Discuss

discuss@lists.centos.org

34758 discussions

CentOS VPN server for iPhone
by Florin Andrei 28 Mar '09

28 Mar '09

So far, OpenVPN has been working very well for me. Unfortunately, the iPhone doesn't have (yet?) an OpenVPN client, so I'm forced to work with what's available. The options are: L2TP, PPTP and IPSec. If you were to install a VPN endpoint on CentOS, which protocol would you prefer? The condition is to avoid shabby VPN servers that make the system less secure. I've seen some PPTP servers for Linux in the past but I was not impressed with their security track record. I'm not necessarily talking about crypto, I'm talking about the way the application is written. Another condition is ease of installation. I will compile from source if I have no other choice, but I'd rather avoid wasting time with that, as I'm quite busy with non-tech things nowadays. If the application is in a repo somewhere, that would be perfect. Thanks! -- Florin Andrei http://florin.myip.org/

8 14

Server Hang
by Care India 28 Mar '09

28 Mar '09

I have Cent OS 5.1 I also have http://phpsysinfo.sourceforge.net/ I have asterisk running . Now when I look at System Information , I see that "Physical Memory" keep increasing and at one point it reaches 96%. Then my sever get hang and then I have to restart it. I have 4 GB RAM. Processors 2 Model Intel(R) Core(TM)2 Duo CPU E7200 @ 2.53GHz CPU Speed 2.53 GHz Cache Size 3.00 MB System Bogomips 10135.71 Kernel Version 2.6.18-53.el5 (SMP) Distro Name CentOS release 5 (Final) Load Averages 0.27 0.35 0.31 What could be the reason ? ps ax shows : PID TTY STAT TIME COMMAND 1 ? Ss 0:00 init [3] 2 ? S 0:00 [migration/0] 3 ? SN 0:00 [ksoftirqd/0] 4 ? S 0:00 [watchdog/0] 5 ? S 0:00 [migration/1] 6 ? SN 0:00 [ksoftirqd/1] 7 ? S 0:00 [watchdog/1] 8 ? S< 0:00 [events/0] 9 ? S< 0:00 [events/1] 10 ? S< 0:00 [khelper] 11 ? S< 0:00 [kthread] 15 ? R< 0:00 [kblockd/0] 16 ? S< 0:00 [kblockd/1] 17 ? S< 0:00 [kacpid] 109 ? S< 0:00 [cqueue/0] 110 ? S< 0:00 [cqueue/1] 113 ? S< 0:00 [khubd] 115 ? S< 0:00 [kseriod] 182 ? S 0:00 [pdflush] 183 ? S 0:00 [pdflush] 184 ? S< 0:00 [kswapd0] 185 ? S< 0:00 [aio/0] 186 ? S< 0:00 [aio/1] 338 ? S< 0:00 [kpsmoused] 370 ? S< 0:00 [ata/0] 371 ? S< 0:00 [ata/1] 372 ? S< 0:00 [ata_aux] 376 ? S< 0:00 [scsi_eh_0] 377 ? S< 0:00 [scsi_eh_1] 378 ? D< 0:00 [kjournald] 405 ? S< 0:00 [kauditd] 439 ? S<s 0:00 /sbin/udevd -d 1374 ? S< 0:00 [kmpathd/0] 1375 ? S< 0:00 [kmpathd/1] 1405 ? S< 0:00 [kjournald] 1967 ? Ss 0:00 syslogd -m 0 1970 ? Ss 0:00 klogd -x 2021 ? Ss 0:00 portmap 2046 ? Ss 0:00 rpc.statd 2062 ? Ss 0:00 dbus-daemon --system 2103 ? Ss 0:00 /usr/sbin/acpid 2130 ? Ss 0:00 /usr/sbin/sshd 2219 ? S 0:00 /bin/sh /usr/bin/mysqld_safe --defaults-file=/etc/my. 2255 ? Sl 0:01 /usr/libexec/mysqld --defaults-file=/etc/my.cnf --bas 2294 ? Ss 0:00 sendmail: accepting connections 2302 ? Ss 0:00 sendmail: Queue runner@01:00:00 for /var/spool/client 2320 ? Ss 0:00 /usr/sbin/httpd 2335 ? Ss 0:00 crond 2364 ? Ss 0:00 /usr/sbin/atd 2379 ? Ss 0:00 hald 2380 ? S 0:00 hald-runner 2387 ? S 0:00 /usr/sbin/httpd 2388 ? S 0:00 /usr/sbin/httpd 2389 ? S 0:00 /usr/sbin/httpd 2390 ? S 0:00 /usr/sbin/httpd 2391 ? S 0:00 /usr/sbin/httpd 2392 ? S 0:00 hald-addon-acpi: listening on acpid socket /var/run/a 2393 ? S 0:00 /usr/sbin/httpd 2394 ? S 0:00 /usr/sbin/httpd 2396 ? S 0:00 /usr/sbin/httpd 2397 ? S 0:00 /usr/libexec/hald-addon-cpufreq 2402 ? S 0:00 hald-addon-keyboard: listening on /dev/input/event0 2630 ? Ss 0:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf 2746 ? Ss 0:00 /usr/bin/SCREEN -L -d -m -S asterisk /usr/sbin/asteri 2747 pts/0 Ssl+ 0:01 /usr/sbin/asterisk -vvvvvvvvvvvvvvvvvvvvvgc 2801 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTupdate /usr/share/astguic 2803 pts/1 Ss+ 0:01 /usr/bin/perl /usr/share/astguiclient/AST_update.pl 2804 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTsend /usr/share/astguicli 2805 pts/2 Ss+ 0:00 /usr/bin/perl /usr/share/astguiclient/AST_manager_sen 2807 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTlisten /usr/share/astguic 2808 pts/3 Ss+ 0:00 /usr/bin/perl /usr/share/astguiclient/AST_manager_lis 2810 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTVDauto /usr/share/astguic 2811 pts/4 Ss+ 0:00 /usr/bin/perl /usr/share/astguiclient/AST_VDauto_dial 2813 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTVDremote /usr/share/astgu 2815 pts/5 Ss+ 0:00 /usr/bin/perl /usr/share/astguiclient/AST_VDremote_ag 2816 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTVDadapt /usr/share/astgui 2818 pts/6 Ss+ 0:00 /usr/bin/perl /usr/share/astguiclient/AST_VDadapt.pl 2819 ? Ss 0:00 /usr/bin/SCREEN -d -m -S ASTfastlog /usr/share/astgui 2820 pts/7 Ss+ 0:00 /usr/bin/perl /usr/share/astguiclient/FastAGI_log.pl 2828 ? S 0:00 ip_relay 40569 127.0.0.1 4569 9999999 2829 ? S 0:00 ip_relay 41569 127.0.0.1 4569 9999999 2836 pts/7 S+ 0:00 /usr/bin/perl /usr/share/astguiclient/FastAGI_log.pl 2837 pts/7 S+ 0:00 /usr/bin/perl /usr/share/astguiclient/FastAGI_log.pl 2838 pts/7 S+ 0:00 /usr/bin/perl /usr/share/astguiclient/FastAGI_log.pl 2839 pts/7 S+ 0:00 /usr/bin/perl /usr/share/astguiclient/FastAGI_log.pl 2840 pts/7 S+ 0:00 /usr/bin/perl /usr/share/astguiclient/FastAGI_log.pl 2869 ? S 0:00 /usr/sbin/smartd -q never 2875 ? Ss 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/we 2880 tty1 Ss+ 0:00 /sbin/mingetty tty1 2883 tty2 Ss+ 0:00 /sbin/mingetty tty2 2884 tty3 Ss+ 0:00 /sbin/mingetty tty3 2885 tty4 Ss+ 0:00 /sbin/mingetty tty4 2886 tty5 Ss+ 0:00 /sbin/mingetty tty5 2887 tty6 Ss+ 0:00 /sbin/mingetty tty6 3040 ? S 0:00 crond 3047 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 3072 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 3191 ? S 0:00 crond 3199 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 3212 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 3699 ? S 0:00 crond 3705 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 3718 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 4090 ? S 0:00 crond 4096 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 4112 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 5027 ? S 0:00 crond 5030 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 5049 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 5572 ? S 0:00 crond 5578 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 5592 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 6982 ? S 0:00 crond 6988 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 7012 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 7782 ? S 0:00 crond 7787 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 7810 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 9586 ? S 0:00 crond 9594 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 9623 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 10562 ? S 0:00 crond 10564 ? S 0:00 crond 10568 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_CRON_audio_ 10569 ? Ss 0:00 /usr/bin/perl /usr/share/astguiclient/AST_manager_kil 10597 ? S 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 10988 ? Ss 0:00 sshd: root@pts/8 11045 pts/8 Ss 0:00 -bash 11355 pts/8 R+ 0:00 ps ax I used VicidialNOW CD which comes with integrated CentOS and Asterisk. 1) If I upgrade kernel , wont it break the functionality of any files ? 2) If it wotn break, then how to upgrade ?

3 3

Re: [CentOS] Welcome to the "CentOS" mailing list (Digest mode)
by zhangrichard 28 Mar '09

28 Mar '09

> Subject: Welcome to the "CentOS" mailing list (Digest mode) > From: centos-request(a)centos.org > To: gzpowerchess(a)hotmail.com > Date: Fri, 27 Mar 2009 03:09:42 -0400 > > Welcome to the CentOS(a)centos.org mailing list! > > To post to this list, send your email to: > > centos(a)centos.org > > General information about the mailing list is at: > > http://lists.centos.org/mailman/listinfo/centos > > If you ever want to unsubscribe or change your options (eg, switch to > or from digest mode, change your password, etc.), visit your > subscription page at: > > http://lists.centos.org/mailman/options/centos/gzpowerchess%40hotmail.com > > > You can also make such adjustments via email by sending a message to: > > CentOS-request(a)centos.org > > with the word `help' in the subject or body (don't include the > quotes), and you will get back a message with instructions. > > You must know your password to change your options (including changing > the password, itself) or to unsubscribe. It is: > > 56180284 > > Normally, Mailman will remind you of your centos.org mailing list > passwords once every month, although you can disable this if you > prefer. This reminder will also include instructions on how to > unsubscribe or change your account options. There is also a button on > your options page that will email your current password to you. _________________________________________________________________ 上Windows Live 中国首页，下载最新版 MSN！ http://im.live.cn/

3 2

Cannot get CentOS to install
by Michael Peterson 27 Mar '09

27 Mar '09

I used google but did not come up with anything current to solve my problem. I have not tried any other search engines yet. There is not a search for the CentOS list so I am creating a new post. I have tested the CentOS 5.2 and RHEL 5.3 CD's and they passed. I had to use linux mediacheck ide=nodma to get them to pass. The newest releases seem to most times fail with just linux mediacheck. I have tried linux ide=nodma and linux text ide=nodma after trying linux and linux text Anaconda fails on both CentOS 5.2 and RHEL 5.3 in all cases. The system I am trying to install on is running CentOS 3.x. The hardware is P4 2.8 CPU, 512 MB RAM, 120GB 3ware IDE/PATA RAID HD, ATI Video, CDRW CD, Dual Nic, Floppy and IDE/PATA Tape drive. Please provide any options to the kernel that I should try besides the ones mentioned above that fail.

13 24

CentOS-announce Digest, Vol 49, Issue 11
by centos-announce-request＠centos.org 27 Mar '09

27 Mar '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:0362 Moderate CentOS 4 ia64 NetworkManager - security update (Pasi Pirhonen) 2. CESA-2009:0295 Moderate CentOS 3 ia64 net-snmp - security update (Pasi Pirhonen) 3. CESA-2009:0373 Moderate CentOS 4 ia64 systemtap - security update (Pasi Pirhonen) 4. CESA-2009:0295 Moderate CentOS 3 i386 net-snmp - security update (Tru Huynh) 5. CESA-2009:0295 Moderate CentOS 3 x86_64 net-snmp - security update (Tru Huynh) 6. CESA-2009:0373 Moderate CentOS 4 s390(x) systemtap - security update (Pasi Pirhonen) 7. CESA-2009:0295 Moderate CentOS 3 s390(x) net-snmp - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Thu, 26 Mar 2009 19:13:41 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2009:0362 Moderate CentOS 4 ia64 NetworkManager - security update To: centos-announce(a)centos.org Message-ID: <20090326171340.GA1337(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2009:0362 https://rhn.redhat.com/errata/RHSA-2009-0362.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/NetworkManager-0.3.1-5.el4.ia64.rpm updates/ia64/RPMS/NetworkManager-gnome-0.3.1-5.el4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

PXE-Kernel crashes with "RAMDISK: incomplete write ..." after modifiying initrd.img
by Frank Thommen 27 Mar '09

27 Mar '09

Hi, to install current PC models (with new Intel NICs) via Kickstart/PXE, I wanted to add the newest e1000e-Treiber to initrd.img. With this modified image, the Kickstart kernel crashes with the following error messages: [...] md: Autodetecting RAID arrays. md: autorun ... md: ... autorun DONE. RAMDISK: Compressed image found at block 0 RAMDISK: incomplete write (20480 != 32768) 6062080 VFS: Cannot open root device "<NULL>" or unknown-block(253,3) Please append a correct "root=" boot option Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(253,3) To modify the initrd.img, I took the original CentOS 5.2 image, unpacked with cpio/gunzip and replaced modules/2.6.18-92.el5/x86_64/e1000e.ko with a current version. This driver module had been created on a freshly installed CentOS 5.2 host with kernel 2.6.18-92.el5 and w/o any updates. After adding the driver, I re-archived and re-packed the image and replaced the initrd.img on my tftp server. The new image is considerably bigger than the old one (12 MB vs. 5.7 MB) which puzzles me, as the driver file itself is 2.8 MB (compared to the old e1000e.ko with ca 170 KB) but the resulting modules.cgz is only around 700 KB bigger than the original one. All files have been compressed with `gzip -9`. My PXE bootsettings are: KERNEL CentOS-5.2_64/vmlinuz APPEND initrd=CentOS-5.2_64/initrd.img ramdisk_size=5940 kssendmac ks=http://srv/ks/ks.cgi noipv6 Even raising ramdisk_size doesn't help. At around ramdisk_size=7100 there seems to be an overflow and the size is recounted from zero (?). Any Ideas, how one can/should create an updated and working initrd.img for Kickstart/PXE? A similar question has been asked before on this list and a recommendation was to wait for 5.3. Unfortunately I cannot wait for the next release. Thanks in advance frank

6 13

Re: [CentOS] CentOS VPN server for iPhone
by Bowie Bailey 27 Mar '09

27 Mar '09

Joseph L. Casale wrote: > > The non-standard port is a good trick, > > Here's just an opinion: Security by obscurity only > makes >you< feel good, it does nothing in reality. > Anyone sufficiently talented to hack a service in > order to gain root or do something useful would not > be fooled by that. Set whatever your doing up right > so that any false sense of security is not deemed > necessary. Changing port numbers will not stop a talented person who is intent on breaking into your network. However, it will stop (or at least slow down) the script-kiddies, worms, and others out there who are just scanning for misconfigured or unpatched applications. Switching SSH to a non-standard port completely emptied my log files of bad connection attempts. Now, if someone attempts to break in, it will be VERY obvious in the logs where before, it would have been buried in all of the other garbage. > Prevent weak passwords, possibly use connection throttling > etc etc. Of course. No one is suggesting that changing port numbers is all you need to do. It is just one more thing that you can do to slow down the attackers. -- Bowie

1 0

Installing openmpi & lam for use with R
by Rick Bilonick 27 Mar '09

27 Mar '09

I am trying to install the R package "Rmpi" which needs libmpi. I've installed openmpi and lam in Centos 5.2: [root@rab45-1 /]# rpm -qv openmpi openmpi-1.2.5-5.el5 openmpi-1.2.5-5.el5 [root@rab45-1 /]# rpm -qv lam lam-7.1.2-14.el5 lam-7.1.2-14.el5 But I get the following error message when trying to install Rmpi: /usr/bin/ld: skipping incompatible /usr/lib/lam/lib/libmpi.so when searching for -lmpi I'm not sure what else to install/uninstall to fix this. Rick B.

3 2

tar with -N option still picking up old files
by Neil Aggarwal 27 Mar '09

27 Mar '09

Hello: I tried this command to tar up a set of data files updated since yesterday (The data directory contains multiple files with varying dates): /bin/tar -z -c -N 2009-03-25 -f /tmp/test.tgz data When I look at the content of the test.tgz file, it looks like it copied the content of the entire directory, not just the newer files. I am on CentOS 5. Any ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details.

4 4

manage different profile with a laptop
by MOKRANI Rachid 27 Mar '09

27 Mar '09

Hi, I need to use different profile with some linux CentOS laptops. - I need to connect the laptops at work with NIS, automount, DHCP .... - The same laptops can be use at home without NIS etc..but with personal wifi connection .... - The same laptops can be use in travel without network configuration Which best software to use to manage different profile ? Regards. __________________________ Ce message (et toutes ses pièces jointes éventuelles) est confidentiel et établi à l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'IFP décline toute responsabilité au titre de ce message. This message and any attachments (the message) are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP should not be liable for this message. Visitez notre site Web / Visit our web site : http://www.ifp.fr __________________________

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss