Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Remote auth against Active Directory
by Chris Adams 10 Sep '15

10 Sep '15

I've got a new CentOS 7 server going into a remote location. I have local servers that authenticate against Active Directory (2012 if it matters) using winbindd. I'd like to have some method of using AD on the remote server, but I need to be able to access it if the network path to the AD servers is down. sssd caching won't do AFAIK (since that's just a cache that times out). This server is going to have out-of-band network access for remote management in case of network failure, so having access to it when it can't reach AD is its primary purpose. I'd like to use our existing AD setup (rather than manage local users) to make it easier to manage users/passwords. Is there a relatively simple method to replicate a chunk of the AD users/passwords to a remote CentOS server (I don't care about the SSO side of things)? Or is there some other way to solve this problem? -- Chris Adams <linux(a)cmadams.net>

2 1

Centos 7 Adding KDE as extra option
by david 10 Sep '15

10 Sep '15

Folks While trying to add a second desktop to my Centos7 installation (I had GNOME3, wanted to add KDE as an alternate), the install failed: >yum groupinstall "KDE Plasma Workspaces" <snip> >--> Finished Dependency Resolution >Error: Package: systemd-python-208-20.el7.x86_64 (base) > Requires: systemd = 208-20.el7 > Installed: systemd-208-20.el7_1.5.x86_64 (@updates) > systemd = 208-20.el7_1.5 > Available: systemd-208-20.el7.x86_64 (base) > systemd = 208-20.el7 >Error: Package: 32:bind-libs-9.9.4-18.el7.x86_64 (base) > Requires: bind-license = 32:9.9.4-18.el7 > Installed: 32:bind-license-9.9.4-18.el7_1.1.noarch (@updates) > bind-license = 32:9.9.4-18.el7_1.1 > Available: 32:bind-license-9.9.4-18.el7.noarch (base) > bind-license = 32:9.9.4-18.el7 >Error: Package: libreport-2.1.11-21.el7.centos.0.4.x86_64 (base) > Requires: libreport-filesystem = 2.1.11-21.el7.centos.0.4 > Installed: > libreport-filesystem-2.1.11-23.el7.centos.0.1.x86_64 (@updates) > libreport-filesystem = 2.1.11-23.el7.centos.0.1 > Available: > libreport-filesystem-2.1.11-21.el7.centos.0.4.x86_64 (base) > libreport-filesystem = 2.1.11-21.el7.centos.0.4 >Error: Package: 1:cups-client-1.6.3-17.el7.x86_64 (base) > Requires: cups-libs(x86-64) = 1:1.6.3-17.el7 > Installed: 1:cups-libs-1.6.3-17.el7_1.1.x86_64 (@updates) > cups-libs(x86-64) = 1:1.6.3-17.el7_1.1 > Available: 1:cups-libs-1.6.3-17.el7.x86_64 (base) > cups-libs(x86-64) = 1:1.6.3-17.el7 >Error: Package: 1:cups-1.6.3-17.el7.x86_64 (base) > Requires: cups-libs(x86-64) = 1:1.6.3-17.el7 > Installed: 1:cups-libs-1.6.3-17.el7_1.1.x86_64 (@updates) > cups-libs(x86-64) = 1:1.6.3-17.el7_1.1 > Available: 1:cups-libs-1.6.3-17.el7.x86_64 (base) > cups-libs(x86-64) = 1:1.6.3-17.el7 > You could try using --skip-broken to work around the problem > You could try running: rpm -Va --nofiles --nodigest Trying the --skip-broken option gave a large set of protected multilib version errors, so it didn't work either. The following is the repo list: >[root@xxxxx ~]# yum repolist >Loaded plugins: fastestmirror, langpacks, priorities >Loading mirror speeds from cached hostfile > * base: mirror.pac-12.org > * centosplus: mirrors.unifiedlayer.com > * epel: mirror.sfo12.us.leaseweb.net > * extras: mirror.pac-12.org > * updates: mirrors.xmission.com >1452 packages excluded due to repository priority protections >repo id repo >name status >base/7/x86_64 CentOS-7 - >Base 8,652 >centosplus/7/x86_64 CentOS-7 - >Plus 40+13 >cr/7/x86_64 CentOS-7 - >cr 0 >*epel/x86_64 Extra Packages for >Enterprise Linux 7 - x86_64 8,411+66 >extras/7/x86_64 CentOS-7 - >Extras 128+53 >updates/7/x86_64 CentOS-7 - >Updates 2+1,320 >repolist: 17,233 >[root@goat ~]# I use priorities, as follows: 1: base 2: centosplus 3: updates 4: extras 5: cr 6: contrib 7: epel Can anyone explain this? or let me know how to get around it? Rebuilding the server from scratch is definitely possible since this is a test environment only. Thanks David

2 3

Install Xfce has package requirement error
by david 10 Sep '15

10 Sep '15

Folks Working in Centos 7, and with GNOME (three, I presume), installed, I tried to add the Xfce desktop and got a message: Error: Package: openssh-askpass-6.6.1p1-11.el7.x86_64 (base) Requires: openssh = 6.6.1p1-11.el7 Installed: openssh-6.6.1p1-12.el7_1.x86_64 (@updates) .... Should I try "-skip-broken", or wait until those packages are fixed? Shouldn't the repositories always be consistent? Thanks David

2 1

Re: [CentOS] rsync question
by C Linus Hicks 10 Sep '15

10 Sep '15

On 09/10/15, Robert Moskowitz wrote: ---------------- Quoted text ------------------------ I just tried the following: rsync -ah --stats "ssh -p613 -l root" 192.168.192.2:/root/samba.PDC/ /home/rgm/data/htt/httnet/homebase/new/root/ And it failed with: Unexpected remote arg: 192.168.192.2:/root/samba.PDC/ rsync error: syntax or usage error (code 1) at main.c(1330) [sender=3.1.1] I tried again with: rsync -ah --stats -e "ssh -p613 -l root" 192.168.192.2:/root/samba.PDC/ /home/rgm/data/htt/httnet/homebase/new/root/ and it worked. This is what I read from the manpage, that "-e" is needed for the ssh command. --------------------- End Quote ---------------------------------- Try this: rsync -ah --stats 192.168.192.2:/root/samba.PDC/ /home/rgm/data/htt/httnet/homebase/new/root/

2 1

setting up solr/tomcat gives 404 page
by Tim Dunphy 10 Sep '15

10 Sep '15

Hey all, I tried following a few guides and I'm struggling with trying to setup apache solr 4.10 under apache tomcat 7.0.64 along with the drupal config necessary to get that this working with drupal. The latest guide I followed was this one which seemed like it might work: http://duntuk.com/how-install-apache-solr-46-apache-tomcat-7-use-drupal I followed everything to the letter and ended up with a 404 status page when I hit http://ipaddress:8080/solr I think the answer lies in putting the renaming the 'collection1' core to the right location under the name 'drupal'. But how to do that seems to be left out of that tutorial. In the tomcat logs I just see the following: 100.116.32.93 - - [09/Sep/2015:16:52:56 -0400] "GET /solr HTTP/1.1" 404 959 Which isn't very informative!! Any chance I can get some help in getting this working? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

2 1

Re: [CentOS] rsync question
by Carl E. Hartung 10 Sep '15

10 Sep '15

On Wed, 9 Sep 2015 05:51:38 -0700 (PDT) Mark Milhollan wrote: > On Tue, 8 Sep 2015, Carl E. Hartung wrote: > >On Tue, 8 Sep 2015 10:25:33 -0700 (PDT) Mark Milhollan wrote: > > >> -e specifies the *local* transport command to use > > > >What?! Straight from the documentation: > > > >" -e, --rsh=COMMAND specify the remote shell to use" > > If only one can properly interpret the meaning... COMMAND is the > local command to run to obtain a remote (non-interactive) shell, so > it isn't that the remote shell program (invoked once the transport is > connected) is being specified, i.e., it is which `remsh' to use. The > -p and -l provided thereby may be necessary, since the one is not the > default and the other isn't known to us to be the same as the local > user, which you glossed over as if one never has a need to specify. > > Orthogonal to Robert's problem, the switch from default use of rsh to > ssh has made it a requirement for (good) automation to always supply > a -e to ensure the correct command is used to account for all > potential versions of rsync that may be used. > > >> , and in this case it also specifies the remote port (613) and user > >> (root). Granted one should probably use their ssh configuration to > >> do that but it isn't realy "wrong" (to be questioned) to do it via > >> options. > > > >I didn't explicitly state that it was "wrong," just implied > >(correctly) that it was unnecessary. > > Potentially unnecessary. Just because you might see putting the port > and user in the ssh config file as the right thing to do, and which I > also do whenever possible, doesn't mean Robert necessarily wants to > or can do so, and after all -e does exist. Your questioning its use > as you did implied using it is wrong, to which I object. Luckily you > decided to reply to the list quoting me so eventually Robert was > supplied with the clue you didn't provide, that it might be > pre-configured. > > > /mark Mark, I would prefer it if you would please send your replies to the list and not to me personally. I *do* get them if you send them to the list. All of these fine grained points you've made regarding options that are "required for (good) automation" are irrelevant. Robert's post concerned invoking rsync manually "for backup purposes" -- not for "automation" as you're envisioning. He wrote "This is not an automated system. It is typically a onetime thing ..." Moreover, my "Why '-e'?" query was paired with a second very specific question: "Are these systems running disparate operating systems?" The implication seems pretty clear to me -- not that '-e' was somehow "wrong" but simply likely unnecessary in his scenario. I stand by that somewhat informal (less strict than you) evaluation unless and until we learn that he's actually operating on truly disparate systems. regards, Carl

2 2

named Update Problem
by Günther J. Niederwimmer 10 Sep '15

10 Sep '15

Hello, I have enabled for a Domain DNSSEC and it working correct, after I change the rights for /var/named to root:named 0770 but after a update it is always change back to root:named 0750 after this, DNSSEC don't work any more? named have no right to write his secure files. Is there a way to fix this Thanks, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

2 4

(no subject)
by Jeremy Conklin 10 Sep '15

10 Sep '15

Jconklin7887(a)hotmail.com

1 0

How to rebuild logrotate.status
by Robert Moskowitz 10 Sep '15

10 Sep '15

I have a problem in that at first all my log files were dated 12-31-1969 and logrotate has: # more /var/lib/logrotate.status logrotate state -- version 2 "/var/log/yum.log" 1969-12-31-20:26:1 "/var/named/data/named.run" 1969-12-31-20:26:1 "/var/log/httpd/error_log" 2015-8-27-4:43:1 "/var/log/wtmp" 1969-12-31-20:26:1 "/var/log/chrony/*.log" 2015-8-19-22:0:0 "/var/log/spooler" 1969-12-31-20:26:1 "/var/log/btmp" 1969-12-31-20:26:1 "/var/log/maillog" 1969-12-31-20:26:1 "/var/log/wpa_supplicant.log" 2015-8-19-22:0:0 "/var/log/secure" 1969-12-31-20:26:1 "/var/log/ppp/connect-errors" 2015-8-19-22:0:0 "/var/log/messages" 1969-12-31-20:26:1 "/var/log/cron" 1969-12-31-20:26:1 "/var/log/httpd/access_log" 2015-8-27-4:43:1 How do I get this file rebuilt with the dates currently on the files listed?

2 1

NFS client kernel panic
by David Goudet 10 Sep '15

10 Sep '15

Hi everyone, I have an issue with NFS client when the NFS client loose connection with the NFS server. In certain conditions the NFS client freeze and the result is kernel panic. It seems that kernel panic occurs when the NFS client try to unmount the unreachable remote NFS partition. This case occurs about one time each two days. CentOS version: CentOS Linux release 7.1.1503 (Core) Kernel version: Linux foo.bar 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13 10:06:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux NFS packages: nfs-utils-1.3.0-0.8.el7.x86_64, libnfsidmap-0.25-11.el7.x86_64 This issue is present only on Centos7 NFS client (not present with Centos6). Any ideas? Is it known problem with Centos7 NFS client? Logs and stack trace here after: nfs: server foo.bar not responding, timed out nfs: server foo.bar not responding, timed out nfs: server foo.bar not responding, timed out nfs: server foo.bar not responding, timed out nfs: server foo.bar not responding, timed out BUG: Dentry ffff8800ca82f380{i=138c0,n=foo.png} still in use (2) [unmount of nfs4 0:41] ------------[ cut here ]------------ kernel BUG at fs/dcache.c:945! invalid opcode: 0000 [#1] SMP Modules linked in: ipt_REJECT rpcsec_gss_krb5 nfsv4 dns_resolver nfs fscache binfmt_misc xt_multiport iptable_filter ip_tables dm_crypt nfsd mgag200 auth_rpcgss syscopyarea nfs_acl sysfillrect lockd sysimgblt i2c_algo_bit ttm coretemp sunrpc drm_kms_helper iTCO_wdt iTCO_vendor_support i7core_edac ipmi_devintf lpc_ich kvm drm bnx2 ipmi_si dcdbas crc32c_intel serio_raw pcspkr i2c_core mfd_core edac_core ipmi_msghandler shpchp acpi_power_meter xfs libcrc32c sd_mod crc_t10dif crct10dif_common sr_mod cdrom ata_generic pata_acpi mptsas scsi_transport_sas ata_piix mptscsih libata mptbase dm_mirror dm_region_hash dm_log dm_mod CPU: 12 PID: 21364 Comm: umount.nfs4 Not tainted 3.10.0-229.4.2.el7.x86_64 #1 Hardware name: Dell Inc. PowerEdge R410/0N051F, BIOS 1.2.4 11/02/2009 task: ffff880075b3ad80 ti: ffff88007744c000 task.ti: ffff88007744c000 RIP: 0010:[<ffffffff811dddcc>] [<ffffffff811dddcc>] shrink_dcache_for_umount_subtree+0x1ac/0x1c0 RSP: 0018:ffff88007744fe10 EFLAGS: 00010246 RAX: 000000000000005e RBX: ffff8800ca82f380 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff88022fccd488 RDI: 0000000000000246 RBP: ffff88007744fe28 R08: 0000000000000096 R09: 0000000000000627 R10: 0000000000000000 R11: ffff88007744fb26 R12: ffff8801ffb08780 R13: ffffffffa04f27a0 R14: ffff88021f3c0f40 R15: ffff88021f3c0f20 FS: 00007ff58b134880(0000) GS:ffff88022fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff58aad15a0 CR3: 00000001ffe7f000 CR4: 00000000000007e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Stack: ffff880036a9fb20 ffff880036a9f800 ffff880036a9a000 ffff88007744fe40 ffffffff811df969 ffff880036a9f800 ffff88007744fe68 ffffffff811c8fe1 0000000000000029 ffff880036a9a000 ffff88021f3c0f20 ffff88007744fe80 Call Trace: [<ffffffff811df969>] shrink_dcache_for_umount+0x49/0x60 [<ffffffff811c8fe1>] generic_shutdown_super+0x21/0xe0 [<ffffffff811c9282>] kill_anon_super+0x12/0x20 [<ffffffffa041827b>] nfs_kill_super+0x1b/0x30 [nfs] [<ffffffff811c962d>] deactivate_locked_super+0x3d/0x60 [<ffffffff811c9c36>] deactivate_super+0x46/0x60 [<ffffffff811e6ac5>] mntput_no_expire+0xc5/0x120 SELinux: initialized (dev 0:40, type nfs4), uses genfs_contexts [<ffffffff811e7bff>] SyS_umount+0x9f/0x3c0 [<ffffffff81614de9>] system_call_fastpath+0x16/0x1b Code: 00 00 48 8b 40 28 4c 8b 08 48 8b 43 30 48 85 c0 74 1b 48 8b 50 40 48 89 34 24 48 c7 c7 20 f1 83 81 48 89 de 31 c0 e8 f0 0a 42 00 <0f> 0b 31 d2 eb e5 0f 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 66 RIP [<ffffffff811dddcc>] shrink_dcache_for_umount_subtree+0x1ac/0x1c0 RSP <ffff88007744fe10> ---[ end trace ae487f589c43fd74 ]--- Kernel panic - not syncing: Fatal exception Thank you for you attention

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss