Discuss

discuss@lists.centos.org

34758 discussions

RE: [CentOS] Best backup software for linux
by Mark Schoonover 03 Nov '06

03 Nov '06

Matt Hyclak wrote: > On Tue, Oct 24, 2006 at 04:01:45PM +0100, Peter Crighton enlightened > us: >>> We are running backup softwares for incrementals/differentials and >>> full backups with variouse softwares currently using dirvish >>> scripts + amanda .. what is everyones views on other opensourced >>> backup software? is there anything better or other options we have >>> missed? We are looking at backula as an option? any thoughts? >> >> I am looking for the answer to the same question. I have got amanda >> going (but not used in anger - just doing my first Centos install for >> my home server). Just today got amanda to write and restore some >> data. >> >> So my requirements: >> >> * cheap/free >> * multiple backups per tape >> * fully automated backup each day >> * easy recovery (happy with either a Kdat type GUI or amanda type) - >> needs to know which tape to recover the latest (or chosen) version. >> * ideal for a home network (mixed Linux Windows) >> >> >> >> The only thing I don't like about amanda (so far) is that it needs a >> new tape each backup, mainly because I'd like it to be a completely >> automatic backup, only requiring the tape to be changed when full >> (or maybe each month). >> >> I typically don't backup much data each day (because it's a home >> network), so I'd like to be able to store multiple backups on each >> tape. I have 20GB Travan tape drive, so that's enough for a complete >> full backup and several incremental's. >> > > If you have enough holding disk, just leave the tape out until you > hit about 20GB worth of data. I do this here at work on a weekly > basis - holding disk is a pair of RAID 1 disks, then once a week I > pop a tape in and it flushes the entire week's worth of data. > > Matt If you have 20GB of data, using tapes is OK. In my case, I have about 3TB of data that needs to be backed up, and taken offsite. So, the only real option is rsync going out to disks. We started out with using one of the recipes from the Linux Server Hacks book, #38, #41 & #42 to essentially build up a poor man's SAN. Using CentOS installed on systems with 3Ware cards, I have 2 onsite 4 TB NAS. The first one is for network use, the second is for hourly, daily and weekly snapshots of the main NAS. There's a third 4TB NAS that's located offsite in a colo facility that's fed with dual T1s. We can have anywhere from 2-5 GB of data change every day. We're a company of about 50 employees, and we do legal work - so nothing can be thrown away. This system runs 7 days a week, and it's fully automated with email alerts, etc. The big benefit is restores. We've had our graphics dept accidently delete 250GB of data, and it was trivial to scp the missing data back to the main NAS. It all happened at network speeds, over a GB switch. All the NASes have dual NICS in them, and the second NICS are connected to their own private GB switch - hence the poor man's SAN. When hourly snapshots run, all the data that changes has a seperate GB network to move the data, leaving the office network alone. No user can tell that backups are happening throughout the day. Maybe this is something I should write up in more detail. The entire system runs on just a couple of shell scripts, rsync, and Perl program to mail out logs.... HTH Mark Mark

8 7

CentOS 3 - Progress DB issue
by Tom Brown 03 Nov '06

03 Nov '06

Hi I have been given an issue with a progress box by one of our DBA's The issue is this.... /usr/dlc91d/bin> ldd _sqlsrv2 libprosqlsnd.so => not found libprosqlrds.so => not found libprosqlsnw.so => not found libprosqlgeneric.so => not found libprosqldb.so => not found libprosqlmm.so => not found libpronls.so => not found libprosqlss.so => not found libprosqljava.so => not found libprosqlos.so => not found librocket_r.so => not found libusort.so => not found libjvm.so => not found libhpi.so => not found libnsl.so.1 => /lib/libnsl.so.1 (0xb75c9000) libpthread.so.0 => /lib/tls/libpthread.so.0 (0xb75b8000) libcrypt.so.1 => /lib/libcrypt.so.1 (0xb758b000) libdl.so.2 => /lib/libdl.so.2 (0xb7588000) libstdc++-libc6.1-1.so.2 => /usr/lib/libstdc++-libc6.1-1.so.2 (0xb7546000) libm.so.6 => /lib/tls/libm.so.6 (0xb7524000) libc.so.6 => /lib/tls/libc.so.6 (0xb73ed000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0xb75eb000) does anyone know what package will provide those libs on a CentOS 3 box ? thanks

1 1

Re: [CentOS] Apache 2.2X
by Daniel Senie 03 Nov '06

03 Nov '06

At 07:09 PM 11/2/2006, Tim Uckun wrote: >>After removing all the stuff that depends on apache (mod_python, mod_ssl, >>http_suexec, webalizer, subversion, etc.), the Apache supplied RPMs seem to >>install fine. Of course you wouldn't be using all the same patches and >>configs from the CentOS rpm version, and there's no guarantee it will work >>well with the provided libraries (it probably will provided they have all >>their requires in the spec file correct). If you don't need any >>functionality out of Apache other than what you are putting in yourself >>(rails, mongrel, mod_proxy_balance), this might work. > >I didn't want to start down that path of uninstalling everything and >then reinstalling them again. I was kind of hoping there would be a >repository I could add to repos.d and then yum upgrade httpd. > >I am afraid I don't have the time or the expertise to try and roll >my own RPMs. Indeed this is one of the problems with RHEL distributions... they get stale on some of the more major packages and provide no good way to fix that without creating a support issue for yourselves. I had a chat with someone from RedHat at LinuxWorld Boston about this. Sounded like it was something they were hearing a lot, but hadn't figured out how to address. In my case, I'd like to be running sendmail 8.13.x so as to be more up-to-date on milter compatability, but didn't want to be dealing with having to build RPMs and play the dependency issue game from there. While it's true the next major release will incorporate the newer sendmail, the selling point of longer-term support is then nullified some. It's nice to stay on a relatively stable release and NOT have major upheavals in the entire platform so often, but it would be powerful to couple that stability with the ability to easily update key componentry in just one or two areas. That way, you could have something very stable for a platform base, plus the one newer component needed for a server's core function (web-related in the case of the poster here, email-related in my case). Hopefully in the future there will be a way to deal with this.

2 1

-all-static problems when linking apps which require -lpthread and -lc
by Alexey Loukianov 03 Nov '06

03 Nov '06

Hello all, I used to use fully statically linked PHP, which I build into RPM using own-written spec-file. I need to do this as there are a lot of boxes with old linuxes (RedHat 6.2, 7, 9) which I can't upgrade to CentOS3/4 right now for a several reasons I don't want to explain here. When I've been using CentOS 4.0 and 4.1 - there were no big problems to link PHP as static executable (i.e., when ldd says that "php not a dynamic executable"). All I have to do, is: LIBS="`pkg-config openssl --libs` `pkg-config --libs libxml-2.0` -lungif -lstdc++" \ LDFLAGS="-static -static-libgcc" \ CFLAGS="`pkg-config openssl --cflags` $RPM_OPT_FLAGS" \ ./configure ..... and LDFLAGS="-all-static -static-libgcc" \ CFLAGS="`pkg-config openssl --cflags` $RPM_OPT_FLAGS" \ make %{?_smp_mflags} It was sufficient to successfully compile totally static executable. After up2dating my compile box to CentOS 4.3 I receive following errors when trying to link PHP statically: ... ....(cuted a lot of lines and minor warnings).... .... /usr/lib/libpthread.a(lockfile.o)(.text+0x0): In function `flockfile': : multiple definition of `_IO_flockfile' /usr/lib/libc.a(flockfile.o)(.text+0x0): first defined here /usr/bin/ld: Warning: size of symbol `_IO_flockfile' changed from 30 in /usr/lib/libc.a(flockfile.o) to 18 in /usr/lib/libpthread.a(lockfile.o) /usr/lib/libpthread.a(lockfile.o)(.text+0x0): In function `flockfile': : multiple definition of `__flockfile' /usr/lib/libc.a(flockfile.o)(.text+0x0): first defined here /usr/bin/ld: Warning: size of symbol `__flockfile' changed from 30 in /usr/lib/libc.a(flockfile.o) to 18 in /usr/lib/libpthread.a(lockfile.o) /usr/lib/libpthread.a(lockfile.o)(.text+0x14): In function `funlockfile': : multiple definition of `_IO_funlockfile' /usr/lib/libc.a(funlockfile.o)(.text+0x0): first defined here /usr/bin/ld: Warning: size of symbol `_IO_funlockfile' changed from 30 in /usr/lib/libc.a(funlockfile.o) to 18 in /usr/lib/libpthread.a(lockfile.o) /usr/lib/libpthread.a(lockfile.o)(.text+0x14): In function `funlockfile': : multiple definition of `__funlockfile' /usr/lib/libc.a(funlockfile.o)(.text+0x0): first defined here /usr/bin/ld: Warning: size of symbol `__funlockfile' changed from 30 in /usr/lib/libc.a(funlockfile.o) to 18 in /usr/lib/libpthread.a(lockfile.o) /usr/lib/libkrb5.a(cc_file.o)(.text+0x1add): In function `krb5_fcc_generate_new': : warning: the use of `mktemp' is dangerous, better use `mkstemp' collect2: ld returned 1 exit status make: *** [sapi/cli/php] Ошибка 1 As you can see, the trouble is that there are same functions defined in main glibc lib and in libpthread: [root@cappa SPECS]# nm /usr/lib/libc.a --defined-only 2>/dev/null | grep flockfile flockfile.o: 00000000 W flockfile 00000000 T __flockfile 00000000 T _IO_flockfile [root@cappa SPECS]# nm /usr/lib/libpthread.a --defined-only 2>/dev/null | grep flockfile 00000000 W flockfile 00000000 T __flockfile 0000003c T __flockfilelist 00000000 T _IO_flockfile So, the question is: what the hell?! Are there any ways to successfully compile PHP statically on CentOS4.3 box? And why the hell are this functions defined in both libc and libpthread, making impossible to link any programme statically when using both glibc and nptl? Of course, I can downgrade my compile-box to CentOS 4.1 or 4.0, but that wouldn't be cool as I'll loose any bug-fixes made to general libs in 4.2, 4.3 and following. So I dislike it . Thanks in advance. P.S. This is cross-post from: http://www.centos.org/modules/newbb/viewtopic.php?topic_id=5893&forum=28 -- Best regards, Alexey Loukianov mailto:aloukianov@lavtech.ru Software Development Department, Lavtech Corp http://mnogo.ru, http://lavtech.ru

1 0

Apache 2.2X
by Tim Uckun 03 Nov '06

03 Nov '06

Hello All. I am trying to set up a rails+mongrel+mod_proxy_balance application. Unfortunately the stock apache install on centos is the 2.0 series which does not support mod_proxy_balance. I could not find the 2.2X RPMs on dag or dries either. Is there a yummy way to upgrade to the 2.2 series of apache? I tried with the individual RMPS but no joy there due to comples web of dependencies.

5 8

CentOS 4: top default "solaris mode"
by Alan Sparks 03 Nov '06

03 Nov '06

Is there a way to default "top" to Solaris mode for all users (without using a .toprc in every user's home dir)? We're not big fans of >100% CPU usage stats... Thanks. -- Alan Sparks, UNIX/Linux Systems Integration and Administration <asparks(a)doublesparks.net>

2 3

RE: [CentOS] mppe support in kernel-2.6.9-42.0.3.EL
by Ian Anderson 02 Nov '06

02 Nov '06

I would second this suggestion. We use OpenVPN to control access to our management network and it works really well. We currently manage over 50 people with VPN keys and the list is growing. The only drawback is that there isn't a very good web based GUI to administer your keys. When you have a security team consisting of 10 people, it can be a bit of a pain relying on bash scripts for key generation/revocation. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Alex Palenschat Sent: Thursday, November 02, 2006 1:39 PM To: CentOS mailing list Subject: RE: [CentOS] mppe support in kernel-2.6.9-42.0.3.EL > > MPPE required, but kernel has no support. > > > > Can anyone help me with getting this module for the 2.6.9-42.0.3.EL > > kernel??? > > > MPPE can cause you much heartache (as I learned the hard way > at my last > job...). I'd recommend using the dkms packages that PoPTop provide > (http://sourceforge.net/project/showfiles.php?group_id=44827) > > The first section of this FC faq at pptpclient outlines the > steps to get > it installed > (http://pptpclient.sourceforge.net/howto-fedora-core-4.phtml) > > -Shawn Or you could just use the very fast/modern/more secure openvpn package from DAG's repository. Loads up very easily with no patching or compatibility issues and can be configured using certificates (no poor user password). The only real added work is loading the client software. Just my 2 cents, Alex _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

RE: [CentOS] mppe support in kernel-2.6.9-42.0.3.EL
by Alex Palenschat 02 Nov '06

02 Nov '06

> > MPPE required, but kernel has no support. > > > > Can anyone help me with getting this module for the 2.6.9-42.0.3.EL > > kernel??? > > > MPPE can cause you much heartache (as I learned the hard way > at my last > job...). I'd recommend using the dkms packages that PoPTop provide > (http://sourceforge.net/project/showfiles.php?group_id=44827) > > The first section of this FC faq at pptpclient outlines the > steps to get > it installed > (http://pptpclient.sourceforge.net/howto-fedora-core-4.phtml) > > -Shawn Or you could just use the very fast/modern/more secure openvpn package from DAG's repository. Loads up very easily with no patching or compatibility issues and can be configured using certificates (no poor user password). The only real added work is loading the client software. Just my 2 cents, Alex

1 0

mppe support in kernel-2.6.9-42.0.3.EL
by Sherwyn Greene 02 Nov '06

02 Nov '06

Hi all I have installed pptpd on my server to run a vpn connection for some clients, but I got this error in the log file MPPE required, but kernel has no support. Can anyone help me with getting this module for the 2.6.9-42.0.3.EL kernel??? Thanks Sherwyn Greene Planner / I.T. Technician Project Controls Dept. Kentz-OJ's E&I Services J.V. +1 (868) 648-0876

2 1

Using perl-Net-SSH-Perl with pubkey authentication under CGI.
by Will McDonald 02 Nov '06

02 Nov '06

Guys, I wonder if anyone can give me any pointers here, I hope it's CentOS related enough not to be too off topic, if it is then apologies. I'm attempting to setup a CGI which can connect to a remote system and execute a command. On the 'client', for the Apache user 'apache' I've given it a shell and generated a key-pair. I've configured Keychain [ http://www.gentoo.org/proj/en/keychain/ ] to load the keys for the apache user and make these persistently available via ssh-agent. I've setup a specific user 'cgissh' on the remote target system and configured its authorized_keys with apache@client's pubkey. >From the client system, running the following script from the shell returns the information I'd expect... [apache@webdev1 cgi-bin]$ cat perl-net-ssh-perl-test.pl #!/usr/bin/perl print "Content-type: text/html\n\n"; print "<HEAD><TITLE>Quick Test</TITLE></HEAD>"; $ENV{HOME} = "/var/www"; $ENV{USER} = "apache"; use Net::SSH::Perl; $sshhost='target'; $sshuser='cgissh'; $sshport='22'; $sshprotocol='2'; $sshdebug='1'; $sshcipher='3des-cbc'; $sshconn = Net::SSH::Perl->new($sshhost, protocol=>$sshprotocol, port=>$sshport, debug=>$sshdebug, cipher=>$sshcipher); $sshconn->login($sshuser); my($out,$err) = $sshconn->cmd('hostname'); print "<HTML>"; print "<BODY>"; print $out; print "</HTML>"; print "</BODY>"; It's definately using the pubkey information from Keychain as the target system ONLY accepts key-based authentication and I'm "su - apache"d to run the script so it's not picking up another users ssh-agent key info from the environment. Attempting to execute the same script as a CGI by accessing http://client/cgi-bin/perl-net-ssh-perl-test.pl results in the following in the logs... [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Reading configuration data /var/www/.ssh/config [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Reading configuration data /etc/ssh_config [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Connecting to manlvs1, port 2251. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Remote version string: SSH-2.0-OpenSSH_3.9p1 [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Remote protocol version 2.0, remote software version OpenSSH_3.9p 1 [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Net::SSH::Perl Version 1.30, protocol version 2.0. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: No compat match: OpenSSH_3.9p1. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Connection established. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Sent key-exchange init (KEXINIT), wait response. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Algorithms, c->s: 3des-cbc hmac-sha1 none [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Algorithms, s->c: 3des-cbc hmac-sha1 none [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Entering Diffie-Hellman Group 1 key exchange. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Sent DH public key, waiting for reply. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Received host key, type 'ssh-dss'. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Host 'manlvs1' is known and matches the host key. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Computing shared secret key. [Wed Nov 01 17:12:07 2006] [error] [client 192.168.1.2] clienthostname: Verifying server signature. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Waiting for NEWKEYS message. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Enabling incoming encryption/MAC/compression. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Send NEWKEYS, enable outgoing encryption/MAC/compression. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Sending request for user-authentication service. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Service accepted: ssh-userauth. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Trying empty user-authentication request. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Authentication methods that can continue: publickey,keyboard-interactive. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Next method to try is publickey. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Trying pubkey authentication with key file '/var/www/.ssh/id_dsa' [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Will not query passphrase for '/var/www/.ssh/id_dsa' in batch mode. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Loading private key failed. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] Permission denied at /home/clientusername/cgi-bin/perl-net-ssh-per l-test.pl line 18 Why is it failing to load the private key? Do I need to source something from the shell into the Perl script as would with a shell script to use the Keychain agent information? If this was a shell script I'd have used '[[ -f $HOME/.keychain/$HOSTNAME-sh ]] && source $HOME/.keychain/$HOSTNAME-sh'. Additional info: Both systems are up-to-date CentOS 4.4 systems running the default Apache with perl-Net-SSH-Perl and its dependencies from RPMForge. Any pointers greatly appreciated. Will.

3 4

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss