Discuss

discuss@lists.centos.org

34758 discussions

TCP/IP Port Relay
by Frank M. Ramaekers 24 Apr '08

24 Apr '08

What is the best way to temporarily setup a port relay. I'm trying to diagnose a problem with Cisco's latest VPN client and need to determine if the problem is port number related. e.g. VPN client---------23-(Linux box to relay port)-------xx-(Telnet server) (Keep in mind this is temporary and for debugging purposes) Thanks, Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE & RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr. Fax: (254)741-5777 Waco, Texas 76710 _____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct(a)ailife.com.

3 8

CentOS-announce Digest, Vol 38, Issue 13
by centos-announce-request＠centos.org 24 Apr '08

24 Apr '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0222 Critical CentOS 4 s390(x) firefox - security update (Pasi Pirhonen) 2. CESA-2008:0238 Important CentOS 4 s390(x) kdegraphics - security update (Pasi Pirhonen) 3. CESA-2008:0240 Important CentOS 4 s390(x) xpdf - security update (Pasi Pirhonen) 4. CESA-2008:0175 Important CentOS 5 i386 openoffice.org Update (Karanbir Singh) 5. CESA-2008:0175 Important CentOS 5 x86_64 openoffice.org Update (Karanbir Singh) 6. CESA-2008:0197 Moderate CentOS 5 x86_64 gnome-screensaver Update (Karanbir Singh) 7. CESA-2008:0197 Moderate CentOS 5 i386 gnome-screensaver Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 23 Apr 2008 18:09:51 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0222 Critical CentOS 4 s390(x) firefox - security update To: centos-announce(a)centos.org Message-ID: <20080423150951.GX30581(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0222 https://rhn.redhat.com/errata/RHSA-2008-0222.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/firefox-1.5.0.12-0.15.el4.centos.s390.rpm s390x: updates/s390x/RPMS/firefox-1.5.0.12-0.15.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

RE: [CentOS] Re: Kickstart network settings problem -SOLVED
by Plant, Dean 24 Apr '08

24 Apr '08

Tony Mountifield wrote: > In article > <2181C5F19DD0254692452BFF3EAF1D6803940E22(a)rsys005a.comm.ad.roke.co.uk>, > Plant, Dean <dean.plant(a)roke.co.uk> wrote: >> >> If like me you have never had to mess with the stage2.img file to fix >> installations issues, below shows what is required. >> >> cd ~ >> wget http://yourwebserver/centos5-dvd/images/stage2.img >> mkdir tmp >> mount -t squashfs -o loop stage2.img ./tmp >> cd tmp >> vi ./usr/lib/anaconda/kickstart.py # comment out >> dispatch.skipStep("network") at around line 876 or use Ray's patch. > > hmm, isn't this editing the file on a read-only file system? Oops......yes, not going to do much good editing the ro file system! Sorry. > >> mkdir ../new-stage2 >> tar cf - . | ( cd ../new-stage2/ ; tar xf - . ) > > I suspect here is where you need to cd ../new-stage2 and edit > kickstart.py > >> cd .. >> yum -y install squashfs-tools >> mksquashfs ./new-stage2/ stage2.img.new >> >> Now replace the stage2.img file on the web server with the >> stage2.img.new file, renamed to stage2.img of course. > > Cheers > Tony

1 0

tomcat5 - RHEL4.5 - CentOS 4.5
by Tom Brown 24 Apr '08

24 Apr '08

Hi I am seeing this issue on a RHEL4 box but i presume that the same will be for CentOS4.5 I am trying to get tomcat5 up and running using only upstream rpm's, as opposed to own rolled like i have done before, and hitting this issue. I have JAVA_HOME set in /etc/tomcat5/tomcat5.conf and also in /etc/sysconfig/tomcat5.conf and when tomcat is started using the init script it starts up like so tomcat 30676 0.1 1.4 1275052 60324 pts/0 Sl 08:45 0:03 /usr/java/sun/jdk/1.4.2_13/bin/java -server -Xms256m -Xmx1024m -Djava.security.manager=java.rmi.RMISecurityManager -Dcatalina.ext.dirs=/usr/share/tomcat5/shared/lib:/usr/share/tomcat5/common/lib -Dcatalina.ext.dirs=/usr/share/tomcat5/shared/lib:/usr/share/tomcat5/common/lib -Djava.endorsed.dirs=/usr/share/tomcat5/common/endorsed -classpath /usr/java/sun/jdk/1.4.2_13/lib/tools.jar:/usr/share/tomcat5/bin/bootstrap.jar:/usr/share/tomcat5/bin/commons-logging-api.jar:/usr/share/java/mx4j/mx4j-impl.jar:/usr/share/java/mx4j/mx4j-jmx.jar -Dcatalina.base=/usr/share/tomcat5 -Dcatalina.home=/usr/share/tomcat5 -Djava.io.tmpdir=/usr/share/tomcat5/temp org.apache.catalina.startup.Bootstrap start However in the catalina.out i see this WARNING: unable to set your JAVA_HOME. This may cause problems for any java applications you run ------------------------------------------------------------------------------- I am : tomcat on hostname JAVA_HOME : /usr/jdk1.3.1_08 Any ideas why this is and where that JAVA_HOME is coming from? thanks

1 1

RE: [CentOS] Kickstart network settings problem -SOLVED
by Plant, Dean 24 Apr '08

24 Apr '08

Ray Van Dolson wrote: > On Tue, Apr 22, 2008 at 12:47:39PM +0100, Plant, Dean wrote: >> I would like one of my kickstart scripts to prompt for disk and >> networking only. Commenting out the disk and network settings makes >> the installer prompt for disk settings but not for network settings, >> they default to DHCP. Any idea's how to fix this? > > I'm assuming you are using CentOS 5 here. I'm not sure why upstream > disabled this feature -- it was very useful to be able to use > kickstart with a DHCP IP address initially, but still be prompted for > network information during the installer portion later (as it did in > RHEL4). > > See: > > https://bugzilla.redhat.com/show_bug.cgi?id=401531 > > In addition, I have an RFE in with Upstream to re-add this feature and > I believe it's slated for inclusion in 5.2 with the --bootproto=query > option. > > The attachment there however: > > https://bugzilla.redhat.com/attachment.cgi?id=291881 > > patches Anaconda to not skip the network step during installation. > I've been using this successfully here to "do what I need" while > waiting for the official fix. > > You can include this in an updates.img file and have it loaded > automatically on installs. Thank you Ray, worked a treat. If like me you have never had to mess with the stage2.img file to fix installations issues, below shows what is required. cd ~ wget http://yourwebserver/centos5-dvd/images/stage2.img mkdir tmp mount -t squashfs -o loop stage2.img ./tmp cd tmp vi ./usr/lib/anaconda/kickstart.py # comment out dispatch.skipStep("network") at around line 876 or use Ray's patch. mkdir ../new-stage2 tar cf - . | ( cd ../new-stage2/ ; tar xf - . ) cd .. yum -y install squashfs-tools mksquashfs ./new-stage2/ stage2.img.new Now replace the stage2.img file on the web server with the stage2.img.new file, renamed to stage2.img of course. Dean.

2 1

OT -Recommendations relating to a Password Safe
by Clint Dilks 23 Apr '08

23 Apr '08

Hi Everyone I am wondering if many people are using software that acts as a password safe. And if so can you recommend any software in particular? I know many people will disagree with this idea, and I myself have always followed the printed list stored in a secure location. But in our particular situation keeping this single list current and correct while ensuring that regular password changes happen is turning into a nightmare. Any suggestions welcome, have a nice day :)

4 4

Missing update / update announcement
by Bernd Bartmann 23 Apr '08

23 Apr '08

Hi, the C5 updates to openoffice.org-2.0.4-5.4.26 are available on the mirrors, but no announcement has come through the centos-announce mailing list yet. Also, upstream has released gnome-screensaver-2.16.1-5.el5_1.1 and gnome-screensaver-2.16.1-8.el5 (FasTrack channel) beginning of April. Neither is available yet for C5. Best regards, Bernd.

5 4

centos 5.1 xen oddity
by Tomasz Nowak 23 Apr '08

23 Apr '08

Hm... I've yum removed some old kernels in domU and... they seem to dissappear also in dom0! :> Is that possible? -- Tomek

3 2

deny other hosts from synchronizing time with NTP client
by Simon Jolle 23 Apr '08

23 Apr '08

Hi CentOS users We are running CentOS 4.5 with NTP 4.2.0. # cat /etc/ntp.conf restrict default ignore restrict dns1.xxx.xxx mask 255.255.255.0 nomodify notrap noquery restrict dns2.xxx.xxx mask 255.255.255.0 nomodify notrap noquery restrict 127.0.0.1 server dns1.xxx.xxx server dns2.xxx.xxx fudge 127.127.1.0 stratum 10 driftfile /etc/ntp/drift broadcastdelay 0.008 authenticate no The problem is that other hosts are able to synchronize the time from our servers. How to disable that? # lsof -i :123 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME ntpd 4874 ntp 4u IPv4 35805 UDP *:ntp ntpd 4874 ntp 5u IPv6 35806 UDP *:ntp ntpd 4874 ntp 6u IPv4 35807 UDP localhost.localdomain:ntp ntpd 4874 ntp 7u IPv4 35808 UDP xxx:ntp ntpd 4874 ntp 8u IPv4 35809 UDP xxx:ntp ntpd 4874 ntp 9u IPv4 35810 UDP xxx:ntp ntpd 4874 ntp 10u IPv4 35811 UDP xxx:ntp NTP listens on every interface. cheers Simon -- XMPP: sjolle(a)swissjabber.org

4 3

AW: Re: [CentOS] deny other hosts from synchronizing time with NTP client
by Marc Rebischke 23 Apr '08

23 Apr '08

On Tue, Apr 22, 2008 at 5:07 AM, Simon Jolle <urandomdev(a)gmail.com> wrote: > The problem is that other hosts are able to synchronize the time from > our servers. How to disable that? Which other hosts? Other hosts in the same subnet as dns1 and dns2? If that is the problem, maybe you should try changing "mask 255.255.255.0" to "mask 255.255.255.255". The "mask 255.255.255.0" means all the class C subnet. HTH, Filipe _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ######################### Or just create an IPTABLES-Rule to keep those "unwanted" hosts away from Server's NTP-Service... Regards Marc

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss