Re: [CentOS] Centos 6.6, apparent xfs corruption
- Original Message - | -BEGIN PGP SIGNED MESSAGE- | Hash: SHA1 | | I think you need to read this from the bottom up: | | "Corruption of in-memory data detected. Shutting down filesystem" | so XFS calls xfs_do_force_shutdown to shut down the filesystem. The | call comes from fs/xfs/xfs_trans.c which fails, and so reports | "Internal error xfs_trans_cancel". | | In other words, I would look at the memory corruption first. This | _could_ be a kernel problem, but I would suggest starting with an | extended memory check, it smells to me of a failing chip. | | Just my 2d worth! | | Martin | | On 21/09/15 21:41, Nicholas Geovanis wrote: | > Hi all - After several months of worry-free operation, we received | > the following kernel messages about an xfs filesystem running under | > CentOS 6.6. The proximate causes appear to be "Internal error | > xfs_trans_cancel" and "Corruption of in-memory data detected. | > Shutting down filesystem". The filesystem is back up, mounted, | > appears to be working OK underlying a Splunk datastore. Does anyone | > have a suggestion on diagnosis or known problems? Many | > thanks.Nick Geo | > | > Sep 18 20:35:15 gries kernel: XFS (dm-2): Internal error | > xfs_trans_cancel at line 1948 of file fs/xfs/xfs_trans.c. Caller | > 0xa01f1388 Sep 18 20:35:15 gries kernel: Sep 18 20:35:15 | > gries kernel: Pid: 24005, comm: splunkd Not tainted | > 2.6.32-504.8.1.el6.x86_64 #1 Sep 18 20:35:15 gries kernel: Call | > Trace: Sep 18 20:35:15 gries kernel: [] ? | > xfs_error_report+0x3f/0x50 [xfs] Sep 18 20:35:15 gries kernel: | > [] ? xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 | > gries kernel: [] ? xfs_trans_cancel+0xf5/0x120 | > [xfs] Sep 18 20:35:15 gries kernel: [] ? | > xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 gries kernel: | > [] ? __do_fault+0x469/0x530 Sep 18 20:35:15 gries | > kernel: [] ? xfs_vn_rename+0x66/0x70 [xfs] Sep 18 | > 20:35:15 gries kernel: [] ? | > vfs_rename+0x419/0x480 Sep 18 20:35:15 gries kernel: | > [] ? sys_renameat+0x309/0x3a0 Sep 18 20:35:15 | > gries kernel: [] ? | > _atomic_dec_and_lock+0x55/0x80 Sep 18 20:35:15 gries kernel: | > [] ? mntput_no_expire+0x30/0x110 Sep 18 20:35:15 | > gries kernel: [] ? | > audit_syscall_entry+0x1d7/0x200 Sep 18 20:35:15 gries kernel: | > [] ? sys_rename+0x1b/0x20 Sep 18 20:35:15 gries | > kernel: [] ? system_call_fastpath+0x16/0x1b Sep | > 18 20:35:15 gries kernel: XFS (dm-2): xfs_do_force_shutdown(0x8) | > called from line 1949 of file fs/xfs/xfs_trans.c. Return address | > = 0xa01f2e6e Sep 18 20:35:15 gries kernel: XFS (dm-2): | > Corruption of in-memory data detected. Shutting down filesystem | > Sep 18 20:35:15 gries kernel: XFS (dm-2): Please umount the | > filesystem and rectify the problem(s) Sep 18 20:35:27 gries kernel: | > XFS (dm-2): xfs_log_force: error 5 returned. Do you have any XFS optimizations enabled in /etc/fstab such logbsize, nobarrier, etc? is the filesystem full? What percentage of the file system is available? Some optimizations will cause a similar type of error when there is insufficient space for the extent allocations to take place or for file system rebalances to happen. -- James A. Peltier IT Services - Research Computing Group Simon Fraser University - Burnaby Campus Phone : 604-365-6432 Fax : 778-782-3045 E-Mail : jpelt...@sfu.ca Website : http://www.sfu.ca/itservices Twitter : @sfu_rcg Powering Engagement Through Technology ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 6.6, apparent xfs corruption
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think you need to read this from the bottom up: "Corruption of in-memory data detected. Shutting down filesystem" so XFS calls xfs_do_force_shutdown to shut down the filesystem. The call comes from fs/xfs/xfs_trans.c which fails, and so reports "Internal error xfs_trans_cancel". In other words, I would look at the memory corruption first. This _could_ be a kernel problem, but I would suggest starting with an extended memory check, it smells to me of a failing chip. Just my 2d worth! Martin On 21/09/15 21:41, Nicholas Geovanis wrote: > Hi all - After several months of worry-free operation, we received > the following kernel messages about an xfs filesystem running under > CentOS 6.6. The proximate causes appear to be "Internal error > xfs_trans_cancel" and "Corruption of in-memory data detected. > Shutting down filesystem". The filesystem is back up, mounted, > appears to be working OK underlying a Splunk datastore. Does anyone > have a suggestion on diagnosis or known problems? Many > thanks.Nick Geo > > Sep 18 20:35:15 gries kernel: XFS (dm-2): Internal error > xfs_trans_cancel at line 1948 of file fs/xfs/xfs_trans.c. Caller > 0xa01f1388 Sep 18 20:35:15 gries kernel: Sep 18 20:35:15 > gries kernel: Pid: 24005, comm: splunkd Not tainted > 2.6.32-504.8.1.el6.x86_64 #1 Sep 18 20:35:15 gries kernel: Call > Trace: Sep 18 20:35:15 gries kernel: [] ? > xfs_error_report+0x3f/0x50 [xfs] Sep 18 20:35:15 gries kernel: > [] ? xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 > gries kernel: [] ? xfs_trans_cancel+0xf5/0x120 > [xfs] Sep 18 20:35:15 gries kernel: [] ? > xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 gries kernel: > [] ? __do_fault+0x469/0x530 Sep 18 20:35:15 gries > kernel: [] ? xfs_vn_rename+0x66/0x70 [xfs] Sep 18 > 20:35:15 gries kernel: [] ? > vfs_rename+0x419/0x480 Sep 18 20:35:15 gries kernel: > [] ? sys_renameat+0x309/0x3a0 Sep 18 20:35:15 > gries kernel: [] ? > _atomic_dec_and_lock+0x55/0x80 Sep 18 20:35:15 gries kernel: > [] ? mntput_no_expire+0x30/0x110 Sep 18 20:35:15 > gries kernel: [] ? > audit_syscall_entry+0x1d7/0x200 Sep 18 20:35:15 gries kernel: > [] ? sys_rename+0x1b/0x20 Sep 18 20:35:15 gries > kernel: [] ? system_call_fastpath+0x16/0x1b Sep > 18 20:35:15 gries kernel: XFS (dm-2): xfs_do_force_shutdown(0x8) > called from line 1949 of file fs/xfs/xfs_trans.c. Return address > = 0xa01f2e6e Sep 18 20:35:15 gries kernel: XFS (dm-2): > Corruption of in-memory data detected. Shutting down filesystem > Sep 18 20:35:15 gries kernel: XFS (dm-2): Please umount the > filesystem and rectify the problem(s) Sep 18 20:35:27 gries kernel: > XFS (dm-2): xfs_log_force: error 5 returned. > ___ CentOS mailing > list CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJWAHVZAAoJEAF3yXsqtyBlT7IQAM45t0n8I7aQ203LjBjSUx39 9O4xu8gTYb1XFdoM2DkzPAygKuiVYRiN3dgcMO6KP2mgT+MNK8G2043lY3v6w5wK HzgYQ0/GwyDkJiy5EqaG6JWRUDyF788BU3kiWLJUxclsTqXN9Aw9E58aiu2duNvj +e5WSflUbN1DdLep0LdGe0QR4QzsQBiFUhgt4i3EU6oYPQvS3dJyByPAOnD9t7+s dbJQ1i7fDmLpCaYGvon8DoDQSE8aA/ums94NJzkPYyIza/D5pBfFf6r3RH3Xrg85 6aYFfjIBXcEQgq4DyEccJviaJ5eOWMCLocvMni6oWKml3+u6PtEvnw6sqIWoKwiC xhyUVOXmF3qgH3xhx8pXMag0eO5hGm9ApGNckaXLy/j0AinCV9APvE9rAtYG94j+ IL0x9WCvtgduJvXZaSnekPaKKbT9MS1G+Zohi+WlY8u7PZlZdXzjyAgC8BPJQAyZ yNendFRl7WQB1rbWZQJJD4tlhlU/Nwpwy6BtHn/lbhiYlFaTP1ytS09vToGTJw0A BwX0+f4PnnYJV58X7WtEm1jhdsO/u+hykHqqmsq7ATsX9I6bkFTNwm13+Khf88zy ve4fLJ/JEtJi2nVwD6K9mEqTO+I1CiGhJnOnfrphPsLa0WSkBtjl+FWM0jYFTSwR TAavAlYHzW5/9BP0eNmL =UGN5 -END PGP SIGNATURE- ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos 6.6, apparent xfs corruption
Hi all - After several months of worry-free operation, we received the following kernel messages about an xfs filesystem running under CentOS 6.6. The proximate causes appear to be "Internal error xfs_trans_cancel" and "Corruption of in-memory data detected. Shutting down filesystem". The filesystem is back up, mounted, appears to be working OK underlying a Splunk datastore. Does anyone have a suggestion on diagnosis or known problems? Many thanks.Nick Geo Sep 18 20:35:15 gries kernel: XFS (dm-2): Internal error xfs_trans_cancel at line 1948 of file fs/xfs/xfs_trans.c. Caller 0xa01f1388 Sep 18 20:35:15 gries kernel: Sep 18 20:35:15 gries kernel: Pid: 24005, comm: splunkd Not tainted 2.6.32-504.8.1.el6.x86_64 #1 Sep 18 20:35:15 gries kernel: Call Trace: Sep 18 20:35:15 gries kernel: [] ? xfs_error_report+0x3f/0x50 [xfs] Sep 18 20:35:15 gries kernel: [] ? xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 gries kernel: [] ? xfs_trans_cancel+0xf5/0x120 [xfs] Sep 18 20:35:15 gries kernel: [] ? xfs_rename+0x2d8/0x720 [xfs] Sep 18 20:35:15 gries kernel: [] ? __do_fault+0x469/0x530 Sep 18 20:35:15 gries kernel: [] ? xfs_vn_rename+0x66/0x70 [xfs] Sep 18 20:35:15 gries kernel: [] ? vfs_rename+0x419/0x480 Sep 18 20:35:15 gries kernel: [] ? sys_renameat+0x309/0x3a0 Sep 18 20:35:15 gries kernel: [] ? _atomic_dec_and_lock+0x55/0x80 Sep 18 20:35:15 gries kernel: [] ? mntput_no_expire+0x30/0x110 Sep 18 20:35:15 gries kernel: [] ? audit_syscall_entry+0x1d7/0x200 Sep 18 20:35:15 gries kernel: [] ? sys_rename+0x1b/0x20 Sep 18 20:35:15 gries kernel: [] ? system_call_fastpath+0x16/0x1b Sep 18 20:35:15 gries kernel: XFS (dm-2): xfs_do_force_shutdown(0x8) called from line 1949 of file fs/xfs/xfs_trans.c. Return address = 0xa01f2e6e Sep 18 20:35:15 gries kernel: XFS (dm-2): Corruption of in-memory data detected. Shutting down filesystem Sep 18 20:35:15 gries kernel: XFS (dm-2): Please umount the filesystem and rectify the problem(s) Sep 18 20:35:27 gries kernel: XFS (dm-2): xfs_log_force: error 5 returned. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?
Gordon Messmer wrote: > >> > In other words, the >> >hostkeys would be identical. > > I think what the error indicates is that a client tried to connect to > SSH, and the host key there did not match the fingerprint in the > client's "known_hosts" database. > >> >It seems to me that someone attempted an ssh connection while spoofing >> >our internal address. Is such a thing even possible? If so then how >> >does it work? > > In the situation as you've described it, probably not. > > It would be best to go to your logs themselves for the full log entry > and context, rather than relying on a report that summarizes log entries. Looks like someone trying to break in. You *are* running fail2ban, are you not? If not, you need to install and fire it up, now. I see a *lot* of this... but then, I work for a US gov't federal contractor (civilian sector), and let me assure you, I get tired of all the attempts from China, Brazil, and other places trying to ssh in - it really clutters my logfiles. mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] I want to connect to a l2tp server from centos.
On 09/20/2015 05:50 PM, Eliezer Croitoru wrote: I do not have any security issue in this network. I need to connect to a remote network on a secure network. The options are pptp or l2tp(no ipsec encryption) so I do want to use l2tp like in (lac\lns) and I am looking for a client for CentOS. The client is "xl2tpd", and you can find it in EPEL. Client setup is described here: http://www.xinotes.net/notes/note/1524/ ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?
> In other words, the >hostkeys would be identical. I think what the error indicates is that a client tried to connect to SSH, and the host key there did not match the fingerprint in the client's "known_hosts" database. >It seems to me that someone attempted an ssh connection while spoofing >our internal address. Is such a thing even possible? If so then how >does it work? In the situation as you've described it, probably not. It would be best to go to your logs themselves for the full log entry and context, rather than relying on a report that summarizes log entries. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
On 09/21/2015 10:48 AM, Jason Welsh wrote: http://mirror.centos.org/centos/%24releasever/os/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404 - Not Found Trying other mirror. now where does centos get this variable from that's getting messed up? Weird. %24 is a URL-encoded representation of '$', which is what would normally be in that position. Look closely at the baseurl definition in [base]. It's normally commented out in favor of the mirrorlist, anyway: [base] name=CentOS-$releasever - Base mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo =os&infra=$infra #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ ... ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Samba Enterprise from Sernet no longer free
http://www.samba.plus/ Currently this, other than rolling your own, this appears the only way to have a Samba AD on Centos. Later in the Samba 4.3 effort, MIT Kerberos is suppose to be supported so it MAY be easier to roll your own in a while, but until then, things are as they are. I am rethinking my efforts to develop a ARM based AD. I may just fall back (as everyone else) to just an NT style PDC. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit. [Solved]
aha! this is why.. [root@centos7 yum.repos.d]# rpm -qf /etc/centos-release file /etc/centos-release is not owned by any package not sure how it got that way, but after a reinstall of centos-release-7-1.1503.el7.centos.2.8.x86_64.rpm my system is happy again. thanks/regards, Jason ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
Is this really a centos-7 install? The message "This system is not registered with Subscription Management." that you got from yum is something you'd get from an unregistered RHEL system I believe. Also, the yum plugins "product-id, subscription-manager" aren't standard with a centos install. What does a "cat" of /etc/system-release show? Original Message > Date: Monday, September 21, 2015 13:48:07 -0400 > From: Jason Welsh > Subject: Re: [CentOS] android sdk on centos7 64-bit. > > you are correct sir.. something is screwed up! > > I remember running into a problem with the base repo enabled and > swept it under the rug by disabling it for the moment and then > forgot all about disabling it.. So when I enable the base repo, > and run yum with debug flag, I see the following: > > > Setting up Package Sacks > http://mirror.centos.org/centos/%24releasever/os/x86_64/repodata/r > epomd.xml: [Errno 14] HTTP Error 404 - Not Found > Trying other mirror. > > now where does centos get this variable from that's getting messed > up? > > thanks/regards, > Jason > > > On 09/21/2015 01:22 PM, Frank Cox wrote: >> You either aren't using Centos, or you have something really >> screwed up with your yum repos. > End Original Message ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
you are correct sir.. something is screwed up! I remember running into a problem with the base repo enabled and swept it under the rug by disabling it for the moment and then forgot all about disabling it.. So when I enable the base repo, and run yum with debug flag, I see the following: Setting up Package Sacks http://mirror.centos.org/centos/%24releasever/os/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404 - Not Found Trying other mirror. now where does centos get this variable from that's getting messed up? thanks/regards, Jason On 09/21/2015 01:22 PM, Frank Cox wrote: You either aren't using Centos, or you have something really screwed up with your yum repos. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
On Mon, 21 Sep 2015 13:03:58 -0400 Jason Welsh wrote: > This system is not registered with Subscription Management. You can use > subscription-manager to register. You either aren't using Centos, or you have something really screwed up with your yum repos. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
Do you have the standard centos repos disabled? I'm only seeing EPEL in your output. What you need is in the centos base repo. With the centos base repo enabled, Gordon's command would have worked too -- I just always figure out the exact package(s). yum whatprovides /lib/ld-linux.so.2 glibc-2.17-78.el7.i686 : The GNU libc libraries Repo: base Matched from: Filename: /lib/ld-linux.so.2 Original Message > Date: Monday, September 21, 2015 13:03:58 -0400 > From: Jason Welsh > Subject: Re: [CentOS] android sdk on centos7 64-bit. > > yeah, that still doesnt work.. > > [jason@centos7 platform-tools]$ yum whatprovides /lib/ld-linux.so.2 > Loaded plugins: fastestmirror, langpacks, product-id, > subscription-manager > Determining fastest mirrors > * epel: archive.linux.duke.edu > No matches found > [jason@centos7 platform-tools]$ yum whatprovides ld-linux.so.2 > Loaded plugins: fastestmirror, langpacks, product-id, > subscription-manager > Loading mirror speeds from cached hostfile > * epel: archive.linux.duke.edu > No matches found > [jason@centos7 platform-tools]$ yum whatprovides */ld-linux.so.2 > Loaded plugins: fastestmirror, langpacks, product-id, > subscription-manager > Loading mirror speeds from cached hostfile > * epel: archive.linux.duke.edu > No matches found > [jason@centos7 platform-tools]$ yum whatprovides '*/ld-linux.so.2' > Loaded plugins: fastestmirror, langpacks, product-id, > subscription-manager > Loading mirror speeds from cached hostfile > * epel: archive.linux.duke.edu > No matches found > [jason@centos7 platform-tools]$ > [jason@centos7 platform-tools]$ sudo yum provides */ld-linux.so.2 > Loaded plugins: fastestmirror, langpacks, product-id, > subscription-manager > This system is not registered with Subscription Management. You > can use subscription-manager to register. > Loading mirror speeds from cached hostfile > * epel: ftp.cse.buffalo.edu > No matches found > [jason@centos7 platform-tools]$ > > seems like im missing the 32bit libs repo? > > Jason > > > > On 09/21/2015 12:56 PM, Richard wrote: >> you need to use yum's "whatprovides" facility to find the package >> that has the ld-linux.so.2 library. >> End Original Message ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
yeah, that still doesnt work.. [jason@centos7 platform-tools]$ yum whatprovides /lib/ld-linux.so.2 Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager Determining fastest mirrors * epel: archive.linux.duke.edu No matches found [jason@centos7 platform-tools]$ yum whatprovides ld-linux.so.2 Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager Loading mirror speeds from cached hostfile * epel: archive.linux.duke.edu No matches found [jason@centos7 platform-tools]$ yum whatprovides */ld-linux.so.2 Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager Loading mirror speeds from cached hostfile * epel: archive.linux.duke.edu No matches found [jason@centos7 platform-tools]$ yum whatprovides '*/ld-linux.so.2' Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager Loading mirror speeds from cached hostfile * epel: archive.linux.duke.edu No matches found [jason@centos7 platform-tools]$ [jason@centos7 platform-tools]$ sudo yum provides */ld-linux.so.2 Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager This system is not registered with Subscription Management. You can use subscription-manager to register. Loading mirror speeds from cached hostfile * epel: ftp.cse.buffalo.edu No matches found [jason@centos7 platform-tools]$ seems like im missing the 32bit libs repo? Jason On 09/21/2015 12:56 PM, Richard wrote: you need to use yum's "whatprovides" facility to find the package that has the ld-linux.so.2 library. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
you need to use yum's "whatprovides" facility to find the package that has the ld-linux.so.2 library. Original Message > Date: Monday, September 21, 2015 12:48:22 -0400 > From: Jason Welsh > > [root@centos7 Packages]# yum install /lib/ld-linux.so.2 > Loaded plugins: fastestmirror, langpacks, product-id, > subscription-manager > This system is not registered with Subscription Management. You > can use subscription-manager to register. > epel/x86_64/metalink | 12 kB 00:00:00 > ftp_repo | 3.6 kB 00:00:00 > Loading mirror speeds from cached hostfile > * epel: ftp.cse.buffalo.edu > No package /lib/ld-linux.so.2 available. > Error: Nothing to do > > On 09/21/2015 12:44 PM, Gordon Messmer wrote: >> yum install /lib/ld-linux.so.2 > End Original Message ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
[root@centos7 Packages]# yum install /lib/ld-linux.so.2 Loaded plugins: fastestmirror, langpacks, product-id, subscription-manager This system is not registered with Subscription Management. You can use subscription-manager to register. epel/x86_64/metalink | 12 kB 00:00:00 ftp_repo | 3.6 kB 00:00:00 Loading mirror speeds from cached hostfile * epel: ftp.cse.buffalo.edu No package /lib/ld-linux.so.2 available. Error: Nothing to do On 09/21/2015 12:44 PM, Gordon Messmer wrote: yum install /lib/ld-linux.so.2 ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] android sdk on centos7 64-bit.
On 09/21/2015 08:16 AM, Jason Welsh wrote: -bash: ./adb: /lib/ld-linux.so.2: bad ELF interpreter: No such file or directory whats the right way to isntall the needed 32bit libs? yum install /lib/ld-linux.so.2 ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] android sdk on centos7 64-bit.
trying to use the android sdk on centos 7 and cant seem to find the 32bit libs.. [jason@centos7 platform-tools]$ ./adb devices -bash: ./adb: /lib/ld-linux.so.2: bad ELF interpreter: No such file or directory [jason@centos7 platform-tools]$ whats the right way to isntall the needed 32bit libs? I cant seem to find them with yum provides.. Ive tried multilib_policy=best in my yum.conf as well. Jason ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS-6 Logwatch 7.3.6 behaviour
On Sat, September 19, 2015 06:51, Tony Mountifield wrote: > In article > , James B. Byrne wrote: >> After some experimenting I have observed that overriding settings from >> /usr/share/logwatch/default.conf/logwatch.conf in >> /etc/logwatch/conf/logwatch.conf does not produce consistent >> results. >> For example, if I replace the default detail configuration in >> etc/logwatch/conf/logwatch.conf with: >> Detail = High >> It does indeed change the level of detail from the default Low set in >> /usr/share/logwatch/default.conf/logwatch.conf. >> However, if I comment out the line: >> #Service = "-zz-sys" # Prevents execution of zz-sys service in the overridden file then the fact that this line remains in the default.conf version means that the sservice cannot be enabled to run >> by default without editing >> /usr/share/logwatch/default.conf/logwatch.conf. Of course doing that >> means that any update clobbers the local changes. > Can you just add it back in /etc/logwatch/conf/logwatch.conf with: Service = "zz-sys" > I haven't tried it, but it looks like Service lines are cumulative. /usr/sbin/logwatch --range 'today' --mailto supp...@harte-lyne.ca --service zz-runtime --service All Wrong configuration entry for "Service", if "All" selected, only "-" items are allowed As shown above, if you pass '--service All' then any later '--service X' option must be prefaced with a '-' ('--service -X'). In other words, once All is selected then one can only remove selected services. In the config files this is the order used: # The 'Service' option expects either the name of a filter # (in /usr/share/logwatch/scripts/services/*) or 'All'. # The default service(s) to report on. This should be left as All for # most people. Service = All # You can also disable certain services (when specifying all) Service = "-zz-network" # Prevents execution of zz-network service, which # prints useful network configuration info. Service = "-zz-sys" # Prevents execution of zz-sys service, which # prints useful system configuration info. Service = "-eximstats" # Prevents execution of eximstats service, which # is a wrapper for the eximstats program. So, no, one cannot restore a service that is deleted from the run in default.conf by adding it back to the local config file. I can understand what is happening here. The implementation of user config files is conceived as being additive to the default configuration. Anything not specified in /etc/logwatch/conf/logwatch.conf is picked up from /usr/share/logwatch/default.conf/logwatch.conf. Anything in /usr/share/logwatch/default.conf/logwatch.conf is overridden by any similar entry in an earlier config. This implies that the order of processing is: /etc/logwatch/conf/logwatch.conf /usr/share/logwatch/dist.conf /usr/share/logwatch/default.conf/logwatch.conf This seems to be something that needs to be fixed in the default.conf/logwatch.conf file. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrnemailto:byrn...@harte-lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS6 - Break in attempt? What is the Exploit?
well. sounds like some automatic deploytment tool? error ip ip address or other configuration failure? http://stackoverflow.com/questions/6356212/ant-scp-task-failure -- Eero 2015-09-21 11:29 GMT+03:00 James B. Byrne : > This morning's log review revealed this sshd log entry on one of our > web services hosts: > > Received disconnect: > 11: disconnected by user : 2 Time(s) > 3: com.jcraft.jsch.JSchException: reject HostKey: 216.185.71.170 : > 1 Time(s) > > > The IP address used is that of a public facing database query page for > our freight transit information. It is itself a virtual IP address > hosted on the system reporting the error. In other words, if this > were a legitimate connection then the situation would be that of an > ssh client connecting to an sshd server running on the same host > albeit each using a different IP address. In other words, the > hostkeys would be identical. > > It seems to me that someone attempted an ssh connection while spoofing > our internal address. Is such a thing even possible? If so then how > does it work? > > What is com.jcraft.jsch? > > > -- > *** e-Mail is NOT a SECURE channel *** > Do NOT transmit sensitive data via e-Mail > James B. Byrnemailto:byrn...@harte-lyne.ca > Harte & Lyne Limited http://www.harte-lyne.ca > 9 Brockley Drive vox: +1 905 561 1241 > Hamilton, Ontario fax: +1 905 561 0757 > Canada L8E 3C3 > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS6 - Break in attempt? What is the Exploit?
This morning's log review revealed this sshd log entry on one of our web services hosts: Received disconnect: 11: disconnected by user : 2 Time(s) 3: com.jcraft.jsch.JSchException: reject HostKey: 216.185.71.170 : 1 Time(s) The IP address used is that of a public facing database query page for our freight transit information. It is itself a virtual IP address hosted on the system reporting the error. In other words, if this were a legitimate connection then the situation would be that of an ssh client connecting to an sshd server running on the same host albeit each using a different IP address. In other words, the hostkeys would be identical. It seems to me that someone attempted an ssh connection while spoofing our internal address. Is such a thing even possible? If so then how does it work? What is com.jcraft.jsch? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrnemailto:byrn...@harte-lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos