[CentOS-docs] Documents Required
Hi, I need help to build an email server using LDAP phpldapadmin,postfix,dovecot,spamassin,amavis,claimav and horde webmail. please share documents related to it. Thanx Musawwir ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Documents Required
Musawwir Raza wrote: Hi, I need help to build an email server using LDAP phpldapadmin,postfix,dovecot,spamassin,amavis,claimav and horde webmail. please share documents related to it. Much of that has documentation on the wiki. I just used the wiki docs a few weeks ago to set up postfix,dovecot,spamassassin with squirrelmail for webmail on a CentOS server, and the wiki docs (along with other docs on the web) made the job very easy. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
Mr dave fernandes wrote: Hello, My name is Dave Fernandes I'm interested in contributing an article as a function of feedback I've received on setting up samba on CentOS. Username is davecgs. The article is really about how to deal with the iptables and selinux without disabling them but using them to properly setup samba. I would of course welcome you guys screening it in case I made an error in something. I've had the forum do that as well. Dave, You need to create a Wiki account. Please see http://wiki.centos.org/Contribute Step one is: Create a login with a username in the format FirstnameLastname so it should be something like DaveFernandes. Reply with your WikiName and where you think your page should live (perhaps HowTos/SetUpSamba) and somebody should create it for you with edit rights. Phil ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
On Mon, Apr 13, 2009 at 6:07 AM, Phil Schaffner philip.r.schaff...@nasa.gov wrote: Mr dave fernandes wrote: My name is Dave Fernandes I'm interested in contributing an article as a function of feedback I've received on setting up samba on CentOS. Reply with your WikiName and where you think your page should live (perhaps HowTos/SetUpSamba) and somebody should create it for you with edit rights. Perhaps, we should put Windows-related wiki articles into some place? Others include: http://wiki.centos.org/TipsAndTricks/WindowsShares http://wiki.centos.org/TipsAndTricks/NTFS Akemi ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
Up to you but most people tend to put Samba as a priority. I would say as long as it's easy to find. I didn't even know about these sections. Can you guys put good links from the Winki startup page to those sections? --- On Mon, 4/13/09, Akemi Yagi amy...@gmail.com wrote: From: Akemi Yagi amy...@gmail.com Subject: Re: [CentOS-docs] Wish to contribute a Winki Article To: Mail list for wiki articles centos-docs@centos.org Date: Monday, April 13, 2009, 10:34 AM On Mon, Apr 13, 2009 at 6:07 AM, Phil Schaffner philip.r.schaff...@nasa.gov wrote: Mr dave fernandes wrote: My name is Dave Fernandes I'm interested in contributing an article as a function of feedback I've received on setting up samba on CentOS. Reply with your WikiName and where you think your page should live (perhaps HowTos/SetUpSamba) and somebody should create it for you with edit rights. Perhaps, we should put Windows-related wiki articles into some place? Others include: http://wiki.centos.org/TipsAndTricks/WindowsShares http://wiki.centos.org/TipsAndTricks/NTFS Akemi ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
Hello, when you say create a Wiki account, do you refer to the main wiki page? I prefer not to since this invites privacy issues. Is there a way around that? Thanks... --- On Mon, 4/13/09, Phil Schaffner philip.r.schaff...@nasa.gov wrote: From: Phil Schaffner philip.r.schaff...@nasa.gov Subject: Re: [CentOS-docs] Wish to contribute a Winki Article To: Mail list for wiki articles centos-docs@centos.org Date: Monday, April 13, 2009, 9:07 AM Mr dave fernandes wrote: Hello, My name is Dave Fernandes I'm interested in contributing an article as a function of feedback I've received on setting up samba on CentOS. Username is davecgs. The article is really about how to deal with the iptables and selinux without disabling them but using them to properly setup samba. I would of course welcome you guys screening it in case I made an error in something. I've had the forum do that as well. Dave, You need to create a Wiki account. Please see http://wiki.centos.org/Contribute Step one is: Create a login with a username in the format FirstnameLastname so it should be something like DaveFernandes. Reply with your WikiName and where you think your page should live (perhaps HowTos/SetUpSamba) and somebody should create it for you with edit rights. Phil ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
On Mon, 2009-04-13 at 07:34 -0700, Akemi Yagi wrote: Perhaps, we should put Windows-related wiki articles into some place? Others include: Possibly So. Would be better all under one directory. http://wiki.centos.org/TipsAndTricks/WindowsShares Akemi --- Maby on your Notes on that page it would best be if you put there when using auto mount that whatever is in /mnt will dissapear. The link below is for NFS Services on Windows. Have a look at it for maybe an inclusion to the tips and tricks assessing nfs on win$. Although the user would have to have Server 2008 configured. http://technet.microsoft.com/en-us/library/cc753302.aspx JohnStanley ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
On 13/04/2009, Mr dave fernandes daveandtr...@yahoo.com wrote: Hello, when you say create a Wiki account, do you refer to the main wiki page? Yes. I prefer not to since this invites privacy issues. Is there a way around that? No. Sorry *all* contributors have to obey the rules or not contribute. Alan. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
OK, where is the link to setup a Winki account? Thanks... --- On Mon, 4/13/09, Alan Bartlett ajb.st...@googlemail.com wrote: From: Alan Bartlett ajb.st...@googlemail.com Subject: Re: [CentOS-docs] Wish to contribute a Winki Article To: Mail list for wiki articles centos-docs@centos.org Date: Monday, April 13, 2009, 12:18 PM On 13/04/2009, Mr dave fernandes daveandtr...@yahoo.com wrote: Hello, when you say create a Wiki account, do you refer to the main wiki page? Yes. I prefer not to since this invites privacy issues. Is there a way around that? No. Sorry *all* contributors have to obey the rules or not contribute. Alan. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
On 13/04/2009, Mr dave fernandes daveandtr...@yahoo.com wrote: OK, where is the link to setup a Winki account? Thanks... http://wiki.centos.org/ IIRC (as it's something I've only done once) the link is at the top RH of that page . . . One other thing Dave, please don't top-post. :-) (It's in the m/l rules.) Alan. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
On Mon, 2009-04-13 at 09:53 -0700, Mr dave fernandes wrote: OK, where is the link to setup a Winki account? Thanks... - http://wiki.centos.org/UserPreferences ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
I signed up with Wiki. Thanks...what do I do now? Thanks... --- On Mon, 4/13/09, JohnS jse...@gmail.com wrote: From: JohnS jse...@gmail.com Subject: Re: [CentOS-docs] Wish to contribute a Winki Article To: Mail list for wiki articles centos-docs@centos.org Date: Monday, April 13, 2009, 1:13 PM On Mon, 2009-04-13 at 09:53 -0700, Mr dave fernandes wrote: OK, where is the link to setup a Winki account? Thanks... - http://wiki.centos.org/UserPreferences ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Wish to contribute a Winki Article
On Mon, 2009-04-13 at 19:51 -0700, Mr dave fernandes wrote: I signed up with Wiki. Thanks...what do I do now? Thanks... --- Ok now you wait on Ralph to give you access or Akemi to the page to write it. :-) A helpfull hint to you: Don't type your messasge at the top of a mail when replying back to the list. That is called Top Posting. Also please send messages in text only and not html. You may may to get an email address at gmail.com instead of yahoo. Gmail is more thread friendly to use when accessing your mail from the web. :-) JohnStanley ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-es] configurar cliente tonto centos
2009/4/11 alberto Crego albertocr...@gmail.com: con el ltsp, se pueden exportar sesiones de gnome de un servidor a un equipo cliente? el tema es que tengo que buscar la forma de como hacerlo sin que me consuma mucho ancho de banda de la red, ni recursos del server, aun no se como hacerlo mejor, de la forma A, que es mediante un cliente ligero, o la opcion B, instalando en centos en el equipo cliente y ejecutar una sesion de gnome de servidor en el cliente (que eso no se si se puede hacer). La respuesta tendrá que ver con cuánta funcionalidad necesitas exactamente: si te basta con correr un proceso en forma remota o si necesitas una sesión completa de desktop remoto. En el primer caso, te puede bastar una sesión ssh del cliente al servidor, que ejecute el proceso remoto que quieres. Para esto basta con que el cliente corra un servidor X, sin gestor de escritorio ni de ventanas. Este script puede dar una idea de lo que se necesita hacer: #!/bin/bash SERVER=192.168.0.1 USUARIO=pepe PROGRAMA=system-config-users X :1 sleep 3 DISPLAY=localhost:1 ssh $usua...@$server $PROGRAMA Para poder hacer esto sin que la sesión ssh pida password, puedes estudiar cómo editar el archivo .ssh/authorized_keys del usuario en el servidor agregándole la clave pública del cliente. En el segundo caso (sesión remota completa), hay varias formas de hacerlo, con diferentes requerimientos de recursos. XDMCP es la forma nativa en Unix de obtener sesiones remotas a través de XWindow. Hay alternativas más modernas y según he escuchado más eficientes, como FreeNX. RDP (Remote Desktop) es una solución muy buena, en el sentido de que la experiencia de usuario es muy parecida a ejecutar la interfaz en forma local, y a veces la supera. Tiene la ventaja de poder aprovechar servidores Windows. Otra familia de soluciones corresponde a VNC (que serviría para compartir un mismo escritorio entre varios clientes, pero no parece ser tu caso). Tambíen quería saber si existe alguna forma en gnome de que una vez que inicie la sesion se le abra el programa unicamente y no pueda ejecutar otro programa. Puedes hacerlo modificando la estructura de menús y editando la configuración de arranque automático de la sesión, pero así posiblemente sigan quedando algunas vías de escape para los usuarios que tengan algo de conocimiento. Me parece más seguro empezar por no levantar procesos innecesarios en lugar de poner restricciones a la interfaz de usuario: si no quieres que use nada del Gnome, pues no lo actives. Creo que tus requerimientos se parecen más a los de cliente liviano que a los de sesión local retocada. Puedes crear un cliente liviano a partir de una distribución multipropósito como CentOS, modificando el inicio del sistema (editando inittab). Puedes hacerte un runlevel propio, que solamente dispare los procesos que necesitas. Por ejemplo, el servidor X y la sesión ssh al servidor invocando el programa en forma remota, como lo hace el script adjunto. Si no quieres que se pueda acceder a consolas de texto, las desactivas para ese runlevel. Para probarlo sin romper el sistema en funcionamiento puedes editar la línea GRUB del kernel indicando el número de nivel que quieres correr. Cuando lo tienes depurado, fijas el runlevel default y si es necesario eliminas los demás (esto no tiene retorno, salvo que bootees con un disco de rescate). Otra solución muy fácil, y ya empaquetada, es la distribución Thinstation, que te creará un cliente liviano de cualquiera de estos protocolos (o de todos ellos juntos), y es configurable hasta la náusea. Tiene la posibilidad de especificar directamente la aplicación que se va a correr en el servidor. La palabra clave para buscar más sobre este modo de funcionamiento es kiosk. Saludos -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Cliente liviano
Buen dia raul, prueba con Vector, es una distribución basada en Slackware, funciona de maravillas con equipos de muy bajo perfil y te da la solidez de slackware, en el corren a perfección esas aplicaciones de rmcobol.. Te prevengo que la instalación no es tan trivial como la de centos pero funciona para lo que necesitas. Se deja instalar con 32 MB de memoria y despues de instalado le retiras 16 M y funciona (Ojo pero en ambiente caracter o modo consola, que finalmente es lo que necesitas para tu aplicacion cobol). Con respecto a la creacion de impresoras en centos 5 utiliza la herramienta system-config-printer que hace lo mismo que setup en centos 4. Saludos. Carlos R!. El 10 de abril de 2009 21:21, Raul Eduardo Arboleda Zapata raularbol...@une.net.co escribió: Hola amigos necesito una ayuda, al igual que la pregunta que hizo un compañero de cliente tonto, yo ambian tengo unas inquietudes a ver cual me puede colaborar. Tengo el siguente ambiente dos servidores centos 4, los cuales ejecutan una aplicacion hecha en rm-cobol85 esta esta funcionando perfecta y no me he cambiado a centos 5 por que me parece que el manejo de impresoras en mi parecer esta mejor en centos 4 que en 5 por que en las versiones nuevas no me permite o no se como crear impresoras desde modo comando como se hace con setup en version 4. Bueno ese no es mi problema, aca en Colombia muchos de mis clientes ha querido organizar la parte de licencias de la compañia a lo cual yo les he dicho que podemos montar equipos en linux para este proposito, yo he bajado vaias versiones de linux que se instalen en maquinas de bajo perfil o equipos viejos, despues de instalarlas me han presentado problemas como de no deteccion de video correctamente, otras no me detectan la tajeta y aun que mi mayor preocupacion es la aplicacion modo texto en cobol tambien quisiera ejecutar al menos un navegador de internet como firefox. En las que conse guido instalar cuando hago el ssh o telnet al servidor ingresa pero se me queda congelada la pantalle despues de que ejecuta el programa cobol. Disculpen que sea tan explicito pero creo que es mas facil para que me entiendan mi problema. Bueno mis inquietudes sob varias: 1. El Linux Terminal Server Project, me serviria. 2. Se puede ejecutar de alguna manera el modo X del servidor centos desde un pc viejo y que tome los recursos del servidor algo asi como un cliente liviano. 3. Se pueden exportar las imprsoras. Muchas gracias Raúl Eduardo Arboleda Zapata Ingeniero de Sistemas Cel +573 300 620 66 13 Ola +573 312 288 90 86 Comcel Medellin, Antioquia Colombia, S.A. ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Carlos Restrepo M. ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS-es] consulta de iptables
hola amigos tengo una duda con iptables, tengo un firewall en el cual permito salida a los puertos 80 25 110 53 443. dentro de mi red lan tengo un server de correo, pero desde mi red interna no puedo acceder al mismo atraves del dominio es decir: https://dominio.com/mail pero si lo realizo de manera local ingreso normal, ahora desde cualquier red fuera de la mia logro acceder a traves del dominio. lei que atraves de la tabla nat output po ¡Obtén la mejor experiencia en la web!lt; Descarga gratis el nuevo Internet Explorer 8. http://downloads.yahoo.com/ieak8/?l=e1___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] consulta de iptables
iptables -t nat -vnL iptables -vnL puedes usar tambien iptables-save reglas_ipt y hacer un anilisis del firewall 20ipt09/4/13 Freddy Angulo samilo...@yahoo.com hola amigos tengo una duda con iptables, tengo un firewall en el cual permito salida a los puertos 80 25 110 53 443. dentro de mi red lan tengo un server de correo, pero desde mi red interna no puedo acceder al mismo atraves del dominio es decir: https://dominio.com/mail pero si lo realizo de manera local ingreso normal, ahora desde cualquier red fuera de la mia logro acceder a traves del dominio. lei que atraves de la tabla nat output po -- ¡Obtén la mejor experiencia en la web! Descarga gratis el nuevo Internet Explorer 8.br http://downloads.yahoo.com/ieak8/?l=e1 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- esta es mi vida e me la vivo hasta que dios quiera ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS] Clamd and Amavis
I'm trying to get amavis to play using clamd and tried to follow this:
# ### http://www.clamav.net/
['ClamAV-clamd',
\ask_daemon, [CONTSCAN {}\n, /var/run/clamav/clamd],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its own
# # uid such as clamav, add user clamav to the amavis group, and then add
# # AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# # this entry; when running chrooted one may prefer socket $MYHOME/clamd.
# ### http://www.clamav.net/ and CPAN (memory-hungry! clamd is preferred)
# # note that Mail::ClamAV requires perl to be build with threading!
# ['Mail::ClamAV', \ask_clamav, *, [0], [1], qr/^INFECTED: (.+)/],
I came unstuck with the instruction regarding the LocalSocket. If I change
that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service
won't start, saying the socket doesn't exist.
What am I doing wrong?
Anne
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Processes to disable
Hello, On Thu, Apr 9, 2009 at 10:21, David Lemcoe fo...@lemcoe.com wrote: a bunch of processes that really aren't needed Yes, many processes started in a default installation are not needed, but they are not harmful at all, and in most cases they will not bring you any problems. On the other hand, if you start disabling processes, you might get into trouble and not know exactly why. So, especially if you are *not* a more experienced CentOS user, I would advise you against disabling processes that you do not know if you need or not. As I said, if you don't really need them, they will probably not be harmful to you. and just burn up processes. This is a very silly argument, it's not like you have a low limit of total number of processes in your system, and so far I have never seen anyone reach that limit. Which ones should I get rid of for just a webserver? MySQL server? If you do not plan to run MySQL server on a machine, then yes, you should disable it, but in that case you should not even have installed the RPM package to start with. In that case, the way I would advise you to disable it is to uninstall the RPM. On Thu, Apr 9, 2009 at 16:29, Bogdan Nicolescu bo...@yahoo.com wrote: to disable/enable a service: chkconfig --level levels service-name off/on i.e. chkconfig --level 3 sshd off Disables sshd for levels 3 chkconfig --level 35 sshd on Enables sshd for level 3 and 5 Never use the --level argument unless you have very specific needs. You should use: chkconfig sshd off And: chkconfig sshd on The service initialization files have a list of default runlevels, which will probably make more sense than anything you specify. To see the names of all the services installed on your system: ls /etc/rc.d/init.d Using 'chkconfig --list' makes more sense than listing the init.d directory. HTH, Filipe ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
Anne Wilson wrote on Mon, 13 Apr 2009 10:00:40 +0100: I came unstuck with the instruction regarding the LocalSocket. If I change that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service won't start, saying the socket doesn't exist. And maybe that's true, did you check whether it exists? I think your question is much better suited for the amavisd list. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
What am I doing wrong? Running SELinux? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
On Monday 13 April 2009 12:32:43 Joseph L. Casale wrote: What am I doing wrong? Running SELinux? No, I don't run SELinux. Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
On Monday 13 April 2009 12:31:15 Kai Schaetzl wrote: Anne Wilson wrote on Mon, 13 Apr 2009 10:00:40 +0100: I came unstuck with the instruction regarding the LocalSocket. If I change that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service won't start, saying the socket doesn't exist. And maybe that's true, did you check whether it exists? It doesn't. I'm under the impression that a socket cannot be manually created, but has to be created by the application, so I simply don't know what to do about this. I think your question is much better suited for the amavisd list. If I have to, but I'm already on very many lists, so it's a last resort. There are so many skilled sysadmins here that I'm sure someone knows the answer. Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
Anne Wilson wrote:
I'm trying to get amavis to play using clamd and tried to follow this:
# ### http://www.clamav.net/
['ClamAV-clamd',
\ask_daemon, [CONTSCAN {}\n, /var/run/clamav/clamd],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its own
# # uid such as clamav, add user clamav to the amavis group, and then add
# # AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# # this entry; when running chrooted one may prefer socket $MYHOME/clamd.
# ### http://www.clamav.net/ and CPAN (memory-hungry! clamd is preferred)
# # note that Mail::ClamAV requires perl to be build with threading!
# ['Mail::ClamAV', \ask_clamav, *, [0], [1], qr/^INFECTED: (.+)/],
I came unstuck with the instruction regarding the LocalSocket. If I change
that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service
won't start, saying the socket doesn't exist.
What am I doing wrong?
Anne
Check the settings match in both /etc/amavisd.conf AND /etc/clamd.conf
(eg, /var/run/clamav/clamd). IIRC they are different by default so you
must change one of them.
Also, in /etc/clamd.conf make sure you've commented out TCPSocket if
you're using a local UNIX socket.
For reference:
http://wiki.centos.org/HowTos/Amavisd
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] httpd with SNI
On 4/12/09, German Pulido gpul...@gtscolombia.com wrote: I am currently publishing some web services on a Centos 5.3 server on my office using the included apache httpd. They are available from the Internet, and they require validation (username/password). I would like to publish them all under https, so the passwords won't travel unencrypted, but then all my sites use the same certificate on apache httpd. The solution to this is using an httpd server that supports SNI: snip. German: If the sites are to be used by your existing employees/customers, it is possible you could generate a free SSL certificate, for each site, that would provide the security you need? They might get a browser warning, about the SSL certificate, but the security would be there. Lanny (in Cali) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lost Acroread and flash plugin
German Pulido wrote: On Sunday 12 April 2009 10:03:30 pm Robert Moskowitz wrote: Since the upgrade to AdobeReader_enu-9.1.0-1.i486.rpm and flash-plugin-10.0.22.87-release.i386.rpm, I have lost these in firefox. And Adobe Reader is not even on my Gnome Applications panel, I have to run it from a terminal window. Perhaps this has been covered, but how do I get these back? Have you tried uninstalling the RPMs and reinstalling them? Well that did work. It still seems strange to unistall then reinstall. I tend to look for other things first ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] flash drive crashes machine
I just installed 5.3 on a tower box. When I plug in a usb flash drive, the machine crashes. I don't know how to diagnose the problem; I used gnome-system-log, and got this (watching it as I plugged it in): Apr 12 16:43:25 ga7zx kernel: usb 1-2: new full speed USB device using uhci_hcd and address 2 Apr 12 16:43:25 ga7zx kernel: usb 1-2: configuration #1 chosen from 1 choice Apr 12 16:43:27 ga7zx kernel: Initializing USB Mass Storage driver... As this point, the whole system becomes an ice cube - I can't even 3-finger salute to reboot. This happened a few times - same result. The board is a Gigabyte with an AMD Athlon 1.3 GHz cpu. Be aware that this drive works fine on 3 other boxes (with 5.3, Fedora 7, and Fedora 8). What could be wrong? What else should I check? How do I fix it? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
Stuart Jansen wrote: I recently upgraded an internal build server from C5.2 to C5.3 and now I'm experiencing problems initializing the mock buildroot. Specifically, I'm getting the following error: -- /var/tmp/rpm-tmp.77062: line 6: cat: command not found /var/tmp/rpm-tmp.77062: line 7: rm: command not found /var/tmp/rpm-tmp.77062: line 22: install: command not found /var/tmp/rpm-tmp.77062: line 25: install: command not found error: %post(pam-0.99.6.2-4.el5.i386) scriptlet failed, exit status 127 -- I saw this in my f10 buildroots hosted on centos 5.2. several bugs: 1. rpm/yum (on the buildhost) not respecting pam's Requires(post): coreutils 2. pam's scriptlets unsafe and not ending with ||: 3. rpm/yum (on the buildhost) exiting with error-code on a scriptlet failure (and mock aborting because of it). I'm fairly certain recent rpm/yum on fedora no longer suffers from this. I emailed pam's maintainers about item 2 ~6 months ago, but I don't see it implemented yet. I guess I never filed a bug, will do now. -- Rex ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
Rex Dieter wrote: Stuart Jansen wrote: I recently upgraded an internal build server from C5.2 to C5.3 and now I'm experiencing problems initializing the mock buildroot. Specifically, I'm getting the following error: -- /var/tmp/rpm-tmp.77062: line 6: cat: command not found /var/tmp/rpm-tmp.77062: line 7: rm: command not found /var/tmp/rpm-tmp.77062: line 22: install: command not found /var/tmp/rpm-tmp.77062: line 25: install: command not found error: %post(pam-0.99.6.2-4.el5.i386) scriptlet failed, exit status 127 --- I saw this in my f10 buildroots hosted on centos 5.2. several bugs: 1. rpm/yum (on the buildhost) not respecting pam's Requires(post): coreutils 2. pam's scriptlets unsafe and not ending with ||: 3. rpm/yum (on the buildhost) exiting with error-code on a scriptlet failure (and mock aborting because of it). I'm fairly certain recent rpm/yum on fedora no longer suffers from this. I emailed pam's maintainers about item 2 ~6 months ago, but I don't see it implemented yet. I guess I never filed a bug, will do now. interestingly, I can no longer reproduce this failure myself on a recently upgraded centos-5.3 box using mock-0.9.14 (from epel). -- Rex ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
On Mon, Apr 13, 2009 at 7:18 AM, Rex Dieter rdie...@math.unl.edu wrote: interestingly, I can no longer reproduce this failure myself on a recently upgraded centos-5.3 box using mock-0.9.14 (from epel). So, we can use mock-0.9.14 from EPEL on CentOS 5.3 (with the current CentOS yum) without any issue? Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] x86_64 server OOM problems after update to 5.3
Hello, Over the weekend, I upgraded one of my servers that runs mysql and pdns to 5.3. Previous to the update I have not had an issue form this server. But since, I have had mysql die multiple times from oom-killer. $ uname -a Linux rack2a 2.6.18-128.1.6.el5 #1 SMP Wed Apr 1 09:10:25 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux Unfortunately, the server has been rebooted by others before I have been able to look at it while the problem is occurring. But I have found this in the logs: http://pastebin.centos.org/25553 Running sar -A: http://pastebin.centos.org/25556 Since the server was rebooted, the amount of swap is used is 0. How do I determine what process is/was chewing up the memory on this server? What should I be looking for to narrow this down? Thanks, Rick ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
Akemi Yagi wrote: On Mon, Apr 13, 2009 at 7:18 AM, Rex Dieter rdie...@math.unl.edu wrote: interestingly, I can no longer reproduce this failure myself on a recently upgraded centos-5.3 box using mock-0.9.14 (from epel). So, we can use mock-0.9.14 from EPEL on CentOS 5.3 (with the current CentOS yum) without any issue? of course. (what would make you think otherwise?) -- Rex ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
On Mon, Apr 13, 2009 at 7:47 AM, Rex Dieter rdie...@math.unl.edu wrote: Akemi Yagi wrote: So, we can use mock-0.9.14 from EPEL on CentOS 5.3 (with the current CentOS yum) without any issue? of course. (what would make you think otherwise?) Well, I heard from one of the CentOS devs that mock newer than 0.6 was broken. But this was a long time ( 1 year) ago. Moreover, yum 3.x used to have some issues. Because of these, I have been running mock on a CentOS-4 box and wondered if I could make a switch to CentOS-5. Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lost Acroread and flash plugin
On Mon, 2009-04-13 at 08:38 -0400, Robert Moskowitz wrote: German Pulido wrote: On Sunday 12 April 2009 10:03:30 pm Robert Moskowitz wrote: Since the upgrade to AdobeReader_enu-9.1.0-1.i486.rpm and flash-plugin-10.0.22.87-release.i386.rpm, I have lost these in firefox. And Adobe Reader is not even on my Gnome Applications panel, I have to run it from a terminal window. Perhaps this has been covered, but how do I get these back? Have you tried uninstalling the RPMs and reinstalling them? Well that did work. It still seems strange to unistall then reinstall. I tend to look for other things first It's a Windows thing - sort of like expecting a reboot to fix things. There was a version or two of Adobe Reader that didn't create the launchers in the 'desktop' menus - that seems to be the case with me right now (Fedora) as a matter of fact but I'm not all that stressed about it because I usually open Adobe Reader by clicking a PDF file anyway. It does seem as though they're finally starting to fix the erratic memory issues of Adobe Reader plugin running inside Firefox. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
Akemi Yagi wrote: On Mon, Apr 13, 2009 at 7:47 AM, Rex Dieter rdie...@math.unl.edu wrote: Akemi Yagi wrote: So, we can use mock-0.9.14 from EPEL on CentOS 5.3 (with the current CentOS yum) without any issue? of course. (what would make you think otherwise?) Well, I heard from one of the CentOS devs that mock newer than 0.6 was broken. OK, fair 'nuf. Just seemed silly to me that you'd assume epel would release something that was broken. -- Rex ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
Rick Barnes wrote: How do I determine what process is/was chewing up the memory on this server? What should I be looking for to narrow this down? Setup a script to monitor memory usage and alert you when swap usage starts getting high. Or setup a monitor that just runs ps auxw or something and sends output to a file so the next time it happens you know how much memory everything was using at the time. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
On Mon, 2009-04-13 at 10:31 -0400, Rick Barnes wrote: Hello, Over the weekend, I upgraded one of my servers that runs mysql and pdns to 5.3. Previous to the update I have not had an issue form this server. But since, I have had mysql die multiple times from oom-killer. $ uname -a Linux rack2a 2.6.18-128.1.6.el5 #1 SMP Wed Apr 1 09:10:25 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux Unfortunately, the server has been rebooted by others before I have been able to look at it while the problem is occurring. But I have found this in the logs: http://pastebin.centos.org/25553 Running sar -A: http://pastebin.centos.org/25556 Since the server was rebooted, the amount of swap is used is 0. How do I determine what process is/was chewing up the memory on this server? What should I be looking for to narrow this down? Thanks, Rick --- You found your problem already. MYSQL. There could be something helping it also. When SQL server begins running out of RAM there could be many things to blame on it doing so. What actually does mysql do? As in what do you use it for. Try ps –auxf | grep mysqld. Something else you can use is mytop. You can use the below as a script and it works in an infinite loop or just use the command only. What you need to see is the running queries. ## #!/bin/bash while [ 1 ] do mysql -N -u root -ppassword -e 'show processlist' |grep -v 'show processlist' sleep 2 done ## JohnStanley ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] flash drive crashes machine
Michael Klinosky wrote: What could be wrong? What else should I check? How do I fix it? Sounds like a kernel panic of some kind, either hook up a serial console to the system and watch the console from another machine or switch back to a normal terminal (CTRL+ALT+F1) and plug it in and see what you get. Serial console is best as you can easily copy/paste the crash output. You could also try kdump - http://kbase.redhat.com/faq/docs/DOC-6039 nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Processes to disable
- Original Message From: Filipe Brandenburger filbran...@gmail.com To: CentOS mailing list centos@centos.org Sent: Monday, April 13, 2009 6:02:32 AM Subject: Re: [CentOS] Processes to disable Hello, On Thu, Apr 9, 2009 at 10:21, David Lemcoe wrote: a bunch of processes that really aren't needed Yes, many processes started in a default installation are not needed, but they are not harmful at all, and in most cases they will not bring you any problems. On the other hand, if you start disabling processes, you might get into trouble and not know exactly why. So, especially if you are *not* a more experienced CentOS user, I would advise you against disabling processes that you do not know if you need or not. As I said, if you don't really need them, they will probably not be harmful to you. and just burn up processes. This is a very silly argument, it's not like you have a low limit of total number of processes in your system, and so far I have never seen anyone reach that limit. Which ones should I get rid of for just a webserver? MySQL server? If you do not plan to run MySQL server on a machine, then yes, you should disable it, but in that case you should not even have installed the RPM package to start with. In that case, the way I would advise you to disable it is to uninstall the RPM. On Thu, Apr 9, 2009 at 16:29, Bogdan Nicolescu wrote: to disable/enable a service: chkconfig --level service-name off/on i.e. chkconfig --level 3 sshd off Disables sshd for levels 3 chkconfig --level 35 sshd on Enables sshd for level 3 and 5 Never use the --level argument unless you have very specific needs. You should use: chkconfig sshd off And: chkconfig sshd on The service initialization files have a list of default runlevels, which will probably make more sense than anything you specify. http://www.phpman.info/index.php/man/chkconfig/8 Maybe the chkconfig man pages can be revised to include Never use the --level argument unless you have very specific needs because The service initialization files have a list of default runlevels, which will probably make more sense than anything you specify. To see the names of all the services installed on your system: ls /etc/rc.d/init.d Using 'chkconfig --list' makes more sense than listing the init.d directory. chkconfig --list doesn't necessarily list all the services in /etc/rc.d/init.d bn HTH, Filipe ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mock %post(pam) failure
On Mon, 2009-04-13 at 07:26 -0700, Akemi Yagi wrote: On Mon, Apr 13, 2009 at 7:18 AM, Rex Dieter rdie...@math.unl.edu wrote: interestingly, I can no longer reproduce this failure myself on a recently upgraded centos-5.3 box using mock-0.9.14 (from epel). So, we can use mock-0.9.14 from EPEL on CentOS 5.3 (with the current CentOS yum) without any issue? I'm using mock-0.9.14 on a fully updated CentOS 5.3 and yum is still trying to install pam before coreutils. Perhaps the problem is a configuration difference. For the most part, I'm using a standard mock configuration. I have, however, disabled all caching in site-defaults.cfg Perhaps others aren't seeing this problem yet because they are using a cached buildroot, but will have a problem once the cache is cleared. I tried enabling caching, but it didn't make a difference. For building, I use a copy of the CentOS core and update packages rsync'd from a local mirror. rsync -qaHz --numeric-ids --fuzzy --delete-excluded I'm also using the latest buildsys packages from Fedora downloaded by runnning: wget -q -rc -nv -nH -np -R '*=D,*=A' \ http://buildsys.fedoraproject.org/buildgroups/rhel5/i386/ I have tried building with EPEL enabled and disabled. Neither helped. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
On Mon, 2009-04-13 at 10:31 -0400, Rick Barnes wrote: Hello, I have had mysql die multiple times from oom-killer. Thanks, Rick --- In seeing what you do I would be looking at the queries being made. SPROCs, Triggers, Views. Also very import is if that one particular data base is doing graffing running predictions as you all do GIS and Mapping. Predictions can be huge memory burners. Last thing does it run as a virtual machine or on real hardware? JohnStanley ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] python-dbus
During startup there is a message about a missing python-dbus. Querying rpm and yum tells me that nothing provides python-dbus and no such package exists. What do I need? Anne ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
On Monday 13 April 2009 13:02:55 Ned Slider wrote:
Anne Wilson wrote:
I'm trying to get amavis to play using clamd and tried to follow this:
# ### http://www.clamav.net/
['ClamAV-clamd',
\ask_daemon, [CONTSCAN {}\n, /var/run/clamav/clamd],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its
own # # uid such as clamav, add user clamav to the amavis group, and
then add # # AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket
name in # # this entry; when running chrooted one may prefer socket
$MYHOME/clamd.
# ### http://www.clamav.net/ and CPAN (memory-hungry! clamd is
preferred) # # note that Mail::ClamAV requires perl to be build with
threading! # ['Mail::ClamAV', \ask_clamav, *, [0], [1], qr/^INFECTED:
(.+)/],
I came unstuck with the instruction regarding the LocalSocket. If I
change that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the
clamd service won't start, saying the socket doesn't exist.
What am I doing wrong?
Anne
Check the settings match in both /etc/amavisd.conf AND /etc/clamd.conf
(eg, /var/run/clamav/clamd). IIRC they are different by default so you
must change one of them.
Also, in /etc/clamd.conf make sure you've commented out TCPSocket if
you're using a local UNIX socket.
OK, done all that. We'll see what logwatch reports tomorrow.
For reference:
http://wiki.centos.org/HowTos/Amavisd
I'd looked for configuration help on the web and found some, but found them
difficult to understand. This one looks much more useful, thanks.
Anne
--
New to KDE4? - get help from http://userbase.kde.org
Just found a cool new feature? Add it to UserBase
signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] flash drive crashes machine
On Mon, Apr 13, 2009 at 6:08 AM, Michael Klinosky m...@enter.net wrote: I just installed 5.3 on a tower box. When I plug in a usb flash drive, the machine crashes. I don't know how to diagnose the problem; I used gnome-system-log, and got this (watching it as I plugged it in): Possibly not helpful, but -- I've had this happen when using the front-panel USB ports on a couple of different towers. It does not happen on the same machines using the USB ports in the back, leading me to believe that there's a physical problem with the front-panel connections; induction from the USB to reset wires, or some such. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] flash drive crashes machine
Bart Schaefer wrote: On Mon, Apr 13, 2009 at 6:08 AM, Michael Klinosky m...@enter.net wrote: I just installed 5.3 on a tower box. When I plug in a usb flash drive, the machine crashes. I don't know how to diagnose the problem; I used gnome-system-log, and got this (watching it as I plugged it in): Possibly not helpful, but -- I've had this happen when using the front-panel USB ports on a couple of different towers. It does not happen on the same machines using the USB ports in the back, leading me to believe that there's a physical problem with the front-panel connections; induction from the USB to reset wires, or some such. more likely, the front panel wiring isn't up to USB 2.0 specs and can't handle 480Mbit/sec, so protocol data gets corrupted during high speed transfers, causing the driver to take a dump in kernel space ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] python-dbus
On Mon, 2009-04-13 at 17:55 +0100, Anne Wilson wrote: During startup there is a message about a missing python-dbus. Querying rpm and yum tells me that nothing provides python-dbus and no such package exists. What do I need? Hi Ann! ann:/etc# yum search dbus-python Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * epel: linux.nssl.noaa.gov * rpmforge: apt.sw.be * base: mirror.anl.gov * updates: mirror.newnanutilities.org * extras: mirror.atlanticmetro.net * centosplus: mirror.its.uidaho.edu * addons: holmes.umflint.edu epel | 2.1 kB 00:00 rpmforge | 1.1 kB 00:00 adobe-linux-i386 | 951 B 00:00 base | 1.1 kB 00:00 updates | 951 B 00:00 extras | 1.1 kB 00:00 centosplus | 951 B 00:00 addons | 951 B 00:00 = Matched: dbus-python = dbus-python.i386 : D-Bus Python Bindings ann:/etc# rpm -q dbus-python dbus-python-0.70-7.el5 Name switch! Confused me also! -- Bob Taylor ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] flash drive crashes machine
nate wrote: Sounds like a kernel panic of some kind, either hook up a serial console to the system and watch the console from another machine or switch back to a normal terminal (CTRL+ALT+F1) and plug it in and see what you get. Serial console is best as you can easily copy/paste the crash output. You could also try kdump - http://kbase.redhat.com/faq/docs/DOC-6039 Cool! Thank you. Bart Schaefer wrote: I've had this happen when using the front-panel USB ports on a couple of different towers. It does not happen on the same machines using the USB ports in the back, leading me to believe that there's a physical problem with the front-panel connections; induction from the USB to reset wires, or some such. Well, that's not the case here. I'm using the on-board jack (on the rear). I could try a USB optical drive, to see if the usb system works (i.e. hardware, chips, OS). Btw, that box is at a remote location that I visit about once a month (thus, it'll be another month till I can check it). ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] python-dbus
On Monday 13 April 2009 18:29:55 Bob Taylor wrote: On Mon, 2009-04-13 at 17:55 +0100, Anne Wilson wrote: During startup there is a message about a missing python-dbus. Querying rpm and yum tells me that nothing provides python-dbus and no such package exists. What do I need? Hi Ann! ann:/etc# yum search dbus-python Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * epel: linux.nssl.noaa.gov * rpmforge: apt.sw.be * base: mirror.anl.gov * updates: mirror.newnanutilities.org * extras: mirror.atlanticmetro.net * centosplus: mirror.its.uidaho.edu * addons: holmes.umflint.edu epel | 2.1 kB 00:00 rpmforge | 1.1 kB 00:00 adobe-linux-i386 | 951 B 00:00 base | 1.1 kB 00:00 updates | 951 B 00:00 extras | 1.1 kB 00:00 centosplus | 951 B 00:00 addons | 951 B 00:00 = Matched: dbus-python = dbus-python.i386 : D-Bus Python Bindings ann:/etc# rpm -q dbus-python dbus-python-0.70-7.el5 Name switch! Confused me also! Now how the blue blazes are we supposed to guess that? Oops - Package dbus-python-0.70-7.el5.i386 already installed and latest version Nothing to do Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] when to reboot after updates
on 4-10-2009 3:24 PM Lanny Marcus spake the following: On Thu, Apr 9, 2009 at 10:55 PM, D Tucny d...@tucny.com wrote: 2009/4/10 Mike A. Harris mharris-mnGD6ET4m9qw5LPnMra/2...@public.gmane.org Jerry Geis wrote: What is the rule of thumb for reboots after updates... I'd say the rule of thumb is to do whatever works best for you, and that you'll likely get quite the variety of different responses. �;o) Certainly if I update from 5.2 to 5.3 I reboot. But if you update something like krb5 or pam does that require a reboot? Does the fix get automatically loaded and used or do you just do a reboot always? So, I would say reboot is the simplest, safest, foolproof way to ensure you're running updates even if some people will balk at the idea that you have to reboot a Linux system. �You don't have to of course, but life is short and rebooting is fast. �;o) Another good reason to do a controlled reboot every now and again is to make sure that everything you expect to come back up does come back up, which can save you being woken up in the middle of the night if an uncontrolled reboot happens :) And if one does a scheduled reboot, best to be there, so you can touch the box and best to do it when there is very low traffic. I remember advising that updates were available for IPCop last year. Scott Silva wrote that he would do it on a Sunday, when the big bosses weren't there. Sure enough, his IPCop box failed to reboot.I'm doing the first update, from CentOS 5.2 (32 bit) to 5.3 now. Luckily, I am only 40 miles from that location. I usually also come in early after weekend updates to double check things. And never do updates the day before your vacation starts! ;-P signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
JohnS wrote: On Mon, 2009-04-13 at 10:31 -0400, Rick Barnes wrote: Hello, I have had mysql die multiple times from oom-killer. Thanks, Rick --- In seeing what you do I would be looking at the queries being made. SPROCs, Triggers, Views. Also very import is if that one particular data base is doing graffing running predictions as you all do GIS and Mapping. Predictions can be huge memory burners. Last thing does it run as a virtual machine or on real hardware? This is a real hardware server. It is not doing GIS or mapping of the like, most of the DBs on this are for web sites, mostly form data storage, some CMS DBs for joomla, WP, etc. also some others for cacti and powerdns backends. I have setup some scripts to watch the swap usage to see if I can track this down. Thanks for the help Rick ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] madwifi not working for 5.2 x64
on 4-10-2009 11:09 AM sumit agarwal spake the following: hi . i installed madwifi on 5.2 x64 but it doesn't seem to be working any clues? pls help :) I wish this board would enforce no html e-mails. That font choice is terrible! signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
Anne Wilson wrote: On Monday 13 April 2009 12:31:15 Kai Schaetzl wrote: Anne Wilson wrote on Mon, 13 Apr 2009 10:00:40 +0100: I came unstuck with the instruction regarding the LocalSocket. If I change that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service won't start, saying the socket doesn't exist. And maybe that's true, did you check whether it exists? It doesn't. I'm under the impression that a socket cannot be manually created, but has to be created by the application, so I simply don't know what to do about this. My tired brain has only just digested the above paragraph - my guess would be that the clamav user doesn't have permissions to write to $MYHOME so can't create the socket? My socket is located at /var/run/clamav/clamd and the /var/run/clamav dir is owned by clamav:clamav with 755 perms. The clamav user is also a member of the amavis group. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
On Monday 13 April 2009 19:29:42 Ned Slider wrote: Anne Wilson wrote: On Monday 13 April 2009 12:31:15 Kai Schaetzl wrote: Anne Wilson wrote on Mon, 13 Apr 2009 10:00:40 +0100: I came unstuck with the instruction regarding the LocalSocket. If I change that in clamd.conf to $MYHOME/amavisd.sock or $MYHOME/clamd the clamd service won't start, saying the socket doesn't exist. And maybe that's true, did you check whether it exists? It doesn't. I'm under the impression that a socket cannot be manually created, but has to be created by the application, so I simply don't know what to do about this. My tired brain has only just digested the above paragraph - my guess would be that the clamav user doesn't have permissions to write to $MYHOME so can't create the socket? My socket is located at /var/run/clamav/clamd and the /var/run/clamav dir is owned by clamav:clamav with 755 perms. The clamav user is also a member of the amavis group. I'm not at the server at the moment, so I'm writing this from memory. I did check that the user clamav is a mamber of the amavis group. Clamd is using /tmp/clamd.socket (IIRC) so I've set amavis to that. Both clamd and amavisd restarted correctly, so I'm hoping that's fixed it. Thanks for your help Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Repo for Abiword
On Mon, 13 Apr 2009 12:14:28 -0700 cen...@911networks.com wrote: I need to run Abiword on CentOS 5.3, any repository? epel -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
JohnS wrote: Seeing as you said you upgraded from 5.2 - 5.3 I would be looking at the kernel release notes and the mysql release notes for known problems since you did not have prior problems. I would check out the Cacti and DNS Databases because there more realtime in nature to running on the server than the content ones. Using the script I posted will catch the offending query. I myself would take a hard look @ MYSQL itself. There is a huge debate about it not being Production Ready. Last option would be to do a yum --allow-downgrade until it's sorted out on a test machine. It appears as though apache is to blame: http://pastebin.centos.org/25568 By stopping and starting apache, %swpused went from 92.84% to 6.41% and has remained for about an hour now. Thanks, Rick ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Repo for Abiword
Hi, I need to run Abiword on CentOS 5.3, any repository? -- Thanks ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
On Mon, 2009-04-13 at 15:25 -0400, Rick Barnes wrote: JohnS wrote: Seeing as you said you upgraded from 5.2 - 5.3 I would be looking at the kernel release notes and the mysql release notes for known problems since you did not have prior problems. I would check out the Cacti and DNS Databases because there more realtime in nature to running on the server than the content ones. Using the script I posted will catch the offending query. I myself would take a hard look @ MYSQL itself. There is a huge debate about it not being Production Ready. Last option would be to do a yum --allow-downgrade until it's sorted out on a test machine. It appears as though apache is to blame: http://pastebin.centos.org/25568 By stopping and starting apache, %swpused went from 92.84% to 6.41% and has remained for about an hour now. Thanks, Rick --- Now you get to nail down the offending site/application. By the way that's a lot of ram for apache to eat up. I may be wrong but didn't MYSQL show eating all that RAM also? Keep in mind that bad sql queries will also make a web server eat ram. Totally dependent on your situation. JohnStanley ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] x86_64 server OOM problems after update to 5.3
On Mon, 2009-04-13 at 14:18 -0400, Rick Barnes wrote: This is a real hardware server. It is not doing GIS or mapping of the like, most of the DBs on this are for web sites, mostly form data storage, some CMS DBs for joomla, WP, etc. also some others for cacti and powerdns backends. I have setup some scripts to watch the swap usage to see if I can track this down. Thanks for the help Rick --- Seeing as you said you upgraded from 5.2 - 5.3 I would be looking at the kernel release notes and the mysql release notes for known problems since you did not have prior problems. I would check out the Cacti and DNS Databases because there more realtime in nature to running on the server than the content ones. Using the script I posted will catch the offending query. I myself would take a hard look @ MYSQL itself. There is a huge debate about it not being Production Ready. Last option would be to do a yum --allow-downgrade until it's sorted out on a test machine. JohnStanley ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] ext3_free_blocks_sb: bit already cleared for block
I opened bug 494927 with Red Hat after seeing this kernel error on two different hosts, just a few days after updating or installing CentOS 5.3: https://bugzilla.redhat.com/show_bug.cgi?id=494927 Has anyone else seen this yet? The patch that RH included in kernel-2.6.9-78.0.17.EL.src.rpm to fix the problem appears to have been in their 2.6.18 rpm since revision 15, so something else is apparently causing the same problem. I'm running bonnie++ in a loop on a VM running the affected kernel hoping to duplicate the problem. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Possible bug?
I had some problems with apache, and there were so many, (caused by removing ispconfig) I decided to just remove and re-install. This is what happened when I tried to do so, both from remote and via console. I tried the DVD as well as yum, and got essentially the same thing. My webserver is down, and I'd sure like to get this fixed if anyone can help out. Begin errors: Component: pirut Summary: TBe8ae967a sqlitesack.py:94:_read_db_obj:TypeError: unsubscriptable object Traceback (most recent call last): File /usr/sbin/pirut, line 373, in _apply output = self.applyChanges(self.mainwin) File /usr/lib/python2.4/site-packages/pirut/__init__.py, line 813, in applyChanges self.checkDeps(mainwin) File /usr/lib/python2.4/site-packages/pirut/__init__.py, line 550, in checkDeps (result, msgs) = self.buildTransaction() File /usr/lib/python2.4/site-packages/yum/__init__.py, line 647, in buildTransaction (rescode, restring) = self.resolveDeps() File /usr/lib/python2.4/site-packages/yum/depsolve.py, line 696, in resolveDeps CheckDeps, checkinstalls, checkremoves, missing = self._resolveRequires(errors) File /usr/lib/python2.4/site-packages/yum/depsolve.py, line 779, in _resolveRequires thisneeds = self._checkInstall(txmbr) File /usr/lib/python2.4/site-packages/yum/depsolve.py, line 851, in _checkInstall provs = self.tsInfo.getProvides(*req) File /usr/lib/python2.4/site-packages/yum/transactioninfo.py, line 432, in getProvides result.update(self.getNewProvides(name, flag, version)) File /usr/lib/python2.4/site-packages/yum/transactioninfo.py, line 414, in getNewProvides for pkg, hits in self.pkgSack.getProvides(name, flag, version).iteritems(): File /usr/lib/python2.4/site-packages/yum/packageSack.py, line 300, in getProvides return self._computeAggregateDictResult(getProvides, name, flags, version) File /usr/lib/python2.4/site-packages/yum/packageSack.py, line 470, in _computeAggregateDictResult sackResult = apply(method, args) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 861, in getProvides return self._search(provides, name, flags, version) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 43, in newFunc return func(*args, **kwargs) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 837, in _search for pkg in self.searchFiles(name, strict=True): File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 43, in newFunc return func(*args, **kwargs) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 586, in searchFiles self._sql_pkgKey2po(rep, cur, pkgs) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 470, in _sql_pkgKey2po pkg = self._packageByKey(repo, ob['pkgKey']) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 413, in _packageByKey po = self.pc(repo, cur.fetchone()) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 68, in __init__ self._read_db_obj(db_obj) File /usr/lib/python2.4/site-packages/yum/sqlitesack.py, line 94, in _read_db_obj setattr(self, item, _share_data(db_obj[item])) TypeError: unsubscriptable object Local variables in innermost frame: item: name db_obj: None Many thanks.. Sam ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible bug?
Sam Drinkard wrote: I had some problems with apache, and there were so many, (caused by removing ispconfig) I decided to just remove and re-install. This is what happened when I tried to do so, both from remote and via console. I tried the DVD as well as yum, and got essentially the same thing. My webserver is down, and I'd sure like to get this fixed if anyone can help out. You try just running rpm -i path to httpd packages ? Those errors look specific to yum and you can probably get the system up faster by bypassing yum for now. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible bug?
nate wrote: Sam Drinkard wrote: I had some problems with apache, and there were so many, (caused by removing ispconfig) I decided to just remove and re-install. This is what happened when I tried to do so, both from remote and via console. I tried the DVD as well as yum, and got essentially the same thing. My webserver is down, and I'd sure like to get this fixed if anyone can help out. You try just running rpm -i path to httpd packages ? Those errors look specific to yum and you can probably get the system up faster by bypassing yum for now. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Nate, The command yum clean all took care of the problem. I had no idea something as simple as that would make the stuff work! I almost tried that while I was at the POP, but figured it was more of a problem with pirut or python or something. Anyhow, I cleaned it, reinstalled apache, and all is back running now. Thanks yall... Sam ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Processes to disable
On Mon, Apr 13, 2009 at 12:03, Bogdan Nicolescu bo...@yahoo.com wrote: To see the names of all the services installed on your system: ls /etc/rc.d/init.d Using 'chkconfig --list' makes more sense than listing the init.d directory. chkconfig --list doesn't necessarily list all the services in /etc/rc.d/init.d It does list all that were properly registered. If a service is not listed by chkconfig --list, it means it was not registered with chkconfig --add, and it probably means that there was a problem while installing the package. AFAIK, if it does not show in chkconfig --list you will not be able to activate it with 'chkconfig service on' either. Filipe ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Clamd and Amavis
Anne Wilson wrote on Mon, 13 Apr 2009 12:47:50 +0100: It doesn't. I thought so. You should have found that out yourself and told here in your first posting! I'm under the impression that a socket cannot be manually created, but has to be created by the application, so I simply don't know what to do about this. Nothing. So far I haven't seen a reason to change it from the default. There is *NO* instruction in that short tutorial that tells you to do this. So, simply leave it where it was and tell amavisd where to find that socket! I remember you had the exact same problem some weeks ago, when you also changed the clamd socket for some obscure reason and it stopped working. Didn't you learn from that? You can't just change those paths for fun. The program has to be able to write to that new path, of course! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Cannot play rmvb video files after burning to DVD
On Sun, Apr 12, 2009 at 7:12 PM, Lanny Marcus lmmailingli...@gmail.com wrote: I use K3b and I always specify that a verification be done. If you can play the same file on your hard drive, but not one you copied from there and burned to a DVD, I suspect the burn is bad. I second that - I always burn with verification, AND play it back in a different drive. Also, the best check on the burn is to play it back in a commercial DVD player, if you have one. If that can read it, you're fine. I also recommend burning at least one speed LESS than the top (rated and advertised) speed of your burner. It seems to work better for me. And, yeah, get 5.3. Lots of updates, and also for mplayer, if you have it (rpmforge, not RH or CentOS). HTH mhr ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] python-dbus
On Mon, 2009-04-13 at 18:47 +0100, Anne Wilson wrote: On Monday 13 April 2009 18:29:55 Bob Taylor wrote: On Mon, 2009-04-13 at 17:55 +0100, Anne Wilson wrote: During startup there is a message about a missing python-dbus. Querying rpm and yum tells me that nothing provides python-dbus and no such package exists. What do I need? Hi Ann! ann:/etc# yum search dbus-python [snip] = Matched: dbus-python = dbus-python.i386 : D-Bus Python Bindings ann:/etc# rpm -q dbus-python dbus-python-0.70-7.el5 Name switch! Confused me also! Now how the blue blazes are we supposed to guess that? Oops - Package dbus-python-0.70-7.el5.i386 already installed and latest version Nothing to do Back to the drawing board, I guess. This business of getting a message that something is not installed when it *is* should *not* happen. I consider this a nasty bug as the error is *meaningless*. The only thing that comes to mind at the moment is something is looking in /usr/lib/python and not /usr/lib/python2.4. -- Bob Taylor ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Building a kernel without kabichk
I¹m trying to build a 2.6.18-128.1.6.el5 kernel without kabichk. I have downloaded the sources, installed the compiler, etc and ran the following command rpmbuild -bb --target=`uname -m` --without kabichk --with baseonly --without debug \ --without debuginfo kernel-2.6.spec. I had modified the .SPEC file according to the WIKI page http://wiki.centos.org/HowTos/Custom_Kernel I have NOT installed any patches that will break KABI, but I am wanting to patch the kernel for SCST, and that will do it. Currently, I¹m just trying to get the beast to build. I have been successful getting this to work on older versions like 2.6.18-92.1.22, but I have not had success with 128.1.6. l. I have not worried about build errors at this point, because I¹m hoping someone can say, ³Just do this, and all will be well.² I am relatively new to CentOS / RedHat, but I do have a significant amount of Linux experience building kernels. I am now trying to see if I can get the kernel to build with kabi in place. Any pointers would be greatly appreciated. TIA. -- Terry Hull Network Resource Group, Inc. President ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Building a kernel without kabichk
On Mon, Apr 13, 2009 at 3:53 PM, Terry Hull t...@nrg-inc.com wrote: I’m trying to build a 2.6.18-128.1.6.el5 kernel without kabichk. I have downloaded the sources, installed the compiler, etc and ran the following command rpmbuild -bb --target=`uname -m` --without kabichk --with baseonly --without debug \ --without debuginfo kernel-2.6.spec. I had modified the .SPEC file according to the WIKI page http://wiki.centos.org/HowTos/Custom_Kernel I have NOT installed any patches that will break KABI, If you know your custom kernel retains the kABI, I suggest you entirely skip the section of the Wiki article that deals with the kABI-related modifications. No only this will reduce the chance of making incorrect changes but also it is indeed a good idea to do kABI checking. If the build still fails, please post the last portion of the error log (or e-mail the whole log file to me). Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] yum clean all
There seems to be a lot of this needed lately. I suspect the issue is 5.2 - 5.3 transition. Putting something like this in /etc/cron.daily/ when near a major update *might* make the transition times between point releases easier - #!/bin/bash RANGE=120 number=$RANDOM let number %= $RANGE delay=`/usr/bin/expr $number \* 60` sleep $delay /usr/bin/yum clean all /dev/null 21 /usr/bin/yum makecache /dev/null 21 -=- Point of the random delay is to not have lots of people hit all the servers at once. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Processes to disable
- Original Message From: Filipe Brandenburger filbran...@gmail.com To: CentOS mailing list centos@centos.org Sent: Monday, April 13, 2009 6:29:43 PM Subject: Re: [CentOS] Processes to disable On Mon, Apr 13, 2009 at 12:03, Bogdan Nicolescu wrote: To see the names of all the services installed on your system: ls /etc/rc.d/init.d Using 'chkconfig --list' makes more sense than listing the init.d directory. chkconfig --list doesn't necessarily list all the services in /etc/rc.d/init.d It does list all that were properly registered. If a service is not listed by chkconfig --list, it means it was not registered with chkconfig --add, and it probably means that there was a problem while installing the package. AFAIK, if it does not show in chkconfig --list you will not be able to activate it with 'chkconfig on' either. Filipe Not properly registered with chkconfig doesn't necessarily mean that a service is not installed. service --status-all is probably a better choice in finding the status of all the scripts in init.d, and not just those registered withc chkconfig. bn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Building a kernel without kabichk
On Mon, Apr 13, 2009 at 6:53 PM, Terry Hull t...@nrg-inc.com wrote: I’m trying to build a 2.6.18-128.1.6.el5 kernel without kabichk. I have downloaded the sources, installed the compiler, etc and ran the following command rpmbuild -bb --target=`uname -m` --without kabichk --with baseonly --without debug \ --without debuginfo kernel-2.6.spec. I had modified the .SPEC file according to the WIKI page http://wiki.centos.org/HowTos/Custom_Kernel For the most part, the build instructions on the link work for me. The only changes I do is to install rpmdevtools first, then run rpmdev-setuptree to create the rpmbuild directories and .rpmmacros file. The x86_64 also had a requirement for the unifdef package. I have NOT installed any patches that will break KABI, but I am wanting to patch the kernel for SCST, and that will do it. Currently, I’m just trying to get the beast to build. I have been successful getting this to work on older versions like 2.6.18-92.1.22, but I have not had success with –128.1.6. l. I have not worried about build errors at this point, because I’m hoping someone can say, “Just do this, and all will be well.” I am relatively new to CentOS / RedHat, but I do have a significant amount of Linux experience building kernels. I am now trying to see if I can get the kernel to build with kabi in place. Any pointers would be greatly appreciated. TIA. Any errors? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Building a kernel without kabichk
On 4/13/09 8:23 PM, in article b7e478370904131823q239fb3dsd4629d1ec6361...@mail.gmail.com, Kwan Lowe kwan.l...@gmail.com wrote: On Mon, Apr 13, 2009 at 6:53 PM, Terry Hull t...@nrg-inc.com wrote: I¹m trying to build a 2.6.18-128.1.6.el5 kernel without kabichk. I have downloaded the sources, installed the compiler, etc and ran the following command rpmbuild -bb --target=`uname -m` --without kabichk --with baseonly --without debug \ --without debuginfo kernel-2.6.spec. I had modified the .SPEC file according to the WIKI page http://wiki.centos.org/HowTos/Custom_Kernel For the most part, the build instructions on the link work for me. The only changes I do is to install rpmdevtools first, then run rpmdev-setuptree to create the rpmbuild directories and .rpmmacros file. The x86_64 also had a requirement for the unifdef package. Did you get it to build with kabichk turned off? I had gotten older packages to build as below, but 128.1.6 was giving errors. I can get the kernel to build with kabichk turned on with no real problems. Also here are the kernel packages I have installed (plus the source of course.) rpm -qa | grep kernel kernel-2.6.18-92.el5 kernel-devel-2.6.18-128.1.6.el5 kernel-headers-2.6.18-128.1.6.el5 kernel-2.6.18-128.1.6.el5 kernel-2.6.18-92.1.22.el5SCST - This was the one that I built and it worked I have NOT installed any patches that will break KABI, but I am wanting to patch the kernel for SCST, and that will do it. Currently, I¹m just trying to get the beast to build. I have been successful getting this to work on older versions like 2.6.18-92.1.22, but I have not had success with 128.1.6. l. I have not worried about build errors at this point, because I¹m hoping someone can say, ³Just do this, and all will be well.² I am relatively new to CentOS / RedHat, but I do have a significant amount of Linux experience building kernels. I am now trying to see if I can get the kernel to build with kabi in place. Any pointers would be greatly appreciated. TIA. Any errors? Yes, this one from my stderr capture: In file included from fs/ocfs2/ocfs2.h:45, from fs/ocfs2/alloc.c:34:fs/ocfs2/endian.h:26: error: redefinition of 'le16_add_cpu' include/linux/byteorder/generic.h:174: error: previous definition of 'le16_add_cpu' was herefs/ocfs2/endian.h:31: error: redefinition of 'le32_add_cpu' include/linux/byteorder/generic.h:179: error: previous definition of 'le32_add_cpu' was herefs/ocfs2/endian.h:41: error: redefinition of 'be32_add_cpu' include/linux/byteorder/generic.h:195: error: previous definition of 'be32_add_cpu' was here make[2]: *** [fs/ocfs2/alloc.o] Error 1 make[1]: *** [fs/ocfs2] Error 2 make: *** [fs] Error 2 make: *** Waiting for unfinished jobs That was all I found. -- Terry Hull Network Resource Group, Inc. President ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)
Hey guys,
I've been getting some strange selinux messages after the 5.3 upgrade.
It appears as though my mail system (postfix) is constantly trying to
access the rpm database? Here's the audit messages (I tend to look at
my selinux messages using audit2allow /var/log/audit.log as I find
it easier to read quickly):
allow postfix_postdrop_t rpm_t:tcp_socket { read write };
allow postfix_postdrop_t rpm_var_lib_t:file { read write };
allow postfix_postdrop_t user_home_t:file { getattr append };
allow postfix_postdrop_t var_lib_t:file write;
allow system_mail_t rpm_t:tcp_socket { read write };
allow system_mail_t rpm_var_lib_t:file { read write };
allow system_mail_t var_lib_t:file write;
I've been getting the latter set continously since the upgrade. The
first set appeared briefly when I did a 'setenforce 0' to diagnose
a spamc_t issue with calling the /usr/sbin/sendmail symlink..
They correspond to audit.log messages similar to the following:
type=AVC msg=audit(1239664501.977:9052044): avc: denied { write } for
pid=18901 comm=sendmail name=transaction-done.2009-04-12.22:52.45 dev=loop0
ino=901575 scontext=user_u:system_r:system_mail_t:s0-s0:c0.c1023
tcontext=user_u:object_r:var_lib_t:s0 tclass=file
type=AVC msg=audit(1239664501.977:9052044): avc: denied { read write } for
pid=18901 comm=sendmail name=__db.000 dev=loop0 ino=901554
scontext=user_u:system_r:system_mail_t:s0-s0:c0.c1023
tcontext=root:object_r:rpm_var_lib_t:s0 tclass=file
type=SYSCALL msg=audit(1239664501.977:9052044): arch=4003 syscall=11
success=yes exit=0 a0=5e2237b8 a1=5e223584 a2=5e2439bc a3=8 items=0 ppid=18880
pid=18901 auid=517 uid=517 gid=517 euid=517 suid=517 fsuid=517 egid=517
sgid=517 fsgid=517 tty=(none) comm=sendmail exe=/usr/sbin/sendmail.postfix
subj=user_u:system_r:system_mail_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1239664501.977:9052044): path=/var/lib/rpm/__db.000
type=AVC_PATH msg=audit(1239664501.977:9052044):
path=2F7661722F6C69622F79756D2F7472616E73616374696F6E2D646F6E652E323030392D30342D31322E32323A35322E34352028646
56C6574656429
During the upgrade it looks like it was pretty common for most packages'
contexts to attempt to access a tcp socket to rpm and do similar things
(again, in audit2allow format):
allow tzdata_t rpm_t:tcp_socket { read write };
allow tzdata_t rpm_var_lib_t:file { read write };
allow tzdata_t var_lib_t:file write;
allow tzdata_t var_t:file read;
But I was surprised that these mail messages didn't show up till the
following day, and are still showing up continuously now.
Does anyone know what these accesses are? And why they might be still
continously triggering for the mail system, where as all the other
packages have stopped causing them?
Also, on a related note, is it normally best practices to 'setenforce 0'
during a 5.x upgrade? Is it possible I've damaged something by leaving
selinux enabled? Other than the spamassassin issue, the machine seems
to be running ok..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)
2009/4/14 Dan Mensom mensom...@yahoo.com Hey guys, I've been getting some strange selinux messages after the 5.3 upgrade. It appears as though my mail system (postfix) is constantly trying to access the rpm database? Here's the audit messages (I tend to look at my selinux messages using audit2allow /var/log/audit.log as I find it easier to read quickly): Does anyone know what these accesses are? And why they might be still continously triggering for the mail system, where as all the other packages have stopped causing them? Also, on a related note, is it normally best practices to 'setenforce 0' during a 5.x upgrade? Is it possible I've damaged something by leaving selinux enabled? Other than the spamassassin issue, the machine seems to be running ok.. I've seen the same with a bit of php sending mail through a cronjob... I've so far been unable to reproduce it though... The php in question isn't supposed to touch the rpmdb even it was maintaining open file handles when launching sendmail... d ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)
On Tue, 2009-04-14 at 12:06 +0800, D Tucny wrote: 2009/4/14 Dan Mensom mensom...@yahoo.com Hey guys, I've been getting some strange selinux messages after the 5.3 upgrade. It appears as though my mail system (postfix) is constantly trying to access the rpm database? Here's the audit messages (I tend to look at my selinux messages using audit2allow /var/log/audit.log as I find it easier to read quickly): Does anyone know what these accesses are? And why they might be still continously triggering for the mail system, where as all the other packages have stopped causing them? Also, on a related note, is it normally best practices to 'setenforce 0' during a 5.x upgrade? Is it possible I've damaged something by leaving selinux enabled? Other than the spamassassin issue, the machine seems to be running ok.. I've seen the same with a bit of php sending mail through a cronjob... I've so far been unable to reproduce it though... The php in question isn't supposed to touch the rpmdb even it was maintaining open file handles when launching sendmail... d --- Is it possible yours stopped with the new PHP update that just come out? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)
2009/4/14 D Tucny d...@tucny.com 2009/4/14 Dan Mensom mensom...@yahoo.com Hey guys, I've been getting some strange selinux messages after the 5.3 upgrade. It appears as though my mail system (postfix) is constantly trying to access the rpm database? Here's the audit messages (I tend to look at my selinux messages using audit2allow /var/log/audit.log as I find it easier to read quickly): Does anyone know what these accesses are? And why they might be still continously triggering for the mail system, where as all the other packages have stopped causing them? Also, on a related note, is it normally best practices to 'setenforce 0' during a 5.x upgrade? Is it possible I've damaged something by leaving selinux enabled? Other than the spamassassin issue, the machine seems to be running ok.. I've seen the same with a bit of php sending mail through a cronjob... I've so far been unable to reproduce it though... The php in question isn't supposed to touch the rpmdb even it was maintaining open file handles when launching sendmail... Narrowed it down, nothing to do with the php, it's when cron was sending a mail, the php script was just a regular cron job... Stopped crond, tried debugging it in foreground and saw nothing related... Started crond back up again and the messages are no longer appearing... I wonder if it was something to do with cron being last started during an rpm transaction as a result of being upgraded and it receiving the rpmdb filehandles at that point and sharing them with sendmail... d ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Repo for Abiword
On Mon, Apr 13, 2009 at 2:14 PM, cen...@911networks.com wrote: Hi, I need to run Abiword on CentOS 5.3, any repository? I just get it off of http://rpm.pbone.net First search for mathml-fonts (because libabiword needs them) Then search for libabiword -- if you've set up Rpm Forge (Dag Wieers) repository (libabiword needs a couple file from there) Then find abiword -- RonB -- Using CentOS 5.3 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
