Re: [CentOS] EL8 / certwatch missing

2020-06-17 Thread John Horne
kage for several years now to see when certificates are about to expire. John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK [http://www.plymouth.ac.uk/images/

Re: [CentOS] mlocate-updatedb.timer not working?

2020-03-31 Thread John Horne
cted. > Just going through my mail messages, and as a quick reply, if you run 'systemctl list-timers' it will show you when the timer last ran and when it is next due to run. No idea as to why yours seemed to stop then start. John. -- John Horne | Senior Operations Analyst | Technology and Inf

Re: [CentOS] Cron - log when job ends?

2019-11-18 Thread John Horne
On Fri, 2019-11-15 at 16:32 -0500, Karl Vogel wrote: > > > On Fri, Nov 15, 2019 at 05:54:07PM +0000, John Horne wrote: > > J> In trying to resolve a problem with a cron job, we can see when the job > J> starts by looking in the /var/log/cron log file. However, I was as

[CentOS] Cron - log when job ends?

2019-11-15 Thread John Horne
, but removed at some time. Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac

Re: [CentOS] Peculiar process name in /proc

2019-08-05 Thread John Horne
On Mon, 2019-08-05 at 13:06 +0100, Giles Coochey wrote: > On 05/08/2019 12:56, John Horne wrote: > > Hello, > > > > I was looking at a process through the '/proc' file system, and came across > > a process name which seemed to contain a hex value: > > > > l

[CentOS] Peculiar process name in /proc

2019-08-05 Thread John Horne
dea what the ';5d44410e' part means. Is this some sort of thread reference? The file '/usr/sbin/xymond' does exist and is running as a daemon. Anyone know what the ';5d44410e' is referring to? I have tried Googling about this, but found no mention of it. Thanks, John. -- John Horne | Sen

Re: [CentOS] DNS bind - use of /etc/named directory

2018-12-07 Thread John Horne
On Tue, 2018-12-04 at 00:51 +, John Horne wrote: > > For many years we have modified the '/etc/named.conf' file to include local > settings. The disadvantage with this is of course that when bind is updated, > it creates an '/etc/named.conf.rpmnew' file. We then have to determine w

Re: [CentOS] DNS bind - use of /etc/named directory

2018-12-04 Thread John Horne
ve a separate zone file, but again that requires an 'include' in the main '/etc/named.conf'. If a local settings file (in '/etc/named') could be used, then we would simply 'include' the zone file in that. Ultimately, the main named.conf file would remain untouched. John. > > On 04/12/18 00:5

[CentOS] DNS bind - use of /etc/named directory

2018-12-03 Thread John Horne
tested this, but has anyone used the '/etc/named' directory and not had to modify the main '/etc/named.conf' file? I suspect, if not, then this should be raised as a possible bug since it would make sense not to have to modify the main configuration file at all. Thanks, John. -- John Horne

Re: [CentOS] rkhunter and prelink

2017-09-02 Thread John Horne
lly 'SHA1' or 'MD5', then RKH will look for the relevant command. John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK [http://www.plymouth.ac.uk/images/emai

Re: [CentOS] semi-OT: rkhunter, fix broken links

2015-08-07 Thread John Horne
, and I've done an rkhunter --propupd, but it still finds the broken link. Anyone know how to remove the link from the rkhunter d/b? Take a look at the EXCLUDE_USER_FILEPROP_FILES_DIRS option in the config file. Set it to the link pathname, then run propupd again. John. -- John Horne

Re: [CentOS] Fail2Ban Centos 7 is there a trick to making it work?

2015-03-30 Thread John Horne
?id=1114821 John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS 7 - not using latest installed kernel

2014-12-03 Thread John Horne
noticed this? Any ideas as to why it might be happening? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - not using latest installed kernel

2014-12-03 Thread John Horne
reported as a bug to CentOS and up to RedHat: https://bugs.centos.org/view.php?id=7651 John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman

[CentOS] Keepalived - spurious failovers

2014-11-12 Thread John Horne
seen this themselves? Or have any idea why it may be occurring? As said, some nighttime process seems to be the cause, but I cannot think or find anything that would cause it. Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK

Re: [CentOS] Keepalived - spurious failovers

2014-11-12 Thread John Horne
On Wed, 2014-11-12 at 10:27 -0500, m.r...@5-cent.us wrote: John Horne wrote: We are using CentOS 6.6 and keepalived 1.2.13 on two servers for failover, no load-balancing. Failover is governed by the NIC being present, and the Apache and Tomcat processes being present. Both servers

Re: [CentOS] Keepalived - spurious failovers

2014-11-12 Thread John Horne
On Wed, 2014-11-12 at 11:12 -0500, m.r...@5-cent.us wrote: John Horne wrote: They are both virtual servers - so no UPS. Failover communication is over the network. Um, bingo: are the host systems on UPS's? What happens on the *host* systems at 03:56? They don't, perhaps, take snapshots

Re: [CentOS] Keepalived - spurious failovers

2014-11-12 Thread John Horne
. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Keepalived - spurious failovers

2014-11-12 Thread John Horne
On Wed, 2014-11-12 at 16:45 -0500, m.r...@5-cent.us wrote: John Horne wrote: snip Given that failover only occurs if Apache, Tomcat or the NIC fail, I can't find anything in log rotation that could cause this effect. For failover to occur the Apache/Tomcat process must be non-existent

[CentOS] MySQL - replication - how to restore master?

2014-08-13 Thread John Horne
? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Does anyone use tcp wrappers (hosts.allow/hosts.deny) anymore?

2014-04-20 Thread John Horne
include its installation as part of our standard server build process. It is part of the security used on our servers, and, as others have mentioned, multiple layers is the way to go rather than relying on just one tool. John. -- John Horne

Re: [CentOS] Monitor Wireless Networks

2014-02-21 Thread John Horne
in the channel so I can choose a different one. Not sure about for CentOS (other than iwlist), but I recently found 'wavemon' for my Fedora 20 system: http://eden-feed.erg.abdn.ac.uk/wavemon/ John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0

Re: [CentOS] rkhunter

2014-01-17 Thread John Horne
On 17/01/14 21:37, m.r...@5-cent.us wrote: I updated java-1.7.0-openjdk a few hours ago - it *was* listed as a critical security update, and I don't want yelling from rkhunter. The man page tells me I can tell it rkhunter --propupd package name... but it doesn't know the name above as a

Re: [CentOS] - monitoring software

2013-10-19 Thread John Horne
, and produce graphs (see the 'trends' column). I gather it does alerts, but we do not use them ourselves. As you can see it has a graphical frontend. We use it to monitor our Centos and RHEL servers, and some Debian and Fedora devices. John. -- John

Re: [CentOS] KDE login screen configuration problems

2012-12-10 Thread John Horne
. It works with no problems. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 6.3 - KDE login screen configuration problems

2012-11-21 Thread John Horne
On Tue, 2012-11-20 at 18:45 +0100, Nicolas Thierry-Mieg wrote: John Horne wrote: I basically set the same settings, using the same method, as I did for my Fedora PC. As said, that works. So configuring KDE using the 'system settings' works in Fedora, but not in CentOS. well, *are* you

Re: [CentOS] CentOS 6.3 - KDE login screen configuration problems

2012-11-20 Thread John Horne
On Mon, 2012-11-19 at 21:04 -0500, Ted Miller wrote: On 11/19/2012 07:25 AM, John Horne wrote: The problem is that we would like to configure the login screen, so that it does not show the user list, that it does not allow the shutdown or reboot commands (from the login screen

[CentOS] CentOS 6.3 - KDE login screen configuration problems

2012-11-19 Thread John Horne
confirmation timer. I have compared the /etc/kde/kdm/kdmrc file from the CentOS PC to my Fedora PC and they are similar. (I make the same changes to my work PC, and these take effect.) Anyone any ideas about this? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth

Re: [CentOS] iptables: recent nolonger supported in Centos 5.8?!

2012-11-09 Thread John Horne
. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Perl - strict.pm not found

2012-10-11 Thread John Horne
On Wed, 2012-10-10 at 11:38 +0100, John Horne wrote: the /etc/cron.daily/freshclam script runs in the early morning, I get sent an email error message: = /etc/cron.daily/freshclam: Can't locate strict.pm in @INC (@INC contains: /usr/local/lib64/perl5

Re: [CentOS] Perl - strict.pm not found

2012-10-11 Thread John Horne
On Thu, 2012-10-11 at 11:42 -0400, Daniel J Walsh wrote: On 10/11/2012 06:34 AM, John Horne wrote: On Wed, 2012-10-10 at 11:38 +0100, John Horne wrote: the /etc/cron.daily/freshclam script runs in the early morning, I get sent an email error message

[CentOS] Perl - strict.pm not found

2012-10-10 Thread John Horne
CentOS 5.8) with no problems. Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Perl - strict.pm not found

2012-10-10 Thread John Horne
On Wed, 2012-10-10 at 05:44 -0600, Warren Young wrote: On 10/10/2012 4:38 AM, John Horne wrote: The problem is that 'strict.pm' is located in /usr/share/perl5 (as it is on our other servers), and /usr/share/perl5 is specified in @INC. Perl can do this is when you've run it out of file

Re: [CentOS] snmpd not working well with selinux?

2012-05-31 Thread John Horne
this as a bug for your consideration. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] snmpd not working well with selinux?

2012-05-31 Thread John Horne
net-snmp-5.5-37.el6_2.1.x86_64 = So '/var/run/net-snmpd' must have come in at a later date than F15. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

Re: [CentOS] snmpd not working well with selinux?

2012-05-31 Thread John Horne
It seems that '/var/lib/net-snmp' should be used. I have tested my use of pass_persist and it does work when using '/var/lib/net-snmp'. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

[CentOS] snmpd not working well with selinux?

2012-05-30 Thread John Horne
started from the command line, but not when started by the 'service' command. That seems very odd. Anyone any ideas about this? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

Re: [CentOS] snmpd not working well with selinux?

2012-05-30 Thread John Horne
On Wed, 2012-05-30 at 16:52 +0100, John Horne wrote: I am trying to use SNMP on a CentOS 6.2 server, and am using the 'pass_persist' configuration command: Sorry, I should have added that nothing appears to be logged in /var/log/audit/audit.log when snmpd fails to return any values. Nor

Re: [CentOS] snmpd not working well with selinux?

2012-05-30 Thread John Horne
On Wed, 2012-05-30 at 12:55 -0400, Daniel J Walsh wrote: On 05/30/2012 11:58 AM, John Horne wrote: On Wed, 2012-05-30 at 16:52 +0100, John Horne wrote: I am trying to use SNMP on a CentOS 6.2 server, and am using the 'pass_persist' configuration command: Sorry, I should have added

Re: [CentOS] snmpd not working well with selinux?

2012-05-30 Thread John Horne
. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Request for CentOS stats

2012-05-30 Thread John Horne
On Wed, 2012-05-30 at 17:00 -0400, Max Pyziur wrote: Yes, lol ... I know enough about mailman that it's a cinch for the list administrator to get the headline number of subscribers. Why would you want to know such numbers? John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752

Re: [CentOS] anyone doing automatic yum updates via yum-updatesd on production servers?

2012-01-18 Thread John Horne
, for example, to postfix/sendmail/exim etc on a mail server, would not be applied by using 'exclude' in the yum.conf file. These can then be checked and applied manually. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

Re: [CentOS] nic bonding

2011-01-17 Thread John Horne
looked at are examples of that. John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apparent BIND problem doing RBL lookups for Postfix

2010-04-15 Thread John Horne
no local ratelimiting (via iptables etc)? John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Exim installation on CentOS

2010-02-08 Thread John Horne
because of its extensive documentation - over 400 pages in the specification, of varying formats, as well as two (as far as I remember) printed books. John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001

Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?

2009-11-29 Thread John Horne
is Samhain. As far as I remember it can handle prelinking, but will report updated files as having been changed. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS

Re: [CentOS] resolving names it is really slow slow with CentOS5.x using named

2009-05-25 Thread John Horne
them. John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho...@plymouth.ac.uk Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http

Re: [CentOS] Problem detecting HP Tape Drive

2009-01-03 Thread John Horne
to do something similar: test -f /proc/driver/cciss/cciss2 \ echo 'engage scsi' /proc/driver/cciss/cciss2 2/dev/null John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho

Re: [CentOS] Squid Number of hits

2008-10-14 Thread John Horne
/squid/calamaris/ John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS

Re: [CentOS] Nightly yum update did an upgrade

2008-10-02 Thread John Horne
), etc are likewise disabled on the relevant servers. Again, if they are to be upgraded, then I will do them when it is convenient and without disrupting the current service. John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread John Horne
(the source includes an RPM spec file). Latest version is 1.3.2. John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread John Horne
On Thu, 2008-09-18 at 15:31 +, Josh Donovan wrote: John Horne wrote: For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto date, so you could download one of those from a mirror and install it. Personally, I install rkhunter from source, but you can build an RPM

[CentOS] How to create a virtual bonded interface?

2008-09-18 Thread John Horne
there somewhere? Anyone notice if I missed anything? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001

Re: [CentOS] How to create a virtual bonded interface?

2008-09-18 Thread John Horne
On Thu, 2008-09-18 at 10:36 -0700, nate wrote: John Horne wrote: Hello, I have a server with 4 NICS running CentOS 5.2. I have bonded the interfaces together such that 'bond0' consists of eth0-3. This is not a problem, and works fine. That is fine, just be sure not to have

Re: [CentOS] crontab for nobody

2008-07-20 Thread John Horne
. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] crontab for nobody

2008-07-20 Thread John Horne
. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum-updatesd not working on CentOS 5.2

2008-07-14 Thread John Horne
On Fri, 2008-07-11 at 17:42 +0100, John Horne wrote: On Tue, 2008-07-08 at 12:12 +0200, Santi Saez wrote: So, appears that yum-updatesd can download, notify and install updates.. but none of this works on a fresh CentOS 5.2 :-( Well I tested this on Centos 5.1 and 5.2, as well

Re: [CentOS] yum-updatesd not working on CentOS 5.2

2008-07-11 Thread John Horne
could see nothing about this on the RedHat bugzilla (no bugs reported for yum-updatesd at all under Fedora 9). I may test that tonight at home. John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail

Re: [CentOS] How can I set NIC duplex before installation?

2007-06-25 Thread John Horne
On Mon, 2007-06-25 at 16:51 -0700, John R Pierce wrote: John Horne wrote: Okay, that seems easy enough :-) Thanks. However, is the anaconda NIC ordering the same as those listed by the bios? For a mixed NIC server it could be important. not always.I've got some Intel SE7501WV2