Re: [CentOS] C8 and backup solution

2020-04-03 Thread David G. Miller

On 4/3/20 6:13 AM, miguel medalha wrote:

I have been using rsnapshot for years, with great success.

https://rsnapshot.org/


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Since no one else has mentioned it as a solution, I've been using amanda 
for years.  About the only change has been replacing my physical tape 
drive with mhVTL (Anybody need some unused DSS-3 tapes? Free to good home.).


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Running amanda on CentOS 7: "amanda-udp.service failed."

2020-03-17 Thread David G. Miller

Hi Robert -

I'm running it successfully on C7 using xinetd.  Do you have 
documentation for running it directly from systemd?  Working xinetd 
configuration:


cat /etc/xinetd.d/amanda
# default: off
# description:  The client for the Amanda backup system.\
#   This must be on for systems being backed up\
#   by Amanda.
service amanda
{
    disable = no
    socket_type = dgram
    protocol        = udp
    wait            = yes
    user            = amandabackup
    group           = disk
    server          = /usr/sbin/amandad
# Configure server_args for the authentication type you will be using,
# and the services you wish to allow the amanda server and/or recovery
# clients to use.
#
# Change the -auth= entry to reflect the authentication type you use.
# Add amindexd to allow recovery clients to access the index database.
# Add amidxtaped to allow recovery clients to access the tape device.
    server_args      = -auth=bsd amdump
    flags            = IPv4
}

Cheers,
Dave

On 3/17/20 7:03 AM, Robert Heller wrote:

I am trying to get amanda backup going on a CentOS 7 system and things are not
working:

sharky4.deepsoft.com% sudo systemctl start amanda-udp
[sudo] password for heller:
Job for amanda-udp.service failed because a configured resource limit was exceeded. See 
"systemctl status amanda-udp.service" and "journalctl -xe" for details.
sharky4.deepsoft.com% sudo systemctl status -l amanda-udp
â—� amanda-udp.service - Amanda Backup System
Loaded: loaded (/usr/lib/systemd/system/amanda-udp.service; static; vendor 
preset: disabled)
Active: failed (Result: resources)

Mar 17 08:35:58 sharky4.deepsoft.com systemd[1]: Unit amanda-udp.service 
entered failed state.
Mar 17 08:35:58 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed.
Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: Got more than one socket.
Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to 
run 'start' task: Invalid argument
Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup 
System.
Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed.
Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Got more than one socket.
Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to 
run 'start' task: Invalid argument
Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup 
System.
Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed.
sharky4.deepsoft.com% sudo journalctl -xe
Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to
Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup
-- Subject: Unit amanda-udp.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] YUM (DNF) Possible Confusion Centos 8

2020-01-22 Thread David G. Miller

On 1/22/20 11:04 AM, david wrote:

At 08:05 PM 1/21/2020, you wrote:

> On 1/21/20 10:10 AM, david wrote:
>> At 08:52 AM 1/21/2020, David G. Miller wrote:
>>
>>
>>> On 1/21/20 9:35 AM, david wrote:
>>>> Folks
>>>>
>>>> In a test Centos 8 installation as a guest of VirtualBox on Windows
>>>> 10, I want to install ffmpeg, and support for exfat. They're not in
>>>> the standard distribution (as far as I know), so I issue as root:
>>>>
>>>>   yum -y --enablerepo rpmfusion-free-updates install ffmpeg
>>>> fuse-exfat exfat-utils
>>>>
>>>> and that works just fine.  The ffmpeg functionality works; I
>>>> haven't tested exfat yet.  However, later, as part of 
maintenance,

>>>> I want to get a list of everything that's installed, so I issue
>>>>
>>>>   yum list installed
>>>>
>>>> and the following diagnostics occur:
>>>> ---
>>>> Modular dependency problems:
>>>>
>>>> Â Problem 1: conflicting requests
>>>>   - nothing provides module(perl:5.26) needed by module
>>>> perl-App-cpanminus:1.7044:8010020191120175858:a9207fc6-0.x86_64
>>>> Â Problem 2: conflicting requests
>>>>   - nothing provides module(perl:5.26) needed by module
>>>> perl-DBD-MySQL:4.046:8010020191114030811:073fa5fe-0.x86_64
>>>> Â Problem 3: conflicting requests
>>>>   - nothing provides module(perl:5.26) needed by module
>>>> perl-DBD-SQLite:1.58:8010020191114033549:073fa5fe-0.x86_64
>>>> Â Problem 4: conflicting requests
>>>>   - nothing provides module(perl:5.26) needed by module
>>>> perl-DBI:1.641:8010020191113222731:16b3ab4d-0.x86_64
>>>> Â Problem 5: conflicting requests
>>>>   - nothing provides module(perl:5.26) needed by module
>>>> perl-YAML:1.24:8010020191114031501:a5949e2e-0.x86_64
>>>> Installed Packages
>>>> 
>>>> --
>>>>
>>>> By the way, cpanm works ok too.
>>>>
>>>>
>>>> My questions are:
>>>> What do these diagnostics tell me?  What am I supposed to do 
about

>>>> it?
>>>>
>>>> Thanks for your help
>>>>
>>>> David
>>>>
>>>>
>>> I think its telling you that perl is NOT installed but the listed
>>> perl modules are installed although it could be looking for
>>> specifically the 5.26 version of perl (since you mentioned the CPAN
>>> works).  What happens if you issue perl -v? perl gets 
installed as

>>> a dependency of logwatch as an example so a lot of people don't
>>> realize that they have perl installed whether they want it or not.
>>>
>>> Cheers,
>>> Dave
>>>
>>> --
>>> "They that can give up essential liberty to obtain a little 
temporary

>>> safety deserve neither safety nor liberty."
>>>
>>> -- Benjamin Franklin
>>
>>
>> Perl is explicitly installed,  "perl -v" identifies v5.26.3, and 
comes

>> from the standard Centos 8 repositories.  So, I suspect your
>> interpretation doesn't fit the facts.
>> David K
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> https://lists.centos.org/mailman/listinfo/centos
> Not seeing that here but it appears you are running newer versions 
of at

> least perl-DBD-MySQL, perl-DBD-SQLite and perl-DBI (snipped from "yum
> list installed" on my CentOS 8 VM after running "yum update"):
>
> perl-DBD-MySQL.x86_64                     
4.023-6.el7 @anaconda
> perl-DBD-SQLite.x86_64                    
1.39-3.el7 @anaconda
> perl-DBI.x86_64                           
1.627-4.el7 @anaconda

>
> What repo are you pulling the listed packages from?  Is it the 
same repo

> as for perl?  I'm getting:

Maybe it's worth to have a look a yum.log to see what happened to 
perl in

the history of the installation?

Simon



Simon and others
Here's a very simple and hopefully reproducible test-case

Select as your boot ISO:
 CentOS-8.1.1911-x86_64-dvd1.iso
Choose to reclaim all space on the disk
Choose 'Minimal Install' as the software selection
Connect yourself to the network (I use a wired connection) 
perl-App-cpanminus

Don't bother creating a user, just provide your root password.
complete the install.

After th

Re: [CentOS] YUM (DNF) Possible Confusion Centos 8

2020-01-21 Thread David G. Miller

On 1/21/20 10:10 AM, david wrote:

At 08:52 AM 1/21/2020, David G. Miller wrote:



On 1/21/20 9:35 AM, david wrote:

Folks

In a test Centos 8 installation as a guest of VirtualBox on Windows 
10, I want to install ffmpeg, and support for exfat. They're not in 
the standard distribution (as far as I know), so I issue as root:


  yum -y --enablerepo rpmfusion-free-updates install ffmpeg 
fuse-exfat exfat-utils


and that works just fine.  The ffmpeg functionality works; I 
haven't tested exfat yet.  However, later, as part of maintenance, 
I want to get a list of everything that's installed, so I issue


  yum list installed

and the following diagnostics occur:
---
Modular dependency problems:

 Problem 1: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-App-cpanminus:1.7044:8010020191120175858:a9207fc6-0.x86_64

 Problem 2: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-DBD-MySQL:4.046:8010020191114030811:073fa5fe-0.x86_64

 Problem 3: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-DBD-SQLite:1.58:8010020191114033549:073fa5fe-0.x86_64

 Problem 4: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-DBI:1.641:8010020191113222731:16b3ab4d-0.x86_64

 Problem 5: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-YAML:1.24:8010020191114031501:a5949e2e-0.x86_64

Installed Packages

--

By the way, cpanm works ok too.


My questions are:
What do these diagnostics tell me?  What am I supposed to do about it?

Thanks for your help

David


I think its telling you that perl is NOT installed but the listed 
perl modules are installed although it could be looking for 
specifically the 5.26 version of perl (since you mentioned the CPAN 
works).  What happens if you issue perl -v?  perl gets installed as 
a dependency of logwatch as an example so a lot of people don't 
realize that they have perl installed whether they want it or not.


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither safety nor liberty."


-- Benjamin Franklin



Perl is explicitly installed,  "perl -v" identifies v5.26.3, and comes 
from the standard Centos 8 repositories.  So, I suspect your 
interpretation doesn't fit the facts.

David K
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Not seeing that here but it appears you are running newer versions of at 
least perl-DBD-MySQL, perl-DBD-SQLite and perl-DBI (snipped from "yum 
list installed" on my CentOS 8 VM after running "yum update"):


perl-DBD-MySQL.x86_64 4.023-6.el7 @anaconda
perl-DBD-SQLite.x86_64    1.39-3.el7 @anaconda
perl-DBI.x86_64   1.627-4.el7 @anaconda

What repo are you pulling the listed packages from?  Is it the same repo 
as for perl?  I'm getting:


root@bend ~]# perl -v

This is perl 5, version 16, subversion 3 (v5.16.3) built for 
x86_64-linux-thread-multi


for perl.  Since you said you're running 5.26.3 but from a standard repo 
which doesn't match what I'm seeing (5.16.3), I'm thinking your 
mismatches are due to the listed modules being built against a newer 
version of perl.


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] YUM (DNF) Possible Confusion Centos 8

2020-01-21 Thread David G. Miller



On 1/21/20 9:35 AM, david wrote:

Folks

In a test Centos 8 installation as a guest of VirtualBox on Windows 
10, I want to install ffmpeg, and support for exfat. They're not in 
the standard distribution (as far as I know), so I issue as root:


  yum -y --enablerepo rpmfusion-free-updates install ffmpeg fuse-exfat 
exfat-utils


and that works just fine.  The ffmpeg functionality works; I haven't 
tested exfat yet.  However, later, as part of maintenance, I want to 
get a list of everything that's installed, so I issue


  yum list installed

and the following diagnostics occur:
---
Modular dependency problems:

 Problem 1: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-App-cpanminus:1.7044:8010020191120175858:a9207fc6-0.x86_64

 Problem 2: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-DBD-MySQL:4.046:8010020191114030811:073fa5fe-0.x86_64

 Problem 3: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-DBD-SQLite:1.58:8010020191114033549:073fa5fe-0.x86_64

 Problem 4: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-DBI:1.641:8010020191113222731:16b3ab4d-0.x86_64

 Problem 5: conflicting requests
  - nothing provides module(perl:5.26) needed by module 
perl-YAML:1.24:8010020191114031501:a5949e2e-0.x86_64

Installed Packages

--

By the way, cpanm works ok too.


My questions are:
What do these diagnostics tell me?  What am I supposed to do about it?

Thanks for your help

David










___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
I think its telling you that perl is NOT installed but the listed perl 
modules are installed although it could be looking for specifically the 
5.26 version of perl (since you mentioned the CPAN works).  What happens 
if you issue perl -v?  perl gets installed as a dependency of logwatch 
as an example so a lot of people don't realize that they have perl 
installed whether they want it or not.


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Using Pulse Audio--question

2019-12-22 Thread David G. Miller

On 12/22/19 6:01 PM, Fred Smith wrote:

On Mon, Dec 23, 2019 at 11:34:32AM +1100, Bill Maidment wrote:

On 23/12/2019 11:06 am, Fred Smith wrote:


I can find no way to do it with pavucontrol, nor the default mate
sound tool.

In my SL7 Mate system I use the Hardware and Output tabs in
System->Preferences->Hardware->Sound

Cheers
Bill

Thanks bill.

But nothing I do there causes output.

As far as I can tell, the hardware tab just shows you what HW it
recognizes, you can't actually make any settings there.

In pavucontrol, I can see the from the audio activity bar that
the audio is getting into it, in the input tab. in the recording
tab I can see it too, but there's nothing in the playback tab that
makes it come out the speakers. :(

Fred
I do something similar to what you're trying to do when I digitize my 
vinyl LPs.  I take output from my amp/turntable into my sound card and 
use Audacity to digitize it and write an appropriate sound file.  I also 
monitor the sound using Audacity by telling it to also route the sound 
to my speakers.  The point of all of this is that I think you need a 
piece of software (Audacity is probably overkill) to receive the input 
and play it back via the output.  You don't mention any "playback" software.


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 as a guest VM

2019-12-03 Thread David G. Miller

On 12/3/19 8:46 AM, Jerry Geis wrote:

I am experiencing an issue that my process does not wake out of a select()
call when a single character is received in an input file descriptor when
running as a VMware guest.

Anyone ever experienced this ?

I can run tshark and see the character arrive, but my process does not wake
up and see that character. Most times it works - but once in a while it
does not.

So I made a change on my code - and did not just wait on select() - but
just try to read the buffer all the time and print the results.  once in a
while that character is "delayed" getting to my input buffer.  Top reports
the machine is 99% idle.

Any thoughts?

Jerry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
You don't say what the app is written in but I ran into this with perl.  
perl apps can either be line buffered or character buffered ($| if I 
remember right is the switch).  Line buffered means the buffer is not 
delivered until a newline character is received.  If nothing else, try 
"\n" and see if that gets consistently delivered.


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 8 Mate?

2019-10-26 Thread David G. Miller

On 10/26/19 6:07 AM, Fred Smith wrote:

On Sat, Oct 26, 2019 at 07:08:02PM +1100, Bill Maidment wrote:

On 26/10/2019 12:08 pm, David G. Miller wrote:

The corresponding system-config-printer rpm from Fedora 28 appears to
work.  Not the best solution but a solution.


But no longer available that I can find. I presume it must be
version 1.5.11-13 to match the -lib version

On my C8 VM I uust browsed to localhost:631 and  used CuPPS to configure
printing.


There are some places that archive earlier Fedora releases such as:

https://ftp-stud.hs-esslingen.de/pub/Mirrors/archive.fedoraproject.org/fedora/linux/releases/28/Everything/x86_64/os/Packages/s/system-config-printer-1.5.11-8.fc28.x86_64.rpm

if you like system-config-printer better than using CUPPS.

Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 8 Mate?

2019-10-25 Thread David G. Miller
The corresponding system-config-printer rpm from Fedora 28 appears to 
work.  Not the best solution but a solution.


Cheers,
Dave

On 10/25/19 5:33 PM, Frank Cox wrote:

On Sat, 26 Oct 2019 10:17:53 +1100
Bill Maidment wrote:


I have also got MATE 1.22.2 running, but I don't have access to Printer
configuration in MATE.

I think it's missing.  On Centos 7 that functionality is provided by the 
system-config-printer rpm, as seen here:

system-config-printer-1.4.1-21.el7.x86_64
system-config-printer-libs-1.4.1-21.el7.noarch

system-config-printer is the actual gui program.

On Centos 8 the only system-config-printer rpms appear to be this:

system-config-printer-udev-1.5.11-13.el8.x86_64
system-config-printer-libs-1.5.11-13.el8.noarch

Neither of those is the system-config-printer gui.

So it appears to be missing.



--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 8: what changed (regular UNIX admin commands)?

2019-10-22 Thread David G. Miller

On 10/22/19 10:55 AM, Valeri Galtsev wrote:

Hello Experts!

I'm sure many of you run CentOS for some time already.

My question is: is there some place that lists which of the most often 
used sysadmin commands are gone and what are replacements for them. Or 
what else one needs to do after successful installation. (in the past 
it was process accounting that was not enabled by default, but which 
gives you quite some handle in investigating compromise).


I just tried quite ordinaly command of freshly installed CentOS 8:

last

and got an error:

last: (default utx db): No such file or directory

I realize that it could be just me, and I'll cope with that myself one 
way or another but this one prompted me to ask everybody: Is there 
anything I can read so I can learn what differenmt to expect on CentOS 
8 from, say, CentOS 7?


Thanks.
Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Saw your later response that the problem was solved but this is an 
interesting question that deserves an answer (and not just what changed 
in RHEL8).  As an example, I'm used to ifconfig and route but keep 
getting reminded that these commands are now deprecated and "ip" should 
be used instead.  Likewise for using dnf instead of yum, systemctl 
instead of service, firewallcmd instead of iptables, etc. I wonder how 
many shell scripts there are "out there" that folks have written or 
accumulated over the years and which now need to be updated before 
deprecated becomes no longer available?  Or, like using iptables instead 
of firewallcmd, may cause something very different than what is expected.


Anyone know of any resource out there that might provide such documentation?

Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 8 Mate?

2019-10-21 Thread David G. Miller

On 10/21/19 1:00 AM, Ljubomir Ljubojevic wrote:

On 10/21/19 6:02 AM, David G. Miller wrote:

On 10/11/19 7:46 PM, Robert G (Doc) Savage via CentOS wrote:

On Wed, 2019-09-25 at 15:25 +0200, Ljubomir Ljubojevic wrote:

As of now, I have a working MATE DM on CentOS 8. It's a hack though,
I
used Fedora repositories. But that means compiling MATE in EPEL
should
be straightforward, just recompile Fedora 28 packages.


I used Fedora 28 repo file  and Fedora 28 GPG keys (links are
bellow),
unpacked then to proper directory and in Fedora repo files I changed
"$releasever" to "28".
I also installed yum-plugin-priorities and in all CentOS repo's added
"priority=1" and in all Fedora repos added "priority=2".

Then I ran following commands (something like this, I experimented
some):


yum install python2-six
yum install mate* -x mate*devel* -x mate-menu
yum groupinstall "MATE" --skip-broken
yum groupinstall "MATE Desktop" --skip-broken
echo "exec /usr/bin/mate-session" >> ~/.xinitrc
reboot
and then selected MATE in login screen.


Links to rpm's:
https://ftp-stud.hs-esslingen.de/pub/Mirrors/archive.fedoraproject.org/fedora/linux/releases/28/Everything/x86_64/os/Packages/f/fedora-repos-28-1.noarch.rpm

and
https://ftp-stud.hs-esslingen.de/pub/Mirrors/archive.fedoraproject.org/fedora/linux/releases/28/Everything/x86_64/os/Packages/f/fedora-gpg-keys-28-1.noarch.rpm


List of installed packages from Fedora 28:
https://pastebin.com/VXL03Uqj


Ljubomi,

Hooray! I re-installed CentOS 8 to a fresh VM and went through your
instructions again. This time everything rebuilt and installed
correctly. Thank you!

--Doc Savage
    Fairview Heights, IL

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Ljubomi -

A couple of minor tweaks:

v
yum --skip-broken install mate\* -x mate\*devel\* -x mate-menu -x
mate-optimus\*
yum groupinstall "MATE" --skip-broken
vvv
yum groupinstall "MATE Desktop" --skip-broken --exclude "*logos*"

but otherwise working. Decided that I should see whether I could get
MATE working on CentOS 8 before fiddling with Xfce. I now have a usable
CentOS 8 desktop. Thank you!

Cheers,
Dave


Thanks Dave.
There is another option I posted in this general thread, a Fedora COPR
user has rebuilt MATE for EL8:
https://copr.fedorainfracloud.org/coprs/stenstorp/MATE/


Saw that but I wanted to work through your original process with MATE 
before trying the same approach with Xfce  The good news is that I got 
the same results but with Xfce.  One different tweak to get around some 
additional conflicts between Fedora 28 Xfce and CentOS 8 Gnome:


yum groupinstall "Xfce" --skip-broken --exclude "*adwaita-gtk2-theme*"
yum groupinstall "Xfce Desktop" --skip-broken --exclude "*adwaita-gtk2-theme*" 
--exclude"*logos*"

Also, I skipped the step analogous to:

yum install mate* -x mate*devel* -x mate-menu

since it seemed to be redundant with doing the group installs.  So, I 
now have two CentOS 8 VMs with neither using Gnome 3.


Thanks again!!!

Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 8 Mate?

2019-10-20 Thread David G. Miller

On 10/11/19 7:46 PM, Robert G (Doc) Savage via CentOS wrote:

On Wed, 2019-09-25 at 15:25 +0200, Ljubomir Ljubojevic wrote:

As of now, I have a working MATE DM on CentOS 8. It's a hack though,
I
used Fedora repositories. But that means compiling MATE in EPEL
should
be straightforward, just recompile Fedora 28 packages.


I used Fedora 28 repo file  and Fedora 28 GPG keys (links are
bellow),
unpacked then to proper directory and in Fedora repo files I changed
"$releasever" to "28".
I also installed yum-plugin-priorities and in all CentOS repo's added
"priority=1" and in all Fedora repos added "priority=2".

Then I ran following commands (something like this, I experimented
some):


yum install python2-six
yum install mate* -x mate*devel* -x mate-menu
yum groupinstall "MATE" --skip-broken
yum groupinstall "MATE Desktop" --skip-broken
echo "exec /usr/bin/mate-session" >> ~/.xinitrc
reboot
and then selected MATE in login screen.


Links to rpm's:
https://ftp-stud.hs-esslingen.de/pub/Mirrors/archive.fedoraproject.org/fedora/linux/releases/28/Everything/x86_64/os/Packages/f/fedora-repos-28-1.noarch.rpm
and
https://ftp-stud.hs-esslingen.de/pub/Mirrors/archive.fedoraproject.org/fedora/linux/releases/28/Everything/x86_64/os/Packages/f/fedora-gpg-keys-28-1.noarch.rpm

List of installed packages from Fedora 28:
https://pastebin.com/VXL03Uqj


Ljubomi,

Hooray! I re-installed CentOS 8 to a fresh VM and went through your
instructions again. This time everything rebuilt and installed
correctly. Thank you!

--Doc Savage
   Fairview Heights, IL

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Ljubomi -

A couple of minor tweaks:

v
yum --skip-broken install mate\* -x mate\*devel\* -x mate-menu -x 
mate-optimus\*

yum groupinstall "MATE" --skip-broken
vvv
yum groupinstall "MATE Desktop" --skip-broken --exclude "*logos*"

but otherwise working. Decided that I should see whether I could get 
MATE working on CentOS 8 before fiddling with Xfce. I now have a usable 
CentOS 8 desktop. Thank you!


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Differences between CentOS 7.x and CentOS 8.x OS

2019-10-05 Thread David G. Miller



On 10/5/19 2:47 AM, Ljubomir Ljubojevic wrote:

On 10/5/19 3:14 AM, David G. Miller wrote:

On 10/4/19 6:59 PM, Fred Smith wrote:

On Fri, Oct 04, 2019 at 04:52:28PM -0600, David G. Miller wrote:

On 10/3/19 1:37 PM, Ljubomir Ljubojevic wrote:

On 10/3/19 5:49 PM, Kaushal Shriyan wrote:

Hi,

I will appreciate it if someone can help me understand the differences
between CentOS 7.x and CentOS 8.x OS. I look forward to hearing
from you
and thanks in advance.


In short, CentOS 7.x is based on Fedora 19 while CentOS 8 is based on
Fedora 28. Most of what is in those Fedora's is also in coresponding
CentOS version. Fedora's might be much easier to compare.




This sort of cuts across two discussion threads but I found this one
first.  Silly question: has anyone tried using the Mate or Xfce
Fedora 28 spins as package sources with CentOS 8?

I think someone did post recently that he took Mate from F28
and with some judicious tweaking of the spec file got it built
and working on C8. Sorry, I have no details.



Hopefully, the perpetrator will 'fess up and provide the details.

Cheers,
Dave


"It is I, Leclerc"

Here is what I did to have working MATE from Fedora 28 repositories (did
not recompile anything):

https://lists.centos.org/pipermail/centos/2019-September/173533.html

Thanks!  Since I'm an Xfce type, I'll go that route first.  I'm thinking 
that the same process has a good chance of working as long as the 
dependencies are the right version.  I'll post steps of road blocks.


BTW, I tend to be more the Inspector Clouseau type!

Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Differences between CentOS 7.x and CentOS 8.x OS

2019-10-04 Thread David G. Miller

On 10/4/19 6:59 PM, Fred Smith wrote:

On Fri, Oct 04, 2019 at 04:52:28PM -0600, David G. Miller wrote:

On 10/3/19 1:37 PM, Ljubomir Ljubojevic wrote:

On 10/3/19 5:49 PM, Kaushal Shriyan wrote:

Hi,

I will appreciate it if someone can help me understand the differences
between CentOS 7.x and CentOS 8.x OS. I look forward to hearing from you
and thanks in advance.


In short, CentOS 7.x is based on Fedora 19 while CentOS 8 is based on
Fedora 28. Most of what is in those Fedora's is also in coresponding
CentOS version. Fedora's might be much easier to compare.




This sort of cuts across two discussion threads but I found this one
first.  Silly question: has anyone tried using the Mate or Xfce
Fedora 28 spins as package sources with CentOS 8?

I think someone did post recently that he took Mate from F28
and with some judicious tweaking of the spec file got it built
and working on C8. Sorry, I have no details.



Hopefully, the perpetrator will 'fess up and provide the details.

Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Differences between CentOS 7.x and CentOS 8.x OS

2019-10-04 Thread David G. Miller

On 10/3/19 1:37 PM, Ljubomir Ljubojevic wrote:

On 10/3/19 5:49 PM, Kaushal Shriyan wrote:

Hi,

I will appreciate it if someone can help me understand the differences
between CentOS 7.x and CentOS 8.x OS. I look forward to hearing from you
and thanks in advance.


In short, CentOS 7.x is based on Fedora 19 while CentOS 8 is based on
Fedora 28. Most of what is in those Fedora's is also in coresponding
CentOS version. Fedora's might be much easier to compare.




Best Regards,

Kaushal
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



This sort of cuts across two discussion threads but I found this one 
first.  Silly question: has anyone tried using the Mate or Xfce Fedora 
28 spins as package sources with CentOS 8?


I'm not a fan of Gnome 3 so would like to get Xfce up and running on 
CentOS 8 with a minimum of effort.  I'm thinking the folks asking about 
Mate in the other thread have the same sentiment.


Cheers,
Dave

--
"They that can give up essential liberty to obtain a little temporary safety deserve 
neither safety nor liberty."

-- Benjamin Franklin

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Trace back related to nouveau with 6.8

2016-06-07 Thread David G . Miller
Hi All -

Ever since I upgraded to 6.8 I have usually been getting a trace back report
for some bits related to Nouveau whenever the screensaver has been running
and I get back into the system.  Along the lines of:

:Pid: 31, comm: events/4 Tainted: GW  --    
2.6.32-642.el6.x86_64 #1
:Call Trace:
:[] ? warn_slowpath_common+0x91/0xe0
:[] ? warn_slowpath_null+0x1a/0x20
:[] ? drm_helper_choose_crtc_dpms+0xa6/0xb0 [drm_kms_helper]
:[] ? drm_helper_connector_dpms+0xe6/0x1a0 [drm_kms_helper]
:[] ? nv50_crtc_dpms+0x0/0x10 [nouveau]
:[] ? nvif_notify_init+0x121/0x160 [nouveau]
:[] ? nouveau_connector_hotplug+0x92/0xd0 [nouveau]
:[] ? nvif_notify_work+0x0/0xc0 [nouveau]
:[] ? nvif_notify_work+0x2e/0xc0 [nouveau]
:[] ? nouveau_fence_work_handler+0x0/0x30 [nouveau]
:[] ? worker_thread+0x170/0x2a0
:[] ? autoremove_wake_function+0x0/0x40
:[] ? worker_thread+0x0/0x2a0
:[] ? kthread+0x9e/0xc0
:[] ? child_rip+0xa/0x20
:[] ? kthread+0x0/0xc0
:[] ? child_rip+0x0/0x20

PID 31 is:
root31  0.9  0.0  0 0 ?SJun03  12:44 [events/4]

It seems to be innocuous (everything seems to still work) but things that
seem to be innocuous have a habit of coming back and biting me.  Anyone else
experiencing this?  Anyone know how to fix it?  Both kernel and
xorg-x11-drv-nouveau are current as is the rest of the system.  Not finding
anything with Google.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] IPv6 updating DNS

2014-10-02 Thread David G . Miller
Bill Gee bgee@... writes:

 
 On Wednesday, October 01, 2014 15:23:52 Mark Tinberg wrote:
   All of my servers and
   workstations are able to ping6 to outside targets, and anything with a
   browser installed can open ipv6.google.com.
   
   So far I have figured out that you have to run TWO instances of DHCP.  
One
   instance issues IPv4 and the other issues IPv6.I have not gone so 
far
   as to actually set up a second instance of DHCP.
  
  As long as you run a router advertisement daemon clients will self-
assign
  routable addresses, you don't really need DHCPv6 if you are also running
  DHCPv4, you can set DNS (even an IPv6 DNS server) or any other
  configuration using the DHCPv4 daemon.
  
  —
  Mark Tinberg
  mark.tinberg at wisc.edu
 
 That is true - radvd does cause all my systems to self-assign a public 
IPv6 
 address.  The problem is that radvd does NOT cause my DNS to get those 
 addresses.  The result is I can use IPv6 internally only by giving the 
 address.  I cannot use it by hostname.  
 
 The only exception is the server hosting DNS.  DNS somehow knows the IPv6 
 address of its host and will deliver it on demand.  I can ssh to that 
server 
 by name and get an IPv6 connection.
SNIP
Ran into this a couple of years ago when I was playing with IPv6.  I guess 
it hasn't changed since then.  

The problem is that dhcpd and dhcpd6 are two separate services and dhclient 
only talks to one of them.  So, you can get your client IPv4 addresses into 
DNS or you can get your IPv6 addresses in but not both through DHCP and 
dynamic DNS updates.  There is probably a way to get both addresses in using 
a shell script that runs on each client but I didn't see a way to do it 
securely.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6 and android connectivity (Nook) [SOLVED]

2014-07-30 Thread David G . Miller
mark m.roth@... writes:

 
 On 07/29/14 12:15, m.roth@... wrote:
 SNIP
  I did find this, while googling this morning:
  http://nuxref.com/2013/10/15/upgrading-the-mtp-support-on-centos-
6/comment-page-1/,
  which led me to
  http://research.jacquette.com/jmtpfs-exchanging-files-between-android-
devices-and-linux/,
  which I'll try this evening. I was hoping for extras, or elrepo, but no
  joy.
 
 VICTORY!
 
 I installed both of his rpm's. Then I copied
 rsync -HPavx /lib/udev/rules.d/69-libmtp.rules /etc/udev/rules.d
 - his package installs it there.
 
 And then, no reboot, jmtpfs /mnt/nook, and voila!
 
   mark
 
Tad late to reply because I get the digest and had a very full day.  Also, I 
don't have a nook but have a Google branded ASUS tablet.

On standard (if there is such a thing) Android tablets there is an ap called 
on the go.  It turns the one-way, micro-USB interface into a true USB 
storage device.  You also need an A-micro (male) to B (female) USB cable.

I also had some luck with a bluetooth connection but that was a little slow.  
Handy as a backup though if you don't have the right cable when you need it.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 and xfce

2014-07-21 Thread David G . Miller
Tom Bishop bishoptf@... writes:

 
 I finally have got around to installing centos 7 and usually do a
 pretty minimal installation, I chose the virtualization host, since
 that will be the primary purpose.  However I have hit a snag, I
 usually install xfce from epel and go along my way but there appears
 to be a bug in the xfce package:
 
 Error: Package: xfdesktop-4.10.2-2.el7.x86_64 (epel)
Requires: desktop-backgrounds-basic
  You could try using --skip-broken to work around the problem
  You could try running: rpm -Va --nofiles --nodigest
 
 It has been reported and I assume it will be corrected at some point,
 but was wondering if anyone has xfce running on centos 7 or any other
 alternatives to kde/gnome3.
 
 Thanks.
 
The corresponding file from Fedora 19 works.  My guess is that any Fedora 
xfce desktop-backgrounds-basic file would work but I went with the one from 
Fedora 19.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cemtos 7 : Systemd alternatives ?

2014-07-11 Thread David G . Miller
Les Mikesell lesmikesell@... writes:

 
 On Thu, Jul 10, 2014 at 8:39 AM, David G. Miller dave@... wrote:
 
  Generally speaking, if a service is broken to the point that it needs
  something to automatically restart it I'd rather have it die
  gracefully and not do surprising things until someone fixes it.   But
  then again, doesn't mysqld manage to accomplish that in a
  fully-compatible manner on Centos6?
 
  Can't find the original post so replying and agreeing with Les.  Have the
  same ongoing problem with radvd.  When My IPv6 tunnel provider burps, the
  tunnel drops.  The tunnel daemon usually reconnects but radvd stays down.
  Solution:
 
  */12 * * * * /sbin/service radvd status  /dev/null 21 || /sbin/service
  radvd start 21
 
  in crontab.  How hard is that?  And without all of the systemd nonsense.
 
 Or, if you want things to respawn, the original init handled that very
 nicely via inittab.   Also,running a shell as the parent of your
 daemon as a watchdog that can repair its environment and restart it if
 it exits doesn't have much overhead.  Programs share the loaded
 executable code across all instances and you pretty much always have
 some shells running on a linux/unix box - a few more won't matter.
 
Just pointing out one of several approaches to respawning a daemon without
the overhead of systemd.  I went with this approach since the problem is not
with radvd or its init script but with my IPv6 tunnel provider.  I wanted
something that didn't require modifying any of the installed bits.  This
approach also means that updates to radvd and friends don't overwrite my
modifications.  Just playing with the IPv6 stuff so having it down for up
to five minutes also isn't a problem.  The source of the problem goes away
when my ISP provides IPv6 and I don't need to tunnel IPv6 in IPv4 anymore.

I look at systemd as being yet another nuclear fly swatter.  Overkill for
simple problems that can and should be be addressed at the problem without a
sweeping, system level change.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cemtos 7 : Systemd alternatives ?

2014-07-10 Thread David G . Miller
Les Mikesell lesmikesell@... writes:

 
 On Tue, Jul 8, 2014 at 2:16 PM, Reindl Harald h.reindl@... wrote:
 
  Am 08.07.2014 17:58, schrieb Les Mikesell:
  On Tue, Jul 8, 2014 at 8:42 AM, Dennis Jacobfeuerborn
  dennisml@... wrote:
  Also the switch from messy bash scripts to a declarative
  configuration makes things easier once you get used to the syntax.
 
  Sorry, but I'd recommend that anyone who thinks shell syntax is
  'messy' just stay away from unix-like systems instead of destroying
  the best parts of them
 
  WTF - you can place a shell-script in ExecStart and
  set type to 'oneshot' - nobody is taking anything
  away from you
 
 Unless you are offering to do that for me, for free,  on all my
 systems, having to do it certainly does take something away.
 
  Then there is the fact that services are actually monitored and can be
  restarted automatically if they fail/crash and they run in a sane
  environment where stdout is redirected into the journal so that all
  output is caught which can be useful for debugging.
 
  What part of i/o redirection does the shell not handle well for you?
 
  wtaht part of monitoring did you not understand?
 
 Generally speaking, if a service is broken to the point that it needs
 something to automatically restart it I'd rather have it die
 gracefully and not do surprising things until someone fixes it.   But
 then again, doesn't mysqld manage to accomplish that in a
 fully-compatible manner on Centos6?
 
Can't find the original post so replying and agreeing with Les.  Have the
same ongoing problem with radvd.  When My IPv6 tunnel provider burps, the
tunnel drops.  The tunnel daemon usually reconnects but radvd stays down. 
Solution:

*/12 * * * * /sbin/service radvd status  /dev/null 21 || /sbin/service
radvd start 21

in crontab.  How hard is that?  And without all of the systemd nonsense.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Death of dyndns

2014-04-14 Thread David G . Miller
Stephen Harris lists@... writes:

 
 On Sun, Apr 13, 2014 at 02:06:42PM +, David G. Miller wrote:
 
  Be aware that the actual owner of the dynamic IP address is still
  authoritative for reverse look ups.  This means that some uses of a system
  with a dynamic IP address are problematic (e.g., mail server) since the
  reverse look up fails.  Other uses (sshd) in theory work but folks have to
 
 Not necessarily fail.  eg I do my own dynamic DNS so that xxx.my.domain
 has an A record to my home.  But if I do an rDNS for that IP then it
 returns a verizon.net record.  However this is not a problem as long as
 a forward lookup for that name returns an A record which matches.
 
SNIP
Interesting.  I had to have my ISP add a C record to their DNS for my fixed
IP address before most of my e-mails were accepted.  I recently also had to
add an SPF (sender policy framework) record on my DNS to get my e-mails
accepted bu gmail.  You could try to manage the SPF record the same way you
do other dynamic IP address records but there was a couple of day lag before
gmail accepted it when I put it in place.

 ssh client should manage that for you automatically.  It'll know you're
 connecting to xxx.my.domain and the host key will match and it should
 automatically add a new record to known_hosts for the IP address.  (Or
 you can configure ssh_config to not care).
 
Absolutely correct but then you lose the IP checking for a man in the middle
attack.  This wouldn't be that bad on a fixed IP address but would seem to
be a lot riskier on a dynamic IP address.  

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Death of dyndns

2014-04-13 Thread David G . Miller
Timothy Murphy gayleard@... writes:

 
 KevinO wrote:
 
  I would like the server with a dynamic IP address
  to be accessible through a fixed name.
  
  Setup an authoritative DNS server on the server that has a fixed IP
  address to host records for the site(s) on the server that has a dynamic
  IP address.
  
  Create a local scheme (such as a script, etc.) to periodically determine
  the current dynamic IP address and keep the records on the DNS server
  correct. You'll want to set the TTL (of the records) to a low value so
  caching name servers will update the information fairly often.
 
 But would this home DNS server provide records accessible to others?
 If in fact it is straightforward surely it must be set out 
 explicitly somewhere?
 
 Incidentally, I do already check every 15 minutes if the IP address
 of the dynamic-address server has changed - it changes every few days -
 and if it has the remote server sends me email.
 
Be aware that the actual owner of the dynamic IP address is still
authoritative for reverse look ups.  This means that some uses of a system
with a dynamic IP address are problematic (e.g., mail server) since the
reverse look up fails.  Other uses (sshd) in theory work but folks have to
continually update their ssh saved keys for that system whenever the IP
address changes.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Question about trademarks

2014-03-10 Thread David G . Miller
Digimer lists@... writes:

 
 On 09/03/14 08:26 PM, Always Learning wrote:
 
  On Sun, Mar 9, 2014 at 5:12 PM, Pouar thepouar@... wrote:
 
  I'm thinking of creating a project based on JBoss EAP the same way
  CentOS does with RHEL. Obviously I can't call it JBoss EAP so I thought
  I could call it CentAP, for Community Enterprise Application Platform.
  Will this infringe on the Red Hat and/or CentOS trademarks?
SNIP
 Personally, I would:
 
 a) Not use Cent*
 b) Ask a trademark lawyer
 
Best advice so far 

IANAL of any kind and specifically not a trademark lawyer.

As I understand it, trademark law differs from other IP law in that the
trademark owner must defend their trademark or they lose it.  It's great
when a trademarked word becomes synonymous with something (Kleenex, Xerox,
etc.) but it also means the company that owns the trademark has to actively
go after (CD) anyone who uses their trademarked word.  This also apparently
holds for companies that deliberately create a product that has almost the
same name as a trademarked product (I remember seeing a picture of a tube of
Colgade toothpaste in the article discussing this).

So, while CentAP or some of the other suggestions may not infringe on
CentOS, you could still get a CD from a Red Hat lawyer telling you not to
use CentAP.  Unless you can afford a really good trademark lawyer to fight
the CD, you'll have to discontinue use of CentAP (or whatever).  Your choice.

Clear as mud?  That's why lawyers make lots of money.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6.5 on USB stick performance / stalls

2014-02-28 Thread David G . Miller
Rainer Traut tr.ml@... writes:

 
 Hi,
 
 I am running C6.5 64bit on an USB stick connected to a HP DL360G7;
 It is usually an ESXi host but eg for firmware updates (not available on 
 SPP) I use this local installation.
 
 Problem are the lags and unresponsiveness we are seeing for example when 
 running yum update in the installation phase. The whole system stalls 
 but there is no io in vmstat.
SNIP
 
I've been running various versions of Fedora from a USB hard drive for
several years and haven't seen anything like what you describe.  I'm using a
real 400GB Western Digital hard drive instead of flash or SSD.  Given my
experience I'd bet that the lags you're seeing are due to the flash drive.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Disappearing directory

2014-01-03 Thread David G . Miller
Fred Smith fredex@... writes:

 
 On Thu, Jan 02, 2014 at 07:05:31PM +, Ken Smith wrote:
  Hi All and happy new year,
  
  Via a cron job a USB disk is mounted on a Centos 6.4 machine for backup 
  and dismounted after. I've noticed this failing. See below, the backup 
  directory that was in /mnt had disappeared, so creating it again as 
  follows...
  
SNIP
 

What does mount say is mounted after running your backup script?  An
explanation is that the script mounts something directly on /mnt and it's
still mounted after the script runs.  Unmount that (there may be several if
you've been playing with it for a while).

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] And then there was one (browser)

2013-12-21 Thread David G . Miller
Scot P. Floess sfloess@... writes:

 
 
 All,
 
 I don't know if this will help y'all, but I have gotten Chrome working 
 with CentOS 6.x:
 
 http://www.tecmint.com/install-google-chrome-on-redhat-centos-fedora-linux/
 
 On Fri, 20 Dec 2013, Kwan Lowe wrote:
 
  No consolation for CentOS 6, but Chrome does appear to work on the upstream
  7 beta.
  ___
  CentOS mailing list
  CentOS@...
  http://lists.centos.org/mailman/listinfo/centos
 
 
 Scot P. Floess RHCT  (Certificate Number 605010084735240)
 Chief Architect FlossWare  http://sourceforge.net/projects/flossware
 http://flossware.sourceforge.net
 https://github.com/organizations/FlossWare
 
Were you able to get mono/moonlight to work?  I'm happy with FF but the
local water district re-did their web site to require silverlight.  I was
able to get Chrome installed and added the moonlight/mono pieces but I end
up with a blank page after I login to their web site (couldn't even get the
login screen with FF so I guess that's progress).

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Headless system

2013-12-19 Thread David G . Miller
Billy Crook bcrook@... writes:

 
 What about when special modules need to be in the initrd for hardware
 upon which boot depends (raid cards, SAN HBAs, NICs sometimes)?
 
 On Wed, Dec 18, 2013 at 9:26 AM, David G. Miller dave@... wrote:
  Ashley M. Kirchner ashley at ... writes:
 
 
  So I'm in a bit of a pickle ...  I have a machine that needs to be
  repurposed from WinXP to CentOS.  I downloaded the CentOS DVD and all then
  realized ... I don't have a keyboard/mouse for the machine.  It only has
  USB ports on it, and I don't have a single available USB keyboard that I
  can plug in.  Bit of a problem.
 
  Usually what I do is install via VNC anyway, but that is contingent on me
  already having something on the machine that allows me to connect to it so
  that when it boots up, I can edit the boot parameters and enable VNC.  I
  don't have that this time.
 
  So, the question is: can I make a DVD image that starts the installer with
  VNC options set and if so, how do I go about that?
 
 
 
  Kind of don't raise the bridge, lower the river suggestion:
 
  Pull the hard drive and put it in another system long enough to do the
  install.  As long as the chip architecture is the same (32bit vs. 64 bit),
  it should work fine.  It should work even if one system is Intel and the
  other AMD.
 
  Cheers,
  Dave
 
  ___
  CentOS mailing list
  CentOS@...
  http://lists.centos.org/mailman/listinfo/centos
 
1) I give Ashley credit for knowing his systems and knowing if the system in
question needs such a kernel module in order to boot.

2) Fairly low likelihood that the system needs such a module in order to
even boot.  Might need it for full functionality but that can be handled later.

3) I carry around a USB hard disk with Fedora on it.  If I can get a system
to boot from the drive, it always seems to work.  Experience says most
systems will boot without any non-standard pieces.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Headless system

2013-12-18 Thread David G . Miller
Ashley M. Kirchner ashley@... writes:

 
 So I'm in a bit of a pickle ...  I have a machine that needs to be
 repurposed from WinXP to CentOS.  I downloaded the CentOS DVD and all then
 realized ... I don't have a keyboard/mouse for the machine.  It only has
 USB ports on it, and I don't have a single available USB keyboard that I
 can plug in.  Bit of a problem.
 
 Usually what I do is install via VNC anyway, but that is contingent on me
 already having something on the machine that allows me to connect to it so
 that when it boots up, I can edit the boot parameters and enable VNC.  I
 don't have that this time.
 
 So, the question is: can I make a DVD image that starts the installer with
 VNC options set and if so, how do I go about that?
 


Kind of don't raise the bridge, lower the river suggestion:

Pull the hard drive and put it in another system long enough to do the
install.  As long as the chip architecture is the same (32bit vs. 64 bit),
it should work fine.  It should work even if one system is Intel and the
other AMD.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix vs Sendmail

2013-11-03 Thread David G . Miller
Harold Pritchett harold@... writes:

 
 On 11/2/2013 8:57 AM, Timothy Murphy wrote:
  I have two CentOS-6.4 servers, in different places.
  I am running postfix/amavis on one, and sendmail/procmail on the other.
  I don't recall having any difficulty setting up sendmail many years ago
  using sendmail.mc .
  But I found postfix very complicated to setup last year.
  (It's working fine now.)
SNIP
  Having looked into postfix/amavis a little further,
  it seems to me to involve excessively complicated processes
  (at least for a simple home server)
  with email going along spaghetti-like routes.
 
  Am I alone in this view?
 
 Not at all.  Selection of a mail agent borders on a religious topic.  I
personally am a devout sendmail admin.  I
 have been running sendmail since I was the sysadmin of a network 
 of sun4 pizza boxes back in the 1980's.  I even met Eric Allman at a
USENIX conference once.  I've have given
 sessions on installing and configuring sendmail at national and 
 international conferences.  I once installed sendmail on an IBM Mainframe
running Redhat Linux.
 
SNIP
 Let's not get into a religious shouting match here.  You know, the my
software is better than yours kind of
 thing.  Pick what you are comfortable with and run it.  They all do 
 basically the same thing, just in different ways.
 
 Harold
 
Oh, come on.  We haven't had a good religious flame war on the list in a
while.  I'm sure we can even go off topic and debate vi vs. emacs, which is
the best shell, etc.

Back to the original question... I've never found sendmail that difficult
and have been running it as my MTA for years.  My take is that sendmail lets
you do almost anything you could possibly want to do with an MTA and the
configuration supports that but most people just want a simple e-mail sender
and receiver and it's not at all hard to set up to do that.  I think I only
have to change/set about half a dozen lines in sendmail.mc to configure a
minimal installation and only a few more to have it use some DNS blacklists
and spam assassin.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] erase disk

2013-09-28 Thread David G . Miller
Steve Thompson smt@... writes:

 
 On Thu, 26 Sep 2013, Bret Taylor wrote:
 
  A fairly simple solution is
  dd if=/dev/zero (or urandom) of=/dev/(device)
 
 I usually hit the disk with a hammer. Satisfying 
 
 -s
 
I run badblocks in write mode on the drive.  badblbocks does four passes
(all zeroes, alternating ones and zeroes both ways and all ones).  This is
sufficient to keep all but a high-end forensics lab from getting anything
useful off of the disk and even such a lab will have a hard time.  For the
OP's question, this lets him know that the disk is both clean and is still
good to use.

For me, if badblocks says the disk is good, it goes on the shelf as a spare
until it is hopelessly obsolete.  Otherwise, the disk gets used for target
practice.  Also, very satisfying.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to get Centos to recognize a Motorola RAZR V3 as a USB device?

2013-07-17 Thread David G . Miller
John Doe jdmls@... writes:

 
 From: Rock Rocksockdoc@...
 
  At this point, it looks like my main options are:
  a) Bluetooth
  b) Moto4lin
  c) kmobiletools
 
 I did not follow the whole thread but, the doc seems to talk about 
 a mass storage mode...
 https://motorola-global-portal.custhelp.com/app/answers/detail/a_id/88616
 It does not work without special drivers?
 
 JD
 
Can't say much specific about your Motorola RAZR V3 but my Android phone 
just needed an app for USB storage mode.  The phone wants to start the USB 
tethering application when I initially connect it with a USB cable to a 
computer.  I have to close that app and then I can run the USB mass 
storgae app.  As soon as I run the USB storage app the phone's SD cards 
show up on the system the phone is attached to as UBS storage devices.  
Have you looked for a USB storage app?

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] unprivileged users rebooting at console

2013-05-06 Thread David G . Miller
Cliff Pratt enkiduonthenet@... writes:

 
 How are you rebooting? What groups are you in? From the command line? When
 I try this on Ubuntu (don't have a RHEL/CentOS here) I get Have to be
 root if I issue the /sbin/reboot command as an ordinary user.
 
 Cheers,
 
SNIP
Odd combination of systems to check right now but:

1) Fedora 18 (Xfce respin) VM console: Applications - Logout - Shutdown

2) Fedora 18 (Xfce respin) VNC session to native install: Above combination
is greyed out.  I can only logout.  But if I go to the physical system and
log in, I get the ability to shut it down.

3) Scientific Linux 6.4 console (roughly equivalent to CentOS 6.4):
Applications - Logout - Shutdown

4) All of the above: CTRL-ALT-DEL key press although I have to send the key
combination to the VM through the KVM GUI.

5) Power button or reset button.

6) Power cord.

The last two options are why someone with physical access also has the
ability to shutdown a system.  Also, I run Linux on my laptop and would find
it very annoying not to be able to shutdown the system when I need to.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] floppy drives

2013-04-09 Thread David G . Miller
mark m.roth@... writes:

SNIP
 But I'm over the first hump. Now I'm playing with /dev/fd1 and 
 /dev/floppy-fd1 (and why is it trying to read a superblock when I try to 
 mount it, when I've said -t msdos? Oh, well, onward in the fight.)
 
   mark
 
I think mount uses the same error string (possibly from ERRNO) whenever it
can't find the appropriate file system structure on a device.  Thus, you get
Unable to read superblock even when mount -t msdos is looking for a FAT
and FAT root directory.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] floppy drives

2013-04-08 Thread David G . Miller
mark m.roth@... writes:

 
 On 04/07/13 16:22, Frank Cox wrote:
  On Sun, 07 Apr 2013 16:18:29 -0400
  mark wrote:
 
  All of 'em are old DOS. Just tried mdir a:, and the same: can't open,
  can't initials A:. I really doubt the drives themselves are dead, but
 
  Floppy disks have a finite usable life.  Depending on where and how you have
  been storing them, they may be shot.
 
 Yeah, but I tried three of 'em, three different OEM, and three ages, 
 and they all give me fdisk saying it's not a valid block device.
 
 Is it possibly that there's some driver missing?
Floppy drives also have a limited lifetime.  Are you sure the drive itself
(not the disk) is good?

I also have a bunch of old floppies and try to keep at least one system with
a working floppy drive.  I see:

[dave@waste ~]# ls /dev/fd*
/dev/fd@   /dev/fd0u1120  /dev/fd0u1722  /dev/fd0u1840  /dev/fd0u720 
/dev/fd0u830
/dev/fd0   /dev/fd0u1440  /dev/fd0u1743  /dev/fd0u1920  /dev/fd0u800
/dev/fd0u1040  /dev/fd0u1680  /dev/fd0u1760  /dev/fd0u360   /dev/fd0u820
[dave@waste ~]# ls -l /dev/floppy
lrwxrwxrwx 1 root root 3 Apr  3 17:17 /dev/floppy - fd0
[dave@waste ~]# lsmod | grep floppy
floppy 57125  0 

on that system and it reads and writes floppies.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Not - Re: New DNS server up and running

2013-02-21 Thread David G . Miller
Robert Moskowitz rgm@... writes:

 
 It looks like no system, internal or external could access the DNS on my 
 new server.  IPTABLES was set for 53 both UDP and TCP. Firewall was OK.  
 In fact a local system on the same subnet, thus NOT going through my 
 firewall was denied access to the internal domain.  Localhost of course 
 works.
SNIP
Not sure what you mean be Localhost of course works.  Are you using:

dig @localhost any mysubdom.mydom.com

to see if the DNS server is responding?

If not, try dig on your DNS both using @localhost, @int.ernal.ip.addr and
@ext.ernal.ip.addr and then try it from other systems on your network.

The first thing to do is to make sure the DNS server responds correctly to 
queries.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A question

2013-02-14 Thread David G . Miller
Les Mikesell lesmikesell@... writes:

 
 On Wed, Feb 13, 2013 at 9:13 AM, David G. Miller dave@... wrote:
 
  Red Hat Linux is ancient.
  SNIP
  I started with Red Hat Linux 5 in 1998.  Mind your manners when calling RHL 
  9
  ancient or I'll come over and hit you with my walker.
 
 In computer years, that's like a century ago.
 
SNIP
I guess that means the IBM and CDC mainframes I started out on in the '70s and
'80s were prehistoric.  Funny thing is that an application I helped write in the
early 1980s was still being used by the customer in the mid-1990s (long story
how I found out).  It had been ported from the original platform (IBM S/370) to
a SUN workstation and the customer still loved it.  Wouldn't surprise me if they
aren't still using it.  After all, they still fly B-52s that are even older.
 But real books don't have that 'search' box up at the top...
SNIP
Agree with one of the other responders about that's what the index is for.  One
of my tests for a book on the subject is to go to the index and see how easy
it is to find the answers to some of the questions I have that have moved me to
buy a book on the subject.

Cheers,
Dave




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A question

2013-02-13 Thread David G . Miller
John R Pierce pierce@... writes:

 
 On 2/12/2013 4:51 PM, Bassem Sossan wrote:
  I'm beginner with Linux...
  I have found a good resource, it's a book called Beginning Red Hat Linux
  9...
  the centos's version that I've installed centos 6...
  Is this book may be compatible with Centos 6 ?
 
 not really.
 
 Red Hat Linux is ancient.  
SNIP
I started with Red Hat Linux 5 in 1998.  Mind your manners when calling RHL 9
ancient or I'll come over and hit you with my walker.

Advice to OP: Don't spend much money on treeware books about Linux in general or
CentOS in particular.  The technology moves fast enough that the book will be
obsolete in six months to a year.  I work best with real books because I can
easily dog-ear, underline, highlight, mark, etc. so I understand liking a real
book.  

If you really want to have a real book, take the time to visit a local book
store that has a decent selection of technical books and page through some of
the books there to see which author's style fits you.  If you can afford it,
spend the money and support your local book store.  If you can't afford it, see
what you can find on-line, at a garage or yard sale, etc.  Either way, get used
to using Google to get answers to your questions.  The answer will change over 
time.

Cheers,
Dave




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] su path hard coded?

2012-07-24 Thread David G . Miller
Stephen Harris lists@... writes:

 
 On Mon, Jul 23, 2012 at 02:33:17PM -0500, Les Mikesell wrote:
  On Mon, Jul 23, 2012 at 2:18 PM, Stephen Harris lists@... wrote:
   On Mon, Jul 23, 2012 at 02:14:45PM -0500, Les Mikesell wrote:
   Can't you use the usual approach of 'su -' to pick up the target
   user's login environment?
  
   It's su - that causes the 'su' comman to rewrite the PATH to the
   hardcoded default.
  
  
  But it should be executing the target user's .profile which can
  override it.   '-' should be a synonym for -l or --login.
 
 You've missed the point.  I want the ability to set the default path on
 'su -' to be /bin:/usr/bin and then let the users override if they wish.
 I do not want the default path to be /usr/local/bin:/bin:/usr/bin
 

Silly question but what are you actually trying to accomplish?  Restricting the
path doesn't restrict what people can run.  Not having having /usr/local/bin in
the path doesn't stop someone from giving the full path to the program or cd-ing
to /usr/local/bin and running something there with ./progName.

Once a user has become root, they own the system.  You really can't restrict
them at that point.  If you don't want them doing some things, perhaps su  isn't
the best solution.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] KVM and vnc together

2012-05-26 Thread David G . Miller
Arun Khan knura9@... writes:

 
 On Sat, May 26, 2012 at 4:59 PM, Jerry Geis geisj@... wrote:
  I have my machine CentOS 6.2 running KVM guest of Windows 7.
SNIP
  Then when I remote in using VNC to my machine - the VNC always
  works fine. However, when I try to access the KVM session its like
  the mouse has lost its brain.
 
  Anyone ran into this?
SNIP
  Each guest VM can have it's own vnc console (look at the kvm man
 page).   With VNC enabled for your Win7 VM, you can access the Win7
 console directly w/o having to go through your CentOS desktop.
 
 HTH,
I've seen this behaviior with VMware and Xen also as well as KVM.  One level of
virtualization works fine but two levels of virtualizing the display and the
mouse appears to be a bit much for the current level of the technology and it
doesn't seem to matter which virtualization platform you use.

The Arun's response is probably your best bet for acceptable behavior.  You just
need to make the network interface for the VM as visible as your desktop's.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] xorg.conf disappear

2012-03-29 Thread David G . Miller
 m.roth@... writes:

 
 Lars Hecking wrote:
  brick writes:
  Hi
 
  My system is CentOS 6. I need to edit xorg.conf. But it can't be find in
  /etc/X11. Where is it? How can I get the default setting?
 
   /var/log/Xorg.0.log will tell you which configuration Xorg is currently
   using, which devices are autodetected etc. If you need to change only
   particular parts of the config, you can drop a .conf file with the
   corresponding Section into /etc/X11/xorg.conf.d.
 snip
 The latest, most Wonderful (tm) version of xorg doesn't seem to require
 one - it does it all at boot.
 
 That being said, I think this is a stupid idea. For example, most folks at
 work I know of have two monitors, and I've yet to see any automatic
 do-it-at-boot figure that out.
 
mark
 

Running FC-16 from an external hard disk that I carry back and forth between
home and work.  FC-16 boots just fine on two different laptops each with an
external monitor attached.  On the work system Xorg auto-detects the monitor
configuration and just works.  On my older laptop at home I have to run xrandr
to get it to sort out which display is where.  The work laptop is all Intel
including the video and the home laptop has an AMD CPU and ATI graphics plus the
display geometries are different for both the laptops and the external monitors.

I appreciate that this is with FC-16 instead of CentOS but you may find that the
autoconfiguration will work this well when RHEL/CentOS 7 gets built based on FC.
 It's really nice to just be carrying the external disk between work and home
instead of the laptop.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Shrew Soft VPN Client for CentOS 6

2012-02-27 Thread David G . Miller
David G. Miller dave@... writes:

 
 Les Mikesell lesmikesell@... writes:
  On Fri, Feb 24, 2012 at 4:30 PM, David G. Miller dave@... wrote:
SNIP
Recap: I could build and run the Shrew Soft VPN client but I couldn't get
packets back to the application process.  They made it to the NIC on the box
running the application but something weeded them out rather than delivering 
them.

After much Googling and advice from folks like Les as well as following the
advice in other message postings (that didn't work),  I finally found this
article in the Shrew Soft VPN-help archive:

http://lists.shrew.net/pipermail/vpn-help/2008-November/000950.html

Using this advice, I now have the VPN running.  The effect of setting the
various values for rp_filter aren't immediate and the one specified
(net.ipv4.conf.all.rp_filter) to set to zero was already zero (which is why I
didn't think this was the problem).  I decided to try setting all of the
rp_filter values to zero and one or more of them did the trick.

If anyone has any advice for figuring out the minimum set of rp_filter values
that must be zero, I would love to hear it.

In the for what it's worth department this was using an ike-2.1.7 rpm that 
was built from the FC-16 source rpm.  I just downloaded the srpm and built it 
on my EL6 box using rpmbuild.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Shrew Soft VPN Client for CentOS 6

2012-02-25 Thread David G . Miller
Les Mikesell lesmikesell@... writes:

 
 On Fri, Feb 24, 2012 at 4:30 PM, David G. Miller dave@... wrote:
 
  I ran tcpdump on my gateway's interface to the the 'net while running a 
  ping on
 
 Does the VPN create its own tun interface?  If so tcpdump should be
 able to see the decrypted packets entering and leaving there.
 

It gets a LAN address.  Whether it can work when bridged is a different
question.  On the FC16 box with the working VPN client, no packets actually hit
the tap0 device that has the LAN address. 

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Shrew Soft VPN Client for CentOS 6

2012-02-24 Thread David G . Miller
 m.roth@... writes:

 
 Hi, Dave,
 
 dave@... wrote:
 
  Where I work uses the Shrew Soft VPN client to access remote resources.  I
  have found pre-built rpms for EL5, various versions of Fedora, and
  appropriate packages for non-rpm based distros but no rpm for EL6.  I have
  downloaded the source from Shrew Soft and built my own which built and
  installed with no errors but then didn't work.  I'm finally taking the
 snip
  same configuration and user connects under EL6 (confirmed on the VPN
  server) but is unusable (e.g., I can't ping known systems).
 
 I think I'd try tcpdump, or some other tool, and see what's happening.
 
  mark
 
I ran tcpdump on my gateway's interface to the the 'net while running a ping on
the client.  I could see what I'm pretty sure were the ping returns (hard to
tell since it's VPN traffic).  I'll move the tcpdump to watching what goes from
the gateway to the VPN client although the VPN traffic will then be mixed in
with any other non-VPN traffic between the client and my gateway.  I can cut
back on this traffic but I can't stop it or filter it the way I cann at the
gateway's exterior NIC.

I'm pretty sure the problem has to do with the VPN stack on the VPN client.  The
FC16 box uses the same client and the same configuration to successfully connect
to the VPN and access remote systems but there are several dependent libraries
that are newer on the FC16 platform (I tried installing the FC16 rpm on my EL6
box to 1) see if it would install and 2) see what dependencies changed).  There
could be something wrong with how the outbound packets get built but then I
probably wouldn't have seen the pings coming back.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] install detecting disk as sdb not sda

2012-02-04 Thread David G . Miller
wwp subscript@... writes:

 
 Hello Ross,
 
 On Fri, 3 Feb 2012 16:01:53 -0500 Ross Walker rswwalker@... wrote:
 
  On Feb 3, 2012, at 1:34 PM, wwp subscript@... wrote:
  
   Hello Jerry,
   
   
   On Fri, 03 Feb 2012 12:24:14 -0500 Jerry Geis geisj@... wrote:
   
   I am trying to install 6.2 on a machine.
snip
   Doing  dmesg | grep sda does say SCSI removable disk.
   
   So how can I tell linux to NOT include that when installing?
   
snip
  
  You can try disabling USB disk support in the bios.
 
 Right, but I can't make such settings permanent, as I need to boot from
 a USB disk from time to time, thus, entering BIOS and changing settings
 costs more than unplugging stuff .
 
 An aspect of the problem w/ that behaviour change introduced w/ recent
 kernel updates, is that some mount mapping tables (fstab for instance)
 are broken if they rely on mount order (sda, hda, etc.) instead of
 device ID or label.
 
 Regards,
 
This seems to be BIOS dependent.  I use an external USB hard disk as my portable
computer.  On my personal laptop the external drive shows up as /dev/sdb even if
I boot from the external.  If I recall correctly, it's /dev/sda on my work
laptop.  Doing mounts using UUIDs means everything just works regardless of
drive lettering.

Bottom line is play with the BIOS settings.  You may find a combination that
gets you the right drive letters and lets you boot from the USB when you need
to.  On the other hand, my personal laptop BIOS forgets about the boot from
external USB drive if I boot with the drive not present.  I have to go into the
BIOS and reset to boot from external the next time I try to use it.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Quantum scalar i40 tape partitions

2012-01-31 Thread David G . Miller
Xinhuan Zheng xzheng@... writes:

 
 Hi All,
 
 I have a Quantum scalar i40 tape library. I need to configure it to TWO tape
partition libraries, e.g.,
 library_a and library_b, so that each library has its own tape drive. Then
connect this physical tape
 library to two different CentOS servers so that each server can see its own
media changer and tape drive. I
 once had a successful configuration on one host but NOT on the other. One host
sees the media changer and one
 tape drive, while the other host only sees the tape drive. After I delete tape
partitions and re-create
 them both servers are totally screwed up. This is CentOS 5.7 kernel 
 2.6.18-274.
 
 On one server:
 
 # cat /proc/scsi/scsi
 Attached devices:
 Host: scsi0 Channel: 00 Id: 00 Lun: 00
   Vendor: HP   Model: Ultrium 5-SCSI   Rev: Z58Z
   Type:   Sequential-AccessANSI SCSI revision: 06
 Host: scsi0 Channel: 00 Id: 00 Lun: 01
   Vendor: QUANTUM  Model: Scalar i40-i80   Rev: 135G
   Type:   Medium Changer   ANSI SCSI revision: 03
 
 # mtx -f /dev/sg0 inquiry
 mtx: Request Sense: Long Report=yes
 mtx: Request Sense: Valid Residual=no
 mtx: Request Sense: Error Code=70 (Current)
 mtx: Request Sense: Sense Key=Illegal Request
 mtx: Request Sense: FileMark=no
 mtx: Request Sense: EOM=no
 mtx: Request Sense: ILI=no
 mtx: Request Sense: Additional Sense Code = 25
 mtx: Request Sense: Additional Sense Qualifier = 00
 mtx: Request Sense: BPV=no
 mtx: Request Sense: Error in CDB=no
 mtx: Request Sense: SKSV=no
 INQUIRY Command Failed
 
 # mtx -f /dev/sg1 inquiry
 mtx: Request Sense: Long Report=yes
 mtx: Request Sense: Valid Residual=no
 mtx: Request Sense: Error Code=70 (Current)
 mtx: Request Sense: Sense Key=Illegal Request
 mtx: Request Sense: FileMark=no
 mtx: Request Sense: EOM=no
 mtx: Request Sense: ILI=no
 mtx: Request Sense: Additional Sense Code = 25
 mtx: Request Sense: Additional Sense Qualifier = 00
 mtx: Request Sense: BPV=no
 mtx: Request Sense: Error in CDB=no
 mtx: Request Sense: SKSV=no
 INQUIRY Command Failed
 
 On the other server:
 
 tape drive (/dev/st0 not even present).
 
 Can someone please help?
 
 Thanks,
 
 - xinhuan
 
Some observations and some questions:

1) You would probably do better asking for this kind of help on a more
tape-centric or even Quantum specific forum.

2) If I read your description correctly, you have one tape changer with two
physical drives.  You can partition the library but there is still only one
changer.  That could be the problem.

3) You don't say how you attach the library to the servers.  I'm guessing fibre
channel through a FC switch.  Is this correct?  With the correct software both
servers could end up seeing the library as their own this way.

4) You can try doing a rmmod sg followed by a modprobe sg.  This will result
in your systems resensing the SCSI bus.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Networking question

2011-09-08 Thread David G . Miller
 tdukes@... writes:

Lots deleted

 After checking with Verizon on their mobile Hotspot plans, it isn't feasible.
However, I can do it through
 my unlimited data plan for my iPhone. 3G is faster than the Road Runner
service I have.
 
 If I use the IPhone, I can use a USB connection. My centos machine acts as my
firewall/gateway on my wired
 network so the question now is, if I use the USB connection to my centos
machine will that bypass the firewall?
 
 Thanks
 
That mainly depends on how the USB data connection to your iPhone shows up on
the Linux box.  If the iPhone shows up as a network connection (i.e., it's a
peer and you have networking over USB) then you just need to make sure that data
on that connection still goes through IPtables.  If the iPhone just shows up as
a mass storage device, you'll first have to figure out how to get it to show up
as a peer.

I'm interested in whether you can make this work since I will need a similar
capability (smart phone acting as Internet gateway) in the near future.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Networking question

2011-09-07 Thread David G . Miller
 tdukes@... writes:

 
 Hello,
 
 Is it possible to use a mobile hot spot such as the one from Verizon
 to run a home network? Is there a way to do
 this without having to buy wireless cards? I was thinking maybe I would 
 have to buy one for my centos machine
 which acts as my gateway but would like to have other devices wired.
 
 Not sure if a wireless router or access point would allow me to do so.
 
 TIA,
 
 Eddie
 
My experience with mobile hotspots is that they work just like having a DSL or
cable connected wireless router.  You don't need a separate router but you will
want to make sure everything that connects to it is firewalled.  The one I 
tried out earlier this year was even running Linux under the hood.  

The big difference between a mobile hotspot and some other form of connectivity
is cost since you need a cell phone type data plan for the mobile hotspot. 
These aren't too bad for surfing the 'net but you can blow your data cap by
downloading one ISO or chew through a lot of it with just a point release
update.  I can't imagine what a suitable data plan would cost for multiple 
systems.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] big problem at boot

2011-09-04 Thread David G . Miller
Michel Donais donais@... writes:

 
 
 I restarted the a Centos 5.6 server tonight and I 
 ran in this issue:
  
 I was able to boot.
 Then instead of a normal boot with graphical 
 interface the system requested :
 'Enter run level'
 'INIT'
 I typed 5
 then I got 'INIT: no more process left in this run 
 level
  
 How can I recover from  the 
 situation?
A tad late but you can try running smartctl -H /dev/sdX or smartctl -a
/dev/sdX where /dev/sdX is your boot disk.  Chances are that it will only tell
you what you already know: the drive is dying.  I've had good luck with smartd
telling me when a disk is starting to fail.  Partition tables don't just
disappear on healthy hard drives.

Cheers,
Dave




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS-6 dhcpd

2011-07-16 Thread David G . Miller
Timothy Murphy gayleard@... writes:

 
 
 I've installed CentOS-6 on my server
 (in parallel to CentOS-5.6)
 and now I'm trying to set up dhcpd.
 
 I'm not sure if there has been a change in dhcpd
 under CentOS-6, but I'm getting the dreaded message
 Not configured to listen on any interfaces!
 when I sudo service dhcpd restart.
 
 I realise now that I have never known
 how the connection between interface (eth0 and eth1, in my case)
 and network (192.168.1.0 and 192.168.2.0, in my case)
 is established.
 
 I have DHCPDARGS=eth1 in /etc/sysconfig/dhcpd
 but evidently I need to say something more somewhere.
 
 Can one actually specify the interface in /etc/dhcpd.conf 
 and if so how?
 
 Any suggestions or enlightenment gratefully received.
 
I read through the rest of the response but I'm thinking what I have to say fits
better here than lower in the comments thread.  Some things to check:

RHEL6/CentOS6 likes to let NetworkMangler control interfaces even if the system
is a server and running services like dhcpd.  You may be getting a failure
message since the interface isn't up when dhcpd gets started.  I only find
NetworkMangler useful on systems that regularly change connectivity like my
laptop.  I just find it gets in the way on stable, wired networks.

The same problem can occur on VMs just because the virtual interface comes up
more slowly the a real hardware device.  That is, eth1 sn't there yet when
dhcpd starts.

If you specify the correct interface that matches the IP address you want DHCP
services on in /etc/sysconfig/dhcpd you shouldn't need a dummy interface/network
specification.

I notice that you mention /etc/dhcpd.conf but the location of the configuration
file moved to /etc/dhcp with RHEL6/CentOS6.  Unless you edit the startup files,
dhcpd will use the configuration file /etc/dhcp/dhcpd.conf

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Where can I download centos 6

2011-07-10 Thread David G . Miller
Karanbir Singh mail-lists@... writes:

 
 Hi,
 
 On 07/09/2011 05:23 PM, Edson - PMSS wrote:
  I really like CentOS, but it is undeniable the delay in the release of
  version 6.0.
 
 yes, we all clearly take that on board - I hope the changes we are 
 bringing in helps clear that, and prevent this sort of a situation. But 
 there are still lots of places for improvements, and over the next few 
 months lets try and address all of those.
 
 - KB
 
Because I needed the 6.0 versions of dhcpd and named for some IPv6 testing I was
doing, I grabbed Scientific Linux 6.0 right after it was released.  I also
signed up for the SL mailing list.  A couple of weeks ago (June 20th or so) the
SL folks announced the availability of SL 5.6.  I would interpret this as the SL
team chose to work on 6.0 and left 5.6 for later while the CentOS team worked on
5.6 and left 6.0 for later.  

I have no insight into what level of support the SL folks get from their
sponsoring organization (CERN and Fermilab) but as far as I'm concerned getting
the two releases out (5.6 and 6.0) was a dead heat between the two
distributions.  This is especially true if you consider that the SL team had the
benefit of the CentOS team's experience with 5.6.  I mention this because it
indicates to me that the CentOS process isn't broken.  On the other hand, if not
getting 5.6 and 6.0 out sooner gets more people involved in helping, it may have
long term benefits.

These are just my observations on two different teams working to release the
same two releases.  Carefully consider what changes you make to the release
process.  Oh yeah, great job guys and, yes, I'll be moving the SL 6 boxes and
VMs back to CentOS as time allows mainly because the community just isn't there
for SL (most days the mailing list only has a dozen or so posts; most of them
not very technical).

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] community communication

2011-05-03 Thread David G . Miller
Karanbir Singh mail-lists@... writes:

 
 On 05/03/2011 07:57 AM, Steve Castellotti wrote:
 
  /We should have news, along with a release plan, for CentOS-6 in the
  next few days/
 
 There is a plan, of sorts. I wanted to make sure the QA guys had a few 
 days to mull it over before making it public. And then there was the 
 rather nice and long holiday weekends here in the UK. 10th is the first 
 target, with a release couple of weeks later. We have a potential 
 release date to work against from there on.
 
 - KB
 

Thank you, KB.  I think that this sort of back of the envelop estimate is all
quite a few of us have been asking for.  We know it's not written in stone and
any hard deadline planning that relies on it is a fool's errand.  On the other
hand, it gives us a it probably won't happen sooner than date to work with.

Any chance you can throw one of these out say once a week?  DO NOT spend more
than one minute longer than just typing the e-mail to come up with the estimate.

Thanks again.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos as Gateway ? (Router/transparent proxy)

2011-05-02 Thread David G . Miller
Roland Roland R_O_L_A_N_D@... writes:

 Hence, i'm thinking of setting up a centos machine to work as such:
 
 HDSL modem(natted to an onboard dhcp service for lan users) - Centos - 
   Switch - LAN users
 
 Hw specs:
 
 3 GB ram
 3.0 core 2 duo
 2 X 1 TB HDD
 2 X 1 Gb NIC

Your proposed configuration is pretty close to what I've been running for
several years (my original server had an AMD K-6 and ran Red Hat 6). The
hardware is way more than sufficient.  I have CentOS doing the natting instead
of the modem.  Just use the modem as a pass through.  

Pretty much everything I've done is documented on my blog at
http://davenjudy.org/davesBlog.  I describe what I've done on the blog and that
way I document what I did for my future use and someone else might be able to
use it.

 
 Centos will contain the following:
 
  1. DHCP # is there a way i could use the modem's dhcp service 
 instead? or using a centos based dhcp service is better?
  2. Samba # sharing files for lan users

See my blog.

  3. Squid
  4. clamav

Don't do clamav since I even got my wife to use Linux.  No real need for squid.

  5. OpenRadius # wifi authentication

See my blog.

  6. knockd service (anyone tried it? i read about this service a few 
 weeks ago and am wondering if it's worth giving it a shot... for public 
 access to the server )

I just used public keys for ssh and disabled password login.  I also suggest you
move the sshd port to something non-standard just to cut down on the fruitless
attempts to login there.  The script kiddies generally don't scan to see if sshd
is listening on a non-standard port.

  6. Things which are needed :
  a. Ability to separate Wireless router from LAN. (thinking 
 of vlans though as i have a dumb switch am thinking of adding a 3d NIC 
 to my desktop and dedicating it to the wifi ? )

3rd NIC is probably the easiest with a crossover cable to the WiFi AP.  That way
you can easily set up specific firewall rules for the WiFi traffic.

  b. Accountablity of quota and bandwidth used (i was 
 thinking of SARG and SQstat for squid)
  c. using some sort of shell script that will parse squid 
 logs (mysar will help me access squid logs through mysql) and if someone 
 bypassed their allowed quota for the day they will be moved to a delay 
 pool with lower bandwidth.
 

Hopefully, someone else can help you with these.

Most of my recent blog posts deal with setting up IPv6.  You'll need to look
through the CentOS server set up and maintenance notes section for some of the
older articles (DHCP, RADIUS, etc.).

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sshd: Authentication Failures: 137 Time(s)

2011-04-04 Thread David G . Miller
Rainer Traut tr.ml@... writes:

 
 Hi,
 
 to prevent scripted dictionary attacks to sshd
 I applied those iptables rules:
SNIP
 

Lots of good advice from several people.  All of the suggested solutions mean
you still have to wade through log entries from the unsuccessful attacks.  

I've been quite happy with similar IP tables rules but I moved sshd to listen on
something other than port 22 for external connections.  I haven't seen a single
brute force attack since making the move and all unsuccessful attempts to login
via ssh get logged so it's not like attackers can stay below my radar.

It seems that the script kiddies who are responsible for most of these attacks
don't bother scanning (nmap) before the attack.  If port 22 isn't open they move
elsewhere.  If I ever see any failed login attempts I can assume that the
perpetrator is at least a little more skilled than usual and possibly take
additional action.

Cheers,
Dave




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] #!/bin/csh -v not work on CENTOS 5.5

2011-01-27 Thread David G . Miller
Cameron Kerr cameron@... writes:

 
 
 On 27/01/2011, at 7:27 AM, David G. Miller wrote:
 
  chmod -R g+rx,o+rx Nelson/
  
  cd
 
 What is the result of 'cd' (a shell-internal command) in this version of tcsh?
 It is the same as in sh?

As expected, cd with no directory is the same as cd ~/

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] #!/bin/csh -v not work on CENTOS 5.5

2011-01-26 Thread David G . Miller
mcclnx mcc mcclnx@... writes:

 
 We have several csh batch scripts using #!/bin/csh -v.  It work fine,
before Centos 5.5.  After cenos
 5.5, it will NOT execute and only list history.
 
 Anyone know why?
 
 Thanks.
 

Actually, the script is executed:

[dave@fraud ~/bin]# ./ctest.csh

echo this is a test.
this is a test.
ls /tmp
gconfd-dave  keyring-ws5CGg  mapping-dave  plugtmpvirtual-dave.9xelPs
gconfd-root  keyring-WsDO9L  mapping-root  plugtmp-1  virtual-dave.d8jgGP


chmod -R g+rx,o+rx Nelson/

cd

cd Nelson/Chap02/

cd /share/dave/cng258/

The history is listed for some reason after the script (in the above example
starting with the chmod).  This appears to have been fixed with tcsh 6.17.00. 
The version of tcsh on CentOS is 6.14.00.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Fixing filenames with directories with spaces in the names

2010-12-28 Thread David G . Miller
Craig White craigwh...@... writes:

 
 Should be simple and perhaps I'm tired but it's not coming to me.
 
 In its simplest form...
 
 for old in `cat $FILENAME`;do
   echo $old
   dirname $old
   new=$(echo $old | sed 's/\*/\-/')
 done
 
 I'm trying to take out some stupid Macintosh things - in this case
 filenames with asterisks but I have others like tilde's and probably
 others that I haven't come across.
 
 Anyway, $FILENAME has...
 
 /tmp/New Woman In Field/*NEW woman in field.psd
 /tmp/New Woman In Field/*NEW woman in field 2.eps
 /tmp/New Woman In Field/*NEW woman in field 2.psd
 
 and the echoes are broken with spaces like this (which of course doesn't
 work)...
 
 /tmp/New
 /tmp
 /tmp/New
 Woman
 .
 Woman
 In
 .
 In
 Field/*NEW
 Field
 Field/-NEW
 woman
 .
 woman
 in
 .
 in
 field.psd
 

I'm more of a c-shell guy but a for loop uses white space (either newline or
space) as the delimiter.  One of the other responses suggested an alternative
loop construct.  Alternatively, the find command with the appropriate commands
in either a script file or just following a -exec.  Something like:

find . -type f -exec `new = `echo {} | tr [bad chars] [replace]`; mv {} $new;
echo old: {} new: $new \;

The above needs lots of work but this way you don't have to visit each 
directory.

Cheers,
Dave

Cheers,
Dave




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] help fdisk and dd

2010-03-05 Thread David G . Miller
 m.r...@... writes:

 
  m.r...@... wrote:
 
  [...]
 
  Alternatively, the answer on another techie mailing list I'm on is that
  you could disassemble the disks and use thermite.
 
  Just a hammer, no need to disassemble the case.
 
 I dunno, a buddy who was in army intel back in the early eighties told me,
 about 10 years ago, that they could flatten out the platters and read some
 data. Thermite not only melts the platters, but will hit the Curie point.
 
   mark and make nice flames and melting metal
 

Over the years I've ended up with a pile of old hard drives.  Some are
unreliable; some won't even spin up and some are just REALLY old (e.g., 100s
of MB size).  I also inherited a couple of rifles (M-1 Garand and M-1 
Carbine). I'm thinking write /dev/urandom to ones that will spin but then 
take the whole lot out in the country for some target practice.  It may be
possible to scape a little data off of what's left after the drive gets hit 
with a round from the Garand but I doubt if anyone will want to go to the
trouble.  It could also be fun.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] APC Smart-ups quot;status codesquot; (slightly OT)

2010-01-30 Thread David G . Miller
 m.r...@... writes:

 
 We got replacement battery kits for some of our APC UPS' (Smart-UPS,
 rackmount). I put them into one tray (it's for an RBC 43, which takes 8,
 and weighs a ton), and put it in, and let it charge. Idiot change
 battery led stays on. So I hit the test button, it discharges very
 rapidly (a good number of servers on this), and the led stays on.
 
 For some reason, apcupsd's USB test fails, with an HIDDEV i/o error. So I
 got rid of the weird APC usb cable, and put in one of their serial cables,
 and run the smart test (the USB does more), and get results showing
 everything's fine.
 
 But the idiot light's still on.
 
 So, looking at all the values that the apcsmart choice can give me, the
 first thing is UPS status. I've been googling for a while, and can't find
 a single reference to it. Anyone have a link to somewhere that will give
 me the status codes (and their meaning)?
 
 Thanks in advance.
 
 mark
 

Also, check what message is being written into /var/log/messages by apcupsd.  If
it's still saying, replace battery, then it's probable that the UPS didn't
sense the new battery and you just need to update the battery date on the UPS.
 No sure why but logwatch doesn't consider any of the apcupsd messages as
reportable so you have to look at the log file to see what the UPS is reporting.

If you're lucky, the above is all that's going on and the easy fix is to update
the battery date.  I just had my APC UPS blow a battery sensor and decide that
the battery was no longer present only to then immediately decide it was indeed
there and cycle through battery attached/unattached continuously.  APC is
sending a warranty replacement UPS.  Oh, and the UPS blinks the replace battery
light whenever the battery status goes to unattached.  ARGH

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] any significant differences between centos and OEL?

2010-01-23 Thread David G . Miller
Larry Vaden larry.va...@... writes:

 
 On Sat, Jan 23, 2010 at 6:47 AM, Robert P. J. Day rpjday at crashcourse.ca
wrote:
 
   someone just pointed out to me that there is a distro called oracle
  enterprise linux which is effectively a re-branded RHEL, so i'm
  curious -- has anyone here used both centos and OEL and would there be
  any differences that would be worth caring about?
 
 Unless Oracle has changed their policy in the last two years or so,
 the release cycle for critical patches (e.g., security fixes) is
 _very_ different.
 
 Quarterly for Oracle, days for CentOS.  Again, observations are from a
 couple of years ago, but should be verifiable.  See a recent email
 below the sig.
 
 kind regards/ldv
 
 October 20th, 2009
 Oracle Critical Patch Update October 2009
 
 Dear Oracle customer,
 
 The Critical Patch Update for October 2009 was released on October 20,
 2009. Oracle strongly recommends applying the patches as soon as
 possible.
 
 snip ... /snip
 
 The next four Critical Patch Update release dates are:
 
   January 12, 2010
   April 13, 2010
   July  13, 2010
   October 12, 2010
 ___
 CentOS mailing list
 CentOS at centos.org
 http://lists.centos.org/mailman/listinfo/centos
 

The rationale given at an Oracle presentation was that it reduces their support
costs while at the same time giving their customers a more stable platform. 
Consider the possibility that RH releases an update that breaks an Oracle
installation.  Someone running Oracle on RH ends up with a broken system and
finger pointing between RH and Oracle as to who caused the problem.  Someone
running OEL never sees the problem.

Given that most folks running OEL as their Oracle DB platform will have that
system well protected, locked down and not exposed to either internal or
external users.  Thus, security flaws that only relate to exposed systems become
less of an issue.  On the other hand, it means that OEL is only appropriate for
running an Oracle database server; not a web server, e-mail server, etc.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] protecting multiuser systems from bruteforce ssh attacks

2009-08-21 Thread David G . Miller
Eugene Vilensky evilen...@... writes:

 
 Hello,
 
 What is the best way to protect multiuser systems from brute force
 attacks?  I am setting up a relatively loose DenyHosts policy, but I
 like the idea of locking an account for a time if too many attempts
 are made, but to balance this with keeping the user from making a
 helpdesk call.
 
 What are some policies/techniques that have worked for this list with
 minimal hassle?
 
 Thanks!
 
 -Eugene
 

I found that moving sshd to listening on a non-standard port cut back
significantly on the number of brute force attacks I was getting.  Obviously,
this doesn't do anything to really protect your system from a brute force
attack.  Some of the other response had some fairly good suggestions for
preventing brute force attacks.

I was seeing several such attacks each week and frequently more than one a day
until I moved my ssh port.  What this mainly does is cut down on the number of
script-kiddie attacks.  The problem is that the script-kiddie attacks cause so
much noise that they potentially hide someone attacking you who you really need
to be concerned about.  If the port/service is open, you really want to be able
to monitor it and cutting down on the noise helps.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ntp will not drift to correct time

2009-08-12 Thread David G . Miller
Tom Brown t...@... writes:

 
 Hi
 
 On 5.3 i have a situation where some boxes have been 3 or 4 seconds out 
 and restarting ntpd has fixed the issue.
 
 What i dont understand is why the clocks did not drift to the correct 
 time when the config seems correct in that restarting ntp did correct 
 the time.
 
 Is there something 'special' i need to do in order for the drift to work?
 
 $ cat /etc/ntp.conf
 restrictdefault ignore
 restrict127.0.0.1
 restrict10.0.0.0 mask 255.0.0.0 nomodify notrap
 serverserver01
 serverserver02
 fudge   127.127.1.0 stratum 10
 driftfile   /var/lib/ntp/drift
 broadcastdelay  0.008
 keys/etc/ntp/keys
 
 # cat /etc/ntp/step-tickers
 server01
 server02
 
 any clues?
 
 thanks
 
From the ntpd documentation:

Note: Since the slew rate of typical Unix kernels is limited to 0.5 ms/s, each
second of adjustment requires an amortization interval of 2000 s. Thus, an
adjustment as much as 600 s will take almost 14 days to complete.

By design, ntp takes a while to correct a clock.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A bit more on the Firefox 3.5.issue

2009-08-12 Thread David G . Miller
Ron Blizzard rb4cen...@... writes:

 I hadn't logged into Fedora for about ten days -- which was the last
 time I updated it. I updated it again today and it already had 315
 Megs of updates. I think Fedora is a good distribution, but I don't
 think I would want that kind of upkeep traffic. (Which is one of the
 reasons I use CentOS.)
 
 I think it's interesting that Ubuntu 9.04 hasn't gone to Firefox
 3.5.x. Its newest upgrade installed Firefox 3.0.13.
 
I've been playing with Fedora and Ubuntu on my desktop and laptop since this
past Spring when I took a couple of network security classes at the local
community college.  Seemed like almost every tool took a more recent version of
something than is currently shipping with CentOS.  I don't really like the
instability and high change rate with Fedora but I got really tired of needing
to build several libraries as well as the application under /usr/local when the
same application would cleanly build or install under FC or Ubuntu.

SIGH.  The choice is always bleeding edge (and take your lumps) or stability but
missing the most recent versions.  I'm looking at a career change (or mid-life
crisis) with the network security classes.  I'm not finding that I enjoy
software development (what I've been doing since 1980) the way I did back when.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Drupal installation

2009-07-24 Thread David G . Miller
Timothy Murphy gayle...@... writes:

 
 Does anyone have experience of drupal installation under CentoOS-5.3
 with MySQL database preferably accessed through phpMyAdmin.
 
 I want to install drupal more or less as an experiment,
 and I'm looking for a 1- or 2-page document 
 that just lists precisely what steps to take.
 
 I've had a quick look at the official installation instructions,
 and I found them confusing and contradictory.
 

I installed Drupal 6 a while ago since I wanted something more powerful that
WordPress.  I captured my experience in a series of postings at:

http://davenjudy.org/davesBlog/forum/22

Yes, you probably want to have a separate database user for Drupal.  I don't
think it's a requirement; just good practice.

I found the book Building powerful and robust websites with Drupal 6 by David
Mercer to be very helpful.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] More awk help

2009-06-25 Thread David G . Miller
Joseph L. Casale jcas...@... writes:

 
 Hey guys,
 Looking through my book and the web and I am not having any success
 returning data from a search.
 
 I need to have awk search for a string and print the first field which
 is no problem but now its returning two options as the input data has
 changed. The change is reliable, I only want the first field if it ends
 in a regex that I have, and I only want what that regex matches to be
 printed. Is it possible to do this in a one liner so I don't need to
 construct an awk script?
 
 I suppose I could pipe it into grep and cut but that's not very sexy :)
 
 Any ideas?
 
 Thanks!
 jlc
 

Being an old perl hacker I have to at least suggest doing whatever you're
attempting in perl.  perl gives you much more powerful and flexible regular
expression processing.  It also makes it really simple to pull out whatever
matched within the RE.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Program to ban sniffers

2009-06-21 Thread David G . Miller
Bob Hoffman b...@... writes:

 
 So I have been reading the ssh attack thread and finally want to ask about
 something.
 
 I doubt there is a program like this, but I would love to have a program
 that listens at common ports that I do not use at all...and only allow that
 program to listen to it, especially the usual ssh port (using a different
 one for real ssh)...
 
 That program would then, upon receiving a 'sniff' or 'user' would then add
 that ip to the deny hosts lists..for either a long or short time.
 
 Using this would seem like a win as you can easily grab someone before they
 can get somewhere one hopes.
 Also, by opening up a few other ports that are unusual like 8561well, if
 someone sniffs that it could be a 3 day ban or a month...
 
 In other words, anyone hitting those ports that are not being used at all
 except by our sniff protector, would allow instant banning.
 
 So...does something like this exist?
 
Just in case you want to play around with just the logging port probing
information you can add something like the following rule to your firewall:

-A RH-Firewall-1-INPUT -p tcp -m tcp -j LOG
-A RH-Firewall-1-INPUT -p udp -m udp -j LOG

Add the rules at the bottom of /etc/sysconfig/iptables but before your ultimate
reject rule.  Make sure you have enough room in /var/log for the amount of data
you will be collecting.  The log entries in /var/log/messages will look like:

Jun 16 00:51:01 bend kernel: IN=eth0 OUT=
MAC=00:0a:5e:1a:ee:4b:00:0a:5e:1a:e9:c8:08:00 SRC=192.168.0.1 DST=192.168.0.2
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=59652 DF PROTO=TCP SPT=59356 DPT=17581
WINDOW=17920 RES=0x00 SYN URGP=0

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to reply to a digest

2009-06-11 Thread David G . Miller
David McGuffey davidmcguf...@... writes:

 
 I'm receiving the centos-request in digest mode. Using Fedora 10 and
 Evolution. When I tried to reply to a centos-request message inside the
 digest, the result doesn't seem to look right.  I cut/paste the proper
 subject line (replacing the CentOS Digest, Vol NN, Issue nn text), but
 some have complained that this approach doesn't allow the original
 question and replies to be threaded.
 
 So...what is the appropriate way to respond when one is receiving the
 digest version?
 
 Dave
 

I was recently soundly castigated for messing up the list threading by
replying to digest items by just doing a cut and paste that preserved the
subject.  Someone on the list was kind enough to point me to:

http://gmane.org

Which provides a threaded web interface for a number of mailing lists including
this one (linux.centos.general on gmane).  I've been happy with the
functionality although not being able to just hit reply takes some of the
spontaneity out of list conversations.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dealing with brute force attacks

2009-05-14 Thread David G . Miller
James B. Byrne byrn...@... writes:

 
 Over the weekend one of our servers at a remote location was
 hammered by an IP originating in mainland China.  This attack was
 only noteworthy in that it attempted to connect to our pop3 service.
 
 We have long had an IP throttle on ssh connections to discourage
 this sort of thing.  But I had not considered the possibility that
 other services were equally at risk.  Researching this on the web
 does not reveal any comprehensive list of vulnerable ports or
 services.  Most discussion centres on ssh, then some on ftp, and
 relatively few regarding pop3.
 
 So, my questions are these:
 
 1. Should I throttle all new connections regardless of destination
 ports?  In other words: are there any legitimate reasons that a
 single IP would require more than one new connection every 30
 seconds or so?
 
 2. Moving pass the obvious and unhelpful everything, what services
 are particularly vulnerable to these types of attacks?  Does a list
 exist anywhere?
 
 Regards,
 

Hi -

I went though a similar process back when the DNS cache poisoning attacks
were coming fast and furious.  The question to answer is, Are there 
legitimate reasons why the same IP address will apparently make multiple
connection requests for a particular service?  For DNS the answer was a
resounding no since the source nameserver should cache the results of the 
query.  

For POP3 the answer is more dependent on your particular organization.  As an
example, is there a remote office that will generate a number of connection
requests when everyone egts to work in the morning; all apparently from the 
same IP address?  If there are no such legit reasons why a number of requests 
could occur in a short period of time, a simple firewall throttling rule may 
be sufficient.  I have an article on my blog describing the firewall rules I 
used to throttle and then block DNS cache poisoning attacks at: 

http://davenjudy.org/davesBlog/node/41

One of the other replies also suggested fail2ban which may be more 
appropriate anyway since you really want to look at failed logins; not just
connection attempts.


Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Threading and CentOS mailing list digest

2009-04-18 Thread David G . Miller
Robert Nichols rnicholsnos...@... writes:

 
 David G. Miller wrote:
  Kai Schaetzl mailli...@... wrote:
  
  What is happening is I get the CentOS mailing list in digest form.

SNIP
 
 I avoid the problem by accessing this list via the mail-to-news gateway
 on news.gmane.org and suspending the list email delivery entirely.

and SNIP some more... Gmane enforces keeping the quoted material short

Gmane is cool and might be the answer (this is being posted through Gmane). 
We'll see if they're OK with my mailserver, etc.  

I really like the convenience and lack of interruptions I get with getting the
list in digest form so this may be the way for me to keep the threaded readers
happy while still contributing.

Cheers,
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Threading and CentOS mailing list digest

2009-04-18 Thread David G . Miller
Kai Schaetzl mailli...@... writes:

 
 David G. Miller wrote on Fri, 17 Apr 2009 12:39:50 -0600:
 
  What is happening is I get the CentOS mailing list in digest form.
 
 Ah, that explains it. Other people usually just reply to the digest (which 
 then creates a new thread with Digest in the subject) or add a note that 
 they replied to a digest.
 
  Giving up 
  getting the list traffic in digest form is not acceptable.
 
 I'm trying to understand what you mean by this statement. 

SNIP
 
 Anyway, do as you like, but it might be helpful, if you somehow indicate 
 you reply to a digest. Then one doesn't have to guess why you reply to the 
 wrong message.
 
 Kai
 

I just like getting the list in text digest form.  The MIME format might work
well on a list with less traffic but it is pretty unwieldy on a list with this
much traffic when I tried it.

I have a number of old habits regarding how I use e-mail and getting the list in
digest form fits better with these habits than your suggestions.  I appreciate
the suggestions but I'm really quite happy getting the list just once a day in
digest form rather than have a steady stream of e-mails with intermittent
flurries of activity that comes with getting the e-mails individually.  

There are also a number of benefits to letting some topics settle out before I
get a chance to see them or respond that I won't go into at this point.  One I
will point out that you will still need to contend with is as follows.  People
(like me) who read the digest frequently are able to take a step back from some
of the discussions and bring together multiple responses and several otherwise
diverging threads.  The threaded message view is based on the sometimes false
assumption that once threads diverge they cannot later merge.  Several times I
have ended up consolidating replies to several divergent threads because that's
where the answer was to be found.  The threaded view of a discussion may be a
nice way of organizing the elements of the discussion but it doesn't necessarily
reflect the object of the discussion which is to find an answer.

One of the other responders pointed me to Gmane as a way to reply to individual
postings.  I'm using Gmane to compose this and will attempt to continue using it
in the future (I've been known to forget such things).  Gmane appears to fit my
criteria of not imposing any  significant additional effort while letting me
continue to enjoy the list in digest form.

Cheers,
Dave

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Threading and CentOS mailing list digest

2009-04-17 Thread David G. Miller
Kai Schaetzl mailli...@conactive.com wrote:

 John R Pierce wrote on Fri, 17 Apr 2009 04:34:49 -0700:
  odder, I don't see a In-Reply-To: header, so I dunno HOW it appears 
  threaded just fine.
 

 It's been put in the thread according to the time sequence because the 
 header you mention is missing. So, it just *appears* to be threaded, but 
 the node where it gets put as a reply is random (here it is put as a reply 
 to me, that is why I noticed there is something wrong). That header is 
 missing from all of David's postings, now that I look, and he's been using 
 several older versions of Thunderbird which can't all be broken. So, I 
 assume he's using a broken mail gateway which strips these headers.

 Kai
Rather than continue to hijack the original thread regarding dual 
booting, let's move this discussion to it's own thread. 

The version of T-Bird I use is *always* the current version for CentOS.  
My mailer is sendmail again kept to the current version for CentOS.  I 
somehow doubt that either are broken. 

What is happening is I get the CentOS mailing list in digest form.  That 
is, I get one e-mail each day with all of the previous day's posts.  If 
I notice a topic that I feel I can contribute to, I cut and paste an 
appropriate e-mail from the digest and reply to the list setting the 
subject appropriately (i.e., Re: original subject).  This is somewhat 
of a pain but it is more than made up for by the convenience of getting 
the list traffic in digest form.

Your complaint is the first I've heard that this creates a problem for 
anyone.  Unfortunately, I don't see a way to set the in reply to mail 
header element though T-Bird.  If anyone has a reasonable (meaning 
doesn't take significantly more of my time than my current approach) 
alternative, I'm more than wiling to change how I'm posting.  Giving up 
getting the list traffic in digest form is not acceptable.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dual-boot with WinXP, CentOS already installed

2009-04-16 Thread David G. Miller
Sorin Srbu sorin.s...@orgfarm.uu.se wrote:

 Hi all,

 I'd like to deploy a solution with dual-booting systems where CentOS 5.3 is 
 already installed and WinXP will be installed to a separate disk.

 I found 
 http://apcmag.com/how_to_dual_boot_linux_and_windows_xp_linux_installed_first.htm?page=1
  
 and it seems straight forward enough, although the description is for Ubuntu.

 The problem as I see it, is that the how-to differs from how CentOS looks in 
 /etc/grub.conf and the boot-loader in Ubuntu with respect to making grub work 
 again after the Windows install.

 I found Tldp.org mentioning dual-boot plenty, but most or all articles listed 
 are using lilo as a boot-loader, which seems a bit obsolete and besides I 
 can't quite translate the instructions from lilo to grub. 8-/

 Basically, what would I need to change in the how-to from apcmag.com above?? 
 Thanks for any pointers.
As noted in other replies, Windows not not play well with anything 
else.  Your best bet would be to disable/remove/disconnect the drive 
with CentOS and then do the Windows install to the other drive.  Once 
Windows is installed, you can reconnect the CentOS drive and then easily 
edit grub.conf to boot Windows using the chainloader directive.  This 
approach will only work if there are no primary partitions on the CentOS 
drive that Windows recognizes.  Windows (just like DOS) assigns drive 
letters to partitions in drive number order starting with the primary 
partitions and then moving on to the extended partitions.  The bottom 
line is that you want the first Windows partition on the non-CentOS 
drive to get assigned drive letter C: when Windows boots.  As long as 
Windows doesn't recognize the partition type (e.g., ext3), no drive 
letter gets assigned.

The problem with suggestions to just install Windows and then either use 
another boot loader or repair the grub installation is that you are 
stuck doing that work through Windows.  My experience has been that 
Windows isn't as easy to work with for making changes to the boot loader 
and any approach that overwrites the Windows boot loader may leave you 
with Windows not being bootable.  The approach I described above leaves 
the Windows boot loader in place although you may need to edit 
C:\boot.ini to make sure it can still find Windows when both disks are 
present.

Here is the grub.conf that I use on my laptop.  The internal drive boots 
to either CentOS or Windows while Fedora 10 and Ubuntu are on an 
external USB drive.

# grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE:  You have a /boot partition.  This means that
#  all kernel and initrd paths are relative to /boot/, eg.
#  root (hd0,2)
#  kernel /vmlinuz-version ro root=/dev/hda6
#  initrd /initrd-version.img
#boot=/dev/hda
default=0
timeout=5
splashimage=(hd0,2)/grub/splash.xpm.gz
hiddenmenu
title CentOS (2.6.18-92.1.22.el5)
root (hd0,2)
kernel /vmlinuz-2.6.18-92.1.22.el5 ro root=LABEL=/ rhgb
initrd /initrd-2.6.18-92.1.22.el5.img
title CentOS (2.6.18-92.1.18.el5)
root (hd0,2)
kernel /vmlinuz-2.6.18-92.1.18.el5 ro root=LABEL=/ rhgb
initrd /initrd-2.6.18-92.1.18.el5.img
title Fedora (2.6.27.19-170.2.35.fc10.x86_64)
root (hd1,0)
kernel /vmlinuz-2.6.27.19-170.2.35.fc10.x86_64 ro 
root=UUID=232029fe-c524-47b4-a5d6-d45c0ce7e56b rhgb nomodeset
initrd /initrd-2.6.27.19-170.2.35.fc10.x86_64.img
title Ubuntu (2.6.27-7 x86_64)
root (hd1,4)
kernel /vmlinuz-2.6.27-7-generic ro root=LABEL=uSlash
initrd /initrd-2.6.27-7-generic
title Windoze
rootnoverify (hd0,0)
chainloader +1

My grub.conf points to Windows on a partition on the internal drive.  
Yours would point to Windows on the second drive (probably hd1).  
Likewise, your boot.ini will need to point to Windows with something like:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=Microsoft Windows XP

changing to:

multi(0)disk(0)rdisk(1)partition(1)\WINDOWS=Microsoft Windows XP

Note the change -^

I'm assuming your Windows disk would end up being /dev/hdb in a Linux 
world.  If your system is using SATA drives or the Windows drive would 
be something other than /dev/hdb, you may need to make some adjustments 
to what I have suggested.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Godaddy hell...

2009-04-03 Thread David G. Miller
Michael A. Peters mpet...@mac.com wrote:

 Robert wrote:
   
  Niki Kovacs wrote:
  snip
  
 
  I'm in France (Europe),
   
  snip
  
  C'mon, Niki! Give us a break. Our knowledge of world geography is not 
  THAT bad on this side of the Atlantic.   :-) 
 

 Where's the Atlantic? Is that up in Canada?

  ;) 
   
When my oldest brother was living in upstate New York his employer gave 
him a temporary assignment in Plymouth, England.  One of the neighbors 
commented, Won't that be a long drive?

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Upgrade

2009-04-01 Thread David G. Miller
Thomas Dukes tdu...@sc.rr.com wrote:

   
  -Original Message-
  From: centos-boun...@centos.org 
  [mailto:centos-boun...@centos.org] On Behalf Of Ned Slider
  Sent: Tuesday, March 31, 2009 10:34 PM
  To: CentOS mailing list
  Subject: Re: [CentOS] Upgrade
  
  Thomas Dukes wrote:
 
   Hello,
   
   Just did yum update.  There were numerous packages to be 
   
  updated.  I 
 
   get this is the newest release of Centos.
   
   The update bombed stating I need nss-3.12.2.0-2.el5.  I did 
   
  a rpm -q 
 
   nss and
   nss-3.12.2.0-4.el5 is install in Cento 5.2.
   
   What's up with that?
   
   TIA
   
   
  
  You didn't wait for the official release announcement  ;) 
 

 Good one!!   :-) 

 Wasn't trying to upgrade to the newest release.  I run a 'yum update' daily.
 I only have Centos repos installed so I don't know how I have a version of
 nss newer in 5.2 than 5.3.

 As someone suggested in a later reply, I'll wait a day or two and try again.

 Thanks
   
Lots of noise on the list today.  I ran into the same problem when I 
attempted to yum update my workstation last night.  I worked around it 
using the old old rpm dependency hell technique of retrying the update 
but sequentially excluding each dependency as the various update 
attempts revealed them to me.  I finally got a working update with:

yum --exclude wxGTK --exclude  nss-devel --exclude 'rpm-*' --exclude 
popt update; date

wxGTK is excluded since I'm also running audacity 1.3.0b.  The remaining 
excludes got me around the nss-devel problem.  Got up this morning and 
re-ran my yum update with only wxGTK excluded and it worked just fine.  
Literally as I was typing this e-mail, the update for my laptop did the 
same thing (complaint about a missing nss-devel).  My other systems all 
required changing /etc/yum.repos.d/Centos-Base.repo to use baseurl 
instead of mirrorlist before the update would even run.  I made the 
same change on the laptop and the update is now progressing as expected.

The laptop and my workstation are the only x86_64 installations. The 
remaining systems are all 32 bit.  Since the problem still occurred on 
my laptop but went away when I switched to baseurl, I wonder if one of 
the mirrors has a bad configuration.  The results of this morning's 
update on my workstation are as follows:

[r...@bend video]#  yum --exclude wxGTK update; date   Loaded plugins: 
fastestmirror, priorities, protectbase
Loading mirror speeds from cached hostfile
 * rpmforge: rh-mirror.linux.iastate.edu
 * extras: ftp.lug.udel.edu
 * updates: ftp.linux.ncsu.edu
 * base: centos-distro.cavecreek.net
 * addons: centos.mirror.nac.net
kbs-CentOS-Extras|  951 B 
00:00
rpmforge | 1.1 kB 
00:00
extras   |  951 B 
00:00
updates  |  951 B 
00:00
primary.xml.gz   |  50 kB 
00:00
updates106/106
base | 1.1 kB 
00:00
addons   |  951 B 
00:00
adobe-linux-i386 |  951 B 
00:00
Excluding Packages in global exclude list
Finished
331 packages excluded due to repository protections
Setting up Update Process
Resolving Dependencies
-- Running transaction check
--- Package avahi-compat-libdns_sd.x86_64 0:0.6.16-1.el5_2.1 set to be 
updated
--- Package rpm-devel.x86_64 0:4.4.2.3-9.el5 set to be updated
-- Processing Dependency: nss-devel for package: rpm-devel
--- Package rpm-libs.x86_64 0:4.4.2.3-9.el5 set to be updated
--- Package kernel.x86_64 0:2.6.18-128.1.1.el5 set to be installed
--- Package kernel-devel.x86_64 0:2.6.18-128.1.1.el5 set to be installed
--- Package kernel-headers.x86_64 0:2.6.18-128.1.1.el5 set to be updated
--- Package rpm-devel.i386 0:4.4.2.3-9.el5 set to be updated
--- Package rpm-libs.i386 0:4.4.2.3-9.el5 set to be updated
--- Package rpm.x86_64 0:4.4.2.3-9.el5 set to be updated
--- Package gdm.x86_64 1:2.16.0-47.el5.centos set to be updated
--- Package rpm-build.x86_64 0:4.4.2.3-9.el5 set to be updated
--- Package popt.i386 0:1.10.2.3-9.el5 set to be updated
--- Package rpm-python.x86_64 0:4.4.2.3-9.el5 set to be updated
--- Package popt.x86_64 0:1.10.2.3-9.el5 set to be updated
-- Running transaction check
--- Package nss-devel.x86_64 0:3.12.2.0-4.el5.centos set to be updated
-- Processing Dependency: nspr-devel = 4.6.99 for package: nss-devel
-- Running transaction check
--- Package nspr-devel.x86_64 0:4.7.3-2.el5 set to be updated
-- Finished Dependency Resolution

Dependencies Resolved


 Package   Arch  Version 

Re: [CentOS] grub issue

2009-03-16 Thread David G. Miller
Indunil Jayasooriya induni...@gmail.com wrote:

 Pls see below


 [r...@authpassword ~]# cat /boot/grub/grub.conf
 # grub.conf generated by anaconda
 #
 # Note that you do not have to rerun grub after making changes to this file
 # NOTICE:  You have a /boot partition.  This means that
 #  all kernel and initrd paths are relative to /boot/, eg.
 #  root (hd2,0)
 #  kernel /vmlinuz-version ro root=/dev/VolGroup00/LogVol00
 #  initrd /initrd-version.img
 #boot=/dev/sdb
 default=0
 timeout=5
 splashimage=(hd2,0)/grub/splash.xpm.gz
 hiddenmenu
 title Red Hat Enterprise Linux Server (2.6.18-128.1.1.el5PAE)
 root (hd2,0)
 kernel /vmlinuz-2.6.18-128.1.1.el5PAE ro
 root=/dev/VolGroup00/LogVol00 rhgb quiet
 initrd /initrd-2.6.18-128.1.1.el5PAE.img
 title Red Hat Enterprise Linux Server (2.6.18-92.el5PAE)
 root (hd2,0)
 kernel /vmlinuz-2.6.18-92.el5PAE ro
 root=/dev/VolGroup00/LogVol00 rhgb quiet
 initrd /initrd-2.6.18-92.el5PAE.img
   
as a follow up to why it was necessary to issue the following command at 
the grub command prompt:
 grub root (hd0,0)
  Filesystem type is ext2fs, partition type 0x83
Note that you are telling grub to find the root file system on drive hd0 
and partition 0.  The grub.conf file provided has root set to drive hd2 
and partition 0.  It appears that something changed the order of your 
drive numbering (e.g. you moved the cable that attached you boot drive 
from IDE1 to IDE0 when you installed the new CPU).

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I have a test system that hangs hard...

2009-03-07 Thread David G. Miller
Robert Moskowitz r...@htt-consult.com wrote:

See embedded comments.  I'm not familiar with the specific package mentioned 
but these are just a few standard debugging ideas.

 I have a test system:  Centos 5.2 on an OQO, that has been hanging 
 hard.  I have to unplug it and pull the battery so I can then cold start it.
   
I assume this also means that the system runs as expected if you don't 
take any of the actions described below.
 This last time all I did was open a terminal window and SU to root, then 
 start the lastest build of SIP Communicator (which uses JRE 1.6.0_10).  
 I was not even making a test phone call at the time.
Any chance of trying an earlier version?  Especially one that uses an 
earlier JRE?
   Oh, and the system 
 only runs IPv6, no v4 addressing.
   
And what happens if you enable IPV4?  If possible, can SIP Communicator 
be configured to use IPV4 instead of V6?  If so, does the problem persist?
 So how do I find out what is causing the hard lockups?
   
I'd start with enabling IPV4 addressing since it's fairly trivial to do 
and then work back toward running an earlier version of the program.  
You may find something like the JRE wants an IPV4 connection (just 
wildly speculating here).

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] probem with bind???

2009-02-22 Thread David G. Miller
fabian dacunha fab...@baladia.gov.kw wrote:

 Dear All,

 I am sorry for posting this query here but hope someone can help me out
 i have been running Centos 5 as my prinamry DNS n Mail server with bind 9.2

 every thing works fine but in my/var/messages log i see continuosly the
 below meesages

 Feb 22 09:14:46 kmdns1 named[2087]: client 62.109.4.89#17222: query
 (cache) './NS/IN' denied
 Feb 22 09:14:46 kmdns1 named[2087]: client 62.109.4.89#26398: query
 (cache) './NS/IN' denied
 Feb 22 09:14:51 kmdns1 named[2087]: client 62.109.4.89#65326: query
 (cache) './NS/IN' denied
 Feb 22 09:14:52 kmdns1 named[2087]: client 62.109.4.89#59870: query
 (cache) './NS/IN' denied

 now in my firewall i tryied to block this ip but the messages dont stop

 i also upgraded bind to version bind-9.3.4-6.0.3.P1.el5_2 but no avail
 the problem still there


 i jus like to know whts this problem and how could i solve it

 is there a problem with my DNS server

 thnks and regards

 apprecite your kind help


 fabian
   
I run a very small, personal presence on the internet (only a single web 
site, e-mail, etc. plus DNS for my own stuff) so this might not work if 
you have lots of sites or there are legitimate reasons why the same 
source IP address would hit your DNS with multiple, valid queries in a 
very short period.  Typically, once a source IP has queried a DNS, the 
result is cached for the time to live (TTL) of the resulting record and 
the query should not normally be repeated.  Given this, I added the 
following rules to my firewall:

...
# Block cache poisoning attacks
# Drop repeated DNS requests
-A RH-Firewall-1-INPUT -p udp -m udp -m recent -i eth0 --dport 53 --update \
--seconds 660 --hitcount 7 --name DNSTHROTTLE --rsource -j DROP

-A RH-Firewall-1-INPUT -p udp -m udp -m recent -i eth0 --dport 53 -j 
ACCEPT \
--set --name DNSTHROTTLE --rsource
...

Note that eth0 is my external NIC so these rules only fire for DNS 
requests that are not from my local network.

I came up with seven queries in eleven minutes was a reasonable sign of 
a cache poisoning attack.  Your mileage may very.  These two rules 
replaced about 30 IPs in my blacklist and are completely automatic.  The 
funny this that a lot of the brute force cache poisoning attempts just 
keep banging away so the source IP stays on the blacklist.  Every once 
in a while I'll see a new IP address hit seven attempts and then the 
blacklist rule kicks in and they're never heard from again.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] text processing problem with bash/perl

2009-02-13 Thread David G. Miller
Dennis Kaptain dkapt...@yahoo.com.mx wrote:

  
  Hi,
  
  Anyone has some ways for the following text processing problem? I have a 
  text 
  file containing two stanzas attached below. I want to uncomment the stanza 
  with 
  'host=localhost' line, while left the other stanza unchanged.
  
  ...
  
  /* udp_send_channel {
host=localhost
port = 10017
ttl = 1
  } */
  
  /* udp_send_channel {
host=ganglia100.ec2.example.com
port = 10017
ttl = 1
  } */
  
  ...
  
  If I use command below then both stanza will be altered... Please help.
  
  sed  -i -e '/^\/\* udp_send_channel/, /} \*\// {s/^\/\* 
  udp_send_channel/udp_send_channel/g; s/\} \*\//}/g; }'
  
  --David
  
 

 this is probably WAY more than you wanted
SNIP

A tad simpler:

#! /usr/bin/perl -w
use strict;

my $file;

open FILE, stuff.txt or die;

# Undefine the input record separator.

undef $/;

# Slurp the whole file in

$file = FILE;
close FILE;

# Pattern match on the stanza we want to uncomment and uncomment it.  
You may need to play with
# the white space in the output to get the formatting you want.

$file =~ s?/*\s*udp_send_channel {\n\s*host=localhost\n\s*port = 
10017\n\s*ttl = 1\n\s*} */\n?udp_send_channel {\n  host=localhost\n  
port = 10017\n  ttl = 1\n}?;

# Write the result.

print $file;

#~End of Script~~

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Scripting Oddity

2009-02-09 Thread David G. Miller
I've been playing around with qemu and wanted to make the guest OS 
instance visible on my network.  This meant getting bridging and tun/tap 
working.  After getting things working by pasting command from the 
CentOS wiki article plus adding a few enhancements, I decided to capture 
the process in a shell script that would be suitable for a user in the 
sudoers file to fire off.  Not sure why (which is why I'm posting this) 
but I couldn't get the same result from the shell script as I got from 
pasting commands onto the command line or using the shell history.

After a lot of very tedious debugging, I finally got the script to work 
by adding a couple of short sleeps at selected locations.  The script 
now looks like:

cat upBridge.sh
#!/bin/bash
#
# Script for setting up a bridge accessible by a qemu VM.
#
# First, make sure we're starting with a clean slate.
/usr/bin/sudo /sbin/rmmod bridge
/usr/bin/sudo /sbin/rmmod tun
/usr/bin/sudo /sbin/service network restart
#
# Grab the IP address of the given interface so we can restore it later.
#
oldIP=`/sbin/ifconfig $1 | /bin/grep 'inet addr' | /usr/bin/awk -F \: 
'{print substr($2,0,index($2,  )) ; }'`
echo $1 currently has IP address $oldIP
#
# Create the bridge.
#
/usr/bin/sudo /usr/sbin/brctl addbr br0
/usr/bin/sudo /sbin/ifconfig $1 0.0.0.0

sleep 2

/usr/bin/sudo /usr/sbin/brctl addif br0 $1
#
# Stop any dhclient still running.
#
/usr/bin/sudo /usr/bin/killall dhclient
#
# Get and IP address and routing information for the bridge
#
/usr/bin/sudo /sbin/dhclient br0
#
# Make sure the tun module is loaded, assign it to our user and bring it up.
#
/usr/bin/sudo /sbin/modprobe tun
echo Did tun load?
lsmod | grep tun
/usr/bin/sudo /usr/sbin/tunctl -b -u $USER

sleep 2

/usr/bin/sudo /sbin/ifconfig tap0 up
#
# Connect the bridge and the tap.
#
/usr/bin/sudo /usr/sbin/brctl addif br0 tap0
/usr/bin/sudo /bin/chown $USER:users /dev/net/tun
/usr/bin/sudo /sbin/iptables -I RH-Firewall-1-INPUT -i br0 -j ACCEPT
#
# restore the IP address of our normal interface.
#
/usr/bin/sudo /sbin/ifconfig $1 $oldIP

So, my question is, why do I need to have a short sleep in these two 
locations in my script? 

Without a sleep after the ifconfig eth0 0.0.0.0, eth0 retains its 
original IP address instead of having no address.  The qemu guest VM 
still functions correctly but the host system loses connectivity.  
Likewise, without a sleep after the tunctl command, the device 
/dev/net/tun isn't present when the next command executes.  With the 
sleeps the script executes as expected and sets up the bridge.  Without 
the sleeps the script fails.

Oh yeah.  There's another script called downBridge.sh that undoes the 
bridge if anyone is interested.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] card reader issue

2009-02-06 Thread David G. Miller
Frank Cox thea...@sasktel.net wrote:

 I have never done anything with a card reader before so I have no idea what 
 I'm
 doing here.

 I have a laptop with a card reader in it and when I put the card in I see this
 in /var/log/messages:

 Feb  5 13:28:58 localhost pcscd: winscard.c:304:SCardConnect() Reader E-Gate 
 0 0
  Not Found

 This comes up many times in the log.  I suspect that this means that I'm
 missing some package that I should have installed, but what is it?
   
I went through something like what you're going through when I first put 
CentOS on my now somewhat old HP laptop.  Do an lspci -v and find the 
entry for your card reader.  Then check to see if it is supported by the 
kernel (look in /boot/config-kernelVersion).  If it is, I don't have 
an answer for you.  If it isn't, check to see if it's supported by the 
current kernel from kernel.org.  If it still isn't, it's not going to 
work until someone implements support for that particular card reader.  
If it is, you have the option of building and running a custom kernel 
using the source from kernel.org.  There are lots of how-tos on how to 
make this happen.  That's what I did on my laptop until support for my 
card reader got into the RHEL/CentOS kernel.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Antivirus for CentOS? (yuck!)

2009-01-23 Thread David G. Miller
Stephen John Smoogen smo...@gmail.com wrote:

 On Thu, Jan 22, 2009 at 12:42 PM, David G. Miller d...@davenjudy.org wrote:
   
  Amos Shapira amos.shap...@gmail.com wrote:
 
 
  Hi All,
 
  Yes, I know, it's really really embarrassing to have to ask but I'm
  being pushed to the wall with PCI DSS Compliance procedure
  (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
  we don't need to install an anti-virus or find an anti-virus to run on
  our CentOS 5 servers.
 
  Whatever I do - it needs to be convincing enough to make the PCI
  compliance guy tick the box.
   
SNIP
  After reading all of the other replies (including the ones that pointed
  out that the PCI DSS requirement had changed the terminology from
  virus to malware), why not claim you are meeting the requirement by
  doing something useful like running chkrootkit or rkhunter on a regular
  basis?  That way you would be scanning the systems for the only malware
  known to actually pose a threat to a Linux box.  It may be a low
  probability of infection (as others have pointed out) but should satisfy
  the auditor and hopefully will just be a low cost exercise in futility
  as long as reasonable security policies are followed.
 

 Any tool will require the need to have a risk assessment against it.
 What is the liklihood of it finding malware? How much is updated and
 how does it compare to other tools. These will be questions that will
 need to be available for auditors to know you did your due-diligence
 on selecting a tool.
Answering those questions would provide the arguments for running a root 
kit scanner instead of anti-virus software.  That is, the risk of 
malware affecting the systems in question is low with near zero 
likelihood that a true virus will cause a problem but with the 
possibility that a rootkit could compromise the systems.  Chkrootkit and 
rkhunter are arguably the best tools for finding a root kit.  The 
programs are updated whenever a new threat is identified. 

Obviously, the OP would need more than my say so as back up for these 
assertions.  Said back up would also make the case that scanning for 
non-existent threats (Linux viruses) would make no sense while scanning 
for a real threat makes the most sense.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Antivirus for CentOS? (yuck!)

2009-01-22 Thread David G. Miller
Amos Shapira amos.shap...@gmail.com wrote:

 Hi All,

 Yes, I know, it's really really embarrassing to have to ask but I'm
 being pushed to the wall with PCI DSS Compliance procedure
 (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
 we don't need to install an anti-virus or find an anti-virus to run on
 our CentOS 5 servers.

 Whatever I do - it needs to be convincing enough to make the PCI
 compliance guy tick the box.

 So:

 1. Has anyone here gone though such a procedure and got good arguments
 against the need for anti-virus?
 2. Alternatively - what linux anti-virus (oh, the shame of typing this
 word combination :() do you use which doesn't affect our systems
 performance too much.

 The reviewed servers run both Internet-facing web applications and
 internal systems, mostly using proprietary protocol for internal
 communications. They are being administrated remotely via IPSec VPN
 (and possibly in the future also OpenVPN).

 Thanks,

 --Amos
After reading all of the other replies (including the ones that pointed 
out that the PCI DSS requirement had changed the terminology from 
virus to malware), why not claim you are meeting the requirement by 
doing something useful like running chkrootkit or rkhunter on a regular 
basis?  That way you would be scanning the systems for the only malware 
known to actually pose a threat to a Linux box.  It may be a low 
probability of infection (as others have pointed out) but should satisfy 
the auditor and hopefully will just be a low cost exercise in futility 
as long as reasonable security policies are followed.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mp3 to wav converter

2009-01-12 Thread David G. Miller
John jse...@gmail.com wrote:

  -Original Message-
  From: centos-boun...@centos.org 
  [mailto:centos-boun...@centos.org] On Behalf Of Ralph Angenendt
  Sent: Sunday, January 11, 2009 5:13 AM
  To: centos@centos.org
  Subject: Re: [CentOS] mp3 to wav converter
  
  Robert Moskowitz wrote:
 
 snip
   Now that Audacity is no longer available to us...
   
 snip
 --
 This is the install process for Audacity.
 Ccrma = planet ccrma ccrma.stanford.edu
 rf = rpmforge

 audacity-1.3.5-0.5.beta.el5.ccrma.i386.rpm
 compat-wxGTK26-2.6.4-2.el5.ccrma.i386.rpm
 jack-audio-connection-kit-0.102.20-3.0.el5.i386.rpm
 libfreebob-1.0.0-3.0.el5.i386.rpm
 libsamplerate-0.1.2-1.2.el5.rf.i386.rpm
 soundtouch-1.3.1-6.el5.ccrma.i386.rpm
 soundtouch-devel-1.3.1-6.el5.ccrma.i386.rpm
 wxGTK-2.8.9-1.el5.rf.i386.rpm

 Ralph, as I understood it the RPMForge Repo was not going to be fixed as I
 think Dag posted weeks ago on it. This is the install process I done a a
 clients machine after I posted to the list about the problem and was told of
 the rpms deps being in the Planet CCRMA Repo and a few others. BTW to that
 Poster Thanks

 As conversion from Wave to MP3 and back seems of great interest is there any
 possobility to get Audacity and the Dependancies in the Extras Repo?

 JohnStanley
It's actually a tad easier than that as long as you don't mind forcing 
wxGTK to stay at 2.6.3-1.  I just removed the current version of wxGTK 
(rpm -e wxGTK-2.8.9-1.el5.rf ) and then installed 
audacity-1.3.0b-1.el5.rf and wxGTK-2.6.3-1.el5.rf by doing a yum 
localinstall.  Seems to work fine although I have to do updates as yum 
--exclude wxGTK update or the update fails dependency checks.

I posted more about how I solved the issues on my blog at 
http://davenjudy.org/davesBlog/node/40

There could be an issue if some package other than audacity needs the 
more recent version of wxGTK but I didn't have to force the removal of 
the package.  This tells me that the easiest way to resolve this issue 
may be to just hold wxGTK at 2.6.3-1 until the next version of 
audacity is ready for prime time.  Anyone know of any other packages 
that are dependent on wxGTK and need the most recent version?

Finally, if you don't want to mess with any of this, you can convert an 
mp3 to wav using mpg123:

mpg123 -w infile.wav outfile.mp3

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] pop3 attack

2008-12-11 Thread David G. Miller
Toby Bluhm t...@alltechmedusa.com wrote:

 Or switch to postfix. I plunked relayhost = smtp-server.roadrunner.com 
 into main.cf  away it went.
Having read the rest of the thread, I respond at the risk of furthering 
the flames.  The sendmail configuration line is just as trivial:

define('SMART_HOST','[smarthost.example.net]')dnl

Check the quoting since the article uses matching left and right single 
quotes which is probably a figment of the editor used for writing the 
article.

Here's the reference if you'd like more information:

http://www.elandsys.com/resources/sendmail/smarthost.html

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS/RHEL, PHP and zip archives

2008-11-19 Thread David G. Miller
I'm trying to get bulk photo uploads working with a Drupal web site.  
The person who coded the Drupal photos module I'm using decided to use a 
zip archive as a means of batching together a collection of picture 
files for a bulk upload.  Apache is reporting the following PHP error 
when the bulk upload feature is used:


[Sun Nov 16 22:05:38 2008] [error] [client 192.168.0.192] PHP Fatal 
error:  Class 'ZipArchive'
not found in 
/var/www/fraud/html/davesBlog/sites/all/modules/photos/photos.module on 
line 1375,

referer: http://davenjudy.org/davesBlog/node/39/photos

The PHP code at line 1375 in photos.module is an unremarkable 
instantiation of the zip archive handling object.  Some Google searches 
indicate that zip archive handling is a compile time option of PHP and 
lack of it would cause this error.  Running php -i tells me that the 
CentOS/RHEL PHP was not built with the --enable-zip configuration option.


Does anyone know of a way to get PHP to correctly handle zip archives 
short of rebuilding my PHP installation from the source RPM with 
--enable-zip as a configuration option?


Thanks,
Dave Miller

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] close open relay

2008-11-13 Thread David G. Miller

Jerry Geis [EMAIL PROTECTED] wrote (with a few extraneous bits removed):


 Original Message 
   
   
  

 Date: Wednesday, November 12, 2008 03:33:11 PM -0500
 From: Jerry Geis [EMAIL PROTECTED]
 To: CentOS ML centos@centos.org
 Subject: [CentOS] close open relay

 hi all, running centos 4.7 i686.

 I seem to have an o pen  r elay sendmail server.
 How do I close it?

 I have the STRAIGHT centos install sendmail.mc file.
 Only thing I changed was:
 dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

 so as to allow incoming email and not just localhost. however
 this seems to relay everyone.

 I looked at http://www.sendmail.org/tips/relaying but it just
 talks about (AFIKT)
 enabling specific relays to occur - not how to CLOSE the
 relaying.

 How do I close the relay?

 Jerry
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
 


  End Original Message 



Sure enough I tried your test and that looks good...

HOwever, when i run this test:
HELO example.com
MAIL From: [EMAIL PROTECTED]
RCPT To: [EMAIL PROTECTED]
DATA
Subject: Think we're insecure...
I have a feeling our mail server is being abused...
..
QUIT

and paste that into port 25 of my server (telnet I'm talking)
I get the email and I should not ( I presume) as I am not example.com.

Jerry
The bottom of the file /etc/sendmail.mc should look like the following 
(change my domain, davenjudy.org, to whatever is appropriate for your 
domain).  This won't get rid of any open relay problems but will at 
least fix the example.com issue:


...
dnl #
dnl # The following example makes mail from this host and any additional
dnl # specified domains appear to be sent from mydomain.com
dnl #
MASQUERADE_AS(`davenjudy.org')dnl
dnl #
dnl # masquerade not just the headers, but the envelope as well
dnl #
dnl FEATURE(masquerade_envelope)dnl
dnl #
dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com 
as well

dnl #
FEATURE(masquerade_entire_domain)dnl
dnl #
dnl MASQUERADE_DOMAIN(localhost)dnl
dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl
MASQUERADE_DOMAIN(local.davenjudy.org)dnl
MASQUERADE_DOMAIN(davenjudy.org)dnl

As for possibly having an open relay, you also want to make sure that 
the following line is commented out (has dnl at the beginning):


dnl #
dnl FEATURE(`relay_based_on_MX')dnl
dnl #

Finally, you'll need a line like:

FEATURE(`relay_entire_domain')dnl

DO NOT uncomment any of the other lines in sendmail.mc regarding relay 
settings unless you know what you're doing.  If you aren't sure what was 
changed from the default, remove the sendmail-cf rpm and reinstall it to 
get back to a clean, default sendmail.mc file.  It's a good idea to 
explicitly run make in /etc/mail and then bounce sendmail rather than 
let the sendmail startup script decide something has changed since it's 
easier to catch syntax errors that way.  Finally, get a free mail 
account at your provider of choice (Google, Hotmail, whoever) and use it 
for testing both sending and receiving mail.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] offtopic question .. apprecyice ur help

2008-11-01 Thread David G. Miller

fabian dacunha [EMAIL PROTECTED] wrote with horrible intentional 
misspellings:


Dear All,

its a offtopic question but really apprecite if someone would advise n help
i have been running a mil server with sendmail

and have sbl-xbl.spamhaus.org as my dnsbl.

i had  other servers which are alredy out now
that is relays.ordb.org and dsbl.org have already been out of my sendmail
config.

any one knows of ny other servers i could add in my sendmail config

apprecite ur help

thanks


regards

Fabian

I have two blog posts that describe how I deal with spam:

http://davenjudy.org/davesBlog/node/22

http://davenjudy.org/davesBlog/node/27

I use a combination of several RBLs and dSPAM that seems to work fairly 
well and I'm not hearing about any false positives.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Possibly OT: intermittently long response times, when connecting to host

2008-10-29 Thread David G. Miller

Craig White [EMAIL PROTECTED] wrote:


On Tue, 2008-10-28 at 16:30 -0500, David Miller wrote:
  

 I have a CentOS 5.2 server running Apache 2.2.3 (yum installed) and
 drupal 6.5 on ESX 3.5. We're using Name Based Virtual Hosting on it -
 2 hosts. The problem is that when I pull up a web page after not
 having accessed it for ~15+ minutes it takes between 10-12s to load
 fully. The 2nd page, 3rd page - and sometimes more than that - take
 between 8-12 second. After that - decent performance, though not great
 (0.3s to 2s). Wait ~15 minutes, maybe more, maybe less, and it goes
 back to slow. While it's been most apparent with httpd, I've noticed
 similar slowness with the initial ssh session, etc.
 

snip


sounds sleepy - perhaps the mysql connections drop after inactivity and
then it takes that long to connect

You might just want to set up a cron script that does a curl or wget of
a standard page every 2 minutes or so just to keep things active.
  
I'm working with some folks to develop a web site with a very similar 
configuration (Apache, Drupal, MySQL, not sure which Linux distro is 
underneath it all though) that's hosted by IX web hosting.  We are 
seeing very similar behavior.  It has gotten better since we complained 
to IX but we still see a significant lag the first time the site loads.  
The fast load on subsequent visits could be explained by Drupal doing 
some caching of needed items so it doesn't have to go to the database.


The initial site load time became much more noticeable after IX took 
some kind of hit on their DB server.  All we know is the site suddenly 
couldn't connect to the database, they fixed something on their end and 
the database came back but we've had the long lag for first load ever since.


BTW, pleased to make your acquaintance, Dave.

Cheers,
Dave Miller

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] cannot start Mysql

2008-10-20 Thread David G. Miller

Ralph Angenendt [EMAIL PROTECTED] wrote:


William L. Maltby wrote:

 Hmm. I wonder then if that is a bug in CentOS. Since the default shown
 from the earlier posts indicates that several other pieces, including
 the server daemon, should come along with the mandatory piece, mysql.



No, why? Probably some package in default needs the client libraries of
MySQL, so those are installed.

Ralph
I think there was a change in upstream as of about version 4 to *not* 
install any actual database by default.  Only the client gets 
installed.  The argument was that their support folks were spending an 
inordinate amount of time helping people get their databases configured 
and running. 


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] USB flash drive and VMs (Was Curmudgeoning)

2008-09-05 Thread David G. Miller

Marcelo Roccasalva [EMAIL PROTECTED] wrote:


 Flash support under qemu seems to be about the same as CD-ROM support.  That
 is, you can access a device present at start up but it's not swappable.
  


You can swap cdrom from qemu monitor. I haven't tried, but I think the
same thing can be applied to usb..
It looks like the qemu monitor should let you either eject the device or 
delete/add the USB drive using usb_del and usb_add.  I wasn't able to 
get it to work.  W2K gives me a control to unmount the thumb drive in 
the system tray which makes the drive disappear from W2K.  
Unfortunately, attaching a new drive or just reattaching the old drive 
isn't recognized by W2K.  qemu monitor tells me it unable to add the new 
device or delete the old device.


If hot swapping a USB drive can be made to work with qemu, swapping a 
USB drive will still be ugly.  The USB device number assigned by the 
kernel changes each time I swap thumb drives.  This isn't too bad but 
access to /proc/bus/usb/usb_bus_number/usb_dev_number is root:root 
with permissions rw-r--r--.  This means that each time I swap the drive 
I have to chmod the new USB device entry.  I don't see this changing 
even if I can get qemu to let me add the new device.


I'll have to try using qemu monitor to swap a CD-ROM at some point in 
the future.  Usually I only use W2K and IE under qemu to access those 
few sites that still only work with IE (e.g., my state's income tax site).


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] USB flash drive and VMs (Was Curmudgeoning)

2008-09-03 Thread David G. Miller

Anne Wilson [EMAIL PROTECTED] wrote:

Can't argue with you  :-)   It does seem likely, as 1GB flash drives wouldn't 
have been a possibility at that time.  I never owned one at all until 
relatively recently.


  

  They didn't work in 98 first edition, nor in NT4 or Win2000 - again, from
  memory, which could be faulty.
  


  In Win2k, Micro$oft finally got up to speed and most flash drives
 will work with it, but XP is better.


Fair enough.  Out of curiosity - do they work in W2K out of the box, or 
require some update?  I ask because I'm considering W2K as a 
VM.


Anne
Flash support under qemu seems to be about the same as CD-ROM support.  
That is, you can access a device present at start up but it's not 
swappable.  Given:


[EMAIL PROTECTED] ~]# lsusb
Bus 001 Device 002: ID 154b:0005 PNY
Bus 001 Device 001: ID : 
Bus 002 Device 001: ID : 

you can attach the device to a W2K qemu session by starting qemu with 
something like:


qemu -usb -usbdevice tablet -hda w2k.img -usbdevice host:001.002 -m 256 
-localtime 


I tried swapping two different 1GB thumb drives and the content of the 
drive wasn't visible after the swap.


If you decide to go the qemu route for a VM with W2K, I wrote about the 
problems I ran into on my blog at:


http://davenjudy.org/wordpress/?p=29

Getting a basic W2K VM working was fairly easy but getting it fully 
updated was a real pain.  I still have a couple of MS updates that I 
can't apply since W2K stops working if I do.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: Curmudgeoning (was Re: Problems with writing, Dual Layer DVD)

2008-08-29 Thread David G. Miller

Scott Silva [EMAIL PROTECTED] wrote:


on 8-28-2008 4:15 PM William L. Maltby spake the following:

 On Thu, 2008-08-28 at 15:50 -0700, Scott Silva wrote:


 snip
  
 


 I have motherboards in my garage older than you! ;-D
  
 
 PIKER! I've mobos still running (when I fire 'em up). Although I'm

 seriously considering ditching the 386SX with Win 3.11. Don't find any
 reason to fire it up anymore.
 
 Hell, even at my age I've got more memory left than it ever had!  :-))
 


 snip
  
 

I don't think I kept anything lower than a 486. You never know if you might 
need it!
  
One of my projects of the moment is to get rid of all of the old 
motherboards and systems in my basement.  I'm thinking I'll keep one 
working system/MB that has ISA slots.  Not sure which one yet but 
probably either the Pentium or a K6/2 550Mhz.  I've got W2K running in a 
qemu virtual machine on my current desktop so I'm guessing I can get any 
older versions of Windows working if I have to.  I just can't virtualize 
an ISA slot if the need arises.


A few things hanging around the basement I *won't* part with though as 
part of this clean up:


- A still shrink wrapped copy of Windows/386 (media is 5.25 inch floppies)
- A true blue (IBM logo) PC-AT (6 MHz 80286) with a full height 30MB 
hard drive and 1MB of RAM, DOS 3.3.


Also, I've still got at least one punch card from my college days (Ohio 
State in the late '70s).  I usually hang it on my cubicle wall when I'm 
working a regular gig.  Most of the kids have never seen one before.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] perl

2008-08-21 Thread David G. Miller

Mad Unix [EMAIL PROTECTED] wrote:


Am trying to install perl module File::Find, but not able it gave the
following

cpan[1] install File::Find
CPAN: Storable loaded ok (v2.15)
Going to read /root/.cpan/Metadata
  Database was generated on Thu, 21 Aug 2008 02:03:21 GMT
Running install for module 'File::Find'
The most recent version 1.12 of the module File::Find
is part of the perl-5.10.0 distribution. To install that, you need to run
  force install File::Find   --or--
  install R/RG/RGARCIA/perl-5.10.0.tar.gz
CPAN: Time::HiRes loaded ok (v1.9715)
Running make test
  Can't test without successful make
Running make install
  Make had returned bad status, install seems impossible
Failed during this command:
 RGARCIA/perl-5.10.0.tar.gz   : make NO isa perl


cpan[2] quit
Lockfile removed.
[EMAIL PROTECTED] ftpsync-1.2.33]# perl -version

This is perl, v5.8.8 built for x86_64-linux-thread-multi

Copyright 1987-2006, Larry Wall

Perl may be copied only under the terms of either the Artistic License or
the
GNU General Public License, which may be found in the Perl 5 source kit.

Complete documentation for Perl, including FAQ lists, should be found on
this system using man perl or perldoc perl.  If you have access to the
Internet, point your browser at http://www.perl.org/, the Perl Home Page.
That is just cpan's user friendly way of telling you that File:Find is 
already installed:


[EMAIL PROTECTED] ~]# rpm -q --whatprovides /usr/lib/perl5/5.8.8/File/Find.pm
perl-5.8.8-10.el5_2.3

The command man File::Find should succeed and provide you with the man 
page.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: RE-export nfs mounted share

2008-06-09 Thread David G. Miller

whoami i [EMAIL PROTECTED] wrote:


Hi Barry,

 First of all thanx for your reply but i already used the options
crossmnt,fsid=0 in my exports file still i am not able to re-export it.


Regards
lingu

On Fri, May 30, 2008 at 5:30 PM, [EMAIL PROTECTED] wrote:

  

 Send CentOS mailing list submissions to
centos@centos.org

 To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos
 or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]

 You can reach the person managing the list at
[EMAIL PROTECTED]

 When replying, please edit your Subject line so it is more specific
 than Re: Contents of CentOS digest...


 Today's Topics:

   1. CentOS-announce Digest, Vol 39, Issue 13
  ([EMAIL PROTECTED])
   2. Re: Low-memory Centos5? (Anne Wilson)
   3. Re: Low-memory Centos5? (Wojtek Pilorz)
I think we just found another argument as to why top-posting is a bad 
idea...  You can easily miss the fact that you included the whole digest 
and not just the message you're actually replying to.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Strange reboots

2008-04-11 Thread David G. Miller

Kai Schaetzl [EMAIL PROTECTED] wrote:


Linux wrote on Fri, 11 Apr 2008 00:06:40 +0300:

  

 Every 59 minutes (maybe every hour) it reboots without any logs,
 without any traces and unfortunately with breaking software raid.
 After reboot dmesg does not have any strange entries.
 
 I double-checked crons, any strange services, nothing suspicious.



Disable cron and at completely for two hours or so and see what happens.

  

 guess reboot is cold reboot.



Guess? You would see that if you sit at the console. You do not see it 
shut down, just suddenly the BIOS screen? Then it's cold ...


For what do you need that mem line for the kernel? Doesn't it recognize 
the RAM?


Kai

Some interesting information would be:

as root: crontab -l

and the output from:

ls /etc/cron.hourly/

ls /var/spool/at/spool/

You might also try to keep top running when the system is due to 
reboot.  If you're sshed in, the last update of top will be preserved at 
least until the system is back up. 

My old server led me on a wild goose chase when it rebooted whenever 
backups ran.  Turned out that running amanda for backups was the 
heaviest load the system saw so it aggravated a hardware problem (bad 
capacitors).  Not saying that that's specifically what's going on for 
your system but there are circumstances where software running causes a 
load change that then triggers a hardware fault.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Sound card problem

2008-03-30 Thread David G. Miller

William L. Maltby [EMAIL PROTECTED] wrote:


On Fri, 2008-03-28 at 21:57 -0600, David G. Miller wrote:
 I came into an Abit AX8 motherboard and single core AMD Athlon 64 FX.  I 
 did a quick install of CentOS 5.0 on it to make sure everything worked 
 and then returned the hard disk and case to the original owner.  After 
 getting a new case and hard disk, I downloaded the CentOS 5.1 cd images 
 and installed.



I am on CentOS 4.x, and a 32 bit system. But I have the same sound
setup. I don't have a clue yet, but I thought if I posted my stuff, it
might help.

First, I think BIOS settings can affect the success/failure/stability of
things. It might be worth experimenting there although you don't mention
having changed anything.

On my system, there seems to be a little flakiness re the sound.
Sometimes just clicking the Open Volume Control and muting/unmuting a
few things fixes it. This seems to be needed less with recent updates to
the 4.x stuff (again, 32 bit).

There is a kernel parameter that may have affect - see the end of this
post.

I wish that I could be more helpful, but I just use the stuff.  :-( 
Turns out it was a wiring problem.  Weird that it causes the driver 
module not to load.  The original owner suggested that might be the 
problem so, after trying a CentOS 5.0 kernel and building and trying a 
2.6.24.4 kernel I decided to crack the case.  I pulled the cable for the 
case's front audio and mic off the motherboard and tried with that 
configuration.  The good news was I no longer got the error documented 
in my earlier e-mail but still no sound.  The case's front panel audio 
had two different connectors so I decided to try the other one and 
suddenly I had sound.


No idea what the difference is between the two connectors.  What's 
really strange is both front audio connection jacks are keyed correctly 
for the front panel audio out on the motherboard.  It's just one works 
and the other doesn't.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Sound card problem

2008-03-28 Thread David G. Miller
I came into an Abit AX8 motherboard and single core AMD Athlon 64 FX.  I 
did a quick install of CentOS 5.0 on it to make sure everything worked 
and then returned the hard disk and case to the original owner.  After 
getting a new case and hard disk, I downloaded the CentOS 5.1 cd images 
and installed.  For some reason the motherboard's on board sound no 
longer works (worked with CentOS 5.0).  dmesg gives me:


ACPI: PCI Interrupt Link [ALKC] enabled at IRQ 22
ACPI: PCI Interrupt :00:11.5[C] - Link [ALKC] - GSI 22 (level, 
low) - IRQ 90

PCI: Setting latency timer of device :00:11.5 to 64
codec_read: codec 0 is not valid [0x1fc]
codec_read: codec 0 is not valid [0x1fe]
codec_ready: codec 0 is not ready [0x100]
codec_ready: codec 0 is not ready [0x100]
codec_read: codec 0 is not valid [0x1fc]
codec_read: codec 0 is not valid [0x1fe]
AC'97 0 access is not valid [0x], removing mixer.
ACPI: PCI interrupt for device :00:11.5 disabled
VIA 82xx Audio: probe of :00:11.5 failed with error -5

and I get the same result if I rmmod/modprobe the kernel sound module 
(snd-via82xx).


lspci -vv gives me:

00:11.5 Multimedia audio controller: VIA Technologies, Inc. 
VT8233/A/8235/8237 AC97 Audio Controller (rev 60)

   Subsystem: ABIT Computer Corp. Unknown device 1416
   Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- 
ParErr- Stepping- SERR- FastB2B-
   Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium TAbort- 
TAbort- MAbort- SERR- PERR-

   Interrupt: pin C routed to IRQ 90
   Region 0: I/O ports at e800 [disabled] [size=256]
   Capabilities: [c0] Power Management version 2
   Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=0mA 
PME(D0-,D1-,D2-,D3hot-,D3cold-)

   Status: D0 PME-Enable- DSel=0 DScale=0 PME-

and my modprobe.conf (generated by kudzu) looks like:

alias eth0 r8169
alias scsi_hostadapter sata_via
alias snd-card-0 snd-via82xx
options snd-card-0 index=0
options snd-via82xx index=0
remove snd-via82xx { /usr/sbin/alsactl store 0 /dev/null 21 || : ; }; 
/sbin/modprobe -r --ignore-remove snd-via82xx


I can always stick a spare sound card in the remaining PCI slot but the 
sound card used to work with CentOS 5.0.  It seems kind of silly that it 
doesn't work now.  I've Googled for some different parts of the dmesg 
output but haven't found anything helpful.  Same with error messages 
from aplay, amixer, etc.  Any suggestions would be appreciated.


Thanks,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] radius WPA

2008-03-18 Thread David G. Miller

David Hl??ik [EMAIL PROTECTED] wrote:


Hi , will be someone so kind and will provide mi howto, or working
configuration of Acess Point WPA authentification using Radius Server . I
have followed a lot of howtos, unfortunatelly no one works for me. 

Using Centos 5.1 . 

I put up a blog entry on what I did to get WPA Radius working for me:

http://davenjudy.org/wordpress/?p=22

That's with CentOS 5.1 for both the client (HP Laptop) and my server.  
If you run into something that needs to be different for your setup, 
post a comment and I'll do my best to find an answer.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Colors in vi for user root

2008-03-12 Thread David G. Miller

Erek Dyskant [EMAIL PROTECTED] wrote:

This was discussed previously soon after CentOS 5.0 was released.  The 
 upstream distribution changed root from using vim (with syntax 
 highlighting) to using vi.  With the 4.X versions root was using vim.  
 The 5.X configuration is:


 [EMAIL PROTECTED] ~]# which vi
 /bin/vi

 [EMAIL PROTECTED] ~]# which vi
 vi:  aliased to vim
 [EMAIL PROTECTED] ~]# which vim
 /usr/bin/vim
  
In theory, programs in /bin are statically linked, so they work even 
when you have library issues going on.  Anyway, just use the vim command 
explicitly or add alias vi=vim to your ~root/.profile

The static linking part is no longer true:

[EMAIL PROTECTED] ~]# ls -l /bin/vi
-rwxr-xr-x 1 root root 628808 May  9  2007 /bin/vi
[EMAIL PROTECTED] ~]# file /bin/vi
/bin/vi: ELF 64-bit LSB executable, AMD x86-64, version 1 (SYSV), for 
GNU/Linux 2.6.9, dynamically linked (uses shared libs), for GNU/Linux 
2.6.9, stripped


I would guess that any shared libraries used by vi are in or under 
/lib.  That way the required libraries should also always be available.


Just for comparison, the executable for vim is quite a bit bigger:

[EMAIL PROTECTED] ~]# ls -l /usr/bin/vim
-rwxr-xr-x 1 root root 2817056 May  9  2007 /usr/bin/vim

This is just another example of the upstream distribution being very 
conservative for possibly several different reasons.  There are also a 
number of ways to override their choice.  I just wanted to point out 
that the change from vim to vi for root was intentional.  Someone 
changing it back should understand the implications of what they're doing.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Colors in vi for user rootRe:

2008-03-07 Thread David G. Miller

Mario Gamito [EMAIL PROTECTED] wrote:


Hi,

How can I have vi with syntax hilghting for root ?
Regular users have it, but not root's.

I've seen the hidden files of a regular user home, but found nothing.

Thanks in advance.

Warm Regards,
Mário Gamito
This was discussed previously soon after CentOS 5.0 was released.  The 
upstream distribution changed root from using vim (with syntax 
highlighting) to using vi.  With the 4.X versions root was using vim.  
The 5.X configuration is:


[EMAIL PROTECTED] ~]# which vi
/bin/vi

[EMAIL PROTECTED] ~]# which vi
vi:  aliased to vim
[EMAIL PROTECTED] ~]# which vim
/usr/bin/vim

The idea is that vi is in /bin which should be available if the system 
can boot at all.  Stuff under /usr may be in a different partition and, 
thus, may not be available for some reason.


Cheers,
Dave

--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  1   2   >