Discuss

discuss@lists.centos.org

34758 discussions

question on virtual desktops
by Jerry Geis 28 Jan '10

28 Jan '10

centos has the 4 virtual desktops by default. if I have a terminal window open in desktop 1 is there a command I can execute (type in) to switch to desktop 2? The mouse will not be attached at this point and I want to switch views using a command line. How do I do that? Thanks, Jerry

3 2

/usr/sbin/usermod -p doesn't update MAX_DAYS - workaround?
by Sean Carolan 28 Jan '10

28 Jan '10

I have a large group of Linux servers that I inherited from a previous administrator. Unfortunately there is no single sign-on configured so each server has it's own local accounts with local authentication. Normally I use ssh keys and a handy shell script to change passwords on all these machines with the usermod -p command. We are able to update the password on on one server and push the encrypted password out to all the others. If, however, we turn on password aging with "chage -M 90 username" then try to update passwords with usermod, the aging info for the account is not updated even though the password has been changed. Apparently this must be done manually for each and every server with the passwd command. This is not practical. In the long run we're going to try and get some kind of centralized authentication, but in the meantime does anyone have an idea for a workaround? Thanks Sean

2 2

Crash during yum update
by Kwan Lowe 28 Jan '10

28 Jan '10

Hello all: I was getting a reproducible crash during an update of a xen system. The problem went away after I set SELinux to permissive, but the fact that it crashed was alarming (first one on a non-dev system that I've had in over a year). I attempted the update earlier but it crashed at the same point after attempting to update selinux. After verifying hardware (all clean) I ran it again and crashed in the same location. Third time failed again in same location. I rebooted, changed selinux, then it completed after that. Unfortunately there are no dumps and I had to put the system back into operation. Didn't see anything in bugzilla either. Anyone else seen this? Here's the console output: Transaction Summary ================================================================================ Install 2 Package(s) Update 17 Package(s) Remove 2 Package(s) Total size: 56 M Is this ok [y/N]: y Downloading Packages: Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Test Succeeded Running Transaction Updating : selinux-policy-targeted 1/38 general protection fault: 0000 [1] SMP last sysfs file: /hypervisor/uuid CPU 0 Modules linked in: autofs4 i2c_dev i2c_core hidp rfcomm l2cap bluetooth lockd sunrpc ip_conntrack_netbios_ns ipt_REJECT xt_state ip_conntrack nfnetlink iptable_filter ip_tables ip6t_REJECT xt_tcpudp ip6table_filter ip6_tables x_tables ipv6 xfrm_nalgo crypto_api dm_multipath scsi_dh scsi_mod parport_pc lp parport xennet pcspkr dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod xenblk ext3 jbd uhci_hcd ohci_hcd ehci_hcd Pid: 4269, comm: semodule Not tainted 2.6.18-164.10.1.el5xen #1 RIP: e030:[<ffffffff88037cb0>] [<ffffffff88037cb0>] :jbd:journal_grab_journal_head+0x25/0x44 RSP: e02b:ffff88001ee5fb50 EFLAGS: 00010202 RAX: 0000000000304027 RBX: ffff88001d78e370 RCX: 0000000000000035 RDX: fffd88001d7939d0 RSI: ffff88001d78e310 RDI: ffff88001d78e370 RBP: 0000000000000001 R08: ffffffff804f8e00 R09: ffff88003e513600 R10: ffff88001d793a30 R11: ffffffff8804fc33 R12: ffff88001d793a30 R13: ffff88003e513600 R14: ffff88000194d908 R15: 0000000000000001 FS: 00002b85be90abc0(0000) GS:ffffffff805ca000(0000) knlGS:0000000000000000 CS: e033 DS: 0000 ES: 0000 Process semodule (pid: 4269, threadinfo ffff88001ee5e000, task ffff880032883820) Stack: ffffffff88032257 0000000000000000 0000000000000000 ffff88001d78e3d0 00000c000194d8d0 ffff88001d78e2b0 ffff88000194d908 000000000000056e 0000000000000004 000000000000056e Call Trace: [<ffffffff88032257>] :jbd:journal_invalidatepage+0xdc/0x358 [<ffffffff8021d3dd>] truncate_complete_page+0x1b/0x5c [<ffffffff8022b98f>] truncate_inode_pages_range+0x9b/0x290 [<ffffffff802c555b>] vmtruncate+0x4e/0xc9 [<ffffffff8024335e>] inode_setattr+0x22/0x104 [<ffffffff88050b2f>] :ext3:ext3_setattr+0x1bd/0x228 [<ffffffff8022ceab>] notify_change+0x145/0x2f3 [<ffffffff802d17af>] do_truncate+0x5e/0x79 [<ffffffff80212f1a>] may_open+0x1d3/0x22f [<ffffffff8021b4ce>] open_namei+0x2c8/0x6ed [<ffffffff80227a14>] do_filp_open+0x1c/0x38 [<ffffffff8021a1b8>] do_sys_open+0x44/0xbe [<ffffffff802602f9>] tracesys+0xab/0xb6 Code: ff 42 08 8b 07 a9 00 00 20 00 75 0a 0f 0b 68 f5 97 03 88 c2 RIP [<ffffffff88037cb0>] :jbd:journal_grab_journal_head+0x25/0x44 RSP <ffff88001ee5fb50> <0>Kernel panic - not syncing: Fatal exception

1 0

Seamonkey (Mozilla) web browser for CentOS 5.4?
by Robert Heller 28 Jan '10

28 Jan '10

Does the Seamonkey (Mozilla) web browser exist for CentOS 5.4? It seems to be missing from the standard repository. -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

4 4

Postfix 2.6.5 in CentOSplus?
by Dirk H. Schulz 27 Jan '10

27 Jan '10

Hi folks, according to several findings on the web I tried to find postfix-2.6.5 in centosplus adding this to my /etc/yum.repos.d/CentOS-Base.repo: [base] exclude=postfix [centosplus] includepkgs=postfix in the right places. But when I "yum remove" and "yum install" postfix then, it's "only" 2.3.3-2.1 with added mysql/pqsql support. Is there anything I am doing wrong? Or is there just no postfix 2.6.5 in centosplus? Dirk

5 13

need some help with compiling mod_gnutls
by Tobias Weisserth 27 Jan '10

27 Jan '10

Hi everybody, I want to build mod_gnutls. The problem: CentOS' version of GNUTLS is too old to link against, so I compiled and installed GNUTLS from source and put it into /opt where it doesn't hurt the already installed GNUTLS. Now I have trouble linking against this version as the autoconf buildchain in mod_gnutls does not find the newer version. I tried like this: ./configure -with-libgnutls=/opt/lib ./configure -with-libgnutls=/opt/bin I get this from configure: checking for libgnutls - version >= 2.4.0... no *** An old version of LIBGNUTLS (1.4.1) was found. *** You need a version of LIBGNUTLS newer than 2.4.0. The latest version of *** LIBGNUTLS is always available from ftp://gnutls.hellug.gr/pub/gnutls. *** *** If you have already installed a sufficiently new version, this error *** probably means that the wrong copy of the pkg-config shell script is *** being found. The easiest way to fix this is to remove the old version *** of LIBGNUTLS, but you can also set the PKG_CONFIG environment to point to the *** correct copy of pkg-config. (In this case, you will have to *** modify your LD_LIBRARY_PATH enviroment variable, or edit /etc/ld.so.conf *** so that the correct libraries are found at run-time)) configure: error: *** *** libgnutls was not found. You may want to get it from *** http://www.gnutls.org/ *** I don't understand this. I already set the PKG_CONFIG_PATH to /opt/lib/pkgconfig (according to pkg-config manpage) but that doesn't work. What's the easiest way to make mod_gnutls link against GNUTLS as installed in /opt/lib? thanks, Tobias W.

2 1

5.2 to 5.4
by Jerry Geis 27 Jan '10

27 Jan '10

I am trying to update x86_64 from 5.2 to 5.4 I am trying to update glibc first (before yum -y upgrade) with the command yum update glibc glib-devel glibc-headers gives me the following: package glibc-devel needs glibc-headers = 2.5-24.el5._2.2 this, is not available package glibc-devel needs glibc = 2.5-24.el5._2.2, this is not available. am I missing something? usually this works fine. Jerry

2 1

Generating X.509 Certificates in Centos with open ssl
by Arvind P R 27 Jan '10

27 Jan '10

hi all can someone please guide me to a good howto to Generating X.509 Certificates in centos 5.4 with open ssl? i am using a windows based desktop virtualization software called vWorkspace which requires (copy/paste from vWorkspace documentation) • One or more X.509 web server certificates (depending upon configuration) • Trusted root certificate from the issuing CA installed into the Windows machine store of the SSL Gateway for certificates that have been installed on Web Access or Connection Broker servers. • Your certificate should have the same Issued To and Friendly Name. • The certificate should be an RSA (1024) certificate, not an AES certificate. • You should have a private key that corresponds to the certificate. i need the certificate for testing purposes only, so i m using openssl to generate a self signed certificate. i m not good enough with the concepts either. hence need sme help thanks in advance Arvind

2 2

Auto exit lftp on bash script
by Alan Hoffmeister 27 Jan '10

27 Jan '10

Hello again! I have this piece od code: ##################### #lftp will make the backup lftp -u user,password -e "mirror --reverse --delete --only-newer --verbose /var/bkp /test_bkp" somehost.com >> $LOGFILE # end log file date >> $LOGFILE echo "Backup Completo!" >> $LOGFILE ##################### Everything is fine, but the bash scrip dosn't complete after lftp upload all files... It hungs in: lftp user@somehost.com:~> how can I exit lftp and finish the bash? Thx!

6 9

Kerberos integration in directory server
by nimmermehr＠chello.at 27 Jan '10

27 Jan '10

> > -----Original Message----- >> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On >> Behalf Of nimmermehr at chello.at >> Sent: Tuesday, January 26, 2010 6:23 AM >> To: centos at centos.org >> Subject: [CentOS] Kerberos integration in directory server >> >> Hi, >> >> Got some issues regarding Kerberos and Directory Server and hope someone >> can help me out. >> Used these for the configiruation : >> http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-kerberos.html >> http://www.redhat.com/docs/manuals/dir-server/8.1/install/index.html >> >> Server : CentOS 5.4 with Kerberos and Directory Server installed >> Client : CentOS 5.4 >> >> I use putty to connect to the client, which authenticates against the >> server. >> Using Kerberos or LDAP worked perfectly (using system-config- >> authentication on the client for configuration) >> >> The only thing that doesn't seem to work is the kerberized version of the >> login via LDAP on the directory Server. Shouldn't I get a Kerberos ticket >> for that ? If I activate kerberos AND ldap in system-config-authentication >> it fails : >> >> Jan 25 13:24:59 monarch sshd[3947]: pam_unix(sshd:auth): check pass; user >> unknown >> Jan 25 13:24:59 monarch sshd[3947]: pam_unix(sshd:auth): authentication >> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.0.1 >> Jan 25 13:24:59 monarch sshd[3947]: pam_succeed_if(sshd:auth): error >> retrieving information about user testuser >> Jan 25 13:25:01 monarch sshd[3947]: Failed password for invalid user >> testuser from 192.168.0.1 port 1142 ssh2 >> >> I followed the instructions here : >> http://directory.fedoraproject.org/wiki/Howto:Kerberos >> >> Maybe I just didn't get it ;) >> >> Thanks in advance, >> >> Peter >> _______________________________________________ >> CentOS mailing list >> CentOS at centos.org >> http://lists.centos.org/mailman/listinfo/centos >My setup is a tad different than yours in that I integrated MIT Kerberos with OpenLDAP. While our configurations are different I'm sure >you're trying for kerberized logins (System authenticates against Kerberos and pulls account information from LDAP). If so here are >some items you may want to verify you have included in your system-auth config file. >Auth sufficient pam_krb5.so use_first_pass >Auth sufficient pam_unix.so nullok try_first_pass >Account sufficient pam_ldap.so >Account required pam_unix.so >Password sufficient pam_krb5.so >Password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authok >Session optional pam_keyinit.so revoke >Session optional pam_krb5.so >Dan Just to see if I understood it correctly : It is mandatory that every LDAP-User has a functional Kerberos-login (user and PW). Is it possible for such a user to access a server that only has ldap for authentication and checks against the LDAP-Server ? About testing : How can I check if the information is pulled out of ldap ? Thanks in advance :) Peter

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss