Discuss

discuss@lists.centos.org

34753 discussions

LSI SAS snmp agent
by Joseph L. Casale 06 Nov '09

06 Nov '09

Anyone set this up in CentOS? Can you shed some light on the requirements, does it require the LSI module, or does the rhel provided module work just fine? Thanks! jlc

3 4

Certificates Revocation Lists and Apache...
by John Doe 06 Nov '09

06 Nov '09

Hi, already asked in the openssl mailing list, but just in case you already went through this... I need a little help with Certificate Revocation Lists. I did setup client certificates filtering with apache and it seem to work fine so far (used a tutorial on http://www.adone.info/?p=4, down right now). I have a "CA" that is signing a "CA SSL". Then, the "CA SSL" is signing the clients certificates. Now, I am testing Certificate Revocation Lists, but apache keeps saying: "Invalid signature on CRL" I used: $ openssl ca -config openssl.conf -name CA_ssl_default -revoke cassl/$CLIENTNAME.pem Using configuration from openssl.conf Enter pass phrase for cassl/private/cassl.key: Revoking Certificate 02. Data Base Updated $ openssl ca -config openssl.conf -name CA_ssl_default -gencrl -out cassl/crl.pem -crldays 365 Using configuration from openssl.conf Enter pass phrase for /root/Certifs/cassl/private/cassl.key: $ # cat cassl/crl.pem -----BEGIN X509 CRL----- MIIB... ... ...v40= -----END X509 CRL----- In apache logs, when the CRL file is activated in the conf: [debug] ssl_engine_init.c(538): Configuring client authentication [debug] ssl_engine_init.c(1113): CA certificate: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain [debug] ssl_engine_init.c(601): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW] [debug] ssl_engine_init.c(626): Configuring certificate revocation facility [debug] ssl_engine_init.c(729): Configuring RSA server certificate [debug] ssl_engine_init.c(768): Configuring RSA server private key When I try to connect with a revoked (or unrevoked) certificate, I get: [debug] ssl_engine_kernel.c(1199): Certificate Verification: depth: 2, subject: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain, issuer: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain [debug] ssl_engine_kernel.c(1391): CA CRL: Issuer: C=AA, ST=BB, L=CC, O=DD, CN=myhost.mydomain, lastUpdate: Nov 4 14:39:36 2009 GMT, nextUpdate: Nov 4 14:39:36 2010 GMT [warn] Invalid signature on CRL [error] Certificate Verification: Error (8): CRL signature failure [debug] ssl_engine_kernel.c(1779): OpenSSL: Write: SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [info] [client 192.168.16.23] SSL library error 1 in handshake (server myhost.mydomain:12345) [info] SSL Library Error: 67567722 error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 [info] SSL Library Error: 67530866 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed [info] SSL Library Error: 218910726 error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib [info] SSL Library Error: 336105650 error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned [info] [client 192.168.16.23] Connection closed to child 0 with abortive shutdown (server myhost.mydomain:12345) Also, at one point, I got a "data too large": [warn] Invalid signature on CRL [error] Certificate Verification: Error (8): CRL signature failure [debug] ssl_engine_kernel.c(1779): OpenSSL: Write: SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [info] [client 192.168.16.23] SSL library error 1 in handshake (server myhost.mydomain:12345) [info] SSL Library Error: 67530884 error:04067084:rsa routines:RSA_EAY_PUBLIC_DECRYPT:data too large for modulus [info] SSL Library Error: 218910726 error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib [info] SSL Library Error: 336105650 error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned [info] [client 192.168.16.23] Connection closed to child 0 with abortive shutdown (server myhost.mydomain:12345) I reduced my CA and CASSL keys from 2048 down to 1024... not sure if it helped, but I don't have this error anymore... How can I check if the crl.pem file is ok? $ openssl crl -in cassl/crl.pem -text Certificate Revocation List (CRL): Version 1 (0x0) Signature Algorithm: sha1WithRSAEncryption Issuer: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain Last Update: Nov 4 14:39:36 2009 GMT Next Update: Nov 4 14:39:36 2010 GMT Revoked Certificates: Serial Number: 02 Revocation Date: Nov 4 14:37:03 2009 GMT Signature Algorithm: sha1WithRSAEncryption 03:... ... ...:8d -----BEGIN X509 CRL----- MIIB... ... ...v40= -----END X509 CRL----- I also tried all sorts of verify combos, but all fail: $ openssl verify -verbose -config openssl.conf -purpose crlsign -crl_check cassl/crl.pem usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ... $ openssl verify -verbose -CApath cassl/ -purpose crlsign -crl_check cassl/crl.pem unable to load certificate 9605:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE $ openssl verify -verbose -CAfile cassl/cassl.pem -purpose crlsign -crl_check cassl/crl.pem unable to load certificate 9606:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE Any idea what I am doing wrong? Thx, JD

3 7

INSTALL ADDITIONAL PACKAGES FROM DVD
by Krishna Chandra Prajapati 06 Nov '09

06 Nov '09

Hi experts, I have install centos 5.4 on my laptop(compaq 510). It's very nice. Now i want to install some additional package using dvd. Sound is also not working. Please help me to fix the installation and sound issue. Thanks, Krishna

3 3

MySQL error 28, can't write temp files - how to debug?
by Rudi Ahlers 06 Nov '09

06 Nov '09

Hi all, I hope someone can help with this one. On one of our VPS's we have a fairly large MySQL database, which gives me the following error when running some queries against it: An error occured!Can't execute statement: Error writing file '/tmp/MYL4qeT5' (Errcode: 28) SQL: , , select * from tips order by rand() limit 0, 1 , According to google search, errorcode 28 means the HDD is full. But it isn't: root@vps:[~]$ df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 84G 18G 62G 23% / none 640M 0 640M 0% /dev/shm /usr/tmpDSK 485M 11M 449M 3% /tmp What else could cause this kind of problem? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 2

CentOS Social, London, UK : 10 Nov 2009
by Karanbir Singh 06 Nov '09

06 Nov '09

Hi Guys, Some of us are yet-again going to be getting together for a CentOS Beer evening on the 10th Nov 2009 at the Kings and Queens. The Pub is mostly quiet during the week, has a fair selection of drinks and is central enough to most people in the city. The full address is : King & Queens, 1 Foley St, London, W1W 6DL‎ Here is a Google Street view of the place http://bit.ly/1PchSO We should be there from about 6:30pm onwards. And depending on how people feel about it, will move around the corner to Ragham, for some food around 9pm. When you get there, keep an eye out for people in CentOS T-Shirts/ Shirts. There is no real agenda except focus on beer and the food! However, you are welcome to bring laptops around and show off any cool stuff you've been working on ( iirc, there is no internet at the pub though ). -- Karanbir Singh London, UK | http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 | Yahoo IM: z00dax | Gtalk: z00dax GnuPG Key : http://www.karan.org/publickey.asc

2 1

No driver to Intel
by eduardo cruz 06 Nov '09

06 Nov '09

I have a server hp proliant dl160g6 and i'm installing debian 5 but the network interface dosn't have support, anyone could help me, my netword card is broadcom netxtreme gigabit Intel 82576. -- ~~---~---~ Saludos, Eduardo Cruz Ramirez Departamento de Investigación y Desarrollo Grupo Phoenix – Desarrollo, Soporte y Asesoría ~ Visítanos en: http://www.grupo-phoenix.com ~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~ Cell #: +593-8 5570182 Phone #: +593-4 2342207 Skype Account: eduardo.cruz.ramirez Gmail Account: ecfenix(a)gmail.com MSN Account: eduardocruz888(a)hotmail.com

3 2

Re: [CentOS] MySQL error 28, can't write temp files - how to debug? [SOLVED]
by Rudi Ahlers 05 Nov '09

05 Nov '09

On Thu, Nov 5, 2009 at 11:47 PM, Alan Hodgson <ahodgson(a)simkin.ca> wrote: > On Thursday 05 November 2009, Rudi Ahlers <Rudi(a)softdux.com> wrote: >> According to google search, errorcode 28 means the HDD is full. But it >> isn't: >> >> >> root@vps:[~]$ df -h >> Filesystem Size Used Avail Use% Mounted on >> /dev/sda1 84G 18G 62G 23% / >> none 640M 0 640M 0% /dev/shm >> /usr/tmpDSK 485M 11M 449M 3% /tmp >> >> >> What else could cause this kind of problem? > > You only have 449MB free on /tmp. It could easily fill that up during the > query, and then delete the file before you run df again. Run it while the > query is executing, I bet you see /tmp filling up. > > -- > "No animals were harmed in the recording of this episode. We tried but that > damn monkey was just too fast." > _______________________________________________ Thanx, that seems to have solved the problem. I didn't think of checking to see if the tmp folder got full during the SQL statement execution. So, by increasing it to 1GB, the problem is solved -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

2 4

Who's eating our bandwidth?
by Niki Kovacs 05 Nov '09

05 Nov '09

Hi, I've recently setup a new server for our public libraries. For the last two years, this has been my first "big" job, since it involves networking eleven small to medium size public libraries. There was a hiccup some time ago when the administration hiring me wanted to do it on their own, but it took them less than two weeks to get the server hacked and lose everything. So they decided to hire me back :o) I've rented a little dedicated server at the french provider Ikoula. Really a small thing, a KVM amounting to 1/2 a processor core, 512 MB RAM and 25 GB of disk space. Usually there should be no more than like ten people working simultaneously on the library management software (running atop MySQL). For the last few days, users reported that the install was "terribly slow". I checked, and indeed, the application took quite some time to respond. First thing, I wonder if the configuration I chose is too modest for the setup. Then, I took a peek in /var/log/httpd and the *-access.log files show quite some activity. Some haphazard whois on various IP addresses show me that these are no library users from around here. Like: Bogota?!? Peking?!? And quite some search engines. Since I don't need search engines for our application, I'm going to have to find a way to banish these. The log files are not very handy to decipher, so I googled a bit, and I think today I'm going to check out AWStats, which seems to be the right thing to use in that case. I'm also wondering about activity on other ports, but here also I'm taking stabs in the dark. Probably SSH, but I don't know where eventual failed attempts get logged. I also googled a bit, and I think in this domain, fail2ban will be my next experiment. I have this strange feeling that the next step in the "wise" direction consists in describing my ignorance :o) Any suggestions? Cheers from the sunny south of France, Niki

8 8

MySQL installation problem
by Victor Subervi 05 Nov '09

05 Nov '09

Hi; It's been a while since I controlled my own server and I'm rusty. Trying to install mysql yum install mysql All looks well. Here's what happens: [root@13gems www]# mysql ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) [root@13gems www]# mysql -u root -p Enter password: ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) There's no mysqld in the ps wax. Please advise. beno

8 13

Real world report for the Newsletter
by Geerd-Dietger Hoffmann 05 Nov '09

05 Nov '09

Hey The last "Newsletter survey" found that many people are interested in how CentOS is used and what people do with it, I would like to invite anyone who has some spare time or has something to share to write a little article about how they are using CentOS. I suppose interesting stuff would be how many machines, how you manage them, what programs you use, stuff that has happened and stopped production (even funny stuff of the likes of "rat in fuse") and pretty much what ever you want. If you don't want personal data appearing for security reasons we can work something out so that your server safety is not affected. Cheers and thanks for the help. Didi ---- My www page: www.ribalba.de Email / Jabber: ribalba(a)gmail.com Skype : ribalba

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss