Discuss

discuss@lists.centos.org

34753 discussions

help with udev rules needed
by rray_1＠comcast.net 22 Jan '09

22 Jan '09

I am migrating from Fedora 8 to CentOS 5.2 I have usb dvd On F8 I have /etc/udev/rules/00-my-custom.rules BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N ",SYMLINK="dvd",OWNER="rray" When I plug in dvd I get $ ll /dev/scd1 lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1 ll /dev/sr1 brw-r----- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1 Everything is ok On C5.2 I have /etc/udev/rules/00-my-custom.rules BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N ",SYMLINK="dvd",OWNER="rray" When I plug in dvd I get # ll /dev/scd0 brw-rw---- 1 root disk 11, 0 Jan 21 12:30 /dev/scd0 I have also tried MODE="0666" and it also has no affect I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both machines and they are the same Any suggestions Thanks Richard Ray

2 5

Issues with Ldap client on Centos 5
by ankush grover 22 Jan '09

22 Jan '09

Hi Friends, We are running some of the Centos 5 32 bit, 5.2 64-bit systems. These systems are ldap clients and the ldap server is Windows 2003 Server. Sometimes 1 or 2 services on these servers sucks 100% cpu and the load becomes high on the server. Below is an example where one the httpd process was eating 100% cpu and we took dump of this process gcore 17711 Core was generated by `/usr/sbin/httpd'. #0 0x00002ad1849cd997 in ldap_chase_v3referrals () from /usr/lib64/libldap-2.3.so.0 (gdb) bt full #0 0x00002ad1849cd997 in ldap_chase_v3referrals () from /usr/lib64/libldap-2.3.so.0 No symbol table info available. #1 0x00002ad1849bc4dd in ldap_msgdelete () from /usr/lib64/libldap-2.3.so.0 No symbol table info available. #2 0x00002ad1849bceb0 in ldap_result () from /usr/lib64/libldap-2.3.so.0 No symbol table info available. /etc/ldap.conf file host dc.example.com base ou=users,dc=example,dc=com binddn cn=ldap,ou=extra accounts,dc=example,dc=com bindpw QrQcepFKHR6wGNXu4 scope sub ssl no nss_base_passwd dc=example,dc=com?sub nss_base_shadow dc=example,dc=com?sub nss_base_group dc=example,dc=com?sub nss_map_objectclass posixAccount user nss_map_objectclass shadowAccount user nss_map_attribute uid sAMAccountName nss_map_attribute uidNumber UidNumber nss_map_attribute gidNumber GidNumber nss_map_attribute loginShell LoginShell nss_map_attribute gecos name nss_map_attribute userPassword unixUserPassword nss_map_attribute homeDirectory unixHomeDirectory nss_map_objectclass posixGroup Group nss_map_attribute uniqueMember msSFU30PosixMember nss_map_attribute cn cn pam_login_attribute sAMAccountName pam_filter objectclass=user pam_password md5 timelimit 0 sizelimit 0 tls_cacertdir /etc/openldap/cacerts There are 2 bugs listed on the redhat site but no solution for this problem has been provided. https://bugzilla.redhat.com/show_bug.cgi?id=222667 https://bugzilla.redhat.com/show_bug.cgi?id=474181 Thanks & Regards Ankush

2 1

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Ian Forde <ian(a)duckland.org> wrote: >> That depends upon how you define malware detection. Antivirus software for Linux typically scans for Windows viruses and malware. On the other hand, if you're talking about detection in the sense of Tripwire, or a cron job that runs a 'rpm -V' every night, I completely agree that this is something that should be done. << Bingo. The changes made in PCI DSS v 1.2 broaden the scope of section 5 from "viruses" to "malicious software". This covers viruses, worms, trojans, spyware, rootkits, etc. Use of AIDE or Open-Source Tripwire, with a carefully set up policy, should meet the requirements. I would write an "explanation of non-applicability" that states that CentOS is at low risk of infection by viruses and only slightly higher risk of infection by worms, and that implementation of a host filesystem integrity verification system (or host intrusion detection system) provides an appropriate control to alert administrators to unauthorised changes of any kind on the system. Add appropriate verbiage about SELinux, etc. if appropriate. I'd say that should get the job done. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Apache Server Tuning for Performance
by linux-crazy 22 Jan '09

22 Jan '09

Hi all, I am facing facing performance issues with our web servers which is working for concurrent 250 requests properly and then stops responding when the requests are more than 250 . The current configuration parameters are as follows : apachectl -version Server version: Apache/2.0.52 Server built: Jan 30 2007 09:56:16 Kernel : 2.6.9-55.ELsmp #1 SMP Fri Apr 20 16:36:54 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux Server Hardware : MAIN MEMORY (i) Memory Size 4 GB Dual-Core Intel 5160 processors. httpd.conf Timeout 300 KeepAlive On MaxKeepAliveRequests 1000 KeepAliveTimeout 150 ## Server-Pool Size Regulation (MPM specific) # prefork MPM # StartServers: number of server processes to start # MinSpareServers: minimum number of server processes which are kept spare # MaxSpareServers: maximum number of server processes which are kept spare # ServerLimit: maximum value for MaxClients for the lifetime of the server # MaxClients: maximum number of server processes allowed to start # MaxRequestsPerChild: maximum number of requests a server process serves <IfModule prefork.c> StartServers 8 MinSpareServers 5 MaxSpareServers 20 ServerLimit 251 MaxClients 251 MaxRequestsPerChild 4000 </IfModule> # worker MPM # StartServers: initial number of server processes to start # MaxClients: maximum number of simultaneous client connections # MinSpareThreads: minimum number of worker threads which are kept spare # MaxSpareThreads: maximum number of worker threads which are kept spare # ThreadsPerChild: constant number of worker threads in each server process # MaxRequestsPerChild: maximum number of requests a server process serves <IfModule worker.c> StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadsPerChild 25 MaxRequestsPerChild 0 </IfModule> I want to know about the difference between worker MPM and Prefork MPM , how to find out which one will be used by my apache server and the recommended one for highly loaded server.If some one provide me the link that best explains above two comparison also be very use full. Can any one guide me tuning to be done for the maximum utilization of the Resources and better performance of the Servers. Regards, lingu

9 13

Firefox error msg.
by Bob Taylor 22 Jan '09

22 Jan '09

After my / disk seemed to be failing and found many files disappeared, I decided to remove it. I moved my other disk to it's place. Long story omitted. After installing my backup of /home and seeing firefox not restart, I started it from the command line with the immediate error: Could not find compatible GRE between version 1.9.0.5 and 1.9.0.5. I'm sorry, I'm at a complete loss. What's a GRE? -- Bob Taylor

2 4

Re: [CentOS] Antivirus for CentOS? (yuck!)
by Les Bell 22 Jan '09

22 Jan '09

Ian Forde <ian(a)duckland.org> wrote: >> Yep - on the wikipedia page you referenced, look in the "Requirements" section, section 5. It says: "Use and regularly update anti-virus software on all systems commonly affected by malware" << I doubt Amos's QSA is using Wikipedia as his reference, unfortunately. The PCI DSS Ver 1.2 standard (of Oct. 2008 - get it from https://www.pcisecuritystandards.org/security_standards/pci_dss_download.ht…) actually states: 5.1 Deploy anti-virus software on all systems commonly affected by malicious software (particularly personal computers and servers). but then goes on, under "Testing Procedures" to state: 5.1 For a sample of system components including all operating system types commonly affected by malicious software, verify that anti-virus software is deployed if applicable anti-virus technology exists. Unfortunately, both open-source and commercial anti-virus software that will run on Centos do exist, which gives the assessor some wiggle-room. Even worse, the Summary of Changes from 1.1 to 1.2 says: Requirement & Testing Procedure: Clarified requirement applies to all operating systems types commonly affected by malicious software, if applicable anti-virus technology exists. Besides use of the term "anti-virus software", changed the term "virus" to "malicious software". Deleted note stating "Systems commonly affected by viruses typically do not include UNIX-based operating systems or mainframes." That last sentence is a killer, unfortunately - it means they have been tightening up on *ix systems. Looks like you could be in for a battle if the QSA is an intransigent sort. You could argue that while anti-virus programs do exist, their purpose is to detect infected files which could harm connected Windows systems, and are therefore not applicable in your specific case, particularly since you are using proprietary protocols and not running Windows file-sharing software (e.g. Samba, FTP, etc.) It really comes down to whether your Assessor is clueful, or a box-ticking droid. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

CentOS4 pam_tally2 config
by Jim Perrin 22 Jan '09

22 Jan '09

Okay, it's been a while since I've messed with EL4, and apparently I've gone stupid with respect to pam and properly enabling pam_tally2 in an appropriate fashion. My notes are for EL5, so if someone would be so kind as to smack me in the right direction, I'd appreciate it. -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell

2 3

Web pages time out after server rebuild
by Rob Kampen 21 Jan '09

21 Jan '09

Hi All, I have an old (2004) Intel based server with 4G of ram running Linux ndgonline.net 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux fully up to date using centOS rpms for apache, php, and mysql. I have just changed from dmraid to md raid for the OS on mirrored 80Gb SATA drives. (long story for another time) Mysql lives on a Intel hardware raid 5 controlled array - as is has for four years. My application has not changed and also runs just fine on another server (although this one is 64 bit) that has a mirrored mysql database replication from this one. I have compared apache conf files, my.cnf and all appears well. The page that times out on our firefox browsers after 30 seconds does have a series of complex mysql queries. There are no log messages other than ssl_error_log that shows: PHP Fatal error: Maximum execution time of 30 seconds exceeded in /var/www/htdocs/ndg/includes/customHandler.inc on line 87 the line number varies as does the file name it reports. It will serve pages that only have a few records, yet on my functioning server even the large pages return over the internet in less than 2 seconds. So I'm thinking not enough memory? - but it was working well last Monday. something slowing mysql?? - all other queries in this app appear just fine php having issues? How do I get some extra log info to track this down? Kind regards Rob

3 5

error installing Twinkle - libresolv.so.2(GLIBC_PRIVATE)
by Mr.Vandeley 21 Jan '09

21 Jan '09

Hello, I have an error while try to install twinkle: # yum install twinkle [...] Resolving Dependencies --> Running transaction check ---> Package twinkle.i386 0:1.2-1.el5.rf set to be updated --> Processing Dependency: libresolv.so.2(GLIBC_PRIVATE) for package: twinkle --> Finished Dependency Resolution Error: Missing Dependency: libresolv.so.2(GLIBC_PRIVATE) is needed by package twinkle [...] But libresolv.so.2 is there: # locate libresolv.so.2 /lib/libresolv.so.2 Any idea what is happening? cheers,

2 1

Help with find
by Matt 21 Jan '09

21 Jan '09

This finds all files modified 5 minutes ago. find /home/*/ -cmin 5 -type f -mindepth 1 -maxdepth 1 I want to find all files modified 5 or less minutes ago. How do I do that? "find -mtime -1" only works in 24 hour increments. Matt

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss