Discuss

discuss@lists.centos.org

34753 discussions

Squirrel mail search tool fails
by Paul 23 Jun '06

23 Jun '06

When I do a search in squirrelmail, it will start giving several results, but then fails. I use squirrelmail via https. maillog reveils: file message-body-search.c: line 391 (message_body_search_ctx): assertion failed: (input->v_offset <= part->physical_pos) Squirrel mail browser interface reveils: ERROR: Connection dropped by IMAP server. Query: SEARCH CHARSET UTF-8 ALL TEXT {4} "text" Current versions (all up to date) squirrelmail-1.4.6-5.el4.centos4 dovecot-0.99.11-2.EL4.1 openssh-server-3.9p1-8.RHEL4.12 Can someone point me in a direction? I just cut-over to CentOS4.3 (fresh install) from FC1 and this is the first bug which I have never seen before. Thanks. -- ^^^^^^^^^^^^| || \ | Budvar ######|| ||'|"\,__. | _..._...______ ===|=||_|__|...] "(@)'(@)""""**|(@)(@)*****(@)I

1 0

RE: [CentOS] x86 uniprocessor 4GB memory (fwd)
by Maciej Żenczykowski 23 Jun '06

23 Jun '06

If you have an AGP video card which you aren't actually using you can try selecting the minimum possible AGP apperture (window whatever) size (possibly even disable it?). This might help. Also removing the AGP card and using a junk 1-8MB svga card will also possibly work. In my experience the linear framebuffer of video cards is by far the greatest memory hog these days. Cheers, MaZe. On Thu, 22 Jun 2006, Bruno Sousa wrote: > Hi there, > > It seems like the bios of this machine doesn't have any type of > configuration regarding the memory mapping. > I'm already using the kernel-hugemem , but the problem remains. > What else can be done? > > By the way, if the machine had more than one cpu, the problem would remain? > > Best regards, > Bruno Sousa > > -----Mensagem original----- > De: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Em nome de > James Pearson > Enviada: quinta-feira, 22 de Junho de 2006 15:54 > Para: CentOS mailing list > Assunto: Re: [CentOS] x86 uniprocessor 4GB memory > > Bruno Sousa wrote: >> Hi there, >> >> I'm currently using CentOS 4.3 (Server edition) in a HP DC 5100 with the >> IntelR 915GV chipset, powered by a PIV 3.0GHZ. >> >> Now I'm facing a problem, with memory. >> >> I got myself 4GB of memory, the system bios detects it correctly, but in >> Linux can only see around 3.5gb memory. With the default kernel-smp (I use >> hyperthread) or with kernel-hugemem , I have the same results. >> >> Is there any way to workaround this issue? > > It is probably the 4Gb memory hole issue - various 'things' reserve > memory below 4GB so hiding the real memory from the OS. > > Your BIOS may have a mapping option to map some of this hidden real > memory to above 4Gb - however, you need to use a hugemem kernel to > access this memory. > > James Pearson > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > > >

2 1

OT -- BASH
by Robert 23 Jun '06

23 Jun '06

Can someone explain why this: find . -depth -print0 | cpio --null -pmd /tmp/test will copy all files in and below the current directory -and- this: find . -depth -print | grep -v .iso$ | wc -l will count all the non-iso files -and- this: find . -depth -print | grep .iso$ | wc -l will count *only* the iso files -but- this: find . -depth -print0 | grep -v .iso$ | cpio --null -pmd /tmp/test doesn't copy *anything*? Any suggestions for a work-around would also be most welcome.

8 15

Building Mail Server, Need Advice
by Ajay Sharma 22 Jun '06

22 Jun '06

Hello, We're getting around to upgrading our mail server and here are the quick specs: MegaRAID SCSI 320-2X http://www.lsilogic.com/products/megaraid/scsi_320_2x.html TYAN Transport TA26 B2882T26U8H 2U Barebone Server-Rackmount - Retail http://www.newegg.com/Product/Product.asp?item=N82E16856152007 plus RAM, CPU and 4 SCSI drives setup in a RAID-5 Is that MegaRAID controller supported in CentOS4.3 out of the box? I really don't want to muck around with driver disks and the like. Anyone else have suggestions? Thanks, Ajay -- Satyajot (Ajay) Sharma REVShare System Administrator

3 5

HP DL360, tg3 driver, bonding and link flapping
by Michael Grinnell 22 Jun '06

22 Jun '06

Hi *, I'm running into a problem configuring bonding on an HP DL 360 G4p, running 4.3 + tg3 driver version 3.43f. I'm connecting eth0 and eth1 to a Cisco 2948 (CatOS 8.1(3)) and receiving flapping notices. The ethernet address is that of the primary interface. I have tried several different modes, including balance-rr (0), active-backup (1), and balance-alb (6). All have the same problem. More detailed info follows. 2.6.9-34.ELsmp #1 SMP Wed Mar 8 00:27:03 CST 2006 i686 i686 i386 GNU/ Linux [root@centos-test ~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=192.168.100.71 NETMASK=255.255.255.0 NETWORK=192.168.100.0 BROADCAST=192.168.100.255 GATEWAY=192.168.100.1 ONBOOT=yes BOOTPROTO=none USERCTL=no [root@centos-test ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 USERCTL=no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none [root@centos-test ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth1 DEVICE=eth1 USERCTL=no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none [root@centos-test~]# cat /etc/modprobe.conf alias eth0 tg3 alias eth1 tg3 alias bond0 bonding options bond0 mode=0 miimon=100 alias scsi_hostadapter cciss alias usb-controller ohci-hcd [root@centos-test ~]# modinfo tg3 filename: /lib/modules/2.6.9-34.ELsmp/kernel/drivers/net/tg3.ko author: David S. Miller (davem(a)redhat.com) and Jeff Garzik (jgarzik(a)pobox.com) description: Broadcom Tigon3 ethernet driver license: GPL version: 3.43f 7AC5B2FE640CA3E42CEB7C1 parm: tg3_debug:Tigon3 bitmapped debugging message enable value vermagic: 2.6.9-34.ELsmp SMP 686 REGPARM 4KSTACKS gcc-3.4 Port Name Status Vlan Level Duplex Speed Type ----- ------------------ ---------- ---------- ------ ------ ----- ------------ 2/11 Port 11 connected 256 normal a-full a-100 10/100BaseTX 2/12 Port 12 connected 256 normal a-full a-100 10/100BaseTX 2006 Jun 22 16:01:01 EDT -05:00 %ETHC-5-PORTTOSTP:Port 2/11 joined bridge port 2/11 2006 Jun 22 16:01:01 EDT -05:00 %ETHC-5-PORTTOSTP:Port 2/12 joined bridge port 2/12 2006 Jun 22 16:01:02 EDT -05:00 %SYS-4-P2_WARN: 1/Host 00:14:38:4c:e1:ee is flapping between port 2/12 and port 2/11 2006 Jun 22 16:01:19 EDT -05:00 %SYS-4-P2_WARN: 1/Host 00:14:38:4c:e1:ee is flapping between port 2/11 and port 2/12 I found http://www.uwsg.iu.edu/hypermail/linux/net/0605.1/0008.html but it wasn't very helpful. Other users seem to have it "just work." If anybody has run into this, I would appreciate some pointers. Thanks, Michael Grinnell Network Security Administrator The American University

1 0

RE: [CentOS] CentOS-4.4 - Some major changes on the way
by Nielsen, Steve 22 Jun '06

22 Jun '06

Just curious... are there preview packages of seamonkey available anywhere for download ? Steve -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Tuesday, June 20, 2006 6:03 AM To: CentOS ML Subject: [CentOS] CentOS-4.4 - Some major changes on the way I would like to take the time to inform people that CentOS-4.4 will contain some major changes. The changes are significant enough that I would like to spell out some of them now, probably at least a month before the release of the upstream "EL4 update 4" is released. The Mozilla Suite (Browser, Mail, Chat clients) will be replaced by SeaMonkey. This is due to Mozilla's change in policy and support for older versions. The Firefox 1.0.x (currently 1.0.8) web browser will be replaced by Firefox 1.5.x (currently 1.5.0.3). We currently have a version of Firefox 1.5.x in the CentOSPlus repo. That version will be replaced by the EL4 version after some more testing ... and the new version will be rolled into CentOS-4.4 in the Base repository when CentOS-4.4 is released. The Thunderbird 1.0.x (currently 1.0.8) will be upgraded to Thunderbird 1.5.x (currently 1.5.0.2). The OpenOffice.org 1.1.2 will be replaced by OpenOffice 1.1.5. This allows better sharing of files between OpenOffice.org 2.0 and CentOS clients. ------------------------------- All these changes will be implemented upstream and rolled out in the released source code, so they will be incorporated into CentOS as well. We will fully test these packages prior to release of the CentOS-4.4 ISOs, however these changes are fairly substantial. I would also like to remind people who are more cautious that CentOS has a vault that will contain CentOS-4.3 after we shift the main mirrors to CentOS-4.4. The vault is available at: http://vault.centos.org/ I am not suggesting that people don't upgrade (as security updates would require one to maintain the current version), but I am just providing information so that if the updates break something, you can easily get back to a known previous version. We have not had any problems so far with the new packages in our testing, and they will be deemed STABLE by upstream when they are released, however these changes are by far the most significant since the release of CentOS-4 and I think they deserve some special attention. Thanks, Johnny Hughes CentOS-4 Lead Developer

1 0

RE: [CentOS] Apache Security
by King, John (Greg) (LMIT-HOU) 22 Jun '06

22 Jun '06

Just as an fyi on a good checklist for linux (not comprehensive but a good start) http://www.cisecurity.org/bench_linux.html And some good areas via google on secure centos installations. If they do it again then it wont be your perl script obviously as you mentioned disabling the script, but if not, is your script configured with use strict and taint? Is every var in the script checked to ensure the data is within an allowed range? Does the perl script rely on third-party modules? If so you might check there as well. The rest is an assumption that you may have php installed on the system and someone may have used a php script as a gateway into your system. Even though the box has been compromised you may get lucky if this is related to apache by looking at the timestamp on the files in /tmp and correlate those with your apache logs. If so check your php logs as well(if you enabled it in /etc/php.ini). Are you running in safe mode? There are some things you can do to help reduce the amount of damage a vulnerable php script can do: safe_mode = On safe_mode_gid = On safe_mode_include_dir = /path where any include files you trust reside. Read only by apache process safe_mode_exec_dir = /path to area where you allow any executables to be called from php scripts Also (not restricted to safe mode) is if this is a home server you can also restrict where php scripts can 'roam': open_basedir = /var/www/html (for example) will prevent php scripts from going outside the /var/www/html area. If your done debugging any web code set this display_errors = off And turn on php file logging log_errors = On error_log = /var/log/phplogfilename.log Unless you need to allow file uploads turn that off too file_uploads = Off The same goes for treating URLs as files allow_url_fopen = Off Also make sure all the files in /var/www/html or whatever are not owned by the apache process so they cannot be over-written if at all possible. -Greg -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Matthew T. O'Connor Sent: Thursday, June 22, 2006 11:53 AM To: CentOS mailing list Subject: [CentOS] Apache Security Hello, I have a server running CentOS 4.3 with all the latest updates. The server in question has been hacked by spammers a few times. The details of the hack have been basically the same every time. I find some directory created by the apache user account in /tmp. The new directory contains an html file, and a list of email addresses to spam and a perl script that spams all those email addresses with the html file. My question is why is this happening? Obviously it's some apache exploit. I have removed mod_perl, that didn't help. I have now changed the permissions on the perl executable, that might help we will see, but that doesn't address the core problem. How is it that someone can upload arbitrary files to my server and then execute an arbitrary command via apache. Is this a know problem? Have others seen it? What can I do to help prevent this? Thanks, Matt _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

RE: [CentOS] Apache Security
by mike.redan＠bell.ca 22 Jun '06

22 Jun '06

Hello, I have a server running CentOS 4.3 with all the latest updates. The server in question has been hacked by spammers a few times. The details of the hack have been basically the same every time. I find some directory created by the apache user account in /tmp. The new directory contains an html file, and a list of email addresses to spam and a perl script that spams all those email addresses with the html file. My question is why is this happening? Obviously it's some apache exploit. Why is this obvious? What else is exposed to the internet on this server? They could be coming in another way, then creating files owned by the apache user to make it look like an Apache problem. Is SSH exposed to the internet? Maybe there is a user with a weak password or something. I have removed mod_perl, that didn't help. I have now changed the permissions on the perl executable, that might help we will see, but that doesn't address the core problem. How is it that someone can upload arbitrary files to my server and then execute an arbitrary command via apache. What is exposed via apache? Are there any custom applications/CGI's? Is this a know problem? Have others seen it? What can I do to help prevent this? Thanks, Matt _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Tracking down whats causing a high load?
by Ian mu 22 Jun '06

22 Jun '06

Hiya, Currently running Centos 4.2 x86_64 dist on a dual 3G xeon, 2G ram, scsi setupand everythings been running fine on it for some time. Then at 4am last night something kicked in (have mrtg running monitoring when) and since then its been running a load of about 1.5 (normally around 0.4). CPU usage is Cpu(s): 1.1% us, 0.6% sy, 0.0% ni, 97.9% id, 0.2% wa, 0.1% hi, 0.1%si. Can't see any new processes that would cause the load, just wondering is there any way to try and track down whats actually causing this? It's not excessive load, but want to add some new services and wary now, its something that seems wrong given the sudden increase at 4am (think thats when some o.s housekeeping tasks are normally scheduled, but there's none running that I can see that started today). Just hoping someone may have some tips on checking whats always waiting or how to isolate whats happening. As said, ps -ef shows no new processes, and cpu usage is very low. Tia, Ian

8 10

Adobe Reader 7.0.8 on x86_64 system
by Kanwar Ranbir Sandhu 22 Jun '06

22 Jun '06

Hi Everyone, [yes, this is about a proprietary product, but I'm just asking for some tips/pointers] Has anyone tried installing the new Adobe Reader (7.0.8) RPM from Adobe on a CentOS 4.3 x86_64 box? I just attempted an upgrade from AdobeReader_enu-7.0.1-1 (also RPM install), and I'm getting this error: error: Failed dependencies: libGLU.so.1 is needed by AdobeReader_enu-7.0.8-1.i386 It looks like Adboe wants the i386 version of that library, which is provided by xorg-x11-Mesa-libGLU.i386. However, I already have the x86_64 version installed. What's stranger is that I was able to install the previous version without any problems. Any tips/suggestions/flames appreciated. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.16-1.2111_FC4 i686 GNU/Linux 01:17:39 up 3 days, 18:46, 2 users, load average: 1.23, 0.56, 0.41

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss