- Discuss - lists.centos.org

RE: [Centos] samba joining an ads domain
by Marc Powell 15 Feb '05

15 Feb '05

> -----Original Message----- > From: centos-bounces(a)caosity.org [mailto:centos-bounces@caosity.org] On > Behalf Of Marcello Mezzanotti > Sent: Tuesday, February 15, 2005 2:23 PM > To: centos(a)caosity.org > Subject: [Centos] samba joining an ads domain > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hello, i just installed CentOS 3.4, im trying to join this machine on > Windows 2000 AD, i did some confs on krb5.conf (REALM CONF) and > smb.conf > > kinit Administrator(a)DOMAIN.COM goes fine but net ads join -U > Administrator give me this: > > [root@sol etc]# net ads join -U Administrator Administrator's > password: > [2005/02/15 17:28:32, 0] utils/net_ads.c:ads_startup(186) > ads_connect: No credentials found with supported encryption types > [root@sol etc]# > > whats wrong?? Funny, I was _just_ working on this. There are two issues that I encountered, the first being the one above and Google helped to resolve both. To correct your immediate issue, add default_tkt_enctypes = des-cbc-crc des-cbc-md5 default_tgs_enctypes = des-cbc-crc to the [libdefaults] section of /etc/krb5.conf Additionally, to get ssh access working I needed to disable the use of privileged separation for sshd. The problem in my case is that pam_mkhomedir.so needs root access to create the home directories if they don't exist. The way I've done it makes sshd a little less secure so I'm open to other suggestions... /etc/ssh/sshd_config -- UsePrivilegeSeparation no The information in my log files before the change was -- /var/log/secure Feb 15 11:23:29 prodlnx01 sshd[7990]: Accepted password for [username] from [host] port 32781 ssh2 Feb 15 11:23:29 prodlnx01 sshd[7992]: fatal: PAM session setup failed[6]: Permission denied And /var/log/messages Feb 15 11:23:29 prodlnx01 sshd(pam_unix)[7990]: check pass; user unknown Feb 15 11:23:29 prodlnx01 sshd(pam_unix)[7990]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=[host] Feb 15 11:23:29 prodlnx01 pam_winbind[7990]: user '[username]' granted access Feb 15 11:23:29 prodlnx01 sshd(pam_unix)[7992]: session opened for user [username] by (uid=10327) -- Marc

2 1

samba joining an ads domain
by Marcello Mezzanotti 15 Feb '05

15 Feb '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, i just installed CentOS 3.4, im trying to join this machine on Windows 2000 AD, i did some confs on krb5.conf (REALM CONF) and smb.conf kinit Administrator(a)DOMAIN.COM goes fine but net ads join -U Administrator give me this: [root@sol etc]# net ads join -U Administrator Administrator's password: [2005/02/15 17:28:32, 0] utils/net_ads.c:ads_startup(186) ads_connect: No credentials found with supported encryption types [root@sol etc]# whats wrong?? Thank you Marcello -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBQhJaFkOuB+FVjoUOEQJnoQCbBGdxooozKZBYl/MIp7m+L/pu3SgAn3fy fKsUccG1kvSlJWBlYT5iMjYW =hX7K -----END PGP SIGNATURE-----

1 0

Red Hat Legal Targets www.centos.org website content
by donavan nelson 15 Feb '05

15 Feb '05

To squelch the questions (related to the changing content on www.centos.org) I decided this needs to be published. The CentOS Team has been contacted by representatives of Red Hat's hired legal team regarding the use of Red Hat Trademarks on www.centos.org. (Full Email follows.) While the CentOS team feels we are using Red Hat's marks in a fair and legal manner, we have no choice but to eliminate the majority of the Red Hat marks that are being used on www.centos.org. So over the next few days, we will be cleansing the CentOS website of Red Hat marks and/or possible marks. If you encounter any errors please take a moment to point then out via a comment here or catch donavan in #centos-web on irc.freenode.net. At this point and going forward the CentOS project is not in any jeopardy. We have a strong group of committed developers and are growing like crazy. CentOS 4 is just around the corner; the future is brighter than ever. Read the rest here: http://www.centos.org/modules/news/article.php?storyid=66

24 38

CentOS-3 i386 and x86_64 errata: Updated python and rh-postgresql packages fix security issues(s)
by Tru Huynh 15 Feb '05

15 Feb '05

Hi, Updated python, and rh-postgresql have just been uploaded for the i386 and x86_64 architectures. Upgrade with: yum update python\* rh-postgresql\* Tru -- Tru Huynh (CentOS-3 x86_64 helper) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

no kernel upgrade on 3.3
by Dave Augustus 15 Feb '05

15 Feb '05

I have 2 servers: On both, I did yum update. One upgraded the kernel, the other didn't. Why? TIA, Dave Augustus

2 3

Re: Red Hat Legal Targets www.centos.org website content
by Rick Graves 15 Feb '05

15 Feb '05

Dag, I think you are taking what RedHat Legal says too literally. Yes, they SAY this is about confusion, but I do not think it is really about confusion. This is about their trademark rights (not covered by the GPL) and what they can do to enhance their revenue flow -- make it harder for the public to know more about the advantages of CentOS. > It's hard to discuss this without knowing what happened exactly after > the > letter was received, but I would have send out a reply asking for > concrete examples and rationale. So I think asking for concrete examples and rationale are not likely to help, as asking for this will not cause RedHat to back down from enfocing their trademark rights -- because of the "real reasons". Rick > Message: 5 > Date: Mon, 14 Feb 2005 21:12:19 +0100 (CET) > From: Dag Wieers <dag(a)wieers.com> > Subject: Re: [Centos] Red Hat Legal Targets www.centos.org website > content > To: CentOS discussion and information list <centos(a)caosity.org> > Message-ID: <Pine.LNX.4.61.0502142101290.921(a)horsea.3ti.be> > Content-Type: TEXT/PLAIN; charset=US-ASCII > > > I think the issue here might be the fact that Red Hat is mentioned > together with links to the Red Hat site in such a way people might be > misled into thinking CentOS is endorsed by Red Hat or CentOS is the > same > as RHEL. > > Now, it would not surprise me if that message got lost in translation > and > ended up being written as it is in legalese. > > It's hard to discuss this without knowing what happened exactly after > the > letter was received, but I would have send out a reply asking for > concrete > examples and rationale. It makes common sense that if you receive a > message that (partly) does not make sense to you, you ask for > clarification. > > It's in everybody's best interest to get rid of any confusion the > website > might give. We do not want people to believe that CentOS is something > else. > > Let's not focus on one mistake and let everybody do their job and clear > out the mess. I don't think there were ill intentions being used here, > except maybe the guy who posted this on Slashdot. > > -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- > [all I want is a warm bed and a kind word and unlimited power] >

1 0

Start your engines...
by Patrick Lawrence - CentOS Lists 14 Feb '05

14 Feb '05

ftp://ftp.redhat.com/pub/redhat/linux/enterprise/4/en/os/i386/SRPMS/ is open... Let the building begin. :-) Pat -- "Let's Roll" - Todd Beamer

2 1

CentOS-3 s390(x) errdata: Updated python and rh-postgresql packages fix security issues(s)
by Pasi Pirhonen 14 Feb '05

14 Feb '05

Hi, First some general explanations about what this will be. There is this 's390(x)' in the Subject: and that will mean it's bi-arch annouce conserning both - s390 and s390x. If there is for example only 's390', it's about 31bit version only. I've notified that i cannot anymore paster the source for information on this, so i just say Updated: Python and rh-postgresql -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

centos upgrade fm 3.3 to 3.4
by Chaitanya Krishna A 14 Feb '05

14 Feb '05

hi, 'dag' thanks for the help. i've been able to download all the headers. now i'm in a dilemma. i'm usig an i686 arch. i see that that centos 3.4 is for i386. can i still upgrade to 3.4 or do i've to wait till i get an upgrade for i686. regards. chaitanya. __________________________________ Do you Yahoo!? Take Yahoo! Mail with you! Get it on your mobile phone. http://mobile.yahoo.com/maildemo

2 1

Res: Re: [Centos] Red Hat Legal Targets www.centos.org website content
by LUIS ROBERTO WANDERLEY DE SIQUEIRA 14 Feb '05

14 Feb '05

what about something like: http://www.idtnetwork.com/show.aspx?mi=161 http://taolinux.org/?q=node/view/2 http://whiteboxlinux.org/ brigth, blinking... in the very first page...lets try do to as all others are doing... its a pratical approach... not what we think about Red Hat trademark guidelines. Luis. ______________________________ EMPREL, http://www.recife.pe.gov.br

2 1

upgradation to centos 3.4
by Chaitanya Krishna A 14 Feb '05

14 Feb '05

hi, i'm new to linux. right now i'm using centos 3.3. i want to upgrade to centos 3.4. i haven't used yum before. i have to go through a proxy to access the internet. so i thought it isn't able to access the proxy. after some searching on the net i could set the http proxy in the /etc/profile file. i used the following lines in the file(with the actual ip address and port ofcourse). set "http://my.domain.name:port/" export proxy_http="http://my.domain.name:port/" when i became the super user and tried the command 'yum install centos-yumcache', i got the messages attached below. [root@achala etc]# yum install centos-yumcache Gathering header information file(s) from server(s) Server: CentOS-3.3 - Addons retrygrab() failed for: http://mirror.centos.org/centos/3.3/addons/i386/headers/header.info Executing failover method failover: out of servers to try Error getting file http://mirror.centos.org/centos/3.3/addons/i386/headers/header.info [Errno 4] IOError: <urlopen error > there was some info on the centos site that when u first run yum a lot of headers would be downloaded. i think i don't have any downloaders with me. one more thing that i did with the yum.conf file was that i changed all the "centos-3"'s to "centos" in all the paths. can someone help me with this situation. thanks for any help. regards. chaitanya. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

view remote desktop
by Hard Hold 14 Feb '05

14 Feb '05

I know with vnc you can access virtual desktops, but is there a way to view the current desktop on a kde session? I tried changing the .vnc/xstartup and added the startkde & at the end to get the gui working, but can only get virtual desktops to show. or if there is a different software to use that someone else might know about. Using CentOS 3.4 Rob

6 7

Re: [Centos] Red Hat Legal Targets www.centos.org website content
by David Thompson 14 Feb '05

14 Feb '05

Francois Caen wrote: > >Please don't think I'm taking credit away from the CentOS maintainers. >My point is simply that there is no guarantee that this community >would adapt and become another Fedora Legacy. After all, we'd all be >using RHL and FC with FL updates if that was we wanted. We're here >because we want to use RHEL w/o RH. Very different crowd and needs. Not at all. I'm a RHEL-rebuild user because it best meets my needs. Especially after this nonsense, I wish that my needs were best met by a different distro. I have no inherent loyalty to RHEL (or Red Hat, for that matter). Dave Thompson UW-Madison

2 1

CentOS-3 ia64 errdate: Updated python and rh-postgresql packages fix security issues(s)
by Pasi Pirhonen 14 Feb '05

14 Feb '05

Hi, Let's try to make my first one. rh-postgresql: https://rhn.redhat.com/errata/RHSA-2005-141.html Python: https://rhn.redhat.com/errata/RHSA-2005-109.html I really don't see any point of making a list of updated files, so i do it this way (lazy that is :) -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

CentOS-3 i386 errata: Updated kdelibs and kdebase packages correct security issues
by Lance Davis 13 Feb '05

13 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-009.html refers Updated files are :- updates/i386/RPMS/kdebase-3.1.3-5.8.i386.rpm updates/i386/RPMS/kdebase-devel-3.1.3-5.8.i386.rpm updates/i386/RPMS/kdelibs-3.1.3-6.9.i386.rpm updates/i386/RPMS/kdelibs-devel-3.1.3-6.9.i386.rpm updates/i386/SRPMS/kdebase-3.1.3-5.8.src.rpm updates/i386/SRPMS/kdelibs-3.1.3-6.9.src.rpm To update run 'yum update kdebase kdelibs' Lance

2 1

CentOS in the Media
by Dag Wieers 13 Feb '05

13 Feb '05

Hi, The last couple of months CentOS was reviewed a couple of times, and with the latest piece that Johnny posted, I decided to make a collection. I've put the most interesting pieces inside the Wiki. I tried to only consider valuable articles/reviews/slideshows, both the positive and negative articles and also articles about CentOS related stuff. (Not news-items or general blog-entries) You can find it here: https://wiki.caosity.org/tiki-index.php?page=CentOS+in+the+Media If you remember another insightful article that's missing, please add it. PS I never liked Wiki's much, but this one is definitely the one I enjoyed most. -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [all I want is a warm bed and a kind word and unlimited power]

1 0

Release Announcement: CentOS 3.4 (Final) for s390x
by Johnny Hughes 13 Feb '05

13 Feb '05

The CentOS team has released CentOS 3.4 (Final) for the s390x architecture. This product supports IBM® eServer zSeries machines. This release includes all updates and errata up to February 11th, 2005. This release is available via Bittorrent (as a DVD) from the following location: http://mirror.centos.org/centos/3.4/isos/s390x/centos-3.4-s390x-bin.DVD.tor… If possible, please use bittorrent to download all files and please leave your download client running after the download is complete (with ports 6881-6889 open) as your client will become part of the peer to peer bittorrent network and reduce the load on our network mirrors. If you need some quick pointers for getting up to speed on bittorrent read: http://www.centos.org/modules/smartfaq/faq.php?faqid=24 ---------------------- Please add any errors or bugs you encounter to bugzilla on http://www.centos.org/bugs --------------------- To stay up to date with CentOS join the CentOS mailing list at http://lists.caosity.org/mailman/listinfo/centos Join #centos at irc.freenode.net Or participate in the web forums at http://www.centos.org/ Enjoy, The CentOS Team --------------- Johnny Hughes CentOS-4 Release Manager

1 0

Release Announcement: CentOS 3.4 (Final) for s390
by Johnny Hughes 13 Feb '05

13 Feb '05

The CentOS team has released CentOS 3.4 (Final) for the s390 architecture. This product supports IBM® S/390 machines. This release includes all updates and errata up to February 11th, 2005. This release is available via Bittorrent (as a DVD) from the following location: http://mirror.centos.org/centos/3.4/isos/s390/centos-3.4-s390-bin.DVD.torre… If possible, please use bittorrent to download all files and please leave your download client running after the download is complete (with ports 6881-6889 open) as your client will become part of the peer to peer bittorrent network and reduce the load on our network mirrors. If you need some quick pointers for getting up to speed on bittorrent read: http://www.centos.org/modules/smartfaq/faq.php?faqid=24 ---------------------- Please add any errors or bugs you encounter to bugzilla on http://www.centos.org/bugs --------------------- To stay up to date with CentOS join the CentOS mailing list at http://lists.caosity.org/mailman/listinfo/centos Join #centos at irc.freenode.net Or participate in the web forums at http://www.centos.org/ Enjoy, The CentOS Team --------------- Johnny Hughes CentOS-4 Release Manager

1 0

Release Announcement: CentOS 3.4 (Final) for ia64
by Johnny Hughes 13 Feb '05

13 Feb '05

The CentOS team has released CentOS 3.4 (Final) for the ia64 architecture. This product supports machines with the Intel® Itanium2 processor. This release includes all updates and errata up to February 11th, 2005. This release is available via Bittorrent (as a DVD) from the following location: http://mirror.centos.org/centos/3.4/isos/ia64/centos-3.4-ia64-bin.DVD.torre… If possible, please use bittorrent to download all files and please leave your download client running after the download is complete (with ports 6881-6889 open) as your client will become part of the peer to peer bittorrent network and reduce the load on our network mirrors. If you need some quick pointers for getting up to speed on bittorrent read: http://www.centos.org/modules/smartfaq/faq.php?faqid=24 ---------------------- Please add any errors or bugs you encounter to bugzilla on http://www.centos.org/bugs --------------------- To stay up to date with CentOS join the CentOS mailing list at http://lists.caosity.org/mailman/listinfo/centos Join #centos at irc.freenode.net Or participate in the web forums at http://www.centos.org/ Enjoy, The CentOS Team --------------- Johnny Hughes CentOS-4 Release Manager

1 0

USB Flash
by kenkensmile＠netscape.net 12 Feb '05

12 Feb '05

Does anyone know how I can get USB Flash worked on CentOS 3.4? I am new to CentOS and I do not know anything about the OS. Even though I inserted USB Flash onto my computer, nothing happened on my computer! Cheers, Ken __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp

2 1

problem with plesk on centos
by Melinda Odom 12 Feb '05

12 Feb '05

Hi, Am running CentOS with plesk 7.5.1 and get this error trying to use the updater in Plesk which updates Plesk plus adds dependencies that Plesk might need: Preparing for packages installation... ----- begin of output ----- Installing perl-CGI-2.81-88.7.i386.rpm warning: /root/psa/PSA_7.5.2/RHel3_std.updates/perl-CGI-2.81-88.7.i386.rpm: V3 DSA signature: NOKEY, key ID db42a60e file /usr/share/man/man3/CGI.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Apache.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Carp.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Cookie.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Fast.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Pretty.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Push.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Switch.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art file /usr/share/man/man3/CGI::Util.3pm.gz from install of perl-CGI-2.81-88.7 conflicts with file from package perl-5.8.5-9.rhel3.art ----- end of output ----- ===> Autoinstaller: stopped logging at Fri Feb 11 14:24:22 2005 I have found out that when I did a perl update I inadvertantly updated with a third-party listing that was in my yum.conf file the broke some dependencies which I have disabled. I really didn't realize that I had installed perl from this third-party. Would it be possible to run this without breaking anything? I have ecommerce stores running. yum remove perl-5.8.5-9.rhel3.art and then run the updater within Plesk to install their perls plus all the updates from Plesk? At the moment I cannot update plesk because of the constant error above. Thanks! Sincerely, Melinda Odom www.designhosting.biz 479-471-0891 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.7 - Release Date: 2/10/2005

1 0

CentOS CPU Temperature - Mini-HowTo
by Seth Bardash 12 Feb '05

12 Feb '05

Ok, Way too many requests. SO..... here's my Mini How-To. Use of this is at your own risk, Blah Blah Blah legal disclaimer applies..... ;-) Download from either: http://secure.netroedge.com/~lm78/ or http://www.integratedsolutions.org/downloads/i2c-2.8.7.tar.gz http://www.integratedsolutions.org/downloads/i2c-2.9.0.1.patch http://www.integratedsolutions.org/downloads/i2c-2.9.0.tar.gz http://www.integratedsolutions.org/downloads/lm_sensors-2.8.7.tar.gz http://www.integratedsolutions.org/downloads/lm_sensors-2.9.0.tar.gz WARNING: We have not finished testing 2.9.0 and there seems to be a few bugs there. So we recommend downloading the 2.8.7 files above.... NEXT: un-tar.gz the files to directories in home go to your kernel source directory: edit Makefile to read the same as the installed kernel (uname -r) (delete the word "custom" at the end of the line: EXTRAVERSION = -27.0.2.Elcustom) run make mrproper run make oldconfig run make dep run make clean The above sets up the kernel source so you can build and install the i2c and lm sensors drivers correctly. cd to i2c directory under /home run make clean run make all run make install cd to lm sensors directory under /home run make clean run make all run make install do an extra depmod -a (just in case :) ) ignore any unresolved symbols messages if you get them run sensors-detect and read the outputs carefully test the lines that the sensors-detect script tells you to add to rc.local one at a time to make sure the appropriate drivers load successfully. If they do you're all set. Next: Just add the lines required to /etc/modules.conf and /etc/rc.d/rc.local and reboot. Your i2c and lm sensors stuff will start at power up. You can test the output with the sensors command. You might want to look in the /home/lmsensors ( cd /home; find . -name "sensors*.*" ) directories for the newer sensors.conf file and copy it to /etc. Modify the new one to give you the output you want. Here is a script that we use when doing burn-in on our systems to monitor the time they have been running and the latest temps - we test under full load using cpuburn-1.4. #! /bin/csh # temp display shell script # ISSLLC sab 3/04 echo "" echo "Starting" echo "" @ counter_s = 0 @ minutes = 0 @ hrs = 0 echo "Burn Time = $hrs hrs $minutes mins $counter_s secs" echo "" while (1) sensors | grep emp sleep 10 echo "" @ counter_s += 10 if($counter_s == 60) then @ counter_s = 0 @ minutes += 1 if($minutes == 60) then @ minutes = 0 @ hrs += 1 endif endif echo "Burn Time = $hrs hrs $minutes mins $counter_s secs" end echo "I'm Done..." After its all working properly, have a drink and say "thanks Integrated Solutions" ;-) Let me know if this was helpful. Best, Seth Bardash Integrated Solutions and Systems 1510 North Gate Road Colorado Springs, CO 80921 719-495-5866 719-495-5870 Fax 719-337-4779 Cell http://www.integratedsolutions.org Failure can not cope with perseverance! -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.7 - Release Date: 2/10/2005

2 1

CPU temperature?
by Johnn Tan 11 Feb '05

11 Feb '05

Has anyone gotten lm_sensors to work on a CentOS3.3/RHEL3 box? I think I'm having CPU temperature-related problems, and wanted some way to monitor it. I believe lm_sensors does this, but can't seem to figure out how to get it to work. I already did "yum install lm_sensors" but when I run sensors-detect, it complains: Couldn't open /proc/bus/i2c?!? at /usr/sbin/sensors-detect line 2970, <STDIN> line 3. I googled around, but there appear to be more questions than answers. I'd appreciate any help. FYI, this CentOS3.3 server is remotely managed.managed. johnn

3 3

Re: RE:[Centos] GPG Sig Error
by Ed Morrison 11 Feb '05

11 Feb '05

On Fri, 2005-02-11 at 14:40, Scott Lewis wrote: > The fresh install does not come with the key for security reasons, you > will have to import it. > > Complete info, solution and reasons: > http://www.centos.org/modules/newbb/viewtopic.php?topic_id=151&forum=6 > Thanks Scott.

1 0

Re: [Centos] GPG Sig Error with CUPS
by Ed Morrison 11 Feb '05

11 Feb '05

Ken, Importing the key fixed my problem. Thank you. I adjust the comp time, hopefully I will no longer be coming back from to the future. Thanks again. Ed On Fri, 2005-02-11 at 14:39, Ken Bass wrote: > Ed I think the clock on the computer you are sending the email from is > set in the future by 10-15 minutes. >

1 0

GPG Sig Error with CUPS
by Ed Morrison 11 Feb '05

11 Feb '05

Hi Everyone, Sorry to post right out of the gate but I'm having problems running yum upgrade on a new centos 3.4 install. I performed a minimal install of centos, this means I did a custom install but unchecked everything including cups. Error tells me to clean or rm the file...tried both to no avail. Anyone else run into this issue? How do I get beyond it? The exact error is: Downloading Packages warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, key ID 025e513b Error: Could not find the GPG Key necessary to validate pkg /var/cache/yum/update/packages/cups-1.1.17-13.3.24.i386.rpm Error: You may want to run yum clean or remove the file: /var/cache/yum/update/packages/cups-1.1.17-13.3.24.i386.rpm Error: You may also check that you have the correct GPG keys installed Thank you for your assistance. Ed

2 1

CentOS review
by Troy Engel 11 Feb '05

11 Feb '05

While not exactly heavy on details, it's press. Any press is good press, right? :) http://www.linuxtimes.net/modules.php?name=News&file=article&sid=793 Story linked to on rootprompt.org as well: http://rootprompt.org/article.php3?article=8310 -te -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

1 0

CentOS-3 x86_64 errata: Updated emacs and xemacs packages fix security issue(s)
by Tru Huynh 11 Feb '05

11 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-112.html and https://rhn.redhat.com/errata/RHSA-2005-134.html refer Changed files are :- updates/x86_64/RPMS/emacs-21.3-4.1.centos.1.x86_64.rpm updates/x86_64/RPMS/emacs-el-21.3-4.1.centos.1.x86_64.rpm updates/x86_64/RPMS/emacs-leim-21.3-4.1.centos.1.x86_64.rpm updates/x86_64/RPMS/xemacs-21.4.13-8.ent.1.x86_64.rpm updates/x86_64/RPMS/xemacs-el-21.4.13-8.ent.1.x86_64.rpm updates/x86_64/RPMS/xemacs-info-21.4.13-8.ent.1.x86_64.rpm updates/x86_64/SRPMS/emacs-21.3-4.1.centos.1.src.rpm updates/x86_64/SRPMS/xemacs-21.4.13-8.ent.1.src.rpm To update run 'yum update emacs xemacs' Tru -- Tru Huynh (CentOS-3 x86_64 helper) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CentOS-3 i386 errata: Updated Squid package fixes security issues
by Lance Davis 11 Feb '05

11 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-061.html refers Updated files :- updates/i386/RPMS/squid-2.5.STABLE3-6.3E.7.i386.rpm updates/i386/SRPMS/squid-2.5.STABLE3-6.3E.7.src.rpm To update run 'yum update squid' Lance

2 1

CentOS-3 i386 errata: Updated emacs and xemacs packages fix security issue(s)
by Lance Davis 11 Feb '05

11 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-112.html and https://rhn.redhat.com/errata/RHSA-2005-134.html refer Changed files are :- updates/i386/RPMS/emacs-21.3-4.1.centos.1.i386.rpm updates/i386/RPMS/emacs-el-21.3-4.1.centos.1.i386.rpm updates/i386/RPMS/emacs-leim-21.3-4.1.centos.1.i386.rpm updates/i386/RPMS/xemacs-21.4.13-8.ent.1.i386.rpm updates/i386/RPMS/xemacs-el-21.4.13-8.ent.1.i386.rpm updates/i386/RPMS/xemacs-info-21.4.13-8.ent.1.i386.rpm updates/i386/SRPMS/emacs-21.3-4.1.centos.1.src.rpm updates/i386/SRPMS/xemacs-21.4.13-8.ent.1.src.rpm To update run 'yum update emacs xemacs' Lance

1 0

SATA Raid - final
by Nigel Kendrick 11 Feb '05

11 Feb '05

Thanks for all the advice on setting up software RAID with SATA drives - especially to Morten Tormoen for the information on speeding up the re-sync. I have now had time to go back to the machine and start again: I now have one 300GB SATA drive on the motherboard controller and one on the PCI card and they're currently re-syncing at 48445K/Sec and will be done in 90 mins - a big improvement on 250kB/sec!!! Nigel Kendrick

1 0

CentOS-3 x86_64 errata: Updated mod_python package fixes security issue
by Tru Huynh 10 Feb '05

10 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-104.html refers Updated files are :- updates/x86_64/RPMS/mod_python-3.0.3-5.ent.x86_64.rpm updates/x86_64/SRPMS/mod_python-3.0.3-5.ent.src.rpm To update run 'yum update mod_python' Tru -- Tru Huynh (CentOS-3 x86_64 helper) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CentOS-3 x86_64 errata : Updated Squirrelmail package fixes security issues
by Tru Huynh 10 Feb '05

10 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-135.html refers Updated files are :- updates/x86_64/RPMS/squirrelmail-1.4.3a-9.EL3.centos.1.noarch.rpm updates/x86_64/SRPMS/squirrelmail-1.4.3a-9.EL3.centos.1.src.rpm To update run 'yum update squirrelmail' Tru -- Tru Huynh (CentOS-3 x86_64 helper) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CentOS-3 i386 errata: Updated mod_python package fixes security issue (resent)
by Lance Davis 10 Feb '05

10 Feb '05

Resent due to signing problem. https://rhn.redhat.com/errata/RHSA-2005-104.html refers Updated files are :- updates/i386/RPMS/mod_python-3.0.3-5.ent.i386.rpm updates/i386/SRPMS/mod_python-3.0.3-5.ent.src.rpm To update run 'yum update mod_python' Lance

1 0

CentOS-3 i386 errata : Updated Squirrelmail package fixes security issues
by Lance Davis 10 Feb '05

10 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-135.html refers Updated files are :- updates/i386/RPMS/squirrelmail-1.4.3a-9.EL3.centos.1.noarch.rpm updates/i386/SRPMS/squirrelmail-1.4.3a-9.EL3.centos.1.src.rpm To update run 'yum update squirrelmail' Lance

1 0

[Fwd: CentOS-3 i386 errata: Updated mod_python package fixes security issue]
by Lance Davis 10 Feb '05

10 Feb '05

arrgh

2 3

CentOS-3 i386 errata: Updated mod_python package fixes security issue
by Lance Davis 10 Feb '05

10 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-104.html refers Updated files are :- updates/i386/RPMS/mod_python-3.0.3-5.ent.i386.rpm updates/i386/SRPMS/mod_python-3.0.3-5.ent.src.rpm To update run 'yum update mod_python' Lance

1 0

help with xargs and mv
by James B. Byrne 10 Feb '05

10 Feb '05

I am trying to move a group of sendmail queue files into a special area and am developing s script to assist. The manual steps are: # Identify which messages to move mailq -qR<domain> > file1 # Select only lines with message ID strings grep '^[[:alpha:]][[:alnum:]]\{13\}' file1 > file2 # extract only the messages ID cut -b -14 file2 > file3 # prepend '*' to message IDs sed "s/^/\*/" file3 > file4 All of this works the way that I expect. What I now want to do is to mv all of the related files listed in file4 in the form "*messageid" to another directory. Using xargs I expected (naively) that the following construction would work: cat file4 | xargs mv /var/spool/mqueue/'{}' \ /var/spool/mqueue/offline (note that in the original this is all one line.) However, when I do this I get the error: mv: when moving multiple files, last argument must be a directory Try `mv --help' for more information. There is obviously something about xargs that I do not understand. In my imagination I see this xargs construction expanding to this: mv /var/spool/mqueue/*messageid1 /var/spool/mqueue/offline mv /var/spool/mqueue/*messageid2 /var/spool/mqueue/offline . . . mv /var/spool/mqueue/*messageidn /var/spool/mqueue/offline so that the qf and df files for each message are moved into the subdirectory offline. But this is obviously incorrect. Can anyone here point out to me what my misunderstanding is and how to get this to work? If this is not the forum for this kind of question then can someone with more experience point me to a mailing list that would be more suitable? Regards, JIm -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

4 12

Apache 2.0.53 and Centos
by Michael Rock 10 Feb '05

10 Feb '05

Can someone tell me what configure options are needed to compile the latest Apache 2.0.53 to behave exactly like the latest apache 2.0.46 included with Centos 3.4? thx __________________________________ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail

4 10

CentOS-3 x86_64 errata: Updated mailman packages fix security vulnerability
by Tru Huynh 10 Feb '05

10 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-136.html refers updated files are :- updates/x86_64/RPMS/mailman-2.1.5-24.rhel3.x86_64.rpm updates/x86_64/SRPMS/mailman-2.1.5-24.rhel3.src.rpm To update CentOS 3 to this new version run 'yum update mailman' CentOS 3.3 shipped with an earlier version of mailman - mailman-2.0.13-5 - in the extras repo. Details of the mailman upgrade procedure may be found at http://www.centos.org/mailman The 3.3 x86_64 updates repository already contained a mailman-2.1.5-23, so the upgrade was also provided for 3.3 and 3.4. Consider upgrading to CentOS 3.4 (http://www.centos.org/modules/news/article.php?storyid=34) Tru -- Tru Huynh (CentOS-3 x86_64 helper) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CentOS-3 i386 errata: Updated mailman packages fix security vulnerability
by Lance Davis 10 Feb '05

10 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-136.html refers updated files are :- updates/i386/RPMS/mailman-2.1.5-24.rhel3.i386.rpm updates/i386/SRPMS/mailman-2.1.5-24.rhel3.src.rpm To update CentOS 3.4 to this new version run 'yum update mailman' CentOS 3.3 shipped with an earlier version of mailman - mailman-2.0.13-5 - in the extras repo. This version has not been supported since 3.4 was released, ( http://www.centos.org/modules/news/article.php?storyid=34) however this version may be vulnerable to the exploit so it is recommended that all users upgrade. Details of the upgrade procedure may be found at http://www.centos.org/mailman Lance

2 1

silly cross posts
by Rick Graves 10 Feb '05

10 Feb '05

Russ, > Sorry for the cross post, but this is an important > one potentially affecting all recipients. Why be sorry? Did you break a rule? Where is the rule? It seems that there is a rule, but the rule gives if the matter is important enough. But you have to say "Sorry"? It seems that when a matter comes up that is important enough to inform everyone, one MUST cross post -- otherwise, you guarantee that lots of people will not get the message. Having to say "Sorry" to get a message out to everyone who needs to get the message seems silly to me. I would think that if the message is important enough and must get to everyone, one should be able to cross post without having to say "Sorry" -- saying "Sorry" is "silly". Rick

1 0

Mailman crons
by Henk van Lingen 10 Feb '05

10 Feb '05

Hi, The last RHEL3 update pack contains a mailman package. I'm using that on a new mailserver and found a little problem with cron when starting/ stopping the mailman service. RedHat moves the mailman crontab in and out every time, however, crond only notes the 'move in', not the 'move out. This is because the /etc/cron.d/ timestamp only changes by a 'move in'. My fix: add rm -f $DST_CRON_SCRIPT as the first line in the function RemoveCron() in /etc/init.d/mailman. Cheers, -- Henk van Lingen, Systems & Network Administrator (o- -+ Dept. of Computer Science, Utrecht University. /\ | phone: +31-30-2535278 v_/_ http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/

1 0

[centos 3.4] e1000 and installation problem
by Martin Hamant 10 Feb '05

10 Feb '05

Hello, I install Centos'es from PXE, with vmlinuz and initrd provided by images/pxeboot from the first CD of centos 3.4. The server is a PowerEdge 1850 with two integrated e1000 nic interfaces. So kernel is booting, then it comes to the screen which ask for one nic to do a dhcp query. I choose eth0, dhcp server reply well and then i get an ip address, dns'es, etc. And nothing else happen because the nic link is going down at this point !!! (no light, no way. ) I've tried with PXE install of centos 3.3, and all is working fine on this server.... Do you think there is a problem with the centos 3.4 "installation time" kernel ? I remember that centos 3.1 had problems about this nic too ... Any ideas ? Thank you ! -- Martin

3 5

full-d] Administrivia: List Compromised due to Mailman Vulnerability (fwd)
by R P Herrold 09 Feb '05

09 Feb '05

Sorry for the cross post, but this is an important one potentially affecting all recipients. This just crossed the Full Disclosure mailman moderated mailing list. It bears a careful read, and thought about whether a response is needed. The implication is that if there is any use of a mailman password in common with a password you 'care' about, you need to take appropriate action at once. Also some backends merge Bugzilla and mailman password stores, which can cause unexpected secondary effects. I have not seen a patch yet, and so one has to assume that the configs and passwords for all mailman moderated mailing lists are compromised. Once a fix issues, Mailman moderators will want to do a global password change, and local list modification. -- Russ Herrold ---------- Forwarded message ---------- Date: Wed, 9 Feb 2005 18:15:02 +0000 From: John Cartwright <johnc(a)grok.org.uk> To: full-disclosure(a)lists.netsys.com Subject: full-d] Administrivia: List Compromised due to Mailman Vulnerability Hi On 7th February 2005 I was notified of a number of potentially - compromised Full-Disclosure subscriber accounts. Following an investigation it appears that the Mailman configuration database was obtained from lists.netsys.com on 2nd January 2005 using a remote directory traversal exploit for a previously unpublished vulnerability in Mailman 2.1.5. Subscriber addresses and passwords have been compromised. All list members are advised to change their password immediately. There do not appear to be further signs of intrusion although investigations continue. The vulnerability lies in the Mailman/Cgi/private.py file: def true_path(path): "Ensure that the path is safe by removing .." path = path.replace('../', '') path = path.replace('./', '') return path[1:] A crafted URL fragment of the form ".../....///" will pass through the above function and return as "../", thus allowing directory traversal to occur using the following URL syntax to retrieve an arbitrary path. /mailman/private/<list>/<path>?username=<username>&password=<password> Expect vendor advisories nearer the end of the week, for now here is a suggested fix from Barry Warsaw: SLASH = '/' def true_path(path): "Ensure that the path is safe by removing .." parts = [x for x in path.split(SLASH) if x not in ('.', '..')] return SLASH.join(parts)[1:] This issue only affects Mailman installations running on web servers that don't strip extraneous slashes from URLs, such as Apache 1.3.x. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0202 to this mailman issue. Cheers - John _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

4 6

Re: [Centos] help with xargs and mv
by James B. Byrne 09 Feb '05

09 Feb '05

Just a note that I caught and corrected the syntax error on my last example and that correcting it does not change the result at all. # cat workmv | xargs -i '{}' mv --Target-Directory=./mqueue/offline/ ./mqueue/'{}' vice # cat workmv | xargs -i '{}' --Target-Directory=./mqueue/offline/ mv ./mqueue/'{}' both give xargs: {}: No such file or directory Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

RE: CentOS Digest, Vol 2, Issue 13
by Melinda Odom 09 Feb '05

09 Feb '05

>>> I have ecommerce stores on my server who use the same instantssl certificate without any problems. These particular certificates were migrated over from one plesk system to my new server with centOS 3.4 and plesk 7.5.1 reloaded. >>> We got it working. It was a custom config problem for that one site. Sincerely, Melinda Odom www.designhosting.biz 479-471-0891 -----Original Message----- From: centos-bounces(a)caosity.org [mailto:centos-bounces@caosity.org]On Behalf Of centos-request(a)caosity.org Sent: Wednesday, February 09, 2005 6:00 AM To: centos(a)caosity.org Subject: CentOS Digest, Vol 2, Issue 13 Send CentOS mailing list submissions to centos(a)caosity.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.caosity.org/mailman/listinfo/centos or, via email, send a message with subject or body 'help' to centos-request(a)caosity.org You can reach the person managing the list at centos-owner(a)caosity.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS digest..." Today's Topics: 1. Re: CentOS 3.4 on Compaq Proliant (Troy Engel) 2. ssl certificate problem - one domain only (Melinda Odom) 3. CentOS-3 x86_64 errata : Updated Perl packages fix security issues (Tru Huynh) 4. Re: ssl certificate problem - one domain only (John Hinton) 5. Re: Samba print queues showing old jobs (Gavin Carr) ---------------------------------------------------------------------- Message: 1 Date: Tue, 08 Feb 2005 15:00:02 -0800 From: Troy Engel <tengel(a)fluid.com> Subject: Re: [Centos] CentOS 3.4 on Compaq Proliant To: CentOS discussion and information list <centos(a)caosity.org> Message-ID: <42094472.2060106(a)fluid.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed John Hinton wrote: > >> I am trying to install CentOS 3.4 on a Compaq Proliant 1600, and it >> hangs on probing monitor type when anaconda starts. I have tried >> > Do the install using the nousb flag. I have had the same issue on some > 1850s and had to disable the onboard scsi port allowing only the scsi > card to be enabled. Same same -- on the random old Compaq....DL360(?) (long since dead) it physically had no USB on the motherboard, and it took forever to figure out the 'nousb' flag to make any Redhat installs work. -te -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com ------------------------------ Message: 2 Date: Tue, 8 Feb 2005 18:05:14 -0600 From: "Melinda Odom" <info(a)designhosting.biz> Subject: [Centos] ssl certificate problem - one domain only To: <centos(a)caosity.org> Message-ID: <OHEMIKFDMHLDNJAPNOLEGEHKFGAA.info(a)designhosting.biz> Content-Type: text/plain; charset="iso-8859-1" Hi, I have ecommerce stores on my server who use the same instantssl certificate without any problems. These particular certificates were migrated over from one plesk system to my new server with centOS 3.4 and plesk 7.5.1 reloaded. When I generated a new csr for a new client on my centOS server and chose apache mod_ssl at instantssl for the csr I got the certificate, installed it (first new install on my new server) and now when someone goes to this particular ecommerce site and tries to purchase anything or create an account a box pops up asking if they want to open or download the file. This has never happened before and does not happen on all the certificates I migrated over to the new server without generating a csr. I am very confused as to what is happening. When I turn the ssl off for this particular ecommerce store everything works and customers can buy and register. My other sites that were migrated over to this new server do not have any problems and are using instantssl also. I called instantssl.com and they told me it was a problem with the mime types and the server was configured incorrectly and to look in the httpd.conf file. I see these for the httpd.conf file: /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.save_by_frontpage I see this one is turned off in the httpd.conf file: LoadModule env_module modules/mod_env.so #LoadModule mime_magic_module modules/mod_mime_magic.so LoadModule cern_meta_module modules/mod_cern_meta.so Other ones: # TypesConfig describes where the mime.types file (or equivalent) is # to be found. # TypesConfig /etc/mime.types DefaultType text/plain Is there something that needs to be changed to make this ssl certificate work? Sincerely, Melinda Odom www.designhosting.biz 479-471-0891 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.6 - Release Date: 2/7/2005

1 0

Samba print queues showing old jobs
by Nigel Kendrick 09 Feb '05

09 Feb '05

We have a server running Centos-3 with all latest updates. The server hosts 3 printers for us which are accessed by various Windows clients. About 3 months ago we noticed that, after a cups update, if you looked at the print queues in Windows they would show old jobs that had long been printed. After a further cups update this quirk went away but it's just come backs again - possibly after the recent cups update. Or is it me!? Anything worth checking? Thanks Nigel Kendrick

3 2

CentOS-3 x86_64 errata : Updated Perl packages fix security issues
by Tru Huynh 09 Feb '05

09 Feb '05

https://rhn.redhat.com/errata/RHSA-2005-105.html refers Updated files are :- updates/x86_64/RPMS/perl-5.8.0-89.10.i386.rpm updates/x86_64/RPMS/perl-5.8.0-89.10.x86_64.rpm updates/x86_64/RPMS/perl-CGI-2.81-89.10.x86_64.rpm updates/x86_64/RPMS/perl-CPAN-1.61-89.10.x86_64.rpm updates/x86_64/RPMS/perl-DB_File-1.804-89.10.x86_64.rpm updates/x86_64/RPMS/perl-suidperl-5.8.0-89.10.x86_64.rpm updates/x86_64/SRPMS/perl-5.8.0-89.10.src.rpm To update run 'yum update perl' Tru -- Tru Huynh (CentOS-3 x86_64 helper) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

ssl certificate problem - one domain only
by Melinda Odom 09 Feb '05

09 Feb '05

Hi, I have ecommerce stores on my server who use the same instantssl certificate without any problems. These particular certificates were migrated over from one plesk system to my new server with centOS 3.4 and plesk 7.5.1 reloaded. When I generated a new csr for a new client on my centOS server and chose apache mod_ssl at instantssl for the csr I got the certificate, installed it (first new install on my new server) and now when someone goes to this particular ecommerce site and tries to purchase anything or create an account a box pops up asking if they want to open or download the file. This has never happened before and does not happen on all the certificates I migrated over to the new server without generating a csr. I am very confused as to what is happening. When I turn the ssl off for this particular ecommerce store everything works and customers can buy and register. My other sites that were migrated over to this new server do not have any problems and are using instantssl also. I called instantssl.com and they told me it was a problem with the mime types and the server was configured incorrectly and to look in the httpd.conf file. I see these for the httpd.conf file: /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.save_by_frontpage I see this one is turned off in the httpd.conf file: LoadModule env_module modules/mod_env.so #LoadModule mime_magic_module modules/mod_mime_magic.so LoadModule cern_meta_module modules/mod_cern_meta.so Other ones: # TypesConfig describes where the mime.types file (or equivalent) is # to be found. # TypesConfig /etc/mime.types DefaultType text/plain Is there something that needs to be changed to make this ssl certificate work? Sincerely, Melinda Odom www.designhosting.biz 479-471-0891 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.6 - Release Date: 2/7/2005

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss