Re: [CentOS-es] SOLICITUD

2011-11-10 Thread Ernesto Miranda
Alguna lista de seguridad básica de sistemas que recomendarle al amigo?

El 10/11/11 01:26, David Rosado T. escribió:
 ya me parecia raro, el amigo puede comprometer datos delicados si continua
 así!!



 El 9 de noviembre de 2011 21:16, Ernesto Pérez Estévez cen...@ecualinux.com
 escribió:
 BuenaS nocheS

 ten cuidado con lo que envías, si mal no recuerdo hace un tiempo
 recuerdo que enviaste cierta información sobre los clientes de tu
 organización, algo de unas cuentas y montos y eso.

 cuidado en cómo envías la info, estás equivocándote de dirección de
 correo, esta es una lista de CentOS
 saludos
 epe


 El mié, 09-11-2011 a las 19:02 -0500, Jose Omancio Lopez escribió:
 Buena noche

 Para solicitar anular la factura 1200037628 que corresponde al  cliente
 10130820 suc 3 realizada el dia 3 de noviembre del presente año.

 El caso es el siguiente,  en el mes de octubre  se  re digito la
 información
 en cguno y por error colocamos la factura 1200037628 en el mede de
 octubre
 siendo la factura 1200037328,   ya pronasa entrego informes del mes de
 octubre.



 Pregunta podemos anular esta factura con nota en informix?  Hacerla
 nuevamente en informix con otro número

 Entregarla al cliente y recuperar la 120037628

 En cguno se relizaria  nota a esta factura del mes de octubre y se
 digita la
 nueva

 Y lo que es mas en octubre quedo doble la factura de  este cliente en
 cguno,
 la 1200037328 y la 120037628 con las mismas cantidades  y el mismo día

 Ya se hablo con contabilidad y es la solución que dan.



 Atentamente

 Jose Omancio Lopez

 Sistemas Pronasa

 fijo 6881900 ext 510

 cel 318 649 13 19



 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es



 --
 This message has been scanned for viruses and
 dangerous content by MailScanner, and is
 believed to be clean.

 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es




-- 
Ernesto Miranda R.
Encargado de Infraestructura y Sistemas
Universidad Arturo Prat
Iquique
(+56 57)394388 - (+56 9)78640175

La diferencia entre ser eficaz y eficiente consiste en que el primero sólo 
cumple con el objetivo, mientras que el segundo no sólo lo cumple, sino que lo 
hace generando el
menor gasto de recursos.

___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] SOLICITUD

2011-11-10 Thread Federico Don
Layer 8

El 10 de noviembre de 2011 08:30, Ernesto Miranda
ernesto.mira...@unap.clescribió:

 Alguna lista de seguridad básica de sistemas que recomendarle al amigo?

 El 10/11/11 01:26, David Rosado T. escribió:
  ya me parecia raro, el amigo puede comprometer datos delicados si
 continua
  así!!
 
 
 
  El 9 de noviembre de 2011 21:16, Ernesto Pérez Estévez 
 cen...@ecualinux.com
  escribió:
  BuenaS nocheS
 
  ten cuidado con lo que envías, si mal no recuerdo hace un tiempo
  recuerdo que enviaste cierta información sobre los clientes de tu
  organización, algo de unas cuentas y montos y eso.
 
  cuidado en cómo envías la info, estás equivocándote de dirección de
  correo, esta es una lista de CentOS
  saludos
  epe
 
 
  El mié, 09-11-2011 a las 19:02 -0500, Jose Omancio Lopez escribió:
  Buena noche
 
  Para solicitar anular la factura 1200037628 que corresponde al  cliente
  10130820 suc 3 realizada el dia 3 de noviembre del presente año.
 
  El caso es el siguiente,  en el mes de octubre  se  re digito la
  información
  en cguno y por error colocamos la factura 1200037628 en el mede de
  octubre
  siendo la factura 1200037328,   ya pronasa entrego informes del mes de
  octubre.
 
 
 
  Pregunta podemos anular esta factura con nota en informix?  Hacerla
  nuevamente en informix con otro número
 
  Entregarla al cliente y recuperar la 120037628
 
  En cguno se relizaria  nota a esta factura del mes de octubre y se
  digita la
  nueva
 
  Y lo que es mas en octubre quedo doble la factura de  este cliente en
  cguno,
  la 1200037328 y la 120037628 con las mismas cantidades  y el mismo día
 
  Ya se hablo con contabilidad y es la solución que dan.
 
 
 
  Atentamente
 
  Jose Omancio Lopez
 
  Sistemas Pronasa
 
  fijo 6881900 ext 510
 
  cel 318 649 13 19
 
 
 
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es
 
 
 
  --
  This message has been scanned for viruses and
  dangerous content by MailScanner, and is
  believed to be clean.
 
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es
 
 
 

 --
 Ernesto Miranda R.
 Encargado de Infraestructura y Sistemas
 Universidad Arturo Prat
 Iquique
 (+56 57)394388 - (+56 9)78640175

 La diferencia entre ser eficaz y eficiente consiste en que el primero
 sólo cumple con el objetivo, mientras que el segundo no sólo lo cumple,
 sino que lo hace generando el
 menor gasto de recursos.

 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es

___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS] Misterious hang

2011-11-10 Thread Ljubomir Ljubojevic
Vreme: 11/10/2011 10:03 AM, Fajar Priyanto piše:
 Hi all,
 Recently one my Centos 5.7 VM just crashes at least once a day randomly 
 (hang).

 In /var/log/messages there is nothing at all that there is problem (no
 error, no failure). The log just stops.

 The only change I did before this crashes is I activated LDAP
 authentication, and also auditd. But I don't see any evidence relating
 to it.

 Any clue where to look for the cause?


Best course should be to disable those apps and try without them if 
possible.

Beside that, first find out exact time of the crash (is there any cron 
job associated) and check your file systems for error. Also check is you 
have enough free space.


-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6 Active Directory 2008 R2 kickstart

2011-11-10 Thread John Hodrien
On Tue, 8 Nov 2011, James A. Peltier wrote:

 Hi All,

 Anyone have a working CentOS 6 kickstart file that they are using to bind a
 host to Active Directory 2008 R2?  I'm working on a full AD/Linux
 environment and would like to stand on the shoulders of others if they are
 already doing such a thing.  I'm thinking I need to enable LDAP and
 Kerberos, although Winbind might also be the key here.

 The config will ideally get the UID and GID from the AD UNIX Attributes tab
 and not some random UID/GID hash.

There are quite a few pieces to put together here.

You want a correct /etc/krb5.conf, /etc/sssd/sssd.conf, /etc/samba/smb.conf,
and it makes sense for you to understand them.

This might be a starting point for the sssd end:

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/chap-SSSD_User_Guide-Configuring_Domains.html

That'll happily use AD SFU attributes, and kerberos integration with AD, with
kerberos tickets being used where they can (samba mounts, ssh, etc.).

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Bob Hoffman
This is  a continuation of the thread about redhat vs centos and the 
thought of moving from centos
due to redhats new business model. Forgive the length, but I had to share.

I went ahead and downloaded the 5 year supported version of ubuntu server.
You think centos/redhat is a bit tough or not polished?
One day with ubuntu server and you will look at centos install and setup 
as a god!

Where do I begin?

1- you download the iso, burn a cd. But guess what? It is only a small 
boot setup (about 600mb).
The install actually sets up your eth port and then SLOWLY downloads a 
base set of packages.
Then when you are done with your drive set up, you get to pick a package.
Then it downloads and installs, asking you a few questions as it does.
Then it upgrades itself.
About 40 minutes due to the downloads for me...

2- uses a really lame 1980 DOS version of a text installer. It does not 
and will not use a basic vid driver install
which means your setting up of lvms and such during the install is 
really fun.

3- I don't know about having a server being forced to connect to the 
internet before you can even begin to secure
it up. But the only way to really install it is to do that. Wait til you 
see the insecure firewall setup if gave me too..

4- I picked the virtual host package, as the machine will hold guest 
OS's (presumably ubuntu).

5- booted up fine.

6- uses upstart and init, mixed up a bit. Upstart, BY DESIGN AND 
ACCORDING TO DOCUMENTATION is new and
still being built so they do not want to put any documentation out on it 
yet. This makes chkconfig and things like
that useless. Hence, if you want to know what is running, set to run, 
etc, you need to dig in multiple folders and
read the scripts. There is no other way. What a horror.

7- The install, of the virtual host, added libvirt. It did not however 
install things like virt-install or any other virt software.
Infact, no guest installation tools were added, though things like virsh 
were installed. Sigh.

8- The firewall and network do not have the scripts folder. You have to 
build your own firewall file and add scripts
to make it over ride the stock one via the eth you want to use it 
forwtf?

9- here is the firewall, for a virtual host, that should not have 
anything but port 22 open as far as the initial install
should (at least in my opinion).Ubuntu starts with this
(remember, ubuntu forces you to be online to install and this is how it 
protects your server)

I was not blocked on a single port going from my desktop to my server 
via my router. ALL PORTS were accessible.
This is out of the box. Shell 22 was open from all my computers. Not 
listed in the firewall as open.
You can see it is quite different than the centos stock and I think 
ubuntu is a 'run away' install.

There is no bridge set up in the network interface files either. There 
is no bridge set up.
The firewall is looking at virbr0 but there is no such configuration I 
could find in the
etc folder, anywhere.
Very odd.

# Generated by iptables-save v1.4.4 on Mon Nov  7 23:35:47 2011
*nat
:PREROUTING ACCEPT [84:12492]
:POSTROUTING ACCEPT [9:626]
:OUTPUT ACCEPT [9:626]
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j 
MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j 
MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE
COMMIT
# Completed on Mon Nov  7 23:35:47 2011
# Generated by iptables-save v1.4.4 on Mon Nov  7 23:35:47 2011
*filter
:INPUT ACCEPT [3701:295955]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [793:1276008]
-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT
-A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state 
RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
COMMIT
# Completed on Mon Nov  7 23:35:47 2011


In closing, it is down to suse or back to centos and just pray redhat 
turns around. Maybe scientific linux.
Ubuntu is not ready for prime time and a HUGE step backwards. It is not 
cutting edge and very insecure.

So maybe centos, even if a year or two behind, is way better than ubuntu 
will ever be.


I took a shot at paid support.
You have to send them a contact mail. I did.
After 3 days sent them another.
2 days later, no response from that one either.

down to suse or back to centos.

One good thing about ubuntu was the bug redhat has for the ati onboard 
video is not an issue making
no errors on boot and no long hang time that centos was causing me.



___
CentOS mailing list
CentOS@centos.org

Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread m . roth
Bob Hoffman wrote:
 This is  a continuation of the thread about redhat vs centos and the
 thought of moving from centos due to redhats new business model.
 Forgive the length, but I had to share.

Thank you, very much, for the details (not that I was planning on going to
ubuntu...)

Two things:
snip
 2- uses a really lame 1980 DOS version of a text installer. It does not
 and will not use a basic vid driver install
 which means your setting up of lvms and such during the install is
 really fun.

What's wrong with text mode? I certainly prefer it. Oh, and those menus
came along 2-3 years later g
snip
 6- uses upstart and init, mixed up a bit. Upstart, BY DESIGN AND
 ACCORDING TO DOCUMENTATION is new and
 still being built so they do not want to put any documentation out on it
 yet. This makes chkconfig and things like
 that useless. Hence, if you want to know what is running, set to run,
 etc, you need to dig in multiple folders and
 read the scripts. There is no other way. What a horror.

Yes. Just like the grub ubuntu uses, that is a bloody script, and a .d
directory *full* of files, rather than the clean, simple menu with
RHEL/CentOS.
snip

I don't want to have to read scripts to find out how to configure
something, or make it do something. A README, at the very least, should
have that (not here's the license, go figure out everything else).

From what I've been reading on /., along with gnome 3 and unity, that
wing of the F/OSS movement, presumably in an effort to go head-to-head
with M$ and Apple, are going the same way they are: here's how you do it,
don't try to do it any other way, and we'll make it *REALLY* hard to do it
any other way.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Ljubomir Ljubojevic
Vreme: 11/10/2011 02:44 PM, Bob Hoffman piše:
 In closing, it is down to suse or back to centos and just pray redhat
 turns around. Maybe scientific linux.
 Ubuntu is not ready for prime time and a HUGE step backwards. It is not
 cutting edge and very insecure.

 So maybe centos, even if a year or two behind, is way better than ubuntu
 will ever be.

Since 6.1 is close now, I do not expect delays longer then 6 months, and 
since CR repo exists most of the stuff will come to us much quicker.

ElRepo's Mainline kernel (2.6.39-4.rc6.1.el6.elrepo) was completed 
yesterday, and should pose no problems with CentOS distro. That can, if 
no other option exists help you with kernel/video problems.

-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] what is pirut called under CentOS6?

2011-11-10 Thread Boris Epstein
Hello all,

I noticed that pirut is no longer part of CentOS6. Does anybody know if
there is a different graphical interface to yum that came to replace it?

Thanks.

Boris.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Misterious hang

2011-11-10 Thread m . roth
Fajar Priyanto wrote:
 Hi all,
 Recently one my Centos 5.7 VM just crashes at least once a day randomly
 (hang).

 In /var/log/messages there is nothing at all that there is problem (no
 error, no failure). The log just stops.

 The only change I did before this crashes is I activated LDAP
 authentication, and also auditd. But I don't see any evidence relating
 to it.

 Any clue where to look for the cause?

Two questions: is there anything on the console screen? Does it just hang,
or reboot?

If the latter, and there's nothing in the logs, it's possible activating
openLDAP was just coincidental with the problem, and I'd start worrying
about hardware problems.

 mark, waiting on an FE who's an hour late

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what is pirut called under CentOS6?

2011-11-10 Thread b.j. mcclure
On Thu, 2011-11-10 at 09:23 -0500, Boris Epstein wrote:
 Hello all,
 
 I noticed that pirut is no longer part of CentOS6. Does anybody know if
 there is a different graphical interface to yum that came to replace it?
 
 Thanks.
 
 Boris.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

Have you tried yumex from rpmforge or epel (can't remember which)?

B.J.
CentOS Linux release 6.0 (Final)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what is pirut called under CentOS6?

2011-11-10 Thread John Doe
From: Boris Epstein borepst...@gmail.com

 I noticed that pirut is no longer part of CentOS6. Does anybody know if
 there is a different graphical interface to yum that came to replace it?

A Google search says:
  Pirut was the system level updating tool which PackageKit aims to replace in
RHEL 6.
  http://people.redhat.com/rhughes/media-repo.txt

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Bob Hoffman
Ljubomir Ljubojevic wrote


Vreme: 11/10/2011 02:44 PM, Bob Hoffman pis(e:
/  In closing, it is down to suse or back to centos and just pray redhat
//  turns around. Maybe scientific linux.
//  Ubuntu is not ready for prime time and a HUGE step backwards. It is not
//  cutting edge and very insecure.
//
//  So maybe centos, even if a year or two behind, is way better than ubuntu
//  will ever be.
/
Since 6.1 is close now, I do not expect delays longer then 6 months, and
since CR repo exists most of the stuff will come to us much quicker.

ElRepo's Mainline kernel (2.6.39-4.rc6.1.el6.elrepo) was completed
yesterday, and should pose no problems with CentOS distro. That can, if
no other option exists help you with kernel/video problems.




My only real concern was where red hat was going with this clone war (just a 
yoda line :)  )
I decided to try out some non red hat versions.
I really was excited about ubu and getting somewhat newer packages of things 
and trying them out.
Turns out my experience is very disappointing with ubu.
It makes centos look light years ahead of them in all ways.
One just wishes redhat had a realistic upgrade of some packages (like php) 
during the life.

Where is this CR repo listed at? I did not see it on centos.org.

I may just go with it.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Ljubomir Ljubojevic
Vreme: 11/10/2011 03:36 PM, Bob Hoffman piše:
 Ljubomir Ljubojevic wrote

 My only real concern was where red hat was going with this clone war (just a 
 yoda line :)  )
 I decided to try out some non red hat versions.
 I really was excited about ubu and getting somewhat newer packages of things 
 and trying them out.
 Turns out my experience is very disappointing with ubu.
 It makes centos look light years ahead of them in all ways.
 One just wishes redhat had a realistic upgrade of some packages (like php) 
 during the life.

Remi's repository has those, but is 3rd party repo. 
http://rpms.famillecollet.com/


 Where is this CR repo listed at? I did not see it on centos.org.

 I may just go with it.

http://wiki.centos.org/AdditionalResources/Repositories/CR


-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] questions about epil repo

2011-11-10 Thread mike and bud
hi,

I installed the epil repo and imported the key but everytime i try to
install a package from epil

Public key for proftpd-1.3.3f-1.el6.i686.rpm is not installed

I get this with evry package i try to install 

using centos 6 i686

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] questions about epil repo

2011-11-10 Thread Ljubomir Ljubojevic
Vreme: 11/10/2011 03:46 PM, mike and bud piše:
 hi,

 I installed the epil repo and imported the key but everytime i try to
 install a package from epil

 Public key for proftpd-1.3.3f-1.el6.i686.rpm is not installed

 I get this with evry package i try to install

 using centos 6 i686


You mean EPEL repo?


-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Bowie Bailey
On 11/9/2011 6:23 AM, Adam Tauno Williams wrote:
 SPAMAssasin is a monster and the documentation is *BAD*.  But I've
 gotten it working.  Just post specific questions.

SpamAssassin is not THAT bad.  There is a fair amount of info out there
on how to integrate it with various mail servers. 
(http://wiki.apache.org/spamassassin/IntegratingSA).  The SpamAssassin
mailing list is also quite helpful.

-- 
Bowie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Misterious hang

2011-11-10 Thread Fajar Priyanto
On Thu, Nov 10, 2011 at 10:25 PM,  m.r...@5-cent.us wrote:
 Any clue where to look for the cause?

 Two questions: is there anything on the console screen? Does it just hang,
 or reboot?

 If the latter, and there's nothing in the logs, it's possible activating
 openLDAP was just coincidental with the problem, and I'd start worrying
 about hardware problems.

1. It's a VM, the console looks black. Typing something on keyboard
doesn't bring back the console to alive.
It's also unresponsive to ping.

2. It's just hang. Not reboot. I have to power off the VM and power on.
The ESXi host has many VM in it and only my that VM has problem.

No specific time of hang.

Only thing I can try is to deactivate auditd. Let's see if it survives
more than one day without hang.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] questions about epil repo

2011-11-10 Thread mike and bud
yes.

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Ljubomir Ljubojevic
Sent: Thursday, November 10, 2011 9:54 AM
To: CentOS mailing list
Subject: Re: [CentOS] questions about epil repo

Vreme: 11/10/2011 03:46 PM, mike and bud piše:
 hi,

 I installed the epil repo and imported the key but everytime i try to 
 install a package from epil

 Public key for proftpd-1.3.3f-1.el6.i686.rpm is not installed

 I get this with evry package i try to install

 using centos 6 i686


You mean EPEL repo?


-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your trusty
Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Scott Robbins
On Thu, Nov 10, 2011 at 09:18:43AM -0500, m.r...@5-cent.us wrote:
 Bob Hoffman wrote:


  This is  a continuation of the thread about redhat vs centos and the
  thought of moving from centos due to redhats new business model.
  Forgive the length, but I had to share.
 
 Thank you, very much, for the details (not that I was planning on going to
 ubuntu...)
 
I want to add my thanks as well--we have a few, non-firewalled, Ubuntu
servers that we're working with--the people who do the stuff these
servers do are more experienced with it, and we left it to them.



 Two things:
 snip
  2- uses a really lame 1980 DOS version of a text installer. It does not
  and will not use a basic vid driver install
  which means your setting up of lvms and such during the install is
  really fun.
 
 What's wrong with text mode? I certainly prefer it. Oh, and those menus
 came along 2-3 years later g

Yeah, all kidding aside, I think the whole crippling of the RH text
installer was a step in the wrong direction.  A text installer is
smaller, faster, and doesn't suddenly, as has happened to me with
various video card monitor combos, stop working or have the buttons off
the screen and no way to reach them save to tab, enter, and hope you're
on the right one. 


 snip
  6- uses upstart and init, mixed up a bit. Upstart, BY DESIGN AND
  ACCORDING TO DOCUMENTATION is new and
  still being built so they do not want to put any documentation out on it
  yet. This makes chkconfig and things like
  that useless. Hence, if you want to know what is running, set to run,
  etc, you need to dig in multiple folders and
  read the scripts. There is no other way. What a horror.

Well, Fedora is going to systemd, which seems more designed for
desktop/laptop users, where speed of a boot seems to be the most
important goal, so I suspect RH will get there too.  


 Yes. Just like the grub ubuntu uses, that is a bloody script, and a .d
 directory *full* of files, rather than the clean, simple menu with
 RHEL/CentOS.
 snip
 
Enjoy it while you can.  (Sorry, not being funny here, everyone is going
to grub2 with its 200 plus files in the /boot/grub2 directory.)


 I don't want to have to read scripts to find out how to configure
 something, or make it do something. A README, at the very least, should
 have that (not here's the license, go figure out everything else).

Sorry, but this sounds like RH to me.   I came to CentOS from the BSDs,
where if there was a service running, you could type man name and get
an idea of what it was doing.  My first day on this job, I'd type man
some extra service that RH thought I should have and no clue what it
did only to find, eventually, that there was nothing but a document
telling me it's free software in /usr/share/doc.  (Granted, this is my
memory speaking, and like an old flame one hasn't seen in many years,
the difference between BSD and RH docs probably aren't as drastic as I
remember, but shucks, complaining is FUN!). 

 
 From what I've been reading on /., along with gnome 3 and unity, that
 wing of the F/OSS movement, presumably in an effort to go head-to-head
 with M$ and Apple, are going the same way they are: here's how you do it,
 don't try to do it any other way, and we'll make it *REALLY* hard to do it
 any other way.

Yes, and I greatly fear that RH will follow Fedora along much of that
path. 

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Buffy: Look, I know this new guy's a dork,
but... Well, I have nothing to follow that. He's 
pretty much just a dork.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what is pirut called under CentOS6?

2011-11-10 Thread Scott Robbins
On Thu, Nov 10, 2011 at 06:35:38AM -0800, John Doe wrote:
 From: Boris Epstein borepst...@gmail.com
 
  I noticed that pirut is no longer part of CentOS6. Does anybody know if
  there is a different graphical interface to yum that came to replace it?
 
 A Google search says:
   Pirut was the system level updating tool which PackageKit aims to replace 
 in
 RHEL 6.

For what it's worth, many people on the Fedora forums find that they
have issues with PackageKit still, and use yumex instead.  

The main developer, Richard Hughes, does seem happy to work on bugs when
reported.

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Spike: We like to talk big... vampires do. 'I'm going to destroy 
the world.' That's just tough-guy talk. Strutting around with 
your friends over a pint of blood. The truth is, I _like_ this 
world. You've got...dog racing, Manchester United. And you've 
got people. Billions of people walking around like Happy Meals 
with legs. It's all right here. But then someone comes along 
with a vision. With a real... passion for destruction. Angel 
could pull it off. Good-bye, Picadilly. Farewell, 
Leicester-bloody-Square. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White

On Nov 10, 2011, at 6:44 AM, Bob Hoffman wrote:

 This is  a continuation of the thread about redhat vs centos and the 
 thought of moving from centos
 due to redhats new business model. Forgive the length, but I had to share.
 
 I went ahead and downloaded the 5 year supported version of ubuntu server.
 You think centos/redhat is a bit tough or not polished?
 One day with ubuntu server and you will look at centos install and setup 
 as a god!
 
 Where do I begin?
 
 1- you download the iso, burn a cd. But guess what? It is only a small 
 boot setup (about 600mb).
 The install actually sets up your eth port and then SLOWLY downloads a 
 base set of packages.
 Then when you are done with your drive set up, you get to pick a package.
 Then it downloads and installs, asking you a few questions as it does.
 Then it upgrades itself.
 About 40 minutes due to the downloads for me...

you can turn off networking or unplug the cable if you you only want a base 
install and don't want it to install the latest updates out of the box.

 
 2- uses a really lame 1980 DOS version of a text installer. It does not 
 and will not use a basic vid driver install
 which means your setting up of lvms and such during the install is 
 really fun.

ubuntu server is basic (no x) - it's a small footprint install. Most people who 
do servers prefer this.

As for setting up LVM's and such... it's pretty much the same as any RH... just 
looks different

 3- I don't know about having a server being forced to connect to the 
 internet before you can even begin to secure
 it up. But the only way to really install it is to do that. Wait til you 
 see the insecure firewall setup if gave me too.

again, you don't have to connect to the internet to install

 4- I picked the virtual host package, as the machine will hold guest 
 OS's (presumably ubuntu).
 
 5- booted up fine.
 
 6- uses upstart and init, mixed up a bit. Upstart, BY DESIGN AND 
 ACCORDING TO DOCUMENTATION is new and
 still being built so they do not want to put any documentation out on it 
 yet. This makes chkconfig and things like
 that useless. Hence, if you want to know what is running, set to run, 
 etc, you need to dig in multiple folders and
 read the scripts. There is no other way. What a horror.

RHEL v6 (and CentOS 6) use upstart too... life has all sorts of curveballs

 7- The install, of the virtual host, added libvirt. It did not however 
 install things like virt-install or any other virt software.
 Infact, no guest installation tools were added, though things like virsh 
 were installed. Sigh.
 
 8- The firewall and network do not have the scripts folder. You have to 
 build your own firewall file and add scripts
 to make it over ride the stock one via the eth you want to use it 
 forwtf?

all sorts of packages for firewall management.

apt-cache search firewall | wc -l
152

why be content with the minimal firewall tool when you actually can have a 
choice?

 9- here is the firewall, for a virtual host, that should not have 
 anything but port 22 open as far as the initial install
 should (at least in my opinion).Ubuntu starts with this
 (remember, ubuntu forces you to be online to install and this is how it 
 protects your server)

nothing like chaining lack of understanding to dramatize

 I was not blocked on a single port going from my desktop to my server 
 via my router. ALL PORTS were accessible.
 This is out of the box. Shell 22 was open from all my computers. Not 
 listed in the firewall as open.
 You can see it is quite different than the centos stock and I think 
 ubuntu is a 'run away' install.

sure - there's a difference but you're chaining again.

 There is no bridge set up in the network interface files either. There 
 is no bridge set up.
 The firewall is looking at virbr0 but there is no such configuration I 
 could find in the
 etc folder, anywhere.
 Very odd.
 
 # Generated by iptables-save v1.4.4 on Mon Nov  7 23:35:47 2011
 *nat
 :PREROUTING ACCEPT [84:12492]
 :POSTROUTING ACCEPT [9:626]
 :OUTPUT ACCEPT [9:626]
 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j 
 MASQUERADE --to-ports 1024-65535
 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j 
 MASQUERADE --to-ports 1024-65535
 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE
 COMMIT
 # Completed on Mon Nov  7 23:35:47 2011
 # Generated by iptables-save v1.4.4 on Mon Nov  7 23:35:47 2011
 *filter
 :INPUT ACCEPT [3701:295955]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [793:1276008]
 -A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT
 -A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT
 -A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT
 -A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT
 -A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state 
 RELATED,ESTABLISHED -j ACCEPT
 -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
 -A FORWARD -i virbr0 -o virbr0 -j 

Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread John Hodrien
On Thu, 10 Nov 2011, Scott Robbins wrote:

 Yeah, all kidding aside, I think the whole crippling of the RH text
 installer was a step in the wrong direction.  A text installer is
 smaller, faster, and doesn't suddenly, as has happened to me with
 various video card monitor combos, stop working or have the buttons off
 the screen and no way to reach them save to tab, enter, and hope you're
 on the right one.

I don't entirely disagree, but it didn't make sense to maintain two code
bases.  Even with EL5 there were differences in what you could do in text vs
graphical (can't remember the details but there was something missing RAID/LVM
related).  If you're doing a one off install either you've normally got
functional network to another computer and so can use VNC, or you've got a
usable graphics setup.  It's not *that* often you've not got either.  For
non-one offs then you're installing with kickstart so it doesn't really
matter.

 Well, Fedora is going to systemd, which seems more designed for
 desktop/laptop users, where speed of a boot seems to be the most
 important goal, so I suspect RH will get there too.

upstart/systemd both should both offer more than we're used to.  Having a
service marked as 'should be on' such that it gets kicked back into life if it
crashes isn't necessarily a bad thing.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Ljubomir Ljubojevic
Vreme: 11/10/2011 04:30 PM, Scott Robbins piše:
 Well, Fedora is going to systemd, which seems more designed for
 desktop/laptop users, where speed of a boot seems to be the most
 important goal, so I suspect RH will get there too.

systemd will be much much more once it is done.

 From http://0pointer.de/blog/projects/systemd.html :

A central part of a system that starts up and maintains services should 
be process babysitting: it should watch services. Restart them if they 
shut down. If they crash it should collect information about them, and 
keep it around for the administrator, and cross-link that information 
with what is available from crash dump systems such as abrt, and in 
logging systems like syslog or the audit system.



Status

All the features listed above are already implemented. Right now systemd 
can already be used as a drop-in replacement for Upstart and sysvinit 
(at least as long as there aren't too many native upstart services yet. 
Thankfully most distributions don't carry too many native Upstart 
services yet.)

However, testing has been minimal, our version number is currently at an 
impressive 0. Expect breakage if you run this in its current state. That 
said, overall it should be quite stable and some of us already boot 
their normal development systems with systemd (in contrast to VMs only). 
YMMV, especially if you try this on distributions we developers don't use.

-

So it is not only booting, but also unifying and better controlling 
entire environment.

-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Warriner, Benjamin
I just want to say that this is the stupidest conversation I have ever had 
heard - Screw this I am going back to FreeBSD.


Benjamin Warriner
Technology Specialist
Region 7 Education Service Center
1909 North Longview Street
Kilgore, Texas 75662
Phone: (903) 988-6949
Fax: (903) 988-6965

Region 7 Education Service Center is committed to student success by providing 
quality programs and services that meet or exceed our customers' expectations.


CONFIDENTIALITY NOTICE: This email  attached documents may contain 
confidential information. All information is intended only for the use of the 
named recipient. If you are not the named recipient, you are not authorized to 
read, disclose, copy, distribute or take any action in reliance on the 
information and any action other than immediate delivery to the named recipient 
is strictly prohibited. If you have received this email in error, do not read 
the information and please immediately notify sender by telephone to arrange 
for a return of the original documents. If you are the named recipient you are 
not authorized to reveal any of this information to any other unauthorized 
person. If you did not receive all pages listed or if pages are not legible, 
please immediately notify sender by phone.


[ESC7]http://www.esc7.net/

Please Think Before You Print.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Dhivan Djaganu
On Thu, Nov 10, 2011 at 8:22 AM, Warriner, Benjamin bwarri...@esc7.net wrote:
 I just want to say that this is the stupidest conversation I have ever had 
 heard - Screw this I am going back to FreeBSD.

Thank you, yuou made my Friday
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Thomas Johansson
On 2011-11-10 17:07, Ljubomir Ljubojevic wrote:
 Vreme: 11/10/2011 04:30 PM, Scott Robbins piše:
 Well, Fedora is going to systemd, which seems more designed for
 desktop/laptop users, where speed of a boot seems to be the most
 important goal, so I suspect RH will get there too.

 systemd will be much much more once it is done.

   From http://0pointer.de/blog/projects/systemd.html :

 A central part of a system that starts up and maintains services should
 be process babysitting: it should watch services. Restart them if they
 shut down. If they crash it should collect information about them, and
 keep it around for the administrator, and cross-link that information
 with what is available from crash dump systems such as abrt, and in
 logging systems like syslog or the audit system.


Compare systemd to Solaris Service Management Facility. Solaris SMF is a very 
nice and useful part of Solaris. 
A lot of similarities between systemd and SMF. Solaris is mainly a server OS.

http://en.wikipedia.org/wiki/Service_Management_Facility

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Convert RTF to ANSI color codes

2011-11-10 Thread Sean Carolan
Anyone have a script or utility to convert an RTF file to ANSI?  The
main idea here is to preserve the color codes that are specified in
the RTF file, so they can be displayed easily in a terminal window.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 81, Issue 6

2011-11-10 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than Re: Contents of CentOS-announce digest...


Today's Topics:

   1. CESA-2011:1444 Important CentOS 5 i386 nss Update (Johnny Hughes)
   2. CESA-2011:1444 Important CentOS 5 x86_64 nss  Update
  (Johnny Hughes)
   3. CESA-2011:1349 Important CentOS 4 i386 rpm Update (Johnny Hughes)
   4. CESA-2011:1349 Important CentOS 4 x86_64 rpm  Update
  (Johnny Hughes)
   5. CESA-2011:1360 Moderate CentOS 4 i386 xorg-x11Update
  (Johnny Hughes)
   6. CESA-2011:1360 Moderate CentOS 4 x86_64 xorg-x11  Update
  (Johnny Hughes)
   7. CESA-2011:1371 Moderate CentOS 4 i386 pidgin  Update
  (Johnny Hughes)
   8. CESA-2011:1371 Moderate CentOS 4 x86_64 pidginUpdate
  (Johnny Hughes)
   9. CESA-2011:1377 Moderate CentOS 4 i386 postgresql  Update
  (Johnny Hughes)
  10. CESA-2011:1377 Moderate CentOS 4 x86_64   postgresql Update
  (Johnny Hughes)
  11. CESA-2011:1385 Moderate CentOS 4 i386 kdelibs Update
  (Johnny Hughes)
  12. CESA-2011:1385 Moderate CentOS 4 x86_64 kdelibs   Update
  (Johnny Hughes)
  13. CEBA-2011:1390  CentOS 4 i386 udev Update (Johnny Hughes)
  14. CEBA-2011:1390  CentOS 4 x86_64 udev Update (Johnny Hughes)
  15. CESA-2011:1392 Moderate CentOS 4 i386 httpd Update (Johnny Hughes)
  16. CESA-2011:1392 Moderate CentOS 4 x86_64 httpd Update
  (Johnny Hughes)
  17. CESA-2011:1402 Important CentOS 4 x86_64 freetype Update
  (Johnny Hughes)
  18. CESA-2011:1402 Important CentOS 4 i386 freetype   Update
  (Johnny Hughes)
  19. CEBA-2011:1405  CentOS 4 i386 net-snmp Update (Johnny Hughes)
  20. CEBA-2011:1405  CentOS 4 x86_64 net-snmp Update (Johnny Hughes)
  21. CEEA-2011:1410  CentOS 4 i386 tzdata Update (Johnny Hughes)
  22. CEEA-2011:1410  CentOS 4 x86_64 tzdata Update (Johnny Hughes)
  23. CESA-2011:1437 Critical CentOS 4 i386 firefox Update
  (Johnny Hughes)
  24. CESA-2011:1437 Critical CentOS 4 x86_64 firefox   Update
  (Johnny Hughes)
  25. CESA-2011:1440 Moderate CentOS 4 i386 seamonkey   Update
  (Johnny Hughes)
  26. CESA-2011:1440 Moderate CentOS 4 x86_64 seamonkey Update
  (Johnny Hughes)
  27. CESA-2011:1438 Moderate CentOS 4 i386 thunderbird Update
  (Johnny Hughes)
  28. CESA-2011:1438 Moderate CentOS 4 x86_64   thunderbird Update
  (Johnny Hughes)
  29. CESA-2011:1444 Important CentOS 4 i386 nss Update (Johnny Hughes)
  30. CESA-2011:1444 Important CentOS 4 x86_64 nss  Update
  (Johnny Hughes)
  31. CESA-2011:1437 Critical CentOS 5 i386 firefox Update
  (Johnny Hughes)
  32. CESA-2011:1437 Critical CentOS 5 x86_64 firefox   Update
  (Johnny Hughes)
  33. CESA-2011:1438 Moderate CentOS 5 i386 thunderbird Update
  (Johnny Hughes)
  34. CESA-2011:1438 Moderate CentOS 5 x86_64   thunderbird Update
  (Johnny Hughes)
  35. CEBA-2011:1443 CentOS 5 i386 mktemp FASTTRACK Update
  (Johnny Hughes)
  36. CEBA-2011:1443 CentOS 5 x86_64 mktemp FASTTRACK   Update
  (Johnny Hughes)


--

Message: 1
Date: Wed, 9 Nov 2011 18:44:56 +
From: Johnny Hughes joh...@centos.org
Subject: [CentOS-announce] CESA-2011:1444 Important CentOS 5 i386 nss
Update
To: centos-annou...@centos.org
Message-ID: 2009184456.ga14...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:1444 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1444.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
0d6b110567126eaba97fd477a15b0b47  nss-3.12.10-7.el5_7.i386.rpm
2b660b70fa7c53eb9af77b4d5b4b6f2f  nss-devel-3.12.10-7.el5_7.i386.rpm
a55887374214570a1672386fcca70c6a  nss-pkcs11-devel-3.12.10-7.el5_7.i386.rpm
06462d8c0576365480718a0999dbdd01  nss-tools-3.12.10-7.el5_7.i386.rpm

Source:
f9594ff61b899297caeed11e42cbffc2  nss-3.12.10-7.el5_7.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Wed, 9 Nov 2011 18:44:56 +
From: Johnny Hughes joh...@centos.org
Subject: [CentOS-announce] CESA-2011:1444 Important CentOS 5 x86_64
nss Update
To: centos-annou...@centos.org
Message-ID: 2009184456.ga14...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:1444 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1444.html

The 

Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Lamar Owen
On Thursday, November 10, 2011 10:33:38 AM Craig White wrote:
 [Ubuntu is] different - not better, not worse (save for the fact that with 
 Ubuntu I have been able to get timely updates this year). Also, I much prefer 
 their packaging of Apache  BIND9 to Red Hat's.
[snip]
 If your expectation was that you could take your limited knowledge base and 
 apply it equally across all Linux distributions and expect it to behave as a 
 Red Hat derived system, then all other distributions will disappoint you. 

While this is not the CentOS-advocacy list, I do want to mention that if the 
tradeoff is between a secure (from a firewall and mandatory access control 
(MAC) standpoint) system and a system with more timely updates, I think I'd 
rather have the system that is more secure out of the box on the firewall side, 
SElinux (the upstream-preferred MAC solution) notwithstanding.

Too much choice can be worse than sane defaults; and I say this after doing 
many installs of the following distributions of Linux, and some non-Linux *nix:
SLS (go look it up)
Red Hat Linux (pre-Enterprise) and derivatives, including Fedora, CentOS, SL, 
etc.
SuSE
Caldera OpenServer
TurboLinux
Gentoo Stage 1 (on Alpha, no less)
Debian (multiple toys^H^H^H^Hversions (codename pun), multiple architectures)
Ubuntu/Kubuntu of multiple versions, desktop and server, multiple architectures
And some minor specialized distributions, including the free and the commercial 
versions of Smoothwall.
OpenBSD, multiple architectures
IRIX (6.5.x, Indigo2, O2, and Octane)
Apollo DomainOS 10
Solaris 9 and 10
Tandy Xenix, both V7 based and System III, from 8 inch floppies on a Tandy 6000
ATT/Convergent Unix System V Release 2 on 3B1
4.3BSD on a DEC PDP 11/23 (70MB MFM disk.)

Of the PC things, SLS was probably the most fun to do, but that's primarily 
because that was so long ago and even Windows 95 was available on floppies 
and it was just so cool to run a *nix on the 386SX box the coolness factor 
has definitely worn off.

So I'm in somewhat of a position to comment on what I want and don't want from 
an install, be it text or GUI. Regardless of ease of install, I very much 
want/desire/need something that once the initial no-internet-connection install 
is complete the box comes up with things pretty well locked down by default.  
CentOS/SL/upstream EL does this, by default, and that is good, updates or no 
updates.  Updates are no more of a panacea than firewalls are.

If you doubt the speed at which a non-locked-down system can be exploited, take 
a 1990s vintage copy of, say, RHL 6.2, go ahead and pre-download the last set 
of updates for that distribution, do the install on a public IP with no 
firewall appliance in front of you, and see if you can get the updates 
installed before you're pwned.  

This is the world we live in, especially with advanced persistent threats 
gaining internal network access; firewalling, even on the inside, is no longer 
optional for a server install.  The firewall of course is but one layer in the 
security of the system; MAC helps immensely, as do proactive NAC/IDS/IPS 
setups.  As the theme song of the USA television series 'Monk' says, it's a 
jungle out there
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White

On Nov 10, 2011, at 9:59 AM, Lamar Owen wrote:

 On Thursday, November 10, 2011 10:33:38 AM Craig White wrote:
 [Ubuntu is] different - not better, not worse (save for the fact that with 
 Ubuntu I have been able to get timely updates this year). Also, I much 
 prefer their packaging of Apache  BIND9 to Red Hat's.
 [snip]
 If your expectation was that you could take your limited knowledge base and 
 apply it equally across all Linux distributions and expect it to behave as a 
 Red Hat derived system, then all other distributions will disappoint you. 
 
 While this is not the CentOS-advocacy list, I do want to mention that if the 
 tradeoff is between a secure (from a firewall and mandatory access control 
 (MAC) standpoint) system and a system with more timely updates, I think I'd 
 rather have the system that is more secure out of the box on the firewall 
 side, SElinux (the upstream-preferred MAC solution) notwithstanding.

I would generally agree with this (brevity is not your strongest trait)

Craig
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Misterious hang

2011-11-10 Thread Aditya Hilman



On Nov 10, 2011, at 9:59 PM, Fajar Priyanto fajar...@arinet.org wrote:

 On Thu, Nov 10, 2011 at 10:25 PM,  m.r...@5-cent.us wrote:
 Any clue where to look for the cause?
 
 Two questions: is there anything on the console screen? Does it just hang,
 or reboot?
 
 If the latter, and there's nothing in the logs, it's possible activating
 openLDAP was just coincidental with the problem, and I'd start worrying
 about hardware problems.
 
 1. It's a VM, the console looks black. Typing something on keyboard
 doesn't bring back the console to alive.
 It's also unresponsive to ping.
 
 2. It's just hang. Not reboot. I have to power off the VM and power on.
 The ESXi host has many VM in it and only my that VM has problem.
 
 No specific time of hang.
 
 Only thing I can try is to deactivate auditd. Let's see if it survives
 more than one day without hang.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Misterious hang

2011-11-10 Thread Aditya Hilman


On Nov 10, 2011, at 9:59 PM, Fajar Priyanto fajar...@arinet.org wrote:

 On Thu, Nov 10, 2011 at 10:25 PM,  m.r...@5-cent.us wrote:
 Any clue where to look for the cause?
 
 Two questions: is there anything on the console screen? Does it just hang,
 or reboot?
 
 If the latter, and there's nothing in the logs, it's possible activating
 openLDAP was just coincidental with the problem, and I'd start worrying
 about hardware problems.
 
 1. It's a VM, the console looks black. Typing something on keyboard
 doesn't bring back the console to alive.
 It's also unresponsive to ping.
 
 2. It's just hang. Not reboot. I have to power off the VM and power on.
 The ESXi host has many VM in it and only my that VM has problem.
 
 No specific time of hang.
 
 Only thing I can try is to deactivate auditd. Let's see if it survives
 more than one day without hang.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

Try to using kdump for more information about your problem.
I've experience with some problem which is I can't see in /var/log/messages. So 
I use kdump for what truly happening in my machine.

Regards,
Adit
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Lamar Owen
On Thursday, November 10, 2011 12:16:18 PM Craig White wrote:
 I would generally agree with this (brevity is not your strongest trait)

That would be correct.  As Mark Twain once said, I didn't have time to write a 
short letter, so I wrote a long one instead.  And I type (and read) relatively 
quickly

But on-topic, hopefully, I would say that there are more similarities between 
CentOS and Debian Stable than between Ubuntu LTS and CentOS, primarily due to 
the way security and version upgrades are handled in terms of process, but 
that's my opinion because my use cases are better served by the CentOS way of 
doing things, at least for now.

And I would add Scientific Linux to the comparison mix partially due to the 
difference from CentOS in the way SL handles security-only updates even for 
older point releases.  To see a very clear example of SL's way of doing it, 
please look at the timestamps of the packages in:
ftp://ftp.scientificlinux.org/linux/scientific/50/x86_64/updates/security/
which is the security updates directory for SL 5.0.  Yes, .0, not .7.  

There is no perfect Linux distribution, and there never can be, since there are 
so many differences in the ways users want to use their systems.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Convert RTF to ANSI color codes

2011-11-10 Thread nux
Sean Carolan writes:

 Anyone have a script or utility to convert an RTF file to ANSI?  The
 main idea here is to preserve the color codes that are specified in
 the RTF file, so they can be displayed easily in a terminal window.

Unrtf claim they can convert to HTML while preserving colours. Does that 
help?

--
Nux!
www.nux.ro


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Convert RTF to ANSI color codes

2011-11-10 Thread Lamar Owen
On Thursday, November 10, 2011 11:49:30 AM Sean Carolan wrote:
 Anyone have a script or utility to convert an RTF file to ANSI?  The
 main idea here is to preserve the color codes that are specified in
 the RTF file, so they can be displayed easily in a terminal window.

unrtf --vt

Unrtf is available in the rpmforge/repoforge repository for CentOS 4, 5, and 6.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Bob Hoffman
Lamar Owen wrote


If you doubt the speed at which a non-locked-down system can be exploited, take 
a 1990s vintage copy of
, say, RHL 6.2, go ahead and pre-download the last set of updates for that 
distribution, do the install
  on a public IP with no firewall appliance in front of you, and see if you can 
get the updates
  installed before you're pwned.

--
Completely agree.
I noticed upon a new datacenter install with new ips a large number of 
very strange traffic hits my firewall
logs are full of it.
I feel, and I could be wrong, that scripts run that just check ips that 
usually never answer.
Then one day the ip answers. The script knows it is probably a new 
install and they send it all
at once.

Ubu and centos, different animals. However, the ubu server is touted as 
an enterprise ready system
with commercial support. I found the initial install lacking in that 
regards and the commercial support
sales never answered my mails.
I think ubu is all about the desktop and really getting into the cloud. 
But for a standalone webserver
the initial setup is not ready for prime time.

I think a company with some good techs can build a nice system that can 
then be passed along to their servers.
However, for the small operator I would take a pass on ubu at this time.

The newer stuff is cool, but it lacks the polish of a ready to go 
system. Centos has the polish, but lacks the new stuff.
sigh.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Lamar Owen
On Thursday, November 10, 2011 02:20:25 PM Bob Hoffman wrote:
 The newer stuff is cool, but it lacks the polish of a ready to go 
 system. Centos has the polish, but lacks the new stuff.
 sigh.

And right there is the core (or maybe it's 'sore') point to all of this; it 
really depends on what you need and how much work you have to do to make it fit 
your needs.  And then keeping up with your needs, as they inevitably change.

CentOS is what it is: as close as possible to upstream EL without being 
upstream EL.  Nothing more, nothing less, and bug-for-bug compatible.  If 
that's not what you need, then CentOS won't meet your need.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Les Mikesell
On Thu, Nov 10, 2011 at 1:30 PM, Lamar Owen lo...@pari.edu wrote:

 CentOS is what it is: as close as possible to upstream EL without being 
 upstream EL.  Nothing more, nothing less, and bug-for-bug compatible.  If 
 that's not what you need, then CentOS won't meet your need.

Yes, but that 'possible' part is the problem.  How much reason do you
have to think that it will continue to be possible to be anywhere
close to upstream?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread James A. Peltier


- Original Message -
| This is a continuation of the thread about redhat vs centos and the
| thought of moving from centos
| due to redhats new business model. Forgive the length, but I had to
| share.
| 
| I went ahead and downloaded the 5 year supported version of ubuntu
| server.
| You think centos/redhat is a bit tough or not polished?
| One day with ubuntu server and you will look at centos install and
| setup
| as a god!

Let me start out by saying that I totally agree with you here. Ubiquity is a 
really crappy installer!  I've fought with it for many years.  However, like 
RHEL/CentOS you can use kickstart to install the machine.  It's called kickseed 
in Ubuntu/Debian and maps a subset of the Kickstart features to the 
debian-installer equivalent.

| Where do I begin?
| 
| 1- you download the iso, burn a cd. But guess what? It is only a small
| boot setup (about 600mb).
| The install actually sets up your eth port and then SLOWLY downloads a
| base set of packages.

This, like the RHEL/CentOS installer can be changed if you are using kickstart. 
 If you are are installing from CD it will install packages *that have not been 
updated* from the CD.  However, the installer does check security.ubuntu.com 
and downloads updates during installation for those packages.  This would be 
the equivalent to including the updates and CR repos during a kickstart.

| Then when you are done with your drive set up, you get to pick a
| package.
| Then it downloads and installs, asking you a few questions as it does.
| Then it upgrades itself.
| About 40 minutes due to the downloads for me...

See above statement.  If you are kickstarting, it's no big deal.


| 2- uses a really lame 1980 DOS version of a text installer. It does
| not
| and will not use a basic vid driver install
| which means your setting up of lvms and such during the install is
| really fun.

Then you downloaded the alternative, netboot or server installer.  The desktop 
installer is fully graphical, however, is lacking many features such as LVM and 
RAID support selections.  This is *entirely* different than Anaconda which 
actually works the same whether using the text, VNC or standard graphical 
install.

| 3- I don't know about having a server being forced to connect to the
| internet before you can even begin to secure
| it up. But the only way to really install it is to do that. Wait til
| you
| see the insecure firewall setup if gave me too..

And during installation of RHEL/CentOS how to do secure the box before 
installing?  How about applying updates before putting it in production?  Let's 
be fair here.


| 4- I picked the virtual host package, as the machine will hold guest
| OS's (presumably ubuntu).

Would be covered by a kickstart and a virtual host package is the equivalent to 
the package group in RH speak

| 5- booted up fine.
| 
| 6- uses upstart and init, mixed up a bit. Upstart, BY DESIGN AND
| ACCORDING TO DOCUMENTATION is new and
| still being built so they do not want to put any documentation out on
| it
| yet. This makes chkconfig and things like
| that useless. Hence, if you want to know what is running, set to run,
| etc, you need to dig in multiple folders and
| read the scripts. There is no other way. What a horror.

You are arguing that something is misunderstood by you and thereby horrific.  
As a person who manages several UNIX  UNIX-like operating systems, I would 
agree that it is horrific to have to understand the differences about how to 
enable / disable services on each platform.

| 7- The install, of the virtual host, added libvirt. It did not however
| install things like virt-install or any other virt software.
| Infact, no guest installation tools were added, though things like
| virsh
| were installed. Sigh.

That is correct, those packages are provided as extra tools.  They are not 
needed for virtualization to work.

| 
| 8- The firewall and network do not have the scripts folder. You have
| to
| build your own firewall file and add scripts
| to make it over ride the stock one via the eth you want to use it
| forwtf?

Is it that  you don't understand where they are or that it's just not possible? 
 There's a difference.  Yeah, on RH there is an /etc/sysconfig/network-scripts. 
 On Debian/Ubuntu there is a /etc/network/interfaces file that controls all.  
What's wrong with that.  Personally, I can think of lots of things, but it's my 
opinion.  I'm trying to show that you are making assumptions about how this 
should be compared to how things are before learning the why things are the 
way they are.

| 9- here is the firewall, for a virtual host, that should not have
| anything but port 22 open as far as the initial install
| should (at least in my opinion).Ubuntu starts with this
| (remember, ubuntu forces you to be online to install and this is how
| it
| protects your server)
| 
| I was not blocked on a single port going from my desktop to my server
| via my router. ALL PORTS 

Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread James A. Peltier
- Original Message -
| Bob Hoffman wrote:
snip
 
| Yes. Just like the grub ubuntu uses, that is a bloody script, and a .d
| directory *full* of files, rather than the clean, simple menu with
| RHEL/CentOS.
| snip
| 
| I don't want to have to read scripts to find out how to configure
| something, or make it do something. A README, at the very least,
| should
| have that (not here's the license, go figure out everything else).

Fedora 16 moved to GRUB 2 as well.  It will be in RHEL/CentOS in the next 
release.  Get used to it. ;)

/snip

-- 
James A. Peltier
IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.sfu.ca/itservices
  http://blogs.sfu.ca/people/jpeltier
I will do the best I can with the talent I have

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread John R. Dennison
On Thu, Nov 10, 2011 at 12:42:36PM -0800, James A. Peltier wrote:
 
 Then you downloaded the alternative, netboot or server installer.  The
 desktop installer is fully graphical, however, is lacking many
 features such as LVM and RAID support selections.  This is *entirely*
 different than Anaconda which actually works the same whether using
 the text, VNC or standard graphical install.

It does not.  The text-based anaconda installer is crippled and has been
so for many years.  You are fully unable to exercise full control of the
install process as you can with the gui version.  The problems are well
known and have been for years.





John
-- 
The men the American public admire most extravagantly are the most daring
liars; the men they detest most violently are those who try to tell them
the truth.

-- H. L. Mencken (1880-1956), journalist, satirist, and freethinker, The
   Smart set, Volume 68 (with George Jean Nathan) p 49 (1922)


pgpOjttxKWX7W.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Timothy Murphy
James A. Peltier wrote:

 Fedora 16 moved to GRUB 2 as well.  It will be in RHEL/CentOS in the next
 release.  Get used to it. ;)

Grub2 really seems extraordinarily verbose.
One can't help wondering if the simplicity of the old grub
offended the developers.
Simplicity does not seem to be highly valued nowadays.



-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Christopher Chan
On Wednesday, November 09, 2011 07:23 PM, Adam Tauno Williams wrote:
 On Wed, 2011-11-09 at 01:10 -0500, Jonathan Vomacka wrote:

 CentOS Community
 I was wondering if anyone had a good resource or procedure for a step by
 step in installing a mail server with Centos. There ARE documents on
 google, however almost all that i've found were outdated from 2005. Does
 anyone know where I can find this type of document for a mailserver
 Postfix + MySQL + SpamAssassin + ClamAV + Squirrelmail + Postfixadmin, etc?
  
 MySQL has nothing to do with mail.  If you can avoid using it - avoid
 it. The just-throw-everything-in-mysql approach to life has never made
 sense to me.


Maybe it does not have to but it sure is a wonderful part of a system 
when you host thousands or millions even of mailboxes and want to be 
able to run server farms/clusters that can lookup a shared userinfo 
database. Don't bother giving me crap about generating Berkerly DB files 
every fifteen minutes. Don't bother pointing to ldap too because by your 
definition for mysql, ldap has nothing to with mail too.

 For CLAMAV you need to have clamd running and a milter.  I'm not certain
 what milter's are current - when I set one up they were all had equally
 stale documentation.  Does CentOS currently ship a working clamav
 milter?


RHEL/Centos ships zero milters...

 I have no idea what Postfixadmin is;  I've never seen much point in an
 MTA admin tool.  And MTA is pretty much setup and let it run.


Yeah, for a small setup. And it is not an MTA admin tool. It is a 
userinfo admin tool. When you want shared userinfo databases for an MTA 
like postfix/sendmail/qmail/exim, you tend to use mysql or postgresql.

 Squirelmail is an application; just use their documentation [although
 I'd recommend Horde over Squirrel].


Yes, horde + sieve + dovecot + dovecot sieve extension is kinda handy 
for generating filter recipes. Who needs crap like maildrop or procmail 
when dovecot provides the lda, the pop/imap servers and the glue between 
postfix and the userinfo db?

 You don't mention a mail store [IMAP Server]?  Such as Cyrus IMAP.
 Something for Postfix to deliver the mail too.


Mail store != imap server. Mail store = structure for mboxes/maildirs.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White
On Thu, 2011-11-10 at 14:30 -0500, Lamar Owen wrote:
 On Thursday, November 10, 2011 02:20:25 PM Bob Hoffman wrote:
  The newer stuff is cool, but it lacks the polish of a ready to go 
  system. Centos has the polish, but lacks the new stuff.
  sigh.
 
 And right there is the core (or maybe it's 'sore') point to all of this; it 
 really depends on what you need and how much work you have to do to make it 
 fit your needs.  And then keeping up with your needs, as they inevitably 
 change.
 
 CentOS is what it is: as close as possible to upstream EL without being 
 upstream EL.  Nothing more, nothing less, and bug-for-bug compatible.  If 
 that's not what you need, then CentOS won't meet your need.

close?

May 19, 2011 (RH 6.1)

I thought the term 'close' only applied to horseshoes and hand grenades.

Given the track record for CentOS for v 6, it's pretty clear that
installing it means that you are likely to have deployed servers that
will lag for months without security updates and it's awful easy to set
up iptables  ;-)  I'm not saying this to disparage the developers
because I'm sure that they're doing the best that they can but I can't
tell my friends/clients/employer/etc. that I can recommend using CentOS
knowing the struggles they are having getting out releases  updates.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Ljubomir Ljubojevic
When all of you mean to stop wasting our time bickering among yourself?

If there was ANY chance ANY of you would change it's mind then I would 
be willing to endure senseless flame war. Since that is not likely to 
happen in next 100 years, I ask you nicely to finish this thread with 
we agree to disagree policy.

Thank you.

-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Christopher Chan
On Thursday, November 10, 2011 11:33 PM, Craig White wrote:

 7- The install, of the virtual host, added libvirt. It did not however
 install things like virt-install or any other virt software.
 Infact, no guest installation tools were added, though things like virsh
 were installed. Sigh.

 8- The firewall and network do not have the scripts folder. You have to
 build your own firewall file and add scripts
 to make it over ride the stock one via the eth you want to use it
 forwtf?
  
 
 all sorts of packages for firewall management.

 apt-cache search firewall | wc -l
 152

 why be content with the minimal firewall tool when you actually can have a 
 choice?


What? Those crap choices like ufw or fwbuilder? Oh, btw, if there really 
was 152 blooming choices, they would on the most part be total crap.

I like how you seem to think that stuff like upsd, stone, perdition, 
libiax-dev for a small sample are somehow firewall related.

Managing a firewall on Ubuntu is retarded and I have to write my own 
scripts to hook into interfaces so that I can a sane set of iptables 
rules loaded/unloaded without the mess from ufw/fwbuilder/whateverothercrap.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Christopher Chan
On Friday, November 11, 2011 12:37 AM, Thomas Johansson wrote:

 Compare systemd to Solaris Service Management Facility. Solaris SMF is a very 
 nice and useful part of Solaris.
 A lot of similarities between systemd and SMF. Solaris is mainly a server OS.

 http://en.wikipedia.org/wiki/Service_Management_Facility



Why can't people just use daemontools?

It's been available before these I believe :-D
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White
On Fri, 2011-11-11 at 11:07 +0800, Christopher Chan wrote:
 On Thursday, November 10, 2011 11:33 PM, Craig White wrote:
 
  7- The install, of the virtual host, added libvirt. It did not however
  install things like virt-install or any other virt software.
  Infact, no guest installation tools were added, though things like virsh
  were installed. Sigh.
 
  8- The firewall and network do not have the scripts folder. You have to
  build your own firewall file and add scripts
  to make it over ride the stock one via the eth you want to use it
  forwtf?
   
  
  all sorts of packages for firewall management.
 
  apt-cache search firewall | wc -l
  152
 
  why be content with the minimal firewall tool when you actually can have a 
  choice?
 
 
 What? Those crap choices like ufw or fwbuilder? Oh, btw, if there really 
 was 152 blooming choices, they would on the most part be total crap.
 
 I like how you seem to think that stuff like upsd, stone, perdition, 
 libiax-dev for a small sample are somehow firewall related.
 
 Managing a firewall on Ubuntu is retarded and I have to write my own 
 scripts to hook into interfaces so that I can a sane set of iptables 
 rules loaded/unloaded without the mess from ufw/fwbuilder/whateverothercrap.

don't know a thing about ufw or fwbuilder but if you want simplistic
firewall rules (ie, RH/Fedora /etc/init.d/iptables) Ubuntu has
iptables-persistent which gets the job done just fine. Of course someone
with your skills would have no problem migrating
RH's /etc/init.d/iptables to Ubuntu (estimated time, 10 minutes).

If you want something heavy duty you could simply 'apt-get install
shorewall'' but I suspect that you just want to be pedantic. The point
that Lamar made - that was that there wasn't any firewall installed by
default at all, which I agreed with.

Now if it's package quantity vs. quality type of discussion that you
want to have... yes, there are some packages that Ubuntu has that don't
interest me in the least but the quantity can be mind boggling. For
example (and in my sphere of interest), Ubuntu has pre-built packages
for netatalk, davical  bacula which I use everywhere and I am building
them from source for RHEL or CentOS deployments. To be fair however, I
did have to build cyrus-imapd from source on Ubuntu whereas Simon's
packages for RHEL/CentOS are terrific.

Then there's the utility of aptitude/apt-get vs. yum where I can deploy
and dynamically manage 'holding' packages on Ubuntu which is simply not
available with an rpm/yum package provider. Yum/rpm is good, apt/dpkg is
better.

Linux is pretty much still Linux and one thing has become obvious since
I started playing around with Ubuntu the last 7 or 8 months... that my
skills have improved by learning how the other half lives. I still love
Red Hat stuff, still use Fedora for my desktop. Some things Ubuntu does
better, some things I much prefer Red Hat methodology. In the end, it's
still Linux.

I just can't embrace installing an OS whose security updates have
consistently lagged 3-6 months behind.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread John R. Dennison
On Thu, Nov 10, 2011 at 08:49:33PM -0700, Craig White wrote:
 
 I just can't embrace installing an OS whose security updates have
 consistently lagged 3-6 months behind.

You've made this point, repeatedly, for the past few months.  It's
getting old; we are all well aware of your feelings about this.  So
perhaps we can just let it go now?  Please?

This thread is an example of what is wrong with this list.  There is
little to no value to be had with threads of this nature.  This isn't an
advocacy list; nor is it a list to beat about the merits of one of
server distro versus another.





John
-- 
Mankind is a single body and each nation a part of that body.  We must
never say What does it matter to me if some part of the world is ailing?
If there is such an illness, we must concern ourselves with it as though we
were having that illness.

Mustafa Kemal Ataturk (1881-1938), founder and first President of the
Republic of Turkey


pgpeh8fdOZnJS.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Christopher Chan
On Friday, November 11, 2011 11:49 AM, Craig White wrote:

 If you want something heavy duty you could simply 'apt-get install
 shorewall'' but I suspect that you just want to be pedantic. The point
 that Lamar made - that was that there wasn't any firewall installed by
 default at all, which I agreed with.


I have seen shorewall generated rules. Far way too much branching off 
and following rule paths is a pain. For small setups, yes, it will do.

But if you need to handle high traffic and therefore optimize the rules, 
forget it.

 Now if it's package quantity vs. quality type of discussion that you
 want to have... yes, there are some packages that Ubuntu has that don't
 interest me in the least but the quantity can be mind boggling. For
 example (and in my sphere of interest), Ubuntu has pre-built packages
 for netatalk, davical  bacula which I use everywhere and I am building
 them from source for RHEL or CentOS deployments. To be fair however, I
 did have to build cyrus-imapd from source on Ubuntu whereas Simon's
 packages for RHEL/CentOS are terrific.


1) Not all packages in the provided repos are Canonical supported. Most 
of them are actually third-party aka 'community' maintained or 
unmaintained even and 2) You can get a similar if lesser experience with 
regards to quantity if you also add third-party repos on RHEL/Centos.

Just because you don't get third-party packages available without a bit 
of tinkering is not that much of a plus for Ubuntu.

 Then there's the utility of aptitude/apt-get vs. yum where I can deploy
 and dynamically manage 'holding' packages on Ubuntu which is simply not
 available with an rpm/yum package provider. Yum/rpm is good, apt/dpkg is
 better.


I can play that game too. apt/dpkg is good but yum/rpm is better because 
it gives me 1) checksums and 2) multi-arch support.

 Linux is pretty much still Linux and one thing has become obvious since
 I started playing around with Ubuntu the last 7 or 8 months... that my
 skills have improved by learning how the other half lives. I still love
 Red Hat stuff, still use Fedora for my desktop. Some things Ubuntu does
 better, some things I much prefer Red Hat methodology. In the end, it's
 still Linux.

 I just can't embrace installing an OS whose security updates have
 consistently lagged 3-6 months behind.



I would not have said much if you have pushed Debian but Ubuntu? It's a 
joke. I only happen to have one Ubuntu Hardy server because I did not 
have a Centos disk at hand when I had to do an emergency installation of 
a box to take over the predecessor's read RH9 squid/nat box. I have no 
qualms learning the ropes of another distro but the Ubuntu distro takes 
the cake for faking a community and having tools that are way behind 
those available with RHEL/Centos. Does d-i support/have lvm on raid 
recipes yet?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White
On Thu, 2011-11-10 at 22:07 -0600, John R. Dennison wrote:
 On Thu, Nov 10, 2011 at 08:49:33PM -0700, Craig White wrote:
  
  I just can't embrace installing an OS whose security updates have
  consistently lagged 3-6 months behind.
 
 You've made this point, repeatedly, for the past few months.  It's
 getting old; we are all well aware of your feelings about this.  So
 perhaps we can just let it go now?  Please?
 
 This thread is an example of what is wrong with this list.  There is
 little to no value to be had with threads of this nature.  This isn't an
 advocacy list; nor is it a list to beat about the merits of one of
 server distro versus another.

If timely updates are not a key factor for you, then WBEL is a great
distro.  If timely updates are the most important thing you consider
about the distro you want, then WBEL might not be a fit for you

http://beau.org/pipermail/whitebox-users/2004-December/004761.html

I'm not advocating for any distribution - I am sure I could probably
work with any of them.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White
On Fri, 2011-11-11 at 12:12 +0800, Christopher Chan wrote:

 I would not have said much if you have pushed Debian but Ubuntu? It's a 
 joke. I only happen to have one Ubuntu Hardy server because I did not 
 have a Centos disk at hand when I had to do an emergency installation of 
 a box to take over the predecessor's read RH9 squid/nat box. I have no 
 qualms learning the ropes of another distro but the Ubuntu distro takes 
 the cake for faking a community and having tools that are way behind 
 those available with RHEL/Centos. Does d-i support/have lvm on raid 
 recipes yet?

yeah - community... see SADFL

http://www.ubuntu.com/project/about-ubuntu/governance

;-)

I don't know what you mean by 'd-1'
Seems you can do pretty much anything with their version of kickstart
(apparently they have incorporated anaconda now but I haven't ever used
it) and they also have preseed and I am using puppet and foreman so I
have other methodologies.

Craig




-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread R P Herrold
On Thu, 10 Nov 2011, Craig White wrote:

 I just can't embrace installing an OS whose security updates have
 ...

Then please leave -- your sustained venom and bile are not 
needed, wanted, nor useful here, let alone remotely on topic

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Les Mikesell
On Thu, Nov 10, 2011 at 6:48 PM, Christopher Chan
christopher.c...@bradbury.edu.hk wrote:

 For CLAMAV you need to have clamd running and a milter.  I'm not certain
 what milter's are current - when I set one up they were all had equally
 stale documentation.  Does CentOS currently ship a working clamav
 milter?


 RHEL/Centos ships zero milters...

Rpmforge has MimeDefang and clamav packages.   Not sure how hard it is
to adapt MimeDefang to postscript but I think it is possible these
days.

 You don't mention a mail store [IMAP Server]?  Such as Cyrus IMAP.
 Something for Postfix to deliver the mail too.


 Mail store != imap server. Mail store = structure for mboxes/maildirs.


Cyrus is sort of its own thing with its own mail store.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread John R Pierce
On 11/10/11 4:48 PM, Christopher Chan wrote:
 You don't mention a mail store [IMAP Server]?  Such as Cyrus IMAP.
   Something for Postfix to deliver the mail too.
   
 Mail store != imap server. Mail store = structure for mboxes/maildirs.

indeed, reader protocol servers like imap, pop3, are a seperate category 
from the traditional MTA, MDA, MUA triad.   in a sense, they are a MUA 
proxy or service, but they aren't the MUA, thats the client application 
(Thunderbird, etc).   In spite of some claims to the contrary[1], they 
aren't the MDA, thats something like procmail which the MTA uses to 
deliver the mail to a mailbox.



[1] first google hit on related keywords claimed imap/pop were part of 
the MDA.

-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Christopher Chan
On Friday, November 11, 2011 01:00 PM, Les Mikesell wrote:
 On Thu, Nov 10, 2011 at 6:48 PM, Christopher Chan
 christopher.c...@bradbury.edu.hk  wrote:

  
 For CLAMAV you need to have clamd running and a milter.  I'm not certain
 what milter's are current - when I set one up they were all had equally
 stale documentation.  Does CentOS currently ship a working clamav
 milter?


 RHEL/Centos ships zero milters...
  
 Rpmforge has MimeDefang and clamav packages.   Not sure how hard it is
 to adapt MimeDefang to postscript but I think it is possible these
 days.


 You don't mention a mail store [IMAP Server]?  Such as Cyrus IMAP.
 Something for Postfix to deliver the mail too.


 Mail store != imap server. Mail store = structure for mboxes/maildirs.

  
 Cyrus is sort of its own thing with its own mail store.


Sorry, I keep forgetting about that crap...

Never touched it and never wanted to after I heard the screams from a 
friend who used cyrus and swore by it until he got corrupt mailboxes. 
Had to help setup postfix, dovecot and vpopmail iirc.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Craig White
On Thu, 2011-11-10 at 23:49 -0500, R P Herrold wrote:
 On Thu, 10 Nov 2011, Craig White wrote:
 
  I just can't embrace installing an OS whose security updates have
  ...
 
 Then please leave -- your sustained venom and bile are not 
 needed, wanted, nor useful here, let alone remotely on topic

what venom? what bile?

For the record, I wasn't the one who brought up Ubuntu

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Les Mikesell
On Thu, Nov 10, 2011 at 11:23 PM, Christopher Chan
christopher.c...@bradbury.edu.hk wrote:


 Mail store != imap server. Mail store = structure for mboxes/maildirs.


 Cyrus is sort of its own thing with its own mail store.


 Sorry, I keep forgetting about that crap...

 Never touched it and never wanted to after I heard the screams from a
 friend who used cyrus and swore by it until he got corrupt mailboxes.
 Had to help setup postfix, dovecot and vpopmail iirc.

Some people (or unreliable hardware...) can break anything.  There are
some very large and apparently successful cyrus installations. Until
dovecot started optimistically indexing it wasn't particularly good in
large systems.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread Christopher Chan
On Friday, November 11, 2011 12:33 PM, Craig White wrote:
 On Fri, 2011-11-11 at 12:12 +0800, Christopher Chan wrote:


 I would not have said much if you have pushed Debian but Ubuntu? It's a
 joke. I only happen to have one Ubuntu Hardy server because I did not
 have a Centos disk at hand when I had to do an emergency installation of
 a box to take over the predecessor's read RH9 squid/nat box. I have no
 qualms learning the ropes of another distro but the Ubuntu distro takes
 the cake for faking a community and having tools that are way behind
 those available with RHEL/Centos. Does d-i support/have lvm on raid
 recipes yet?
  
 
 yeah - community... see SADFL

 http://www.ubuntu.com/project/about-ubuntu/governance

 ;-)

 I don't know what you mean by 'd-1'


d-i = debian-installer which is what Ubuntu uses for its text installer.

 Seems you can do pretty much anything with their version of kickstart
 (apparently they have incorporated anaconda now but I haven't ever used
 it) and they also have preseed and I am using puppet and foreman so I
 have other methodologies.


Oh, things have improved have they? Last I tried, you could not get d-i 
to do lvm on raid whether on the console or through preseed. Are you 
telling me that you can now get that done with ks files when you could 
not with preseed or manually?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Craig White
On Fri, 2011-11-11 at 13:23 +0800, Christopher Chan wrote:

 Sorry, I keep forgetting about that crap...
 
 Never touched it and never wanted to after I heard the screams from a 
 friend who used cyrus and swore by it until he got corrupt mailboxes. 
 Had to help setup postfix, dovecot and vpopmail iirc.

been using cyrus-imapd for years - eats dovecot for lunch in terms of
features/performance/reliability/scaling/flexibility and just about
every other imaginable use for an IMAP server.

Might have thought it would be useful to have some firsthand experience
before you labeled something as crap.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread R P Herrold
On Fri, 11 Nov 2011, Christopher Chan wrote:

 Oh, things have improved have they? Last I tried, you could not get d-i

Please take this elsewhere -- it has nothing to do with centos

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Craig White
On Thu, 2011-11-10 at 21:12 -0800, John R Pierce wrote:
 On 11/10/11 4:48 PM, Christopher Chan wrote:
  You don't mention a mail store [IMAP Server]?  Such as Cyrus IMAP.
Something for Postfix to deliver the mail too.

  Mail store != imap server. Mail store = structure for mboxes/maildirs.
 
 indeed, reader protocol servers like imap, pop3, are a seperate category 
 from the traditional MTA, MDA, MUA triad.   in a sense, they are a MUA 
 proxy or service, but they aren't the MUA, thats the client application 
 (Thunderbird, etc).   In spite of some claims to the contrary[1], they 
 aren't the MDA, thats something like procmail which the MTA uses to 
 deliver the mail to a mailbox.
 
 
 
 [1] first google hit on related keywords claimed imap/pop were part of 
 the MDA.

LMTP

http://en.wikipedia.org/wiki/Local_Mail_Transfer_Protocol

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Redhat vs centos vs ubuntu

2011-11-10 Thread R P Herrold
On Thu, 10 Nov 2011, Craig White wrote:

 On Thu, 2011-11-10 at 23:49 -0500, R P Herrold wrote:

 Then please leave -- your sustained venom and bile are not
 needed, wanted, nor useful here, let alone remotely on topic
 
 what venom? what bile?

 For the record, I wasn't the one who brought up Ubuntu

nor did I mention non-centos distributions --- take your cruft 
elsewhere ... this thread is over

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Christopher Chan
On Friday, November 11, 2011 01:28 PM, Craig White wrote:
 On Fri, 2011-11-11 at 13:23 +0800, Christopher Chan wrote:


 Sorry, I keep forgetting about that crap...

 Never touched it and never wanted to after I heard the screams from a
 friend who used cyrus and swore by it until he got corrupt mailboxes.
 Had to help setup postfix, dovecot and vpopmail iirc.
  
 
 been using cyrus-imapd for years - eats dovecot for lunch in terms of
 features/performance/reliability/scaling/flexibility and just about
 every other imaginable use for an IMAP server.


Hmm, I must give it a try one day then since it comes with RHEL/Centos.

 Might have thought it would be useful to have some firsthand experience
 before you labeled something as crap.


True.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Christopher Chan
On Friday, November 11, 2011 01:31 PM, Craig White wrote:
 On Thu, 2011-11-10 at 21:12 -0800, John R Pierce wrote:

 On 11/10/11 4:48 PM, Christopher Chan wrote:
  
 You don't mention a mail store [IMAP Server]?  Such as Cyrus IMAP.
  
   Something for Postfix to deliver the mail too.


 Mail store != imap server. Mail store = structure for mboxes/maildirs.

 indeed, reader protocol servers like imap, pop3, are a seperate category
 from the traditional MTA, MDA, MUA triad.   in a sense, they are a MUA
 proxy or service, but they aren't the MUA, thats the client application
 (Thunderbird, etc).   In spite of some claims to the contrary[1], they
 aren't the MDA, thats something like procmail which the MTA uses to
 deliver the mail to a mailbox.



 [1] first google hit on related keywords claimed imap/pop were part of
 the MDA.
  
 
 LMTP

 http://en.wikipedia.org/wiki/Local_Mail_Transfer_Protocol



That's still nothing to do with imap/pop3 servers. dovecot provides an 
LDA for just that purpose but it is separate from dovecot's imap/pop3 
servers.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Craig White
On Fri, 2011-11-11 at 13:40 +0800, Christopher Chan wrote:
 On Friday, November 11, 2011 01:31 PM, Craig White wrote:

  LMTP
 
  http://en.wikipedia.org/wiki/Local_Mail_Transfer_Protocol
 
 
 
 That's still nothing to do with imap/pop3 servers. dovecot provides an 
 LDA for just that purpose but it is separate from dovecot's imap/pop3 
 servers.

root@srv2:~# grep lmtp /etc/postfix/main.cf | grep -v '#'
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp

postfix will use it (perhaps because I use cyrus) and cyrus (like some
dovecot installs) uses sieve.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix mail server procedure

2011-11-10 Thread Craig White
On Fri, 2011-11-11 at 13:38 +0800, Christopher Chan wrote:
 On Friday, November 11, 2011 01:28 PM, Craig White wrote:
  On Fri, 2011-11-11 at 13:23 +0800, Christopher Chan wrote:
 
 
  Sorry, I keep forgetting about that crap...
 
  Never touched it and never wanted to after I heard the screams from a
  friend who used cyrus and swore by it until he got corrupt mailboxes.
  Had to help setup postfix, dovecot and vpopmail iirc.
   
  
  been using cyrus-imapd for years - eats dovecot for lunch in terms of
  features/performance/reliability/scaling/flexibility and just about
  every other imaginable use for an IMAP server.
 
 
 Hmm, I must give it a try one day then since it comes with RHEL/Centos.

I should mention that even though RHEL (Fedora/CentOS/SL/etc.) uses the
invoca.ch packages but they are older and never have the 'autocreate'
patches.

I heavily recommend that you get the SRPM from invoca.ch directly (Simon
- who I believe monitors this list) and rebuild (dead simple)

http://www.invoca.ch/pub/packages/cyrus-imapd/

The 'autocreate' patches are awesome. Here is info on what they do (and
the patch code itself).

http://www.vx.sk/download/patches/cyrus-imapd/cyrus-imapd-2.4.4-autocreate-0.10-0.patch

but if you use Simon's packages, the autocreate patch is already
included (no fuss, no muss).

Autocreate INBOX and subfolders on first LOGIN, first POST, auto 'sieve'
rules and auto subscribe to various folders including 'shared' or
'public' folders

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos