Discuss

discuss@lists.centos.org

34753 discussions

RE: [CentOS] Tape drive recommendations
by Plant, Dean 28 Mar '07

28 Mar '07

Don Knott wrote: > LTO3 is the standard these days... LTO4 will be out midyear hopefully > and maybe LTO3 prices will come down. > > I use BRUServer for network backup. It provides similar services to > what your planning to use Amanda for. They maintain a good bit of > information at their websites about drives & scsi cards. I'm on an > older RHEL kernel which they don't support because of scsi problems > that require me to reboot it about 4:00am each day to keep the tape > drive in view or it disappears. Other than that, the setup works well > and LTO3 is fast. > > http://www.tolisgroup.com/ > http://www.linuxtapecert.org/ > Also don't use adaptec SCSI cards with LTO on CentOS3/4. Either the card or the Linux driver just causes hours of heartache. LSI was recommended to me from this list and solved the numerous problems we had while using adaptec/LTO. Dean

2 1

Error Connecting to CN Exception occcurred
by Geof Duncan 28 Mar '07

28 Mar '07

Exception type exceptions.ValueError Exception Handler Information Traceback (most recent call last): File "/usr/share/rhn/rhn_applet/rhn_applet.py", line 521, in refresh self.model.refresh(force) File "/usr/share/rhn/rhn_applet/rhn_applet_model.py", line 457, in refresh source.refresh(force) File "/usr/share/rhn/rhn_applet/rhn_applet_source.py", line 35, in refresh self._do_refresh() File "/usr/share/rhn/rhn_applet/rhn_applet_rpc.py", line 209, in _do_refresh server = self.create_server() File "/usr/share/rhn/rhn_applet/rhn_applet_rpc.py", line 87, in create_server s.add_trusted_cert(self.__cert__) File "/usr/lib/python2.3/site-packages/rhn/rpclib.py", line 466, in add_trusted_cert self._transport.add_trusted_cert(certfile) File "/usr/lib/python2.3/site-packages/rhn/transports.py", line 254, in add_trusted_cert raise ValueError, "Certificate file %s is not accessible" % certfile ValueError: Certificate file /usr/share/rhn/CNS-CA-CERT is not accessible -Geof C. Duncan http://teachageek.com TeachAGeek... give a man to fish he eats for a day, teach a man to fish and he eats for a lifetime. Become one with your inner geek!

4 4

CentOS 4.4 - postgis / postgres Issue
by Tom Brown 28 Mar '07

28 Mar '07

Hi I know this is not directly centos related but if anyone has used postgres before then that would be a help!! Normally i'm an oracle or mysql guy. I have to install a qa postgres box that uses postgis. All seems well but when the devs import the schema this happens... ERROR: could not access file "$libdir/libpostgis.so.0.9": No such file or directory and indeed that library does not exist anywhere on the box. I have looked at the rpm downloaded from postgis.refractions.net and again this library is missing. Is anyone familiar with this setup and know what could be wrong? This was installed using rpm's and not compiled from source. thanks

1 0

removed centos from dual boot laptop (now having trouble booting)
by Jerry Geis 28 Mar '07

28 Mar '07

HI all, I had centos on a laptop (dual boot xp). I am giving the laptop to another person so I removed centos. Now when I reboot grub is confused... I tried to manually enter rootnoverify (hd0,0) makeactive chainloader +1 boot This does boot into XP but how do I tell grub that this is the new rules and do this everytime at boot. Thanks, Jerry

2 1

Re: [CentOS] How to limit a user to access a few sites. (SOLVED)
by Indunil Jayasooriya 28 Mar '07

28 Mar '07

Hi Roy and calin.kalinix.cosma, Thanks for your help all the given to me. Finally, I got it done. Binding an ip address to an username with SQUID and limiting access of some users with their ips to a few sites rules added to squid.conf file external_acl_type ip_user %SRC %LOGIN /usr/lib/squid/ip_user_check -f /etc/squid/ip.conf acl ncsa_users proxy_auth REQUIRED acl ip_users external ip_user %SRC %LOGIN acl clientips src 192.168.101.28 192.168.101.29 192.168.101.30 acl allowedsites url_regex -i "/etc/squid/allowedsites.txt" http_access deny !ncsa_users http_access deny !ip_users http_access deny clientips !allowedsites http_access allow ip_users clientips http_access allow ip_users allowedsites http_access allow ncsa_users clientips http_access allow ncsa_users allowedsites http_access deny clientips Then, created /etc/squid/ip.conf and add the pair (ip and username) [root@worldnet squid]# cat /etc/squid/ip.conf 192.168.101.25 indunil 192.168.101.26 asanka 192.168.101.28 www28 192.168.101.29 www29 192.168.101.30 www30 192.168.101.90 www90 Then, by using htpasswd, I created /etc/squid/squid_passwd file. [root@worldnet squid]# cat /etc/squid/squid_passwd indunil:TeiAQ3uqXDQNg www:Oi4THedCcN0nQ web:EEluAdNUco6.g www90:3CNziF2SkgmAo www28:eXuWlloKq1mk2 www29:6UH7KXjAZ769o www30:RtjV9ZZHEzzaA asanka:gX88uJrvXSV7A Then, created /etc/squid/allowedsites.txt file. [root@worldnet squid]# cat /etc/squid/allowedsites.txt .freebsd.org ebay cnn.com bbc google Then, Finally, [root@worldnet squid]# /etc/init.d/squid restart THNAKS INDUNIL On 3/27/07, Roy Ong <centos-list(a)royong.com> wrote: > On Tue, 2007-03-27 at 12:58 +0530, Indunil Jayasooriya wrote: > > Hi, > > > > > > > > > > I think you probably need to combine a few rules together. > > > Consider the following > > > > > > acl ncsa_users proxy_auth REQUIRED > > > acl ip_users external ip_user %SRC %LOGIN %DST > > > > > acl ALLOWED_DOMAINS url_regex -i google.com bbc.com cnn.com > > > > > > http_access deny !ncsa_users > > > http_access deny !ip_users > > > http_access allow ip_users ALLOWED_DOMAINS > > > http_access allow ncsa_users ALLOWED_DOMAINS > > > http_access deny all > > > > These rules say that ALL the ips have access to google.com bbc.com cnn.com. > > > > That is not What I want. > > oh ok - probably i didn't understand your requirements clearly enuff - i > see that you have provide some details below and i'll attempt there. > > > This is my senario. > > > > There are about 50 users browsing internet. 3 users out of those 50 > > misuse internet. > > So I only want to limit these 3 users. > > Let's say their ips are 192.168.101.25, 192.168.101.26, 192.168.101.30 > > > > Now I want to limit these 3 users' internet acsess to google.com > > bbc.com cnn.com. > > AND, the rest of users should have access to whole wolrd. > > > > I wrote below rules. Pls check !! > > > > external_acl_type ip_user %SRC %LOGIN /usr/lib/squid/ip_user_check -f > > /etc/squid/ip.conf > > > > acl ncsa_users proxy_auth REQUIRED > > acl ip_users external ip_user %SRC %LOGIN > > > > acl clientips src 192.168.101.25 92.168.101.26 192.168.101.30 > > acl allowedsites url_regex -i "/etc/squid/allowedsites.txt" > > > > http_access deny !ncsa_users > > http_access deny !ip_users > > http_access allow ip_users clientips > > http_access allow ip_users allowedsites > > http_access allow ncsa_users clientips > > http_access allow ncsa_users allowedsites > > http_access deny clientips > > i would probably change to > > http_access deny !ncsa_users > http_access deny !ip_users > http_access deny clientips !allowedsites <---added this > http_access allow ip_users clientips > http_access allow ip_users allowedsites > http_access allow ncsa_users clientips > http_access allow ncsa_users allowedsites > http_access deny clientips > > the added statement will DENY access if they belong to "clientips" i.e. > 192.168.101.25 or 192.168.101.26 or 192.168.101.30 AND they are trying > to go to a url that is NOT defined in /etc/squid/allowedsites.txt > > remembering that http_access statements are carried out in sequence, the > following will probably be true for the above > > 1. DENY if NOT ncsa_users > 2. DENY if NOT ip_users > 3. DENY if clientips AND NOT allowedsites > 4. ALLOW if ip_users AND clientips > 5. ALLOW if ip_users AND allowedsites > 6. ALLOW if ncsa_users AND clientips > 7. ALLOW if ncsa_users AND allowedsites > 8. DENY if clientips > > > > my etc/squid/allowedsites.txt is like this. > > [root@worldnet ~]# cat /etc/squid/allowedsites.txt > > google.com > > bbc.com > > cnn.com > > > > > > But, It still does not work. > > > > Pls help me to solve this issue. > > > > > > > > > Basically, a new ACL was added and the corresponding http_access test, > > > it will only > > > > > > (a) be allowed IF it fulfilled the test of being an ip_users and going > > > to a domain as defined in the ALLOWED_DOMAINS acl > > > > > > ~ or ~ > > > > > > (b) be allowed IF it fulfilled the test of being an ncsa_users and going > > > to a domain as defined in the ALLOWED_DOMAINS acl > > > > > > Hope this helps. > > > > > > > > > _______________________________________________ > > > CentOS mailing list > > > CentOS(a)centos.org > > > http://lists.centos.org/mailman/listinfo/centos > > > > > > > > -- Thank you Indunil Jayasooriya

1 0

RE: [CentOS] OpenOffice 2.1 with CentOS 4.4 x86_64 doesn't work
by MOKRANI Rachid 28 Mar '07

28 Mar '07

Hi, After some investigations, I can run Openffice 2.1 on CentOS 4.2 x86_64. The problem is the javadlx program. The first solution is to comment the line javadlx in the file /usr/soft/bin/soffice. After doing this all works fine. OR An other second solution, is to not comment the line javadlx and remove the following package /usr/bin/yum -y remove java-1.4.2-gcj-compat-1.4.2.0-27jpp.noarch After doing one of this, OpenOffice 2.1 start fine. Regards. __________________________ Ce message (et toutes ses pièces jointes éventuelles) est confidentiel et établi à l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'IFP décline toute responsabilité au titre de ce message. This message and any attachments (the message) are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP should not be liable for this message. Visitez notre site Web / Visit our web site : http://www.ifp.fr __________________________

1 0

Backing Up A Xen Guest
by Graham Jenkins 28 Mar '07

28 Mar '07

Here's the problem. We perform full tar backups of our CentOS 4/5 machines in real-time at regular intervals. And when a disaster happens, we are able to restore those backups onto virgin filesystems, make the /dev/null, /dev/zero and /dev/console devices .. and boot the machine. This has worked well on standalone systems, and also on Xen 3.0.3 guests on CentOS 4.4 machines, where each guest filesystem resides on regular (Xen-host) real filesystem. But there's no way we've been able to make it work for CentOS 5 Beta guests on CentOS 5 Beta Xen hosts, where each guest disk resides in a file. The strategy goes something like: * losetup -o 32256 /dev/loop0 /XenGuests/Guest1 * mkfs -t ext3 /dev/loop0 * mount -t ext3 /dev/loop0 /mnt * cd /mnt && tar xjpf /tmp/Guest1.tbz * for i in console null zero; do /sbin/MAKEDEV -d /mnt -x $i; done * cd /tmp; umount /srv/vm1; losetup -d /dev/loop0 * xm create -c Guest1 And it always gets most of the way through .. then the guest dies. Ideas anyone .. please? -- Graham Jenkins +61 3 9925 4909 Victorian Partnership for Advanced Computing http://www.vpac.org/ PO Box 201, Carlton South, Vic. 3053, Australia

2 2

telnet and Gnome logins
by Kanwar Ranbir Sandhu 28 Mar '07

28 Mar '07

Hello, I have a thin client user with a regular Gnome desktop that he logs into everyday. He also telnets from a remote site into the same server that provides his Gnome desktop. I know, telnet is insecure, but it's all over VPN, so it's a little better. Also, he's using telnet from Windows system. Anyway, management wants a console app to be executed when that user logs in over telnet. That's easy enough with a "exec app" line in his .bash_profile. But, that prevents gnome-session from starting when he logs into his Gnome desktop. Is it possible to do both? That is, give him his Gnome desktop when he logs in from GDM, and the console app when he logs in over telnet? The easiest solution I can think of is installing NX Client on the Windows PC and configuring it to execute a script that starts gnome-terminal with console app passed to it (gnome-terminal -x app). freenx is already installed and running on the server. Are there any other options? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.20-1.2925.fc6 i686 GNU/Linux 12:29:45 up 4 days, 3:26, 3 users, load average: 0.12, 0.29, 0.67

3 3

how to replace files only if larger
by Robert Moskowitz 28 Mar '07

28 Mar '07

I am consolidating a lot of files. I have archives of Internet drafts, from over the years. I just pulled down all the current Internet Drafts. I want to mv all my other stored IDs to this current directory ONLY if, they are larger. You may be aware that when a draft is expired, a small file is left in the directory for some time with content like: "This Internet-Draft has been deleted. Unrevised documents placed in the Internet-Drafts directories have a maximum life of six months. After that time, they are deleted. This Internet-Draft was not published as an RFC. " If I have the actual draft, I would like it to replace this little tab. But if the draft is still available, then my old archive will tend to have a newer date, as I use to grab IDs via FTP which would date my copy the date I grabbed them. I built my current directory with wget with the -m option, which perserves the original file's date... I would even be willing to do this with Nautilus, but so far it just tells me the file exists in the target directory and do I want to replace it... Thanks for any help you can provide... ============================ Just had a 'nasty' thought. By using mget -m to maintain my IDs directory, all my efforts would be for naught, as the deleted message file will have a newer date than my copy of the original draft and overwrite it. Crude. Got to think some more on this......

2 1

CentOS and EMC PowerPath/Naviagent
by Bisbal, Prentice 27 Mar '07

27 Mar '07

Is anyone using CentOS 4.4 with an EMC Clariion SAN? In particular, I want to know if PowerPath and Naviagent will work on a CentOS 4 system connected to a san using Qlogic or Emulex cards. I tried a couple years ago with Fedora Core 1 or 2, and couldn't get the kernel modules from PowerPath to work since the kernel wasn't the official RHEL one. I'm most interested in Centos4.4/x86_64, but Centos 4.4/x86 is if interest, too. -- Prentice The contents of this communication, including any attachments, may be confidential, privileged or otherwise protected from disclosure. They are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient, please do not read, copy, use or disclose the contents of this communication. Please notify the sender immediately and delete the communication in its entirety.

2 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss