Re: [CentOS] Centos 6.6, apparent xfs corruption

2015-09-21 Thread James A. Peltier


- Original Message -
| -BEGIN PGP SIGNED MESSAGE-
| Hash: SHA1
| 
| I think you need to read this from the bottom up:
| 
| "Corruption of in-memory data detected.  Shutting down filesystem"
| so XFS calls xfs_do_force_shutdown to shut down the filesystem.  The
| call comes from fs/xfs/xfs_trans.c which fails, and so reports
| "Internal error xfs_trans_cancel".
| 
| In other words, I would look at the memory corruption first.  This
| _could_ be a kernel problem, but I would suggest starting with an
| extended memory check, it smells to me of a failing chip.
| 
| Just my 2d worth!
| 
| Martin
| 
| On 21/09/15 21:41, Nicholas Geovanis wrote:
| > Hi all - After several months of worry-free operation, we received
| > the following kernel messages about an xfs filesystem running under
| > CentOS 6.6. The proximate causes appear to be "Internal error
| > xfs_trans_cancel" and "Corruption of in-memory data detected.
| > Shutting down filesystem". The filesystem is back up, mounted,
| > appears to be working OK underlying a Splunk datastore. Does anyone
| > have a suggestion on diagnosis or known problems? Many
| > thanks.Nick Geo
| > 
| > Sep 18 20:35:15 gries kernel: XFS (dm-2): Internal error
| > xfs_trans_cancel at line 1948 of file fs/xfs/xfs_trans.c.  Caller
| > 0xa01f1388 Sep 18 20:35:15 gries kernel: Sep 18 20:35:15
| > gries kernel: Pid: 24005, comm: splunkd Not tainted
| > 2.6.32-504.8.1.el6.x86_64 #1 Sep 18 20:35:15 gries kernel: Call
| > Trace: Sep 18 20:35:15 gries kernel: [] ?
| > xfs_error_report+0x3f/0x50 [xfs] Sep 18 20:35:15 gries kernel:
| > [] ? xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15
| > gries kernel: [] ? xfs_trans_cancel+0xf5/0x120
| > [xfs] Sep 18 20:35:15 gries kernel: [] ?
| > xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 gries kernel:
| > [] ? __do_fault+0x469/0x530 Sep 18 20:35:15 gries
| > kernel: [] ? xfs_vn_rename+0x66/0x70 [xfs] Sep 18
| > 20:35:15 gries kernel: [] ?
| > vfs_rename+0x419/0x480 Sep 18 20:35:15 gries kernel:
| > [] ? sys_renameat+0x309/0x3a0 Sep 18 20:35:15
| > gries kernel: [] ?
| > _atomic_dec_and_lock+0x55/0x80 Sep 18 20:35:15 gries kernel:
| > [] ? mntput_no_expire+0x30/0x110 Sep 18 20:35:15
| > gries kernel: [] ?
| > audit_syscall_entry+0x1d7/0x200 Sep 18 20:35:15 gries kernel:
| > [] ? sys_rename+0x1b/0x20 Sep 18 20:35:15 gries
| > kernel: [] ? system_call_fastpath+0x16/0x1b Sep
| > 18 20:35:15 gries kernel: XFS (dm-2): xfs_do_force_shutdown(0x8)
| > called from line 1949 of file fs/xfs/xfs_trans.c.  Return address
| > = 0xa01f2e6e Sep 18 20:35:15 gries kernel: XFS (dm-2):
| > Corruption of in-memory data detected.  Shutting down filesystem
| > Sep 18 20:35:15 gries kernel: XFS (dm-2): Please umount the
| > filesystem and rectify the problem(s) Sep 18 20:35:27 gries kernel:
| > XFS (dm-2): xfs_log_force: error 5 returned.

Do you have any XFS optimizations enabled in /etc/fstab such logbsize, 
nobarrier, etc?  is the filesystem full?  What percentage of the file system is 
available?  Some optimizations will cause a similar type of error when there is 
insufficient space for the extent allocations to take place or for file system 
rebalances to happen.

-- 
James A. Peltier
IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone   : 604-365-6432
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.sfu.ca/itservices
Twitter : @sfu_rcg
Powering Engagement Through Technology
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6.6, apparent xfs corruption

2015-09-21 Thread J Martin Rushton
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I think you need to read this from the bottom up:

"Corruption of in-memory data detected.  Shutting down filesystem"
so XFS calls xfs_do_force_shutdown to shut down the filesystem.  The
call comes from fs/xfs/xfs_trans.c which fails, and so reports
"Internal error xfs_trans_cancel".

In other words, I would look at the memory corruption first.  This
_could_ be a kernel problem, but I would suggest starting with an
extended memory check, it smells to me of a failing chip.

Just my 2d worth!

Martin

On 21/09/15 21:41, Nicholas Geovanis wrote:
> Hi all - After several months of worry-free operation, we received
> the following kernel messages about an xfs filesystem running under
> CentOS 6.6. The proximate causes appear to be "Internal error
> xfs_trans_cancel" and "Corruption of in-memory data detected.
> Shutting down filesystem". The filesystem is back up, mounted,
> appears to be working OK underlying a Splunk datastore. Does anyone
> have a suggestion on diagnosis or known problems? Many
> thanks.Nick Geo
> 
> Sep 18 20:35:15 gries kernel: XFS (dm-2): Internal error
> xfs_trans_cancel at line 1948 of file fs/xfs/xfs_trans.c.  Caller
> 0xa01f1388 Sep 18 20:35:15 gries kernel: Sep 18 20:35:15
> gries kernel: Pid: 24005, comm: splunkd Not tainted 
> 2.6.32-504.8.1.el6.x86_64 #1 Sep 18 20:35:15 gries kernel: Call
> Trace: Sep 18 20:35:15 gries kernel: [] ? 
> xfs_error_report+0x3f/0x50 [xfs] Sep 18 20:35:15 gries kernel:
> [] ? xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15
> gries kernel: [] ? xfs_trans_cancel+0xf5/0x120
> [xfs] Sep 18 20:35:15 gries kernel: [] ?
> xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 gries kernel:
> [] ? __do_fault+0x469/0x530 Sep 18 20:35:15 gries
> kernel: [] ? xfs_vn_rename+0x66/0x70 [xfs] Sep 18
> 20:35:15 gries kernel: [] ?
> vfs_rename+0x419/0x480 Sep 18 20:35:15 gries kernel:
> [] ? sys_renameat+0x309/0x3a0 Sep 18 20:35:15
> gries kernel: [] ? 
> _atomic_dec_and_lock+0x55/0x80 Sep 18 20:35:15 gries kernel:
> [] ? mntput_no_expire+0x30/0x110 Sep 18 20:35:15
> gries kernel: [] ? 
> audit_syscall_entry+0x1d7/0x200 Sep 18 20:35:15 gries kernel:
> [] ? sys_rename+0x1b/0x20 Sep 18 20:35:15 gries
> kernel: [] ? system_call_fastpath+0x16/0x1b Sep
> 18 20:35:15 gries kernel: XFS (dm-2): xfs_do_force_shutdown(0x8)
> called from line 1949 of file fs/xfs/xfs_trans.c.  Return address
> = 0xa01f2e6e Sep 18 20:35:15 gries kernel: XFS (dm-2):
> Corruption of in-memory data detected.  Shutting down filesystem 
> Sep 18 20:35:15 gries kernel: XFS (dm-2): Please umount the
> filesystem and rectify the problem(s) Sep 18 20:35:27 gries kernel:
> XFS (dm-2): xfs_log_force: error 5 returned. 
> ___ CentOS mailing
> list CentOS@centos.org 
> https://lists.centos.org/mailman/listinfo/centos
> 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
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=UGN5
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Centos 6.6, apparent xfs corruption

2015-09-21 Thread Nicholas Geovanis
Hi all -
After several months of worry-free operation, we received the following
kernel messages about an xfs filesystem running under CentOS 6.6. The
proximate causes appear to be "Internal error xfs_trans_cancel" and
"Corruption of in-memory data detected.  Shutting down filesystem". The
filesystem is back up, mounted, appears to be working OK underlying a
Splunk datastore. Does anyone have a suggestion on diagnosis or known
problems? Many thanks.Nick Geo

Sep 18 20:35:15 gries kernel: XFS (dm-2): Internal error xfs_trans_cancel
at line 1948 of file fs/xfs/xfs_trans.c.  Caller 0xa01f1388
Sep 18 20:35:15 gries kernel:
Sep 18 20:35:15 gries kernel: Pid: 24005, comm: splunkd Not tainted
2.6.32-504.8.1.el6.x86_64 #1
Sep 18 20:35:15 gries kernel: Call Trace:
Sep 18 20:35:15 gries kernel: [] ?
xfs_error_report+0x3f/0x50 [xfs]
Sep 18 20:35:15 gries kernel: [] ? xfs_rename+0x2d8/0x720
[xfs]
Sep 18 20:35:15 gries kernel: [] ?
xfs_trans_cancel+0xf5/0x120 [xfs]
Sep 18 20:35:15 gries kernel: [] ? xfs_rename+0x2d8/0x720
[xfs]
Sep 18 20:35:15 gries kernel: [] ? __do_fault+0x469/0x530
Sep 18 20:35:15 gries kernel: [] ?
xfs_vn_rename+0x66/0x70 [xfs]
Sep 18 20:35:15 gries kernel: [] ? vfs_rename+0x419/0x480
Sep 18 20:35:15 gries kernel: [] ?
sys_renameat+0x309/0x3a0
Sep 18 20:35:15 gries kernel: [] ?
_atomic_dec_and_lock+0x55/0x80
Sep 18 20:35:15 gries kernel: [] ?
mntput_no_expire+0x30/0x110
Sep 18 20:35:15 gries kernel: [] ?
audit_syscall_entry+0x1d7/0x200
Sep 18 20:35:15 gries kernel: [] ? sys_rename+0x1b/0x20
Sep 18 20:35:15 gries kernel: [] ?
system_call_fastpath+0x16/0x1b
Sep 18 20:35:15 gries kernel: XFS (dm-2): xfs_do_force_shutdown(0x8) called
from line 1949 of file fs/xfs/xfs_trans.c.  Return address =
0xa01f2e6e
Sep 18 20:35:15 gries kernel: XFS (dm-2): Corruption of in-memory data
detected.  Shutting down filesystem
Sep 18 20:35:15 gries kernel: XFS (dm-2): Please umount the filesystem and
rectify the problem(s)
Sep 18 20:35:27 gries kernel: XFS (dm-2): xfs_log_force: error 5 returned.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?

2015-09-21 Thread m . roth
Gordon Messmer wrote:
>
>> > In other words, the
>> >hostkeys would be identical.
>
> I think what the error indicates is that a client tried to connect to
> SSH, and the host key there did not match the fingerprint in the
> client's "known_hosts" database.
>
>> >It seems to me that someone attempted an ssh connection while spoofing
>> >our internal address.  Is such a thing even possible? If so then how
>> >does it work?
>
> In the situation as you've described it, probably not.
>
> It would be best to go to your logs themselves for the full log entry
> and context, rather than relying on a report that summarizes log entries.

Looks like someone trying to break in. You *are* running fail2ban, are you
not? If not, you need to install and fire it up, now.

I see a *lot* of this... but then, I work for a US gov't federal
contractor (civilian sector), and let me assure you, I get tired of all
the attempts from China, Brazil, and other places trying to ssh in - it
really clutters my logfiles.

 mark

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I want to connect to a l2tp server from centos.

2015-09-21 Thread Gordon Messmer

On 09/20/2015 05:50 PM, Eliezer Croitoru wrote:

I do not have any security issue in this network.
I need to connect to a remote network on a secure network.
The options are pptp or l2tp(no ipsec encryption) so I do want to use 
l2tp like in (lac\lns) and I am looking for a client for CentOS. 


The client is "xl2tpd", and you can find it in EPEL.

Client setup is described here:
http://www.xinotes.net/notes/note/1524/
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?

2015-09-21 Thread Gordon Messmer



> In other words, the
>hostkeys would be identical.


I think what the error indicates is that a client tried to connect to 
SSH, and the host key there did not match the fingerprint in the 
client's "known_hosts" database.



>It seems to me that someone attempted an ssh connection while spoofing
>our internal address.  Is such a thing even possible? If so then how
>does it work?


In the situation as you've described it, probably not.

It would be best to go to your logs themselves for the full log entry 
and context, rather than relying on a report that summarizes log entries.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Gordon Messmer

On 09/21/2015 10:48 AM, Jason Welsh wrote:
http://mirror.centos.org/centos/%24releasever/os/x86_64/repodata/repomd.xml: 
[Errno 14] HTTP Error 404 - Not Found

Trying other mirror.

now where does centos get this variable from that's getting messed up? 


Weird.  %24 is a URL-encoded representation of '$', which is what would 
normally be in that position.  Look closely at the baseurl definition in 
[base].


It's normally commented out in favor of the mirrorlist, anyway:

[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo
=os&infra=$infra
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
...
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Samba Enterprise from Sernet no longer free

2015-09-21 Thread Robert Moskowitz

http://www.samba.plus/

Currently this, other than rolling your own, this appears the only way 
to have a Samba AD on Centos.


Later in the Samba 4.3 effort, MIT Kerberos is suppose to be supported 
so it MAY be easier to roll your own in a while, but until then, things 
are as they are.


I am rethinking my efforts to develop a ARM based AD.  I may just fall 
back (as everyone else) to just an NT style PDC.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit. [Solved]

2015-09-21 Thread Jason Welsh

aha! this is why..

[root@centos7 yum.repos.d]# rpm -qf /etc/centos-release
file /etc/centos-release is not owned by any package

not sure how it got that way, but after a reinstall of 
centos-release-7-1.1503.el7.centos.2.8.x86_64.rpm

my system is happy again.

thanks/regards,
Jason


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Richard
Is this really a centos-7 install? The message "This system is not
registered with Subscription Management." that you got from yum is
something you'd get from an unregistered RHEL system I believe.
Also, the yum plugins "product-id, subscription-manager" aren't
standard with a centos install.

What does a "cat" of /etc/system-release show?


 Original Message 
> Date: Monday, September 21, 2015 13:48:07 -0400
> From: Jason Welsh 
> Subject: Re: [CentOS] android sdk on centos7 64-bit.
>
> you are correct sir.. something is screwed up!
> 
> I remember running into a problem with the base repo enabled and
> swept it under the rug by disabling it for the moment and then
> forgot all about disabling it.. So when I enable the base repo,
> and run yum with debug flag, I see the following:
> 
> 
> Setting up Package Sacks
> http://mirror.centos.org/centos/%24releasever/os/x86_64/repodata/r
> epomd.xml: [Errno 14] HTTP Error 404 - Not Found
> Trying other mirror.
> 
> now where does centos get this variable from that's getting messed
> up?
> 
> thanks/regards,
> Jason
> 
> 
> On 09/21/2015 01:22 PM, Frank Cox wrote:
>> You either aren't using Centos, or you have something really
>> screwed  up with your yum repos. 
> 
 End Original Message 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Jason Welsh

you are correct sir.. something is screwed up!

I remember running into a problem with the base repo enabled and swept 
it under the rug by disabling it for the moment and then
forgot all about disabling it.. So when I enable the base repo, and run 
yum with debug flag, I see the following:



Setting up Package Sacks
http://mirror.centos.org/centos/%24releasever/os/x86_64/repodata/repomd.xml: 
[Errno 14] HTTP Error 404 - Not Found

Trying other mirror.

now where does centos get this variable from that's getting messed up?

thanks/regards,
Jason


On 09/21/2015 01:22 PM, Frank Cox wrote:
You either aren't using Centos, or you have something really screwed 
up with your yum repos. 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Frank Cox
On Mon, 21 Sep 2015 13:03:58 -0400
Jason Welsh wrote:

> This system is not registered with Subscription Management. You can use 
> subscription-manager to register.

You either aren't using Centos, or you have something really screwed up with 
your yum repos.

-- 
MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Richard
Do you have the standard centos repos disabled? I'm only seeing EPEL
in your output. What you need is in the centos base repo.

With the centos base repo enabled, Gordon's command would have
worked too -- I just always figure out the exact package(s).

  yum whatprovides /lib/ld-linux.so.2

  glibc-2.17-78.el7.i686 : The GNU libc libraries
  Repo: base
  Matched from:
  Filename: /lib/ld-linux.so.2



 Original Message 
> Date: Monday, September 21, 2015 13:03:58 -0400
> From: Jason Welsh 
> Subject: Re: [CentOS] android sdk on centos7 64-bit.
>
> yeah, that still doesnt work..
> 
> [jason@centos7 platform-tools]$ yum whatprovides /lib/ld-linux.so.2
> Loaded plugins: fastestmirror, langpacks, product-id,
> subscription-manager
> Determining fastest mirrors
>   * epel: archive.linux.duke.edu
> No matches found
> [jason@centos7 platform-tools]$ yum whatprovides ld-linux.so.2
> Loaded plugins: fastestmirror, langpacks, product-id,
> subscription-manager
> Loading mirror speeds from cached hostfile
>   * epel: archive.linux.duke.edu
> No matches found
> [jason@centos7 platform-tools]$ yum whatprovides */ld-linux.so.2
> Loaded plugins: fastestmirror, langpacks, product-id,
> subscription-manager
> Loading mirror speeds from cached hostfile
>   * epel: archive.linux.duke.edu
> No matches found
> [jason@centos7 platform-tools]$ yum whatprovides '*/ld-linux.so.2'
> Loaded plugins: fastestmirror, langpacks, product-id,
> subscription-manager
> Loading mirror speeds from cached hostfile
>   * epel: archive.linux.duke.edu
> No matches found
> [jason@centos7 platform-tools]$
> [jason@centos7 platform-tools]$ sudo yum provides */ld-linux.so.2
> Loaded plugins: fastestmirror, langpacks, product-id,
> subscription-manager
> This system is not registered with Subscription Management. You
> can use subscription-manager to register.
> Loading mirror speeds from cached hostfile
>   * epel: ftp.cse.buffalo.edu
> No matches found
> [jason@centos7 platform-tools]$
> 
> seems like im missing the 32bit libs repo?
> 
> Jason
> 
> 
> 
> On 09/21/2015 12:56 PM, Richard wrote:
>> you need to use yum's "whatprovides" facility to find the package
>> that has the ld-linux.so.2 library.
>> 
 End Original Message 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Jason Welsh

yeah, that still doesnt work..

[jason@centos7 platform-tools]$ yum whatprovides /lib/ld-linux.so.2
Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager
Determining fastest mirrors
 * epel: archive.linux.duke.edu
No matches found
[jason@centos7 platform-tools]$ yum whatprovides ld-linux.so.2
Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager
Loading mirror speeds from cached hostfile
 * epel: archive.linux.duke.edu
No matches found
[jason@centos7 platform-tools]$ yum whatprovides */ld-linux.so.2
Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager
Loading mirror speeds from cached hostfile
 * epel: archive.linux.duke.edu
No matches found
[jason@centos7 platform-tools]$ yum whatprovides '*/ld-linux.so.2'
Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager
Loading mirror speeds from cached hostfile
 * epel: archive.linux.duke.edu
No matches found
[jason@centos7 platform-tools]$
[jason@centos7 platform-tools]$ sudo yum provides */ld-linux.so.2
Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager
This system is not registered with Subscription Management. You can use 
subscription-manager to register.

Loading mirror speeds from cached hostfile
 * epel: ftp.cse.buffalo.edu
No matches found
[jason@centos7 platform-tools]$

seems like im missing the 32bit libs repo?

Jason



On 09/21/2015 12:56 PM, Richard wrote:

you need to use yum's "whatprovides" facility to find the package
that has the ld-linux.so.2 library.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Richard
you need to use yum's "whatprovides" facility to find the package
that has the ld-linux.so.2 library.



 Original Message 
> Date: Monday, September 21, 2015 12:48:22 -0400
> From: Jason Welsh 
>
> [root@centos7 Packages]#  yum install /lib/ld-linux.so.2
> Loaded plugins: fastestmirror, langpacks, product-id,
> subscription-manager
> This system is not registered with Subscription Management. You
> can use subscription-manager to register.
> epel/x86_64/metalink |  12 kB  00:00:00
> ftp_repo | 3.6 kB  00:00:00
> Loading mirror speeds from cached hostfile
>   * epel: ftp.cse.buffalo.edu
> No package /lib/ld-linux.so.2 available.
> Error: Nothing to do
> 
> On 09/21/2015 12:44 PM, Gordon Messmer wrote:
>> yum install /lib/ld-linux.so.2 
> 
 End Original Message 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Jason Welsh

[root@centos7 Packages]#  yum install /lib/ld-linux.so.2
Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager
This system is not registered with Subscription Management. You can use 
subscription-manager to register.

epel/x86_64/metalink |  12 kB  00:00:00
ftp_repo | 3.6 kB  00:00:00
Loading mirror speeds from cached hostfile
 * epel: ftp.cse.buffalo.edu
No package /lib/ld-linux.so.2 available.
Error: Nothing to do



On 09/21/2015 12:44 PM, Gordon Messmer wrote:
yum install /lib/ld-linux.so.2 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Gordon Messmer

On 09/21/2015 08:16 AM, Jason Welsh wrote:
-bash: ./adb: /lib/ld-linux.so.2: bad ELF interpreter: No such file or 
directory

whats the right way to isntall the needed 32bit libs?


yum install /lib/ld-linux.so.2

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] android sdk on centos7 64-bit.

2015-09-21 Thread Jason Welsh
trying to use the android sdk on centos 7 and cant seem to find the 
32bit libs..


[jason@centos7 platform-tools]$ ./adb devices
-bash: ./adb: /lib/ld-linux.so.2: bad ELF interpreter: No such file or 
directory

[jason@centos7 platform-tools]$

whats the right way to isntall the needed 32bit libs? I cant seem to 
find them with yum provides..

Ive tried multilib_policy=best in my yum.conf as well.

Jason

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS-6 Logwatch 7.3.6 behaviour

2015-09-21 Thread James B. Byrne
On Sat, September 19, 2015 06:51, Tony Mountifield wrote:
> In article
> ,
James B. Byrne  wrote:
>> After some experimenting I have observed that overriding settings from
>> /usr/share/logwatch/default.conf/logwatch.conf in
>> /etc/logwatch/conf/logwatch.conf does not produce consistent
>> results.
>> For example, if I replace the default detail configuration in
>> etc/logwatch/conf/logwatch.conf with:
>> Detail = High
>> It does indeed change the level of detail from the default Low set in
>> /usr/share/logwatch/default.conf/logwatch.conf.
>> However, if I comment out the line:
>> #Service = "-zz-sys" # Prevents execution of zz-sys service
in the overridden file then the fact that this line remains in the
default.conf version means that the sservice cannot be enabled to
run
>> by default without editing
>> /usr/share/logwatch/default.conf/logwatch.conf.  Of course doing that
>> means that any update clobbers the local changes.
> Can you just add it back in /etc/logwatch/conf/logwatch.conf with:
Service = "zz-sys"
> I haven't tried it, but it looks like Service lines are cumulative.


/usr/sbin/logwatch --range 'today' --mailto supp...@harte-lyne.ca
--service zz-runtime --service All
Wrong configuration entry for "Service", if "All" selected, only "-"
items are allowed


As shown above, if you pass '--service All' then any later '--service
X' option must be prefaced with a '-' ('--service -X').  In other
words, once All is selected then one can only remove selected
services.  In the config files this is the order used:

# The 'Service' option expects either the name of a filter
# (in /usr/share/logwatch/scripts/services/*) or 'All'.
# The default service(s) to report on.  This should be left as All for
# most people.
Service = All
# You can also disable certain services (when specifying all)
Service = "-zz-network" # Prevents execution of zz-network
service, which
# prints useful network configuration
info.
Service = "-zz-sys" # Prevents execution of zz-sys service, which
# prints useful system configuration info.
Service = "-eximstats"  # Prevents execution of eximstats service,
which
# is a wrapper for the eximstats program.

So, no, one cannot restore a service that is deleted from the run in
default.conf by adding it back to the local config file.

I can understand what is happening here.  The implementation of user
config files is conceived as being additive to the default
configuration.  Anything not specified in
/etc/logwatch/conf/logwatch.conf is picked up from
/usr/share/logwatch/default.conf/logwatch.conf.  Anything in
/usr/share/logwatch/default.conf/logwatch.conf is overridden by any
similar entry in an earlier config.

This implies that the order of processing is:

/etc/logwatch/conf/logwatch.conf
/usr/share/logwatch/dist.conf
/usr/share/logwatch/default.conf/logwatch.conf

This seems to be something that needs to be fixed in the
default.conf/logwatch.conf file.

-- 
***  e-Mail is NOT a SECURE channel  ***
Do NOT transmit sensitive data via e-Mail
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?

2015-09-21 Thread Eero Volotinen
well. sounds like some automatic deploytment tool? error ip ip address or
other configuration failure?

http://stackoverflow.com/questions/6356212/ant-scp-task-failure

--
Eero

2015-09-21 11:29 GMT+03:00 James B. Byrne :

> This morning's log review revealed this sshd log entry on one of our
> web services hosts:
>
>  Received disconnect:
> 11: disconnected by user : 2 Time(s)
> 3: com.jcraft.jsch.JSchException: reject HostKey: 216.185.71.170 :
> 1 Time(s)
>
>
> The IP address used is that of a public facing database query page for
> our freight transit information. It is itself a virtual IP address
> hosted on the system reporting the error.  In other words, if this
> were a legitimate connection then the situation would be that of an
> ssh client connecting to an sshd server running on the same host
> albeit each using a different IP address.  In other words, the
> hostkeys would be identical.
>
> It seems to me that someone attempted an ssh connection while spoofing
> our internal address.  Is such a thing even possible? If so then how
> does it work?
>
> What is com.jcraft.jsch?
>
>
> --
> ***  e-Mail is NOT a SECURE channel  ***
> Do NOT transmit sensitive data via e-Mail
> James B. Byrnemailto:byrn...@harte-lyne.ca
> Harte & Lyne Limited  http://www.harte-lyne.ca
> 9 Brockley Drive  vox: +1 905 561 1241
> Hamilton, Ontario fax: +1 905 561 0757
> Canada  L8E 3C3
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS6 - Break in attempt? What is the Exploit?

2015-09-21 Thread James B. Byrne
This morning's log review revealed this sshd log entry on one of our
web services hosts:

 Received disconnect:
11: disconnected by user : 2 Time(s)
3: com.jcraft.jsch.JSchException: reject HostKey: 216.185.71.170 :
1 Time(s)


The IP address used is that of a public facing database query page for
our freight transit information. It is itself a virtual IP address
hosted on the system reporting the error.  In other words, if this
were a legitimate connection then the situation would be that of an
ssh client connecting to an sshd server running on the same host
albeit each using a different IP address.  In other words, the
hostkeys would be identical.

It seems to me that someone attempted an ssh connection while spoofing
our internal address.  Is such a thing even possible? If so then how
does it work?

What is com.jcraft.jsch?


-- 
***  e-Mail is NOT a SECURE channel  ***
Do NOT transmit sensitive data via e-Mail
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos