Re: [CentOS-docs] Install On Partitionable RAID1

2010-01-21 Thread Lorenzo Quatrini
Phil Schaffner ha scritto:
 2. The command to create /etc/mdadm.conf will result in an extra line 
 spares=1 while the array is still syncing.  Adding  | head -1  to 
 the command to create it fixes the problem.
May I suggest to add  | grep -v spares  or  | grep ARRAY  instead? If the
command is issued after the sync the resulting mdadm.conf would be incorrect.

Regards
Lorenzo
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] problem disconnected: No supported authentication methods available

2010-01-21 Thread Ralph Angenendt
2010/1/13 prof.tariq prof.ta...@hotmail.com:
 Hi there,

 I encountered that message when try to login to ssh via putty, this happened
 after implement what have been said in this article
 http://wiki.centos.org/Contribute?action=showredirect=HowToContribute except
 the DSA PRIVATE KEY step and I'm sure that's the reason.
 so please if there is any way to fix that, or the only solution is to
 ask the host for that.

Ummm. Sorry for me taking that long to answer (somehow I managed to
not let my mail user agent check for new mail in this list), but:

What are you talking about? The page you link to above does not say
*anything* about SSH or logging into somewhere or DSA keys.

Cheers,

Ralph
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] TipsAndTricks/ApacheVhostDir re-org

2010-01-21 Thread Ralph Angenendt
On Mon, Jan 18, 2010 at 8:47 PM, Ed Heron e...@heron-ent.com wrote:

  Hopefully, this will make the document easier to read for those that don't
 have any interest in the optional alternatives or reading it entirely.

Too me it looks more clearly arranged this way.

  It occurs to me that I could separate the vhost.d/ and virtual disabling
 sections into separate Tips articles.  Please let me know if this is
 desireable.

Is that desirable? You're weighing options here (do it this way or do
it the other way), so I don't really see how that could be split out
in a sane way.

Other's mileage may vary, though :)

Cheers,

Ralph
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Install On Partitionable RAID1

2010-01-21 Thread Phil Schaffner
Lorenzo Quatrini wrote on 01/21/2010 06:26 AM:
 Phil Schaffner ha scritto:
 2. The command to create /etc/mdadm.conf will result in an extra line 
 spares=1 while the array is still syncing.  Adding  | head -1  to 
 the command to create it fixes the problem.
 May I suggest to add  | grep -v spares  or  | grep ARRAY  instead? If the
 command is issued after the sync the resulting mdadm.conf would be incorrect.

The head -1 still works after the sync for the case of a single array, 
but your solutions are arguably more general.  I like the grep ARRAY.

Thanks,
Phil
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] TipsAndTricks/ApacheVhostDir re-org

2010-01-21 Thread Ed Heron
From: Ralph Angenendt, Thursday, January 21, 2010 5:56 AM

On Mon, Jan 18, 2010 at 8:47 PM, Ed Heron e...@heron-ent.com wrote:

 Hopefully, this will make the document easier to read for those that 
 don't
 have any interest in the optional alternatives or reading it entirely.

Too me it looks more clearly arranged this way.

  Thank you.  I tend to read documentation all the way through before 
following it, when I read it at all ;).  So, I didn't initially understand 
the depth of emotion that appeared to be expressed over the previous 
version. (simplified english: Russ seemed very annoyed.)  But, with Russ's 
patient explanation and a bit of thought, I think I understand what he was 
saying.  I think both points of view are valid but the new organization is 
probably more applicable to our audience.  I hope the new document is more 
useful as a reference document and produces less confusion.

 It occurs to me that I could separate the vhost.d/ and virtual disabling
 sections into separate Tips articles. Please let me know if this is
 desireable.

Is that desirable? You're weighing options here (do it this way or do
it the other way), so I don't really see how that could be split out
in a sane way.

  Yes.  I think so, as well.  However, the document is getting a bit large 
for a tips page and goes slightly beyond the stated scope.  If that isn't an 
issue, yet, I don't have an issue with leaving it as a single document.

  For example, we could split the restart section into a separate document 
and expand the explanation a little..  Then, this page and other potential 
Apache tips pages could refer to it by command and link.  The disabling 
virtual hosts could probably be put into a separate doc, though it depends 
on putting the virtual host config files in a directory, so both docs would 
need to refer to each other.  The potential pitfall here is that no single 
document completes a thought and the referrals fly, apparently endlessly.  I 
sometimes have trouble drawing the line.  The axiom, In for a penny; In for 
a pound, seems to exclude, or maybe ignore, the idea of only being in for 
tupence.

  Certainly wouldn't be the first to question my sanity, though.

  The other thought I had is collecting all the Apache tips into a howto, 
but I'm not ready to accept the responsibility to create and maintain it, 
nor do I have the confidence that it would be sufficiently authoritative.

Other's mileage may vary, though :)

Cheers,

Ralph

___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Install On Partitionable RAID1

2010-01-21 Thread Lev Shamardin
Some later thoughts go below.

On 01/21/2010 01:50 AM, Phil Schaffner wrote:
 1. The user should be instructed to start rescue mode with networking in 
 order to be able to retrieve the patch for mkinitrd.
The mkinitrd instructions should be moved to the beginning of the guide.
Networking sometimes requires very complicated configurations which could be
quite hard to load from the rescue mode (imagine using ndiswrapper for example).

May be we could provide a patched package which will replace mkinitrd, perhaps
in centos-plus repo?

 3. Some additional discussion on how to handle multiple partitions 
 should be added.  There is an implicit assumption that only / is used.

Ideally we should also provide a guide for the LVM case. I had an email
discussion with William Schwartz, who was making partitionable RAID1 with LVM
setup and managed to do that. The changes are:

1. Additional steps were required to start LVM manually after starting raid with
mdadm:

vgscan
vgchange -ay VolGroup00 # I think name could be omitted - Lev.

2. grub boot options are certainly unchanged in LVM case.

3. pvscan and Co. will detect false volumes or complain, so something like this
needs to be added to /etc/lvm/lvm.conf:

filter = [a/md*, r/.*/]

William wrote that he did not do this last step and things work fine for him.

--
Lev.
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-virt] Windows Xen VM's have high guest CPU usage and poor performance

2010-01-21 Thread Pasi Kärkkäinen
On Wed, Jan 20, 2010 at 10:18:06PM -0500, Ryan Pugatch wrote:
 Hello all,
 
 I have a PowerEdge 2950 that I am using to host Windows XP VM's under 
 CentOS.  I am experiencing poor performance in the Xen VM's.  Any time I 
 try to do something, the CPU usage (as reported by the Windows task 
 manager) hits 100% for a few and then drops back down.  This is causing 
 the VM's to run sluggish and be quite annoying to use.  Example.. I 
 click IE.. cpu hits 100% and IE takes a bit to open.  I go to a 
 website.. 100%.. I click a link.. 100%. This is the case even if I only 
 have one VM running.
 
 I now have 32 VM's running on the machine and dom0's cpu usage as 
 reported by xm top is 622%.  It seems like Xen is just performing poorly 
 while handling these Windows VMs.  Any suggestions?  I have Windows VM's 
 on other hardware (typically PowerEdge R905s and R710s and they seem ok).
 
 This 2950 is a decent machine.. 32G RAM, 2x Xeon E5405 (quad core) at 
 2ghz.  And I'm only allocating 1 CPU and 768MB RAM for each VM.
 
 Sample config:
 
 name = win01n
 maxmem = 768
 memory = 768
 vcpus = 1
 builder = hvm
 kernel = /usr/lib/xen/boot/hvmloader
 boot = c
 pae = 1
 acpi = 1
 apic = 0
 localtime = 1
 on_poweroff = destroy
 on_reboot = restart
 on_crash = restart
 device_model = /usr/lib64/xen/bin/qemu-dm
 usbdevice = tablet
 sdl = 0
 vnc = 1
 vncunused = 0
 vncdisplay = 1
 disk = [ 'file:/var/xen/running/win01n,ioemu:hda,w' ]
 vif = [ bridge=xenbr0 ]
 serial = pty
 
 
 
 Thanks in advance for any insight!
 

So I take it you're not using PV-on-HVM drivers in Windows.. 
ie. windows is using the emulated NIC and IDE disk?

That will be slow.

You need to use PV drivers. See GPLPV drivers:
http://wiki.xensource.com/xenwiki/XenWindowsGplPv/
http://www.meadowcourt.org/downloads/

0.11.0.188 is the latest binary release.

-- Pasi

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Windows Xen VM's have high guest CPU usage and poor performance

2010-01-21 Thread Ryan Pugatch
Ryan Pugatch wrote:

 So I take it you're not using PV-on-HVM drivers in Windows.. ie. 
 windows is using the emulated NIC and IDE disk?

 That will be slow.

 You need to use PV drivers. See GPLPV drivers:
 http://wiki.xensource.com/xenwiki/XenWindowsGplPv/
 http://www.meadowcourt.org/downloads/

 0.11.0.188 is the latest binary release.

 -- Pasi

 
 Thanks, will try that.
 
 Ryan


The install worked beautifully except that my VM now has an ip assigned 
of 192.168.122.186 which I'm guessing is in relation to virbr0 which is 
192.168.122.1 on the host (and subsequently has no internet 
connectivity).  Is it possible for me to pass through to my network like 
before so my VM can have an ip on my local network?


___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Windows Xen VM's have high guest CPU usage and poor performance

2010-01-21 Thread Ryan Pugatch
compdoc wrote:

 
 If you have only one network card in the server, you should
 add more. 32 computers (vms) sharing one card is only one
 bottleneck your system has. Another would be using a file to
 run the vm from, rather than a block device.
 

Is it possible to migrate from a block device to file?
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-virt] VirtIO with CentOS 5.4

2010-01-21 Thread Bill McGonigle
Hi, all,

I'm attempting to run a Windows 2003 (32-bit) VM under CentOS 5.4, 
generally following:

   http://wiki.centos.org/HowTos/KVM

I've seen nice performance benefits with the VirtIO driver under Fedora, 
so I'd like to get that running with CentOS as well.  I have the 
September drivers build .iso.

According to:

   http://www.linux-kvm.org/page/Virtio

I need a KVM version 60 or later - fair enough.  Back at the wiki 
there's a note about later KVM in -testing, and sure enough there's a 
-66 there, but it's only built for an old kernel.

I got that SRPM and tried to build it against the current kernel, but 
get kmod build errors, ala:

 
/root/rpmbuild/BUILD/kvm-kmod-66/_kmod_build_/kernel/external-module-compat.h:421:
 
error: redefinition of typedef 'bool'
   ...
 
/root/rpmbuild/BUILD/kvm-kmod-66/_kmod_build_/kernel/external-module-compat.h:734:1:
 
warning: __aligned redefined

The wiki also has a note about -84 being in Levente Farkas's repo, but 
those don't appear to be there any longer.

So, questions:
1) what are folks generally using for VirtIO-capable KVM on CentOS 5.4?
2) given that the upstream has Windows drivers available, I'm curios how 
they're handling the issue, and if we're in sync.
3) does anybody have the SRPM that was at Farkas's repo or know if it 
went elsewhere?  I assume the build issues have been solved there already.

I'd be happy to update the Wiki with info from responses here.

Thanks,
-Bill

-- 
Bill McGonigle, Owner
BFC Computing, LLC
http://bfccomputing.com/
Telephone: +1.603.448.4440
Email, IM, VOIP: b...@bfccomputing.com
VCard: http://bfccomputing.com/vcard/bill.vcf
Social networks: bill_mcgonigle/bill.mcgonigle
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Windows Xen VM's have high guest CPU usage and poor performance

2010-01-21 Thread Andri Möll
On Thu, 2010-01-21 at 12:31 -0500, Ryan Pugatch wrote:
 compdoc wrote:
 
  
  If you have only one network card in the server, you should
  add more. 32 computers (vms) sharing one card is only one
  bottleneck your system has. Another would be using a file to
  run the vm from, rather than a block device.
  
 
 Is it possible to migrate from a block device to file?

Use /bin/dd to copy to a file and change the VM conf to reflect that.


Andri

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] VirtIO with CentOS 5.4

2010-01-21 Thread Fabian Arrotin
Bill McGonigle wrote:
 Hi, all,
 
 I'm attempting to run a Windows 2003 (32-bit) VM under CentOS 5.4, 
 generally following:
 
http://wiki.centos.org/HowTos/KVM

ARGHH ... forget that page as it was written during the first kvm tests 
and ïsn't current anymore
see 
http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Virtualization_Guide/index.html
 
for accurate documentation (as http://www.centos.org/docs is outdated 
and doesn't even cover kvm)

 
 I've seen nice performance benefits with the VirtIO driver under Fedora, 
 so I'd like to get that running with CentOS as well.  I have the 
 September drivers build .iso.
 
 According to:
 
http://www.linux-kvm.org/page/Virtio
 
 I need a KVM version 60 or later - fair enough.  Back at the wiki 
 there's a note about later KVM in -testing, and sure enough there's a 
 -66 there, but it's only built for an old kernel.
 
 I got that SRPM and tried to build it against the current kernel, but 
 get kmod build errors, ala:
 
  
 /root/rpmbuild/BUILD/kvm-kmod-66/_kmod_build_/kernel/external-module-compat.h:421:
  
 error: redefinition of typedef 'bool'
...
  
 /root/rpmbuild/BUILD/kvm-kmod-66/_kmod_build_/kernel/external-module-compat.h:734:1:
  
 warning: __aligned redefined
 
 The wiki also has a note about -84 being in Levente Farkas's repo, but 
 those don't appear to be there any longer.
 
 So, questions:
 1) what are folks generally using for VirtIO-capable KVM on CentOS 5.4?

The standard kvm from 5.4 and not the *old* one from extras

 2) given that the upstream has Windows drivers available, I'm curios how 
 they're handling the issue, and if we're in sync.
 3) does anybody have the SRPM that was at Farkas's repo or know if it 
 went elsewhere?  I assume the build issues have been solved there already.
 
 I'd be happy to update the Wiki with info from responses here.
 
 Thanks,
 -Bill
 


-- 
--
Fabian Arrotin
test -e /dev/human/brain || ( echo 1  /proc/sys/kernel/sysrq ; echo c  
/proc/sysrq-trigger )



___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Windows Xen VM's have high guest CPU usage and poor performance

2010-01-21 Thread Pasi Kärkkäinen
On Thu, Jan 21, 2010 at 11:37:02AM -0500, Ryan Pugatch wrote:
 Eric Searcy wrote:
  The install worked beautifully except that my VM now has an ip assigned
  of 192.168.122.186 which I'm guessing is in relation to virbr0 which is
  192.168.122.1 on the host (and subsequently has no internet
  connectivity).  Is it possible for me to pass through to my network like
  before so my VM can have an ip on my local network?
  
  Unless you specify a bridge in the xen conf file, it uses the first one 
  it finds alphabetically, I believe.  Do you use virbr0 for anything 
  else?  As an easy way of making sure xenbr0 is used, I removed the file 
  /etc/libvirt/qemu/networks/autostart/default.xml which was auto-starting 
  this DHCP (and NATted?) bridge, and I only was using direct access.  But 
  you can also make it explicit on the interface line, one of my HVM VMs 
  has the following:
  
  vif = [ 'mac=00:16:3e:0a:4c:d2, bridge=xenbr0' ]
  
  Eric
 
 
 That worked.. thanks Eric.  However, even with the GPLPV drivers, I am 
 seeing a lot of CPU usage when I do anything on the Windows VM.  It 
 isn't just the guest that is reporting CPU usage, though.  When I watch 
 xm top, the CPU usage jumps on that VM.  Not really sure what else can 
 be done to improve performance.


Check these tips:
http://wiki.xensource.com/xenwiki/XenBestPractices

And also this:
http://wiki.xensource.com/xenwiki/XenCommonProblems

-- Pasi


___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Windows Xen VM's have high guest CPU usage and poor performance

2010-01-21 Thread Ryan Pugatch
Pasi Kärkkäinen wrote:

 Oh, one more thing.. is it only the guest VM taking cpu time 
 when you monitor with xm top?
 
 Do you have the latest service packs installed in the guest? 
 
 Have you tried monitoring the performance from inside the guest, 
 to figure out what takes cpu time there? 
 
 -- Pasi
 


The guest is running XP w/ SP3.  It is not just the guest VM taking cpu 
time.  Basically, whatever process I am doing hits 100% cpu usage in 
Windows.  If I open IE, it will use 100% cpu for a bit while it opens. 
If I try to click on a website, it will do it again.  Thus, it is 
causing a very sluggish session as it keeps pausing.  It isn't just IE, 
it's any program I try to use.  This CPU usage is reflected in xm top as 
both the guest's CPU% will hit 100% as will Dom-0.

I have done pretty much everything specified in the Xen Best Practices. 
  In fact, I have dedicated 4GB to Dom-0.

Thanks,

- Ryan
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] VirtIO with CentOS 5.4

2010-01-21 Thread Bill McGonigle
On 01/21/2010 04:08 PM, Fabian Arrotin wrote:
 The standard kvm from 5.4 and not the*old*  one from extras

Hrm, this is probably where I'm going wrong.  I have kvm -36 from 
-extras (which bails if you specify a virtio type device).  I'm not 
seeing kvm in the repos for 5.4 or updates/5.4 on mirror.centos.org, i.e.:

   http://mirror.centos.org/centos-5/5.4/os/i386/CentOS/

Which version should I be seeing for 5.4?

-Bill

-- 
Bill McGonigle, Owner
BFC Computing, LLC
http://bfccomputing.com/
Telephone: +1.603.448.4440
Email, IM, VOIP: b...@bfccomputing.com
VCard: http://bfccomputing.com/vcard/bill.vcf
Social networks: bill_mcgonigle/bill.mcgonigle
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] VirtIO with CentOS 5.4

2010-01-21 Thread Dennis J.
On 01/21/2010 10:59 PM, Bill McGonigle wrote:
 On 01/21/2010 04:08 PM, Fabian Arrotin wrote:
 The standard kvm from 5.4 and not the*old*  one from extras

 Hrm, this is probably where I'm going wrong.  I have kvm -36 from
 -extras (which bails if you specify a virtio type device).  I'm not
 seeing kvm in the repos for 5.4 or updates/5.4 on mirror.centos.org, i.e.:

 http://mirror.centos.org/centos-5/5.4/os/i386/CentOS/

 Which version should I be seeing for 5.4?

AFAIK Red Hat only supports KVM for the x86_64 architecture so if you want 
to use it on i386 you have to build your own packages.

Regards,
   Dennis
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] VirtIO with CentOS 5.4

2010-01-21 Thread Bill McGonigle
On 01/21/2010 07:01 PM, Karanbir Singh wrote:

 Has anyone tried building the kvm packages shipped by redhat on i386 ?
 apart from the spec file, are there any other changes required ?

I'm working on this right now but running into missing packages as seen 
here:

http://lists.centos.org/pipermail/centos-devel/2009-November/005178.html

I did find, e.g. kvm in updates/5.4, but not in 5.4/os.  Perhaps 
something was fixed for updates that missed the initial build and the 
ones without updates are still missing?

yum-builddep is at least asking for iasl and qspice, qspice requiring 
qcairo, but I'm stuck at that point.

-Bill

-- 
Bill McGonigle, Owner
BFC Computing, LLC
http://bfccomputing.com/
Telephone: +1.603.448.4440
Email, IM, VOIP: b...@bfccomputing.com
VCard: http://bfccomputing.com/vcard/bill.vcf
Social networks: bill_mcgonigle/bill.mcgonigle
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] VirtIO with CentOS 5.4

2010-01-21 Thread Akemi Yagi
On Thu, Jan 21, 2010 at 4:32 PM, Bill McGonigle b...@bfccomputing.com wrote:
 On 01/21/2010 07:01 PM, Karanbir Singh wrote:

 Has anyone tried building the kvm packages shipped by redhat on i386 ?
 apart from the spec file, are there any other changes required ?

 I'm working on this right now but running into missing packages as seen
 here:

 http://lists.centos.org/pipermail/centos-devel/2009-November/005178.html

 I did find, e.g. kvm in updates/5.4, but not in 5.4/os.  Perhaps
 something was fixed for updates that missed the initial build and the
 ones without updates are still missing?

 yum-builddep is at least asking for iasl and qspice, qspice requiring
 qcairo, but I'm stuck at that point.

In fact, there is a bug report about missing source rpms:

http://bugs.centos.org/view.php?id=4042

Akemi
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-es] como conectar dos servidores en modo de fallo

2010-01-21 Thread Alejandro Marin Maturano
Hola comunidad les platico mi situación tengo un servidor Ldap, en el
cual se autentican mis usuarios, pero me solicitan hacer otro idéntico y
que este conectado (sincronizado) con el primero para que en caso de que
falle el primero el segundo entre automáticamente, la pregunta es:

¿Hay algun modo de como llevar a cabo esta tarea?
¿existe algun software para esto?

Mi servidor tiene Centos 5.4 con openldap como servicio de autenticación

saludos y gracias de antemano


___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS] perl updates always break perl programs, how to fix?

2010-01-21 Thread Christoph Maser
Am Mittwoch, den 20.01.2010, 21:46 +0100 schrieb James Chase:
 I realize this is my fault because once upon a time I installed a
 package using CPAN and probably other admins on the system have as
 well but now whenever I update perl I have to jump through hoops to
 get perl applications to work again (usually updating Scalar::Util and
 another package with CPAN). I would love to figure out how to fix this
 so it's not such a headache to keep up to date with perl, but I can't
 figure out how.

 I tried moving my /usr/lib/perl5/site_perl directory out of the way
 and installing perl-Scar-Util using yum but it doesn't let me because
 the perl-5.8.8 rpm owns the man file for that. I'm not sure why the
 default Scalar-Util (isn't it built in to the base install of perl on
 CentOS) doesn't work in the first place?

 Also I do add perl packages via the dag/rpmforge repo, not sure if
 that messes up the perl updates too. Sorry I realize this could also
 be classified as a perl question -- but I'm hopeful other centos
 admins found a way to get their centos back into compliance with the
 yum updates.

 Thanks,
 James

 --
 Beware of all enterprises that require new clothes.
  --  Henry David Thoreau


I would suggest setting INSTALLDIRS=site (or --installdirs for
Module::Build) and INSTALLSITEARCH, INSTALLSITELIB, INSTALLSITEBIN etc
if needed. Also using INSTALL_BASE is a good option to get a
installation in a completely isolated location. Have a look at:
http://search.cpan.org/~mschwern/ExtUtils-MakeMaker-6.56/lib/ExtUtils/MakeMaker.pm

Chris



financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert | Dr. Alexis Eisenhofer | Dr. 
Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] cryptoloop

2010-01-21 Thread Morten Sundstrøm
Hi.

Have a problem that i need som help with:
1. Have multipple raids working in a encrypted filesystem in CentOS 5.4 (i386): 
script file, crypt.sh

modprobe cryptoloop
losetup -e aes /dev/loop0 /dev/md0
(inserting password here)
then run
mount -t ext3 /dev/loop0 /mnt/raid5
Have been using this in CentOS for a long time and works like a charm.

2. Raids is now moved to another server with ubuntu server 9.10 (64bit)
Raid is detected fine and working.

Do the same thing again and get:
sudo modprobe cryptoloop (ok)
sudo losetup -e aes /dev/loop0 /dev/md0 (ok)
sudo mount -t ext3 /dev/loop0 /mnt/raid5 (failes with the following msg)
mount: wrong fs type, bad option, bad superblock on /dev/loop0,
   missing codepage or helper program, or other error
   In some cases useful info is found in syslog - try
   dmesg | tail  or so

ubuntu: cat /proc/crypto |grep aes
name : ecb(aes)
driver   : ecb(aes-asm)
name : cbc(aes)
driver   : cbc(aes-asm)
name : cbc(aes)
driver   : cbc(aes-asm)
name : aes
driver   : aes-asm
module   : aes_x86_64
name : aes
driver   : aes-generic
module   : aes_generic

Is there compatible issues here?
Can it be that the old server was using i386 arch and the new is 64bit?
losetup version differs?

Any insight is appreciated.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] cryptoloop

2010-01-21 Thread Pasi Kärkkäinen
On Thu, Jan 21, 2010 at 09:41:37AM +0100, Morten Sundstrøm wrote:
 Hi.
 
 Have a problem that i need som help with:
 1. Have multipple raids working in a encrypted filesystem in CentOS 5.4 
 (i386): script file, crypt.sh
 
 modprobe cryptoloop


cryptoloop is depracated, and should not be used. 
Use dm-crypt instead, or if you have to, loop-aes.

-- Pasi

 losetup -e aes /dev/loop0 /dev/md0
 (inserting password here)
 then run
 mount -t ext3 /dev/loop0 /mnt/raid5
 Have been using this in CentOS for a long time and works like a charm.
 
 2. Raids is now moved to another server with ubuntu server 9.10 (64bit)
 Raid is detected fine and working.
 
 Do the same thing again and get:
 sudo modprobe cryptoloop (ok)
 sudo losetup -e aes /dev/loop0 /dev/md0 (ok)
 sudo mount -t ext3 /dev/loop0 /mnt/raid5 (failes with the following msg)
 mount: wrong fs type, bad option, bad superblock on /dev/loop0,
missing codepage or helper program, or other error
In some cases useful info is found in syslog - try
dmesg | tail  or so
 
 ubuntu: cat /proc/crypto |grep aes
 name : ecb(aes)
 driver   : ecb(aes-asm)
 name : cbc(aes)
 driver   : cbc(aes-asm)
 name : cbc(aes)
 driver   : cbc(aes-asm)
 name : aes
 driver   : aes-asm
 module   : aes_x86_64
 name : aes
 driver   : aes-generic
 module   : aes_generic
 
 Is there compatible issues here?
 Can it be that the old server was using i386 arch and the new is 64bit?
 losetup version differs?
 
 Any insight is appreciated.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mysql Workbench

2010-01-21 Thread Rajagopal Swaminathan
Greetings,

On Tue, Jan 19, 2010 at 8:53 PM, Rajagopal Swaminathan 
raju.rajs...@gmail.com wrote:

Slightly OT, I wanted to enable blackhole engine in the mysql server
so downloaded the SRPM from Centos Site, setup the rpmbuild envronment
with mighty help from the our own Russ's Owlriver website and tried
building it. I have a 5.2 centos box on which I need to enable this so
took the 5.2 SRPM (mysql-5.0.45-7.el5.src.rpm) from
vault.centos.org.(mysql

The Build did not complete throwing errors during testing about unable
to connect using ssl or something.

I tried from 5.4 SRPM at least the build went thru.

Was 5.0.45 srpm broken? or did I get it horribly wrong somewhere as it
is my first attempt to build from srpm.

Has anybody come across this error?

Thanks and Regards,

Rajagopal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] cryptoloop

2010-01-21 Thread Morten Sundstrøm
I know about that. Is that the reason it wont work in ubuntu?

If I switch to a new encryption i must copy all the data to a new raid wich is 
not possible at the moment.

I need to get this mounted.

/MS

- Original Message -
Fra: Pasi Kärkkäinen pa...@iki.fi
Til: CentOS mailing list centos@centos.org
Sendt: 21. januar 2010 09:57:24
Emne: Re: [CentOS] cryptoloop

On Thu, Jan 21, 2010 at 09:41:37AM +0100, Morten Sundstrøm wrote:
 Hi.
 
 Have a problem that i need som help with:
 1. Have multipple raids working in a encrypted filesystem in CentOS 5.4 
 (i386): script file, crypt.sh
 
 modprobe cryptoloop


cryptoloop is depracated, and should not be used. 
Use dm-crypt instead, or if you have to, loop-aes.

-- Pasi

 losetup -e aes /dev/loop0 /dev/md0
 (inserting password here)
 then run
 mount -t ext3 /dev/loop0 /mnt/raid5
 Have been using this in CentOS for a long time and works like a charm.
 
 2. Raids is now moved to another server with ubuntu server 9.10 (64bit)
 Raid is detected fine and working.
 
 Do the same thing again and get:
 sudo modprobe cryptoloop (ok)
 sudo losetup -e aes /dev/loop0 /dev/md0 (ok)
 sudo mount -t ext3 /dev/loop0 /mnt/raid5 (failes with the following msg)
 mount: wrong fs type, bad option, bad superblock on /dev/loop0,
missing codepage or helper program, or other error
In some cases useful info is found in syslog - try
dmesg | tail  or so
 
 ubuntu: cat /proc/crypto |grep aes
 name : ecb(aes)
 driver   : ecb(aes-asm)
 name : cbc(aes)
 driver   : cbc(aes-asm)
 name : cbc(aes)
 driver   : cbc(aes-asm)
 name : aes
 driver   : aes-asm
 module   : aes_x86_64
 name : aes
 driver   : aes-generic
 module   : aes_generic
 
 Is there compatible issues here?
 Can it be that the old server was using i386 arch and the new is 64bit?
 losetup version differs?
 
 Any insight is appreciated.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Xorg without xorg.conf (a bit OT)

2010-01-21 Thread Ron Blizzard
I like to try out other distributions of Linux. Today I took a look at
Mint Linux 8 and Fedora 12. I installed and updated each on a small
partition -- actual physical install, not virtual machines. Both
worked great at 1280x1024 (their defaults) but neither would let me
use 1024x768 resolution. Both came with newer versions of Xorg,
neither of which build an xorg.conf file. Mint gave me three settings,
1280x1024, 640x480 and something like 700x400(?). Fedora gave me the
choice of 1024x768, but when I tried to use it, it just went black
until timing out. When I downloaded and ran system-config-display, it
built an xorg.conf file, which I modified to 1024x768 (by removing the
1280x1024 selection). When I tried rebooting, it locked up. (I have an
Intel 865G video chip, BTW.)

So, what is it about the newer versions of Xorg that doesn't like
1024x758 resolution? At least not on an Intel Graphics chip? Just
weird.

And I'm curious as to how Xorg determines its monitor resolution
choices when there is no xorg.conf file. Is there a good tutorial on
this subject available? Frustrating situation -- and I'm still nervous
that Red Hat 6 is going to end up with the same issue -- if this is an
Xorg problem with Intel it seems reasonable to assume that they will
inherit it.

-- 
RonB -- Using CentOS 5.4
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Xorg without xorg.conf (a bit OT)

2010-01-21 Thread Marko Vojinovic
On Thursday 21 January 2010 09:37:11 Ron Blizzard wrote:
 And I'm curious as to how Xorg determines its monitor resolution
 choices when there is no xorg.conf file.

X server queries the monitor for supported resolutions by reading the EDID 
data, and uses the best setting available as the default. See, for example, 
http://en.wikipedia.org/wiki/EDID . Also take a look inside 
/var/log/Xorg.0.log and the output of xrandr for what was autodetected.

 Is there a good tutorial on
 this subject available?

man xrandr

HTH, :-)
Marko

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Kai Schaetzl
Kai Schaetzl wrote on Tue, 19 Jan 2010 23:31:33 +0100:

 No. I usually see some change in the permissions 
 (/var/named/chroot/var/named/ loses group write and named logs some 
 complaints but still works) when updating named.

And sure enought that happened with latest bind update today again.

/var/named/chroot/var l
drwxrwx--- 2 named named 4096 Jan 20 17:33 log
drwxr-x--- 4 root  named 4096 Jan 20 17:33 named
drwxr-x--- 4 root  named 4096 Mar 14  2003 run
drwxrwx--- 2 named named 4096 Mar 14  2003 tmp

I usually set g+w for the named directory. I wonder now if the owner of 
that directory should actually be named? Thanks.

Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Kai Schaetzl
Kai Schaetzl wrote on Thu, 21 Jan 2010 13:00:48 +0100:

 I wonder now if the owner of 
 that directory should actually be named?

Hm, after looking on other machines that have named installed but not in 
use it's excactly the same there. So, if named wants write permission 
there, but the rpm always removes that permission - isn't the rpm wrong 
then? Should I report this as a bug?

Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Recent openvz kernels unstable?

2010-01-21 Thread Chris
Has anyone else running heavily loaded openvz boxes noticed strange behavior
with the latest kernels?  Ever since updating to the latest *.164* kernels, we
have mysterious machine lock ups.  Sometime there will be an oops message,
other times there will be none.  The oops messages aren't the same when we
manage to get one.  Sometimes a machine will just drop off network without
even a blip on the serial console.

I still have to try to get a memory dump from one of the machines to see if I
can find anything there, but I'm curious if anyone else has run into the same
issues.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Bowie Bailey
Kai Schaetzl wrote:
 Kai Schaetzl wrote on Thu, 21 Jan 2010 13:00:48 +0100:

   
 I wonder now if the owner of 
 that directory should actually be named?
 

 Hm, after looking on other machines that have named installed but not in 
 use it's excactly the same there. So, if named wants write permission 
 there, but the rpm always removes that permission - isn't the rpm wrong 
 then? Should I report this as a bug?
   

On my system, named does not have write permission to the named
directory, but it does have permission to named/data.

# ll /var/named/chroot/var/
total 24
drwxr-x---  4 root  named 4096 Aug 25  2004 named
drwxrwx---  3 root  named 4096 Mar 13  2003 run
drwxrwx---  2 named named 4096 Mar 13  2003 tmp

# ll /var/named/chroot/var/named/
total 16
drwxrwx---  5 named named 4096 Sep 25 14:25 data
drwxrwx---  2 named named 4096 Jul 27  2004 slaves

Everything is working fine for me with these settings, so I don't think
this is a problem.

-- 
Bowie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Brian Mathis
On Thu, Jan 21, 2010 at 8:20 AM, Kai Schaetzl mailli...@conactive.com wrote:
 Kai Schaetzl wrote on Thu, 21 Jan 2010 13:00:48 +0100:

 I wonder now if the owner of
 that directory should actually be named?

 Hm, after looking on other machines that have named installed but not in
 use it's excactly the same there. So, if named wants write permission
 there, but the rpm always removes that permission - isn't the rpm wrong
 then? Should I report this as a bug?

 Kai

I don't think you'd want a compromised named to be able to make
changes to your authoritative DNS records, which is what could happen
if you have permissions set that way.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Bowie Bailey
Brian Mathis wrote:
 On Thu, Jan 21, 2010 at 8:20 AM, Kai Schaetzl mailli...@conactive.com wrote:
   
 Kai Schaetzl wrote on Thu, 21 Jan 2010 13:00:48 +0100:

 
 I wonder now if the owner of
 that directory should actually be named?
   
 Hm, after looking on other machines that have named installed but not in
 use it's excactly the same there. So, if named wants write permission
 there, but the rpm always removes that permission - isn't the rpm wrong
 then? Should I report this as a bug?

 Kai
 

 I don't think you'd want a compromised named to be able to make
 changes to your authoritative DNS records, which is what could happen
 if you have permissions set that way.
   

1) The directory he was referring to does not contain the zone files.
2) The directory that does contain the zone files appears to be owned by
named with write permissions by default.
3) All of my master zone files are owned by root with 644 permissions,
so regardless of the directory permissions, named can't mess with them.
4) The secondary server's zone files have to be writable by named so
they can update from the master.

I don't see a problem here.

-- 
Bowie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] update of openssh-server i386 4.3p2-36.el5, dependencies

2010-01-21 Thread Anthony Kamau
On Tue, 2010-01-12 at 10:39 +0100, Christopher Thorjussen wrote:

 Just checking 'yum update ecryptfs-utils' gives me alone 54 packages to 
 install:
 
 Transaction Summary
 =
 Install 54 Package(s)
 Update   5 Package(s)
 Remove   0 Package(s)
 
 Total download size: 25 M
 Is this ok [y/N]: n
 Exiting on user Command
 
 Is there no way out of getting all these extra packages?
 


Maybe you could use 'exclude=ecryptfs*' (or whatever is causing
ecryptfs* to be included in the update) in /etc/yum.conf then run your
update.  Once the issue is resolved, don't forget to remove the exclude
line for future updates???

Just a thought.

Cheers,
ak.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [PKI concepts] Why Jboss need (signed cert and) root-cert in PEM format?

2010-01-21 Thread Sven Aluoor
Hi folks

[ Please add me CC. Thanks ]

We have here a Jboss app and web server. We signed the SSL-certificate
that end-user don't have ugly error messages. I don't understand why
we need to import the Root-Cert in PEM format?

$ keytool -import -trustcacerts -file rootcert.pem -keystore
myserver.keystore -alias root

The Root-Cert is in web browser, why there is a must to import in keystore?

Did I misunderstood PKI basics?

cheers Sven
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] PAM and GNOME keyring

2010-01-21 Thread Giulio Troccoli
Hi everybody,

I have a CentOS 5.4 server I need to se-up as Subversion server. On the server 
GNOME keyring has been installed and the integration with Subversion works 
fine: I'm asked for the keyring password the first time and that's it.

I am now trying to set it up so that after login the default keyring is 
unlocked. This way I won't be asked for the keyring password ever. I have 
followed the instructions found at 
http://fedoraproject.org/wiki/Tools/NetworkManager#Gnome-specific_information 
but it doesn't work. I have rebooted the server few times with no avail. I have 
checked that my password and the keyring password are the same. Every time I 
run a Subversion command I'm prompted for the keyring password.

Can anyone help me?

Please reply to me too as I am not subscribed to the list.

Thanks
Giulio


Linedata Services (UK) Ltd
Registered Office: Bishopsgate Court, 4-12 Norton Folgate, London, E1 6DB
Registered in England and Wales No 3027851VAT Reg No 778499447




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] update of openssh-server i386 4.3p2-36.el5, dependencies

2010-01-21 Thread John Doe
From: Anthony Kamau akcen...@anroet.com
Just checking 'yum update ecryptfs-utils' gives me alone 54 packages to 
install:
Transaction Summary
=
Install 54 Package(s)
Update   5 Package(s)
Remove   0 Package(s)
Total download size: 25 M
Is this ok [y/N]: n
Exiting on user Command
Is there no way out of getting all these extra packages?

Maybe try -nodeps but...  Dependencies are there for a reason...
If it needs libXYZ to work... it needs it.
Also, was it ever installed?  Does not look like it was.

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] perl-Mail-Box dependencies

2010-01-21 Thread Bowie Bailey
Does anyone know why the CentOS 5 package perl-Mail-Box from both
rpmforge and epel is dependent on spamassassin?  Looking at the source
from cpan, it appears to be an option rather than a dependency (and is
even commented out of the option list in the makefile).

-- 
Bowie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Kai Schaetzl
Brian Mathis wrote on Thu, 21 Jan 2010 09:38:12 -0500:

 I don't think you'd want a compromised named to be able to make
 changes to your authoritative DNS records, which is what could happen
 if you have permissions set that way.

But why does named then report it right after the update?

Jan 21 12:46:40 chacha named[16607]: the working directory is not writable


Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Kai Schaetzl
Bowie Bailey wrote on Thu, 21 Jan 2010 09:34:02 -0500:

 # ll /var/named/chroot/var/
 total 24
 drwxr-x---  4 root  named 4096 Aug 25  2004 named
 drwxrwx---  3 root  named 4096 Mar 13  2003 run

that has no group write permission here.

 drwxrwx---  2 named named 4096 Mar 13  2003 tmp
 
 # ll /var/named/chroot/var/named/
 total 16
 drwxrwx---  5 named named 4096 Sep 25 14:25 data
 drwxrwx---  2 named named 4096 Jul 27  2004 slaves

Same here.

 Everything is working fine for me with these settings, so I don't think
 this is a problem.

It seems to be working, but I get this complaint (I see it as a complaint) 
each time named gets restarted - until I give it write permission for that 
directory.

 2) The directory that does contain the zone files appears to be owned by
 named with write permissions by default.

This would be data then. Yes, same here. And the files in it are 
owner/group named and rw for both.

 3) All of my master zone files are owned by root with 644 permissions,
 so regardless of the directory permissions, named can't mess with them.

I have them even 640. owner root, group named.


Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [PKI concepts] Why Jboss need (signed cert and) root-cert in PEM format?

2010-01-21 Thread R P Herrold
On Thu, 21 Jan 2010, Sven Aluoor wrote:

 Hi folks

 [ Please add me CC. Thanks ]

so .. a 'not subscribed' driveby -- also looks to be a 
cross-post

 We have here a Jboss app and web server. We signed the SSL-certificate

on a product we do not build

 that end-user don't have ugly error messages. I don't understand why

 The Root-Cert is in web browser, why there is a must to import in keystore?

 Did I misunderstood PKI basics?

and not willing to read about PKI as that certificate store is 
not relevant for all purposes.

Perhaps the price of CentOS' comptence is that random 
questions end up here.

my $0.02

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Recent openvz kernels unstable?

2010-01-21 Thread Chris
On Thu, Jan 21, 2010 at 09:09:59AM -0500, Chris wrote:
 Has anyone else running heavily loaded openvz boxes noticed strange behavior
 with the latest kernels?  Ever since updating to the latest *.164* kernels, we
 have mysterious machine lock ups.  Sometime there will be an oops message,
 other times there will be none.  The oops messages aren't the same when we
 manage to get one.  Sometimes a machine will just drop off network without
 even a blip on the serial console.
 
 I still have to try to get a memory dump from one of the machines to see if I
 can find anything there, but I'm curious if anyone else has run into the same
 issues.

Never mind.  I remembered after I sent this that ovz-kernel isn't a centos
kernel, it just looks like one.  I also found
https://bugzilla.redhat.com/show_bug.cgi?id=545411

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread lhecking

 It seems to be working, but I get this complaint (I see it as a complaint) 
 each time named gets restarted - until I give it write permission for that 
 directory.
 
 This is RedHat's policy for bind. The working directory does not need to
 be writable, and RH's bind maintainer Adam Tkac has explained this on numerous
 occasions.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 59, Issue 7

2010-01-21 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than Re: Contents of CentOS-announce digest...


Today's Topics:

   1. CESA-2010:0061 Moderate CentOS 3 i386 gzip -  security update
  (Tru Huynh)
   2. CESA-2010:0061 Moderate CentOS 3 x86_64 gzip -security
  update (Tru Huynh)
   3. CEBA-2010:0045  CentOS 5 i386 cups Update (Karanbir Singh)
   4. CEBA-2010:0045  CentOS 5 x86_64 cups Update (Karanbir Singh)
   5. CEBA-2010:0047  CentOS 5 i386 strace Update (Karanbir Singh)
   6. CEBA-2010:0047  CentOS 5 x86_64 strace Update (Karanbir Singh)
   7. CEBA-2010:0052 CentOS 5 x86_64 util-linux Update (Karanbir Singh)
   8. CEBA-2010:0052  CentOS 5 i386 util-linux Update (Karanbir Singh)
   9. CESA-2010:0061 Moderate CentOS 5 i386 gzip Update (Karanbir Singh)
  10. CESA-2010:0061 Moderate CentOS 5 x86_64 gzip  Update
  (Karanbir Singh)
  11. CESA-2010:0062 Moderate CentOS 5 x86_64 bind  Update
  (Karanbir Singh)
  12. CESA-2010:0062 Moderate CentOS 5 i386 bind Update (Karanbir Singh)
  13. CESA-2010:0046 Important CentOS 5 i386 kernel Update
  (Karanbir Singh)
  14. CESA-2010:0046 Important CentOS 5 x86_64 kernel   Update
  (Karanbir Singh)
  15. CEBA-2010:0050  CentOS 5 i386 glibc Update (Karanbir Singh)
  16. CEBA-2010:0050  CentOS 5 x86_64 glibc Update (Karanbir Singh)
  17. CESA-2010:0054 Moderate CentOS 5 i386 openssl Update
  (Karanbir Singh)
  18. CESA-2010:0054 Moderate CentOS 5 x86_64 openssl   Update
  (Karanbir Singh)


--

Message: 1
Date: Wed, 20 Jan 2010 18:49:37 +0100
From: Tru Huynh t...@centos.org
Subject: [CentOS-announce] CESA-2010:0061 Moderate CentOS 3 i386 gzip
-   security update
To: centos-annou...@centos.org
Message-ID: 20100120174937.ga15...@sillage.bis.pasteur.fr
Content-Type: text/plain; charset=us-ascii

CentOS Errata and Security Advisory CESA-2010:0061

gzip security update for CentOS 3 i386:
https://rhn.redhat.com/errata/RHSA-2010-0061.html

The following updated file has been uploaded and is currently syncing to
the mirrors:

i386:
updates/i386/RPMS/gzip-1.3.3-15.rhel3.i386.rpm

source:
updates/SRPMS/gzip-1.3.3-15.rhel3.src.rpm

You may update your CentOS-3 i386 installations by running the command:

yum update gzip

Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20100120/3f31c247/attachment-0001.bin
 

--

Message: 2
Date: Wed, 20 Jan 2010 18:49:48 +0100
From: Tru Huynh t...@centos.org
Subject: [CentOS-announce] CESA-2010:0061 Moderate CentOS 3 x86_64
gzip -  security update
To: centos-annou...@centos.org
Message-ID: 20100120174948.gb15...@sillage.bis.pasteur.fr
Content-Type: text/plain; charset=us-ascii

CentOS Errata and Security Advisory CESA-2010:0061

gzip security update for CentOS 3 x86_64:
https://rhn.redhat.com/errata/RHSA-2010-0061.html

The following updated file has been uploaded and is currently syncing to
the mirrors:

x86_64:
updates/x86_64/RPMS/gzip-1.3.3-15.rhel3.x86_64.rpm

source:
updates/SRPMS/gzip-1.3.3-15.rhel3.src.rpm

You may update your CentOS-3 x86_64 installations by running the command:

yum update gzip

Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20100120/f5db93a0/attachment-0001.bin
 

--

Message: 3
Date: Wed, 20 Jan 2010 17:54:33 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CEBA-2010:0045  CentOS 5 i386 cups Update
To: centos-annou...@centos.org
Message-ID: 20100120175433.ga17...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2010:0045 

Upstream details at : http://rhn.redhat.com/errata/RHBA-2010-0045.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
0a6d0a8b6d3c45dea0bd37c6cb80c2a2  cups-1.3.7-11.el5_4.5.i386.rpm
ba699d7d6f7c3fbe4f8b37d6656b910d  

Re: [CentOS] perl-Mail-Box dependencies

2010-01-21 Thread Christoph Maser
Am Donnerstag, den 21.01.2010, 17:25 +0100 schrieb Bowie Bailey:
 Does anyone know why the CentOS 5 package perl-Mail-Box from both
 rpmforge and epel is dependent on spamassassin?  Looking at the source
 from cpan, it appears to be an option rather than a dependency (and is
 even commented out of the option list in the makefile).



for rpmforge there is spec files for much newer version which fix that
but the builds fail because some dependencyies are not available in the
buildsys.

Chris


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert | Dr. Alexis Eisenhofer | Dr. 
Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] netgear wg111v2

2010-01-21 Thread Davy Leon
Hi folks

I have a Centos 5.3 Box and need to know how to configure a Netgear wg111v2 USB 
WLAN adapter. I already have an wireless LAN build with an AP and a windows XP 
PC with another Netgear wg111v2 USB adaptor running on it..

Thanks

David___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] netgear wg111v2

2010-01-21 Thread Akemi Yagi
On Thu, Jan 21, 2010 at 10:02 AM, Davy Leon d...@scu.escambray.com.cu wrote:
 Hi folks

 I have a Centos 5.3 Box and need to know how to configure a Netgear wg111v2
 USB WLAN adapter. I already have an wireless LAN build with an AP and a
 windows XP PC with another Netgear wg111v2 USB adaptor running on it..

Does the manufacturer provide the driver for Linux?  You could use the
Windows driver with ndiswrapper if all else fails.

What is the output of:

 for BUSID in $(/sbin/lspci | awk '{ IGNORECASE=1 } /net/ { print $1
}'); do /sbin/lspci -s $BUSID -m; /sbin/lspci -s $BUSID -n; done

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bind data directory borked on update from 5.3 to 5.4

2010-01-21 Thread Kai Schaetzl
lheck...@users.sourceforge.net wrote on Thu, 21 Jan 2010 16:48:10 +:

 This is RedHat's policy for bind. The working directory does not need to
  be writable, and RH's bind maintainer Adam Tkac has explained this on 
 numerous
  occasions.

Thanks for the hint. I cannot see that he explained that on numerous 
occasions,
but I can see some bug reports about this, for instance http://www.mail-
archive.com/fedora-package-annou...@redhat.com/msg26692.html
As long as they keep doing this and *not* change the reporting at the same time 
they will get questions about it.

Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] trouble shooting slow ssh logins

2010-01-21 Thread aurfalien
Hi all,

I noticed that my ssh logins to a particular server were taking up to  
5 seconds to finally login.

My tcpdump -vv weren't producing much output (not good) and my pings  
to and from that host were normal and almost identical to other hosts  
on my subnet that had no ssh login delay issues.

Log files also showed nothing alarming.

My hosts file was missing this at the very end of the file;

::1 localhost6.localdoamin6 localhost6

I chose to disable ipv6 during install but no big deal that I needed  
that line.

My question is;

What tools could I have used to trouble shoot this as packet sniffers  
on the switch port or the host didn't seem to do the trick, nor did  
log file analysis?

I just had a hunch and decided to look at my hosts file, not the most  
effective way to fix issues but one I've used several times.

Thanks in advance,
- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] trouble shooting slow ssh logins

2010-01-21 Thread nate
aurfal...@gmail.com wrote:
 Hi all,

 I noticed that my ssh logins to a particular server were taking up to
 5 seconds to finally login.

This is frequently a DNS issue, is forward+reverse DNS functional?

You can also run SSH in debugging mode on the server, and increase
verbosity on the client. See the man pages.. I usually just fire up
another sshd on another port and test with that.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] trouble shooting slow ssh logins

2010-01-21 Thread aurfalien
 aurfal...@gmail.com wrote:
 Hi all,

 I noticed that my ssh logins to a particular server were taking up to
 5 seconds to finally login.

 This is frequently a DNS issue, is forward+reverse DNS functional?

DNS was normal, forward reverse lookups exist and match that host.

I'll turn on ssh debug and remove that line at the end of hosts to see  
what happens.

Thanks for the ideas.

- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] I have a question.

2010-01-21 Thread Samet ÖZGÜR
Hello
I have a question, How can I change logos and favicon.ico in Data.fs
file for Conga (Luci) Can anybody help me? Thanks!

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] trouble shooting slow ssh logins

2010-01-21 Thread Ian Murray




- Original Message 
 From: aurfal...@gmail.com aurfal...@gmail.com
 To: CentOS mailing list centos@centos.org
 Sent: Thu, 21 January, 2010 20:07:27
 Subject: Re: [CentOS] trouble shooting slow ssh logins
 
  aurfal...@gmail.com wrote:
  Hi all,
 
  I noticed that my ssh logins to a particular server were taking up to
  5 seconds to finally login.
 
  This is frequently a DNS issue, is forward+reverse DNS functional?
 
 DNS was normal, forward reverse lookups exist and match that host.
 

Is the server able to to reverse lookups on the IP address of the incoming 
client?

A day or two ago post a suggestion to use UseDNS No in the sshd config file 
(from memory), which worked for me.

HTH.


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] trouble shooting slow ssh logins

2010-01-21 Thread aurfalien
 - Original Message 
 From: aurfal...@gmail.com aurfal...@gmail.com
 To: CentOS mailing list centos@centos.org
 Sent: Thu, 21 January, 2010 20:07:27
 Subject: Re: [CentOS] trouble shooting slow ssh logins

 aurfal...@gmail.com wrote:
 Hi all,

 I noticed that my ssh logins to a particular server were taking  
 up to
 5 seconds to finally login.

 This is frequently a DNS issue, is forward+reverse DNS functional?

 DNS was normal, forward reverse lookups exist and match that host.


 Is the server able to to reverse lookups on the IP address of the  
 incoming client?

 A day or two ago post a suggestion to use UseDNS No in the sshd  
 config file (from memory), which worked for me.

 HTH.


The DNS server also behaved regarding name/ip addy lookups.

This server is a Zimbra mail server which during install, checks for  
proper DNS configs.  I usually check proper functioning DNS by hand  
anyways.

The ipv6 line was strange but I read a while back, some tech note  
about ensuring that is your last line in hosts.

- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] /proc/mounts always shows nobarrier option for xfs, even when mounted with barrier

2010-01-21 Thread Tom Georgoulias
Ran into a confusing situation today.  When I mount an xfs filesystem on 
a server running centos 5.4 x86_64 with kernel 2.6.18-164.9.1.el5, the 
barrier/nobarrier mount option as displayed in /proc/mounts is always 
set to nobarrier

Here's an example:
[r...@host ~]# mount -o nobarrier /dev/vg1/homexfs /mnt
[r...@host ~]# grep xfs /proc/mounts
/dev/vg1/homexfs /mnt xfs rw,attr2,nobarrier,noquota 0 0
[r...@host ~]# mount | grep xfs
/dev/mapper/vg1-homexfs on /mnt type xfs (rw,nobarrier)

[r...@host ~]# mount -o barrier /dev/vg1/homexfs /mnt
[r...@host ~]# grep xfs /proc/mounts
/dev/vg1/homexfs /mnt xfs rw,attr2,nobarrier,noquota 0 0
[r...@host ~]# mount | grep xfs
/dev/mapper/vg1-homexfs on /mnt type xfs (rw,barrier)

Can anyone else confirm this behavior?

Thanks,
Tom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /proc/mounts always shows nobarrier option for xfs, even when mounted with barrier

2010-01-21 Thread Ross Walker
On Jan 21, 2010, at 4:04 PM, Tom Georgoulias t...@mcclatchyinteractive.com 
  wrote:

 Ran into a confusing situation today.  When I mount an xfs  
 filesystem on
 a server running centos 5.4 x86_64 with kernel 2.6.18-164.9.1.el5, the
 barrier/nobarrier mount option as displayed in /proc/mounts is always
 set to nobarrier

 Here's an example:
 [r...@host ~]# mount -o nobarrier /dev/vg1/homexfs /mnt
 [r...@host ~]# grep xfs /proc/mounts
 /dev/vg1/homexfs /mnt xfs rw,attr2,nobarrier,noquota 0 0
 [r...@host ~]# mount | grep xfs
 /dev/mapper/vg1-homexfs on /mnt type xfs (rw,nobarrier)

 [r...@host ~]# mount -o barrier /dev/vg1/homexfs /mnt
 [r...@host ~]# grep xfs /proc/mounts
 /dev/vg1/homexfs /mnt xfs rw,attr2,nobarrier,noquota 0 0
 [r...@host ~]# mount | grep xfs
 /dev/mapper/vg1-homexfs on /mnt type xfs (rw,barrier)

 Can anyone else confirm this behavior?

LVM doesn't support barriers.

-Ross

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /proc/mounts always shows nobarrier option for xfs, even when mounted with barrier

2010-01-21 Thread Tom Georgoulias
On 01/21/2010 04:13 PM, Ross Walker wrote:
 On Jan 21, 2010, at 4:04 PM, Tom Georgouliast...@mcclatchyinteractive.com
 wrote:

 Ran into a confusing situation today.  When I mount an xfs
 filesystem on
 a server running centos 5.4 x86_64 with kernel 2.6.18-164.9.1.el5, the
 barrier/nobarrier mount option as displayed in /proc/mounts is always
 set to nobarrier

 Can anyone else confirm this behavior?

 LVM doesn't support barriers.

Good to know, looks like I'm getting the right info from /proc/mounts 
after all.

Tom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Recent openvz kernels unstable?

2010-01-21 Thread Ugo Bellavance
On 2010-01-21 11:35, Chris wrote:
 On Thu, Jan 21, 2010 at 09:09:59AM -0500, Chris wrote:
 Has anyone else running heavily loaded openvz boxes noticed strange behavior
 with the latest kernels?  Ever since updating to the latest *.164* kernels, 
 we
 have mysterious machine lock ups.  Sometime there will be an oops message,
 other times there will be none.  The oops messages aren't the same when we
 manage to get one.  Sometimes a machine will just drop off network without
 even a blip on the serial console.

 I still have to try to get a memory dump from one of the machines to see if I
 can find anything there, but I'm curious if anyone else has run into the same
 issues.

 Never mind.  I remembered after I sent this that ovz-kernel isn't a centos
 kernel, it just looks like one.  I also found
 https://bugzilla.redhat.com/show_bug.cgi?id=545411

Fixed in kernel-2.6.18-164.11.1.el5 
https://rhn.redhat.com/errata/RHSA-2010-0046.html

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Corporate drop box for files

2010-01-21 Thread Joseph L. Casale
I need to provide a means for our people to stop using the mail server
as a file server, a web site with a friendly interface has been asked
for instead of an ftp server.

Anyone know of something/project that exists already?

Thanks!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Corporate drop box for files

2010-01-21 Thread R P Herrold
On Fri, 22 Jan 2010, Joseph L. Casale wrote:

 I need to provide a means for our people to stop using the mail server
 as a file server, a web site with a friendly interface has been asked
 for instead of an ftp server.

 Anyone know of something/project that exists already?

Some form of a webDAV, possibly 'skinned', comes to mind, as 
shared rights and ACL are well defined and readily supported; 
Clients in every Linux, OS/X or Windows release in active 
support [also on my iTouch and related portible devices], so 
far as I know; server side is trivial; uses the 'universal 
firewall traversal protocol on TCP/80 (plaintext) and TCP/443 
(TLS) ;)

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] trouble shooting slow ssh logins

2010-01-21 Thread Amos Shapira
2010/1/22  aurfal...@gmail.com:
 The DNS server also behaved regarding name/ip addy lookups.

 This server is a Zimbra mail server which during install, checks for
 proper DNS configs.  I usually check proper functioning DNS by hand
 anyways.

 The ipv6 line was strange but I read a while back, some tech note
 about ensuring that is your last line in hosts.

We got delayes by GSSAPIAuthentication, which we don't use.

Try disabling it if you don't need it.

ssh - might reveal more about where the delay happens.

--Amos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] mysql update

2010-01-21 Thread madunix
I have the following update procedure that update mySQL DB over the
internet between source Linux Centos (local machine on my net behind a
DMZ with real IP A.B.C.D) and target Linux fedora (web server
www.myweb.com) every day on a specific time 18:00 through a crontab on
my source linux server

server(source) 
---DMZ---ASA---Router-InternetHostingCompany---Myweb(target)
[r...@source]# mysql -u updatex -p -h www.myweb.com test  sample.SQL


[r...@source]$ mysql -u updatex -p -h www.myweb.com test  sample.SQL
Enter password: *
CURTIME()
19:41:44
CURTIME()
19:50:09

[r...@source]$ mysql -u updatex -p -h www.myweb.com test  sample.SQL
Enter password:*
CURTIME()
08:26:08
CURTIME()
08:26:34

I did the above procedure multiple times in different times in the
day. the duration of this procedure takes from 22sec to 10min
see above, before a while it was running constant with duration of
30sec. I checked with my ISP, hosting company and network nothing been
changed from the structure/configuration.

[r...@source]# lsof -i -P | grep 3306
mysqld 3806   mysql   11u  IPv4  10926   TCP *:3306 (LISTEN)
mysql 15150user3u  IPv4 297528   TCP
192.168.10.5:8376-www.myweb.com:3306 (ESTABLISHED)

[r...@target]# netstat -a |grep mysql
tcp0  0 *:mysql *:*
 LISTEN
tcp0  0 www.myweb.:mysql A.B.C.D:8366 TIME_WAIT
tcp0 11 www.myweb.:mysql A.B.C.D:8372 ESTABLISHED
also i attached tcp connection between the nodes as above from source
and target,
can any one help why i have this behavior and how can i fix the delay,
thinking doing QoS or clean up and remoteexcution at that time ...

Thanks
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos