Discuss

discuss@lists.centos.org

34758 discussions

Re: [CentOS] OT: a very big problem with ipsec-tools on CentOS5 (SOLVED)
by carlopmart 13 Oct '07

13 Oct '07

Buf ... Solved. Problem was that /etc/pam.d/racoon doesn't exists (I found this tip on NetBSD ipsec pages). Simply I have copied /etc/pam.d/passwd to /etc/pam.d/racoon and now all works as expected. Many thanks for your help Ross. Ross S. W. Walker wrote: > > I think it might just use another one like /etc/pam.d/remote > cause I audited the package and it wasn't there. > > Does the "users" group exist and charlie a member of it? > > -Ross > >> -----Original Message----- >> From: carlopmart [mailto:carlopmart@gmail.com] >> Sent: Friday, October 12, 2007 6:54 PM >> To: Ross S. W. Walker >> Subject: Re: [CentOS] OT: a very big problem with ipsec-tools >> on CentOS5 >> >> hi ross, >> >> Yes I compiled with pam option. But I don't have any ipsec >> config file on >> /etc/pam.d ... I didn't find any sample on ipsec-tools 0.7 >> source tree ... where >> is it?? >> >> Ross S. W. Walker wrote: >>> If you compiled ipsec tools yourself did you compile with >> the pam option? >>> If not then you can't tell it to use pam for authentication. >>> >>> If you did, did you setup the appropriate ipsec config file in >>> /etc/pam.d? I believe there is an example one in the ipsec >> source tree. >>> -Ross >>> >>> >>> -----Original Message----- >>> From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> >>> To: centos(a)centos.org <centos(a)centos.org> >>> Sent: Fri Oct 12 18:38:38 2007 >>> Subject: [CentOS] OT: a very big problem with ipsec-tools on CentOS5 >>> >>> Hi all, >>> >>> I am trying to establish a vpn tunnel between one CentOS5 >> IPSec server >>> and a >>> roadwarrior client, CentOS5 too. Roadwarrior use >> ipsec-tools version 0.6.5-8 >>> (that comes with CentOS5) and server uses version 0.7 >> (downloaded from >>> ipsec-tools website). >>> >>> My server configuration is: >>> >>> path include "/etc/racoon"; >>> path certificate "/etc/racoon/certs"; >>> path pre_shared_key "/etc/racoon/psk.txt"; >>> path pidfile "/var/run/racoon.pid"; >>> #log debug; >>> >>> listen { >>> adminsock "/var/racoon/racoon.sock" "root" "nobody" 0660; >>> isakmp 172.28.45.4 [500]; >>> isakmp_natt 172.28.45.4 [4500]; >>> } >>> >>> remote anonymous { >>> exchange_mode aggressive; >>> certificate_type x509 "gwenc.crt" "gwenc.key"; >>> my_identifier asn1dn; >>> proposal_check claim; >>> generate_policy on; >>> nat_traversal on; >>> dpd_delay 20; >>> ike_frag on; >>> passive on; >>> proposal { >>> encryption_algorithm aes; >>> hash_algorithm sha256; >>> authentication_method hybrid_rsa_server; >>> dh_group 2; >>> } >>> } >>> >>> mode_cfg { >>> network4 172.31.78.5; >>> netmask4 255.255.255.240; >>> pool_size 6; >>> dns4 172.25.50.1; >>> auth_source pam; >>> auth_groups "users"; >>> group_source system; >>> auth_throttle 10; >>> pfs_group 2; >>> } >>> >>> sainfo anonymous >>> { >>> pfs_group 2; >>> lifetime time 1 hour; >>> encryption_algorithm rijndael; >>> authentication_algorithm hmac_sha256; >>> compression_algorithm deflate; >>> } >>> >>> When I try to connect from roadwarrior client using xauth, server >>> returns me >>> this errors: >>> >>> 2007-10-13 00:21:52: INFO: ISAKMP-SA established >>> 172.28.45.4[4500]-172.17.35.3[4500] >> spi:e3ff2f5a0873ff54:ad9b13f8035ec2f2 >>> 2007-10-13 00:21:52: INFO: Using port 0 >>> 2007-10-13 00:21:52: ERROR: pam_authenticate failed: >> Authentication failure >>> 2007-10-13 00:21:52: INFO: Released port 0 >>> 2007-10-13 00:21:52: INFO: login failed for user "charlie" >>> 2007-10-13 00:21:52: ERROR: Attempt to release an >> unallocated address >>> (port 0) >>> 2007-10-13 00:21:52: ERROR: mode config 6 from >> 172.17.35.3[4500], but we >>> have no >>> ISAKMP-SA. >>> 2007-10-13 00:21:52: ERROR: unknown Informational exchange received. >>> >>> why? I don't understand. Well, yes, I think that server >> doesn't use >>> really pam >>> libraries or problem is that linux use shadow for passwords instead >>> passwd file. >>> >>> >>> I see a lot of webs on this configuration works out of >> the box, but >>> not for >>> me.... I am really desperated. >>> >>> Many thanks. >>> >>> P.D: On ipsec-tools mailing list i don't receive any response. >>> -- >>> CL Martinez >>> carlopmart {at} gmail {d0t} com >>> _______________________________________________ >>> CentOS mailing list >>> CentOS(a)centos.org >>> http://lists.centos.org/mailman/listinfo/centos >>> >>> >> -------------------------------------------------------------- >> ---------- >>> This e-mail, and any attachments thereto, is intended only >> for use by >>> the addressee(s) named herein and may contain legally >> privileged and/or >>> confidential information. If you are not the intended >> recipient of this >>> e-mail, you are hereby notified that any dissemination, >> distribution or >>> copying of this e-mail, and any attachments thereto, is strictly >>> prohibited. If you have received this e-mail in error, please >>> immediately notify the sender and permanently delete the >> original and >>> any copy or printout thereof. >> >> -- >> CL Martinez >> carlopmart {at} gmail {d0t} com >> > > ______________________________________________________________________ > This e-mail, and any attachments thereto, is intended only for use by > the addressee(s) named herein and may contain legally privileged > and/or confidential information. If you are not the intended recipient > of this e-mail, you are hereby notified that any dissemination, > distribution or copying of this e-mail, and any attachments thereto, > is strictly prohibited. If you have received this e-mail in error, > please immediately notify the sender and permanently delete the > original and any copy or printout thereof. > > -- CL Martinez carlopmart {at} gmail {d0t} com

3 4

Xen VMs: regular filesystem corruption
by Kai Schaetzl 13 Oct '07

13 Oct '07

It seems that Xen VMs are subject to file system corruption under certain conditions. I find that often when I reboot or shutdown a VM the filesystem is corrupted after that and the VM no longer usable. The xm create then fails with some Python errors and an eventual Runtime Error: unable to read filesystem No handlers could be found for logger "xend". Error: boot loader didn't return any data. and I have to throw it away as there doesn't seem a way to fix that (or is there?). I use files for storing the VMs. There is enough space on the drive. The problem seems to happen when I reboot the machine from within itself, not each time, but almost each time. When I shut it down with CTRL+ALT+DEL or with the Shutdown button it doesn't seem to happen. I also find that sometimes a good VM will start up and crash early with a kernel panic, but start up just fine when I try a second or third time. Most often this happened after a new installation on the first reboot. Anyone else seen this or known how to fix that? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

2 2

Install CentOS
by spasti 13 Oct '07

13 Oct '07

hi,whenever I install CentOS,I just can use no more than 10 times on my computer. Then it says:Buffer I/O error......something like that.What 's the problem? -- wonderful !

4 4

finding mysql.h & errmsg.h on CentOS?
by Rogelio 13 Oct '07

13 Oct '07

I am not sure how to modify the config.h script for my CentOS 4.5 box (running Nagios + NDOutils). NDOutils seem to compile fine (./configure && make), but I'm having problems when I try to run the final command in the README file. ********* problems *************************** ndo2db-2x -c /etc/nagios/ndo2db.cfg Support for the specified database server is either not yet supported, or was not found on your system. ************************************************ Someone else (http://tinyurl.com/2jnef8) suggested modding the config.h file in order to eliminate that command CHANGE #include <mysql/mysql.h> #include <mysql/errmsg.h> TO #include </usr/local/mysql/include/mysql/mysql.h> #include </usr/local/mysql/include/mysql/errmsg.h> However, when I looked for mysql.h (e.g. "locate mysql.h") I couldn't find find them (maybe b/c I installed from package?). What might I need to do in order to modify this script for CentOS so that ./configure will run properly and let me install this?

3 6

OT: a very big problem with ipsec-tools on CentOS5
by carlopmart 12 Oct '07

12 Oct '07

Hi all, I am trying to establish a vpn tunnel between one CentOS5 IPSec server and a roadwarrior client, CentOS5 too. Roadwarrior use ipsec-tools version 0.6.5-8 (that comes with CentOS5) and server uses version 0.7 (downloaded from ipsec-tools website). My server configuration is: path include "/etc/racoon"; path certificate "/etc/racoon/certs"; path pre_shared_key "/etc/racoon/psk.txt"; path pidfile "/var/run/racoon.pid"; #log debug; listen { adminsock "/var/racoon/racoon.sock" "root" "nobody" 0660; isakmp 172.28.45.4 [500]; isakmp_natt 172.28.45.4 [4500]; } remote anonymous { exchange_mode aggressive; certificate_type x509 "gwenc.crt" "gwenc.key"; my_identifier asn1dn; proposal_check claim; generate_policy on; nat_traversal on; dpd_delay 20; ike_frag on; passive on; proposal { encryption_algorithm aes; hash_algorithm sha256; authentication_method hybrid_rsa_server; dh_group 2; } } mode_cfg { network4 172.31.78.5; netmask4 255.255.255.240; pool_size 6; dns4 172.25.50.1; auth_source pam; auth_groups "users"; group_source system; auth_throttle 10; pfs_group 2; } sainfo anonymous { pfs_group 2; lifetime time 1 hour; encryption_algorithm rijndael; authentication_algorithm hmac_sha256; compression_algorithm deflate; } When I try to connect from roadwarrior client using xauth, server returns me this errors: 2007-10-13 00:21:52: INFO: ISAKMP-SA established 172.28.45.4[4500]-172.17.35.3[4500] spi:e3ff2f5a0873ff54:ad9b13f8035ec2f2 2007-10-13 00:21:52: INFO: Using port 0 2007-10-13 00:21:52: ERROR: pam_authenticate failed: Authentication failure 2007-10-13 00:21:52: INFO: Released port 0 2007-10-13 00:21:52: INFO: login failed for user "charlie" 2007-10-13 00:21:52: ERROR: Attempt to release an unallocated address (port 0) 2007-10-13 00:21:52: ERROR: mode config 6 from 172.17.35.3[4500], but we have no ISAKMP-SA. 2007-10-13 00:21:52: ERROR: unknown Informational exchange received. why? I don't understand. Well, yes, I think that server doesn't use really pam libraries or problem is that linux use shadow for passwords instead passwd file. I see a lot of webs on this configuration works out of the box, but not for me.... I am really desperated. Many thanks. P.D: On ipsec-tools mailing list i don't receive any response. -- CL Martinez carlopmart {at} gmail {d0t} com

1 0

Safe method to remove old kernels
by Scott Moseman 12 Oct '07

12 Oct '07

# rpm -qa | grep kernel-2 | sort kernel-2.6.9-42.0.10.EL kernel-2.6.9-42.0.2.EL kernel-2.6.9-42.0.3.EL kernel-2.6.9-42.0.8.EL kernel-2.6.9-42.EL kernel-2.6.9-55.0.2.EL kernel-2.6.9-55.0.6.EL kernel-2.6.9-55.0.9.EL kernel-2.6.9-55.EL I'm running the most recent kernel available, and I've never had a problem with any past kernels, so I don't believe there's any reason to keep all of them. I guess kernels get a fresh install instead of an upgrade? Can I safely rpm-e the old kernel packages? Should this be something I do through yum instead? Some of my CentOS servers have even more old kernels than this sample. Thanks, Scott

6 6

question(s) about LVM snapshots
by Tony Schreiner 12 Oct '07

12 Oct '07

I've recently begun to try out LVM snapshots and I have 2 things I'm wondering about My intention is to run backups off the snapshot. As a first iteration, I left 15% of the disk for the snapshot LV. 1. The HOWTO instructions suggest that the snapshot is in effect as long as the snapshot LV exists, and use lvremove to disable the snapshot. Is this the proper way? 2. I chose 15% because the disk is not that active and I think it will be plenty for the duration of the backup I'm doing. Is there a way to track how much space the snapshot is actually using? Cheers, Tony Schreiner Biology Department Boston College

3 4

Can't get XFS enabled on Centos 5.0
by Dan Carl 12 Oct '07

12 Oct '07

I anm trying to enable XFS with no success. I followed the instructions provided in http://wiki.centos.org/Repositories/CentOSPlus I installed the new kernel. Example: 2.6.18-8.1.14.el5.centos.plus I also installed these packages as described in a post I found yum install --enablerepo=centosplus xfsprogs xfsprogs-devel lsmod shows nothing about XFS I would image there are others out there running XFS on Centos boxes. Could you please help. ps. Just joined the list(switching over from Fedora). I recognised the name Scott Silva from the Mailscanner list I also belong to. Small world. Where does he find the time?

4 4

Asus P5B-VM DO board?
by David Mackintosh 12 Oct '07

12 Oct '07

Anyone had any success with or hints for a system based on the Asus P5B-VM DO board, or the Intel Q965 (with its associated Intel GMA 3000 VGA chip) in general? I had to put pci=nommconf in order to get the installer (CentOS 4.5) and the installed system to boot, but I can't get the graphics to work. Following the instructions at the Intel website http://www.intellinuxgraphics.org/install.html ends with a compilation error: # cd drm/linux-core/ # make make -C /lib/modules/2.6.9-55.0.9.ELsmp/source SUBDIRS=`pwd` DRMSRCDIR=`pwd` modules make[1]: Entering directory `/usr/src/kernels/2.6.9-55.0.9.EL-smp-x86_64' CC [M] /root/intel/drm/linux-core/drm_agpsupport.o In file included from /root/intel/drm/linux-core/drmP.h:168, from /root/intel/drm/linux-core/drm_agpsupport.c:34: /root/intel/drm/linux-core/drm_compat.h:114: warning: static declaration of 'kcalloc' follows non-static declaration include/linux/slab.h:103: warning: previous declaration of 'kcalloc' was here /root/intel/drm/linux-core/drm_agpsupport.c: In function `drm_agp_populate': /root/intel/drm/linux-core/drm_agpsupport.c:531: warning: implicit declaration of function `phys_to_gart' /root/intel/drm/linux-core/drm_agpsupport.c: In function `drm_agp_init_ttm': /root/intel/drm/linux-core/drm_agpsupport.c:643: error: structure has no member named `bridge' make[2]: *** [/root/intel/drm/linux-core/drm_agpsupport.o] Error 1 make[1]: *** [_module_/root/intel/drm/linux-core] Error 2 make[1]: Leaving directory `/usr/src/kernels/2.6.9-55.0.9.EL-smp-x86_64' make: *** [modules] Error 2 -- /\oo/\ / /()\ \ David Mackintosh | dave(a)xdroop.com | http://www.xdroop.com

2 2

RPMforge metadata problems
by Dag Wieers 12 Oct '07

12 Oct '07

Hi, Yesterday evening I added a TIMESTAMP to the root of my tree in order to follow up on the correctness of mirrors. And after 12 hours more than 50% of the mirrors do not have that TIMESTAMP file. It is possible that it is filtered out, so the test is not at all valid. I am going to reduce the number of mirrors and only add the ones that have a recent TIMESTAMP. However since information on why this happens (or when this happens) is scarce, I am not sure if reducing the mirrorlist will be effective. So hopefully, after this weekend the problems some of you have seen with Yum and the mirrorlist will be a problem of the past. -- -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors]

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss