[CentOS-announce] CESA-2010:0788 Moderate CentOS 5 i386 pidgin Update

2010-10-22 Thread Karanbir Singh

CentOS Errata and Security Advisory 2010:0788 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0788.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
6228eae54c2cda4f9b1d9745acbd3ca9  finch-2.6.6-5.el5_5.i386.rpm
5484179163bc96b389c3b7809edb062e  finch-devel-2.6.6-5.el5_5.i386.rpm
067cf1b58841fe642d27c1ed3d9b9ebc  libpurple-2.6.6-5.el5_5.i386.rpm
f7270d9f7773b6700437cefca79569cd  libpurple-devel-2.6.6-5.el5_5.i386.rpm
464cd34a3a227211c27c99d9f54784eb  libpurple-perl-2.6.6-5.el5_5.i386.rpm
e63fea4e7883694592d925374cc4787b  libpurple-tcl-2.6.6-5.el5_5.i386.rpm
4dc54502461973c33eef50df7b1982eb  pidgin-2.6.6-5.el5_5.i386.rpm
c8d56f9b63d110a6cc98effab7ec8d26  pidgin-devel-2.6.6-5.el5_5.i386.rpm
328586eb986b99664f52273878398b37  pidgin-perl-2.6.6-5.el5_5.i386.rpm

Source:
bf281d91c9b425b8696544eaa2158f69  pidgin-2.6.6-5.el5_5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net

___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


[CentOS-announce] CESA-2010:0788 Moderate CentOS 5 x86_64 pidgin Update

2010-10-22 Thread Karanbir Singh

CentOS Errata and Security Advisory 2010:0788 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0788.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
88dc4a374446f5d5b2e0dd379f6e7922  finch-2.6.6-5.el5_5.i386.rpm
1e067757f0e37ff0b8660818cd6479c4  finch-2.6.6-5.el5_5.x86_64.rpm
1e6b9147e3b7742dca61940c0e48d35e  finch-devel-2.6.6-5.el5_5.i386.rpm
b24fcec1cba7972854bd8203fcd2df32  finch-devel-2.6.6-5.el5_5.x86_64.rpm
199742a356910080f727d0ec92fc65b0  libpurple-2.6.6-5.el5_5.i386.rpm
324e27530467d20282f9b784e2e31a6d  libpurple-2.6.6-5.el5_5.x86_64.rpm
b153ac1e92c757749210ec40ef5f26b8  libpurple-devel-2.6.6-5.el5_5.i386.rpm
4068d9cd61e1d0c75d82d7a217f64a40  libpurple-devel-2.6.6-5.el5_5.x86_64.rpm
124267f24e6bcfbedacea24d816915b4  libpurple-perl-2.6.6-5.el5_5.x86_64.rpm
17179af643eb8fd87d76c9f3ad1ac3d2  libpurple-tcl-2.6.6-5.el5_5.x86_64.rpm
3555fae71740507054e9ab61404072e9  pidgin-2.6.6-5.el5_5.i386.rpm
95fe6c56a2cfaabf3bb09523a6bb5043  pidgin-2.6.6-5.el5_5.x86_64.rpm
c2c1208abd825352321a76cc9318db9f  pidgin-devel-2.6.6-5.el5_5.i386.rpm
ab0a47e361fb71f87fa5fe77c2867ed1  pidgin-devel-2.6.6-5.el5_5.x86_64.rpm
e77902ff001a547f7ec6e2ddfda4add0  pidgin-perl-2.6.6-5.el5_5.x86_64.rpm

Source:
bf281d91c9b425b8696544eaa2158f69  pidgin-2.6.6-5.el5_5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net

___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


[CentOS-announce] CEBA-2010:0789 CentOS 5 x86_64 libbonobo Update

2010-10-22 Thread Karanbir Singh

CentOS Errata and Bugfix Advisory 2010:0789 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0789.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
abddf3035d2c1f07ddc7785d1181e44d  libbonobo-2.16.0-1.1.el5_5.1.i386.rpm
c592d7204f1c2b32cc8ca5a7753cf003  libbonobo-2.16.0-1.1.el5_5.1.x86_64.rpm
cc4e8d70849a7827381590c797f97c89  libbonobo-devel-2.16.0-1.1.el5_5.1.i386.rpm
944748134f356dc0b9b144c644ac658e  libbonobo-devel-2.16.0-1.1.el5_5.1.x86_64.rpm

Source:
ac33719f8498d8ba541c5b2915677ecc  libbonobo-2.16.0-1.1.el5_5.1.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net

___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


[CentOS-announce] CEBA-2010:0789 CentOS 5 i386 libbonobo Update

2010-10-22 Thread Karanbir Singh

CentOS Errata and Bugfix Advisory 2010:0789 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0789.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
5b9db7961288394f28bbe1c50de5865d  libbonobo-2.16.0-1.1.el5_5.1.i386.rpm
d8938653ed3fd708d09e20441fdca7da  libbonobo-devel-2.16.0-1.1.el5_5.1.i386.rpm

Source:
ac33719f8498d8ba541c5b2915677ecc  libbonobo-2.16.0-1.1.el5_5.1.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net

___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


Re: [CentOS-es] Cual es la Distribución en que se ba sa el Examen LPI?

2010-10-22 Thread Mauro Sánchez
El día 20 de octubre de 2010 11:32, Luis Alberto Roman Aguirre
luisroma...@hotmail.com escribió:

 Buenas Lista:

 El  motivo de este mail es para que me puedan dar una recomendación o bien me 
 saquen de la duda, resulta que estoy  interesado en dar el EXAMEN LPI, pero 
 la cuestion es que por ejemplo yo que solo uso CentOS me serviria para dar 
 ese examen??... lo digo porque algunos compañeros me comentan que se basa en 
 distribuciones de Debian y demas .
 La verdad ya no se que creer..ahora si es que alguien conoce alguna pagina 
 donde pueda dar el examen SIMULADO agradecere.Bueno espero me puedan sacar de 
 esa duda. Les escribo desde la Ciudad de Arequipa-Perú.

Hola.
Se basa en Debian y en Red Hat.
Saludos.
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] Cual es la Distribución en que se ba sa el Examen LPI?

2010-10-22 Thread Sergio Belkin
El día 22 de octubre de 2010 09:04, Mauro Sánchez maur...@gmail.com escribió:
 El día 20 de octubre de 2010 11:32, Luis Alberto Roman Aguirre
 luisroma...@hotmail.com escribió:

 Buenas Lista:

 El  motivo de este mail es para que me puedan dar una recomendación o bien 
 me saquen de la duda, resulta que estoy  interesado en dar el EXAMEN LPI, 
 pero la cuestion es que por ejemplo yo que solo uso CentOS me serviria para 
 dar ese examen??... lo digo porque algunos compañeros me comentan que se 
 basa en distribuciones de Debian y demas .
 La verdad ya no se que creer..ahora si es que alguien conoce alguna pagina 
 donde pueda dar el examen SIMULADO agradecere.Bueno espero me puedan sacar 
 de esa duda. Les escribo desde la Ciudad de Arequipa-Perú.

 Hola.
 Se basa en Debian y en Red Hat.
 Saludos.

Cabe aclarar que LPI trata de ser lo más neutral posible.

The most critical difference between LPI and the rest of these
programs is that LPI is completely vendor independent and distribution
neutral. 

Es decir es ante todo un examen de Linux, obviamente, no conviene
estudiar con una distro muy exótica. Las recomendables son CentOS, Red
Hat, Fedora y de la rama debianista, Debian y Ubuntu.

Importante no meterse con particularidades de una distro

Saludos
-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS] OT: looking for network performance comparison chart

2010-10-22 Thread Rudi Ahlers
Hi all,

Does anyone have, or know of a comparison chart of the different
network adapters, i.e. 1GB  / 10GB, Infiniband, etc. And if possible
with a few top brand NIC's and switches listed as well.

I would like to see, for example, what the max throughput is of a 1GB
NIC (and this could probably differ from PCI to PCIE-x1 to PCIE-x4),
and 10GBE. Different switches would probably also have different
ratings, but could a layer 2 switch  layer3 switch deliver the same
performance for example?

Basically I need to know what upload / download speeds I should be
getting from the different networks, set aside other options like CPU
/ RAM / disc IO / etc.

I have tried google already, but didn't get anything useful.

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Preserving LVM after after os reload

2010-10-22 Thread Sherin George
Hi guys,

I have two disks, one with OS and a second disk containing an LVM.  I
would like to OS reload the server without losing LVM.

I heard that LVM is self sustaining. Is that true ? Should I backup
something(using vgcfgbackup   vgexport ?)  to get LVM running after
os reload.

Thanks in advance.

--
Sherin
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Preserving LVM after after os reload

2010-10-22 Thread nux
Sherin George writes:

 Hi guys,
 
 I have two disks, one with OS and a second disk containing an LVM.  I
 would like to OS reload the server without losing LVM.
 
 I heard that LVM is self sustaining. Is that true ? Should I backup
 something(using vgcfgbackup   vgexport ?)  to get LVM running after
 os reload.

Sherin,

AFAIK you're safe as long as you obviously do not install on the LVM disk. 
Centos will pick up any LVM groups you have on that disk, you should be able 
to see it in Anaconda.

--
Nux!
www.nux.ro


 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Preserving LVM after after os reload

2010-10-22 Thread Sherin George
Thanks Nux :)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Mount/automount fails with krb5-enabled nfs4

2010-10-22 Thread Hans Persson
tor 2010-10-21 klockan 17:21 -0700 skrev James A. Peltier:

 | I've run into issues unless I was running the latest version of
 | mount-utils, which I _think_ included rpc.gssd and rpc.svcgssd.

 nfs-utils is also a package of issue.

Neither working nor non-working machines have any mount-utils package
installed. 

On the other hand, rpc.gssd and rpc.svcgssd are both included in
nfs-utils which both a working and a non-working client are running the
same version of (nfs-utils-1.0.9-47.el5_5).

Hans


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Adding SAMBA users in Centos 5.5

2010-10-22 Thread Peter Crighton
I have SAMBA working on Centos 5.5 - I can see and access my home
directory from a Windows machine.

I have created a new folder to share, changed the owner and group to
my username and chcon -t samba_share_t to allow SELinux to share the
folder. I can see this folder from Windows but not access it's
contents.

I think that the key reason is that there is no user assigned to the
new share that I have created in SAMBA.

I don't seem to be able add users/passwords (at least they don't stay
present! In the SAMBA section of Control Panel I have selected my
username from the Unix users and added it to SAMBA users with the same
password as the Windows machine (and as it happens the Centos
machine). Click Apply and OK. When I re-load the SAMBA section of
Control Panel my user has disappeared!

This didn't happen when I setup a Centos 4.4 machine - all the users
are still visible in Control Panel.

Without the user available I can't assign it to my new share. Why is
my added user disappearing and how can I solve it?

(I presume that I can access my home share as it is automatically by
the username from Windows).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Getting Wake on lan to work

2010-10-22 Thread Peter Crighton
On Wed, 20 Oct 2010 14:38:43 -0400, you wrote:

On 10/20/2010 02:13 PM, cen...@crighton.me.uk wrote:
 On Wed, 20 Oct 2010 14:04:51 -0400, you wrote:



 To get mine to work under fedora I had to run ethtool and turn on the
 wol option.
 Also it seemed to get reset after used wol to start it up so in my
 rc.local I put
 /sbin/ethtool -s eth1 wol g
 /sbin/ethtool -s eth0 wol g
  
 ethtool -s eth0 wol g results in a message Cannot get current
 wake-on-lan settings: Operation not supported even though both the
 motherboard and NIC do support WOL.


Hmm...

[r...@centostest ~]# ethtool eth0
Settings for eth0:
snip

This is the same output from my system:

[r...@backup ~]# ethtool eth0
Settings for eth0:
Supported ports: [ TP MII ]
Supported link modes:   10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
Supports auto-negotiation: Yes
Advertised link modes:  10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
Advertised auto-negotiation: Yes
Speed: 100Mb/s
Duplex: Full
Port: MII
PHYAD: 24
Transceiver: internal
Auto-negotiation: on
Current message level: 0x0001 (1)
Link detected: yes
[r...@backup ~]# ethtool -s eth0 wol g
Cannot get current wake-on-lan settings: Operation not supported
  not setting wol
[r...@backup ~]# uname -a
Linux backup 2.6.18-194.17.1.el5 #1 SMP Wed Sep 29 12:51:33 EDT 2010
i686 i686 i386 GNU/Linux
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: looking for network performance comparison chart

2010-10-22 Thread Simon Billis
Hi Rudi,

 Does anyone have, or know of a comparison chart of the different
 network adapters, i.e. 1GB  / 10GB, Infiniband, etc. And if possible
 with a few top brand NIC's and switches listed as well.
 
 I would like to see, for example, what the max throughput is of a 1GB
 NIC (and this could probably differ from PCI to PCIE-x1 to PCIE-x4),
 and 10GBE. Different switches would probably also have different
 ratings, but could a layer 2 switch  layer3 switch deliver the same
 performance for example?
 
 Basically I need to know what upload / download speeds I should be
 getting from the different networks, set aside other options like CPU
 / RAM / disc IO / etc.

If you exclude the host capability to deliver data to the interface and also
the ability of the host to assemble and disassemble packets, then the speeds
will be dependent on the switches capability to handle the packet size and
numbers of packets arriving at an interface in a specific time period. You
should expect wirespeeds (minus the overhead of the Ethernet frame and the
IP frame) for most switches with usual packet sizes (below 1500 bytes) i.e.
the usual (if there is such a thing) packet size, provided that you're not
flooding the interfaces with very small packets and your switch is set to
store and forward. If your switch is able to cut and forward which is a must
for jumbo frames to be handled quickly, then you can also expect close to
wirespeeds for any frame size. Cut and forward switches are expensive but
are a must for storage networks if you're interested in low latency
switching.

Layer 3 switching is basically routing done on a switch and therefore
increases the latency slightly to a lot as the switch has to decode the
layer 3 information and make a decision based on that as opposed to the
outer layer 2 information.

Due to the many factors affecting network speeds, most switch manufacturers
specify the switch capability/capacity in backplane bandwidth, maximum
packet numbers switched per second and memory available for store and
forward. As soon as one of these limits is breached then the performance
will take a hit and this hit can be a big one.

I'm sorry that I can't be more helpful and provide you with what you're
after, but I hope that this has answered some questions for you.

Rgds

Simon.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Mount/automount fails with krb5-enabled nfs4

2010-10-22 Thread Hans Persson
tor 2010-10-21 klockan 10:34 -0700 skrev James A. Peltier:

 - Original Message -
[...]
 Please post a copy of your /etc/* files listed above so that we might
 be able to look to make sure everything is correct.  You may want to
 look at ensuring that
 
 SECURE_NFS=yes
 RPCGSSDARGS=-vvv
 RPCSVCGSSDARGS=-vvv
 
 is uncommented in /etc/sysconfig/nfs

Only the first line was uncommented previously. With all three, I get
this in /var/log/messages:

 Oct 22 09:45:46 pc13287 kernel: FS-Cache: Loaded
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: handling krb5 upcall 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: Using keytab file
 '/etc/krb5.keytab' 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: INFO: Credentials in CC 
 'MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE' are good until 1287817962 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: using 
 MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE as credentials cache for 
 machine creds 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: using environment variable to 
 select krb5 ccache MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: creating context using fsuid 
 0 (save_uid 0) 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: creating tcp client for
 server triangulum.ifm.liu.se 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: creating context with server 
 n...@triangulum.ifm.liu.se 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: rpcsec_gss: 
 gss_init_sec_context: (major) Unspecified GSS failure.  Minor 
 code may provide more information - (minor) Unknown code krb5 60 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: WARNING: Failed to create 
 krb5 context for user with uid 0 for server triangulum.ifm.liu.se 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: WARNING: Failed to create 
 krb5 context for user with uid 0 with credentials cache 
 MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE for server
 triangulum.ifm.liu.se 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: WARNING: Failed to create 
 krb5 context for user with uid 0 with any credentials cache for
 server triangulum.ifm.liu.se 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: doing error downcall 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: destroying client clnt1 
 Oct 22 09:45:46 pc13287 rpc.gssd[2609]: destroying client clnt0 

I started tail -f on the log and then ran ssh h...@pc13287 in another
window. All the above appeared immediately, before I had entered any
password (and nothing was logged after entering the password).

 There might be others missing but we would be able to help best if we
 know the contents of these files

# grep -v '^#' /etc/sysconfig/nfs
SECURE_NFS=yes
RPCGSSDARGS=-vvv
RPCSVCGSSDARGS=-vvv


# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1   localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
130.236.170.165 pc13287
130.236.160.4   loghost.ifm.liu.se  loghost


# cat /etc/idmapd.conf
[General]

Verbosity = 0
Pipefs-Directory = /var/lib/nfs/rpc_pipefs
Domain = ifm.liu.se

[Mapping]

Nobody-User = nobody
Nobody-Group = nobody

[Translation]
Method = nsswitch


# cat /etc/krb5.conf
[libdefaults]
default_realm = IFM.LIU.SE
default_tgs_enctypes = des-cbc-md5
default_tkt_enctypes = des-cbc-md5
#   udp_preference_limit = 0
dns_lookup_realm = false
dns_lookup_kdc = false
allow_weak_crypto = true

[realms]
IFM.LIU.SE = {
kdc = as-slave-1.ifm.liu.se
kdc = as-slave-2.ifm.liu.se
kdc = as-master.ifm.liu.se
admin_server = as-master.ifm.liu.se
}
[... other realms deleted ...]

[domain_realm]
.edu.isy.liu.se = STUDENT.LIU.SE
.edu.ifm.liu.se = STUDENT.LIU.SE
.edu.mai.liu.se = STUDENT.LIU.SE
.ad.ifm.liu.se = AD.IFM.LIU.SE
ifm.liu.se = IFM.LIU.SE
.ifm.liu.se = IFM.LIU.SE
isy.liu.se = ISY.LIU.SE
.isy.liu.se = ISY.LIU.SE
lysator.liu.se = LYSATOR.LIU.SE
.lysator.liu.se = LYSATOR.LIU.SE
.liu.se = AD.LIU.SE

[logging]
default = FILE:/var/krb5/kdc.log
kdc = FILE:/var/krb5/kdc.log
kdc_rotate = {
period = 1d
versions = 10
}

[appdefaults]
kinit = {
renewable = true
forwardable= true
}
gkadmin = {
help_url =
http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageView/1195
}


# cat /etc/host.conf 
order hosts,bind


# grep -v '^#' /etc/nsswitch.conf
passwd: files nis
shadow: files nis
group:  files nis
hosts:  files nis dns
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks:   files
networks:   files
protocols:  files
rpc:files
services:   files
netgroup:   files nis
publickey:  nisplus
automount:  files nis
aliases:files nisplus


# cat /etc/resolv.conf
; generated by 

Re: [CentOS] temp dir, httpd and selinux

2010-10-22 Thread Ned Slider
On 21/10/10 11:57, admin lewis wrote:
 Hi,
 I have a php software installed on a centos server with selinux
 enforced activeted.
 The php software (glpi --  http://www.glpi-project.org) have a plugin
 that must write on a temp dir... but selinux dont give access to that
 dir to write.
 How should i do ?
 lewis


Take a look at the Troubleshooting section of the SELinux guide on the 
Wiki:

http://wiki.centos.org/HowTos/SELinux#head-02c04b0b030dd3c3d58bb7acbbcff033505dd3af

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Howto align partitions in Linux + NetApp

2010-10-22 Thread Santi Saez
Hi,

NetApp support has suggested us aligning partitions to improve 
performance, in short: starting sector must be divisible by 8. How can I 
move the start point in a misaligned partition -in production, with 
ext3- under Linux?

A screenshot with a misaligned (start=63s) and aligned (start=64s) 
partition is available at:

http://filesocial.com/lkwvvn2

(If anyone is interested in this topic, NetApp has a good document 
explaining performance issues in misaligned partitions: Best Practices 
for File System Alignment in Virtual Environments, http://goo.gl/EkBw)

I have tried using parted resize + move commands, but when moving 
start point a get this error:

   (parted) resize
   Partition number? 1
   Start?  [64s]?
   End?  [419425019s]? 419425018
   (parted) move
   Partition number? 1
   Start? 65
   End?  [419425019s]? 419425019
   Error: Can't move a partition onto itself.  Try using resize, perhaps?

Using fdisk 'b' command in expert mode ('move beginning of data in a 
partition') works, but it doesn't move the file system.. thanks!!

Regards,

-- 
Santi Saez
http://woop.es
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Adding SAMBA users in Centos 5.5

2010-10-22 Thread James Bensley
Dump you smb.conf here, what would probably be easier to resolve :)


-- 
Regards,
James.

http://www.jamesbensley.co.cc/

There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Howto align partitions in Linux + NetApp

2010-10-22 Thread Brian Mathis
AFAIK, you cannot do what you are trying to do.  The point of file
system alignment is to lay down the tracks on the entire disk so they
align with the sector boundaries of the underlying device.  Once
everything is laid down and you have installed OS and written data,
all of those blocks are already misaligned.  You cannot move them
unless you do a complete system backup, reformat, then restore the
backup.

You might be able to fudge it by shrinking the partition down, then
moving it to the end of the disk, then moving it again, this time to
an aligned section of the disk.  I can't imagine how long that would
take, and is probably risky on a production system.  To try this you
would probably need at least half of the disk unused.

Unless you expect to see serious performance increases from this, it's
not worth it.  Chalk it up to learning and use that knowledge on your
next installs.  You should test out the process and performance gains
on a development system first.


On Fri, Oct 22, 2010 at 7:00 AM, Santi Saez santis...@woop.es wrote:
 Hi,

 NetApp support has suggested us aligning partitions to improve
 performance, in short: starting sector must be divisible by 8. How can I
 move the start point in a misaligned partition -in production, with
 ext3- under Linux?

 A screenshot with a misaligned (start=63s) and aligned (start=64s)
 partition is available at:

        http://filesocial.com/lkwvvn2

 (If anyone is interested in this topic, NetApp has a good document
 explaining performance issues in misaligned partitions: Best Practices
 for File System Alignment in Virtual Environments, http://goo.gl/EkBw)

 I have tried using parted resize + move commands, but when moving
 start point a get this error:

   (parted) resize
   Partition number? 1
   Start?  [64s]?
   End?  [419425019s]? 419425018
   (parted) move
   Partition number? 1
   Start? 65
   End?  [419425019s]? 419425019
   Error: Can't move a partition onto itself.  Try using resize, perhaps?

 Using fdisk 'b' command in expert mode ('move beginning of data in a
 partition') works, but it doesn't move the file system.. thanks!!

 Regards,

 --
 Santi Saez
 http://woop.es
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: looking for network performance comparison chart

2010-10-22 Thread Rudi Ahlers
On Fri, Oct 22, 2010 at 10:33 AM, Simon Billis si...@houxou.com wrote:
 Hi Rudi,

 Does anyone have, or know of a comparison chart of the different
 network adapters, i.e. 1GB  / 10GB, Infiniband, etc. And if possible
 with a few top brand NIC's and switches listed as well.

 I would like to see, for example, what the max throughput is of a 1GB
 NIC (and this could probably differ from PCI to PCIE-x1 to PCIE-x4),
 and 10GBE. Different switches would probably also have different
 ratings, but could a layer 2 switch  layer3 switch deliver the same
 performance for example?

 Basically I need to know what upload / download speeds I should be
 getting from the different networks, set aside other options like CPU
 / RAM / disc IO / etc.

 If you exclude the host capability to deliver data to the interface and also
 the ability of the host to assemble and disassemble packets, then the speeds
 will be dependent on the switches capability to handle the packet size and
 numbers of packets arriving at an interface in a specific time period. You
 should expect wirespeeds (minus the overhead of the Ethernet frame and the
 IP frame) for most switches with usual packet sizes (below 1500 bytes) i.e.
 the usual (if there is such a thing) packet size, provided that you're not
 flooding the interfaces with very small packets and your switch is set to
 store and forward. If your switch is able to cut and forward which is a must
 for jumbo frames to be handled quickly, then you can also expect close to
 wirespeeds for any frame size. Cut and forward switches are expensive but
 are a must for storage networks if you're interested in low latency
 switching.

 Layer 3 switching is basically routing done on a switch and therefore
 increases the latency slightly to a lot as the switch has to decode the
 layer 3 information and make a decision based on that as opposed to the
 outer layer 2 information.

 Due to the many factors affecting network speeds, most switch manufacturers
 specify the switch capability/capacity in backplane bandwidth, maximum
 packet numbers switched per second and memory available for store and
 forward. As soon as one of these limits is breached then the performance
 will take a hit and this hit can be a big one.

 I'm sorry that I can't be more helpful and provide you with what you're
 after, but I hope that this has answered some questions for you.

 Rgds

 Simon.



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


Thanx Simon, this was rather useful.

So, if I have a layer2  layer3 switch at my disposal then I won't
really notice much differences between them, right? The one SMC switch
I have at the office can handle 200MB/s, according to the spec sheet.
But, can a normal 1GB NIC handle the same throughput?

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] black display during installation of CentOS5.5

2010-10-22 Thread John Hinton

On 10/22/2010 1:31 AM, Ritika Garg wrote:
I havent't tried nofb. If I write linux nofb at boot:, then will the 
innstallation take place in text mode or graphical mode?



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

It will still run in graphical mode.

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] POP3 server

2010-10-22 Thread Ben McGinnes
On 22/10/10 3:10 AM, David wrote:
 I was hoping Dovecot could be not so RFC compliant in this matter. Anyway if 
 gets the DELE command the message arrived safely to the client.
 
 Any other POP3 server not so RFC compliant?
 
 Thanks for the answer.

Breaking RFCs to get the functions you want is a *bad* idea.  What
happens if you get hit by a bus and someone else has to deal with the
issue, sees that the config is broken and fixes it.

You're much better off using a protocol which supports an immediate
delete from the server, like IMAP.  Unless, of course, the issue is with
a lack of disk space on the server.


Regards,
Ben



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] POP3 server

2010-10-22 Thread Adam Tauno Williams
On Sat, 2010-10-23 at 01:32 +1100, Ben McGinnes wrote: 
 On 22/10/10 3:10 AM, David wrote:
  I was hoping Dovecot could be not so RFC compliant in this matter. Anyway 
  if 
  gets the DELE command the message arrived safely to the client.

The feature you want would result in inconsistencies in some cases;
nothing is going to implement that behavior.

  Any other POP3 server not so RFC compliant?
  Thanks for the answer.
 Breaking RFCs to get the functions you want is a *bad* idea.  What
 happens if you get hit by a bus and someone else has to deal with the
 issue, sees that the config is broken and fixes it.
 You're much better off using a protocol which supports an immediate
 delete from the server, like IMAP.  Unless, of course, the issue is with
 a lack of disk space on the server.

-- 
Adam Tauno Williams awill...@whitemice.org LPIC-1, Novell CLA
http://www.whitemiceconsulting.com
OpenGroupware, Cyrus IMAPd, Postfix, OpenLDAP, Samba

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 68, Issue 11

2010-10-22 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than Re: Contents of CentOS-announce digest...


Today's Topics:

   1. CESA-2010:0788 Moderate CentOS 5 i386 pidgin  Update
  (Karanbir Singh)
   2. CESA-2010:0788 Moderate CentOS 5 x86_64 pidginUpdate
  (Karanbir Singh)
   3. CEBA-2010:0789 CentOS 5 x86_64 libbonobo Update (Karanbir Singh)
   4. CEBA-2010:0789  CentOS 5 i386 libbonobo Update (Karanbir Singh)


--

Message: 1
Date: Thu, 21 Oct 2010 22:51:36 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CESA-2010:0788 Moderate CentOS 5 i386
pidgin  Update
To: centos-annou...@centos.org
Message-ID: 20101021225136.ga17...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2010:0788 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0788.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
6228eae54c2cda4f9b1d9745acbd3ca9  finch-2.6.6-5.el5_5.i386.rpm
5484179163bc96b389c3b7809edb062e  finch-devel-2.6.6-5.el5_5.i386.rpm
067cf1b58841fe642d27c1ed3d9b9ebc  libpurple-2.6.6-5.el5_5.i386.rpm
f7270d9f7773b6700437cefca79569cd  libpurple-devel-2.6.6-5.el5_5.i386.rpm
464cd34a3a227211c27c99d9f54784eb  libpurple-perl-2.6.6-5.el5_5.i386.rpm
e63fea4e7883694592d925374cc4787b  libpurple-tcl-2.6.6-5.el5_5.i386.rpm
4dc54502461973c33eef50df7b1982eb  pidgin-2.6.6-5.el5_5.i386.rpm
c8d56f9b63d110a6cc98effab7ec8d26  pidgin-devel-2.6.6-5.el5_5.i386.rpm
328586eb986b99664f52273878398b37  pidgin-perl-2.6.6-5.el5_5.i386.rpm

Source:
bf281d91c9b425b8696544eaa2158f69  pidgin-2.6.6-5.el5_5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 2
Date: Thu, 21 Oct 2010 22:51:36 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CESA-2010:0788 Moderate CentOS 5 x86_64
pidgin  Update
To: centos-annou...@centos.org
Message-ID: 20101021225136.ga17...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2010:0788 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0788.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
88dc4a374446f5d5b2e0dd379f6e7922  finch-2.6.6-5.el5_5.i386.rpm
1e067757f0e37ff0b8660818cd6479c4  finch-2.6.6-5.el5_5.x86_64.rpm
1e6b9147e3b7742dca61940c0e48d35e  finch-devel-2.6.6-5.el5_5.i386.rpm
b24fcec1cba7972854bd8203fcd2df32  finch-devel-2.6.6-5.el5_5.x86_64.rpm
199742a356910080f727d0ec92fc65b0  libpurple-2.6.6-5.el5_5.i386.rpm
324e27530467d20282f9b784e2e31a6d  libpurple-2.6.6-5.el5_5.x86_64.rpm
b153ac1e92c757749210ec40ef5f26b8  libpurple-devel-2.6.6-5.el5_5.i386.rpm
4068d9cd61e1d0c75d82d7a217f64a40  libpurple-devel-2.6.6-5.el5_5.x86_64.rpm
124267f24e6bcfbedacea24d816915b4  libpurple-perl-2.6.6-5.el5_5.x86_64.rpm
17179af643eb8fd87d76c9f3ad1ac3d2  libpurple-tcl-2.6.6-5.el5_5.x86_64.rpm
3555fae71740507054e9ab61404072e9  pidgin-2.6.6-5.el5_5.i386.rpm
95fe6c56a2cfaabf3bb09523a6bb5043  pidgin-2.6.6-5.el5_5.x86_64.rpm
c2c1208abd825352321a76cc9318db9f  pidgin-devel-2.6.6-5.el5_5.i386.rpm
ab0a47e361fb71f87fa5fe77c2867ed1  pidgin-devel-2.6.6-5.el5_5.x86_64.rpm
e77902ff001a547f7ec6e2ddfda4add0  pidgin-perl-2.6.6-5.el5_5.x86_64.rpm

Source:
bf281d91c9b425b8696544eaa2158f69  pidgin-2.6.6-5.el5_5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 3
Date: Fri, 22 Oct 2010 15:29:55 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CEBA-2010:0789 CentOS 5 x86_64 libbonobo
Update
To: centos-annou...@centos.org
Message-ID: 20101022152955.ga9...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2010:0789 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0789.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
abddf3035d2c1f07ddc7785d1181e44d  libbonobo-2.16.0-1.1.el5_5.1.i386.rpm
c592d7204f1c2b32cc8ca5a7753cf003  libbonobo-2.16.0-1.1.el5_5.1.x86_64.rpm
cc4e8d70849a7827381590c797f97c89  libbonobo-devel-2.16.0-1.1.el5_5.1.i386.rpm
944748134f356dc0b9b144c644ac658e  libbonobo-devel-2.16.0-1.1.el5_5.1.x86_64.rpm

Source:
ac33719f8498d8ba541c5b2915677ecc  

Re: [CentOS] OT: looking for network performance comparison chart

2010-10-22 Thread Peter Kjellstrom
On Friday 22 October 2010, Rudi Ahlers wrote:
 Hi all,

 Does anyone have, or know of a comparison chart of the different
 network adapters, i.e. 1GB  / 10GB, Infiniband, etc. And if possible
 with a few top brand NIC's and switches listed as well.

Iperf(tcp)
Good 1G eth: 945 Mbps
Good 10G eth(w/o tcp tuning): 6-7 Gbps
Same 10G with some tcp tuning): 9.4 Gbps

Infiniband(MPI or raw verbs):
SDR: 980 MB/s
DDR: 1900 MB/s
QDR: 3700 MB/s

I don't have numbers for IPoIB (tcp on Infiniband) since we dont use that 
much.

 I would like to see, for example, what the max throughput is of a 1GB
 NIC (and this could probably differ from PCI to PCIE-x1 to PCIE-x4),
 and 10GBE. Different switches would probably also have different
 ratings,

Most or all switches I've used the last few year can take wirespeed 1G eth on 
atleast a few ports concurrently. For 10G eth I don't know much more than 
that our procurve, cisco and bladenetworks equipment can do wire speed 
(atleast on a few ports concurrently).

Infiniband swtiches are typically very good at delivering bandwidth (as long 
as you avoid congestion).

 but could a layer 2 switch  layer3 switch deliver the same 
 performance for example?

As previously stated by another poster, layer3 is only features, says nothing 
about performance (although features tend to cost you..).

 Basically I need to know what upload / download speeds I should be
 getting from the different networks, set aside other options like CPU
 / RAM / disc IO / etc.

All of my figures above assumes good hardware. If you want to push 10G or 
more you'll need PCI-express gen2 and a modern CPU/memory.

/Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] black display during installation of CentOS5.5

2010-10-22 Thread Ritika Garg
I tried linux nofb and linux xdriver=VESA but the problem persists.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ssh with shared home dir

2010-10-22 Thread Tim Dunphy
hey listers!

silly quesion: if I generate an RSA key on an NFS shared home
directory, then cat  it into the .ssh/authorized_keys file in the
same location, shouldn't I then be able to ssh into each host that
shares the NFS home directory without entering a passphrase (assuming
the key doesn't have one)? and assuming the permissions on the
authorized_keys file belong to the user with mode 600?

thanks!
tim

-- 
Here's my RSA Public key:
gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9

Share and enjoy!!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Gordon Messmer
On 10/22/2010 11:38 AM, Tim Dunphy wrote:
 silly quesion: if I generate an RSA key on an NFS shared home
 directory, then cat  it into the .ssh/authorized_keys file in the
 same location, shouldn't I then be able to ssh into each host that
 shares the NFS home directory without entering a passphrase (assuming
 the key doesn't have one)? and assuming the permissions on the
 authorized_keys file belong to the user with mode 600?

The permissions on the .ssh directory must also be correct.  Otherwise, yes.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS 5.5 hangs on Acer Veriton X498G

2010-10-22 Thread Paul Ortega
I have installed CentOS 5.5 (2.6.18-194.17.1.el5PAE) on a number of Acer 
Veriton X498G desktop computers.  They seem to randomly hang when nobody 
is logged in at the console, i.e. I notice a hanged computer but have 
not heard complaints about computers hanging while a user was at the 
keyboard.

The symptoms are:
Blank screen.
Power LED on.
Network LED blinking.
No response to keyboard or mouse.
No response to ping.
Arp request from computer on same subnet gets incomplete for MAC 
address.
Cannot ssh into computer, no route to host error message.

The power management BIOS settings are set to default:
ACPI aware OS   yes
ACPI suspend mode   S3
Deep power off mode enabled
Power on RTC alarm  disabled
Power on PCIE devices   enabled
Power on modem ring enabled

lspci:
00:00.0 Host bridge: Intel Corporation Core Processor DRAM Controller 
(rev 12)
00:02.0 VGA compatible controller: Intel Corporation Core Processor 
Integrated Graphics Controller (rev 12)
00:16.0 Communication controller: Intel Corporation 5 Series/3400 Series 
Chipset HECI Controller (rev 06)
00:16.2 IDE interface: Intel Corporation 5 Series/3400 Series Chipset PT 
IDER Controller (rev 06)
00:16.3 Serial controller: Intel Corporation 5 Series/3400 Series 
Chipset KT Controller (rev 06)
00:19.0 Ethernet controller: Intel Corporation 82578DC Gigabit Network 
Connection (rev 06)
00:1a.0 USB Controller: Intel Corporation 5 Series/3400 Series Chipset 
USB2 Enhanced Host Controller (rev 06)
00:1b.0 Audio device: Intel Corporation 5 Series/3400 Series Chipset 
High Definition Audio (rev 06)
00:1d.0 USB Controller: Intel Corporation 5 Series/3400 Series Chipset 
USB2 Enhanced Host Controller (rev 06)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a6)
00:1f.0 ISA bridge: Intel Corporation 5 Series Chipset LPC Interface 
Controller (rev 06)
00:1f.2 SATA controller: Intel Corporation 5 Series/3400 Series Chipset 
6 port SATA AHCI Controller (rev 06)
00:1f.3 SMBus: Intel Corporation 5 Series/3400 Series Chipset SMBus 
Controller (rev 06)

Has anyone else seen similar?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Tim Dunphy
hmm.. ok then gordon thanks for the input! how do these permissions grab ya?


[bluethu...@lcent01 ~]$ ls -alh | grep .ssh
-rw---   1 bluethundr summitnjops70 Oct 17 14:04 .lesshst
drwx--   2 bluethundr summitnjops   512 Oct 22 14:06 .ssh


[bluethu...@lcent01 ~]$ ls -lah .ssh
total 34K
drwx--   2 bluethundr summitnjops  512 Oct 22 14:06 .
drwx-- 106 bluethundr summitnjops 5.5K Oct 22 14:44 ..
-rw---   1 bluethundr summitnjops  820 Oct 22 14:19 authorized_keys
-rw---   1 bluethundr summitnjops 1.7K Oct 22 14:18 id_rsa
-rw-r--r--   1 bluethundr summitnjops  403 Oct 22 14:18 id_rsa.pub
-rw-r--r--   1 bluethundr summitnjops  20K Oct 22 14:47 known_hosts
[bluethu...@lcent01 ~]$


as is stands, currently, still not working!

this is what it looks like when I ssh to another host that shares this
home directory (and .ssh dir) as the one I am ssh'ing from.

[bluethu...@lcent01 ~]$ ssh virt1
bluethu...@virt1's password:

I've posted a -vvv version of the ssh session in an attachment.

thanks!

tim

On Fri, Oct 22, 2010 at 3:14 PM, Gordon Messmer yiny...@eburg.com wrote:
 On 10/22/2010 11:38 AM, Tim Dunphy wrote:
 silly quesion: if I generate an RSA key on an NFS shared home
 directory, then cat  it into the .ssh/authorized_keys file in the
 same location, shouldn't I then be able to ssh into each host that
 shares the NFS home directory without entering a passphrase (assuming
 the key doesn't have one)? and assuming the permissions on the
 authorized_keys file belong to the user with mode 600?

 The permissions on the .ssh directory must also be correct.  Otherwise, yes.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos




-- 
Here's my RSA Public key:
gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9

Share and enjoy!!
[bluethu...@lcent01 ~]$ ssh virt1
bluethu...@virt1's password: 

[bluethu...@lcent01 ~]$ ssh -vvv virt1
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to virt1 [192.168.1.23] port 22.
debug1: Connection established.
debug1: identity file /home/bluethundr/.ssh/identity type -1
debug3: Not a RSA1 key file /home/bluethundr/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-END'
debug3: key_read: missing keytype
debug1: identity file /home/bluethundr/.ssh/id_rsa type 1
debug1: identity file /home/bluethundr/.ssh/id_dsa type -1
debug1: loaded 3 keys
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
debug1: match: OpenSSH_4.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug2: fd 4 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-...@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-...@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,z...@openssh.com,zlib
debug2: kex_parse_kexinit: none,z...@openssh.com,zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: kex_parse_kexinit: 

Re: [CentOS] ssh with shared home dir

2010-10-22 Thread JohnS

On Fri, 2010-10-22 at 15:30 -0400, Tim Dunphy wrote
 
  The permissions on the .ssh directory must also be correct.  Otherwise, yes.
---
chmod 755 ~/.ssh

chmod 644 ~/.ssh/authorized_keys

John

drwxr-xr-x  2 ethan ethan4096 Oct 10 17:16 .ssh
-rw-r--r--  1 ethan ethan  396 Oct 10 17:16 authorized_keys

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS 5.5 hangs on Acer Veriton X498G

2010-10-22 Thread R P Herrold
On Fri, 22 Oct 2010, Paul Ortega wrote:

 I have installed CentOS 5.5 (2.6.18-194.17.1.el5PAE) on a number of Acer
 Veriton X498G desktop computers.  They seem to randomly hang when nobody
 is logged in at the console, i.e. I notice a hanged computer but have
 not heard complaints about computers hanging while a user was at the
 keyboard.

 The symptoms are:
   Blank screen.
   Power LED on.
   Network LED blinking.
   No response to keyboard or mouse.
   No response to ping.
   Arp request from computer on same subnet gets incomplete for MAC 
 address.
   Cannot ssh into computer, no route to host error message.

This is all consistent with a non-listening NIC and a unit in 
profound hibernation, if not affirmative shutdown [NIC lights 
will be powered on and blink by stray ARP broadcast packets 
moving across a lan, even on switched fabric]

 Has anyone else seen similar?

as above ... I

  would set up remote syslogging from the unit under test, and 
see exercise (through keyed ssh access) that unit under test 
on a scripted basis, to see if it dies off if left alone, or 
if other clues appear in that remote syslog

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Todd Denniston
Tim Dunphy wrote, On 10/22/2010 03:30 PM:
 hmm.. ok then gordon thanks for the input! how do these permissions grab ya?
 
 
 [bluethu...@lcent01 ~]$ ls -alh | grep .ssh
 -rw---   1 bluethundr summitnjops70 Oct 17 14:04 .lesshst
 drwx--   2 bluethundr summitnjops   512 Oct 22 14:06 .ssh
 
 
 [bluethu...@lcent01 ~]$ ls -lah .ssh
 total 34K
 drwx--   2 bluethundr summitnjops  512 Oct 22 14:06 .
 drwx-- 106 bluethundr summitnjops 5.5K Oct 22 14:44 ..
 -rw---   1 bluethundr summitnjops  820 Oct 22 14:19 authorized_keys
 -rw---   1 bluethundr summitnjops 1.7K Oct 22 14:18 id_rsa
 -rw-r--r--   1 bluethundr summitnjops  403 Oct 22 14:18 id_rsa.pub
 -rw-r--r--   1 bluethundr summitnjops  20K Oct 22 14:47 known_hosts
 [bluethu...@lcent01 ~]$
 
 

An experiment for you...

Assumptions:
1) NFS v3
2) on the NFS server the file system is named '/exportedfilesytem'
3) have root on both machines
4) on the NFS client the file system is mounted such that it contains 
bluethundr's home directory
5) root_squash is in play

On the NFS server
MYNFSFS=/exportedfilesytem
grep $MYNFSFS /etc/exports
grep $MYNFSFS /etc/exports | grep -v no_root_squash
#if you get a line back then root on the client machine is being squashed.
man exports #search down for root_squash

On the NFS client (virt1)

login as root

cd ~bluethundr/.ssh/
#you may have just gotten an error.
ls -lah ~bluethundr/.ssh/*
#you may have just gotten an error.
cat ~bluethundr/.ssh/authorized_keys
#you _have_ just gotten an error, and this is the one that stops you IIRC.


Suggestions:
1) Consider tightening up perms on id_rsa.pub  known_hosts
2) Open up the _read_ perms on authorized_keys
3a) IIRC you _may_ also have to open up the _read_ perms on ~/.ssh
3b) IIRC you _may_ also have to open up the exec perms on ~/.ssh
If you have to do one of 3a or 3b, try each individually and only give as much 
as you have to.

-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Brian Mathis
On Fri, Oct 22, 2010 at 3:53 PM, JohnS jse...@gmail.com wrote:

 On Fri, 2010-10-22 at 15:30 -0400, Tim Dunphy wrote
 
  The permissions on the .ssh directory must also be correct.  Otherwise, 
  yes.
 ---
 chmod 755 ~/.ssh

 chmod 644 ~/.ssh/authorized_keys

 John

 drwxr-xr-x  2 ethan ethan    4096 Oct 10 17:16 .ssh
 -rw-r--r--  1 ethan ethan  396 Oct 10 17:16 authorized_keys


No, that's the opposite of what you want.  If that works for you then
your sysadmin has disabled StrictModes and it may leave you open to
some security issues.

Directory should be 700.  File should be 600.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] dual external monitors via an NVIDIA laptop?

2010-10-22 Thread Kevin Kempter
Hi All;

I have a Dell M6400 with an NVIDIA Quadr FX 3700M card. Is there any way 
for me to setup 2 external monitors as opposed to one external monitor 
and the laptop screen?




Thanks in advance

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Tim Dunphy
guys awesome advice!! I will try your suggestions sometime tonight, I
am backing up the virtual network at the moment and it is therefore
shutdown until the backup is done.

thanks !!
tim

On Fri, Oct 22, 2010 at 4:08 PM, Todd Denniston
todd.dennis...@tsb.cranrdte.navy.mil wrote:
 Tim Dunphy wrote, On 10/22/2010 03:30 PM:
 hmm.. ok then gordon thanks for the input! how do these permissions grab ya?


 [bluethu...@lcent01 ~]$ ls -alh | grep .ssh
 -rw---   1 bluethundr summitnjops    70 Oct 17 14:04 .lesshst
 drwx--   2 bluethundr summitnjops   512 Oct 22 14:06 .ssh


 [bluethu...@lcent01 ~]$ ls -lah .ssh
 total 34K
 drwx--   2 bluethundr summitnjops  512 Oct 22 14:06 .
 drwx-- 106 bluethundr summitnjops 5.5K Oct 22 14:44 ..
 -rw---   1 bluethundr summitnjops  820 Oct 22 14:19 authorized_keys
 -rw---   1 bluethundr summitnjops 1.7K Oct 22 14:18 id_rsa
 -rw-r--r--   1 bluethundr summitnjops  403 Oct 22 14:18 id_rsa.pub
 -rw-r--r--   1 bluethundr summitnjops  20K Oct 22 14:47 known_hosts
 [bluethu...@lcent01 ~]$



 An experiment for you...

 Assumptions:
 1) NFS v3
 2) on the NFS server the file system is named '/exportedfilesytem'
 3) have root on both machines
 4) on the NFS client the file system is mounted such that it contains 
 bluethundr's home directory
 5) root_squash is in play

 On the NFS server
 MYNFSFS=/exportedfilesytem
 grep $MYNFSFS /etc/exports
 grep $MYNFSFS /etc/exports | grep -v no_root_squash
 #if you get a line back then root on the client machine is being squashed.
 man exports #search down for root_squash

 On the NFS client (virt1)
 
 login as root
 
 cd ~bluethundr/.ssh/
 #you may have just gotten an error.
 ls -lah ~bluethundr/.ssh/*
 #you may have just gotten an error.
 cat ~bluethundr/.ssh/authorized_keys
 #you _have_ just gotten an error, and this is the one that stops you IIRC.


 Suggestions:
 1) Consider tightening up perms on id_rsa.pub  known_hosts
 2) Open up the _read_ perms on authorized_keys
 3a) IIRC you _may_ also have to open up the _read_ perms on ~/.ssh
 3b) IIRC you _may_ also have to open up the exec perms on ~/.ssh
 If you have to do one of 3a or 3b, try each individually and only give as 
 much as you have to.

 --
 Todd Denniston
 Crane Division, Naval Surface Warfare Center (NSWC Crane)
 Harnessing the Power of Technology for the Warfighter
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos




-- 
Here's my RSA Public key:
gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9

Share and enjoy!!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread JohnS

On Fri, 2010-10-22 at 16:25 -0400, Brian Mathis wrote:
 On Fri, Oct 22, 2010 at 3:53 PM, JohnS jse...@gmail.com wrote:
 
  On Fri, 2010-10-22 at 15:30 -0400, Tim Dunphy wrote
  
   The permissions on the .ssh directory must also be correct.  Otherwise, 
   yes.
  ---
  chmod 755 ~/.ssh
 
  chmod 644 ~/.ssh/authorized_keys
 
  John
 
  drwxr-xr-x  2 ethan ethan4096 Oct 10 17:16 .ssh
  -rw-r--r--  1 ethan ethan  396 Oct 10 17:16 authorized_keys
 
 
 No, that's the opposite of what you want.  If that works for you then
 your sysadmin has disabled StrictModes and it may leave you open to
 some security issues.
 
 Directory should be 700.  File should be 600.

Thats's is so damn funny tell Red Hat not me :-)

1. It is default that is a WORK for ALL...

hn

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dual external monitors via an NVIDIA laptop?

2010-10-22 Thread Nataraj
Kevin Kempter wrote:
 Hi All;

 I have a Dell M6400 with an NVIDIA Quadr FX 3700M card. Is there any way 
 for me to setup 2 external monitors as opposed to one external monitor 
 and the laptop screen?




 Thanks in advance

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
   
I know that it has been done with the M6500.  I think it's dependant on 
the graphics card and I'm pretty sure the FX 3700M will handle it.  Some 
people seem to say that it works only with the high end docking station 
which has multple ports on it.  Others have gotten it working with the 
right cables plugged directly into the laptop.  All of the things I've 
read about this were users running Ubuntu or Debian distributions, so, I 
don't know that anyone has done it on CentOS.  I would goggle for 
something like M6500  Ubuntu Dual monitors(or try M6400).

Whether you can do this or not is dependant on weather the graphics card 
supports multiple displays.  Macbook Pro's do NOT.

Nataraj

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] DRBD update 8.3.9 (Was: drbd update 8.3.8.1)

2010-10-22 Thread Dag Wieers
On Sun, 3 Oct 2010, Dag Wieers wrote:

 On Thu, 30 Sep 2010, Shad L. Lords wrote:

 Can we get a refresh of the drbd packages to 8.3.8.1

 There was a fix to the resync protocol.  8.3.8 would stall under certain
 circumstances.

 If you haven't tried the ELRepo DRBD packages yet, could you please test
 the one at:

   http://elrepo.org/linux/testing/el5/i386/RPMS/
   http://elrepo.org/linux/testing/el5/x86_64/RPMS/

 and provide feedback ? The more people test and provide feedback, the
 quicker we can move it out of testing, into the elrepo repository.

In the meantime DRBD 8.3.9 has been released and you can find EL5 packages 
in the ELRepo testing repository at:

http://elrepo.org/linux/testing/el5/i386/RPMS/
http://elrepo.org/linux/testing/el5/x86_64/RPMS/

where also the DRBD 8.3.8.1 are still hosted. Without sufficient feedback 
we are not able to promote those packages to stable.

Kind regards,
-- 
--   dag wieers,  d...@wieers.com,  http://dag.wieers.com/   --
[Any errors in spelling, tact or fact are transmission errors]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Robert Heller
At Fri, 22 Oct 2010 15:30:03 -0400 CentOS mailing list centos@centos.org 
wrote:

 
 
 hmm.. ok then gordon thanks for the input! how do these permissions grab ya?
 
 
 [bluethu...@lcent01 ~]$ ls -alh | grep .ssh
 -rw---   1 bluethundr summitnjops70 Oct 17 14:04 .lesshst
 drwx--   2 bluethundr summitnjops   512 Oct 22 14:06 .ssh
 
 
 [bluethu...@lcent01 ~]$ ls -lah .ssh
 total 34K
 drwx--   2 bluethundr summitnjops  512 Oct 22 14:06 .
 drwx-- 106 bluethundr summitnjops 5.5K Oct 22 14:44 ..
 -rw---   1 bluethundr summitnjops  820 Oct 22 14:19 authorized_keys
 -rw---   1 bluethundr summitnjops 1.7K Oct 22 14:18 id_rsa
 -rw-r--r--   1 bluethundr summitnjops  403 Oct 22 14:18 id_rsa.pub
 -rw-r--r--   1 bluethundr summitnjops  20K Oct 22 14:47 known_hosts
 [bluethu...@lcent01 ~]$
 
 
 as is stands, currently, still not working!

You did copy id_rsa.pub to authorized_keys:

cat .ssh/id_rsa.pub  .ssh/authorized_keys

???

Also check /etc/ssh/sshd_config an /etc/ssh/ssh_config.  These files
need to allow public key logins.  Also, does /etc/ssh/sshd_config have
anything set for AllowUsers and/or AllowGroups?  All any/all of the
machines in question?

 
 this is what it looks like when I ssh to another host that shares this
 home directory (and .ssh dir) as the one I am ssh'ing from.
 
 [bluethu...@lcent01 ~]$ ssh virt1
 bluethu...@virt1's password:
 
 I've posted a -vvv version of the ssh session in an attachment.
 
 thanks!
 
 tim
 
 On Fri, Oct 22, 2010 at 3:14 PM, Gordon Messmer yiny...@eburg.com wrote:
  On 10/22/2010 11:38 AM, Tim Dunphy wrote:
  silly quesion: if I generate an RSA key on an NFS shared home
  directory, then cat  it into the .ssh/authorized_keys file in the
  same location, shouldn't I then be able to ssh into each host that
  shares the NFS home directory without entering a passphrase (assuming
  the key doesn't have one)? and assuming the permissions on the
  authorized_keys file belong to the user with mode 600?
 
  The permissions on the .ssh directory must also be correct.  Otherwise, 
  yes.
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 
 
 

-- 
Robert Heller -- 978-544-6933 / hel...@deepsoft.com
Deepwoods Software-- http://www.deepsoft.com/
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] POP3 server

2010-10-22 Thread David
ok, I will keep tight to RFC then.

Thanks for the answers.

David


- Original Message - 
From: Adam Tauno Williams awill...@whitemice.org
To: centos@centos.org
Sent: Friday, October 22, 2010 9:43 AM
Subject: Re: [CentOS] POP3 server


On Sat, 2010-10-23 at 01:32 +1100, Ben McGinnes wrote:
 On 22/10/10 3:10 AM, David wrote:
  I was hoping Dovecot could be not so RFC compliant in this matter. 
  Anyway if
  gets the DELE command the message arrived safely to the client.

The feature you want would result in inconsistencies in some cases;
nothing is going to implement that behavior.

  Any other POP3 server not so RFC compliant?
  Thanks for the answer.
 Breaking RFCs to get the functions you want is a *bad* idea.  What
 happens if you get hit by a bus and someone else has to deal with the
 issue, sees that the config is broken and fixes it.
 You're much better off using a protocol which supports an immediate
 delete from the server, like IMAP.  Unless, of course, the issue is with
 a lack of disk space on the server.

-- 
Adam Tauno Williams awill...@whitemice.org LPIC-1, Novell CLA
http://www.whitemiceconsulting.com
OpenGroupware, Cyrus IMAPd, Postfix, OpenLDAP, Samba

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Tim Dunphy
cd ~bluethundr/.ssh/

[bluethu...@virtcent01 ~]$ ls -al | grep .ssh
-rw---   1 bluethundr 1005   70 Oct 17 14:04 .lesshst
drwxr-xr-x   2 bluethundr 1005  512 Oct 22 14:06 .ssh
-rw-r--r--   1 bluethundr 1005 1047 Sep 16 01:22 sshd-prop.txt
[bluethu...@virtcent01 ~]$ ls -lh .ssh
total 28K
-rw-r--r-- 1 bluethundr 1005 2.9K Oct 22 21:49 authorized_keys
-rw--- 1 bluethundr 1005 1.7K Oct 22 21:48 id_rsa
-rw-r--r-- 1 bluethundr 1005  400 Oct 22 21:48 id_rsa.pub
-rw-r--r-- 1 bluethundr 1005  20K Oct 22 15:59 known_hosts

[r...@virtcent01 ~]# cd ~bluethundr/.ssh/
[r...@virtcent01 .ssh]# ls -lah ~bluethundr/.ssh/*
-rw-r--r-- 1 bluethundr 1005 2.9K Oct 22 21:49
/home/bluethundr/.ssh/authorized_keys
-rw--- 1 bluethundr 1005 1.7K Oct 22 21:48 /home/bluethundr/.ssh/id_rsa
-rw-r--r-- 1 bluethundr 1005  400 Oct 22 21:48 /home/bluethundr/.ssh/id_rsa.pub
-rw-r--r-- 1 bluethundr 1005  20K Oct 22 15:59 /home/bluethundr/.ssh/known_hosts
[r...@virtcent01 .ssh]# cat ~bluethundr/.ssh/authorized_keys
ssh-rsa 
B3NzaC1yc2EBIwAAAQEA1vQJFa+RDUrqzcnQrzTR7wm3bPGI7cnAX3crAj9KFM3sxuSTP18ZE1V3N7aQ7dju0BJli1PfR/EnlKM/xAybvn4N2yH0bxiKuQwx7M0SvhXy3PUAJu8AuRBGag9yyG0fqJ0lWhcbrKbGwFxYsfpfpLp501Fs5pqqKRSJl4IM5Kv11QcM0ZXLEiJwByiz6vLSBgBxZG3MSgF03F2+gRZbQkPVECAg7e3mValoiZB0K5m3tjMFCr8FZoVVbz4J16fKgIc4WfRFcKTuGEDt3I0agDhosFMVpAvZV4WRYIIpg7nkYpKkIlqSX+GYH+7RPlh2QNQyvS+I0+XOXSdqkP62aQ==
bluethu...@lcent01.summitnjhome.com
ssh-rsa 
B3NzaC1yc2EBIwAAAQEAtLqML4TD+qE+L544ofOPFPnSUjnG/XIet66K1vvPot+sH81zxeZQgJeREcsOjYUrnApzigd+QudfCGRsNgQ7nFAPUX3edp0Ssi7GCeVTRiBcxYIcVMXm6Fgt2ERyAy0GPdpZCS+R2iKTBgESUo0kQXglm8Jkvlbc8/MDOOEAUiyHBKfOpUPe30qMtYtByNorNWjJz+v1jnGV+T2PVhsHIVpfT501YkHmRVspPy765nEoF9HKQtxc5UOClMCbYrd8R/J7mgtr2RAhFr3lj0dRfVM75hPhI/5qONmomoAoMSdz/c4pjrNlu6MbZV9m8tFi89AviyRkdu0kZt8F6QeJOQ==
bluethu...@virtcent02
ssh-rsa 
B3NzaC1yc2EBIwAAAQEApnUSYyrM96qIBZKjwSNYycgeSv/BVQTjK7EHqPE1Lv3LLs0ixV9pOXvHMq3YCZHHmgyxwizShnt7MKWFcYPI02ywGHFPawvCM2hIqSwn7kH0KfraHO1Vt+zfcPVsqSo2Mw79cYezVvFYzbSSxCY6O00mZ5PWReyVuOn9Fb/uH/xCzKk9OsCpfCEmNF2YrLCfZvfAATgv7QmIRfsAa+ttLzUELGrfn/n+Xj8K/xqV8C71KPuf8s1OSf/19PLZedv2xSA2KU/OUekAc0gu1HNsC23gLTO7DSasW9y1LStWRryTbpn3UHcwQXlCuw2VtWGkrBCAaLEyG2rE8NIcBOsfHQ==
bluethu...@lbsd8-2.summitnjhome.com
-BEGIN RSA PRIVATE KEY-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-END RSA PRIVATE KEY-


[bluethu...@nas ~]$ grep $MYNFSFS /etc/exports
/mnt/nas -alldirs -mapall=root -network 192.168.1.0 -mask 255.255.255.0

[bluethu...@nas2 /]$ grep $MYNFSFS /etc/exports
/mnt/store -alldirs -mapall=root -network 192.168.1.0 -mask 255.255.255.0

[bluethu...@nas2 /]$ grep $MYNFSFS /etc/exports
/mnt/home -mapall=root -network 192.168.1.0 -mask 255.255.255.0


yes I did cat ~/.ssh/id_rsa.pub  ~/.ssh/authorized_keys...

I enabledIdentityFile ~/.ssh/id_rsa andRSAAuthentication yes

in /etc/ssh/ssh_config and

RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile  .ssh/authorized_keys


in /etc/ssh/sshd_config

still failed... :(

[bluethu...@virtcent02 ~]$ cat ~/.ssh/id_rsa.pub  ~/.ssh/authorized_keys
[bluethu...@virtcent02 ~]$ ssh virt1
bluethu...@virt1's password:
Last login: Fri Oct 22 22:31:41 2010 from 192.168.1.2

the only thing left I can think of is that bluethundr is an LDAP user.
can THAT prevent the user from logging in with keys? Also, the root
user key has been exported across the network and can login without a

Re: [CentOS] ssh with shared home dir

2010-10-22 Thread JohnS

On Fri, 2010-10-22 at 22:29 -0400, Tim Dunphy wrote:


 
 
 in /etc/ssh/sshd_config
 
 still failed... :(
 
 [bluethu...@virtcent02 ~]$ cat ~/.ssh/id_rsa.pub  ~/.ssh/authorized_keys
 [bluethu...@virtcent02 ~]$ ssh virt1
 bluethu...@virt1's password:
 Last login: Fri Oct 22 22:31:41 2010 from 192.168.1.2
 
 the only thing left I can think of is that bluethundr is an LDAP user.
 can THAT prevent the user from logging in with keys? Also, the root
 user key has been exported across the network and can login without a
 password...
 

PermitEmptyPasswords no    In sshd_config on the server ???  That
would work for keys that do not have a password.  You created the key
without a password right? 

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread JohnS

On Fri, 2010-10-22 at 22:29 -0400, Tim Dunphy wrote:
 Would someone @ mail  dot centos dot org delete this email expung it
from public view???

http://lists.centos.org/pipermail/centos/2010-October/100563.html;

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Tim Dunphy
PermitEmptyPasswords no    In sshd_config on the server ???  That
would work for keys that do not have a password.  You created the key
without a password right?


yes I created it without a key.. and enabled PermitEmptyPasswords yes
in sshd_config

  Would someone @ mail  dot centos dot org delete this email expung it
 from public view???




uhm.. what's your problem, dude?



On Fri, Oct 22, 2010 at 11:13 PM, JohnS jse...@gmail.com wrote:

 On Fri, 2010-10-22 at 22:29 -0400, Tim Dunphy wrote:
  Would someone @ mail  dot centos dot org delete this email expung it
 from public view???

 http://lists.centos.org/pipermail/centos/2010-October/100563.html;

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos




-- 
Here's my RSA Public key:
gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9

Share and enjoy!!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread JohnS

On Fri, 2010-10-22 at 23:17 -0400, Tim Dunphy wrote:
 uhm.. what's your problem, dude?
 


My problem is you Private Key is Wide Open to the whole World so now go
and create a new one, unless you the world to have it.

:-)

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Ben McGinnes
On 23/10/10 2:17 PM, Tim Dunphy wrote:
 
  Would someone @ mail  dot centos dot org delete this email expung it
 from public view???
 
 uhm.. what's your problem, dude?

He's probably referring to the private RSA SSH key that has been posted
in that message.  Actually, that would be *your* private key.  Time to
make a new one.


Regards,
Ben



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread John R Pierce
On 10/22/10 8:13 PM, JohnS wrote:
 On Fri, 2010-10-22 at 22:29 -0400, Tim Dunphy wrote:
   Would someone @ mail  dot centos dot org delete this email expung it
 from public view???

 http://lists.centos.org/pipermail/centos/2010-October/100563.html;

it wouldn't matter.  those keys are now sitting in 1000s of inboxes, and 
probably numerous web archives.


every one of those hosts needs its keys revoked and replaced.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh with shared home dir

2010-10-22 Thread Michael Semcheski
On Fri, Oct 22, 2010 at 10:29 PM, Tim Dunphy bluethu...@gmail.com wrote:
 this is mighty puzzling!!

Have you investigated whether SELinux is stopping this?

If so, this will probably fix it:

chcon -RP /home/user/.ssh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] POP3 server

2010-10-22 Thread Drew
 Anyway if gets the DELE command the message arrived safely to the client.

Not guaranteed. DELE command can be issued on an email before the
client reads the email. I've used this in the past to remove large
emails from a mailbox so the client could finish downloading the rest
of their email. Nothing chokes Outlook Express quite like an 8MB email
being pulled down over 56kbps dialup. ;-)


-- 
Drew

Nothing in life is to be feared. It is only to be understood.
--Marie Curie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos