Discuss

discuss@lists.centos.org

34753 discussions

Laptop for CentOS-5
by James B. Byrne 11 Jan '10

11 Jan '10

I have a defective HP-Compaq nx9420 and so I am looking to replace it. I have pretty much decided to buy no further MicroSoft based products and would very much like to hear recommendations for a suitable notebook host to provide me with Linux based alternative. Given that all the basic functionality required is provided, the main thing that I am looking for is reliability of the host itself. I do a deal of traveling so physical robustness is an issue. But I also use my notebook for hours at a time, generally every day. This means that I am typically on a/c current rather than batteries and that power regulation and heat dissipation are also concerns. The power regulator circuit is in fact what I believe has failed on the nx9420. Not infrequently I have the notebook on my chest or lap while working at home. So the ventilation clearances provided by a flat desk support are frequently absent and the notebook design must accommodate this. I would like to use CentOs as this is what I am most familiar with. But, I am open to CentOS alternatives like Ubuntu or even a non-Linux alternative like a PowerMac with OS-X. I have already looked at the Dell site on the basis of a friends recommendation. While Dell mentions Ubuntu is available for some of their notebook computers they do not seem to provide any way to actually configure a system with it. So, my desires are: WANT: Robust construction Reliable quality Reasonable weight (< 2.5 kg all in) Supported sound and video reproduction of reasonable quality 15-17" lcd screen Out-of-the-box support for wireless networking Battery life > 2.0 hrs. Not MS-Windows PREFER: 64 bit core duo 2 2-4+ Gb RAM 120+ Gb HDD writable multi-mode DVD/CD drive CentOS-5+ Your system suggestions, both for hardware and OS, are most welcome. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

21 46

Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5 [SOLVED]
by Rudi Ahlers 11 Jan '10

11 Jan '10

On Mon, Jan 11, 2010 at 5:49 PM, Karanbir Singh <mail-lists(a)karan.org> wrote: > On 01/11/2010 03:17 PM, Rudi Ahlers wrote: >> Nope, there's a newer kernel installed already. I need this particular >> older one for one of the XEN domU's on this server, and don't want to >> downgrade the running kernel and reboot the server > > man yum, > > look at the --showduplicates option. you can then use the output to have > yum with specific versions eg: > > yum install <pkg>-<version> > > -- > Karanbir Singh Thanx, this is exactly what I needed :) And now I learned something new as well -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

1 0

ntpd appears to not be able to query ntp servers automatically?
by Ryan Pugatch 11 Jan '10

11 Jan '10

Hello all, After reboot, one of my servers running CentOS5 no longer keeps its clock synced automatically. ntpd is running and I don't see anything weird being logged. If I kick off ntpd with 'ntpd -q', it will sync the clock. However, if I just rely on ntpd started with 'service ntpd start', syncing does not happen. I previously had: # Undisciplined Local Clock. This is a fake driver intended for backup # and when no outside source of synchronized time is available. server 127.127.1.0 # local clock fudge 127.127.1.0 stratum 10 and noticed that ntpd would fail down to using the undisciplined local clock if I checked with ntpstat. I commented those out, and now ntpstat simply says: unsynchronised time server re-starting polling server every 64 Any idea as to why ntpd -q will sync, but otherwise the clock will not stay in sync even when the local clock drifts by several minutes? It worked fine prior to reboot. Thanks, Ryan

1 0

Securing http authentication from brute force attacks
by James B. Byrne 11 Jan '10

11 Jan '10

We have several web applications deployed under Apache that require a user id / password authentication. Some of these use htdigest and others use the application itself. Recently we have experienced several brute force attacks against some of these services which have been dealt with for the nonce by changes to iptables. However, I am not convinced that these changes are the answer. Therefore I have been looking at http protection and have run across a few independently provided modules for Apache http security, mod_security being one of them. I would like the opinion of other CentOS sysadmins who already have faced this same problem, with respect to the solutions available and those that they choose for themselves. Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Select pam module for select users
by yanagik317 11 Jan '10

11 Jan '10

Dear CentOS people, Maybe I didn't read enough, but is there a way to use pam_ldap for some users (w/o trying pam_krb5 first, which is listed before pam_ldap) and pam_krb5 for others. Thank you, --Koji

1 0

2 CPU's problem(Centos5)
by Anas Alnaffar 11 Jan '10

11 Jan '10

Dears, I hope this email finds you well and in a very good health, I've been installed Centos5 on HP DL380 G5 server(Dual Processor), but actually we are unable to see the other CPU, during boot I get this error message, Module microcode doesn't exit /proc/modules Please advise. Thanks Anas Al-Naffar Anas Al-Naffar Content Manager Tel.: +966 1 2177777 Fax: +966 1 4643 510 Mobile: +966 5 62982104 Riyadh - KSA www.tijaritelecom.com cid:image002.jpg@01C96449.3023C2D0

5 12

Problems with IPTABLES recent module.
by James B. Byrne 11 Jan '10

11 Jan '10

I went to reload (iptables-restore) my iptables configuration and obtained an error at the COMMIT statement. No further details were provided even when I ran restore with the -v option. I determined that none of my backed up configuration files going back to October will load either. This is more than passing strange because I altered and uploaded the iptables configuration on this host several times in December alone. These alterations certainly applied without error at the time. Through painful trial and error (it is a fairly large configuration) I discovered that I cannot add any rule using the __recent__ module. Adding a single rule referencing that module inevitably results in a load error reported at the following COMMIT statement. An example of an actual rule that fails follows: . . . :BRUTE_FORCE - [0:0] . . . -A BRUTE_FORCE -p tcp -m tcp -m state -m recent --set -i eth0 --dport 22 --state NEW -A BRUTE_FORCE -m comment -j RETURN --comment "Return to calling chain" COMMIT Perhaps I am missing something obvious but as far as I can determine the rule using the recent module should simply add all traffic coming in over i/f eth0 consigned to port 22 on any ip-addr to the DEFAULT list. I do not expect it to give an error. If I remove this statement then the iptables file loads without error. An interesting thing happens if I simply add a trailing -j to the end of recent module rule above. It fails with this specific error: -c packet counter not numeric Does anyone see what I am doing wrong? Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 5

apache httpd, webdav, ssl - something is wrong, but what?
by Götz Reinicke - IT-Koordinator 11 Jan '10

11 Jan '10

Hi, happy new year! Today I set up a new web(dav) server for our .ical-System (phpIcalendar) and copied the config and data files from the old server. But somthing is wrong with the configuration and I'm blind to find the error. On the old server, I can still publish my calender from e.g. Apple iCal at the server URL with http http://oldserver.filmakademie.de/DAVdocs On the new server, I can publish only with https - so only ssl secured. https://newserver.filmakademie.de/DAVdocs The webpage for the calendars can be accessed unsecured with http. http://oldserver.filmakademie.de/ http://newserver.filmakademie.de/ Thanks for any hint or support or suggestion to find the error. -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

1 0

Cloned Centos Boxes - First Run to run again?
by Mr Gabriel 11 Jan '10

11 Jan '10

I need to build a bank of 12 centos boxes, for an experiment I'm doing. I don't want to install centos 12 times, I'm using virtual box across three machines, how can I get the first run scripts to run again to that the box is reconfigured on it's next boot. I want each box to appear like a fresh unique install.

5 5

SNAT
by David Hláčik 11 Jan '10

11 Jan '10

Hello I will briefly draw the situation Router with one interface eth0 , to local network 10.123.0.0/16 on a local network ADSL modem with IP 10.123.10.11 I want to use 10.123.10.11 as a connection to internet . Because of that I have created default route "ip route add default via 10.123.10.11 dev eth0" I do not want my ADSL modem to do NATing , since it shows to be slow. I have configured static route on ADSL modem "10.123.0.0/16 via 10.123.10.11" which ensures traffic comming from internet will ge to my router. Now i want to configure NATTING. My concern is, how to create iptables rule which will match only the traffic going via 10.123.10.11 and only for this will make SNAT. If I will do iptables -A POSTROUTING -o eth0 --j SNAT --to-source 213.194.242.198 this will not work . I need to add there a magic words that only traffic going via 10.123.10.11 should be SNATted. Please help, Thank you in advance. David

3 4

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss