Re: [CentOS-docs] Application for joining Chinese (simplified) Team
2011/4/21 Timothy Lee timothy.ty@gmail.com: Dear Ralph, Can you give HaoweiLee (wiki account) permission to change all Chinese pages. Thanks! He'll be working on the simplified Chinese translations. :) Done for zh/ and his homepage. Cheers and thanks, Ralph ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Application for joining Chinese (simplified) Team
hi Ralph, Thanks for your granting. I just found that wiki site page could not be loaded out when I visit from China by IE8. The just page just show me a backgroud, but nothing. Could you check it ? Regards, At 2011-04-21 18:55:37,Ralph Angenendt ralph.angene...@gmail.com wrote: 2011/4/21 Timothy Lee timothy.ty@gmail.com: Dear Ralph, Can you give HaoweiLee (wiki account) permission to change all Chinese pages. Thanks! He'll be working on the simplified Chinese translations. :) Done for zh/ and his homepage. Cheers and thanks, Ralph ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS] rpm libuser-devel is not signed
'yum update' runs into the following error message. Package libuser-devel-0.54.7-2.1.el5_5.2.i386.rpm is not signed I got this too, there's two ways around it: 1) Wait until the package is signed and then update. 2) Run: yum update --nogpgcheck Other workarounds for this particular issue have just been suggested here: http://lists.centos.org/pipermail/centos/2011-April/110547.html http://lists.centos.org/pipermail/centos/2011-April/110551.html ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On 04/21/2011 01:04 AM, Mathieu Baudier wrote: 'yum update' runs into the following error message. Package libuser-devel-0.54.7-2.1.el5_5.2.i386.rpm is not signed I got this too, there's two ways around it: 1) Wait until the package is signed and then update. 2) Run: yum update --nogpgcheck Other workarounds for this particular issue have just been suggested here: http://lists.centos.org/pipermail/centos/2011-April/110547.html http://lists.centos.org/pipermail/centos/2011-April/110551.html This issue has been taken care of on all the CentOS mirrors about 10 hours ago. signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] 4kB sector size HDDs
Hello again. Do any of you have one of the 'new' HDDs with 4kB Sectors currently in use? I would upgrade to the 4kB disks but I don't know if this might be problematic as I intend to use ZFS w/ RAIDz or at least a classic RAID6. How might this affect performance under 5.5 and how do I go about setting up the alignment of the partitions I use? Kind regards Dawid Horace ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] How to install binutils-devel on Centos Linux 5.5
Good morning, I am trying to install binutils-devel on Centos Linux 5.5 so that we can obtain lib liberty required by the oprofile-0.9.6 Linux profiler. Using root , I enter: yum local install binutils-devel-2.20.51.0.7-6.fc14.i686.rpm. Then I get the message: Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm is not installed. Please tell me where I get the Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm . Thank you. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to install binutils-devel on Centos Linux 5.5
On 21/04/11 11:14, Frank Chang wrote: Good morning, I am trying to install binutils-devel on Centos Linux 5.5 so that we can obtain lib liberty required by the oprofile-0.9.6 Linux profiler. Using root , I enter: yum local install binutils-devel-2.20.51.0.7-6.fc14.i686.rpm. Then I get the message: Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm is not installed. Please tell me where I get the Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm . Thank you. Why are you trying to install a Fedora 14 package on CentOS 5.5? Oh, it's probably because you're trying to install a later version of oprofile that again isn't a part of CentOS. The error you get is because, unsurprisingly, you don't have the GPG key installed for Fedora 14 on your CentOS system. This isn't a CentOS issue so you're on your own here. Good luck. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to install binutils-devel on Centos Linux 5.5
Good morning, I am trying to install binutils-devel on Centos Linux 5.5 so that we can obtain lib liberty required by the oprofile-0.9.6 Linux profiler. Using root , I enter: yum local install binutils-devel-2.20.51.0.7-6.fc14.i686.rpm. Then I get the message: So, why this package, doesn't it work with the binutils-devel package from CentOS 5.x? If it does you could just 'yum install binutils-devel'. Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm is not installed. Please tell me where I get the Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm . Thank you. I'm quite sure this will not work even with the correct public key, which you should get where you got the binutils-devel-2.20.51.0.7-6.fc14.i686.rpm from, most likely a fedora mirror. But I think the package won't install on CentOS 5.x. Simon ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 5.6 - SRPM's
On 04/21/2011 12:18 AM, Bob Hepple wrote: Hmmm - it's 10 days on and I still can't see all of the [a-l] *.src.rpm's. I strongly suspect that something's gone wrong - or perhaps I'm looking in the wrong place - Yes, you are right. Amongst the various tests, there is one that checks for dupe packages, and we have 2 anaconda srpms this time, the i386 and x86_64 are built from identical srpm's; but I had to bump version on one arch, without needing to do that on the other. So there are 2 anaconda-srpm in the SRPMS/ repo, causing the test to fail and that entire lot not going through. I like the test, and would like to keep it in place, so will do a force-pass for now and that should see the packages go through at some point today. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 5.6 - SRPM's
On 04/21/2011 12:47 AM, Don Krause wrote: It doesn't appear to be me, as much as kernel.org. Their webpage http://mirrors.kernel.org/centos/5.6/os/SRPMS/?C=M;O=D has nothing newer than Dec 14th either.. Something must be broke (or really slow) out there. Broke yes, but in a good way. No need to switch from kernel.org! Also the reason why you are seeing some srpms but not others is that there is a second task that was running, to bring in srpms shared from the 5.5/ tree ( os + updates ) that are still needed in 5.6/ Its the new packages that are in 5.6/ which were not in eithe 5.5/os or 5.5/updates that are not on the mirrors at this point. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On 04/21/2011 09:26 AM, Johnny Hughes wrote: Other workarounds for this particular issue have just been suggested here: http://lists.centos.org/pipermail/centos/2011-April/110547.html http://lists.centos.org/pipermail/centos/2011-April/110551.html I find it strange that people are making such recommendations. A non verifyable signature is a MASSIVE deal. Working 'around' that is to stop doing what you are doing, and not do any package centric operation till the issue is fixed and resolved in an acceptable manner. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On 04/21/2011 12:49 AM, Ben McGinnes wrote: 2) Run: yum update --nogpgcheck please dont do that :( - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On Thu, 21 Apr 2011, Karanbir Singh wrote: On 04/21/2011 09:26 AM, Johnny Hughes wrote: Other workarounds for this particular issue have just been suggested here: http://lists.centos.org/pipermail/centos/2011-April/110547.html http://lists.centos.org/pipermail/centos/2011-April/110551.html I find it strange that people are making such recommendations. A non verifyable signature is a MASSIVE deal. Working 'around' that is to stop doing what you are doing, and not do any package centric operation till the issue is fixed and resolved in an acceptable manner. It's all too often the advice you'll see. On Spacewalk, the standard response to dealing with unsigned (or signed with an unimported key) is to disable all gpg checks. It's cringeworthy, and wrong on so many levels. jh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Still a kvm problem after 5.6 upgrade
After the upgrade, my VMs stopped loading. Found others with the problem and followed the guidance to use virsh to dump the xml file of the VM, undefine the VM, edit the xml file to change 'raw' to 'qcow2', redefine the VM from the edited xml, and restart the machine. I still get the following error when I try to start the VM: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/hda A libvirt update came in last night, so I was hoping the update would allow libvirt to automatically recognize the type of image file (as previous versions did). Nope. Any other thoughts? Dave M ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
Other workarounds for this particular issue have just been suggested here: http://lists.centos.org/pipermail/centos/2011-April/110547.html http://lists.centos.org/pipermail/centos/2011-April/110551.html I find it strange that people are making such recommendations. A non verifyable signature is a MASSIVE deal. Working 'around' that is to stop doing what you are doing, and not do any package centric operation till the issue is fixed and resolved in an acceptable manner. Sorry, but not everybody is on production machines. Since the OP could not analyze himself the error message, one could safely assume he is not dealing with critical production environments. Maybe he was just told: install quickly this CentOS in VirtualBox, just to make sure our app is compatible, and in that case the sooner the better. My advice and those of others where underlying the security risk. The one of Akemi seems pretty safe (not installing the update). To put it shortly: Freedom, as in free software, is about doing whatever you want. This being say, I do agree that having a non signed package is a MASSIVE deal. Do we have more details about what's going on here? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On Thu, 21 Apr 2011, Mathieu Baudier wrote: Sorry, but not everybody is on production machines. Since the OP could not analyze himself the error message, one could safely assume he is not dealing with critical production environments. Maybe he was just told: install quickly this CentOS in VirtualBox, just to make sure our app is compatible, and in that case the sooner the better. My advice and those of others where underlying the security risk. The one of Akemi seems pretty safe (not installing the update). To put it shortly: Freedom, as in free software, is about doing whatever you want. Not updating is entirely sensible and sounds like the best default position. Installing a package you'd expect to be signed when it isn't signed should ring alarm bells. Freedom includes being free to make poor decisions. jh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On 04/21/2011 12:26 PM, Mathieu Baudier wrote: Sorry, but not everybody is on production machines. Security and integrity of an install is not optional, wherever you might be. Imho anyway. Maybe he was just told: install quickly this CentOS in VirtualBox, just to make sure our app is compatible, and in that case the sooner the better. My advice and those of others where underlying the security risk. The one of Akemi seems pretty safe (not installing the update). If there is reason to suspect a mirror or installation is compromised, one should - again imho - not be doing any operations against that. To put it shortly: Freedom, as in free software, is about doing whatever you want. thats true, but there is also a sense of responsibility that comes with that advice that is handed out and who / where its being handed out. One could potentially assume that the people on this list would know what they are talking about and would only advice based on whats considered best practices. The fact that the OP didnt know what was going on would be a good sign to assume that he was looking for people who did know what was going on eg. Telling people to jump off a cliff, just because you can isnt nice. Freedom or otherwise. This being say, I do agree that having a non signed package is a MASSIVE deal. Do we have more details about what's going on here? yes, a package was released, unsigned, and has been fixed. ( and 4 more tests added to the release process to make sure that this does not happen again; or atleast reduce the chance of this going out ). - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On Thu, 21 Apr 2011, Karanbir Singh wrote: yes, a package was released, unsigned, and has been fixed. ( and 4 more tests added to the release process to make sure that this does not happen again; or atleast reduce the chance of this going out ). And if people stick with the sane practice of only trusting signed packages, this is quickly caught and the only cost is a short delay while updated packages are pushed out. If people think that disabling gpg checking is a good idea, you risk this finding its way into their yum.conf. That's exactly what you've seen amongst some spacewalk users. jh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
- Original Message From: John R. Dennison j...@gerdesas.com To: CentOS mailing list centos@centos.org Sent: Thu, 21 April, 2011 1:01:22 Subject: Re: [CentOS] Centos 6 Update? On Wed, Apr 20, 2011 at 11:31:04PM +0100, Ian Murray wrote: Seriously, just skip over my posts. I am not forcing you to read them. I'll finish when I am good and ready... not when *you* decide. How about I write you a check to just go away? Please make it payable to Dag's Rebuild Fund. (JOKE) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
- Original Message From: Garry Dale garry.d...@gmail.com To: CentOS mailing list centos@centos.org Sent: Thu, 21 April, 2011 1:37:33 Subject: Re: [CentOS] Centos 6 Update? (someone) wrote: Why does the website say something so different, then? Seriously? Are people really this retarded? Retarded enough to take what a disty website takes at face value? Are YOU being serious? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Still a kvm problem after 5.6 upgrade
On 04/21/2011 06:11 AM, David McGuffey wrote: After the upgrade, my VMs stopped loading. Found others with the problem and followed the guidance to use virsh to dump the xml file of the VM, undefine the VM, edit the xml file to change 'raw' to 'qcow2', redefine the VM from the edited xml, and restart the machine. I still get the following error when I try to start the VM: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/hda You should not need to do anything in virsh to dump a file ... there should be an xml file in /etc/libvirt/qemu/ for every VM already. In that file, you need to go to the disk type='file' device='disk' section and look for a line that says: driver name='qemu' type='raw' cache='none'/ and change it to driver name='qemu' type='qcow2' cache='none'/ (the cache might be different, but you can leave it alone) The key is to change the type=raw to type=qcow2 signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
- Original Message From: Ron Blizzard rb4cen...@gmail.com To: CentOS mailing list centos@centos.org Sent: Thu, 21 April, 2011 1:59:19 Subject: Re: [CentOS] Centos 6 Update? On Wed, Apr 20, 2011 at 5:31 PM, Ian Murray murra...@yahoo.co.uk wrote: Seriously, just skip over my posts. I am not forcing you to read them. I'll finish when I am good and ready... not when *you* decide. I'm trying to figure out why someone who, apparently, hates the CentOS distribution so much, spends so much time attacking it. If I detested a Linux distribution I would move on to something else. Or do you even use CentOS any more? (Serious question.) Detest? Hate? I have nothing against the distribution and yes I do still use it on several virtual server and look after several other CentOS based systems, i.e. SME and AsteriskNOW. I can't be bothered to migrate off, but would think twice about any new public facing installs. That applies to all rebuilds at the moment, as I am not convinced about the model for the moment. In case nobody noticed, I am only responding to other comments. If I was constantly starting threads of the same topic, I would agree that it would be trolling. Not the first time that attempts are made to silence someone through discreditation, though. -- RonB -- Using CentOS 5.6 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
It sounds to me like your big beef is that you can't run the CentOS distribution the way *you* want it run. Whether you agree or not, doesn't change the fact that CentOS *is* enterprise ready.-- and many enterprises use it. The only time there are significant delays in No, I would just like the name and website to match the facts. I would suggest that anybody that calls centOS enterprise-ready might have a different concept to what an enterprise is to me. Enterprise to me is at least a 1000 users and dozens of live servers. If CentOS is only suitable for test environment then I don't really class that as enterprise-ready, either. As for rebuilding, why would you want to rebuild CentOS? Why not do what CentOS does and get the sources directly from Red Hat and rebuild that? Obviously you must think there is still some value in the CentOS name. I was just trying to illustrate a point, rather than actually wanting to do it. -- RonB -- Using CentOS 5.6 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
- Original Message From: John R. Dennison j...@gerdesas.com To: CentOS mailing list centos@centos.org Sent: Thu, 21 April, 2011 2:58:36 Subject: Re: [CentOS] Centos 6 Update? On Wed, Apr 20, 2011 at 08:29:07PM +0100, Ian Murray wrote: I have it black and white in a private email from JH that he would never give me sufficient information to start a competing rebuild. Information needed to rebuild is, and has been for quite some time, in the archives of this and the -devel mailing lists. Johnny has posted such information. Russ has posted information. There are at least 5 other rebuilds of EL6 that I know of, and likely many more that I don't. There is no magic. While it can be argued (and I would actually be in agreement) that such information should be wikified the fact is that the information _is_ out there. The point was the attitude, not the availability. As far as I can gather, some if it is out of date, anyway. What are these 5 rebuilds then, apart from SL? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
And do us a favor? Take your own advice. I always try to state as far as I know, as far as I can tell, in my opinion/belief. Can we recall that I commented on the fact that a major Linux magazine had put up a pretty damning article. I don't know why I am getting attacked for that. Write to Linux Mag. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 4kB sector size HDDs
how do I go about setting up the alignment of the partitions I use? If you use one large partition it's easy: you just create the partition leaving 1 meg of free space before the partition. This causes the partition to start at sector 2048, which is a number that 4096 is divisible by. Newer versions of disk utilities like gparted suggest this for you by placing a 1 in the 'Free Space Preceding' box when you go to create a new partition. If you create multiple partitions, it's a little harder since you have make sure that subsequent partitions start on sectors that can be divided evenly into 4096. I've never done this as I always set up one large partition on my storage arrays, and I use a separate drive for the OS to boot from and another separate drive for my VMs. I do this for performance reasons. All of this is explained more or less if you google. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Still a kvm problem after 5.6 upgrade
I still get the following error when I try to start the VM: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/had Is the disk image a qcow2 type file? Someone wrote: You should not need to do anything in virsh to dump a file ... there should be an xml file in /etc/libvirt/qemu/ for every VM already. There are 2 xml files if the VM is set to run automatically at boot. Using virsh to dump the file, and the rest of the instructions makes it a cleaner repair. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
Not updating is entirely sensible and sounds like the best default position. Installing a package you'd expect to be signed when it isn't signed should ring alarm bells. I agree that my first answer was probably wrong, even with all disclaimers and warnings. I thought of a technical way (--nogpgcheck) to solve the issue, whereas the right answer was definitely procedural (as you point out, not updating, what I would have done on my own systems). I apologize, but I did my best... Freedom includes being free to make poor decisions. I fully agree with you. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On 04/21/2011 08:34 AM, Mathieu Baudier wrote: Not updating is entirely sensible and sounds like the best default position. Installing a package you'd expect to be signed when it isn't signed should ring alarm bells. I agree that my first answer was probably wrong, even with all disclaimers and warnings. I thought of a technical way (--nogpgcheck) to solve the issue, whereas the right answer was definitely procedural (as you point out, not updating, what I would have done on my own systems). I apologize, but I did my best... Freedom includes being free to make poor decisions. I fully agree with you. Maybe this would work out: yum --nogpgcheck update libuser-devel then you can update everything else later with gpg on. Although, like I said, this particular issue has now been corrected. signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
Johnny Hughes wrote: On 04/21/2011 08:34 AM, Mathieu Baudier wrote: Not updating is entirely sensible and sounds like the best default position. Installing a package you'd expect to be signed when it isn't signed should ring alarm bells. I agree that my first answer was probably wrong, even with all disclaimers and warnings. snip Maybe this would work out: yum --nogpgcheck update libuser-devel then you can update everything else later with gpg on. I *like* that answer. And command line only, so the next time you go to yum update, it'll get the fixed package. Although, like I said, this particular issue has now been corrected. And *very* quickly. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] KVM virt-install on disk image - no space
I guess I need the list again. I try to install my first KVM guest. Here is what I do, and finally, what I stumble on. First I created a qcow2 img: # qemu-img create -f qcow2 /var/lib/libvirt/images/test1.img 15G And I created a network bridge (not essential here) To get a text-based install, I followed this how-to: http://sysadminman.net/blog/2011/kvm-virtualization-text-centos-guest-install-2098 My install command was: virt-install \ --name test1 \ --os-variant=rhel5.4 \ --ram 512 \ --vcpus=1 \ --accelerate \ --nographics \ -v \ --location=/mnt/centos56/ \ --network bridge:br0 \ --disk path=/var/lib/libvirt/images/test1.img,size=15 \ --extra-args=console=ttyS0; I tried this also without the size argument for disk Now, the install begins ok. I do a http install from a nearby mirror. BUT when it is time to do partitions, I get Which drive(s) do you want to use for this installation?| | [*]vda0 MB (Unknown) ^ | | And if I now try to create partitions, I get no space error. What is going on?? Cheers to CentOS! - Jussi -- Jussi Hirvi * Green Spot Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hi...@greenspot.fi * http://www.greenspot.fi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 4kB sector size HDDs
--On Thursday, April 21, 2011 11:16:36 AM +0200 Dawid Horacio Golebiewski dawid.golebiew...@tu-harburg.de wrote: Do any of you have one of the 'new' HDDs with 4kB Sectors currently in use? I have them in use, and set up the partitions manually before installing the OS. This is the relevent entry from my server changelog, prior to installing CentOS 5.5: + since this machine is using new drives with 4k blocks, used fdisk to ensure that sector alignment will be sane: fdisk -H 224 -S 56 /dev/sd{a,b} In doing so, I created a 200MB RAID1 partition (type 0xfd) and another RAID1 partition with the remaining disk for use by LVM. I found it necessary to use fdisk manually on both disks, because the following command choked (probably due to the geometry thing): sfdisk -d /dev/sda | sfdisk /dev/sdb (DOESN'T WORK) I case it's not obvious, the partitions on sda and sdb are then mirrored, the small one for /boot, the large one for the remaining filesystems under LVM. If you're using the Caviar green drives, beware of excessive head park and quickly increasing load cycle counts. I fixed that with using an idle timeout of 300 seconds (vice 8 seconds) per: http://community.wdc.com/t5/Desktop/Green-Caviar-High-Load-Cycle-Cout-after-short-operation-time/td-p/15731/page/7 Devin ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
On Thu, Apr 21, 2011 at 01:27:23PM +0100, Ian Murray wrote: No, I would just like the name and website to match the facts. I would suggest that anybody that calls centOS enterprise-ready might have a different concept to what an enterprise is to me. Enterprise to me is at least a 1000 users and dozens of live servers. If CentOS is only suitable for test environment then I don't really class that as enterprise-ready, either. Dozens ? What a small environment. My concept of enterprise is thousands of servers. CentOS, as an Operating System, is most definitely enterprise ready. It can scale to 1000s of servers quite easily. Tools are available to let you build and deploy on an automated basis. You could deploy CentOS to a thousand servers with ease; you could deploy a blade farm with dynamic provisioning very quickly and easily. What the CentOS project is _not_ is an enterprise level _support_ service. It doesn't pretend to be. That's where the community aspect comes in. If you want enteprise level support then you probably need to pay for it. (which is why my employer uses RedHat and not CentOS; we want to be able to phone someone and bitch at them until they fix stuff) If you consider enterprise ready to be a combination of enterprise scalable and enterprise level support then, sure, you'll not find CentOS meeting your needs. But if you want an enterprise quality OS then CentOS fills that gap nicely. -- rgds Stephen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS-announce Digest, Vol 74, Issue 7
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ...@centos.org You can reach the person managing the list at centos-announce-ow...@centos.org When replying, please edit your Subject line so it is more specific than Re: Contents of CentOS-announce digest... Today's Topics: 1. CEBA-2011:0216 CentOS 5 x86_64 vnc Update (Karanbir Singh) 2. CEBA-2011:0033 CentOS 5 x86_64 conga Update (Karanbir Singh) 3. CEBA-2011:0388 CentOS 5 i386 openswan Update (Karanbir Singh) 4. CESA-2011:0394 Important CentOS 5 i386 conga Update (Karanbir Singh) 5. CEBA-2011:0172 CentOS 5 i386 gdbm Update (Karanbir Singh) 6. CESA-2011:0394 Important CentOS 5 x86_64 congaUpdate (Karanbir Singh) 7. CEBA-2011:0456 CentOS 5 i386 xorg-x11-server Update (Karanbir Singh) 8. CEBA-2011:0457 CentOS 5 x86_64 xorg-x11-xfs Update (Karanbir Singh) 9. CESA-2011:0170 Moderate CentOS 5 x86_64 libuser Update (Karanbir Singh) 10. CEBA-2011:0457 CentOS 5 i386 xorg-x11-xfs Update (Karanbir Singh) 11. CEBA-2011:0388 CentOS 5 x86_64 openswan Update (Karanbir Singh) 12. CESA-2011:0170 Moderate CentOS 5 i386 libuser Update (Karanbir Singh) 13. CEBA-2011:0456 CentOS 5 x86_64 xorg-x11-serverUpdate (Karanbir Singh) 14. CEBA-2011:0033 CentOS 5 i386 conga Update (Karanbir Singh) 15. CEBA-2011:0172 CentOS 5 x86_64 gdbm Update (Karanbir Singh) 16. CEBA-2011:0216 CentOS 5 i386 vnc Update (Karanbir Singh) 17. CEBA-2011:0142 CentOS 5 i386 libvirt Update (Karanbir Singh) 18. CEBA-2011:0142 CentOS 5 x86_64 libvirt Update (Karanbir Singh) -- Message: 1 Date: Wed, 20 Apr 2011 16:28:05 + From: Karanbir Singh kbsi...@centos.org Subject: [CentOS-announce] CEBA-2011:0216 CentOS 5 x86_64 vnc Update To: centos-annou...@centos.org Message-ID: 20110420162805.ga23...@chakra.karan.org Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:0216 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0216.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 95a33840c4dfdafde335b03093c5c678 vnc-4.1.2-14.el5_6.6.x86_64.rpm 228eaec0c7f9df994b6100118c80240a vnc-server-4.1.2-14.el5_6.6.x86_64.rpm Source: 908a89b31ceefa6de0a905698e7bdac5 vnc-4.1.2-14.el5_6.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #cen...@irc.freenode.net -- Message: 2 Date: Wed, 20 Apr 2011 16:13:09 + From: Karanbir Singh kbsi...@centos.org Subject: [CentOS-announce] CEBA-2011:0033 CentOS 5 x86_64 conga Update To: centos-annou...@centos.org Message-ID: 20110420161309.ga22...@chakra.karan.org Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:0033 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0033.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 57ba15e655580a4ec5f4834252696c98 luci-0.12.2-24.el5.centos.0.x86_64.rpm a0b895d8c6b372f5c7ca0d5794cb155c ricci-0.12.2-24.el5.centos.0.x86_64.rpm Source: cfaf1fe498770339aba9858172b4d5ff conga-0.12.2-24.el5.centos.0.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #cen...@irc.freenode.net -- Message: 3 Date: Wed, 20 Apr 2011 16:44:38 + From: Karanbir Singh kbsi...@centos.org Subject: [CentOS-announce] CEBA-2011:0388 CentOS 5 i386 openswan Update To: centos-annou...@centos.org Message-ID: 20110420164438.ga23...@chakra.karan.org Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:0388 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0388.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 7ca1346db509381378418dacdae66695 openswan-2.6.21-5.el5_6.4.i386.rpm 48978756e1c38e6500b83ab1cf7a9ed2 openswan-doc-2.6.21-5.el5_6.4.i386.rpm Source: cfe41e13302c7e9fc6d560c0b7f4936e openswan-2.6.21-5.el5_6.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #cen...@irc.freenode.net -- Message: 4 Date: Wed, 20 Apr 2011 16:13:40 + From: Karanbir Singh kbsi...@centos.org Subject: [CentOS-announce] CESA-2011:0394 Important CentOS 5 i386 conga Update To: centos-annou...@centos.org Message-ID: 20110420161340.ga22...@chakra.karan.org Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2011:0394 Important Upstream details at :
Re: [CentOS] Still a kvm problem after 5.6 upgrade
2011/4/21 Johnny Hughes joh...@centos.org: On 04/21/2011 06:11 AM, David McGuffey wrote: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/hda You should not need to do anything in virsh to dump a file ... there should be an xml file in /etc/libvirt/qemu/ for every VM already. The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you should never edit these files directly while the libvirtd service is running. You should either use 'virsh edit [vm_name]' or alternatively virsh dump followed by virsh define. If you edit the file directly while some manager is running (like virt-manager in CentOS), your changes will most likely conflict with, or get overwritten by, virt-manager. Nothing critical should happen, but I don't see any reason for encouraging doing it The Wrong Way(TM). Best regards Kenni ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] KVM virt-install on disk image - no space
On Thu, 21 Apr 2011, Jussi Hirvi wrote: I guess I need the list again. I try to install my first KVM guest. Here is what I do, and finally, what I stumble on. First I created a qcow2 img: In my experience, virt-install will create the disk image when passed a filename via --disk=path=/path/to/nonexistent/disk.dsk,size=15 In other words, I'd suggest skipping the disk-creation step... -- Paul Heinlein heinl...@madboa.com http://www.madboa.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 5.6 - SRPM's
On Apr 21, 2011, at 3:32 AM, Karanbir Singh wrote: On 04/21/2011 12:47 AM, Don Krause wrote: It doesn't appear to be me, as much as kernel.org. Their webpage http://mirrors.kernel.org/centos/5.6/os/SRPMS/?C=M;O=D has nothing newer than Dec 14th either.. Something must be broke (or really slow) out there. Broke yes, but in a good way. No need to switch from kernel.org! Also the reason why you are seeing some srpms but not others is that there is a second task that was running, to bring in srpms shared from the 5.5/ tree ( os + updates ) that are still needed in 5.6/ Its the new packages that are in 5.6/ which were not in eithe 5.5/os or 5.5/updates that are not on the mirrors at this point. - KB Thanks Karanbir, Appreciate all your hard work! -- Don Krause Head Systems Geek, Waver of Deceased Chickens. Optivus Proton Therapy, Inc. P.O. Box 608 Loma Linda, California 92354 909.799.8327 Tel 909.799.8366 Fax dkra...@optivus.com www.optivus.com This message represents the official view of the voices in my head. smime.p7s Description: S/MIME cryptographic signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
Its pretty funny how flaming any thread with Centos 6 in it can get. So the devs do/do not communicate, who cares. When Centos 6 does come out, many will say O big daddy, thank you sooo much, I love you... or something like that. And the old adage about No one ever got fired for buying IBM may hold true today but it should be re written as When you buy IBM, people get laid off. Jesus, the prices for IBM and even Oracle gear these days, WTF... - aurf ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
And think about how the Plutonians feel after there home was bumped down from planet to moon, or was cold worthless chunk rotating the Sun. - aurf ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
aurfal...@gmail.com wrote: And think about how the Plutonians feel after there home was bumped down from planet to moon, or was cold worthless chunk rotating the Sun. Equal rights for Pluto! mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6 Update?
On Apr 21, 2011, at 10:22 AM, m.r...@5-cent.us wrote: aurfal...@gmail.com wrote: And think about how the Plutonians feel after there home was bumped down from planet to moon, or was cold worthless chunk rotating the Sun. Equal rights for Pluto! Sheee ku, thats what I be sayin. - aurf ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.6 and KVM failure
2011/4/21 Ian Forde ianfo...@gmail.com: Turns out that wasn't the only problem I faced in my migration. With 2 KVM servers, both sharing a volume mounted via NFS for VMs, I migrated all VMs to the second node, upgraded the first, them moved them all back to KVM1. Instant disk corruption on all VMs. Boom. Are you sure it was the migration and not the raw/qcow2 error which caused the disk corruption? I just had two Windows Servers with image corruption after upgrading from 5.5 to 5.6 and booting the first time with the raw setting, before changing it to qcow2 :-/ These two images were both on the same host, which is plain CentOS 5 *BUT* with a 2.6.37 kernel (and therefore 2.6.37 KVM module) from elrepo... It could be my special case of running with a vanilla KVM-module + CentOS KVM userspace which allows the corruption to happen, but if other people are seeing disk corruption with the regular kernel/kmod-kvm, then this known issue should probably have a big fat red warning in the release notes.. Best regards Kenni ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] User accounts management for small office
Greetings - This may be a little off-topic here so if someone wants to point me to a more appropriate mailing list I would appreciate it. I administer the network for my small company and am preparing to install a new server in the next month or so. It will be running CentOS 6 and function primarily as a Samba file server to 10 Windows workstations (XP, Vista, 7). It will also host our OpenVPN server and possibly our FTP server; however I am hoping to move our FTP server to a gateway box when the new server is installed. The issue that I would like to be able to resolve when the new server is installed, is that currently if a user wants to change the password on their Windows workstation, I have to manually update that new password on the Linux user account, and also manually change the Samba user account. Manually updating the password in three different locations is a minor headache that I would like to correct. I have been researching and reading lots of information about account management to try and understand what is available, and what would be the best fit for my network size. Much of what I have read is related to larger networks or larger user bases, which seem to have a lot of extraneous stuff that would be unnecessary in my small user environment. I looked into OpenLDAP, and have recently been reading about Samba/Winbind. But after encountering the following statement in the Samba documentation, I am still lost about what I could, or should, be using. A standalone Samba server is an implementation that is not a member of a Windows NT4 domain, a Windows 200X Active Directory domain, or a Samba domain. By definition, this means that users and groups will be created and controlled locally, and the identity of a network user must match a local UNIX/Linux user login. The IDMAP facility is therefore of little to no interest, winbind will not be necessary, and the IDMAP facility will not be relevant or of interest. My only goal is to be able to allow my users to change their Windows password at their workstation and have it perpetuate through the system so that it also changes their Linux User and Samba User account passwords. I don't expect to ever have more than a dozen users, so I want something that fits our size network and is simple to administer. I am not looking for a how-to to set something up, but some opinions about what I should consider using, and why it would be a good fit to achieve my goal. I can do the additional research to understand configuration once I know what I should be researching. Thanks. Please cc me directly, as I only get the list in daily digest mode. Jeff Boyce Meridian Environmental ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rpm libuser-devel is not signed
On Thursday, April 21, 2011 07:56:27 AM John Hodrien wrote: If people think that disabling gpg checking is a good idea, you risk this finding its way into their yum.conf. That's exactly what you've seen amongst some spacewalk users. FWIW, there are some out there who don't even think unsigned packages are a problem. As an extreme example of this, recently I saw on LinuxToday where there was a thread in an archlinux list about signed packages; most of the devs didn't consider them a priority. At all. One reason arch won't be in production here any time soon. Unless you know exactly what you are doing and the full ramifications of doing it you should never disable gpgcheck, since mirrors can be hacked. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
Jeff Boyce wrote: Greetings - This may be a little off-topic here so if someone wants to point me to a more appropriate mailing list I would appreciate it. snip The issue that I would like to be able to resolve when the new server is installed, is that currently if a user wants to change the password on their Windows workstation, I have to manually update that new password on the Linux user account, and also manually change the Samba user account. Manually updating the password in three different locations is a minor headache that I would like to correct. I have been researching and snip You *could* do it with openldap, with the WinDoze boxen authenticating through that. Now, I'll warn you that though it may have improved, a few years ago, openldap was a nightmare to configure, the documentation dreadull where it wasn't almost useless, and googling involved a *lot* of searching. However, I did put it in in '06 for what wound up to be about 14 or 15 folks, and it worked, and they could change passwords themselves. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
On Apr 21, 2011, at 11:51 AM, m.r...@5-cent.us wrote: Jeff Boyce wrote: Greetings - This may be a little off-topic here so if someone wants to point me to a more appropriate mailing list I would appreciate it. snip The issue that I would like to be able to resolve when the new server is installed, is that currently if a user wants to change the password on their Windows workstation, I have to manually update that new password on the Linux user account, and also manually change the Samba user account. Manually updating the password in three different locations is a minor headache that I would like to correct. I have been researching and snip You *could* do it with openldap, with the WinDoze boxen authenticating through that. Now, I'll warn you that though it may have improved, a few years ago, openldap was a nightmare to configure, the documentation dreadull where it wasn't almost useless, and googling involved a *lot* of searching. Yes, agreed OpenLDAP is my suggestion as well. As for Windows clients, you can either do; Samba/LDAP tie in so that your LDAP domain also function as a PDC. Or you can use pGina which is a Windows LDAP plugin that allows your Windows clients to auth direct to LDAP w/o the need to join a PDC first. I prefer pGina but its not for every one. - aurf ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.6 and KVM failure
On 04/21/2011 01:16 PM, Kenni Lund wrote: 2011/4/21 Ian Forde ianfo...@gmail.com: Turns out that wasn't the only problem I faced in my migration. With 2 KVM servers, both sharing a volume mounted via NFS for VMs, I migrated all VMs to the second node, upgraded the first, them moved them all back to KVM1. Instant disk corruption on all VMs. Boom. Are you sure it was the migration and not the raw/qcow2 error which caused the disk corruption? I just had two Windows Servers with image corruption after upgrading from 5.5 to 5.6 and booting the first time with the raw setting, before changing it to qcow2 :-/ These two images were both on the same host, which is plain CentOS 5 *BUT* with a 2.6.37 kernel (and therefore 2.6.37 KVM module) from elrepo... It could be my special case of running with a vanilla KVM-module + CentOS KVM userspace which allows the corruption to happen, but if other people are seeing disk corruption with the regular kernel/kmod-kvm, then this known issue should probably have a big fat red warning in the release notes.. It is in the release notes as a known issue ... I had this issue and tried to reboot my VM server several times and there was no disk corruption. I just tried booting a machine 25 times with the raw setting and it did not corrupt the image. signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
On Thu, Apr 21, 2011 at 02:51:35PM -0400, m.r...@5-cent.us wrote: Jeff Boyce wrote: Greetings - installed, is that currently if a user wants to change the password on their Windows workstation, I have to manually update that new password on the Linux user account, and also manually change the Samba user account. Manually updating the password in three different locations is a minor headache that I would like to correct. I have been researching and snip You *could* do it with openldap, with the WinDoze boxen authenticating through that. Now, I'll warn you that though it may have improved, a few years ago, openldap was a nightmare to configure, the documentation dreadull where it wasn't almost useless, and googling involved a *lot* of searching. I have a page on openldap--though I don't cover it with samba--that is a cut above most of the documentation, in my not at all humble opinion--I fully agree with Mark that the vast majority of ldap documentation is horrendous. Some folks have found my page useful, so I'll offer it for consideration. http://home.roadrunner.com/~computertaijutsu/ldap.html -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Cordelia: I do what I want to do. And I wear what I want to wear. And you know what, I'll date whoever the hell I want to date... no matter how lame he is. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Still a kvm problem after 5.6 upgrade
On 04/21/2011 11:01 AM, Kenni Lund wrote: 2011/4/21 Johnny Hughes joh...@centos.org: On 04/21/2011 06:11 AM, David McGuffey wrote: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/hda You should not need to do anything in virsh to dump a file ... there should be an xml file in /etc/libvirt/qemu/ for every VM already. The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you should never edit these files directly while the libvirtd service is running. You should either use 'virsh edit [vm_name]' or alternatively virsh dump followed by virsh define. If you edit the file directly while some manager is running (like virt-manager in CentOS), your changes will most likely conflict with, or get overwritten by, virt-manager. Nothing critical should happen, but I don't see any reason for encouraging doing it The Wrong Way(TM). OK ... I just turn off libvirtd and edit the file, then restart libvirtd and start the VM. I am an old school SysIII unix admin, so I just edit files by hand all the time. If it is wrong, then I guess doing it right is OK. Though dumping and importing seem much harder than vi to me. signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
On 4/21/2011 1:39 PM, Jeff Boyce wrote: Greetings - This may be a little off-topic here so if someone wants to point me to a more appropriate mailing list I would appreciate it. I administer the network for my small company and am preparing to install a new server in the next month or so. It will be running CentOS 6 and function primarily as a Samba file server to 10 Windows workstations (XP, Vista, 7). It will also host our OpenVPN server and possibly our FTP server; however I am hoping to move our FTP server to a gateway box when the new server is installed. Have you looked at the ClearOS distribution? It comes up with a simple web interface to manage all of this with authentication done with a pre-configured LDAP setup. I think LDAP replication is slated for the next version - which is waiting for CentOS 6 for it's components but you'd only need that if you have several different servers and want changes to propagate across them. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
On Apr 21, 2011, at 12:09 PM, Scott Robbins wrote: I have a page on openldap--though I don't cover it with samba--that is a cut above most of the documentation, in my not at all humble opinion--I fully agree with Mark that the vast majority of ldap documentation is horrendous. Some folks have found my page useful, so I'll offer it for consideration. http://home.roadrunner.com/~computertaijutsu/ldap.html Nice link, thanks for that. Wished I would have known about it all those moons ago. I would also advice subing to the openldap mailing lists but keep in mind its HEAVILY moderated so be mindful of your posts regarding topic. They will deny the post if they feel its for another ldap list. A very very anal list indeed. Also for the Samba bit, you can look here as it helped me; http://pbraun.nethence.com/doc/net/samba-ldap.html - aurf ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
Scott Robbins wrote: snip I have a page on openldap--though I don't cover it with samba--that is a cut above most of the documentation, in my not at all humble opinion--I fully agree with Mark that the vast majority of ldap documentation is horrendous. Some folks have found my page useful, so I'll offer it for consideration. http://home.roadrunner.com/~computertaijutsu/ldap.html And after a *very* brief glance, I've bookmarked it for future reference, since it has things like *examples* of what needs doing, and how to get there Thanks, Scott. Cordelia: I do what I want to do. And I wear what I want to wear. And you know what, I'll date whoever the hell I want to date... no matter how lame he is. Vorkosigan? mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
Les Mikesell wrote: On 4/21/2011 1:39 PM, Jeff Boyce wrote: Greetings - This may be a little off-topic here so if someone wants to point me to a more appropriate mailing list I would appreciate it. I administer the network for my small company and am preparing to install a new server in the next month or so. It will be running CentOS 6 and function primarily as a Samba file server to 10 Windows workstations (XP, Vista, 7). It will also host our OpenVPN server and possibly our FTP server; however I am hoping to move our FTP server to a gateway box when the new server is installed. Have you looked at the ClearOS distribution? It comes up with a simple web interface to manage all of this with authentication done with a pre-configured LDAP setup. I think LDAP replication is slated for the next version - which is waiting for CentOS 6 for it's components but you'd only need that if you have several different servers and want changes to propagate across them. Actually, I found webmin helpful in setting up and testing openldap. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Still a kvm problem after 5.6 upgrade
On Thu, Apr 21, 2011 at 12:10 PM, Johnny Hughes joh...@centos.org wrote: On 04/21/2011 11:01 AM, Kenni Lund wrote: The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you should never edit these files directly while the libvirtd service is running. You should either use 'virsh edit [vm_name]' or alternatively virsh dump followed by virsh define. If you edit the file directly while some manager is running (like virt-manager in CentOS), your changes will most likely conflict with, or get overwritten by, virt-manager. Nothing critical should happen, but I don't see any reason for encouraging doing it The Wrong Way(TM). OK ... I just turn off libvirtd and edit the file, then restart libvirtd and start the VM. I am an old school SysIII unix admin, so I just edit files by hand all the time. I hear you :-D If it is wrong, then I guess doing it right is OK. If what I have seen/read is correct, 'virsh edit' has an additional feature. It will check for errors upon exit. So, it's much like visudo (versus vi). When you move kvm guests across different platforms (for example Fedora to CentOS), editing config files using 'virsh edit' will help. In this case, you will be running 'virsh define' which may also have a checking mechanism (not quite sure about this though). Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
On 4/21/2011 2:24 PM, m.r...@5-cent.us wrote: Les Mikesell wrote: On 4/21/2011 1:39 PM, Jeff Boyce wrote: Greetings - This may be a little off-topic here so if someone wants to point me to a more appropriate mailing list I would appreciate it. I administer the network for my small company and am preparing to install a new server in the next month or so. It will be running CentOS 6 and function primarily as a Samba file server to 10 Windows workstations (XP, Vista, 7). It will also host our OpenVPN server and possibly our FTP server; however I am hoping to move our FTP server to a gateway box when the new server is installed. Have you looked at the ClearOS distribution? It comes up with a simple web interface to manage all of this with authentication done with a pre-configured LDAP setup. I think LDAP replication is slated for the next version - which is waiting for CentOS 6 for it's components but you'd only need that if you have several different servers and want changes to propagate across them. Actually, I found webmin helpful in setting up and testing openldap. Webmin is a very different concept. It is a mostly a web-form editor for the underlying program's config file that may know enough to keep you from making/saving the kinds of syntax errors that you can make with a normal text editor, but you still have to know what program to start for each service, know the relationships between programs, and make separate changes to each program, knowing what all of the options do. ClearOS and the similar/earlier SME server are much more task/service oriented with preconfigured settings to make the common services you want come up and forms that relate to what you want to do rather than having to deal with options in several different different underlying programs. So even though it is running the same samba and openldap as a Centos install, you don't need to change anything to make them work together. And some things that are conceptually even harder, like optionally enabling openvpn per user and generating client certificates are checkbox/push button items. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
I'd say base it on OpenLDAP. As far as the password change option, one simple but effective system is the passwd.cgi script from cgipaf: http://freshmeat.net/projects/cgipaf/ Although you already have to provide your old password to do an update, putting it behind http-basic authentication will allow you to use things like fail2ban to protect against brute forcing. Devin ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
--On Thursday, April 21, 2011 01:49:16 PM -0600 Devin Reade g...@gno.org wrote: As far as the password change option, one simple but effective system is the passwd.cgi script from cgipaf: http://freshmeat.net/projects/cgipaf/ Sorry, brain fart. Yes, cgipaf will allow you to change samba passwords at the same time, but it's been a few years since I needed to support samba and so I don't have a *current* assessment of it. (I currently use a functionally similar cgi program that updates LDAP via PAM instead, but knows nothing about samba.) Devin ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.6 and KVM failure
On Thu, 2011-04-21 at 20:16 +0200, Kenni Lund wrote: 2011/4/21 Ian Forde ianfo...@gmail.com: Turns out that wasn't the only problem I faced in my migration. With 2 KVM servers, both sharing a volume mounted via NFS for VMs, I migrated all VMs to the second node, upgraded the first, them moved them all back to KVM1. Instant disk corruption on all VMs. Boom. Are you sure it was the migration and not the raw/qcow2 error which caused the disk corruption? In the second pair of KVM servers, I'd made the changes to the xml files and restarted libvirtd. Then did migration of a VM. Then watched the corruption. It's possible I may have needed to reboot the VM before migrating, so that KVM absolutely knows what it is. But nevertheless, I'm now a little gunshy about live migration... I just had two Windows Servers with image corruption after upgrading from 5.5 to 5.6 and booting the first time with the raw setting, before changing it to qcow2 :-/ These two images were both on the same host, which is plain CentOS 5 *BUT* with a 2.6.37 kernel (and therefore 2.6.37 KVM module) from elrepo... It could be my special case of running with a vanilla KVM-module + CentOS KVM userspace which allows the corruption to happen, but if other people are seeing disk corruption with the regular kernel/kmod-kvm, then this known issue should probably have a big fat red warning in the release notes.. Yeah. I completely agree. I've got a steaming mess of VMs that I now have to go and rebuild... -I ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] KVM virt-install on disk image - no space
On 21.4.2011 19.04, Paul Heinlein wrote: In my experience, virt-install will create the disk image when passed a filename via --disk=path=/path/to/nonexistent/disk.dsk,size=15 In other words, I'd suggest skipping the disk-creation step... Thanks Paul - it works! I wonder if the disk image will be of type qcow2. I guess I will soon find out. - Jussi -- Jussi Hirvi * Green Spot Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hi...@greenspot.fi * http://www.greenspot.fi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] KVM virt-install on disk image - no space
On 21.4.2011 23.17, Jussi Hirvi wrote: I wonder if the disk image will be of type qcow2. I guess I will soon find out. Nope. Command qemu-img info.. tells me that the image type is raw. But I don't think I need any of the qcow2 specialties. - Jussi -- Jussi Hirvi * Green Spot Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hi...@greenspot.fi * http://www.greenspot.fi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] iscsi multipath fails
Hi all, I have a Dell server running cent 5.6, new install, connecting to an IBM DS3500. I have configured iscsi connections using iscsid and can log into the targets on the IBM. I can also mount the LUNs when accessing them from their active controller path. When I throw multipath into the mix, it fails completely. Multipath is working, when I run multipath -ll it shows me the correct active path and it is mapped to a device under /dev/mapper. However, if I try to access the device from that path, no luck. A mount request just hangs and eventually there's a kernel error message. I'm using the native rdac drivers that came with the OS. Anyone using something similar? My guess is that it's either bad drivers, or a bad multipath config. I started with the default, but after tweaking different parameters, it's still not working. Any advice is greatly appreciated. thanks, Adam Wead ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] User accounts management for small office
On Thu, Apr 21, 2011 at 03:23:20PM -0400, m.r...@5-cent.us wrote: Scott Robbins wrote: snip http://home.roadrunner.com/~computertaijutsu/ldap.html And after a *very* brief glance, I've bookmarked it for future reference, since it has things like *examples* of what needs doing, and how to get there Yeah, I learned about that example stuff from using FreeBSD. :) Most of their man pages have it. Seriously, after literally months of trying to figure it out, I wrote the page that I wished I'd had when I was trying to get it done . Thanks, Scott. Cordelia: I do what I want to do. And I wear what I want to wear. And you know what, I'll date whoever the hell I want to date... no matter how lame he is. From my Buffy the Vampire quote generator, made when I had even less of a life. :) http://home.roadrunner.com/~computertaijutsu/buffquote.html It was actually made into an ArchLinux package by a Buffy fan. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Spike: You're not friends. You'll never be friends. You'll be in love 'til it kills you both. You'll fight, and you'll shag, and you'll hate each other 'til it makes you quiver, but you'll never be friends. Real love isn't brains, children. It's blood. It's blood screaming inside you to work its will. I may be love's bitch, but at least I'm man enough to admit it. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to install binutils-devel on Centos Linux5.5
Simon Matter and Ned Slider, Thank you for your answers. This afternoon , I installed binutils-devel on Centos Linux 5.5. Then , I installed all the QT packages except for the two QT client packages. When I ran ./configure --with-kernel-support on the OProfile Linux profiler distribution 0.9.6, I get the warning: a working QT was not found: no GUI was built. How do I resolve this issue on Centos Linux 5.5? Thank you. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 5.6 - SRPM's
On Thu, 21 Apr 2011 11:30:37 +0100 Karanbir Singh mail-li...@karan.org wrote: On 04/21/2011 12:18 AM, Bob Hepple wrote: Hmmm - it's 10 days on and I still can't see all of the [a-l] *.src.rpm's. I strongly suspect that something's gone wrong - or perhaps I'm looking in the wrong place - Yes, you are right. Amongst the various tests, there is one that checks for dupe packages, and we have 2 anaconda srpms this time, the i386 and x86_64 are built from identical srpm's; but I had to bump version on one arch, without needing to do that on the other. So there are 2 anaconda-srpm in the SRPMS/ repo, causing the test to fail and that entire lot not going through. I like the test, and would like to keep it in place, so will do a force-pass for now and that should see the packages go through at some point today. I'll look out them. Thanks KB, you're legend! -- Bob Hepple bhep...@promptu.com ph: 07-5584-5908 Fx: 07-5575-9550 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] iscsi multipath fails
On Apr 21, 2011, at 4:28 PM, Adam Wead amsterda...@gmail.com wrote: Hi all, I have a Dell server running cent 5.6, new install, connecting to an IBM DS3500. I have configured iscsi connections using iscsid and can log into the targets on the IBM. I can also mount the LUNs when accessing them from their active controller path. When I throw multipath into the mix, it fails completely. Multipath is working, when I run multipath -ll it shows me the correct active path and it is mapped to a device under /dev/mapper. However, if I try to access the device from that path, no luck. A mount request just hangs and eventually there's a kernel error message. I'm using the native rdac drivers that came with the OS. Anyone using something similar? My guess is that it's either bad drivers, or a bad multipath config. I started with the default, but after tweaking different parameters, it's still not working. Any advice is greatly appreciated. Check the archives, there was someone who posted their multipathd config for an MD3000i a month ago which should be applicable (with a vendor/model name change). -Ross ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] KVM virt-install on disk image - no space
Hi Jussi After installing guest image, Convert it from raw to qcow2 by convert command. qemu-img convert -f raw disk0.raw -O qcow2 newdisk0.qcow2 Now you can mount newdisk to empty VM with virt-manager. Or you can edit DOMAIN.xml as follows.. /var/lib/libvirt/qemu/DOMAIN.xml: domain type='kvm' namevm1/name memory524288/memory vcpu1/vcpu os type arch='i686'hvm/type boot dev='hd'/ /os on_poweroffdestroy/on_poweroff on_rebootrestart/on_reboot on_crashrestart/on_crash devices emulator/usr/libexec/qemu-kvm/emulator disk type='file' device='disk' driver name='qemu' type='qcow2'/ source file='/home/tsuyoshi/test/newdisk0.qcow2'/ target dev='hda' bus='ide'/ /disk serial type='pty' target port='0'/ /serial console type='pty' target port='0'/ /console /devices /domain -- Tsuyoshi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to install binutils-devel on Centos Linux5.5
Frank Chang wrote on 04/21/2011 05:36 PM: Simon Matter and Ned Slider, Thank you for your answers. This afternoon , I installed binutils-devel on Centos Linux 5.5. Then , I installed all the QT packages except for the two QT client packages. When I ran ./configure --with-kernel-support on the OProfile Linux profiler distribution 0.9.6, I get the warning: a working QT was not found: no GUI was built. How do I resolve this issue on Centos Linux 5.5? Thank you. First, the current release is 5.6, so 5.5 is unsupported. More than likely, the QT package on CentOS is not new enough to be compatible with a Fedora 14 package. Either run Fedora, wait for CentOS-6 which has a better chance of working, or try an evaluation copy of RHEL6, or give Scientific Linux 6 a test drive in the interim. Phil ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] iscsi multipath fails
On 22/04/11 9:15 AM, Ross Walker wrote: Check the archives, there was someone who posted their multipathd config for an MD3000i a month ago which should be applicable (with a vendor/model name change). Also check Dell's linux wiki at: http://linux.dell.com/ As some of my new R310s and 510s needed some Dell rpms to run efficiently. Good luck, -pete ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Still a kvm problem after 5.6 upgrade
On Thu, 2011-04-21 at 18:01 +0200, Kenni Lund wrote: 2011/4/21 Johnny Hughes joh...@centos.org: On 04/21/2011 06:11 AM, David McGuffey wrote: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/hda You should not need to do anything in virsh to dump a file ... there should be an xml file in /etc/libvirt/qemu/ for every VM already. The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you should never edit these files directly while the libvirtd service is running. You should either use 'virsh edit [vm_name]' or alternatively virsh dump followed by virsh define. If you edit the file directly while some manager is running (like virt-manager in CentOS), your changes will most likely conflict with, or get overwritten by, virt-manager. Nothing critical should happen, but I don't see any reason for encouraging doing it The Wrong Way(TM). Best regards Kenni Problem may be an SELinux problem. Here is the alert. Notice the reference to '/dev/hda' (which is the virtual machine boot disk), and the SELinux context 'virt_content_t' I'm going to create /.autorelable and reboot to ensure the upgrade properly relabled the filesystems. Summary: SELinux is preventing pam_console_app (pam_console_t) getattr to /dev/hda (virt_content_t). Detailed Description: SELinux denied access requested by pam_console_app. It is not expected that this access is required by pam_console_app and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for /dev/hda, restorecon -v '/dev/hda' If this does not work, there is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. Additional Information: Source Contextsystem_u:system_r:pam_console_t:SystemLow- SystemHigh Target Contextsystem_u:object_r:virt_content_t Target Objects/dev/hda [ blk_file ] Sourcepam_console_app Source Path /sbin/pam_console_apply Port Unknown Host d...@mydomain.net Source RPM Packages pam-0.99.6.2-6.el5_5.2 Target RPM Packages Policy RPMselinux-policy-2.4.6-300.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing ModeEnforcing Plugin Name catchall_file Host Name d...@mydomain.net Platform Linux d...@mydomain.net 2.6.18-238.9.1.el5 #1 SMP Tue Apr 12 18:10:13 EDT 2011 x86_64 x86_64 Alert Count 48 First SeenWed 13 Apr 2011 08:41:32 AM EDT Last Seen Thu 21 Apr 2011 07:05:23 AM EDT Local ID 9ee6c9a9-3eda-4082-84d3-5741ea9ff688 Line Numbers Raw Audit Messages host= d...@mydomain.net type=AVC msg=audit(1303383923.130:356): avc: denied { getattr } for pid=15025 comm=pam_console_app path=/dev/hda dev=tmpfs ino=6206 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_content_t:s0 tclass=blk_file host= d...@mydomain.net type=SYSCALL msg=audit(1303383923.130:356): arch=c03e syscall=4 success=no exit=-13 a0=7fff2014b170 a1=7fff2014b1a0 a2=7fff2014b1a0 a3=18cba490 items=0 ppid=15014 pid=15025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=pam_console_app exe=/sbin/pam_console_apply subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null) Dave M ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Still a kvm problem after 5.6 upgrade
On Thu, 2011-04-21 at 21:09 -0400, David McGuffey wrote: On Thu, 2011-04-21 at 18:01 +0200, Kenni Lund wrote: 2011/4/21 Johnny Hughes joh...@centos.org: On 04/21/2011 06:11 AM, David McGuffey wrote: redlibvirtError: internal error Process exited while reading console log output: qemu: could not open disk image /dev/hda You should not need to do anything in virsh to dump a file ... there should be an xml file in /etc/libvirt/qemu/ for every VM already. The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you should never edit these files directly while the libvirtd service is running. You should either use 'virsh edit [vm_name]' or alternatively virsh dump followed by virsh define. If you edit the file directly while some manager is running (like virt-manager in CentOS), your changes will most likely conflict with, or get overwritten by, virt-manager. Nothing critical should happen, but I don't see any reason for encouraging doing it The Wrong Way(TM). Best regards Kenni Problem may be an SELinux problem. Here is the alert. Notice the reference to '/dev/hda' (which is the virtual machine boot disk), and the SELinux context 'virt_content_t' I'm going to create /.autorelable and reboot to ensure the upgrade properly relabled the filesystems. Summary: SELinux is preventing pam_console_app (pam_console_t) getattr to /dev/hda (virt_content_t). Detailed Description: SELinux denied access requested by pam_console_app. It is not expected that this access is required by pam_console_app and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for /dev/hda, restorecon -v '/dev/hda' Yep...each time I try to start the VM, sealert increments this error by one. I created /.autorelable and rebooted. SELinux relabeled everything, but the sealert still fires when I try to start the VM. I did a qemu-img path_to_vm/vm.img and the format is declared 'raw' Therefore I should not be editing the vm.xml file and changing 'raw' to 'qcow2' Problem is definately with the SELlnux labels in the 5.6 upgrade. Dave M ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] How to merge many LDAP Servers to the One Server
Hi , all : I have many LDAP Servers which are 389 LDAP Server on different network . So I want to merge them to the one server. Could someone can give some suggestions? Thanks in advance... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos