Discuss

discuss@lists.centos.org

34753 discussions

Start a nNew thread

Re: [CentOS] [CENTOS] allowing users to issue the "shutdown" command
by Buz Davis 20 Oct '09

20 Oct '09

Thanks to all who answered. "Poweroff" is exactly what I needed.

1 0

Fwd: [BKO] CentOS for boot.kernel.org
by Geerd-Dietger Hoffmann 19 Oct '09

19 Oct '09

Hey I would be happy to maintain such a thing but I would need someone as a backup. Cheers Didi ---------- Forwarded message ---------- From: J.H. <warthog19(a)eaglescrag.net> Date: Mon, Oct 19, 2009 at 9:51 PM Subject: Re: [BKO] CentOS for boot.kernel.org To: Geerd-Dietger Hoffmann <ribalba(a)gmail.com> Cc: bko(a)hera.kernel.org Didi, I assume you mean with respect to the live images as opposed to the network installers (since we already support CentOS as a network install target). As for the live image there's a couple of things that would need to be figured out, (1) does the live image already support iscsi out of the box and (2) does it already support httpfs out of the box. (1) is possible, (2) I'm guessing is it doesn't, and likely never will officially. If the live image doesn't already support booting off of an iscsi target than adding it should be trivial, if it doesn't than we'll have to hack into the initrd and add it. It's not a *huge* change but it means the following to the initrd: adding: - networking into the initrd - iscsid - iscsiadm - lib files for dns resolution and then it's just a few small adjustments to the init script so that it brings up the iscsi interface, and puts the image in the right place before letting it plow forward as normal. Probably the most useful, to us, is if the kernel + initrd were separate like they are for the normal pxe installs but that's not a requirement by any stretch. I suppose the question ultimately becomes, is this something the CentOS project is interested in generally providing or are we looking at specific support for BKO? Just trying to figure out if we are going to end up in the having to forward port the changes continually on new releases or if this is something that CentOS is willing to pick up and maintain. - John "Warthog9" Hawley Geerd-Dietger Hoffmann wrote: > > Hey > > I was wondering if I could help to get a CentOS image on boot.kernel > > Would be really nice to have more bistros available. > > Cheers Didi > ---- > > My www page: www.ribalba.de > Email / Jabber: ribalba(a)gmail.com > Skype : ribalba > > _______________________________________________ > BKO mailing list > BKO(a)hera.kernel.org > http://linux.kernel.org/mailman/listinfo/bko

1 0

gpg command works fine from login shell, not from cron script
by Sean Carolan 19 Oct '09

19 Oct '09

I have an odd situation here, maybe one of you can help. We have a script that runs via a cron job. It's purpose is to decrypt PGP-encrypted files in a certain directory. I have tried the command two different ways, both fail with the same error message: gpg --decrypt $file > ${file%.txt}.decrypted.txt gpg --output ${file%.txt}.decrypted.txt --decrypt $file (Don't even ask about the name substitution. The end-user insists they MUST submit files with a .txt extension, and not .pgp or .gpg) Anyway, I can run the script fine from a login shell. It works beautifully. But when it runs from a cron job two things happen: 1. A file of zero size is created called file.decrypted.txt 2. The error message in the cron email I get says: gpg: encrypted with ELG-E key, ID XXXXXXXX gpg: decryption failed: secret key not available Why does it say "secret key not available"? The output of gpg -K shows that the key is in fact available, and this is further confirmed when I run the script manually and the files are decrypted just fine.

3 5

Re: [CentOS] [OT] DHCP auth&auth software
by Antonio da Silva Martins Junior 19 Oct '09

19 Oct '09

----- "Marko Vojinovic" <vvmarko(a)gmail.com> escreveu: > Does anyone know about some free (as in beer, and maybe as in speech) > software which would implement authentication and authorization of a user prior > to issuing a valid dhcp lease? > > I imagine the following scenario: someone walks into my office > building with a laptop (a colleague, a visitor, a guest, whoever), and hooks up onto > the local net (wired or wireless). The server detects an unknown MAC address, > issues a bogus dhcp lease which resolves all dns queries to a single internal > web page with a form the user is supposed to fill in and send. After he does > so, an administrator does a sanity check of the data the user provided, and > grants or denies access. If access is granted, the user gets a new, unrestricted > dhcp lease, which provides him with a normal access to local network. > > The goal is to have a database which relates IP or MAC addresses to > people names, so I can track a person down efficiently if he brings an > infected/spamming machine into the building. > > I would know how to build this infrastructure manually, but it's a lot > of work, and I don't want to reinvent the wheel. Google somehow failed to > help, or I failed to provide the right keywords. :-( > After reading this thread I think you can try PacketFence (www.packetfence.org) and there are some others less powerfull ones on the wikipedia under the NAC topic: http://en.wikipedia.org/wiki/Network_Access_Control Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analist | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious." -- Esta mensagem foi verificada pelo sistema de antivírus e acredita-se estar livre de perigo.

1 0

apache env vars - best practices
by aurfalien＠gmail.com 19 Oct '09

19 Oct '09

I've been setting custom env vars for Apache 1 of 2 ways; 1 - Changing the passwd file so Apache has a shell and loading a custom .bashrc file. 2 - Using the SetEnv directive in my httpd.conf file. I'm crazy about neither one as they both have limitations; 1 - I don't like giving Apache its own shell. 2 - The SetEnv directive only takes 2 args so if I have a var with multiple values like a path, it won't work. What's the cleanest way to set complex env vars for Apache?

6 13

Re: Passenger Best Practice
by James B. Byrne 19 Oct '09

19 Oct '09

On Sun, 18 Oct 2009 17:13:38 +0100, Stephen Nelson-Smith <stephen(a)atalanta-systems.com> wrote: > I want to move from running puppet under it's own web brick server, > to using passenger. > > I'd like to get an idea of how folk are running passenger? Ideally > I'd like to keep everything rpm based, so would need ruby enterprise > rpms, and then the mod_rails / passenger plugin? > > How are you folk doing it? > Despite your desire for an rpm only solution, I believe that the best way to handle Passenger remains RubyGems. I have installed Enterprise Ruby and Passenger, but as far as I can recall, this still required building from source and using RubyGems to update the passenger gem. Even if an rpm solution was available, I do not consider this the preferred way to go when supporting a Ruby installation dependent upon gems. Gems are the canonical method of maintaining Ruby library extensions and it seems self-defeating to require further re-packaging. Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Still Confused about Firewalling
by ML 19 Oct '09

19 Oct '09

Hi All, Sorry, I am still confused about implementing a firewall without having my ISP static route all of my traffic to my public IP's to a single public IP. So before when I have done this for work all traffic has been statically routed. Now I have a comcast modem and it is 'pass through' so traffic for all my 13 IP's is allowed and I have to decide what to do. So I am looking at Vyatta or UnTangle. I have a machine with 3 NIC'e in it. I think one would be In, DMZ and last private. What happens? I have one cable from my comcast gateway to my firewalls NIC, but how does it answer for all IP's that I have so i can evaluate the request incoming to a rule set and decide if allowed or denied? I am missing something fundamental! Can anyone help this click in my head? Without statically routing my traffic I dont get it. Say a request comes to my webserver 172.13.167.xxx on port 80, but my firewall's IP for the card is 172.13.167.zzz how does it answer for 172.13.167.xxx? -Jason

2 1

Postfix, Milters and SELinux
by Dirk H. Schulz 19 Oct '09

19 Oct '09

Hi folks, I want to run Postfix with external milter application on a CentOS 5.3 mailgateway. At the moment SELinux is preventing postfix' cleanup daemon from accessing sockets. Before I to through the process of audit2allow trial and error - has anybody out there successfully gone though this and can send me a policy I can work with? Any hint or help is appreciated. Dirk

1 0

update of openssh-server i386 4.3p2-36.el5, dependencies
by zagiatakrapovic＠gmx.ch 19 Oct '09

19 Oct '09

so far: - not a yum bug - not a configuration issue - other persons could reproduce this behaviour even under RHEL right? so this backport is actually broken or let's say the guy who did this, improved encryptFS-utils that much, it uses now X11 libraries even if it actually has no GUI... still right? ok, so now what is the next step? There is a ticket for this issue but it is reported as a yum bug (see my last post). we all just wait until somebody kicks some #$!@ of the responsible code monkeys? -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/atbrowser

2 1

Re: [CentOS] Backing up a centos serveR? how to ? Newbie question..
by Per Qvindesland 19 Oct '09

19 Oct '09

A really good place to find out info about the various raid levels and what their good for is here: http://www.acnc.com/04_01_00.html But please don't confuse raid with something like Bacula :) Regards Per At Monday, 19-10-2009 on 16:28 "Bobby" wrote: On Monday 19 October 2009 08:56:48 RedShift wrote: > David Suhendrik wrote: > > may be rsync help You > > Or u can try raid 0[mirrorig] > > for replicate failover triying drbd and heartbeat but I've tested and > > unsuccessfull on my zimbra machines > > RAID IS NOT A BACKUP. > > I repeat. > > RAID IS NOT A BACKUP. > > Nor is replication. Exactly. RAID above RAID 0 does provide redundancy towards hard disk errors. It makes the system more robust. But the data is still in the same set of drives. Backup, as with scp, rsync and cron to a different computer is what you need. We backup our computers every hour with the above. It's very low impact and all we can loose are some changes in the last two hours if the system dies during rsync. David, RAID 0 is not mirroring. What it does is extend capacity over two or more drives. RAID 1 is mirroring. Bobby _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss