[CentOS-announce] CESA-2013:1505 Important CentOS 5 java-1.6.0-openjdk Update

2013-11-05 Thread Johnny Hughes
CentOS Errata and Security Advisory 2013:1505 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-1505.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

[CentOS-announce] CEBA-2013:1504 CentOS 6 lvm2 Update

2013-11-05 Thread Johnny Hughes
CentOS Errata and Bugfix Advisory 2013:1504 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-1504.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

[CentOS-announce] CEBA-2013:1502 CentOS 6 e2fsprogs Update

2013-11-05 Thread Johnny Hughes
CentOS Errata and Bugfix Advisory 2013:1502 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-1502.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

[CentOS-announce] CESA-2013:1505 Important CentOS 6 java-1.6.0-openjdk Update

2013-11-05 Thread Johnny Hughes
CentOS Errata and Security Advisory 2013:1505 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-1505.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

[CentOS-es] Instalar hardware puerto serial com

2013-11-05 Thread KIKE CARDENAS
Les agradeceria me ayuden a configurar un nuevo puerto serial en un servidor ibm x3400 lo necesito para instalar una impresora para un sistema de facturacion Muchas gracias de antemano por la ayuda que me puedan brindar mi tarjeta es PCI de la marca pctronix Enrique Cárdenas

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
El CID lo tomo de aqui: shell# host facebook.com Ip_de_Face_book shell# whois Ip_de_Face_book CID Ip_del_seg_mento/mask Saludos ! El 5 de noviembre de 2013 08:34, angel jauregui darkdiabl...@gmail.comescribió: @David asi tengo la denegacion tambien, pero si el usuario cambia a https la

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread Ramón Macías Zamora
Yo creo que la solución ahí es forzar a que los usuarios configuren el proxy en vez de usar proxy transparente que sólo funciona para http y no para https. Saludos -- Ramón Macías Zamora Tecnología, Investigación y Desarrollo www.rks.ec - www.raykasolutions.com Guayaquil - Ecuador msn:

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread César Martinez
Acá Epe publicó algo muy sencillo, comentanos si te funcionó http://www.ecualug.org/?q=2012/05/23/comos/centos6_%C2%BFc%C3%B3mo_bloquear_facebook_con_iptables Cordialmente César Martínez Mora Ingeniero de Sistemas SERVICOM User Linux 494131 Números Convencionales 02-2554-271 02-2221-386

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread David González Romero
O lo otro es denegar por dominio acl fb_cia dts_domain /etc/squid/domains Y en domains facebook.com twitter.com . El 5 de noviembre de 2013 11:38, Ramón Macías Zamora rmac...@rks.ecescribió: Yo creo que la solución ahí es forzar a que los usuarios configuren el proxy en vez de usar proxy

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
@Ramon no entiendo cuando mencionas forzar a que los usuarios configuren el proxy ??? Los usuarios no tienen que configurar nada, ya que por consecuencia el GW que se les asigna es el del proxy, el proxy en si actua como Proxy+Router+firewall. No entendi :S Saludos ! El 5 de noviembre de 2013

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
@David pero como atiendo el HTTPS ?... si mando las peticiones del 443 al 3128 no se consibe el certificado :S... Digo, porque hay IPs Fijas que si pueden navegar libremente. No he configurado nunca Squid para https, solo http. Saludos ! El 5 de noviembre de 2013 08:45, David González Romero

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
@Cesar va por iptables :D, solo que el comando es algo distinto... lo probare ! El 5 de noviembre de 2013 08:44, César Martinez cmarti...@servicomecuador.com escribió: Acá Epe publicó algo muy sencillo, comentanos si te funcionó

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread César Martínez
El link que te envie bloquea por iptables -- Saludos César Martinez Mora Ingeniero de Sistemas Servicom Enviado desde mi mobile Samsung galaxy angel jauregui darkdiabl...@gmail.com escribió: @Cesar va por iptables :D, solo que el comando es algo distinto... lo probare ! El 5 de noviembre de

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
mmm es qye hay varios listillos que se lo podrian brincar :S... existe la problematica que en esa red todos tienen acceso admin a sus propios equipos. Generalmente siempre estan conectados con una cuenta de usuario dentro del dominio local, pero a veces se logean con la cuenta admin. Y como soy

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread David González Romero
Hace un forward en el IPtables de que todo lo que vaya al 0/0 port 80, 443, 21, 20, etc... vaya al 3128... Squid no necesita configuacion adicional para https lo soporta perfectamente bien. Tu puedes controlar los accesos por dominios, o por IP... escoge el que te guste. Saludos, David El 5 de

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread Ignacio Ordeñana
a mi parecer esa regla de iptables no te funcionara ya que primero la estas permitiendo el acceso a una ip en particular luego le quitas acceso a todo el segmento de red incluyendo la ip que le permites acceso. saludos El 5 de noviembre de 2013 08:34, angel jauregui

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
Se cumple la excepcion, y funcionaria no ? El 5 de noviembre de 2013 09:25, Ignacio Ordeñana ifor1...@gmail.comescribió: a mi parecer esa regla de iptables no te funcionara ya que primero la estas permitiendo el acceso a una ip en particular luego le quitas acceso a todo el segmento de red

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread angel jauregui
@David voy hacer pruebas como me indicas. El 5 de noviembre de 2013 09:19, David González Romero dgrved...@gmail.comescribió: Hace un forward en el IPtables de que todo lo que vaya al 0/0 port 80, 443, 21, 20, etc... vaya al 3128... Squid no necesita configuacion adicional para

Re: [CentOS-es] [iptables] denegar rando dependiendo la IP de la fuenta ?

2013-11-05 Thread Ignacio Ordeñana
te envio un link de una perosna que tuvo ese mismo problema http://www.ecualug.org/?q=2011/02/10/forums/bloquear_https_de_facebook_en_ip_tablespage=3 saludos El 5 de noviembre de 2013 09:32, angel jauregui darkdiabl...@gmail.comescribió: Se cumple la excepcion, y funcionaria no ? El 5 de

[CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread SisNet Corp.
Un saludo estimados amigos. Existe alguna manera de configurar alta disponibilidad con tolerancia a fallos con 2 ISP? Al momento tengo tres tarjetas de red Eth0 - ISP1 Eth1 - Red lan Eth2 - ISP 2 Saludos, max ___ CentOS-es mailing list

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread David González Romero
Me gustaría también saber sobre esto a ver que se puede hacer. Hasta ahora esa batalla solo la he vencido con Ipfw en FreeBSD.. Saludos, David El 5 de noviembre de 2013 13:36, SisNet Corp. sis...@sisnet.com.ecescribió: Un saludo estimados amigos. Existe alguna manera de configurar alta

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread angel jauregui
Lo que @erick intenta decir (creo) es que hagas VLAN (bonding) de las tarjeta eth0 y eth2, esto convertira en esclavas a las eth mencionadas y creara un unico interfaz de comunicacion (bond0) que a fin de cuenta en tus reglas del firewall sacaras todo por bond0, y bonding terminara decidiendo por

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread angel jauregui
Yo opino que si funcionaria, ya que ambos Routers del ISP no estan conectados (entre ellos), en ambos ruters manejar el mismo segmentos de red. A fin de cuenta bond0 recibe el paquete o lo pasa, creo que les llegaria a ambos ISPs el paquete. No veo donde este el conflicto :S Claro, una

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread David González Romero
Amigos esta claro que lo que se quiere lograr no es VLAN, sino Alta disponibilidad. Eso es que siempre haya disponibles una ruta para sacar o meter paquetes y que no se sature (balance de carga) una sola línea. Bonding tiene la capacidad de hacer esto? Saludos, David El 5 de noviembre de 2013

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread David González Romero
Entonces eso que me dices no es alta disponibilidad... Yo entiendo por alta disponibilidad que si tu tienes dos enlaces, tu sistema será lo suficientemente inteligente para poder decidir por donde enviar un paquete y que no sature el trafico de uno de los enlaces. O sea que siempre este disponible

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread angel jauregui
Bueno alta disponibilidad inteligente creo que hiria mas por la parte de verificar primero por cual ISP sacaria el paquete. Con bond0 obtendria simplemente fluidez en que siempre saldrias por alguno de los dos, si ISP 1 se cae, pues ISP 2 estaria atendiendo, tu paquete siempre saldria. Lo otro

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread David González Romero
Bueno esa alta disponibilidad se logra con ipfw en FreeBSD, y es un metodo tan sencillo como lograr verificar el estado del canal de internet. En muchos ISP que tienen más de 2 enlaces y deseas compartir ambos lo tienen... Yo aca hice algo parecido en un CentOS pero no es de alta disponilidad.

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread angel jauregui
Vaya entonces ipfw comprueba el estado del canal, para tomar la desicion de poner o no hay el paquete... Y en CentOS como lo hiciste ? El 5 de noviembre de 2013 12:00, David González Romero dgrved...@gmail.comescribió: Bueno esa alta disponibilidad se logra con ipfw en FreeBSD, y es un metodo

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread David González Romero
En CentOS no hice. Ipfw es de FreeBSD, esta muy documentada esta solución y fue gracias a un amigo que trabajó conmigo en Cuba que lo hizo primero. El 5 de noviembre de 2013 15:04, angel jauregui darkdiabl...@gmail.comescribió: Vaya entonces ipfw comprueba el estado del canal, para tomar la

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread Ernesto Pérez Estévez, Ing.
On 11/05/2013 11:37 AM, Erick Ocrospoma wrote: Hola, Lo que estás buscando se le conoce como bonding :-) no, no le llamaría bonding, bonding es cuando unes dos tarjetas hacia un mismo switch (trunking) a nivel de capa 2 típicamente.. lo que pide es alta disponibilidad, o balanceo de carga

Re: [CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread Luis Braulio Camacho Espinoza
Shorewall, es lo que necesitas. Yo lo hice de esa manera y funciona muy bien. Luis Camacho -Mensaje original- De: centos-es-boun...@centos.org [mailto:centos-es-boun...@centos.org] En nombre de max Enviado el: martes, 05 de noviembre de 2013 14:35 Para: centos-es@centos.org Asunto: Re:

[CentOS-es] Alta disponibilidad con 2 ISP en CentOS

2013-11-05 Thread Luis Braulio Camacho Espinoza
Lo hice en base a este documento que lo encuentras en internet: Shorewall and Multiple Internet Connections Tom Eastep Luis Camacho -Mensaje original- De: centos-es-boun...@centos.org [mailto:centos-es-boun...@centos.org] En nombre de max Enviado el: martes, 05 de noviembre de 2013

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread Nux!
On 05.11.2013 01:27, Gopu Krishnan wrote: I have a CentOS linux web server in which I have multiple web sites. I have many website programmers now doing the coding for all the sites. How can I provide a key-based authentication for the programmers in such a way that they have access only

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread John Doe
From: Gopu Krishnan gopukrishnan...@gmail.com I have a CentOS linux web server in which I have multiple web sites. I have many website programmers now doing the coding for all the sites. How can I provide a key-based authentication for the programmers in such a way that they have access only

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread Andrew Holway
freeipa On 5 November 2013 10:31, John Doe jd...@yahoo.com wrote: From: Gopu Krishnan gopukrishnan...@gmail.com I have a CentOS linux web server in which I have multiple web sites. I have many website programmers now doing the coding for all the sites. How can I provide a key-based

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread Gopu Krishnan
Hi all, I cant own a particular group recursively to /home since each site files inside the /home is having their own username and passwor. I guess i should try setfacl. Will let u knw the results. On 11/5/13, Andrew Holway andrew.hol...@gmail.com wrote: freeipa On 5 November 2013 10:31, John

[CentOS] CentOS-announce Digest, Vol 105, Issue 3

2013-11-05 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: den 4 november 2013 18:06 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server Any hints as to where to start reading up, as well as

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of John R Pierce Sent: den 4 november 2013 18:08 To: centos@centos.org Subject: Re: [CentOS] [OT] Building a new backup server On 11/4/2013 4:44 AM, Sorin Srbu wrote: I've come so far

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Les Mikesell Sent: den 4 november 2013 18:31 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server BackupPC pools data with hardlinks so you have to put its

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Keith Keller Sent: den 4 november 2013 20:19 To: centos@centos.org Subject: Re: [CentOS] [OT] Building a new backup server What about this 1 GB RAM per TB disk-space for XFS in order

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Dennis Jacobfeuerborn Sent: den 4 november 2013 22:30 To: centos@centos.org Subject: Re: [CentOS] [OT] Building a new backup server In that case it might be better to switch to XFS

Re: [CentOS] 3TB disk with 6.0.4 not booting

2013-11-05 Thread SilverTip257
On Mon, Nov 4, 2013 at 7:33 PM, John R Pierce pie...@hogranch.com wrote: On 11/4/2013 4:14 PM, James A. Peltier wrote: To boot off of a 3TB disk you require a (U)EFI capable machine which supports GPT partitions. There is no way to boot a disk that is 3TB in size using a BIOS based machine.

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread SilverTip257
On Tue, Nov 5, 2013 at 8:09 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Dennis Jacobfeuerborn Sent: den 4 november 2013 22:30 To: centos@centos.org Subject: Re: [CentOS] [OT]

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Dennis Jacobfeuerborn
On 05.11.2013 14:35, SilverTip257 wrote: On Tue, Nov 5, 2013 at 8:09 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Dennis Jacobfeuerborn Sent: den 4 november 2013 22:30 To:

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 7:04 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: Can e.g. BackupPC handle several file systems to backup to? I.e. comp1 through 10 should backup to /bak1, comp 11 through 20 to /bak2 and so on. The main point of backuppc is that it hard-links all files with

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of SilverTip257 Sent: den 5 november 2013 14:36 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server In that case it might be better to switch to XFS which

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Les Mikesell Sent: den 5 november 2013 15:09 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server Can e.g. BackupPC handle several file systems to backup

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 7:04 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: Can e.g. BackupPC handle several file systems to backup to? I.e. comp1 through 10 should backup to /bak1, comp 11 through 20 to /bak2 and so on. The main point of backuppc is that it hard-links

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of SilverTip257 Sent: den 5 november 2013 14:36 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server In that case it might be better to

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 8:32 AM, m.r...@5-cent.us wrote: Les Mikesell wrote: On Tue, Nov 5, 2013 at 7:04 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: Can e.g. BackupPC handle several file systems to backup to? I.e. comp1 through 10 should backup to /bak1, comp 11 through 20 to /bak2 and

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: den 5 november 2013 15:35 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server According to Wikipedia RHEL 7 is scheduled for

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 8:32 AM, m.r...@5-cent.us wrote: Les Mikesell wrote: On Tue, Nov 5, 2013 at 7:04 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: Can e.g. BackupPC handle several file systems to backup to? I.e. comp1 through 10 should backup to /bak1, comp 11

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 8:32 AM, m.r...@5-cent.us wrote: Les Mikesell wrote: On Tue, Nov 5, 2013 at 7:04 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: Can e.g. BackupPC handle several file systems to backup to? I.e. comp1 through 10 should backup to /bak1, comp 11

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Dennis Jacobfeuerborn
On 05.11.2013 16:06, Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: den 5 november 2013 15:35 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new backup server According to

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 8:32 AM, m.r...@5-cent.us wrote: Les Mikesell wrote: On Tue, Nov 5, 2013 at 7:04 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: Can e.g. BackupPC handle several file systems to backup to? I.e. comp1 through 10 should backup to /bak1, comp 11

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 9:27 AM, m.r...@5-cent.us wrote: No, rsync will only hardlink to instances of the same file in the same location from previous runs. Backuppc will link every file with snip True. But we have a directory structure like .../servername | -

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 8:20 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Les Mikesell Sent: den 5 november 2013 15:09 To: CentOS mailing list Subject: Re: [CentOS] [OT] Building a new

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 9:27 AM, m.r...@5-cent.us wrote: No, rsync will only hardlink to instances of the same file in the same location from previous runs. Backuppc will link every file with snip True. But we have a directory structure like .../servername

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 9:52 AM, m.r...@5-cent.us wrote: Have you tried backuppc? There are some tradeoffs because it makes an extra hardlink into a pool directory tree where the name is a hash of the content, but it takes care of all the other stuff for you and would let you store a much

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 9:52 AM, m.r...@5-cent.us wrote: Have you tried backuppc? There are some tradeoffs because it makes an extra hardlink into a pool directory tree where the name is a hash of the content, but it takes care of all the other stuff for you and would

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 10:48 AM, m.r...@5-cent.us wrote: I'm not quite at that scale in a single instance myself, but I'm fairly sure many users on the backuppc mail list are, so it is not necessarily a problem, although there are some tradeoffs with extra overhead for compression and the

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 10:48 AM, m.r...@5-cent.us wrote: I'm not quite at that scale in a single instance myself, but I'm fairly sure many users on the backuppc mail list are, so it is not necessarily a problem, although there are some tradeoffs with extra overhead for

Re: [CentOS] building software raid.

2013-11-05 Thread Johan Vermeulen
Op 02-11-13 15:26, Johan Vermeulen schreef: Op 01-11-13 17:41, Johan Vermeulen schreef: Op 30-10-13 17:38, John Doe schreef: From: Johan Vermeulen jvermeu...@cawdekempen.be no I see I have /dev/md/md_d0 /dev/md_d0p1 /dev/md_d0p2 I don't know what is what Not sure what you did with lvm

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 11:26 AM, m.r...@5-cent.us wrote: Still not sounding like we need it. We back up /etc from all our servers (except for the compute cluster nodes every night, and keep about 5 weeks. Home directories are 100% NFS-mounted from servers, and those are backed up every night

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread John R Pierce
On 11/5/2013 3:40 AM, Gopu Krishnan wrote: I cant own a particular group recursively to /home since each site files inside the /home is having their own username and passwor. I guess i should try setfacl. Will let u knw the results. for each $USER... usermod -g webdev $USER chgroup -R

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread John R Pierce
On 11/5/2013 5:06 AM, Sorin Srbu wrote: Do we have other options than BackupPC on CentOS that might work better? the only reason to say it doesn't handle those usecases well is that each incremental will probably backup the whole file so it won't dedup at all... well, ANY backup system will be

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 11:26 AM, m.r...@5-cent.us wrote: Still not sounding like we need it. We back up /etc from all our servers (except for the compute cluster nodes every night, and keep about 5 weeks. Home directories are 100% NFS-mounted from servers, and those are

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread Nux!
On 05.11.2013 18:00, John R Pierce wrote: On 11/5/2013 3:40 AM, Gopu Krishnan wrote: I cant own a particular group recursively to /home since each site files inside the /home is having their own username and passwor. I guess i should try setfacl. Will let u knw the results. for each $USER...

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread John R Pierce
On 11/5/2013 7:52 AM, m.r...@5-cent.us wrote: I don't think that's going to happen. First, we have an in-house developed backup system that works just fine. Second, we*are* backup up something over a hundred servers and workstations to a few backup servers. Third, we are talking, in some

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 12:10 PM, m.r...@5-cent.us wrote: Well, no - my manager, who's been here a bunch of years, wrote it years ago. And I'm not quite sure what you're saying - we have a centralized logging host, and the backup cron job on each machine emails its results to our admin

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
John R Pierce wrote: On 11/5/2013 7:52 AM, m.r...@5-cent.us wrote: I don't think that's going to happen. First, we have an in-house developed backup system that works just fine. Second, we*are* backup up something over a hundred servers and workstations to a few backup servers. Third, we are

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 1:28 PM, m.r...@5-cent.us wrote: As I noted, we make sure rsync uses hard links... but we have a good number of individual people and projects with who *each* have a good number of terabytes of data and generated data. Some of our 2TB drives are over 90% full, and then

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Hey, Les, Thanks for changing the subject to OT. Les Mikesell wrote: On Tue, Nov 5, 2013 at 1:28 PM, m.r...@5-cent.us wrote: As I noted, we make sure rsync uses hard links... but we have a good number of individual people and projects with who *each* have a good number of terabytes of

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread John R Pierce
On 11/5/2013 12:41 PM, m.r...@5-cent.us wrote: We have a*bunch* of d/bs. Oracle. MySQL. Postgresql. All with about a week's dumps from every night, and then backups of them to the b/u servers. I can't imagine how they'd be a win - don't remember just off the top of my head if they're

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 2:41 PM, m.r...@5-cent.us wrote: Hey, Les, Thanks for changing the subject to OT. Errr... I just replied in gmail - I think it has been there all along. We have a *bunch* of d/bs. Oracle. MySQL. Postgresql. All with about a week's dumps from every night, and then

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 2:41 PM, m.r...@5-cent.us wrote: snip We have a *bunch* of d/bs. Oracle. MySQL. Postgresql. All with about a week's dumps from every night, and then backups of them to the b/u servers. I can't imagine how they'd be a win - don't remember just off

[CentOS] /etc/inittab

2013-11-05 Thread Wes James
I noticed in /etc/inittab that it has this line: # 0 - halt (Do NOT set initdefault to this) It makes sense, but what if it did get set to 0 or 6? Is there a way to boot to single-user mode anyway to edit the file and change it to a correct value? What if it is set to a negative number or a

[CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Wes James
When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some package, it seems to work (not being blocked). When would doing something not work because selinux is watching it (or whatever that process is

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread m . roth
Wes James wrote: When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some package, it seems to work (not being blocked). When would doing something not work because selinux is watching it (or

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 3:45 PM, m.r...@5-cent.us wrote: Yeah, I know, we're trying to move stuff around, that's not infrequent, given the amount of data my folks generate. And that's the other place that backuppc will help. If you move a file that is already in an existing backup, backuppc's

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 3:45 PM, m.r...@5-cent.us wrote: Yeah, I know, we're trying to move stuff around, that's not infrequent, given the amount of data my folks generate. And that's the other place that backuppc will help. If you move a file that is already in an

Re: [CentOS] /etc/inittab

2013-11-05 Thread Wes James
On Tue, Nov 5, 2013 at 3:24 PM, Warren Young war...@etr-usa.com wrote: On 11/5/2013 15:10, Wes James wrote: I noticed in /etc/inittab that it has this line: # 0 - halt (Do NOT set initdefault to this) It makes sense, but what if it did get set to 0 or 6? Is there a way to boot to

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread John R Pierce
On 11/5/2013 2:15 PM, m.r...@5-cent.us wrote: Wes James wrote: When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some package, it seems to work (not being blocked). When would doing something

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Wes James
On Tue, Nov 5, 2013 at 3:28 PM, John R Pierce pie...@hogranch.com wrote: On 11/5/2013 2:15 PM, m.r...@5-cent.us wrote: Wes James wrote: When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread Les Mikesell
On Tue, Nov 5, 2013 at 4:25 PM, m.r...@5-cent.us wrote: Yeah, I know, we're trying to move stuff around, that's not infrequent, given the amount of data my folks generate. And that's the other place that backuppc will help. If you move a file that is already in an existing backup,

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread m . roth
John R Pierce wrote: On 11/5/2013 2:15 PM, m.r...@5-cent.us wrote: Wes James wrote: When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some package, it seems to work (not being blocked). When

Re: [CentOS] [OT] Building a new backup server

2013-11-05 Thread m . roth
Les Mikesell wrote: On Tue, Nov 5, 2013 at 4:25 PM, m.r...@5-cent.us wrote: Yeah, I know, we're trying to move stuff around, that's not infrequent, given the amount of data my folks generate. And that's the other place that backuppc will help. If you move a file that is already in an

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Wes James
On Tue, Nov 5, 2013 at 3:38 PM, m.r...@5-cent.us wrote: John R Pierce wrote: On 11/5/2013 2:15 PM, m.r...@5-cent.us wrote: Wes James wrote: When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread m . roth
Wes James wrote: On Tue, Nov 5, 2013 at 3:38 PM, m.r...@5-cent.us wrote: John R Pierce wrote: On 11/5/2013 2:15 PM, m.r...@5-cent.us wrote: Wes James wrote: When does echo 0 /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Wes James
On Tue, Nov 5, 2013 at 3:53 PM, m.r...@5-cent.us wrote: Wes James wrote: On Tue, Nov 5, 2013 at 3:38 PM, m.r...@5-cent.us wrote: snip mark NOT a fan of selinux, dealt with it far too much OK. Why not use some other linux that doesn't use selinux then? I guess in

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Keith Keller
On 2013-11-05, Wes James compte...@gmail.com wrote: Why not use some other linux that doesn't use selinux then? If it were harder to disable (either temporarily or permanently) then I could see someone making this case. But it's trivial to disable SELinux in CentOS, so there's no real reason

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Wes James
On Tue, Nov 5, 2013 at 4:01 PM, Keith Keller kkel...@wombat.san-francisco.ca.us wrote: On 2013-11-05, Wes James compte...@gmail.com wrote: Why not use some other linux that doesn't use selinux then? If it were harder to disable (either temporarily or permanently) then I could see someone

[CentOS] iptables

2013-11-05 Thread Wes James
I ran: iptables -L and see this: Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywherestate RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere ACCEPT all -- anywhere

Re: [CentOS] iptables

2013-11-05 Thread John R Pierce
On 11/5/2013 3:55 PM, Wes James wrote: I ran: iptables -L incomplete output. try... iptables -L -vn and you'll probably see that reject is for a specific packet type. the v is for verbose, the n is for numeric output (no DNS lookup) -- john r pierce

Re: [CentOS] iptables

2013-11-05 Thread Wes James
On Tue, Nov 5, 2013 at 5:22 PM, John R Pierce pie...@hogranch.com wrote: On 11/5/2013 3:55 PM, Wes James wrote: I ran: iptables -L incomplete output. try... iptables -L -vn and you'll probably see that reject is for a specific packet type. the v is for verbose, the n is for numeric

Re: [CentOS] echo 0 /selinux/enforce

2013-11-05 Thread Phil Gardner
On 11/05/2013 06:13 PM, Wes James wrote: On Tue, Nov 5, 2013 at 4:01 PM, Keith Keller kkel...@wombat.san-francisco.ca.us wrote: On 2013-11-05, Wes James compte...@gmail.com wrote: Why not use some other linux that doesn't use selinux then? If it were harder to disable (either

Re: [CentOS] Provide access to /home folder

2013-11-05 Thread Gopu Krishnan
When I set the setfacl, wordpress sites are giving 500 internal server error. I am planning to set a user 'developer' with the home directory as '/home' Inside the /home directory, each site is having its own ownership. For example, /home/site1 should have ownership user1:user1 and /home/site2

[CentOS] mount.cifs install problem

2013-11-05 Thread Nikos Gatsis - Qbit
Hello list After samba4 installation cant install cifs-utils. Is there an other way of mount an externall network drive without using mount.cifs? I try mount -t cifs //192.168.10.230/OpenShare/srvbackup /mnt/backup/ But I get is not a valid block device error I have