[CentOS] Conntrack-tools for CentOS 4.8

2009-08-31 Thread Matt Shields
Does anyone know where I can get an RPM of Conntrack-tools,
libnetfilter_conntrack and libnfnetlink that work with CentOS 4.8?

-matt
http://www.sysadminvalley.com
http://www.beantownhost.com
http://www.linkedin.com/in/mattboston
Stephen 
Leacockhttp://www.brainyquote.com/quotes/authors/s/stephen_leacock.html
- I detest life-insurance agents: they always argue that I shall some
day
die, which is not so.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] shell script

2009-02-08 Thread Matt Shields
On Sun, Feb 8, 2009 at 9:52 AM, Chris Geldenhuis
chris.gel...@iafrica.comwrote:

 Mad Unix wrote:
  I have to run multiple  command about 20x on linux each one got his
  own output, I want to bind all the out puts of them in one file then
  read this file and mail it to user account
 
  sample
 
  [r...@imail pons]# /home/pons/tsmmonitor stgpool SDC-STAFF
  stgpool - utilization of storage pool SDC-STAFF 62%, OK
  [r...@imail pons]# /home/pons/tsmmonitor stgpool ISO-BACKUP-POOL
  stgpool - utilization of storage pool ISO-BACKUP-POOL 41%, OK
  [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
  stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
  [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
  stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
 
  I want all these out puts be bind it in one file
 
  myfile:
 
  stgpool - utilization of storage pool SDC-STAFF 62%, OK
  stgpool - utilization of storage pool ISO-BACKUP-POOL 41%, OK
  stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
  stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
 
  then to read this file and send it to email address
 
  Thanks
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 
 Hi,

 Do this by re-directing the output from your commands into a file like
 this:

 [r...@imail pons]# /home/pons/tsmmonitor stgpool SDC-STAFF  outfile

 [r...@imail pons]# /home/pons/tsmmonitor stgpool ISO-BACKUP-POOL 
 outfile

 [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
 outfile

 [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
 outfile

 Note that the single  in the first line will create a new outfile
 that is it will create the file if it does not exist or over-write it if
 it does exist.

 The double  in the following commands will append the output of
 those commands to the already existing outfile.

 ChrisG


Actually  will also create the file if it doesn't exit.  Try it :)

-matt
http://www.sysadminvalley.com
http://www.beantownhost.com
http://www.linkedin.com/in/mattboston
Joe E. Lewis  - I distrust camels, and anyone else who can go a week
without a drink.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] shell script

2009-02-08 Thread Matt Shields
On Sun, Feb 8, 2009 at 10:02 AM, Chris Geldenhuis
chris.gel...@iafrica.comwrote:

 Matt Shields wrote:
  On Sun, Feb 8, 2009 at 9:52 AM, Chris Geldenhuis
  chris.gel...@iafrica.com mailto:chris.gel...@iafrica.com wrote:
 
  Mad Unix wrote:
   I have to run multiple  command about 20x on linux each one got his
   own output, I want to bind all the out puts of them in one file
 then
   read this file and mail it to user account
  
   sample
  
   [r...@imail pons]# /home/pons/tsmmonitor stgpool SDC-STAFF
   stgpool - utilization of storage pool SDC-STAFF 62%, OK
   [r...@imail pons]# /home/pons/tsmmonitor stgpool ISO-BACKUP-POOL
   stgpool - utilization of storage pool ISO-BACKUP-POOL 41%, OK
   [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
   stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
   [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
   stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
  
   I want all these out puts be bind it in one file
  
   myfile:
  
   stgpool - utilization of storage pool SDC-STAFF 62%, OK
   stgpool - utilization of storage pool ISO-BACKUP-POOL 41%, OK
   stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
   stgpool - utilization of storage pool ORACLE-DUMP-POOL 62%, OK
  
   then to read this file and send it to email address
  
   Thanks
   ___
   CentOS mailing list
   CentOS@centos.org mailto:CentOS@centos.org
   http://lists.centos.org/mailman/listinfo/centos
  
  
  Hi,
 
  Do this by re-directing the output from your commands into a file
  like this:
 
  [r...@imail pons]# /home/pons/tsmmonitor stgpool SDC-STAFF  outfile
 
  [r...@imail pons]# /home/pons/tsmmonitor stgpool ISO-BACKUP-POOL
   outfile
 
  [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
  outfile
 
  [r...@imail pons]# /home/pons/tsmmonitor stgpool ORACLE-DUMP-POOL
  outfile
 
  Note that the single  in the first line will create a new
 outfile
  that is it will create the file if it does not exist or over-write
  it if
  it does exist.
 
  The double  in the following commands will append the output of
  those commands to the already existing outfile.
 
  ChrisG
 
 
  Actually  will also create the file if it doesn't exit.  Try it :)
 
  -matt
  http://www.sysadminvalley.com
  http://www.beantownhost.com
  http://www.linkedin.com/in/mattboston
  Joe E. Lewis  - I distrust camels, and anyone else who can go a week
  without a drink.
 
  
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 Hi Matt,

 I know that, but if you use  and there is some file there with that
 name already the data will be appended to it instead of starting a new
 file with the output of your current session only.

 ChrisG


For some that might be what they want.  :)


-matt
http://www.sysadminvalley.com
http://www.beantownhost.com
http://www.linkedin.com/in/mattboston
Charles M. Schulz  - I love mankind; it's people I can't stand.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] unsubscribe

2009-01-28 Thread Matt Shields
On Wed, Jan 28, 2009 at 7:23 PM, Kevin Krieser k_krie...@sbcglobal.netwrote:


 On Jan 28, 2009, at 10:46 AM, Anne Wilson wrote:

  On Wednesday 28 January 2009 16:20:47 Kevin Krieser wrote:
  The information IS in the headers, but many email programs don't show
  the full headers, extracting only the information that many people
  want (subject, TO:, CC:, etc).  So if you aren't aware of it being
  hidden in the headers, you may not notice it.
 
  I generally look at the footers, when present, to see how to
  unsubscribe.  And many people don't even go that far.  CentOS
  probably
  should add just a little more to their footers, such as a note that
  the link provided is also to unsubscribe.
 
  It's easy to find when you know, but then we're not newbies, are we?
 
  Anne

 I've been on several different lists, on and off, so I am not a newbie
 here.  And even then, unless I remembered, I probably wouldn't think
 of looking at the normally hidden headers.

 Now when there is a footer added that says to unsubscribe, send a
 message to a specified address, it can be frustrating. But I guess it
 works, a list manager will probably remove the poster.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


Who cares about the headers every single message from the list has a
footer appended to it with the information about the list.  Click on the
link and it tells you how to unsubscribe.  Not to mention that, but once a
month I get an email from the mailing list telling me about my subscription
and how to log in and make changes to my subscription.

-matt
http://www.sysadminvalley.com
http://www.beantownhost.com
http://www.linkedin.com/in/mattboston
Bill Cosby  - A word to the wise ain't necessary - it's the stupid ones
that need the advice.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Antivirus for CentOS? (yuck!)

2009-01-22 Thread Matt Shields
On Thu, Jan 22, 2009 at 8:15 AM, Ralph Angenendt
ra+cen...@br-online.dera%2bcen...@br-online.de
 wrote:

 Anne Wilson wrote:
  I'm sure there are plenty of people that can give Ralph detailed
 information
  about using it efficiently.

 Sorry, I do not want to know how to use clamav efficiently, I am just
 wondering what good clamav will do on a server, as there aren't really
 any hooks into file writing or reading. Sure, I can hook up clamav into
 my email stream or into my proxy on that machine for filtering out
 requests to people who use windows boxes behind those.

 But I do not understand which sense clamav makes on a linux server, if
 there are no hooks into the kernel (I know about dazuko, but a) we don't
 ship it and b) last time I looked at it I couldn't get it to run
 properly without a *huge* speed penalty).

 As far as I know there is no AntiVirus solution for Linux which works
 the same as all the solutions under Windows do. And if you do not have
 real time scanning on a server/workstation, an anti virus scanner
 doesn't do you any good, as the time frame for attacks is just too
 large. Either you get it on the first shot or you can just forget about
 it.

 So again: If you want to be PCI-DSS compliant - what's the use of
 clamav?

 Ralph


Check out BitDefender http://www.bitdefender.com

-matt
http://www.sysadminvalley.com
http://www.beantownhost.com
http://www.linkedin.com/in/mattboston
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS failover cluster

2009-01-17 Thread Matt Shields
On Fri, Jan 16, 2009 at 6:09 PM, Giuseppe Fuggiano 
giuseppe.fuggi...@gmail.com wrote:

 What should I use to configure a failover cluster under CentOS?  Is
 there Red Hat Cluster Suite or something like that?

 Thank you in advance.

 --
 Giuseppe Fuggiano
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



heartbeat works good.  you can get it along with ldirectord/ipvsadmin at
www.linuxvirtualserver.org


-matt
http://www.sysadminvalley.com
http://www.beantownhost.com
http://www.linkedin.com/in/mattboston
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] offtopic question .. apprecyice ur help

2008-10-31 Thread Matt Shields
On Fri, Oct 31, 2008 at 10:09 AM, Ned Slider [EMAIL PROTECTED] wrote:

 Ralph Angenendt wrote:

 fabian dacunha wrote:

 its a offtopic question but really apprecite if someone would advise n
 help
 i have been running a mil server with sendmail

 and have sbl-xbl.spamhaus.org as my dnsbl.

 i had  other servers which are alredy out now
 that is relays.ordb.org and dsbl.org have already been out of my
 sendmail
 config.

 any one knows of ny other servers i could add in my sendmail config


 Any list which you trust enough to make the decision *which* mails you
 accept for you.
 Which would leave none for me.

 Even sbl.spamhaus.org contains a blacklist, which sometimes lists
 because of the name the machine has (CBL that is).

 Ralph


 DNSBL has information on many RBLs together with statistics on their
 effectiveness:

 http://stats.dnsbl.com/

 Other popular RBLs besides Spamhaus include Spamcop, PSBL and uceprotect.

 As Ralph says, any RBL should be used with a certain amount of caution as
 it has the potential to cause FPs (some more so than others). An alternative
 approach is to use such RBLs as part of a scoring system such as
 SpamAssassin. This is particularly useful for RBLs that you don't trust to
 outright reject mail at the smtp level.

 If you want to improve on the performance of sbl-xbl.spamhaus.org, I would
 first look at switching to the combined zen.spamhaus.org zone which also
 contains the pbl.spamhaus.org zone. My own data shows sbl-xbl.spamhaus.orgto 
 block around 50% of spam whereas
 zen.spamhaus.org hits on around 90% of spam with very few FPs for me -
 YMMV. You should monitor performance closely.


Anyone have any experience dealing with SURBL?  I have a client who's domain
and IP is not listed in SURBL, but their client in China is using SURBL and
my client's emails are getting blocked.  Can't seem to find how SURBL is
blocking them

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: offtopic question .. apprecyice ur help

2008-10-31 Thread Matt Shields
On Fri, Oct 31, 2008 at 12:37 PM, Scott Silva [EMAIL PROTECTED] wrote:

 snip
 
  Anyone have any experience dealing with SURBL?  I have a client who's
  domain and IP is not listed in SURBL, but their client in China is using
  SURBL and my client's emails are getting blocked.  Can't seem to find
  how SURBL is blocking them
 
 Could the client in China either have an old copy of the feed, or maybe a
 Chinese ISP keeps an older copy cached of the feed?

 The Chinese client could also whitelist your client.


I've moved their website to 3 totally different ISPs.  LayeredTech,
Superbhost, and now Savvis colo.

Not sure on the whitelist, we've having a hard time getting anyone in the
China office that knows how this is setup.  I guess the previous tech that
set it up left.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mysql 4 5 export import issue

2008-10-30 Thread Matt Shields
On Thu, Oct 30, 2008 at 9:52 AM, Karanbir Singh [EMAIL PROTECTED]wrote:

 Tom Brown wrote:

 in other news, you dont need to dump + reload when you move from mysql-4
 to mysql-5, just service mysqld stop; yum update mysql\*;
 /usr/bin/mysql_upgrade ; service mysqld start



 i am changing the actual box so i have to dump and then import as i am
 also moving from centos4 to 5 -


 rsync or tar the /var/lib/mysql dir up and move that. I am guessing in this
 case that some delimiter is breaking or the dump you did wasent clean.


But make sure mysqld is not running on either box when doing it this way.
Also, if you have any innodb tables you must have the exact same innodb
settings in your /etc/my.cnf

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Mounting a LVM partition from a linux live cd

2008-09-17 Thread Matt Shields
I'm running CentOS 5.2, it uses LVM to manage the disks and we had a
programmer do something (not sure what) then reboot the system.  When it
came up it kernel panicked.  Luckily it's not production, it was their
sandbox.  But they didn't backup any of their files.  I know the disks are
fine because I was able to boot from a linux live cd and mount the /boot
partition from the sda drive, and the sdb drive that has the mysql database
mounted at /var/lib/mysql and not using LVM.   What I don't know how to do
is mount /dev/sda2 (root / partition) which is an LVM/ext3 partition.  Does
anyone have the steps to mount this drive while booted into a linux live cd?

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] unsubscribe

2008-08-01 Thread Matt Shields
On Thu, Jul 31, 2008 at 7:05 PM, Jim Shunamon [EMAIL PROTECTED] wrote:

 Rajeev R. Veedu wrote:




 *Rajeev R. Veedu*

 

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


If you want to unsubscribe, follow the link at the bottom of any mailing
list email http://lists.centos.org/mailman/listinfo/centos or the
instructions in the email you got when you signed up.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] enterprise backup solution (probably amanda?)

2008-08-01 Thread Matt Shields
On Fri, Aug 1, 2008 at 12:19 PM, David Mackintosh 
[EMAIL PROTECTED] wrote:

 On Wed, Jul 30, 2008 at 07:10:40AM -0700, Shawn Everett wrote:
  I think backups are important and always on topic.
 
  You could always use Veritas Netbackup.  That's what one of my clients
 uses
  with great success.  It backups up Windows, Linux and does full,
  incremental, restores etc etc all from a nice Java GUI.
 
  It's $$$ but you can't get more Enterprise than that. ;)

 Agreed on Veritas NetBackup.  An oddly constructed tool, but one
 we've come to depend on.

 We also have customers who use Bakbone NetVault.  It's broken in
 different ways than the Veritas NetBackup is.  :)

 --
  /\oo/\
 / /()\ \ David Mackintosh |
 [EMAIL PROTECTED]  | http://www.xdroop.com



Check out bacula.org.  It's very good and scalable.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 2 DHCP servers - different VLAN's

2008-07-25 Thread Matt Shields
On Fri, Jul 25, 2008 at 4:46 PM, David Hláčik [EMAIL PROTECTED] wrote:

 Hello  guys,

 to describe my scenario

 i have 4 VLANS on my switch, each VLAN is different subject. I have one
 DHCP server for 3 VLANS + second one DHCP server for 1 VLAN - named VLAN 7 .

 Problem is , this started to make problems suddenly. VLAN 7 is not
 recieving IP adress from correct DHCP server . On DHCP server where
 declaration for subnet is configured, i am recieving this message :

 Jul 25 12:38:47 boss dhcpd: DHCPNAK on 10.123.42.169 to 00:16:cf:93:1f:33
 via eth0
 Jul 25 12:38:52 boss dhcpd: DHCPREQUEST for 10.123.42.169 from
 00:16:cf:93:1f:33 via eth0: wrong network.

 How can i solve it and what does it mean?

 I am using authoritative clausule in each subnet deffinition.

 Thanks in advance!

 David

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


If VLAN 7 has access to the VLAN that the primary dhcp server is on, you
need to somehow block dhcp requests.  What I did was besides using VLAN's on
my switches, I have a Sonicwall firewall which handles the actual routing
between vlans, then I set certain vlans to use the first dhcp server via a
dhcp helper in the firewall.  Then in the other vlan I point the dhcp helper
at the second dhcp server.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] African IP addresses list

2008-07-01 Thread Matt Shields
On Tue, Jul 1, 2008 at 7:44 AM, Tony Wicks [EMAIL PROTECTED] wrote:

 
 I would like to add something, as a South African citizen. South Africa, is
 NOT part of Africa for that matter, it's a republic on it's own. It's almost
 like saying Let's ban America, cause someone in Mexico spammed me. South
 Africa, which is on the 196/8 range does a LOT of business overseas in many
 countries, and I do want to warn that you could loose a lot of good business
 due to this practice.

 Most of the fraud you experience could come from Nigeria, or one of the
 other central  western Africa countries. To ban a whole continent because
 of problems some countries cause could be problematic.

 For that matter is China a different country from Russia, from Switzerland,
 even though they share the same land mass


 --

 I need to put my 2c in here. I'm from New Zealand, we are a first world
 democratic country (the first in the worlds to give the vote to ALL adults I
 may mention). I have had the misfortune many of times of being unable to
 transact business because people from the US in their ignorance think, that
 New Zealand, isn't that part of Australia, which is right next to Asia,
 can't do business with those Asians, they will rip me off. Now sometimes
 people from the US have asked me why people in the other parts of the world
 get a bit annoyed at the the only country that is free and true if the good
 old US of A attitude, and well here you go as an example. Lets ban all of
 Africa because someone from Nigeria is a scammer. Africa is a pretty big
 place, and you know what, I've met many South Africans that are real nice
 (even employed a few). I've always been someone who defends America when
 people run it down, but it is a two way street, don't treat a whole country
 as criminals because you don't know the difference between one side of a
 continent from another, its kind of insulting you know. And some day you
 might well need the rest of us, you never know.




If a business only wants to do transaction with people in their own country,
what is wrong with that?  There is no international law that says they have
to provide services or products to you because you live in a different
country.  Sometimes the lost revenue by not doing business outside your own
country is better than having to deal with the possibility of fraud.
Sometimes it is more of a hassle to deal with shipping, service and/or
support issues with people from a different country and it's just not worth
it.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] African IP addresses list

2008-07-01 Thread Matt Shields
On Tue, Jul 1, 2008 at 3:03 PM, Sean Carolan [EMAIL PROTECTED] wrote:

 This is a bit naive and childish:

 how terribly shocking...I suggest also blocking China, 'cause they're
 commies, and France because they eat frogs

 The OP is not discriminating against Africa because of government systems,
 skin color, or diet.  He is trying to reduce lost revenue, credit card
 refunds and time due to fraudulent orders that almost all originate from the
 African continent.  The reality is that Nigeria is the 419 internet scam
 capital of the world, and the Nigerian scammers sometimes work from other
 African nations or even the UK.  If someone in Africa really, really must
 have something that Matt sells then they should pay with Western Union or
 international money order instead of a credit card.


Ever heard of the Western Union scam?  No offense to anyone in any other
country, but personally I prefer to deal with people in the US who are
covered by US laws.  My comments above had absolutely nothing to do with
race, color, nationality, religion, etc.  It's because it's easier to go
after someone legally if they try to rip me off and they are in the same
country as me.  And I know there a lot of businesses that have taken the
same stance on who they will sell products to.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Command line logging program suggestions?

2008-06-20 Thread Matt Shields
On Fri, Jun 20, 2008 at 8:57 AM, Rob Lines [EMAIL PROTECTED] wrote:

 I am looking for an app that would run from the terminal and would emulate
 a bash shell (or pass everything to the shell) that would allow me to set a
 log file and then record all my input and the output to the screen from the
 commands.  As an added bonus if it would allow me to run it from two
 terminals (or more) on the same machine and log all the input and output to
 the same file while still displaying it on the screen that would be great.
 The goal being that when making changes or diagnosing a problem it can
 sometimes become hard to tell what command came when especially when you
 have more than one termial session open.  While using putty with a really
 large buffer helps it doesn't deal well with the two terminal issue or
 disconnected sessions.

 Anyone know of an app like this or any suggestions that could be added to
 my bashrc to provide the functionality?

 Thanks,
 Rob


I recently need something similar, but wanted everything sent to a remote
syslog server.  A friend of my suggested install rootsh or sudosu as the
shell and wrap it in a script that pipes everything to syslog using a script
like this
http://www.oreillynet.com/pub/a/sysadmin/2006/10/12/httpd-syslog.html

I haven't had time to set it up, but it seems like it could work.  If you
didn't want remote syslog, just pipe it to a local file.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing hacker tools

2008-06-06 Thread Matt Shields
On Fri, Jun 6, 2008 at 7:54 PM, Luke S Crawford [EMAIL PROTECTED] wrote:
 Filipe Brandenburger [EMAIL PROTECTED] writes:
 My boss asked me to harden a CentOS box by removing hacker tools,
 such as nmap, tcpdump, nc (netcat), telnet, etc.

 Removing network tools does not make it harder to break into the box,
 however, it can make it harder to do something with it once you are in.
 removing those tools might help keep an infection from spreading, but it
 wont protect the box itself.  (also, just installing the programs just
 means that if your box get compromised, the hacker needs to install
 some new packages.  Not difficult, even without root-  the attacker
 can install to the compromised user homedir.)

But removing networking would :)

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Learning some sad things about the state of IPv6

2008-05-30 Thread Matt Shields
On Fri, May 30, 2008 at 6:23 AM, Karanbir Singh [EMAIL PROTECTED] wrote:
 Christopher Chan wrote:
 The OP is not saying there is no ipv6 netfilter support. He said that
 there is no ipv6 state netfilter module or something like that.

 In which case either you dont know what the OP is talking about, or he
 doesnt know what he asked :D

 --
 [EMAIL PROTECTED] ~]# ip6tables -nL | wc -l
 124
 [EMAIL PROTECTED] ~]# hostname
 panic.karan.org
 [EMAIL PROTECTED] ~]# lsof -i | grep IPv6  | wc -l
 561
 [EMAIL PROTECTED] ~]# ip a l | grep net6
inet6 ::1/128 scope host
inet6 fe80::20d:61ff:fe80:7ce3/64 scope link
inet6 2001:4830:1600:13c::2/64 scope global
inet6 fe80::4224:e704/128 scope link
 [EMAIL PROTECTED] ~]# uname -r
 2.6.18-53.1.14.el5
 ---

 - KNatively running ipv6 for a few years nowB
 --
 Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]

Exactly!!!  What he's complaining about is the lack of lazy-man's GUI
tool to configure ip6tables.

Are you absolutely sure that FWBuilder doesn't support IPv6?  Because
here there a release note
http://www.fwbuilder.org/docs/firewall_builder_release_notes.html
referring to ip6tables.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Learning some sad things about the state of IPv6

2008-05-29 Thread Matt Shields
On Thu, May 29, 2008 at 11:43 PM, Christopher Chan
[EMAIL PROTECTED] wrote:
 Robert Moskowitz wrote:

 We have kernel support for IPv6 in Centos, but not stateful firewall
 support.

 That requires at least the 2.6.20 kernel, which means Fedora Core 6 or
 some other Linux distro.

 None of the various free Linux firewalls have IPv6 support.  Supposedly
 FWBuilder can manage Netfilters for a Linux Kernel, but that seems to be the
 extent of it.

 More sad facts as I uncover them.

 Just use openbsd. We cannot expect Linux to rule everything. Use what best
 fits the job.

Not sure about FC6, but in both CentOS 4  5 there is an ip6tables.  I
haven't used it, but I'm assuming that you can build rules just like
you do with iptables.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sed

2008-05-23 Thread Matt Shields
On Fri, May 23, 2008 at 11:41 AM, Scott McClanahan
[EMAIL PROTECTED] wrote:
 Not specific to CentOS but I know you guys would be really helpful anyhow.
 Basically, I have a file which has been editted in the past very similarly
 to the hosts file only now I want to use it as a hosts file and need to run
 some fancy sed to massage the data into shape.  Currently, the data in the
 file is in the form of ip address tab short hostname space short
 hostname alias.  In some cases there may not be any aliases so the end of
 line would be right after the short hostname (no space at the end either).
 In other cases there could be many space separated short hostname aliases.
 What I have been trying to do without success is add our domain name to the
 first string after the ip address and tab character.  As an example,

 == Before ==

 1.1.1.1foo
 10.10.10.10bar bar2
 100.100.100.100foobar foobar2 foobar3


 == After ==

 1.1.1.1foo.contoso.com
 10.10.10.10bar.contoso.com bar2
 100.100.100.100foobar.contoso.com foobar2 foobar3

 Any advice on how to pull this off?  Thanks.

I'd use awk.  Put the lines in a file, then do this

cat test.txt | awk '{ print $1 \t $2 .centos.com\t $3 \t $4 }'


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Top Posting

2008-05-16 Thread Matt Shields
On Fri, May 16, 2008 at 8:14 PM, Karanbir Singh [EMAIL PROTECTED] wrote:
 Hi,

 Carol Anne Ogdin wrote:
 Dear Mr. Singh:

 I understand you prefer this medium.  I have practical experience with
 alternatives that have offered measurable and definite benefits to the
 communities they serve.

 Which is quite fair, and the point I was making as well. However, the
 poit I was also making ( and have now repeated about 4 times ) is-  this
 is the lists not the forums. We have some guidelines and the moderaters
 will make an effort to implement them.

 Your opinions are louder than your putative experience.  Unfortunately, in
 51 years in the computer industry, I've sometimes had to cope with behaviors
 like yours.  It still makes me sad to experience such unhappy people who
 think that attack is the best way to enrich a collaboration.

 ok, so you are  51 years old. Which was good to know. I'll respect you
 for your age. Apart from that you've made no real contribution to the
 conversation here.

I think the thing that's annoying about top posting is explained with
this example (grabbed from a Boston Linux  Unix Group signature).
I'll have to admit when I'm not thinking about it, there have been a
few times where I've top posted (bad habit from the corporate world),
but if people would take 5 minutes to read a complete thread backwards
with comments inserted in between other comments, it gets very
confusing.  Bottom posting or posting in between comments makes sense.


A: Yes.
 Q: Are you sure?
 A: Because it reverses the logical flow of conversation.
 Q: Why is top posting annoying in email?


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I need storage server advice

2008-05-06 Thread Matt Shields
On Tue, May 6, 2008 at 3:11 PM, Ed Morrison [EMAIL PROTECTED] wrote:
 Hi:

  I need advice on implementing a storage server.  I really do not have the $
 to spend for a Dell iSCSI storage divice and I am thinking trunning CentOS
 5.x with ftp or FreeNAS.  Here is what I am looking at and concerned about.

  Situation:
  My current storage needs are approximately 1.5 TB annually.  This will
 increase to about 3.5 TB annually over the next 5 years (rough est.).  This
 box will just be a data archive and once it is full it will only be used
 very infrequently if not used at all. Files are small up to 10 MB but
 numerous.

  CentOS:
  Upgrading to the newer CentOS flavors.  I will not have the ability to
 archive this data to tape and I am concerned about loosing the data when
 upgrading the OS.  How best to handle this?

  Storage limitation.  It is my understanding that there is a 2 TB storage
 limitation with Linux (and windows) in general particularly for stability.
 I see that ReiserFS can go up to 16 TB.  Is any one using this?  If so, how
 has it been for you?


  FreeNAS
  Anyone using FreeNAS?  What is your experience?  How easy is it to add new
 drives and keep your data?  Upgrading to newer versions?

  Thanks,

  Ed

I haven't used this and maybe I understand the concept, but what about
RedHat's GFS?  From what has been told to me, you take a cluster of
servers and it turns them into a large disk array.  Someone correct me
if I'm wrong.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Watching Netflix movies on CentOS

2008-05-04 Thread Matt Shields
On Sun, May 4, 2008 at 6:31 AM, Kai Schaetzl [EMAIL PROTECTED] wrote:
 Ralph Angenendt wrote on Sun, 4 May 2008 10:22:11 +0200:


   In other words: They don't want your money. If I were you, I'd respect
   that. Make yourself heard over at Netflix, though.

  I remember about the Netflix format from before 2000. It's a very low
  bandwidth format with really bad quality. AFAIK it was mainly porn sites
  using it. I thought it had died out since long.

  Kai


Netflix only started doing on demand movies about a year ago, and from
what I remember when I had the service it wasn't all that bad.  It
looked great on a laptop, and on my 720p 37 HDTV it looked better
than normal tv, but not as good as an HD program.

I agree with Ralph, complain to them, I know I did.  Unfortunately
they probably don't think there are enough Linux users to justify
providing service to us.  I'm just really surprised they haven't
provided service to Mac users, the new Quicktime format actually has
better compression rates than any of the WMV/WMA formats.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Watching Netflix movies on CentOS

2008-05-04 Thread Matt Shields
On Sun, May 4, 2008 at 11:02 AM, Kevin Krieser [EMAIL PROTECTED] wrote:


  On May 4, 2008, at 9:23 AM, Matt Shields wrote:


  On Sun, May 4, 2008 at 6:31 AM, Kai Schaetzl [EMAIL PROTECTED]
 wrote:
 
   Ralph Angenendt wrote on Sun, 4 May 2008 10:22:11 +0200:
  
  
  
In other words: They don't want your money. If I were you, I'd respect
that. Make yourself heard over at Netflix, though.
   
  
   I remember about the Netflix format from before 2000. It's a very low
   bandwidth format with really bad quality. AFAIK it was mainly porn sites
   using it. I thought it had died out since long.
  
   Kai
  
  
 
  Netflix only started doing on demand movies about a year ago, and from
  what I remember when I had the service it wasn't all that bad.  It
  looked great on a laptop, and on my 720p 37 HDTV it looked better
  than normal tv, but not as good as an HD program.
 
  I agree with Ralph, complain to them, I know I did.  Unfortunately
  they probably don't think there are enough Linux users to justify
  providing service to us.  I'm just really surprised they haven't
  provided service to Mac users, the new Quicktime format actually has
  better compression rates than any of the WMV/WMA formats.
 
 


  Apparently the problem with the Mac is the DRM again.  The studios are
 apparently all worried that people will keep copies of the old TV shows and
 movies downloaded.

  I have an old Mac Mini that I would like to use to watch some Netflix shows
 on (better than sitting in front of a computer, or watching it on a small
 laptop), but until it is supported I can't.  The Mini is hooked up to my TV
 directly.


Quicktime absolutely supports DRM, so what's the problem?  It's a
cheap company that's looking to get the most bang for the littlest
buck.  It wouldn't have taken much to have their system ask for the
users choice of player (WMP or QT), so the other remaining issue is
time to convert films to digital format and storage.  Since the
conversion is probably automated it shouldn't have taken that much
extra time.  So the only issue is disk space, which means that Netflix
was too cheap to spend the extra money to store a QT version of the
films so they could get the Mac users.  From what I remember of the
Netflix downloads they were looking for a cheap way to get ahead of
Blockbuster.  They looked good, but they did as little as possible,
which included a limited availability of movies.

And for those that say it's more complicated than I state, I have
built a site from ground up(programming and video encoding) which
hosted independent films in WMV and QT formats. For me the most
complicated part was converting films that were not on optical media
(like DVD), because if they were sent on tape format (DVCPRO, DV,
BetaCam, etc) you were limited to the speed of playback, whereas
digital you can rip faster.  When it came to storage, even at high def
quality storage was still cheap.  Even bandwidth for streaming was
quite cheap.
-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] vectoring IRC / Jabber logins to AD?

2008-04-22 Thread Matt Shields
On Tue, Apr 22, 2008 at 11:56 AM, Craig White [EMAIL PROTECTED] wrote:

  On Mon, 2008-04-21 at 21:34 -0500, Les Mikesell wrote:
   Matt Hyclak wrote:
On Mon, Apr 21, 2008 at 06:39:45PM -0700, Rogelio enlightened us:
Excuse my ignorance (I just got crap on the #centos IRC channel for this
question), but is there a (easy!) way to have and IRC and/or Jabber 
 server
relay a login to a Microsoft Active Directory server for authentication?
If there's a better question to ask this question, please point me in 
 that
direction, and I'll be happy to do so
   
   
Well, you probably want to ask in a support channel for your IRC and 
 jabber
server software, and/or some sort of Microsoft channel.
   
The way you've posed the question, it has nothing to do with CentOS, so 
 I am
unsurprised you got crap for it on IRC.
  
   I thought one of the big deals in Centos was the ability to configure
   PAM to authenticate anywhere you want and all the apps use the same
   settings?  Isn't that true, or aren't there any jabber/IRC servers that
   are bundled properly into the distribution?
  
   This sounds very much like a distro-centric question to me, even if the
   answer turns out to be that Centos doesn't provide that.
  
  actually no.

  I am currently using ejabberd and it is not common to authenticate
  'real' users but certain possible. The methodology of authenticating
  'real' users would entirely depend upon the jabber server software which
  varies widely from perl to java to erlang.

  The point of authenticating against LDAP is rarely do you only want
  user/id authentication but you also want address books/user lists and
  other attributes that can be useful such as e-mail address.

  In addition, jabber servers do have to store attributes about users so
  there's little to be served by marrying PAM functions in.

  What you should have noticed here Les, is that Windows AD users are
  mostly clueless to how LDAP works and integrating Windows AD/LDAP into
  other software is a challenge for them.

  Craig


Why not just install OpenFire which has the AD - Jabber
authentication stuff built right in?


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT -Recommendations relating to a Password Safe

2008-04-22 Thread Matt Shields
On Tue, Apr 22, 2008 at 10:23 PM, Clint Dilks [EMAIL PROTECTED] wrote:
 Hi Everyone

  I am wondering if many people are using software that acts as a password
 safe.  And if so can you recommend any software in particular?

  I know many people will disagree with this idea, and I myself have always
 followed the printed list stored in a secure location.  But in our
 particular situation keeping this single list current and correct while
 ensuring that regular password changes happen is turning into a nightmare.

  Any suggestions welcome, have a nice day :)

Check out PasswordSafe and KeePass.  They are both very good.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] jabber server

2008-04-19 Thread Matt Shields
On Sat, Apr 19, 2008 at 4:11 AM, Olaf Mueller [EMAIL PROTECTED] wrote:
 Rogelio wrote:

  Hello,


   I'm looking to set up a Jabber server and autocreate the user lists
   from Active Directory.
  I am using Openfire from
  http://www.igniterealtime.org/projects/openfire/index.jsp under CentOS
  5 for instant messaging in my local network. It works great.

  Also Openfire seems to work with active directory, but I have no
  experience with that.

  regards
  Olaf


I second that.  Openfire was extremely easy to setup with AD.  Also,
we were able to download the Spark Jabber Client and customize very
easily with our company logo.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] FreeRadius + Dynamic VLANs/802.1x Authentication

2008-04-16 Thread Matt Shields
Has anyone setup FreeRadius to do automatic VLAN assignments on their
switches based on client mac addresses?  If so, would you be willing
to share your radius configs?  I haven't touched radius since mid 90's
and am stuck trying to get this to work.  It would be much
appreciated.

thanks

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MS Exchange Replacement

2008-04-07 Thread Matt Shields
On Mon, Apr 7, 2008 at 1:19 AM, Rudi Ahlers [EMAIL PROTECTED] wrote:
 Joseph L. Casale wrote:

 
 
 
  What is the closest open source mail server I can replace exchange with
 that provides the nearest equivalent in user experience?
 
  Thanks!
  jlc
  
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 
  What about Zimbra or Scallix?

  --

A friend of mine is running Scalix for one of the town's where I live.
 It's used for all town government employees, plus all high school
staff, teachers and students.  I think he said there are about 5000
mailboxes and it runs smoothly.  I don't know if he has it setup as a
cluster or with a SAN or what.  But I know he likes it.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] simple load balancing/failover for OWA

2008-04-04 Thread Matt Shields
On Fri, Apr 4, 2008 at 9:03 AM, Ruslan Sivak [EMAIL PROTECTED] wrote:
 David Hrbác wrote:

  Ruslan Sivak napsal(a):
 
   We are building an exchange cluster with two front end Outlook Web
 Access servers.  We would like to at least have some sort of failover, and
 prefereably load balancing for them.
  
   Russ
  
 
  Russ,
  take a look at
 http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html
  David
  ___
 
  Yes, that what I was thinking.  However, I believe these servers also run
 smtp, pop3, imap,etc, so I don't think Apache can handle all of those..

LVS handles all protocols.  It can do any port and UDP or TCP.  It
supports different types of balancing Round Robin (rr), Weighted Round
Robin (wrr), Least Connections (lc), Weighted Least Connections (wlc).
 It can do sticky sessions, so if OWA doesn't like when you go from
server 1 to server 2, LVS will keep the user stuck to one server.
Plus a ton of other features.  Give it a shot.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] simple load balancing/failover for OWA

2008-04-03 Thread Matt Shields
On Thu, Apr 3, 2008 at 11:07 PM, Ruslan Sivak [EMAIL PROTECTED] wrote:
 We are building an exchange cluster with two front end Outlook Web Access
 servers.  We would like to at least have some sort of failover, and
 prefereably load balancing for them.

  The MS recommended way is to use NLB, but for various reasons that's not
 working with our set up.
  We are looking to set up a single linux server and use something like LVS
 to load balance/fail over the connections.
  Looking at LVS, it looks like it hasn't been updated in a while.  Is it
 stable?  Is it still the preferred solution?  Since OWA has sessions, but no
 session replication, we would need something that can keep directing the
 same client to the same server (either by IP, or preferably by cookie).  Can
 LVS handle this?

  I also saw that the latest version of Apache has some sort of load
 balancing support.  Can it be used to set something like this up?  We are
 looking for the simplest solution that won't require a lot of maintanence.

  We understand that having a single LVS box creates a single point of
 failure, and are willing to accept the risk for now to keep things simpler.
  Russ

LVS is extremely stable.  We have 3 active/passive clusters of LVS
servers, for different projects, and they work extremely well.

The way we set it up was each LVS pair is running heartbeat,
ldirectord and ipvsadm.  If the primary node goes offline for any
reason, heartbeat on the second tells it to take over.  And there are
lots of config settings to tweak heartbeat.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Create Install DVD with updates

2008-04-02 Thread Matt Shields
On Wed, Apr 2, 2008 at 2:08 PM, Joseph L. Casale
[EMAIL PROTECTED] wrote:
 We put out a new dvd every 3-6 months ... do you really need one more
  often than that?

  Heh, I don't need one more often, but it makes bandwidth easier to manage 
 when doing test's and mock installs for example aside from the obvious time 
 needed to run the update's.

  I created a local mirror which at least cuts dl time and bandwidth down!

  Is it possible though?

  jlc

Some people might.  I remember dealing with a client in the middle of
India which had a really slow net connection.  So being able to
download updates and roll-their-own-dvd-with-updates could be useful
to some.  Personally, I've setup a local centos mirror which downloads
updates once a day, and I use PXEBoot to image all my servers and have
a bunch of custom kickstart files that do a lot of post installation
configuration.  I do this for convenience because I don't want to go
out to a datacenter to reimage a server, instead I just log into a
kvm.  But it's practical for your local office as well.  So if had a
slow connection this is the way that I'd go.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mysql data

2008-03-31 Thread Matt Shields
On Mon, Mar 31, 2008 at 5:17 PM, Ray Leventhal [EMAIL PROTECTED] wrote:
 HI folks,

  Apologies if this is OT.  If it is, please msg me offllist and I'll
  carry on my searching elsewhere.

  Where does mysql actually store databases and tables in the filesystem?

  Thanks in advance
  -Ray

If you're using the stock settings from an RPM, probably in /var/lib/mysql

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Securing SSH

2008-03-25 Thread Matt Shields
On Tue, Mar 25, 2008 at 12:48 PM, Tim Alberts [EMAIL PROTECTED] wrote:
 So I setup ssh on a server so I could do some work from home and I think
  the second I opened it every sorry monkey from around the world has been
  trying every account name imaginable to get into the system.

  What's a good way to deal with this?

DenyHosts - http://denyhosts.sourceforge.net/  Also, when you set it
up, set it to download the lists from their website.  These lists are
IPs that other users have found scanning their network.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-22 Thread Matt Shields
On Sat, Mar 22, 2008 at 7:09 PM, Stephen John Smoogen [EMAIL PROTECTED] wrote:
  The usual idea is that because its Free Software you can't restrict
  it in anyway... and that the 'Freedom' trumps any other license or
  agreement. And I will bet that if you have enough money, there will be
  lawyers who will come up with ways to argue that is a valid
  interpretation.. and will argue it over and over again as long as you
  have money.

I find it funny how people love to complain because companies like
RedHat and SuSE/Novell have found a way to make a business out of a
free product.  There is nothing forcing you to use their distro.  And
if you do like their distro that much and don't want to pay, there are
free alternatives to the commercial products like CentOS, WBEL and
OpenSuSE.  Heck there are more free distro's than paid ones.  Or if
you are jealous of those companies making all the money off a free
product and are so inclined why don't you create your own commercial
Linux distro.  There is nothing that they are doing that violates the
GPL, if they did, I'm sure that they would have all kinds of legal
trouble.

Instead of complaining, people should be grateful for the hard work
that they do bringing features, fixes, drivers, which are released for
free, and by getting hardware vendors involved in bring linux
compatibility to their products.  I can still remember back in 1995
trying to get support from a hardware vendor who refused to provide
drivers for linux or even offer any assistance.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 0pensource MAPI client for Exchange

2008-03-20 Thread Matt Shields
On Thu, Mar 20, 2008 at 9:58 AM, Joseph L. Casale
[EMAIL PROTECTED] wrote:
 Anyone know a good Linux client for Exchange that is MAPI based and not IMAP 
 based? Using Evolution, but going from Outlook/MAPI to this is not fun☺
  Thanks!
  jlc

I've been using Evolution with our Exchange servers and instead of
using MAPI, I enabled Outlook OWA (http) and connect that way.  You
just point Evolution to the URL of your server, usually
http://servername/exchange


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Colors in vi for user root

2008-03-07 Thread Matt Shields
On Fri, Mar 7, 2008 at 6:42 AM, Mário Gamito [EMAIL PROTECTED] wrote:
 Hi,

  How can I have vi with syntax hilghting for root ?
  Regular users have it, but not root's.

  I've seen the hidden files of a regular user home, but found nothing.

yum install vim-common vim-enhanced

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] install LAMP

2008-03-03 Thread Matt Shields
On Mon, Mar 3, 2008 at 8:52 AM, Hiep Nguyen [EMAIL PROTECTED] wrote:
 hi all,

  i'm not an expert on linux/centos, but i play with it and have a general
  idea.  it's time for me to setup a centos box for development.  i rarely
  install anything from source, except a few times in college when i have to
  modify kernel for OS project.  but i guess i can learn now.

  i just installed centos 5 with minimal installation.  next step is to
  install LAMP w/ SSL.

  i found http://lamphowto.com/lampssl.html, but i have questions before i
  proceed.

  is it better to install from source or rpm?  how easy it is to
  upgrade/update if install from source?  it seems so much easy to
  upgrade/update from rpm, well b/c i'm always do this way.

  is there any other instruction (beside the one mentioned above) to install
  LAMP w/ SSL?

  appreciate your help/suggestion
  t. hiep

It's better to stick to the RPMs to make it easier to upgrade.  If you
want an easy way to install LAMP you can run 2 commands

yum -y groupinstall Web Server
yum -y install mysql-server php-mysql

This will get Apache, MySQL, and PHP all installed.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Send in your favorite CentOS slogan today

2008-03-03 Thread Matt Shields
On Mon, Mar 3, 2008 at 11:36 AM, Dan Carl [EMAIL PROTECTED] wrote:
 Heard someone mention free beer, had to participate.

  CentOS, we find RedHat's bugs

  CentOS, the OS that makes sense.

  Dan

I know that everyone seems to think any mention of RH is cute and
funny, but it's just asking for a lawsuit.  Does anyone remember
LinuxWorld Expo in Boston a couple years ago when RH was releasing
RHEL4.  No?  I do, because that's when CentOS got a letter from RH
legal department asking to remove all references to their name and I
was the one sitting in the LinuxWorld booth trying to justify to
people that CentOS was a valid project and not just stealing someone
else's IP.  If CentOS wants to be taken seriously, especially by big
business, you don't do it by biting the hand that feeds you and
creating bad publicity.  Referring to RH without their permission is
just begging for RH to sue us.  Drop the RH jokes and push CentOS on
it's merit as a stable enterprise OS with a great community behind it.

Also without RH, CentOS wouldn't be.  They make it very easy to obtain
the sources in a manner that makes it easy to build CentOS by
releasing complete SRPMs.  There's nothing saying RH has to release
the code this way.  They could make it very difficult for groups like
CentOS, WhiteBox, and Scientific Linux. Be nice to RH and buy a
license here and there when it makes sense.  They have their place in
the food chain, as do we.

Just my $0.02

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Xen or VMWARE on CentOS 5

2008-02-27 Thread Matt Shields
On Wed, Feb 27, 2008 at 2:58 PM, Rudi Ahlers [EMAIL PROTECTED] wrote:

 David Mackintosh wrote:
   On Wed, Feb 27, 2008 at 08:03:09AM -0600, Les Mikesell wrote:
  
   Ern jura wrote:
  
   Does anyone out there have a comprehensive tutorial on installing VMware
   and
   successfully managing virtual machines with either xen or vmware?
  
   VMware is pretty simple: download the server rpm, install it, run the
   vmware-config.pl setup script to set the options and install your (free)
   license key.  Then run vmware locally or from some other machine to
   access the console where you can create and start the virtual machines.
Once created, you can treat the virtual machines like they were
   separate physical boxes except that they contend for host resources (and
   once they are up on the network I prefer to connect directly to them
   with ssh, X, freenx, or vnc instead of using the VMware console.  You'll
   want plenty of RAM on the host machine and if you run several VM's they
   will perform better if you can spread them over different disk drives.
  
   With VMware you can copy your disk images over to a Windows or Mac host
   and run them with no changes (Mac version isn't free, though).
  
  
   This is pretty much what I do.  I also keep stock reference images
   for each OS I support and copy from the reference image every time I
   need to deploy a new VM.
  
   I like the idea of Xen, but the documentation is a little thin
   especially when it comes to installing useful things like Windows
   VMs; I don't have the time to solve the problem properly, and I hope
   that in a year or two I can change this.
  
  
   

 
   ___
   CentOS mailing list
   CentOS@centos.org
   http://lists.centos.org/mailman/listinfo/centos
  
  So, what would you use if you wanted to / needed to host a Windows 2003
  VM on a Linux / UNIX server? I don't / can't sacrifice a whole server
  for a few ASP.NET aps.


I've never tried this, but someone was telling me that it might be
possible to serve up ASP and ASP.net with Apache and mono.  I don't
know if this is true, but might be worth checking out.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Find files

2008-02-22 Thread Matt Shields
On Fri, Feb 22, 2008 at 9:16 PM, Robert [EMAIL PROTECTED] wrote:


  [EMAIL PROTECTED] wrote:
   Hi,
  
   I am trying to delete files that are more than 7 days old. When I
   run it interactively it works, no problem, but it does not run
   from a file stored in cron.daily. The rest of that daily file
   runs properly. [The execute bit is on].
  
   I don't see anything in the /var/log/messages.
  
   ---
   #!/bin/bash
  
   find /mnt/iog -type f -name '*.tar.gz' -mtime +7 | xarg rm
   ---
  
   Any idea what am I missing?
  
  Just a shot in the dark:  Cron is kinda partial to absolute paths.
  Change your 1-liner to:

  /usr/bin/find /mnt/iog -type f -name '*.tar.gz' -mtime +7 | xargs rm

  That, and the xargs that Garrick pointed out.


  Good luck.
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos


You can also do it like this

/usr/bin/find /mnt/iog -type f -name '*.tar.gz' -mtime +7 -print -exec
rm -f {} \;


If you want to log the results that were deleted try this

/usr/bin/find /mnt/iog -type f -name '*.tar.gz' -mtime +7 -print -exec
rm -f {} \;  mylog 2 /dev/null


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Timing a command

2008-01-25 Thread Matt Shields
On Jan 25, 2008 7:05 PM, Scott Ehrlich [EMAIL PROTECTED] wrote:
 I want to keep track of how long a task is running.  Thinking it wouldn't
 take that long, I opted not to run time before it.  The fact that it is
 taking a long time, if I revisit the machine in the morning, what would be
 the best way to find out what time it ended?

 In this case, I'm using mt to erase an lto3 tape - sudo mt -f /dev/st0
 erase.  But I'd like to use the knowledge from this question to track
 other events, too.

 I feel like I should know this answer, but cannot think of the solution at
 the moment.

 Thanks.

 Scott


just add 'time' before your command.  like this:

time sudo mt -f /dev/st0 erase


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread Matt Shields
On Jan 22, 2008 11:26 PM, John R Pierce [EMAIL PROTECTED] wrote:
 jarmo wrote:
  How about webalizer?
  http://www.mrunix.net/webalizer/
 

 thats for analyzing a webserver's logs. poster dnk wanted to monitor
 his internet usage, which I assume is router traffic.


Yes, but you can also use it to analyzer squid logs.  So if you're
using Squid proxy, then you can charge on your internet usage.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] What's up with the mailing list spam?

2008-01-04 Thread Matt Shields
Just this morning I've gotten 3 or 4 pieces of spam on the CentOS mailing list.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firewall frustration

2007-12-31 Thread Matt Shields
On Dec 31, 2007 7:58 AM, Robert Moskowitz [EMAIL PROTECTED] wrote:

 Matt Shields wrote:
  On Dec 31, 2007 12:13 AM, Robert Moskowitz [EMAIL PROTECTED] wrote:
 
  Well FWbuilder is NOT easy.  The documentation does not match the
  current GUI.  Now the box is locked up.  I will have to pull it again,
  hook it up to a kybd/VGA and reset iptables
 
  Maybe Shoreline with webmin
 
  Problem is I want a REAL router/firewall with little work.  Both public
  and private nets have routable addresses.  No NATing for me!  I just
  help write the RFC ;)  And all the templates for fwbuilder want you to
  be using NATing.
 
  Perhaps I should just set up another Astaro firewall.  I have been using
  Astaro since v3, so I am comfortable with it
 
 
 
  If you've ever used a Checkpoint firewall, FWBuilder is exactly like
  that interface.  It even comes with a module that will let you modify
  Checkpoint firewalls.
 I noticed the later, also a PIX module. No I have not personally needed
 that costly of a firewall.

 Full discloser time. My day job is with ICSAlabs. My area is security
 protocols research (like setttin up the initial IPsec certification
 criteria), but when I visit the labs there are all those firewall
 products up and running So, yeah, I know checkpoint. I talk with the
 gang over in the labs about 'simple' firewalls, but there are only
 certain things the boss funds here. So then I have to go cheap.


If you're running a single firewall, then maybe FWBuilder isn't for
you, although it will do what you want.  The real benefit of FWBuilder
is when you have more than one firewall in your network and you want
to use common objects to to simplify maintaining rules.

For example, the company I work for has 4 datacenters, plus a number
of leased servers (like Rackspace).  At each of the datacenters we
have at least 1 pair of redundant firewalls.  On all our firewalls we
have common rules to allow traffic from every other datacenter/server
that we own.  So we define an object for each datacenter, the object
is a subnet.  Then we define a group called datacenters which includes
all the previous subnets objects.  Then when building a new firewall
we just include the same rule that says from datacenters allow all.

If we add a new datacenter or leased server, we add a new subnet
object and include it in the datacenter group.  We then just recompile
and redeploy each of the firewalls without having to add anything to
the firewalls, because they already have the datacenter rule.

When you maintain a large network you really see the benefit of
FWBuilder.  If you're running Windows there is a $50 license fee, but
for those people who are network admins but do not like Linux on the
desktop it's well worth the price for the Windows license.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firewall frustration

2007-12-30 Thread Matt Shields
On Dec 31, 2007 12:13 AM, Robert Moskowitz [EMAIL PROTECTED] wrote:
 Well FWbuilder is NOT easy.  The documentation does not match the
 current GUI.  Now the box is locked up.  I will have to pull it again,
 hook it up to a kybd/VGA and reset iptables

 Maybe Shoreline with webmin

 Problem is I want a REAL router/firewall with little work.  Both public
 and private nets have routable addresses.  No NATing for me!  I just
 help write the RFC ;)  And all the templates for fwbuilder want you to
 be using NATing.

 Perhaps I should just set up another Astaro firewall.  I have been using
 Astaro since v3, so I am comfortable with it


If you've ever used a Checkpoint firewall, FWBuilder is exactly like
that interface.  It even comes with a module that will let you modify
Checkpoint firewalls.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Job Script

2007-12-29 Thread Matt Shields
On Dec 29, 2007 9:47 PM, Christopher E [EMAIL PROTECTED] wrote:
 Hello All,

 Is there a way to run a script from CentOS 5 and have it look at a
 file and get it if its new then the file it got last time, if not it
 does nothing, if its a new file then it wgets the file and then unzip
 the file then runs a php script,  I would want this to check once a
 week or if it would not make much of a different then each day is fine

 if this is able to be done can someone point me in the right direction
 to do such!

 Sincerely,
 Christopher


The script you will need to create for yourself (or hire someone), you
can create it in any language.  Then call it from a cronjob on
whatever schedule you want.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Clustering MySQL

2007-12-13 Thread Matt Shields
On Dec 12, 2007 4:46 PM, Karanbir Singh [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
  I just got my master-master servers setup and we're running
  mysql-server-5.0.48-1.el4.centos.  I should also mention that Meetup
  presentation was given by Patrick Galbraith who used to work for MySQL
  and was responsible for adding replication to MySQL.
 

 sounds good, will you do a howto for the centos wiki ?

 - KB

 --
 Karanbir Singh : http://www.karan.org/  : [EMAIL PROTECTED]


I'll see what I can do.  I'm so backlogged with work and I've promised
quite a few docs to people, but I'll try.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Clustering MySQL

2007-12-12 Thread Matt Shields
On Dec 11, 2007 12:42 PM, Karanbir Singh [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
  the code).  But I saw a presentation at the Boston MySQL Meetup.com
  group about how to do master-master in mysql 5.  We're about to
  implement this in the next few weeks.  If it's done this way both

 that is imho, a mysql-5.1 only feature, where you can have rbr and
 multimaster setups that actually work. and 5.1 isnt quite ready for
 release as yet :D

 --
 Karanbir Singh : http://www.karan.org/  : [EMAIL PROTECTED]

I just got my master-master servers setup and we're running
mysql-server-5.0.48-1.el4.centos.  I should also mention that Meetup
presentation was given by Patrick Galbraith who used to work for MySQL
and was responsible for adding replication to MySQL.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Clustering MySQL

2007-12-11 Thread Matt Shields
On Dec 11, 2007 12:18 PM, Steve Campbell [EMAIL PROTECTED] wrote:
 I'm just beginning to consider using the Clustering available with
 CentOS. We are going to spec out some new hardware, and after reading
 most of the Clustering manuals, I have a small question about MySQL.

 I would like to run High Availability MySQL, in other words, similar to
 how you can run  HA HTTPD and the like.  The catch seems to be if I run
 MySQL on an individual server, with common MySQL replication to another
 server, how do failovers work? I see a real problem with table locking
 and the like. Is there a way to run multiple MySQL servers that get
 removed from the cluster as opposed to failing over when using the newer
 MySQL versions (I am running 3.23 now, so a little behind)?

 Thanks for any insights.

There are a number of ways to do it.  We currently have 1 master mysql
server, and multiple replicas. We then load balance the reads only
from the replicas and writes go to the master database (all handled in
the code).  But I saw a presentation at the Boston MySQL Meetup.com
group about how to do master-master in mysql 5.  We're about to
implement this in the next few weeks.  If it's done this way both
reads and writes to the db can be load balanced.  We use
linuxvirtualserver.org (heartbeat, ipvsadm and ldirectord) for load
balancing.

You might be able to contact the Meetup organizer, Sherri
http://mysql.meetup.com/137/, she usually posts the presentations
online.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Clustering MySQL

2007-12-11 Thread Matt Shields
On Dec 11, 2007 6:10 PM, Karanbir Singh [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
 
  If this were master-slave, I'd probably do an LVM Snapshot and get a
  fresh copy of the master db.  The same could be done for
  master-master.
 

 has a live lvm-snapshot ever worked for you as a real move-data-around
 policy ? you would, at the very least, need to flush in memory data, and
 have a system wide write lock in place while the snapshot is created.

 its been a tempting idea, but so far of the few people I know having
 tried this lvm snapshoting, have never actually managed to get it
 working right for mysql dumps. So, would be good to hear from someone
 who has it working.

I didn't put all the details, we have a custom script that we run
which locks the tables, does a flush, starts a lvm snapshot.  We can
then copy the mysql data, when the copy is done we've got a script to
release the snapshot.

The thing you need to remember when you image the server is to make
sure you leave some unused diskspace on your partition.  So for
example if you have a 100GB drive, put it all into the pv and lv, but
only create a 80GB vg.  That gives you 20GB for the snapshot.  Of
course when calculating how much extra space you need, you need to
think about how fast your data grows and how much time you need to do
a copy of the data.  If your snapshot is too small and you outgrow the
snapshot before you've finished copying your data, then the snapshot
will expire.  Works great for us in our master - multiple slave
environment.  Some of our slaves even have slaves. :)

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-12-05 Thread Matt Shields
On Dec 5, 2007 5:23 PM, Amos Shapira [EMAIL PROTECTED] wrote:
 On 06/12/2007, Dave Augustus [EMAIL PROTECTED] wrote:
  If you can try with non-Xen kernels, you should get better results.

 Does this mean that you tried Xen kernels and DomU and it failed, then
 switched to non-Xen kernels on the same setup and it succeeded?


I could probably bet you that you doing this on VM's is what's causing
the problem.  Grab some cheap old hardware and try setting this up on
real machines.  It will work.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 6:53 PM, Amos Shapira [EMAIL PROTECTED] wrote:
 On 30/11/2007, Matt Shields [EMAIL PROTECTED] wrote:
  Take Xen out of the picture until you learn how heartbeat and
  ipvsadm/ldirectord actually work.  You could be having network issues
  because you are hosting it on a virtual server instead of on a real
  server.  So it's kinda hard to troubleshoot if you don't even know if
  your configs are broken.  Get two crappy boxes that you can load
  everything up on, configure them with heartbeat, get that working

 Thanks for your suggestion. The reason I use Xen (beyond the huge
 convenience) is that I don't have spare hardware to play with.

  where it will failover an IP.  then add some other service like
  ipvsadm/ldirectord, and take things one step at a time.  Don't try to
  setup everything all at once, it makes it harder to try to debug
  problems.

 That's exactly what (I think) I did - just stuck to instructions from
 someone who seems to have been in exactly the same position and got it
 working.

 As for network issues - I see the packets coming and going all right.
 But I also see programs just crash and burn - I've just executed
 BasicSanityCheck on the primary node which appeared to be working
 relatively fine a couple of minutes ago (at least it got more
 processes running after three minutes than the other node) and that
 failed too with core dumps.

  I'm using CentOS4 and RHEL4 using dag'd rpms on a few of the CentOS
  and RHEL boxes and built from source on some of the other ones.  I
  haven't had a chance to try out a CentOS 5 system yet.  But as to your
  stability questions, we've been using LVS for about 3 or 4 years now
  and never, ever had stability problems.

 So maybe I should try to get packages from dag, even though there are
 ones included in CentOS?

 Which exact version of hearbeat are you using right now? From reading
 the history of Linux-HA it appears there was a huge change between 1.x
 and 2.x


2.x


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 6:28 PM, Amos Shapira [EMAIL PROTECTED] wrote:
 On 30/11/2007, Matt Shields [EMAIL PROTECTED] wrote:
  LVS is a group of tools that do a lot of different things, the two
  that you are interested in are:
 
  - heartbeat - provides failover if you have two nodes (active/active
  or active/passive)
  - ipvsadm/ldirectord - provides load balancing (ie. http(s) load
  balancer in front of multiple web servers)
 
  As stated in a previous post we have a number of these setup in our
  network and we handle a lot of traffic.  Some we're using for http(s)
  traffic, others smtp/pop/imap, others mysql (read only queries off
  replicas).  There's no end to what what you could use heartbeat or
  ipvsadm/ldirectord or both for.  Both packages can be installed from
  dag's repo.

 Thanks.

 What platform are you using? Mine is CentOS 5 on x86_64. It runs as a
 Xen DomU but from what I read on the linux-ha users mailing list this
 shouldn't be the issue. The production system will run on the bare
 metal (not under Xen).

 My experience with LVS at a previous workplace (a very large ISP) was
 also excellent - they had a couple of LVS servers in front of hundreds
 of mini-clusters (each such cluster service its own web or other
 network application, sometimes sharing disks using DRBD).

 The difference, I suspect, is that I'm trying this now with version
 2.1.2 on CentOS 5 and x86_64, as opposed to possibly older version of
 everything (RedHat version, LVS, hardware (i386)).

 Thanks for your input,

Take Xen out of the picture until you learn how heartbeat and
ipvsadm/ldirectord actually work.  You could be having network issues
because you are hosting it on a virtual server instead of on a real
server.  So it's kinda hard to troubleshoot if you don't even know if
your configs are broken.  Get two crappy boxes that you can load
everything up on, configure them with heartbeat, get that working
where it will failover an IP.  then add some other service like
ipvsadm/ldirectord, and take things one step at a time.  Don't try to
setup everything all at once, it makes it harder to try to debug
problems.

I'm using CentOS4 and RHEL4 using dag'd rpms on a few of the CentOS
and RHEL boxes and built from source on some of the other ones.  I
haven't had a chance to try out a CentOS 5 system yet.  But as to your
stability questions, we've been using LVS for about 3 or 4 years now
and never, ever had stability problems.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 4:12 PM, Ross S. W. Walker [EMAIL PROTECTED] wrote:
 John R Pierce wrote:
 
  Matt Shields wrote:
   Dump the cluste suite and use the LinuxVirtualServer.org packages.
 
  isn't that heartbeat and stuff repackaged?

 Visiting the web site it appears to be a load-balancer, not that that
 wouldn't be useful in some scenarios, but it isn't really clustering
 software that is to have an application run in active/passive or
 active/active between multiple nodes cooperatively, with fencing and
 shared storage, locking and all that goes with that.

 -Ross

LVS is a group of tools that do a lot of different things, the two
that you are interested in are:

- heartbeat - provides failover if you have two nodes (active/active
or active/passive)
- ipvsadm/ldirectord - provides load balancing (ie. http(s) load
balancer in front of multiple web servers)

As stated in a previous post we have a number of these setup in our
network and we handle a lot of traffic.  Some we're using for http(s)
traffic, others smtp/pop/imap, others mysql (read only queries off
replicas).  There's no end to what what you could use heartbeat or
ipvsadm/ldirectord or both for.  Both packages can be installed from
dag's repo.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 6:40 PM, Matt Shields [EMAIL PROTECTED] wrote:

 On Nov 30, 2007 6:28 PM, Amos Shapira [EMAIL PROTECTED] wrote:
  On 30/11/2007, Matt Shields [EMAIL PROTECTED] wrote:
   LVS is a group of tools that do a lot of different things, the two
   that you are interested in are:
  
   - heartbeat - provides failover if you have two nodes (active/active
   or active/passive)
   - ipvsadm/ldirectord - provides load balancing (ie. http(s) load
   balancer in front of multiple web servers)
  
   As stated in a previous post we have a number of these setup in our
   network and we handle a lot of traffic.  Some we're using for http(s)
   traffic, others smtp/pop/imap, others mysql (read only queries off
   replicas).  There's no end to what what you could use heartbeat or
   ipvsadm/ldirectord or both for.  Both packages can be installed from
   dag's repo.
 
  Thanks.
 
  What platform are you using? Mine is CentOS 5 on x86_64. It runs as a
  Xen DomU but from what I read on the linux-ha users mailing list this
  shouldn't be the issue. The production system will run on the bare
  metal (not under Xen).
 
  My experience with LVS at a previous workplace (a very large ISP) was
  also excellent - they had a couple of LVS servers in front of hundreds
  of mini-clusters (each such cluster service its own web or other
  network application, sometimes sharing disks using DRBD).
 
  The difference, I suspect, is that I'm trying this now with version
  2.1.2 on CentOS 5 and x86_64, as opposed to possibly older version of
  everything (RedHat version, LVS, hardware (i386)).
 
  Thanks for your input,

 Take Xen out of the picture until you learn how heartbeat and
 ipvsadm/ldirectord actually work.  You could be having network issues
 because you are hosting it on a virtual server instead of on a real
 server.  So it's kinda hard to troubleshoot if you don't even know if
 your configs are broken.  Get two crappy boxes that you can load
 everything up on, configure them with heartbeat, get that working
 where it will failover an IP.  then add some other service like
 ipvsadm/ldirectord, and take things one step at a time.  Don't try to
 setup everything all at once, it makes it harder to try to debug
 problems.

 I'm using CentOS4 and RHEL4 using dag'd rpms on a few of the CentOS
 and RHEL boxes and built from source on some of the other ones.  I
 haven't had a chance to try out a CentOS 5 system yet.  But as to your
 stability questions, we've been using LVS for about 3 or 4 years now
 and never, ever had stability problems.


Also, we're on a mix of i386 and x86_64 systems.  But for each cluster
the pair of nodes is identicle.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 4:30 AM, Amos Shapira [EMAIL PROTECTED] wrote:
 Hello,

 I'm beginning to give up on making Linux-HA's heartbeat work for my
 environment (CentOS x86_64) and am wondering what other option have I got to
 help me:
 1. Use IPVS to maintain a cluster of virtual servers, either master/slave or
 load-balanced.
 2. Use DRBD in master/slave fashion to keep a home-grown application
 highly-available.

 The first thing I stumbled upon is RedHat Cluster Suite (
 http://www.linuxtopia.org/online_books/centos_linux_guides/centos_cluster_configuration_and_management/),
 from which I also saw some packages on my CentOS servers.

 I've never heard of it before and am just starting to dig its docs, but if
 someone here can confirm/deny that this is a possible route to take it might
 save me some time or doubts.

Dump the cluste suite and use the LinuxVirtualServer.org packages.
You won't have a gui, but it will be better in the long run.  We're
using that for quite a few clusters and handling about 30MBit/s on
each of the clusters, I think it's around 10k concurrent connections.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 3:21 PM, Amos Shapira [EMAIL PROTECTED] wrote:
 On 30/11/2007, Matt Shields [EMAIL PROTECTED] wrote:
  Dump the cluste suite and use the LinuxVirtualServer.org packages.
  You won't have a gui, but it will be better in the long run.  We're
  using that for quite a few clusters and handling about 30MBit/s on
  each of the clusters, I think it's around 10k concurrent connections.

 I also need to fail-over DRBD (i.e. so if the primary goes down the
 secondary will notice this, mount that DRBD partition and start the
 server which uses the files on it) - will LVS give me that by itself
 or will I need something else on top of it to do that?
 I got the impression that this what Linux-HA's heartbeat adds to the
 plain LVS but it doesn't work for me.

 I'm really not concerned about GUI's - I'd rather edit config files
 manually if they are documented well enough.

 --Amos

Yup.  We use LVS for all types of failover senarios.  We use it for
redundant firewall/vpn servers which use heartbeat for failing over
the virtual IPs and services.  We also use LVS with ldirectord as
redundant load balancers.  Read the docs, they explain how to set up a
service to be started/stopped on failover


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Replacement for Linux-HA (heartbeat) - RedHat cluster?

2007-11-30 Thread Matt Shields
On Nov 30, 2007 3:57 PM, John R Pierce [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
  Dump the cluste suite and use the LinuxVirtualServer.org packages.

 isn't that heartbeat and stuff repackaged?


With a GUI that actually makes it more difficult to manage.  Learn to
use the command line tools and config files, it's so much easier.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Adobe products under Linux?

2007-11-28 Thread Matt Shields
On Nov 28, 2007 3:29 AM, Mark Hull-Richter [EMAIL PROTECTED] wrote:
 On Nov 27, 2007 3:26 PM, William L. Maltby [EMAIL PROTECTED] wrote:
 
  $ rpm -q AdobeReader_enu
  AdobeReader_enu-7.0.9-1.i386
 
  I don't know about others, but this one works fine for me.
 

 I don't call this a real application as they don't support anything you
 don't pay for.

 E.g., AR 8.0 (?) is available for Windows and has been for months, now, but
 not for Linux.

  The Adobe Flash Player for (32-bit) browsers on Linux also works, most of
 the time, but it, too, is a free application, which means Adobe doesn't
 provide support for it, either.

 mhr



Just because there is no commercial support does not mean it isn't a
real application.  By your same reasoning Gimp or Linux or any of the
other open source applications are not real.

Besides, you won't get support for Adobe Reader or Flash Player on
Windows or Mac.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] reasons for using CentOS in business environments

2007-11-28 Thread Matt Shields
On Nov 28, 2007 12:31 AM, Rogelio [EMAIL PROTECTED] wrote:
 My apologies if this question has been previously answered, but could
 anyone here provide me with resources that I might use to help build a
 case for exclusively using CentOS in an enterprise environment?
 (Approximately 200 servers)

 Long story short, I've used a little of everything out there
 (Gentoo/Debian/*BSD/Slackware) and have a fairly good overall strategy
 of how they all work (all of them have lived on my laptop at one time
 or another over the last 10 years or so), but I'm now looking for
 solid business reasons that I can present to the CxO types of a
 company to show them that CentOS is probably where they'd like to
 look.

 Reasons thus far I've come up with include:

 --free *and* fully (at least, in my experience) compatible with RHEL
 --fairly stable (I don't have problems unless I start mixing repos)
 --yum packages (almost as cool as Debian! Ok, I'm biased...or maybe I
 don't know how to properly use yum?)

 Any other suggestions / tips I might add to my list would be greatly
 appreciated!


You won't get sued by the BSA, Microsoft, Adobe or any of the other
software giants.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Announcing the CentOS on Laptops initiative

2007-11-27 Thread Matt Shields
On Nov 27, 2007 10:37 AM, Count Of Dracula [EMAIL PROTECTED] wrote:
 On 11/26/07, Dag Wieers [EMAIL PROTECTED] wrote:
  Hi all,
 
  I would like to announce a CentOS on Laptops initiative. The aim is to
  allow everybody in the community (and on this mailinglist) to document
  their own experience with CentOS on their laptop (on the CentOS wiki).
 
 
  The goal of this initiative consists of 2 parts:
 
   - help and convince people with their own CentOS on laptop installation

 Are you nuts? CentOS on laptop? Why you want to kill torture people in
 such a cruel way?

 Joy

Because some people may actually want to run a stable OS that will
have patches released for quite a while.  Fedora is not an option for
most business people who rely on their laptops every day.  Torture is
installing the latest Fedora every 6 months and hoping something
doesn't break.  Some would say Fedora users are nuts.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to Load balancing

2007-11-21 Thread Matt Shields
On Nov 21, 2007 2:19 PM, D. Bettancourt M. [EMAIL PROTECTED] wrote:
 Hi

 I need informmation about this Topic: Load balancing,,
 I have 2 nic to internet, 1 nic to DMZ, and 1 nic to LAN, but I don,t know
 how do that.

 Where I can found information ??
 Thx!! For your information!


Check out linuxvirtualserver.org

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mount sftp or ftp+ssl drive on windows

2007-11-17 Thread Matt Shields
On Nov 17, 2007 4:07 PM, Bazy [EMAIL PROTECTED] wrote:
 Hello guys,

 I would like to mount a sftp or a ftp with ssl (vsftp with ssl) on to a
 Windows machine as an X: drive. So far I found SftpDrive witch costs
 only $39 :) and I don't want it.

 Do any of you have a positive experience with something like this?

 I need it cause I will install a very important software on that drive,
 witch doesn't need to be on the local disk of the windows machine.

 Thank you!
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


Check out sftpdrive.  It's a windows program that mounts sftp or ssh
directories as a windows drive.  I think it's about $30 but it's worth
it.

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Best laptop for CentOS

2007-11-10 Thread Matt Shields
On Nov 10, 2007 12:15 PM, Matt [EMAIL PROTECTED] wrote:
  Which is the best laptop to run centos on and where can I buy one
  without  Windows Vista pre loaded cause I will uninstall it any way.
  Please tell me the best sites that ship worldwide.

 I would love to find a Linux laptop that had good wi-fi support.
 Including WPA and using an integrated wi-fi adaptor.  Having to edit a
 file to connect to a secure access point is not user friendly if you
 ask me.


I've found that IBM Thinkpad's have pretty good compatibility with RH
based distro's

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Large scale Postfix/Cyrus email system for 100, 000+ users

2007-10-24 Thread Matt Shields
On 10/24/07, Ralph Angenendt [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
  Because of the way that the infrastructure is (biz reasons) we are not
  doing shared storage, we have numerous IMAP servers that we distribute
  accounts across.  As we add more users, we image up a new IMAP server.
   For our business's scaling purposes this was the best plan.
 
  What I am having a problem is how do I get postfix to transfer the
  email to the particular IMAP server that the user account is on.  I
  know that I need to use lmtp and transport, but all the examples I
  have seen show forwarding all email to 1 IMAP server.  I would like
  Postfix to do a lookup for each mailbox and determine which IMAP
  server to deliver it to.

 Having no idea how that fits into your already existing infrastructure,
 but the Cyrus IMAPD Aggregator (also known as Cyrus IMAPD Murder) looks
 like something which should be evaluated - you probably can even drop
 the mysql database, as it really doesn't matter to which of the
 lmtp/imapd proxies you connect to.

From what I understand about Cyrus Murder, it is for replicating your
user data across multiple servers, which is good if you want to load
balance multiple IMAP servers and you don't have a shared storage
backend.

As mentioned we have a web frontend that checks mysql when the user
logs in to see which imap server the account resides on.


Everyone, I have figured it out.  I do plan on posting after I finish
documenting the steps (for those interested).

-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Large scale Postfix/Cyrus email system for 100, 000+ users

2007-10-24 Thread Matt Shields
On 10/23/07, Christopher Chan [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
  Data changes too frequently to generate the file every x number of
  minutes across all smtp servers.

 You have to support instantly deliverable mailboxes for new accounts?

Yes, don't ask me why, it's a business thing.

  The mysql db isn't a single server.  It's a master (read/write) with
  multiple replicas for read access.  Those replicas are load balanced
  with LVS (heartbeat/ldirectord/ipvsadm).  The postfix(smtp) incoming
  and outgoing servers are also load balanced with LVS.  So database
  read speed is not an issue.  Believe me, we know how to build large
  high traffic sites, the only problem we're having is the exact syntax
  on using transport_maps or virtual_transport with multiple lmtp
  transports, and I think I got that figured out with the
  transport_maps.  Will post more later.
 

 I assume that you are aware that transport_maps is called multiple times.

 Recipient_maps in rdbms tables generate at least two lookups (one for
 smtpd, one for cleanup) but when you add transport_maps, that will at
 least explode to one per subdomain of the sender address (you can
 mitigate a lot of that with the domain setting in the map configuration
 file) as trivial-rewrite tries to build its triples for addresses.
 ___

Yes, we're aware, that why we have mysql setup with multiple incoming
and outgoing smtp servers that read from a large cluster of replicated
mysql servers (read-only).

Not saying we won't look at creating a cron to dump maps to a local
file, we might do that in the future, but just for right now we have
enough horsepower to deal with what we have.

-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Large scale Postfix/Cyrus email system for 100, 000+ users

2007-10-24 Thread Matt Shields
 Heck, I see lots of circles where they wouldn't trust mysql for an
 enterprise application so it seems clear that you are not talking about
 stability or performance but rather familiarity and the amount of trust
 you have in what you know.

 I would expect openldap to blow the doors off a mysql db but what do I
 know? I deal in circles  100 user accounts (small businesses).


Wow it's amazing how off topic and how many opinions you get on a
mailing list, when all you wanted to know was how do I specially do
this or that.  That's why I stated what my environment was.

But, since numerous people have stated how mysql is inadequate to do
what we want to do or in general for any task.  We currently use mysql
in a replicated environment with LVS to balance the connections for
our main websites that is all dynamic.  Last time I checked we were
sustaining thousands of visitors per second 24 hours a day, which
equaled about 3-4 thousand queries per second.

So, if it can handle that load and Google trusts it in their
infrastructure, then I'm not gonna replace it.  It does what I need,
it's reliable, it's fast and it has proven that it scales well.

I think the main problem when people say you shouldn't use this
product or that product because it's not good enough is they haven't
set it up properly.  They haven't taken the time to tune the server,
the daemon, and the application.  Let's face it anyone can write a
query to a database (like select * from table) and if you put enough
load behind it your performance is gonna suck no matter what your app
or database is.  But if you take time to tune your code and your
database and design it so it can scale, you can efficiently use
applications like mysql.

Anyway, back to my original request.  You can use the transport_maps
feature to dynamically lookup lmtp transports on a per account basis.
I have figured it out, and for those that are curious I will post when
I've finished documenting everything.

-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Large scale Postfix/Cyrus email system for 100,000+ users

2007-10-23 Thread Matt Shields
I'm trying to set up a large scale email system that supports 100,000+
IMAP accounts.  We have an existing frontend web interface that does a
lookup on a mysql db to figure out which IMAP server to connect to for
each user.  For the email infrastructure we have decided on Postfix
and Cyrus.  We have configured both to use mysql to get the virtual
user information.

Because of the way that the infrastructure is (biz reasons) we are not
doing shared storage, we have numerous IMAP servers that we distribute
accounts across.  As we add more users, we image up a new IMAP server.
 For our business's scaling purposes this was the best plan.

What I am having a problem is how do I get postfix to transfer the
email to the particular IMAP server that the user account is on.  I
know that I need to use lmtp and transport, but all the examples I
have seen show forwarding all email to 1 IMAP server.  I would like
Postfix to do a lookup for each mailbox and determine which IMAP
server to deliver it to.

Anyone have a working example that they could share?  It would be
greatly appreciated.

thanks
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Large scale Postfix/Cyrus email system for 100, 000+ users

2007-10-23 Thread Matt Shields
On 10/23/07, mouss [EMAIL PROTECTED] wrote:
 There are primarily two ways:

 [virtual aliase]
 you can use virtual_alias_maps to redirect [EMAIL PROTECTED] to
 [EMAIL PROTECTED], provided the final server accepts such addresses.

 If the final server doesn't accept these, and you use smtp to relay to,
 then you can write the addresses back, using smtp_generic_maps.

 [transport]
 an laternative is to use use (per-user) transport_maps. something like

 [EMAIL PROTECTED] relay:[hostN.example.com]


 In bothe approaches, the mappings can be generated using sql statements
 (mostly CONCAT). something like
 ...
 query = SELECT concat('relay:[', host, '.example.com]')
 FROM User
 where '%u' = user and '%d' = domain

 you get the idea I hope.



 
  Anyone have a working example that they could share?  It would be
  greatly appreciated.
 

Forward's aren't acceptable.  There is a way to do it with the
transport function and lmtp on a account by account basis.  I'm
looking for real world configs from someone that has this working.

-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Why CentOS as a webhosting platform

2007-09-06 Thread Matt Shields
For me it doesn't have to do with cost.  It has to do with I've used
RedHat Linux since 1995, then RHEL, then CentOS.  And all this time
I've used some form of RedHat or derivative on all my servers.  I
prefer to stick with what I know.

Also, you'll notice that the majority of pre-packed Control Panel
software is written for RPM based distro's.

And if you're looking for webhosting, go to www.cyberbite.com

-matt


On 9/6/07, Karanbir Singh [EMAIL PROTECTED] wrote:
 Hi,

 CentOS seems to be doing really well in the hosting business these days, and
 even for people who would normally have used Windows or OSX on the hosting
 previously, are now looking at using CentOS. And I thought it would be nice to
 have a section on the wiki about exactly why that is.

 Not having any direct connection with the hosting business I was wondering if
 people here could help me out a bit and let me know why they think CentOS is
 good / bad as a platform in this market segment.

 I suppose that would include dedicated hosting, VPS hosting, Shared / Virtual
 hosting, and even high performance grid hosting that a few people seem to be
 offering these days.

 Once we have some material here in this thread, everything will go online at 
 the
 wiki ( with due credit to all contributors ).

 --
 Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Site down for maintenance - How is this accomplished?

2007-08-24 Thread Matt Shields
Depending on the traffic level and the amount of hardware, I would
recommend against what you just said.  Especially if your current
environment is multiple servers that are load balanced.  You don't
want to have to replicate the environment just to have a construction
page.

Instead of setting up Apache with PHP, just setup a really basic
server with lighttpd and a single static page with really minimum
graphics.  It will serve pages and the one or two graphics a lot
faster and a single server can usually handle the load.

-matt

On 8/24/07, Barry Brimer [EMAIL PROTECTED] wrote:


 On Fri, 24 Aug 2007, Matt Arnilo S. Baluyos (Mailing Lists) wrote:

  Hello everyone,
 
  Although we use CentOS primarily on our servers, this query is
  actually more of a general networking question than something specific
  to CentOS.
 
  In the next week or so, we shall be migrating our in-house servers to
  a data center. While we're doing that, we'd like to show a Site down
  for maintenance message while the servers that hosts our websites (we
  have around 15 sites hosted btw), are down.
 
  So, how is this accomplished? While I can probably hack something on
  our name servers, I'm sure there are people on this list that have
  been doing this and could give some recommendations as to the best
  practices for this type of task.

 I would have DNS for all domains point to a web server that has the
 following php page:
 =
 html
 head
 titleMaintenance/title
 /head
 body bgcolor=white
 font size=5centerMaintenance/center
 br
 centerThe server that hosts ? $_SERVER['HTTP_HOST'] ? is currently
 undergoing maintenance.  ? $_SERVER['HTTP_HOST'] ? will return to full
 service as soon as possible.
 /center
 /body
 /html
 =
 I would also add to your httpd.conf file:
 =
 RewriteEngine on
 RewriteRule !^/index\.php$ /index.php [NC,L]
 RewriteRule !^/index\.php$ - [F]
 =
 This makes it so that anyone who connects to any URL on any of your
 websites will be told that the server they are connecting to is under
 maintenance.

 When you have the new server up and running, change DNS.  Alternately you
 could place this on a server in the new location, but change the
 routing/NATing to temporarily deliver the addresses to the server hosting
 this page.  If you are using SSL certificates, you will need to have them
 as well and create different virtualhosts, although they can all have the
 same DocumentRoot and web page.

 Hope this helps.

 Barry
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] need help.. n do apolosize

2007-08-01 Thread Matt Shields
See that link (http://lists.centos.org/mailman/listinfo/centos) at the
bottom of these emails?  Click on it and follow the instructions.

-matt

On 8/1/07, simon [EMAIL PROTECTED] wrote:

 Dear All,

 cd any one plss let me know how to subscribe to sendmail mailing lists..

 i am not able to do it


 apprecite n thanks

 regards


 simon



 --
 Network Administrator
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] need help.. n do apolosize

2007-08-01 Thread Matt Shields
Oops, used to seeing how do I unsubscribe and fired off a response.
My apologies.

-matt

On 8/1/07, Steve Bergman [EMAIL PROTECTED] wrote:
 Matt Shields wrote:
  See that link (http://lists.centos.org/mailman/listinfo/centos) at the
  bottom of these emails?  Click on it and follow the instructions.
 
 
 Assuming that what simon is asking is how to interact with the sendmail
 mailing list, here is the google groups gateway to the newsgroup.  I'm
 not sure that there is a mailing list.

 http://groups.google.com/group/comp.mail.sendmail/topics?lnk=srghl=en
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: Gnome Terminal and xterm problems

2007-07-12 Thread Matt Shields

I should add that the hang occurs after an unknown amount of time.

-matt

On 7/12/07, Matt Shields [EMAIL PROTECTED] wrote:

I've noticed this in CentOS 4  5 and Fedora 5  6.  If I'm in Gnome
desktop and using any of the terminal programs and I ssh into any
server, the connection just hangs.  Not drops, it just hangs and
doesn't recover.

These servers are all over the country on different ISPs in Tier1
datacenters.  Some are in our office, so they are on the local lan.
We have a mix of RHEL 3, 4  5 and CentOS 4  5 on the servers.  If
I'm using a windows computer with putty or SecureCRT this never
happens, it only happens when I'm using any of our linux desktops or
laptops.  It doesn't matter if I'm in the office or at home (on
comcast) or over at a friend's house (verizon dsl).  This problem has
been going on for at least two years and I'm finally fed up to the
point where I might switch back to windows since 99% of my job is
working while ssh'ed into servers.

Anyone had similar problems?

-matt


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gnome Terminal and xterm problems

2007-07-12 Thread Matt Shields

selinux is turned off on both servers and desktops

On 7/12/07, Tru Huynh [EMAIL PROTECTED] wrote:

On Thu, Jul 12, 2007 at 09:46:00AM -0400, Matt Shields wrote:
 I've noticed this in CentOS 4  5 and Fedora 5  6.  If I'm in Gnome
 desktop and using any of the terminal programs and I ssh into any
 server, the connection just hangs.  Not drops, it just hangs and
 doesn't recover.


ssh -vvv might give a glue
selinux enforced on your client machines?

Tru
--
Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gnome Terminal and xterm problems

2007-07-12 Thread Matt Shields

It shouldn't be dns because the session is already established and it
now IP based.  I don't believe ssh tries to keep resolving the IP
again and again.

No session doesn't come back ever.  It just hangs permanently.

-matt

On 7/12/07, Paul Valentin [EMAIL PROTECTED] wrote:

most problem in this case is DNS!!

does the session comes ca. 30sec later?

problem can be:

1) the server has wrong dns-server in /etc/resolv.conf
2) the client ip is a private ip, and not in /etc/hosts
3) the server ip is not in clients /etc/hosts

point 2) is the problem i have most time

bg, paul

Am Thu, 12 Jul 2007 10:45:50 -0400
Matt Shields [EMAIL PROTECTED] schrieb:

 selinux is turned off on both servers and desktops

 On 7/12/07, Tru Huynh [EMAIL PROTECTED] wrote:
  On Thu, Jul 12, 2007 at 09:46:00AM -0400, Matt Shields wrote:
   I've noticed this in CentOS 4  5 and Fedora 5  6.  If I'm in
   Gnome desktop and using any of the terminal programs and I ssh
   into any server, the connection just hangs.  Not drops, it just
   hangs and doesn't recover.
  
 
  ssh -vvv might give a glue
  selinux enforced on your client machines?
 
  Tru
  --
  Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance)
  http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] non-privaledged reboot ???

2007-07-08 Thread Matt Shields

Not necessarily true.  Lots of people use remote KVM's :)  So just
because someone has access to the console does not mean they have
physical access to the server.

-matt

On 7/8/07, Ignacio Vazquez-Abrams [EMAIL PROTECTED] wrote:

On Sat, 2007-07-07 at 22:51 -0700, Robert - eLists wrote:
 Greetings

 On centos 5, if I ssh in as a regular non-superuser account and go to the
 sbin dir to issue a reboot command, it wont do it as says you must be
 superuser

 If you are on the console logged in as a non-superuser account and do the
 same thing, it will reboot.

 Is this a feature, or a bug?

If you're at the console you can usually just push the reset or power
button *anyways*, so it's a non-bug. I believe you can edit the
appropriate entries in /etc/pam.d if you really want to change this.

--
Ignacio Vazquez-Abrams [EMAIL PROTECTED]

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Justin Morgan is out of the office.

2007-06-18 Thread Matt Shields

Justin,
Thanks for letting us all know.  We'll keep an eye on your house while
you're gone and just to make sure that your house looks lived in we'll
throw parties each night.  Don't worry we won't forget about you,
we'll let you clean up when you get back.

Have a great trip

-matt

On 6/18/07, Justin Morgan [EMAIL PROTECTED] wrote:


I will be out of the office starting  18/06/2007 and will not return until
02/07/2007.

I will respond to your message when I return.

For urgent matters please contact Panbio Reception for assistance : +617
3363 7100.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Pinging Static IPs on Lan

2007-06-12 Thread Matt Shields

Is iptables running?

-matt

On 6/12/07, Thom Paine [EMAIL PROTECTED] wrote:

For some reason I can't ping or communicate with two of my machines
that have static IP's on my lan.

My mythbe and mythfe are both set to have static ip's in the event of
some sort of power problem the wife can stillwatch tv.

After installing CentOS5, I can't communicate with those two machines.

I read through the release notes and the docs on dhcp, but I can't
seem to see why no machines will communicate with those two computers.

Thanks.

--
-=/Thom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos