Discuss

discuss@lists.centos.org

34758 discussions

LDAP syncrepl incompatibility between CentOS 4.x and 5.x
by Brett Serkez 12 Jun '08

12 Jun '08

All, After many hours of research I have found there is a incompatibility between OpenLDAP V2.3.x and V2.2.x, or atleast between V2.3.27 the current version on CentOS V5 and V2.2.13 the current version on CentOS V4. The syncrepl feature of OpenLDAP, to keep multiple slapd servers sync'd, was working between CentOS 4 and 5 at one time, as that is how I populated the "slave" servers. I've found references indicating protocol changes and incompatibilities between these versions and indeed looking at detailed debugging logs I can see the protocol falling apart between the two versions. Has anyone else seen this issue? Is anyone aware of a fix in the pipeline or a work around? Thanks in advance, Brett

5 9

Bind acl statement issue
by Joseph L. Casale 12 Jun '08

12 Jun '08

>From the manual, localnets matches hosts belonging to a network for which the server has an interface in. I have a dns server in a dmz with an ip of 192.168.2.2 in /24. Named.conf has 3 views, localhost_resolver -> localhost, internal -> localnets, and external -> !localnets; !localhost. I have a management workstation in 192.168.0.0/24 that is connecting and receiving the following debug: client 192.168.0.44#2188: no matching view in class 'IN' I don't get it? Obvioulsy if I add all to the external view, it works. How is the failing? Thanks! jlc

3 3

Reg. setting Domain name on Cento 5 pc
by Padmaja R 12 Jun '08

12 Jun '08

Hi all, I am running centos 5.1 and I wish to change the domain name and dnsdomainname of my PC. currently the settings are-- $ hostname sipx.com $ hostname --fqdn sipx.com $ domainname (none) $ dnsdomainname com I have searched in the net for tips but everywhere only the hostname change is provided. I need to change/set the domain name and the dnsdomain name on my pc to sipx.com and this should be a permanent one across system reboots. Please let me know how to do this. The domain name settings are required for a networking/ SIP telephony applications that I am running but it is internally in the LAN, so I think the name sipx.com if chosen as my pc's domain name will not cause any conflict with the external domain names in the Internet. Thank You

8 10

CN=Nasreddine Kroun/OU=Benefits/O=Vitech is out of the office.
by Nasreddine Kroun 12 Jun '08

12 Jun '08

I will be out of the office starting 06/12/2008 and will not return until 06/13/2008. Probably I will be back to the office by this afternoon, but I'm not sure.

1 0

INN with SSL
by David Hláčik 12 Jun '08

12 Jun '08

Hello, on a INN mailinglist i have found , that in order to use INN over SSL i need to call another instance of nnrpd like this : su news -c '/usr/local/news/bin/nnrpd -D -c /usr/local/news/etc/readers-ssl.conf -p 563 -S' I am using INN from official centos 5.1 rpm . My question is, where to init scripts /etc/init.d/inn or somewhere else put such a line to have INN listening on 563 for SSL connections? Thanks in advance! David

2 1

RE: School Server Setup-Summary
by Harry Sukumar 12 Jun '08

12 Jun '08

Dear All, Thank you very much to every one on the list for the sincere suggestion and recommendations I have received amazing response from all; I will try to recap a) Use CentOS for server infrastructure and fedora 8 on the workstations b) Use K12ltsp-terminal server and all the client machines as thin clients c) Use CentOS as Server and Ubuntu as client OS d) Use RHEL on the server ( NO RHEL NO CENTOS) e) Use SME from Contribs.org for server and ubuntu for clients f) Use Scientific Linux (binary compatibility with RHEL) for Server g) Clarkconnect for server side and Ubuntu or FC on client side h) Use IPcop as firewall Although ClarkConnect, SME are based on RHEL, I have decided not to go on that path because of lack of large community behind them + Vendor Lock-In With K12ltsp- sounds very nice but I don't have a large and grunty server I have to make the workstation as server, probably a good option if I had a powerful server :-( With serious consideration I have decided to go with suggestion a) Use CentOS for server infrastructure and Fedora 8 on workstation and have old machine running IPCop as firewall I would like to take this opportunity to thank you all, this mailing list is by far the best I have ever seen, I would like to specially thank Ian Blackwell for offering more support and help; I will keep you updated on this project, I am sure there will be a lot of question and problem that will raise and conjure from this project Once again thank you all for the help and effort -- Harry Sukumar ________________________________ From: Harry Sukumar Sent: Tuesday, 10 June 2008 3:04 PM To: 'centos(a)centos.org' Subject: School Server Setup Hello All!!! I was wondering if you can help me little bit.... I am trying to help (voluntary service) a country side school (Aboriginal community) in Northern Queensland Australia setup lab infrastructure, it's a very remote school and they don't have enough funds to go commercial The school has only till grade 6 They have 25 machines that was bought out of the government grant but none of the machines come with windows I was asked by the school president to setup lab infrastructure currently they have Internet (Dynamic) with only two machines connected I have asked them to change the plan to Static IP address which I presume will be done some time this week I have decided to go Linux on all the machines including the server Could some one please cast some light on how I can carry on with this project, I am not sure where to start and I am fairly new to Linux and system administration world Currently what's in my mind is to setup fedora on all desktop and CentOS5 as my server with following services configured Proxy-squid (all the traffic to pass through) Firewall Apache Squirrel mail DNS DHCP I am not sure where to start with this project Your help will be highly appreciated by the little kids who have never even touched a computer before in there life!!! -- Many Thanks Harry

2 1

syncrepl in OpenLDAP 2.3.x (CentOS 5) and updating on a replica
by Filipe Brandenburger 12 Jun '08

12 Jun '08

Hi, I have a setup with two CentOS 5 machines running OpenLDAP 2.3.x, right now the primary uses slurpd to send the updates to the second server, and the second server is using "updatedn" to allow updates (from what I understand! I'm no OpenLDAP guru here.) Clients are using pam_ldap and nss_ldap to get the users and authenticate them in LDAP. Right now hosts query only the primary LDAP server, that is the address set on the "host" variable of /etc/ldap.conf. Changing password with "passwd" works fine, and the password is correctly replicated to the secondary server. Now, first thing, I wanted to load balance between the two servers. The way I did it was to register a Round-Robin DNS record, with one A entry for each server IP, and I used that entry in the "host" variable of /etc/ldap.conf. Everything worked. Queries going each time to a different server. I was expecting to have problems changing passwords, but amazingly it worked. Apparently when a password change request goes to the second server, that server will do a query on the first server to do the password change, and then (through slurpd) the change gets replicated on the second one. Everything great. Now, I was reading that syncrepl is superior to slurpd, and that syncrepl is the preferred method of replication. I actually saw that it's true when I saw that it actually replicated the master without having to stop it and copy the dbs (which is necessary with slurpd.) I even saw that in OpenLDAP 2.4.x slurpd is deprecated/discontinued and only syncrepl is supported. So I'm trying to migrate from slurpd to syncrepl. And so far everything is working fine in my test environments. This is what I have configured on the master: overlay syncprov syncprov-checkpoint 1 10 syncprov-sessionlog 100 And on the slave: syncrepl rid=1 provider=ldap://ldap1.mydomain.com type=refreshAndPersist searchbase="dc=mydomain,dc=com" schemachecking=off bindmethod=simple binddn="cn=Manager,dc=mydomain,dc=com" credentials=xxxxxxxxxxx updateref ldap://ldap1.mydomain.com/ It works with queries, and when I do an update on the master, it replicates fine to the slave. But when I try to do some change on the slave, that's what I get: $ ldapdelete -H ldap://ldap2.mydomain.com/ -D cn=Manager,dc=mydomain,dc=com \ -w XXXXXXX -x uid=usertodelete,ou=Users,dc=mydomain,dc=com ldap_delete: Referral (10) referrals: ldap://ldap1.mydomain.com/uid=usertodelete,ou=Users,dc=mydomain,dc=com I would like to have something closer to what happens when using slurpd, which seems to be more transparent to clients. I tried to set "updatedn" but slapd complained that it is supported when using slurpd. I also tried to start configuring overlay on the slave and syncrepl on the master, but when I do that I can't run updates on either side, both of them end up being read-only. I read that on OpenLDAP 2.4.x Administration Guide, on the section about multi-master replication, but I then saw that multi-master replication is supposed to work only on 2.4.x, and not on 2.3.x, so that's apparently not an option. So I ask: is there a way to configure OpenLDAP so that the slave (running syncrepl) can send updates to the master when receives from a client? Or (not as good but still an option): If I use "updateref" to send Referral, how can I make sure the tools (ldapdelete, ldapmodify, ldapadd, ...) actually *follow* the referral (I looked for that in man pages and didn't find any obvious options for that)? And more important, will pam_ldap and nss_ldap follow those referrals when changing the password? Do I have to set something on /etc/ldap.conf for that? Upgrade to 2.4.x is something I would like to avoid, since I would rather stick with what is supported by CentOS 5. Long term, I'm planning to replace all this infrastructure to FreeIPA (http://www.freeipa.org/) which is supposed to be a more robust product, but that is going to take a while, so I'm trying to at least do the best I can with what I have now. Sorry for the long e-mail! Any help and advices will be appreciated. Thanks a lot! Filipe

1 0

[Fwd: Re: [CentOS] School Server Setup]
by Alain Terriault 11 Jun '08

11 Jun '08

Hi Harry, Has much has I like Centos and RH for big sophisticated setup, it would not be my first choice for your project. For 25 systems and if you want this done without spending to much time, Clarkconnect would by my first choice for server side OS (#2 would be SME). For me CentOS x64 is #1 choice for enterprise (+500 users with Terabytes of storage ) sever solution. If you have little experience configuring a RH server, get ready to spend lots of time getting everything going as nicely as Clarkconnect does it. For the clients side, my favorite flavor of Linux is Ubuntu. cheers, alain Harry Sukumar wrote: > > Hello All!!! > > I was wondering if you can help me little bit…. > > I am trying to help (voluntary service) a country side school > (Aboriginal community) in Northern Queensland Australia setup lab > infrastructure, it’s a very remote school and they don’t have enough > funds to go commercial > > The school has only till grade 6 > > They have 25 machines that was bought out of the government grant but > none of the machines come with windows > > I was asked by the school president to setup lab infrastructure > currently they have Internet (Dynamic) with only two machines connected > > I have asked them to change the plan to Static IP address which I > presume will be done some time this week > > I have decided to go Linux on all the machines including the server > > Could some one please cast some light on how I can carry on with this > project, I am not sure where to start and I am fairly new to Linux and > system administration world > > Currently what’s in my mind is to setup fedora on all desktop and > CentOS5 as my server with following services configured > > Proxy-squid (all the traffic to pass through) > > Firewall > > Apache > > Squirrel mail > > DNS > > DHCP > > I am not sure where to start with this project > > Your help will be highly appreciated by the little kids who have never > even touched a computer before in there life!!! > > -- > > Many Thanks > > Harry > > ------------------------------------------------------------------------ > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

15 27

Not seeing all memory in CentOS 5.1 x86_64
by Ruslan Sivak 11 Jun '08

11 Jun '08

I'm running CentOS 5.1 with all updates, and the xen kernel. For some reason the OS is not seeing the full amount of ram. #uname -a Linux CentOS-VM-A 2.6.18-53.1.21.el5xen #1 SMP Tue May 20 10:03:27 EDT 2008 x86_64 x86_64 x86_64 GNU/Linux # free total used free shared buffers cached Mem: 6104064 3445136 2658928 0 1412236 1515032 -/+ buffers/cache: 517868 5586196 Swap: 2031608 0 2031608 On another box with identical hardware, I see # free total used free shared buffers cached Mem: 5038080 1818980 3219100 0 145208 1148608 -/+ buffers/cache: 525164 4512916 Swap: 2031608 152 2031456 Both of these boxes have 8GB of ram. Is there a reason I'm not seeing all of it? Russ

9 22

[Off Topic, kind of] eMachine model T5254
by Bob Taylor 11 Jun '08

11 Jun '08

Hi list, Best Buy currently has an eMachine on sale for less than $300.00 without monitor. I didn't see any recent complaints on www.consumeraffairs.com. I didn't take the time to do a thourgh search so may have missed some. Red Hat hardware list does not have one eMachine listed. I went to eMachine's home page and found the following: AMD Athlon™ BE-2350 dual-core processor NVIDIA® GeForce® 6100 2048MB DDR2 dual-channel 320GB 7200rpm SATA II 16x DVD±R/RW SuperMulti drive High-performance 15-in-1 digital media card reader 6-channel (5.1) high-definition audio They do not list the manufacturer/model of the media card reader and audio. Any hardware guru see any problems? -- Bob Taylor

5 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss