Discuss

discuss@lists.centos.org

34758 discussions

Don't have scaling_available_frequencies files
by Neil Aggarwal 20 Oct '09

20 Oct '09

Hello all: I am trying to follow the RHEL virtualization guide. According to Chapter 17, I have a processor without a constant Time Stamp Counter (Its an Opteron). According to that guide, I need to set the MIN_SPEED and MAX_SPEED variables in /etc/sysconfig/cpuspeed to the highest frequency show in /sys/devices/system/cpu/cpu*/cpufreq/scaling_available_frequencies I took a look at my system (CentOS 5.4) and there are no cpufreq directories in the cpu folders. Is that a problem? Thanks, Neil -- Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com Will your e-commerce site go offline if you have a DB server failure, fiber cut, flood, fire, or other disaster? If so, ask about our geographically redundant database system.

2 2

update of openssh-server i386 4.3p2-36.el5, dependencies
by zagiatakrapovic＠gmx.ch 20 Oct '09

20 Oct '09

more rant on @ChrisG: maybe you should check your ironyEnabled flag is set to TRUE and the personalSensitivity enum is not WALLFLOWER but SELFCONFIDENT thx for your advises and lessons, the best lesson for me now was to see that trying to refresh a stalled thread by using kind of humor isn't accepted in this part of the world. next time I will just try "PING", that's less human like but maybe less people get offended... more rant off -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser

1 0

sum and limit quota for multiple filesystems/mountpoints
by Götz Reinicke - IT-Koordinator 20 Oct '09

20 Oct '09

Hi, is there any way to sum and limit quotas for one user across multiple filesystems? E.g. I'd like to use different mountpoints on a mailserver for /var/mail and /home but the user should have only a total of 1GB. or on a samba server the windows profile files should be on an other filesystem as other files for that user. Regards, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

2 1

RAID advice? and KVM advice?
by Dave Stevens 20 Oct '09

20 Oct '09

Hello All, In the not too distant future I will be commissioning a new CentOS (5.4?) box with 4 identical SATA drives. I'd like to set them up as RAID 1+0 for speed and redundancy. I've read the RHEL 5 deployment guide on raid setup and it seems to cover the basics of software raid pretty well, but doesn't cover 1+0. Does anyone have a reference for that kind of configuration? I'd also like to have two virtual domains, one for CentOS and one for Debian. any suggestions for setup docs for that kind of arrangement? TIA. Dave -- When addiction becomes commonplace in a society, people become addicted not only to alcohol and drugs, but to a thousand other destructive pursuits: money, power, dysfunctional relationships, or video games. A social perspective on addiction does not deny individual differences in vulnerability to addiction, but it removes them from the foreground of attention, because social determinants are more powerful.

4 3

Re: [CentOS] iptables - Forwarding with port translation thru an OpenVPN tunnel
by Chuck Munro 19 Oct '09

19 Oct '09

Thanks to those who responded. The use of Apache's reverse proxy was something I would never have though of (it's the mind-numbing cold medication I'm on, LOL) However, I did manage to get things rolling thru the tunnel by configuring strong-end routing at the remote server. Requests were indeed arriving at the remote, but because the request's origin IP address was that of the outside user's browser, the remote server was simply trying to return responses via its default route, which is not the tunnel. I *have* to ask ... why is strong-end routing not the default behavior in Linux? Anyway ... Adding 'ip route ....' and 'ip rule ....' commands when establishing the tunnel did the trick. On the remote server, here are the commands run in a script launched by rc.local: --------------------------- #!/bin/sh # NOTE: To allow VPNs under OpenVPN, IPv4 Forwarding # must be enabled in the /etc/sysctl.conf file! # Enable NAT for the OpenVPN tunnel from the main server: WAN=eth0 # The primary public IP interface iptables -t nat -A POSTROUTING -s 172.17.xxx.0/24 -o ${WAN} -j MASQUERADE # Enable strong-end routing for traffic coming in thru the VPN tunnel: ## Table 200 - In/Out traffic via tun0: ip route add table 200 172.17.xxx.0/24 via 172.17.xxx.yy dev tun0 ip route add table 200 default via 172.17.xxx.yy dev tun0 ## Engage! ... ip rule add from 172.17.xxx.0/24 lookup 200 service openvpn start --------------------------- In the example above, xxx.yy is tun0's 'P-t-P' IP address (usually it's inet IP address minus 1). -- and -- On the main server, here are the commands run in a script launched by rc.local: --------------------------- #!/bin/sh # NOTE: To allow VPNs under OpenVPN, IPv4 Forwarding # must be enabled in the /etc/sysctl.conf file! # Enable NAT for the OpenVPN tunnels: WAN=eth0 # the public IP interface /sbin/iptables -t nat -A POSTROUTING -s 172.17.xxx.0/24 -o ${WAN} -j MASQUERADE TunnelRemoteIP="172.17.xxx.zz" # The inet IP address of the remote server thru the VPN. # Force any HTTP/HTTPS requests on eth0:1's secondary IP address (64.aaa.bbb.ccc) # to be forwarded to the remote server, with port translation. # HTTP: /sbin/iptables -t nat -A PREROUTING -i eth0 -d 64.aaa.bbb.ccc -p tcp --dport 80 -j DNAT --to ${TunnelRemoteIP}:29080 /sbin/iptables -A FORWARD -p tcp -m tcp -i eth0 -o tun0 -d ${TunnelRemoteIP} --dport 29080 -j ACCEPT # # HTTPS: /sbin/iptables -A PREROUTING -t nat -i eth0 -d 64.aaa.bbb.ccc -p tcp --dport 443 -j DNAT --to ${TunnelRemoteIP}:29443 /sbin/iptables -A FORWARD -p tcp -m tcp -i eth0 -o tun0 -d ${TunnelRemoteIP} --dport 29443 -j ACCEPT service openvpn start sleep 2 # Be polite. /sbin/iptables -A FORWARD -p tcp -m tcp --dport 80 -j ACCEPT /sbin/iptables -A FORWARD -p tcp -m tcp --dport 443 -j ACCEPT --------------------------- Obviously the above iptables entries could simply be added to the recipe in /etc/sysconfig/iptables, but I chose to put them in this script so that if I don't want tunnels to be started I don't run the scripts. There may be redundant commands in all of this, but at least it works flawlessly for me. I didn't use any SNAT statements on the rash assumption POSTROUTING does the same thing. I hope this may be useful to anyone else out there who encounters this issue. Cheers, Chuck

1 0

Re: [CentOS] [CENTOS] allowing users to issue the "shutdown" command
by Buz Davis 19 Oct '09

19 Oct '09

Thanks to all who answered. "Poweroff" is exactly what I needed.

1 0

Fwd: [BKO] CentOS for boot.kernel.org
by Geerd-Dietger Hoffmann 19 Oct '09

19 Oct '09

Hey I would be happy to maintain such a thing but I would need someone as a backup. Cheers Didi ---------- Forwarded message ---------- From: J.H. <warthog19(a)eaglescrag.net> Date: Mon, Oct 19, 2009 at 9:51 PM Subject: Re: [BKO] CentOS for boot.kernel.org To: Geerd-Dietger Hoffmann <ribalba(a)gmail.com> Cc: bko(a)hera.kernel.org Didi, I assume you mean with respect to the live images as opposed to the network installers (since we already support CentOS as a network install target). As for the live image there's a couple of things that would need to be figured out, (1) does the live image already support iscsi out of the box and (2) does it already support httpfs out of the box. (1) is possible, (2) I'm guessing is it doesn't, and likely never will officially. If the live image doesn't already support booting off of an iscsi target than adding it should be trivial, if it doesn't than we'll have to hack into the initrd and add it. It's not a *huge* change but it means the following to the initrd: adding: - networking into the initrd - iscsid - iscsiadm - lib files for dns resolution and then it's just a few small adjustments to the init script so that it brings up the iscsi interface, and puts the image in the right place before letting it plow forward as normal. Probably the most useful, to us, is if the kernel + initrd were separate like they are for the normal pxe installs but that's not a requirement by any stretch. I suppose the question ultimately becomes, is this something the CentOS project is interested in generally providing or are we looking at specific support for BKO? Just trying to figure out if we are going to end up in the having to forward port the changes continually on new releases or if this is something that CentOS is willing to pick up and maintain. - John "Warthog9" Hawley Geerd-Dietger Hoffmann wrote: > > Hey > > I was wondering if I could help to get a CentOS image on boot.kernel > > Would be really nice to have more bistros available. > > Cheers Didi > ---- > > My www page: www.ribalba.de > Email / Jabber: ribalba(a)gmail.com > Skype : ribalba > > _______________________________________________ > BKO mailing list > BKO(a)hera.kernel.org > http://linux.kernel.org/mailman/listinfo/bko

1 0

gpg command works fine from login shell, not from cron script
by Sean Carolan 19 Oct '09

19 Oct '09

I have an odd situation here, maybe one of you can help. We have a script that runs via a cron job. It's purpose is to decrypt PGP-encrypted files in a certain directory. I have tried the command two different ways, both fail with the same error message: gpg --decrypt $file > ${file%.txt}.decrypted.txt gpg --output ${file%.txt}.decrypted.txt --decrypt $file (Don't even ask about the name substitution. The end-user insists they MUST submit files with a .txt extension, and not .pgp or .gpg) Anyway, I can run the script fine from a login shell. It works beautifully. But when it runs from a cron job two things happen: 1. A file of zero size is created called file.decrypted.txt 2. The error message in the cron email I get says: gpg: encrypted with ELG-E key, ID XXXXXXXX gpg: decryption failed: secret key not available Why does it say "secret key not available"? The output of gpg -K shows that the key is in fact available, and this is further confirmed when I run the script manually and the files are decrypted just fine.

3 5

Re: [CentOS] [OT] DHCP auth&auth software
by Antonio da Silva Martins Junior 19 Oct '09

19 Oct '09

----- "Marko Vojinovic" <vvmarko(a)gmail.com> escreveu: > Does anyone know about some free (as in beer, and maybe as in speech) > software which would implement authentication and authorization of a user prior > to issuing a valid dhcp lease? > > I imagine the following scenario: someone walks into my office > building with a laptop (a colleague, a visitor, a guest, whoever), and hooks up onto > the local net (wired or wireless). The server detects an unknown MAC address, > issues a bogus dhcp lease which resolves all dns queries to a single internal > web page with a form the user is supposed to fill in and send. After he does > so, an administrator does a sanity check of the data the user provided, and > grants or denies access. If access is granted, the user gets a new, unrestricted > dhcp lease, which provides him with a normal access to local network. > > The goal is to have a database which relates IP or MAC addresses to > people names, so I can track a person down efficiently if he brings an > infected/spamming machine into the building. > > I would know how to build this infrastructure manually, but it's a lot > of work, and I don't want to reinvent the wheel. Google somehow failed to > help, or I failed to provide the right keywords. :-( > After reading this thread I think you can try PacketFence (www.packetfence.org) and there are some others less powerfull ones on the wikipedia under the NAC topic: http://en.wikipedia.org/wiki/Network_Access_Control Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analist | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious." -- Esta mensagem foi verificada pelo sistema de antivírus e acredita-se estar livre de perigo.

1 0

apache env vars - best practices
by aurfalien＠gmail.com 19 Oct '09

19 Oct '09

I've been setting custom env vars for Apache 1 of 2 ways; 1 - Changing the passwd file so Apache has a shell and loading a custom .bashrc file. 2 - Using the SetEnv directive in my httpd.conf file. I'm crazy about neither one as they both have limitations; 1 - I don't like giving Apache its own shell. 2 - The SetEnv directive only takes 2 args so if I have a var with multiple values like a path, it won't work. What's the cleanest way to set complex env vars for Apache?

6 13

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss