Discuss

discuss@lists.centos.org

5 participants
34752 discussions

DHCPd Config
by Joao Medeiros 07 Jul '05

07 Jul '05

I've read a number of articles, googled the web for a few months and now attempting at turning my CentOS box into a gateway for the third time. Configured my dhcpd.conf and other related files and all seems to be working, I can have my M$ desktop leasing an ip address and all. The problem is when I want to go out to the internet I keep on getting the Request Timed out error. I'm pretty sure I've followed the manuals to the letter. The hardware is working fine. Any clues or pointers would be very much appreciated. TIA, Joao

11 19

Kickstart-based Install, editing comps.xml, hdlist/hdlist2
by dan.trainor 07 Jul '05

07 Jul '05

Hello, all - I've been throwing the question around on the kickstart-list for the last few days here, and can't quite get ahold of things. Please, allow me to explain. I am in the process of making a custom CentOS/RHEL kickstart install. It works well right now; however, it's a hackjob, and I am not comfortable with it as of yet. For the past few days, I've even gone as far as making a custom comps.xml file, for the purpose of the kickstart. What I'd like to do is not include any @groups or -/+files in my kickstart file; rather, I'd like to edit comps.xml's @Base and @Core so that I need nothing else in my kickstart file, except for the configuration options. I know that this isn't required, I'm just anal about the whole situation ;) This would also give me a chance to package, along with my install, newer and updated packages/RPMs so that I don't have to run an update process on the newly installed machine. My understanding is, if this is done, a new base/hdlist{2} file{s} is/are needed to be created. I've read around a bit, and apparently I'm supposed to use a tool named "genhdlist", but I've not been able to find any documentation on this tool, what exactly it does, and how exactly to use it. I'm expressing my frustration, along with many other people who have been in the same situation, as seen from the kickstart-list. I guess what I'm asking for, is if someone has ever made a completely custom kickstart install that does the following: 1) edits comps.xml to modify @base and @core 2) takes newer packages into consideration 3) compiles this information, creates new hdlist{2} reference files 4) gets the mother to work. This seemingly simple process seems to lack a bit of documentation. I ahve found sniplets all over the 'net where it would show a small process of how to get all this done, however, the author fails to document the utility or method in detail, or the process is for something totally archaic such as RH6.2. Any help would be greatly appreciated. Thanks! -dant

3 5

CentOS-announce Digest, Vol 5, Issue 2
by centos-announce-request＠centos.org 07 Jul '05

07 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:569 Important CentOS 4 ia64 zlib - security update (Pasi Pirhonen) 2. CESA-2005:569 Important CentOS 4 i386 zlib - security update (Johnny Hughes) 3. CESA-2005:569 Important CentOS 4 x86_64 zlib - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 6 Jul 2005 17:58:06 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CESA-2005:569 Important CentOS 4 ia64 zlib - security update To: centos-announce(a)centos.org Message-ID: <20050706145806.GA23921(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:569 https://rhn.redhat.com/errata/RHSA-2005-569.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/zlib-1.2.1.2-1.1.ia64.rpm updates/ia64/RPMS/zlib-devel-1.2.1.2-1.1.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Yum Update issues
by William Warren 07 Jul '05

07 Jul '05

I get this when i try to yum update: http://mirror.centos.org/centos/4/updates/i386/repodata/primary.xml.gz: [Errno -1] Metadata file does not match checksum Trying other mirror. Error: failure: repodata/primary.xml.gz from update: [Errno 256] No more mirrors to try. I have done yum clean all with no joy. I have two servers with CentOS-4.1 and both are exhibiting htis issue. I have not made any changes to my yum configuration. Here is my Yum configuration. First /etc/yum.repo.d/CentOS-Base.repo [base] name=CentOS-$releasever - Base baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ gpgcheck=1 #released updates [update] name=CentOS-$releasever - Updates baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/ gpgcheck=1 #packages used/produced in the build but not released [addons] name=CentOS-$releasever - Addons baseurl=http://mirror.centos.org/centos/$releasever/addons/$basearch/ gpgcheck=1 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/ gpgcheck=1 #additional packages that extend functionality of existing packages [centosplus] name=CentOS-$releasever - Plus baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/ gpgcheck=1 enabled=0 #contrib - packages by Centos Users [contrib] name=CentOS-$releasever - Contrib baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/ gpgcheck=1 enabled=0 #packages in testing [testing] name=CentOS-$releasever - Testing baseurl=http://mirror.centos.org/centos/$releasever/testing/$basearch/ gpgcheck=1 enabled=0 Now is my yum.conf: [dag] name=Dag RPM Repository for Red Hat Enterprise Linux baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag gpgcheck=1 enabled=1 -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/

2 3

[Fwd: [Full-disclosure] [ GLSA 200507-05 ] zlib: Buffer overflow]
by William Warren 07 Jul '05

07 Jul '05

Has Centos been tested for this yet? -------- Original Message -------- Subject: [Full-disclosure] [ GLSA 200507-05 ] zlib: Buffer overflow Date: Wed, 06 Jul 2005 16:23:20 +0200 From: Thierry Carrez <koon(a)gentoo.org> Organization: Gentoo Linux To: gentoo-announce(a)lists.gentoo.org CC: full-disclosure(a)lists.grok.org.uk, bugtraq(a)securityfocus.com, security-alerts(a)linuxsecurity.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200507-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: zlib: Buffer overflow Date: July 06, 2005 Bugs: #98121 ID: 200507-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A buffer overflow has been discovered in zlib, potentially resulting in the execution of arbitrary code. Background ========== zlib is a widely used free and patent unencumbered data compression library. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-libs/zlib < 1.2.2-r1 >= 1.2.2-r1 Description =========== Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a buffer overflow in zlib. A bounds checking operation failed to take invalid data into account, allowing a specifically malformed deflate data stream to overrun a buffer. Impact ====== An attacker could construct a malformed data stream, embedding it within network communication or an application file format, potentially resulting in the execution of arbitrary code when decoded by the application using the zlib library. Workaround ========== There is no known workaround at this time. Resolution ========== All zlib users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-libs/zlib-1.2.2-r1" References ========== [ 1 ] CAN-2005-2096 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200507-05.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security(a)gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2005 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.0 -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

2 2

NetRaid 1Si on Centos4
by Francesco F 07 Jul '05

07 Jul '05

Hi, I tried to install Centos4 on server with scsi NetRaid 1si. This card isnt't support from kernel version 2.6 (old megaraid driver, like LSI controller). What are steps to doing new install with this scsi card? And it will be stable? Thanks, Francesco

1 0

CentOS on IBM 7043-150, liblaus missing
by Richard Bejtlich 07 Jul '05

07 Jul '05

Hello, I found Pasi's site (http://centos.upi.iki.fi/pub/centos/4/os/ppc/) describing how to get CentOS working on a IBM 7043-150 43p CHRP 604e RS/6000 box. I have the exact same machine. I followed his instructions and got the version of CentOS he provided working on my system. [root@murray ~]# uname -a Linux murray 2.6.9-5.0.3.102.EC #1 Sun Mar 6 18:32:26 EET 2005 ppc ppc ppc GNU/Linux [root@murray ~]# cat /etc/redhat-release CentOS release 4.0 (Final) I thank him for posting the files and his instructions! Is anyone else running CentOS on IBM RS/6000 hardware? Does anyone know if CentOS will formally distribute a ppc version for my hardware? I've only found one problem with CentOS so far -- liblaus is missing, so I can't use passwd to change passwords. [root@murray ~]# passwd richard passwd: error while loading shared libraries: liblaus.so.1: cannot open shared object file: No such file or directory [root@murray ~]# ldd /usr/bin/passwd libuser.so.1 => /usr/lib/libuser.so.1 (0x0ffcb000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x0ff7e000) libgobject-2.0.so.0 => /usr/lib/libgobject-2.0.so.0 (0x0ff16000) libgmodule-2.0.so.0 => /usr/lib/libgmodule-2.0.so.0 (0x0fef2000) libdl.so.2 => /lib/libdl.so.2 (0x0fece000) libglib-2.0.so.0 => /usr/lib/libglib-2.0.so.0 (0x0fe1d000) libpopt.so.0 => /usr/lib/libpopt.so.0 (0x0fdf4000) libpam_misc.so.0 => /lib/libpam_misc.so.0 (0x0fdd0000) liblaus.so.1 => not found libselinux.so.1 => /lib/libselinux.so.1 (0x0fda0000) libc.so.6 => /lib/tls/libc.so.6 (0x0fc43000) libpam.so.0 => /lib/libpam.so.0 (0x0fc1a000) /lib/ld.so.1 (0x30000000) Have you encountered this issue? Any ideas on how to fix it? Thank you again for helping me get my 7043-150 doing something useful! Sincerely, Richard PS: Has anyone tried running other Linux distros? I did not have any luck booting the latest Debian (debian-31r0a-powerpc-binary-1.iso) or NetBSD (2.0.2, prepcd.iso) on this system, but maybe I wasn't using the right OpenFirmware commands.

3 2

Netware server emulation on Linux
by Nigel kendrick 07 Jul '05

07 Jul '05

One of our group companies has just 'gone live' on a new laboratory management package. Although the software is M$-based (ie: expects a M$ server at the heart of it), it is running with its core database on a CentOS3 server using Samba for client access - in fact, the developers are amazed at the performance and say it beats a Win2K/2K3 server 'hands down'!!! Anyway, the old lab management app that I inherited has its database hosted on a Netware 3.12 server and the client app is written in Turbo Pascal including database units compiled with a specific Netware switch and if we try to run the db off the Linux server using Samba we get record lock errors. Unfortuntely, we have no confidence in re-compiling the ancient source code, expecially since the company that developed the database engine is long gone. We need access to the old data for reference and although I am going to attempt to extract it all and do some PHP stuff with it, a Google search turns up two netware emulation packages for Linux - lwared and mars_nwe - so my question is this: has anyone around these here parts used any or both of these apps with CentOS 3 or 4 and if so can I have any useful insight? I suppose the ultimate test would be to try them both but a head start would be aprpeciated. Thanks as ever, Nigel Kendrick

2 1

CentOS 4.1 Apache
by Ben 06 Jul '05

06 Jul '05

Hi folks, I've just put CentOS 4.1 on my webserver, displacing OpenBSD (1 up for Linux :-)) I found that the Virtual Hosts function doesn't appear to work. All virtual hosts accesses default to the main www directory instead of serving from their respective directories. Has anyone else found the same problem? Thanks. Ben

10 17

sendmail + plain auth
by alex＠milivojevic.org 06 Jul '05

06 Jul '05

I'm probably missing something obvious, but I can get sendmail to give me AUTH PLAIN and LOGIN options. What I have is fairly standard configuration. The relevant part of sendmail.mc looks something like this: define(`confCACERT_PATH',`/etc/ssl/certs') define(`confCACERT',`/etc/ssl/ca-bundle.crt') define(`confSERVER_CERT',`/etc/ssl/smtp.crt') define(`confSERVER_KEY',`/etc/ssl/smtp.key') define(`confAUTH_OPTIONS', `A p') TRUST_AUTH_MECH(`EXTERNAL LOGIN PLAIN') define(`confAUTH_MECHANISMS', `EXTERNAL LOGIN PLAIN') DAEMON_OPTIONS(`Port=25, Name=MTA') DAEMON_OPTIONS(`Port=465, Name=TLSMTA, M=s') So basically, LOGIN and PLAIN should be offered when SSL/TLS is in use (but not for plaintext sessions). However, when connecting over TLS, sendmail doesn't advertise them: $ openssl s_client -connect localhost:465 [ SSL/TLS handshake output deleted, AES256 cipher was used ] 220 testbox.miliv.org ESMTP Unauthorized access prohibited EHLO localhost 250-testbox.miliv.org Hello localhost [127.0.0.1], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DELIVERBY 250 HELP Attempt to "brute-force" use them results in error (as expected): AUTH PLAIN 504 5.3.3 AUTH mechanism PLAIN not available I'm sure I'm missing something obvious here, probably a flag or two either in confAUTH_OPTIONS or in DAEMON_OPTIONS, but couldn't dig out which. Alraedy drank all coffe, and becoming desparate ;-) ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

4 8

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss