Discuss

discuss@lists.centos.org

34758 discussions

Re: [CentOS] 64bit Python 32bit c library ...
by Mark Pryor 27 Mar '09

27 Mar '09

--- On Thu, 3/26/09, Ben <abnormaliti(a)clivepeeters.com.au> wrote: > From: Ben <abnormaliti(a)clivepeeters.com.au> > Subject: [CentOS] 64bit Python 32bit c library ... > To: "CentOS mailing list" <centos(a)centos.org> > Date: Thursday, March 26, 2009, 10:48 PM > > -----Inline Attachment Follows----- > > I have a closed-source 32bit > database application running on a 64bit > CentOS 5.2 system which is running very well however i am > looking at > developing some python applications that require access to > the data and > the vendor only provides a 32bit c library. > > So while attempting to utilize the library in python with > ctypes it > became obvious that the 64bit python cannot use the 32bit c > library. > > So what are my choices? > Yum and so many of the applets (system-config-*) are tied to Python that you can't mess with the base version or arch of Python. What about a 32 bit chroot using Mock? I've never done it, but that's what Mock is intended to do. Perl.i386 will run OK in x86_64 and there is a version of perl-Inline-CPP that will allow you to write most of what you want in CPP and wrap it with Perl. -- Mark

2 1

64bit Python 32bit c library ...
by Ben 27 Mar '09

27 Mar '09

I have a closed-source 32bit database application running on a 64bit CentOS 5.2 system which is running very well however i am looking at developing some python applications that require access to the data and the vendor only provides a 32bit c library. So while attempting to utilize the library in python with ctypes it became obvious that the 64bit python cannot use the 32bit c library. So what are my choices? 1. is there a way to use the 32bit library in 64bit python i haven't found? 2. install 32bit python on the 64bit system. 'yum list python.i386' shows that 32bit python is not available. 3. manually compile and install 32bit python and _ALL_ its libraries under /opt. has someone already done this? are the RPMs available? let me just say that i am no python expert, yet, so bare with me. Any help would be appreciated. Ben

1 0

mirrorlist.centos.org offline? NO A RECORD IN DNS
by Danny.Terweij 27 Mar '09

27 Mar '09

Is mirrorlist.centos.org out of the air? because there is no A record for it. Which causes yum to fail. Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=5&arch=x86_64&repo=os error was [Errno 4] IOError: <urlopen error (-2, 'Name or service not known')> Error: Cannot find a valid baseurl for repo: base Danny.

3 3

[OT] Network switches
by Scott McClanahan 27 Mar '09

27 Mar '09

I'm looking to acquire a few new core switches for our network which would be a major upgrade from the cheap unmanaged things we currently have. Basically, just users, servers, and other simple network devices will be plugged into them but I'd like to start doing some testing with iSCSI for various non-production reasons. I have no allegiance to a particular vendor although I do have a Cisco background. I'd like them to be at least 10/100/1000 (no need for power over ethernet) and include many of the features that are most important to me in a managed switch, including: * vlans * mstp or some well established form of per vlan spanning tree * acl's * port mirroring or what cisco calls span sessions * snmp * ssh enabled remote management * support w/ updates and bugfixes I need at least 48 ports per device and obviously would like them to be "fast". Most importantly, I'd like to know what you guys prefer as operations dudes and what pitfalls to avoid. Also, are there other features you folks would demand to have in your switches that I haven't mentioned? I can provide more information if you'd like. Thanks. Oh, cost is sort of an issue (small/medium sized business) but right now insight from you guys is what's important and I can work out the cost issue later. Thanks again.

17 33

Dell 120 GB 5400 RPM Encrypted Serial ATA Hard Drive
by Agile Aspect 26 Mar '09

26 Mar '09

Hi - I've been asked to re-partition a Dell 120 GB 5400 RPM Encrypted Serial ATA Hard Drive and install CentOS 5 on the new partition. It's a Dell Lattitude E5400 laptop. Is this even possible with encrypted drives? Does CentOS 5 need special drivers? Any help would be greatly appreciated. -- Agile -- Article. VI. Clause 3 of the constitution of the United States states: "The Senators and Representatives before mentioned, and the Members of the several State Legislatures, and all executive and judicial Officers, both of the United States and of the several States, shall be bound by Oath or Affirmation, to support this Constitution; but no religious Test shall ever be required as a Qualification to any Office or public Trust under the United States."

5 5

revisor tool
by JC Putter 26 Mar '09

26 Mar '09

Hi does revisor work on centos 5.2 final? is it possible to create my own distro with config and all 3rd party installed software? __________ Information from ESET NOD32 Antivirus, version of virus signature database 3966 (20090326) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

CentOS 5.2 and wired Ethernet on a Macbook Pro?
by Scott R. Ehrlich 26 Mar '09

26 Mar '09

I recently installed CentOS 5.2 64-bit on a partition on a MacBook Pro 17 inch. It installed just fine, but wired Ethernet is not available. lspci shows it as nVidia...unknown. Is it possible to get wired Ethernet running on this laptop under CentOS without having to create a virtual machine installation of CentOS? If so, what is the magic? Thanks. Scott

2 1

help on kerberos5
by fabian dacunha 26 Mar '09

26 Mar '09

Dear All, this i feel is a little out of topic but really apprecite if someone can help i am tryin to authenicate my Centos 5.2 box to windows 2003 ADS server .. but am not able to do so . i get the following error when i run kinit kinit(v5): Improper format of Kerberos configuration file while initializing Kerberos 5 library i have the following packages installed on my linux box [root@testproxy init.d]# rpm -qa | grep krb krb5-devel-1.6.1-25.el5_2.2 krb5-workstation-1.6.1-25.el5_2.2 krb5-auth-dialog-0.7-1 krb5-libs-1.6.1-25.el5_2.2 pam_krb5-2.2.14-1.el5_2.1 rpm -qa|grep ntp ntp-4.2.2p1-8.el5.centos.1 chkfontpath-1.10.1-1.1 root@testproxy init.d]# rpm -qa|grep samba system-config-samba-1.2.39-1.el5 samba-client-3.0.28-1.el5_2.1 samba-common-3.0.28-1.el5_2.1 samba-3.0.28-1.el5_2.1 my domain name is===> baladia.local Windows 2003 AD server computer name is====> kmun my /etc/krb5.conf file is ---- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime=24000 default_realm=BALADIA.LOCAL dns_lookup_realm = false dns_lookup_kdc = false [realms] BALADIA.LOCAL={ kdc=172.16.2.227:88 # admin_server=kmun.baladia.local:749 default_domain=BALADIA.LOCAL kdc=BALADIA.LOCAL } [domain_realm] .baladia.local=BALADIA.LOCAL baladia.local=BALADIA.LOCAL kerberos 88/udp kdc # Kerberos key server kerberos 88/tcp kdc # Kerberos key server [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [appdefaults] pam = { debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false } as i said before when i run kinit kinit(v5): Improper format of Kerberos configuration file while initializing Kerberos 5 library i tried googlin n tried varios options in the conf file but no luck i would really apprecite n be thankful if someone could point out the syntax error in my krb5.conf file or if any missing software i need to check n install or anyway i could track this error also is there anything to check on my windows 2003 AD Server Thanks and appreciate Fabain -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

4 4

Monitoring IP masquerading on LVS load-balancing
by David Dyer-Bennet 26 Mar '09

26 Mar '09

I've got small numbers of connections moving through a load balancer configured in NAT mode. So I've got an iptables table called "nat", which has in it a line "-A POSTROUTING -o eth0 -j MASQUERADE" (lan connect is eth0, private lan inside the cluster is eth1). The load balancer is working; connections made to the virtual ip on that host do get routed to one of the real servers behind this load load balancer. But I want to observe the connections on the load balancer. My first attempt was to use netstat with the --masquerade switch. This produced the result "netstat: no support for `ip_masquerade' on this system." Consistent with this, there is no /proc/net/ip_masquerade. On the other hand, the load balancer *IS* working; those connections *are* getting NATted and routed. Also, lsmod shows varous relevant modules loaded: iptable_nat 40773 1 ip_nat 53101 2 ipt_MASQUERADE,iptable_nat ip_conntrack 91237 5 xt_state,ip_conntrack_netbios_ns,ipt_MASQUERADE,iptable_nat,ip_nat nfnetlink 40457 2 ip_nat,ip_conntrack ip_tables 55329 2 iptable_filter,iptable_nat x_tables 50377 7 xt_state,ipt_REJECT,xt_tcpudp,ipt_MASQUERADE,xt_multiport,iptable_nat,ip_tables So, netstat just isn't somehow the right monitoring tool, right? So what is the right monitoring tool? I need to know the source IP and real-server IP of connections being handled by the load balancer. I don't need a lot showing exactly how each one was handled, but I'd like to be able to determine the state of any connection currently active. How can I do this? -- David Dyer-Bennet, dd-b(a)dd-b.net; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info

3 4

Re: [CentOS] Security advice, please
by Anne Wilson 26 Mar '09

26 Mar '09

On Tuesday 23 December 2008 15:38:17 Warren Young wrote: > Michael Simpson wrote: > >> GRC reports that ports are stealthed > > > > Try www.auditmypc.com or nmap-online.com rather than grc to look for open > > ports > > What advantages do they have, in your opinion? > > >> there a better way than opening port 143? > > > > ssh tunnelling? > > I agree, though the default CentOS sshd configuration requires some > tightening down to trust it on Internet-facing servers, IMHO: > > 1. In /etc/ssh/sshd_config, set "PasswordAuthentication no". No matter > how good your password, it isn't as good as using keys. Remember, > forwarding ssh opens it to pounding 24x7 from any of the millions on > zombie boxes on the Internet. > > 2. On the machine(s) that you want to allow logins from, run "ssh-keygen > -t rsa" to generate a key pair, if you haven't already. Then copy the > contents of ~/.ssh/id-rsa.pub into ~/.ssh/authorized_keys on your home > server. These keys are used to authenticate the remote system, in lieu > of a password or physical token. You could put these keys on a USB > stick instead, if you didn't want to keep them permanently on the remote > hosts. > > 3. Disable SSHv1 protocol support in /etc/ssh/sshd_config: "Protocol 2", > not "Protocol 2,1". SSHv1 has known weaknesses. Boggles my mind that > it's still enabled by default.... > > 4. Same file, set "PermitRootLogin no" if it isn't already. > > (Aside: I also like to set up sudo with one account allowed to do > anything, then lock the root account, so the only way to get root access > is to log in as a regular user then sudo up, reducing the risk of > passwordless keys.) > > Having done all this, you're ready to allow remote access: > > 5. In your router, forward a high-numbered port to 22 on the server. If > it's not smart enough to use different port numbers on either side, you > can change the sshd configuration so it listens on a different port > instead. I like to use 22022 for this. > > This is *not* security through obscurity. It's simply a way to reduce > the amount of log spam you have to dig through when monitoring your > system's behavior. Everything that appears in your logs should be > *interesting*. Constant port knocking from worms and script kiddies is > not interesting. > > In case you've not done ssh tunelling, Anne, the command that does what > you want, having done all the above is: > > $ ssh -p22022 -L10143:my.server.com:143 anne(a)my.server.com > > This sets up port 10143 on the local system to be redirected through the > ssh session to the IMAP port on your home server. You don't want to > redirect 143 to 143 because that would require you to run ssh as root. > It also prevents you from using this on a system that itself has an IMAP > server. > > With the tunnel up, you can set up your mail client to connect to port > 10143 on localhost, and you'll be looking at your remote mail server. Hello again. You were kind enough to give me this advice last December. I've another holiday approaching and thought it was time that I got this sorted. Unfortunately, I'm not sure that I can do this, so I'm asking your opinion. My router is a Netgear DG834G. I can create a service, tell it which ports to open, and say which local IP I want it sent to. However, I can't see any way to set the port to which it should be forwarded as anything other than the incoming port. IOW, I can enable the new service Ext-ssh, which accepts incoming traffic on port 22022, and direct it to my server on 192.168.0.40, but I can't see how to make it send that traffic to port 22 on the server. Am I totally misunderstanding this? Really all I want is to be able to log in to the server if I get an email alert that there is a problem or security updates pending. If I can get this sorted, I'll look again at how to route the IMAP mail through the tunnel too. Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

3 9

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss