.0.4-0.iva.0.centos4.x86_64.rpm php-odbc-5.0.4-0.iva.0.centos4.x86_64.rpm php-pear-5.0.4-0.iva.0.centos4.x86_64.rpm php-pgsql-5.0.4-0.iva.0.centos4.x86_64.rpm php-snmp-5.0.4-0.iva.0.centos4.x86_64.rpm php-soap-5.0.4-0.iva.0.centos4.x86_64.rpm php-xml-5.0.4-0.iva.0.centos4.x86_64.rpm php-xmlrpc-5.0.4-0.iva.0.centos4.x86_64.rpm i386: php-5.0.4-0.iva.0.centos4.i386.rpm php-devel-5.0.4-0.iva.0.centos4.i386.rpm php-gd-5.0.4-0.iva.0.centos4.i386.rpm php-imap-5.0.4-0.iva.0.centos4.i386.rpm php-ldap-5.0.4-0.iva.0.centos4.i386.rpm php-mbstring-5.0.4-0.iva.0.centos4.i386.rpm php-mysql-5.0.4-0.iva.0.centos4.i386.rpm php-ncurses-5.0.4-0.iva.0.centos4.i386.rpm php-odbc-5.0.4-0.iva.0.centos4.i386.rpm php-pear-5.0.4-0.iva.0.centos4.i386.rpm php-pgsql-5.0.4-0.iva.0.centos4.i386.rpm php-snmp-5.0.4-0.iva.0.centos4.i386.rpm php-soap-5.0.4-0.iva.0.centos4.i386.rpm php-xml-5.0.4-0.iva.0.centos4.i386.rpm php-xmlrpc-5.0.4-0.iva.0.centos4.i386.rpm src: php-5.0.4-0.iva.0.centos4.src.rpm You can get these via yum if you enable the CentOS-Plus repository. For a description of the CentOS Plus (and other) repositories, see this link: http://lists.centos.org/pipermail/centos/2005-May/005618.html Thank you very much Ignacio :) -- Johnny Hughes

1 0

Yum Error on CentOS 4_64 / libexpat Issues
by Ho Chaw Ming 11 May '05

11 May '05

Dear all I had an issue on CentOS 4_64 with yum that I would like some input on. When running yum, the following errors appear: Traceback (most recent call last): File "/usr/bin/yum", line 6, in ? import yummain File "/usr/share/yum-cli/yummain.py", line 23, in ? import yum File "__init__.py", line 33, in ? File "groups.py", line 3, in ? File "comps.py", line 5, in ? File "/usr/lib64/python2.3/site-packages/libxml2.py", line 1, in ? import libxml2mod ImportError: /usr/lib64/python2.3/site-packages/libxml2mod.so: undefined symbol: xmlNewDocPI I had tried downloading all the various libxslt* and libxml2* and python and python-devel rpms and running rpm -Uvh --oldpackage --install *.rpm Nothing seems to work however. Anyone with any ideas? I had a separate issue which may be linked (or not). When running /sbin/ldconfig, the folllowing message appears. ldconfig: libraries libexpat.so.0 and libexpat.so.0.4.0 in directory /usr/lib have same soname but different type. root@ <mailto:root@207-150-176-14> [/usr/lib]# ls -all libexpat* -rw-r--r-- 1 root root 432298 May 11 01:51 libexpat.a -rwxr-xr-x 1 root root 706 May 11 01:51 libexpat.la* lrwxrwxrwx 1 root root 17 May 11 02:19 libexpat.so -> libexpat.so.0.5.0* lrwxrwxrwx 1 root root 17 May 11 03:15 libexpat.so.0 -> libexpat.so.0.5.0* -rwxr-xr-x 1 root root 261635 May 11 01:51 libexpat.so.0.4.0* -rwxr-xr-x 1 root root 122048 Feb 21 20:00 libexpat.so.0.5.0* Any insight or guidance is appreciated. regards

1 0

centos 4: java crashes on amd64
by Dario Lah 11 May '05

11 May '05

Anyone experiencing problems with java on amd64? Different versions of java are crashing after few minutes. Googling around reveals that problem is probably in JIT. Disabling JIT makes it unusable (slow) but it doesn't crash. Fix anyone? Hint? Regards, Dario

1 0

Re: [CentOS] Hardware RAID Controller
by Bryan J. Smith <b.j.smith＠ieee.org> 10 May '05

10 May '05

Ahhh, thanx for the insight. I never liked their use of lackluster i960 33MHz and 66MHz parts. You're lucky if you get 60MBps out of them. -----Original Message----- From: Harald Finnï¿½s <spamcatcher(a)lantrix.no> Sent: May 10, 2005 3:55 PM To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Hardware RAID Controller centos-bounces(a)centos.org wrote on 10.05.2005 22:44:54: > Well, that's because 98% of Promise's products sold are FRAID > (Fake/Free RAID). The card I had in mind was the "real" RAID cards, i.e the SX6000. It was ok while RH8 was the standard and you didn't need to compile a new kernel (ie. you could use the Promise-supplied driver disks). They also had driver source for 2.4 which worked ok as long as you booted from another device and loaded the driver as a module. And actually, the SX6000 worked with the I2O drivers for a little while with a patch supplied by Alan Cox, but after a few kernel updates I gave up on it. I was in contact with Promise support about one year ago, and they told me that they had 2.6 drivers in beta, and that they would inform me when it became available. Needless to say, there's still no 2.6 drivers posted on their download pages. Well, enough bitchin for now... :) Regards, Harald -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Hardware RAID Controller
by Bryan J. Smith <b.j.smith＠ieee.org> 10 May '05

10 May '05

From: Harald Finnï¿½s <spamcatcher(a)lantrix.no> > Promise is crap with Linux in general, > and they really don't support linux at all... Well, that's because 98% of Promise's products sold are FRAID (Fake/Free RAID). They are a "regular" ATA controller slapped with a 16-bit "trick BIOS." That system has the RAID code needed as long as OS is only accessing 16-bit BIOS Int13h Disk Services. The second a 32-bit OS loads, it sees the "raw" disks and doesn't understand them. That's where the 100% _software_ driver comes in, it emulates the volume for the 32-bit OS. Since all of that RAID code -- typically licensed from the same company by _all_ of the countless FRAID/mainboard-FRAID vendors out there -- it can't be GPL. Hence why FRAID products don't have GPL drivers. Except for the 'independent' GPL "ataraid.c" FRAID logic, and the reverse engineered "hptraid.c", "pdcraid" and "silraid.c" companion 'interface' GPL drivers. Of course, there is *0* guarantee those non-vendor implementations will work. I've seen people try to use them and toast their entire volume. _Real_hardware_ RAID cards completely hide the disks from the system. I.e., the system _never_ talks directly to the hard drives, but an intelligent microcontroller or ASIC. The "RAID Brains" is on the card, and the microcontroller or ASIC actually executes that code -- not your main CPU. The driver is then just a simple block driver to send data to/from the host system to the on-board intelligence. Hence why the drivers are typically GPL, there's little to them other than a basic, block SCSI driver. No RAID logic is ever exposed in the kernel driver. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: [CentOS] Hardware RAID Controller
by Bryan J. Smith <b.j.smith＠ieee.org> 10 May '05

10 May '05

From: Lee W <centos-list(a)unassemble.co.uk> > Ebay UK didn't turn up much (althought there was a few in the US). > However just tried googling a bit more and I've come across a 3ware > Escalade 7506-4LP for about ï¿½200.00 which supports upto 4 drives so that > should be suitable for my purposes, plus it looks quite small (being a > Low-Profile card) so should fit in the rack as well. You can even take the bracket off as long as you can mechanically secure it another way. > Okay I'm getting a bit over my head now. Anyone see any problems > putting 2 of these in the same machine. 3Ware has always supported up to 4 cards in a system. Just make sure the firmwares are the same for each model or expect issues with drivers. > After a few other comments I was thinking of trying 2 x RAID-1's. Why not a 4-drive RAID-0+1? It's far better to do it on a single card. Unless you are thinking of (2) RAID-1, each on their own PCI-X channel, and then a RAID-0 LVM2 stripe across them? In reality, you're really gotta get up to 8 drives in RAID-0+1 before you're going to saturate the 0.5GBps 64-bit @ 66MHz PCI bus. And in all the 1U systems I've seen, I've only seen a maximum of (2) PCI-X channels. You'll want to use one dedicated to your NIC. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss