Discuss

discuss@lists.centos.org

34753 discussions

pcscd
by m.roth＠5-cent.us 30 Nov '10

30 Nov '10

Anyone working with/using it? One thing that's driving me nuts is that it keeps spitting garbage into the logs (card absent or mute!!!). I just tried editing /etc/init.d/pcscd - there's *no* way to pass parms from the config file - and set the logging level to --error, and it's still doing it. Clues for the poor, to shut it up? mark

2 3

yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?
by giggzounet 29 Nov '10

29 Nov '10

Hi, On our cluster with CentOS 5.5, I have a little problem with a script for infiniband (this problem: http://web.archiveorange.com/archive/v/NUQmuN84gd3D31Fdl8PU) So the fix a very easy. But what will yum/RPM do during the next update ? Will it overwrite the file ? Will it write on display that the file was modified by an user (as under debian) ? Thx a lot, Best regards, Guillaume

5 10

the wandering MAC?
by Boris Epstein 29 Nov '10

29 Nov '10

Hi all, I have what appears to be a truly puzzling problem. I've got this P4 32-bit machine running CentOS 5.5 with XEN that has two NICs: one onboard, an Intel Corporation 82540EM Gigabit and one on an expansion card, Realtek Semiconductor Co., Ltd. RTL-8169 Gigabit. The second one is recognized as eth1. What's happening is, it is showing up under one of the two MAC's: either 00:0a:cd:1a:c1:71 or 00:00:00:00:c1:71. If you reboot it the MAC stays the same; if you shutdown and do a full powerdown it seems to change. Obviously, after it goes from one MAC to another you have to play with the start-up scripts for this interface to start up correctly and this becomes a major annoyance. Any idea what all of this mess could mean? Thanks. Boris.

6 8

rpm dependencies
by bluethundr 29 Nov '10

29 Nov '10

I have successfully created a packaged version of openssh that has the LPK patch. LPK allows you to store your public keys in LDAP. However when I go to install the package I created it complains about dependencies: [root@VIRTCENT13:/home/bluethundr/rpm]#rpm -Uvh openssh-5.6p1-1.i386.rpm error: Failed dependencies: openssh = 5.5p1-1.el5 is needed by (installed) openssh-clients-5.5p1-1.el5.i386 openssh = 5.5p1-1.el5 is needed by (installed) openssh-server-5.5p1-1.el5.i386 how can I get past this? thanks!! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

3 5

yum is dumb in update of gmime & gmime-sharp
by ken 29 Nov '10

29 Nov '10

# yum update ... --> Running transaction check --> Processing Dependency: gmime = 2.2.10-5.el5.centos for package: gmime-sharp ---> Package gmime20.i386 0:2.2.26-1.el5.rf set to be updated --> Finished Dependency Resolution gmime-sharp-2.2.10-5.el5.centos.i386 from installed has depsolving problems --> Missing Dependency: gmime = 2.2.10-5.el5.centos is needed by package gmime-sharp-2.2.10-5.el5.centos.i386 (installed) Error: Missing Dependency: gmime = 2.2.10-5.el5.centos is needed by package gmime-sharp-2.2.10-5.el5.centos.i386 (installed) ... # rpm -q gmime gmime-sharp gmime-2.2.10-5.el5.centos gmime-sharp-2.2.10-5.el5.centos This would seem like a bug... or why is yum trying to install package versions which are already installed? Yes, I already ran package-cleanup --problems, package-cleanup --dupes, and rpm -Va --nofiles --nodigest

3 10

directory services and root/sudo access
by Iain Morris 29 Nov '10

29 Nov '10

This is perhaps a more general security question. For those of you with a directory services installation, do you install a generic local user with sudo access in case directory services is not available? Or do you just beef up your directory services to the point that you are confident it will almost always be up? I usually disable root login via ssh, but allow it from the physical console, and make an emergency generic account with sudo privs in case DS breaks down. What I've noticed, however, is if I simulate a directory services failure, ssh logins with this generic local account take an eternity as the server still tries to auth that user against ldap/kerberos first. I'm sure this could be adjusted in pam in some way. I was just curious how other admins approach this, and what level of trust they place in directory services being available. -- -- - Iain Morris iain.t.morris(a)gmail.com

2 1

opensc/ct/etc
by m.roth＠5-cent.us 29 Nov '10

29 Nov '10

Has anyone worked with the upstream installation for 5.5, and successfully told it to ->shut up<- when you pull your smart card out of the reader? Since you can't add parms in /etc/reader.conf, or in a file in /etc/reader.conf.d, I tried editing /etc/init.d/pcscd to tell it error level and above logging only, and it ignores it, and writes over and over that the card is "mute or absent", filling my logs. mark

1 0

Rebuilding samba3x rpms results in size doubled
by Oguz Yilmaz 29 Nov '10

29 Nov '10

Hi, I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in triple size of the original RPMs. I have installed and checked the binary files are stripped. What can result in such difference in RPM sizes? I have not changed anything on built and install sections of spec file. Regards, Some files and sizes in original samba3x rpm: -rwxr-xr-x 1 root root 17904 Mar 31 2010 recycle.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 shadow_copy2.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 shadow_copy.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 xattr_tdb.so -rwxr-xr-x 1 root root 22052 Mar 31 2010 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 17920 Mar 31 2010 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 14060 Mar 31 2010 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 5448 Mar 31 2010 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 5512 Mar 31 2010 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 9600 Mar 31 2010 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 13832 Mar 31 2010 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 5444 Mar 31 2010 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 9644 Mar 31 2010 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 31312 Mar 31 2010 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 9696 Mar 31 2010 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 9636 Mar 31 2010 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 9584 Mar 31 2010 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 17752 Mar 31 2010 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 17904 Mar 31 2010 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 2502552 Mar 31 2010 /usr/sbin/nmbd -rwxr-xr-x 1 root root 6807276 Mar 31 2010 /usr/sbin/smbd Some files and sizes in mine samba3x rpm: -rwxr-xr-x 1 root root 62018 Nov 26 14:50 recycle.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 shadow_copy2.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 shadow_copy.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 xattr_tdb.so -rwxr-xr-x 1 root root 68818 Nov 26 14:50 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 60184 Nov 26 14:50 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 46167 Nov 26 14:50 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 60597 Nov 26 14:50 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 37894 Nov 26 14:50 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 40378 Nov 26 14:50 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 44448 Nov 26 14:50 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 51756 Nov 26 14:50 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 37428 Nov 26 14:50 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 46429 Nov 26 14:50 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 95070 Nov 26 14:50 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 48276 Nov 26 14:50 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 48882 Nov 26 14:50 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 43154 Nov 26 14:50 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 62346 Nov 26 14:50 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 62018 Nov 26 14:50 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 6293564 Nov 26 14:50 /usr/sbin/nmbd -rwxr-xr-x 1 root root 18057363 Nov 26 14:50 /usr/sbin/smbd -- Oguz YILMAZ

4 4

can't use godaddy SSL cert
by bluethundr 28 Nov '10

28 Nov '10

Hey list, I was having a similar SSL/openLDAP problem to this last week. I had a chance to look at this again today and it still appears to not be working. I called godaddy and had the last cert cancelled and reissued as I had mis-typed the name of the CN on the last one. I am trying to setup a Godaddy turbo SSL certificate with an openLDAP 2.4 server under FreeBSD 8.1. The clients are mainly a network of virtual CentOS 5.5 instances. [root@LBSD2:/usr/home/bluethundr]#pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I have setup the certificate chain in my slapd.conf like so: [root@LBSD2:/usr/home/bluethundr]#grep -i tls /usr/local/etc/openldap/slapd.conf## TLS options for slapd TLSCipherSuite HIGH:MEDIUM:+SSLv2 TLSCertificateFile /usr/local/etc/openldap/cacerts/LBSD2.summitnjhome.com.crt TLSCertificateKeyFile /usr/local/etc/openldap/cacerts/slapd.pem TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt I have tried each of the following certs with no luck in getting my cert to talk to it's CA: -rw-r--r-- 1 root bluethundr 2604 Nov 25 11:37 ca_bundle.crt -r--r----- 1 root ldap 4604 Nov 24 18:57 gd_bundle.crt -r--r----- 1 root ldap 1537 Nov 25 02:00 sf_issuing.crt and I get the same result for each when I attempt to connect to SSL on the LDAP server: [root@LCENT01:/tmp/Foswiki-1.1.2]#openssl s_client -connect ldap.example.com:389 -showcerts -CAfile sf_issuing.crt 13730:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('sf_issuing.crt','r') 13730:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 13730:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: CONNECTED(00000003) 13730:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: ldapsearch -h ldap.example.com -d -1 -ZZ "dc=example,dc=com" TLS certificate verification: depth: 0, err: 20, subject: /O=LBSD2.summitnjhome.com/OU=Domain Control Validated/CN=LBSD2.summitnjhome.com, issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287 TLS certificate verification: Error, unable to get local issuer certificate tls_write: want=7, written=7 0000: 15 03 01 00 02 02 30 ......0 TLS trace: SSL3 alert write:fatal:unknown CA TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS: can't connect. ldap_perror ldap_start_tls: Connect error (-11) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed It seems to indicate that it can't talk to it's CA... does anyone have any suggestions on how to make this work? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

2 2

Re: [CentOS] simple website hit counter
by Les Bell 27 Nov '10

27 Nov '10

John Hinton <webmaster(a)ew3d.com> wrote: >> You set it to run once per day against the logs for that website... normally around midnight. The loads aren't that bad. The reporting I think defaults to 12 months of stored data which is stored normally in a directory in the web root for that website. That directory of course can be protected by something like htaccess. << Just a heads up: the Webalizer report logs are not managed by logrotate, and will continue to accumulate indefinitely. I had a server fall over a couple of months ago when /var filled up; after a little du'ing, I discovered that the thing had three and a half years' worth of Webalizer logs taking up a lot of space. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss