Re: [CentOS] kvm & permission denied

2018-07-15 Thread Gordon Messmer
On 07/15/2018 07:16 AM, Gregory P. Ennis wrote: The installation seemed to go well, but when I tried to add Fedora 27 with virt-manager I have continued to get file permission errors. I have tried turning selinux off, Don't turn SELinux off. and making sure the directory permissions are 777

Re: [CentOS] Certbot error CentOS 7.5

2018-07-13 Thread Gordon Messmer
On 07/10/2018 05:54 AM, Jerry Geis wrote: Hi All - I am running CentOS 7.5 and trying to use certbot. I am getting an error 403 forbidden on the /.well-known/acme-challenge/-CG_gSckofY5ln7TdMvoanDI1_FBRh8otQkyB0hxmoo What is the full command you are using to request a certificate?

Re: [CentOS] Bash question

2018-07-07 Thread Gordon Messmer
On 07/06/2018 06:18 AM, Jerry Geis wrote: /opt/libreoffice5.4/program/soffice.bin --headless --convert-to csv "/tmp/file 2.xlsx" MSG="file 2" MSG="csv \"$MSG\"" echo $MSG /opt/libreoffice5.4/program/soffice.bin --headless --convert-to $MSG I'd describe what you're trying to do as "using one

Re: [CentOS] upgrade 7.4 --> 7.5: dbus broken

2018-07-03 Thread Gordon Messmer
On 07/03/2018 02:16 AM, Harald Dunkel wrote: Please note the "/run/dbus/system_bus_socket". AFAICT thats new. Shouldn't it listen on /var/run/dbus/system_bus_socket for backward compatibility as well? Yes and no. $ ls -ld /var/run lrwxrwxrwx. 1 root root 6 Dec 13  2017 /var/run -> ../run/

Re: [CentOS] Samba issues with Win 10

2018-06-28 Thread Gordon Messmer
On 06/28/2018 07:30 AM, mark wrote: Just ran into a problem: someone with a new laptop, running Win 10, version 1709, tried to map their home directory (served from a CentOS 6.9 box, and it fails, with Windows complaining that it no longer supports SMBv1, and if you go to their site, you can

Re: [CentOS] Postfix, system notifications and local servers

2018-06-27 Thread Gordon Messmer
On 06/25/2018 01:39 AM, Nicolas Kovacs wrote: Now I'd also like to use this setup on machines that aren't in a datacenter and facing the Internet. For example, servers that have "dummy" hostnames like nestor.microlinux.lan or sauvegarde.scholae.lan. Is there a way I can setup Postfix so this

Re: [CentOS] CentOS-6.9 Bind-9.8.2 error messages

2018-06-22 Thread Gordon Messmer
On 06/21/2018 09:31 AM, James B. Byrne wrote: I stopped and restarted the BIND daemon and this appears to have corrected whatever issue was causing the errors to be generated. That will probably fix the problem temporarily, until the next time the zone file is updated (I think).  If it

Re: [CentOS] Specifying different options for different " smb" type gvfs mount

2018-06-22 Thread Gordon Messmer
On 06/22/2018 01:24 AM, John Hodrien wrote: Paired with wildcard automount entries, and you end up in a very usable setup with minimal config. Cool.  Thanks for clarifying! ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] Specifying different options for different " smb" type gvfs mount

2018-06-21 Thread Gordon Messmer
On 06/21/2018 05:09 AM, John Hodrien wrote: On Thu, 21 Jun 2018, Toralf Lund wrote: I known that I might use mount.cifs and related "fstab" entries as an alternative, but its password handling seems a lot less convenient. If you're in an AD environment, you can probably do nicely with

Re: [CentOS] CentOS-6.9 Bind-9.8.2 error messages

2018-06-20 Thread Gordon Messmer
On 06/20/2018 11:19 AM, James B. Byrne via CentOS wrote: I am encountering messages similar to this in the system logfile: Jun 20 13:38:18 inet03 named[3720]: malformed transaction: dynamic/efa1f375d76194fa51a3556a97e641e61685f914d446979da50a551a4333ffd7.mkeys.jnl last serial 103538 !=

Re: [CentOS] wildcard certificate

2018-06-15 Thread Gordon Messmer via CentOS
On 06/15/2018 06:11 PM, Keith Keller via CentOS wrote: You've already got the cert so it's not totally relevant, but in the future you can consider using Let's Encrypt. They won't distribute wildcard certs but unless you have lots of subdomains you can simply request a cert for every domain you

Re: [CentOS] CentOS7: Setting up ldap over TLS in kickstart file

2018-06-14 Thread Gordon Messmer
On 06/14/2018 01:01 AM, Patrick Begou wrote: In my kickstart file I use: auth  --useshadow --enableldaptls --enablecache  --passalgo=sha512 --enableldap --enableldapauth --ldapserver="ldaps://my.ldap.server.fr" --ldapbasedn=dc=my,dc=base,dc=dn Then in a post install script I download the

Re: [CentOS] Updated krb5 rpm package altered existing krb5.conf - No go

2018-06-14 Thread Gordon Messmer
On 06/14/2018 09:30 AM, m...@tdiehl.org wrote: On Thu, 14 Jun 2018, Richard Grainger wrote: I looked at the spec file in the source RPM for the krb5-libs package and it it has the correct %config(noreplace) directive next to that file in the %files section, so this is mysterious. I too can

Re: [CentOS] /etc/gai.conf fails to prefer IPv4 over IPv6 for NFS

2018-06-09 Thread Gordon Messmer
On 06/09/2018 07:51 AM, Steve Rikli wrote: I had hopes for gai.conf as the more universal solution, but apparently it's not useable here. gai.conf works as intended for most applications, here.  For example, if I uncomment the block of "precedence" lines, and swap between "10" and "100" for

Re: [CentOS] /etc/gai.conf fails to prefer IPv4 over IPv6 for NFS

2018-06-08 Thread Gordon Messmer
On 06/08/2018 03:23 PM, Steve Rikli wrote: This seems the most likely explanation, I'd just like to know for certain before I give up on gai.conf and restort to disabling IPv6 or other workarounds (e.g. /etc/nfsmount.conf). Have you tried specifying "proto=tcp" as a mount option?  That

Re: [CentOS] /etc/gai.conf fails to prefer IPv4 over IPv6 for NFS

2018-06-08 Thread Gordon Messmer
On 06/08/2018 10:42 AM, Steve Rikli wrote: I found posts from others in a similar situation, and proposed solutions included modifying /etc/gai.conf to use: precedence :::0:0/96 100 From my reading of that file, you'd need to uncomment all of the default precedence lines, and

Re: [CentOS] CentOS6: HELP! EFI boot fails after replacing disks...

2018-05-29 Thread Gordon Messmer
On 05/29/2018 06:33 AM, Robert Heller wrote: The UUID in the EFI boot options is 99E275E7-75A0-4B37-A2E6-C5385E600CB, which does not to match anything, but the system is only happy booting the old disk... And at this point, it will only boot in legacy mode off the old disk. That's what I

Re: [CentOS] CentOS6: HELP! EFI boot fails after replacing disks...

2018-05-28 Thread Gordon Messmer
On 05/28/2018 06:58 PM, Robert Heller wrote: At Mon, 28 May 2018 18:23:42 -0700 CentOS mailing list wrote: On 05/28/2018 03:25 PM, Robert Heller wrote: I tried to run efibootmgr, but it wants a model named efivars loaded, but there is no such module available.

Re: [CentOS] CentOS6: HELP! EFI boot fails after replacing disks...

2018-05-28 Thread Gordon Messmer
On 05/28/2018 06:20 PM, Robert Heller wrote: The UUID in the BIOS is NOT VFAT volume. It is something completely different. I have no clue what it is -- it does not correspond to anything I can find. It should be the UUID of the partition, not of the VFAT volume. The partition UUID is

Re: [CentOS] CentOS6: HELP! EFI boot fails after replacing disks...

2018-05-28 Thread Gordon Messmer
On 05/28/2018 03:25 PM, Robert Heller wrote: I tried to run efibootmgr, but it wants a model named efivars loaded, but there is no such module available. That's interesting.  Can you post the command and output where you see that? Also, post the output of "dmesg | grep efi:" and "ls

Re: [CentOS] Yum list installed lies to me

2018-05-27 Thread Gordon Messmer
On 05/26/2018 05:32 PM, Fred Smith wrote: however if I do: yum install wxWidgets wxWidgets-devel it says: Package wxGTK3-3.0.2-15.el7.x86_64 already installed and latest version Package wxGTK3-devel-3.0.2-15.el7.x86_64 already installed and latest version wxWidgets and wxGTK3 are the same

Re: [CentOS] New mail server slow connecting to web server

2018-05-25 Thread Gordon Messmer
On 05/24/2018 09:10 PM, Gary Stainburn wrote: name resolution isn't the problem as I can nslookup both ways without problems Can you provide more detail here regarding what tests you performed?  Long delays are usually a timeout on a reverse DNS lookup (that is, a PTR lookup) on the

Re: [CentOS] Network Performance Update

2018-05-06 Thread Gordon Messmer
On 05/06/2018 06:20 AM, Chris Olson wrote: Thanks for the follow up message regarding measurement of network performance.  we are checking into nc and how it might be used. The man page for "nc" has specific examples of sending a file over TCP. We have not found iperf on any of our systems,

Re: [CentOS] Network Performance Update

2018-05-06 Thread Gordon Messmer
On 05/04/2018 07:56 AM, Chris Olson wrote: Bottom Line: Mystery partially solved. What is left is why the /dev/null destination for the data does not work. ... Attempting Transfer Of dd Created Output To /dev/null - ftp> ftp> put "|dd

Re: [CentOS] Samba HOWTO wiki bug: chcon samba_share_t

2018-05-05 Thread Gordon Messmer
On 05/04/2018 11:15 PM, Warren Young wrote: On May 5, 2018, at 12:04 AM, Gordon Messmer <gordon.mess...@gmail.com> wrote: On 05/04/2018 04:05 PM, Warren Young wrote: Alright, then why do I get that error when I give the command from this morning’s wiki text, and how do I avoid it? Y

Re: [CentOS] Samba HOWTO wiki bug: chcon samba_share_t

2018-05-05 Thread Gordon Messmer
On 05/04/2018 04:05 PM, Warren Young wrote: On May 4, 2018, at 4:11 PM, Louis Lagendijk wrote: The comment is correct: chcon will not survive a relabel. You need to update the database first (semanage fcontext) and then let a relabel apply the new context. Alright, then why

Re: [CentOS] Samba HOWTO wiki bug: chcon samba_share_t

2018-05-04 Thread Gordon Messmer
On 05/04/2018 12:03 PM, Warren Young wrote: …there is a command down in section 2 that gives an error here on CentOS 7: $ sudo semanage fcontext –at samba_share_t /path/to/share …noise noise noise… semanage: error: unrecognized arguments: samba_share_t /path/to/share What is

Re: [CentOS] centos7: pptpd vpn problem: mppe_decompress[0]: FLUSHED bit not set in stateless mode!

2018-03-26 Thread Gordon Messmer
On 03/26/2018 04:03 AM, Dario Lesca wrote: I try to setup a PPTP VPN server on Centos 7 If you have ANY other option, do not use PPTP.  If your client router supports IPSec, it will be vastly more secure. PPTP's encryption handshake uses a key derived from the password.  It is extremely

Re: [CentOS] How insecure is NIS ? Possible alternatives ?

2018-03-26 Thread Gordon Messmer
On 03/26/2018 02:59 AM, Nicolas Kovacs wrote: I gave FreeIPA a spin a while back. I installed it on a sandbox server, and from what I recall, it pulled in a tsunami of dependencies, and first thing it wanted to replace my Dnsmasq with BIND... so I didn't look much further. FreeIPA should be

Re: [CentOS] SELinux breaks Squid's ssl_crtd helper

2018-03-10 Thread Gordon Messmer
On 03/09/2018 05:18 AM, Nicolas Kovacs wrote: Do allow this access for now by executing: # ausearch -c 'ssl_crtd' --raw | audit2allow -M my-sslcrtd # semodule -i my-sslcrtd.pp Unfortunately the suggested solution doesn't work Start by running "ausearch -c 'ssl_crtd' --raw" by itself.  Try to

Re: [CentOS] Going back to a minimal system : strange problem

2018-03-01 Thread Gordon Messmer
On 02/26/2018 09:25 AM, Nicolas Kovacs wrote: I wonder if it might work to use a yum transaction, in which you first remove everything (which avoids the need for the list entirely), then adds the minimal package set, and then commits the transaction... I only have a very vague notion of yum

Re: [CentOS] RADIUS

2018-03-01 Thread Gordon Messmer
On 03/01/2018 09:26 AM, hw wrote: I was asking for documentation telling me how RADIUS can be used, not only that it can be used. RADIUS is a backend component of 802.1x and WPA2 Enterprise.  You appear to be looking for information on how to use those two.  If you look for documentation on

Re: [CentOS] RADIUS

2018-03-01 Thread Gordon Messmer
On 03/01/2018 03:06 AM, hw wrote: It is illogical to lump all network access together into a single category. ... If your device can communicate with a switch, even for the purpose of authenticating, then it has network access. The device has access to the switch which, depending on what

Re: [CentOS] RADIUS

2018-02-27 Thread Gordon Messmer
On 02/27/2018 08:21 AM, hw wrote: Gordon Messmer wrote: I've never seen anyone actually do this, but there's an article discussing it.  It is noteworthy that this requires enforcement in the client OS, as well as the switch. The article itself says that what it is describing only works

Re: [CentOS] Going back to a minimal system : strange problem

2018-02-26 Thread Gordon Messmer
On 02/26/2018 06:03 AM, Nicolas Kovacs wrote: This script worked perfectly for some time. But now it seems like something has changed somewhere under the hood. Because when I run it now, the script fails at the final package removal stage. I would hazard to guess that the flaw is simply that

Re: [CentOS] RADIUS

2018-02-23 Thread Gordon Messmer
On 02/23/2018 03:22 AM, hw wrote: I´m not sure how to imagine it.  It would be nice if every device connecting to the network, wirelessly or otherwise, had to be authenticated --- and not only the device, but also the user(s) using it.

Re: [CentOS] RADIUS

2018-02-22 Thread Gordon Messmer
On 02/22/2018 03:22 AM, hw wrote: Gordon Messmer wrote: Look for documentation on 802.11x authentication for the specific client you want to authenticate. Thanks, I figured it is what I might need to look into.  How about a client that uses PXE boot? Provide PXE (dhcp, dns, tftp

Re: [CentOS] RADIUS

2018-02-17 Thread Gordon Messmer
On 02/14/2018 08:37 AM, hw wrote: Then what?  How do I make it so that the users are actually able to authenticate? Look for documentation on 802.11x authentication for the specific client you want to authenticate. WiFi is pretty straightforward.  You're probably accustomed to

Re: [CentOS] virt-manager change to bridged networking on CentOS 7.4

2018-01-23 Thread Gordon Messmer
On 01/22/2018 05:57 AM, Jerry Geis wrote: I have virt-manager running just fine currently using NAT. I want to "change" it to bridged network. The GUI is not letting me change anything on the network section. First, create the bridged network device, if you don't have one (where "eth0" is

Re: [CentOS] GUI/X11 login and shells other than bash?

2017-12-16 Thread Gordon Messmer
On 12/15/2017 10:24 AM, Valeri Galtsev wrote: if they attempt to log in just by giving their UNIX username, their X11 session "crashes", meaning that after attempting to start, it just trows one back to GUI/X11 login screen. Log in over ssh and run "journalctl -f" while such a user attempts

Re: [CentOS] Spamassassin vs. SELinux trouble

2017-12-12 Thread Gordon Messmer
On 12/12/2017 04:37 AM, Nicolas Kovacs wrote: Spamassassin has been working nicely on my main server running CentOS 7 and Postfix. SELinux is activated (Enforcing). ... SELinux is preventing /usr/bin/perl from 'read, write' accesses on the file /var/log/spamassassin/.spamassassin/bayes_toks. ...

Re: [CentOS] time foo

2017-12-01 Thread Gordon Messmer
On 12/01/2017 08:49 AM, hw wrote: # time foo real    43m39.841s user    15m31.109s sys 0m44.136s Almost 30 minutes have disappeared, but it actually took about that long, so what happened? I may misunderstand your question, but "time" is provided by the bash shell.  It may be provided

[CentOS] Accessing KRB5 NFS from local system accounts

2017-11-30 Thread Gordon Messmer
I recently noticed that spamassassin (running as the local "daemon" account) will hang some of the time when processing messages, and tracked it to the process attempting to access ~user/.spamassassin/user_prefs.  I believe that should return an access failure, but sometimes the process stalls

Re: [CentOS] File access in Apache 2.4

2017-11-23 Thread Gordon Messmer
On 11/23/2017 06:03 AM, Peter Eckel wrote: 1. Create a directory named ... Or you could just run "systemctl edit httpd.service" like I suggested two days ago.  :) ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] File access in Apache 2.4 (clarification)

2017-11-21 Thread Gordon Messmer
On 11/21/2017 08:42 AM, david wrote: SELINUX is disabled. ... Any suggestions? Yeah, https://stopdisablingselinux.com/ Also, you *could* run "systemctl edit httpd.service" and enter two lines: [Service] PrivateTmp=false ... if you specifically need to share /tmp.  The alternative is

Re: [CentOS] semi-OT:apcupsd

2017-11-17 Thread Gordon Messmer
On 11/17/2017 09:46 AM, m.r...@5-cent.us wrote: I started looking at that last year... and could not find, in its documentation, how to set up almost all of what we have: APC rackmount UPSes with APC's weired RJ-45-toUSB cable. APCUPSd made that very easy, and was, in fact, the default

Re: [CentOS] gnome boot problem

2017-11-16 Thread Gordon Messmer
On 11/16/2017 02:01 PM, dominic adair-jones wrote: On Thu, Nov 16, 2017, 4:55 PM Gordon Messmer <gordon.mess...@gmail.com> wrote: Alt+d will switch to the text output of the init process. Press that combo as soon as you see the boot animation. Not understanding. At what point in th

Re: [CentOS] CentOS 7 "Set Up Enterprise Login" after update and reboot

2017-11-16 Thread Gordon Messmer
On 11/16/2017 01:31 PM, Valeri Galtsev wrote: But before giving login screen upon (re)boot it tries to walk you through set of screens similar to first login to newly created account. Try removing the "firstboot" package or run "/bin/systemctl disable firstboot-graphical.service"

Re: [CentOS] gnome boot problem

2017-11-16 Thread Gordon Messmer
On 11/16/2017 01:28 PM, dominic adair-jones wrote: now everytime i start my server its sits at the grey gnome background. Alt+d will switch to the text output of the init process.  Press that combo as soon as you see the boot animation. ___

Re: [CentOS] How to blacklist a device driver (sysemd)

2017-11-16 Thread Gordon Messmer
On 11/16/2017 08:59 AM, Frank Thommen wrote: Thanks for the hint.  However as this should only be a temporary measure and needs to be done on ca. 100 hosts I'm not sure if we want to go through the hassles.  Deploying a textfile is no problem, but creating new initrds for differing

Re: [CentOS] Samba help

2017-11-15 Thread Gordon Messmer
On 11/14/2017 06:11 PM, david wrote: # Samba Configuration [global] [STUFF]  force user = melinux  guest ok   = yes  path   = /home/samba-share  write list = melinux You may need to enable the samba_enable_home_dirs option:     setsebool -P samba_enable_home_dirs=1 You

Re: [CentOS] How to blacklist a device driver (sysemd)

2017-11-15 Thread Gordon Messmer
On 11/15/2017 10:35 AM, Frank Thommen wrote: I tried with the files   /etc/modprobe.d/blacklist   /etc/modprobe.d/blacklist.conf and with entries   blacklist mlx5_core   blacklist mlx5_ib The "blacklist" entries prevent a module being loaded by its alias (typically a PCI ID), but not from

Re: [CentOS] C6 and xfce

2017-11-14 Thread Gordon Messmer
On 11/14/2017 05:02 AM, mark wrote: You left out the details of what you actually did.  Should we guess? :) Excuse me, but there's no need for insults. That was intended to be ribbing in good humor.  It was not intended to be insulting.  I apologize. You know perfectly well that I'm a

Re: [CentOS] C6 and xfce

2017-11-13 Thread Gordon Messmer
On 11/13/2017 11:26 AM, m.r...@5-cent.us wrote: Did I miss something? You left out the details of what you actually did.  Should we guess?  :) My guess is: you ran "startx".  That starts a session as the user that runs "startx" Instead, you should be booting the graphical target (edit

Re: [CentOS] Possibly [OT] ansible vmware inventory plugin

2017-11-09 Thread Gordon Messmer
On 11/09/2017 04:01 AM, Mark Haney wrote: Yeah, it's the Extras repo Ansible package. So, my next (probably stupid) question, is there a way to get the vmware_inventory plugin setup on my system? There are useful examples here:

Re: [CentOS] Possibly [OT] ansible vmware inventory plugin

2017-11-08 Thread Gordon Messmer
On 11/08/2017 10:37 AM, Mark Haney wrote: The problem is that the vmware_inventory.py script didn't come with 2.4 in CentOS 7, even though it's in the stable branch.  I'm curious, is this a deliberate omission on the CentOS maintainers part? Both the Fedora package and the vendor's package

Re: [CentOS] Centos and xen network bridge issue

2017-11-01 Thread Gordon Messmer
On 11/01/2017 07:55 AM, Scott Gennari wrote: /etc/xen/scripts/network-bridge-pcl #/bin/sh dir=$(dirname "$0") "$dir/network-bridge" "$@" vifnum=1 netdev=eth2 bridge=xen-dmz2 "$dir/network-bridge" "$@" vifnum=3 netdev=eth0 bridge=xen-dmz1 Do you get any error output when you run:

Re: [CentOS] Maria 10 breaks unixodbc mysql connector

2017-10-31 Thread Gordon Messmer
On 10/31/2017 12:23 PM, John Harragin wrote: However my asterisk server is still running and it still has that file open. I don't know if this keeps new processes referencing the .so file that is open in ram. No.  New processes will use the .so that they find in their library path, in the

Re: [CentOS] Gulliver

2017-10-31 Thread Gordon Messmer
On 10/31/2017 12:06 PM, Warren Young wrote: This problem is*solved*. Well, yes.  But if endian data is the problem, then it's pretty clear that none are in use, and I'm suggesting the absolute minimum-effort solution to the problem. ___ CentOS

Re: [CentOS] Maria 10 breaks unixodbc mysql connector

2017-10-31 Thread Gordon Messmer
On 10/30/2017 12:22 PM, John Harragin wrote: [root@ec-ast yum.repos.d]# ldd /usr/lib64/libmyodbc5w.so | grep -iE "my|maria" libmysqlclient.so.18 => /usr/lib64/mysql/libmysqlclient.so.18 (0x7f3dfb34c000) [root@ec-ast yum.repos.d]# repoquery -l MariaDB-server MariaDB-client MariaDB-commo

Re: [CentOS] Gulliver

2017-10-31 Thread Gordon Messmer
On 10/30/2017 10:07 AM, Chris Olson wrote: All files are loaded or moved from one machine to another with sftp. The intern noticed right a way that the documents will transfer perfectly from our PPC and SPARC machines to our Intel/CentOS platforms.  The raw data files, not so much.  There is

Re: [CentOS] [OT] Bash help

2017-10-26 Thread Gordon Messmer
On Wed, Oct 25, 2017 at 9:47 AM, Warren Young wrote: > > This screams out for associative arrays. (Also called hashes, dictionaries, > maps, etc.) > > That does limit you to CentOS 7+, or maybe 6+, as I recall. CentOS 5 is > definitely out, as that ships Bash 3, which

Re: [CentOS] Firefox Sync Server 1.5 on CentOS 7

2017-10-23 Thread Gordon Messmer
On 10/22/2017 10:09 PM, Nicolas Kovacs wrote: Any comments so far? As far as I can see, you created a /usr/local/lib/sync-1.5/ directory and built this stuff there. As root or as a different user? Any custom permissions there? The installation can be performed as a non-apache user, providing

Re: [CentOS] Firefox Sync Server 1.5 on CentOS 7

2017-10-22 Thread Gordon Messmer
On 10/22/2017 09:40 AM, Nicolas Kovacs wrote: Before I go into further details, has anybody here managed to get this thing to run on CentOS ? Yes, I use the following httpd configuration file: WSGIProcessGroup sync WSGIPassAuthorization On WSGIDaemonProcess sync user=apache group=apache

[CentOS] serial guests not booting until console attached

2017-10-13 Thread Gordon Messmer
Since the update to 7.4.1708, I've got one KVM host that behaves very similarly to: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686524 These guests were installed with (snipped for brevity): virt-install --name xxx --memory 2048 --vcpus 2 --location xxx --disk xxx --disk xxx --network

Re: [CentOS] how to prevent files and directories from being deleted?

2017-10-04 Thread Gordon Messmer
On 10/04/2017 04:54 AM, Mark Haney wrote: Why is it so hard for people to understand that var/run IS NOT PERSISTENT and was never meant to be?  Do they not teach basic Unix concepts anymore? http://www.pathname.com/fhs/pub/fhs-2.3.html#VARRUNRUNTIMEVARIABLEDATA While FHS notes that *files*

Re: [CentOS] how to prevent files and directories from being deleted?

2017-10-04 Thread Gordon Messmer
On 10/04/2017 01:23 AM, Gary Stainburn wrote: There is a solution that saves /var/run to disk at shutdown and restores it at bootup but I can't remember what it is. The simplest solution that comes to mind at 7:30am is simply bind mounting a directory that's persistent.  You'll still need to

Re: [CentOS] LVM not activating on reboot

2017-10-03 Thread Gordon Messmer
On 09/30/2017 05:25 PM, Duncan Brown wrote: No joy after adding the kernel option, exactly the same issue Is /etc/mdadm.conf up to date?  Run "mdadm --detail --scan" to get the information you need, and either replace the lines in mdadm.conf or add the one that's missing.  You might need to

Re: [CentOS] LVM not activating on reboot

2017-09-30 Thread Gordon Messmer
On 09/30/2017 08:30 AM, Duncan Brown wrote: However on a reboot, boot fails if I add that entry to fstab: 'Timed out waiting for device dev-mapper-vg03\x2dstorage.device' I then have to activate it again with vgchange. I'm guessing I'm going to need a grub option, or do something with dracut

Re: [CentOS] X-Window system ?

2017-09-29 Thread Gordon Messmer
On 09/29/2017 04:12 AM, Günther J. Niederwimmer wrote: I have a big Problem to install a KVM Client with virt-manager, after Update to CentOS 7.4 it is not more possible to start the virt-manager:-(. Specifically what happens when you run the "virt-manager" command?  (I typically run

Re: [CentOS] more selinux problems ...

2017-09-24 Thread Gordon Messmer
On Sat, Sep 23, 2017 at 5:37 AM, hw wrote: > how do I allow lighttpd access to a directory like this: > > dr-xrwxr-x. lighttpd example unconfined_u:object_r:samba_share_t:s0 > files_articles setenforce permissive tail -f /var/log/audit/audit.log | grep AVC | audit2allow -m ...

Re: [CentOS] Flush memory on a server?

2017-09-10 Thread Gordon Messmer
On 09/09/2017 07:06 PM, Keith Keller wrote: As long as your system isn't thrashing swap it's totally fine. From what you've written it doesn't sound like you're thrashing. I should have mentioned earlier:  Run "vmstat 1" and watch the "si" and "so" columns to watch paging activity.

Re: [CentOS] Flush memory on a server?

2017-09-09 Thread Gordon Messmer
On 09/09/2017 04:43 AM, Nicolas Kovacs wrote: I read up a bit on RAM consumption, and now I wonder if flushing the memory cache regularly is a good idea. Typically, no.  Whatever pages of memory the system has swapped out are pages that the kernel's counters indicate are less often used than

Re: [CentOS] cyrus spool on btrfs?

2017-09-08 Thread Gordon Messmer
On 09/08/2017 11:06 AM, hw wrote: Make a test and replace a software RAID5 with a hardware RAID5.  Even with only 4 disks, you will see an overall performance gain.  I´m guessing that the SATA controllers they put onto the mainboards are not designed to handle all the data --- which gets

Re: [CentOS] login case sensitivity

2017-09-07 Thread Gordon Messmer
On 09/07/2017 08:11 AM, Stephen John Smoogen wrote: This was always problematic because DNS hostnames and email addresses in the RFC standards were case insensitive Not quite.  SMTP is required to treat the "local-part" of the RCPT argument as case-sensitive, and to preserve case when

Re: [CentOS] more questions on setting up autofs on C7

2017-08-25 Thread Gordon Messmer
On 08/25/2017 08:32 AM, Fred Smith wrote: Don't know of anything in mate that would do th at, but I'll do some digging around. You can always look the hard/slow way: find ~ -type f -exec fgrep /mnt/syno {} + That command should locate any files that refer to the old mount locations.

Re: [CentOS] more questions on setting up autofs on C7

2017-08-25 Thread Gordon Messmer
On 08/24/2017 06:55 PM, Fred Smith wrote: if I click one of those then run systemctl status autofs I see one of those errors show up. If I click on it again, there are two errors. if I click on the other one, a third error shows up. Does your file manager have some other link to the old

Re: [CentOS] more questions on setting up autofs on C7

2017-08-23 Thread Gordon Messmer
On 08/23/2017 02:31 PM, Fred Smith wrote: do I need to reboot or something to get autofs to forget about them being in /mnt? No, you need to figure out what program, not autofs, is trying to access /mnt/syno-fredex and /mnt/syno-public. You moved the mounts, but some program still expects

Re: [CentOS] more questions on setting up autofs on C7

2017-08-23 Thread Gordon Messmer
On 08/23/2017 01:06 PM, Fred Smith wrote: so, the two lines saying: Key "syno-fredex" or key "syno-public" appear whenever I try to access one of those two filesystems. I AM NOT USING AUTOFS TO MANAGE THEM. You're using autofs to manage /mnt, so any time that *any* process attempts to access

Re: [CentOS] more questions on setting up autofs on C7

2017-08-23 Thread Gordon Messmer
On 08/21/2017 07:23 PM, Fred Smith wrote: so, in my case, the USB drive contains an xfs filesystem. would I do something like this: in /etc/auto.master: backup /etc/auto.backup and in /etc/auto.backup backup -fstype=xfs,defaults,noauto,users :UUID=09bfc97a-8db2-46de-b4dd-427da19b114 In

Re: [CentOS] Problem with softwareraid

2017-08-20 Thread Gordon Messmer
On 08/19/2017 12:06 PM, Mr Typo wrote: sda 8:00 1.8T 0 disk ├─sda1 8:10 1.8T 0 part └─WDC_WD20EFRX-68AX9N0_WD-WMC1T2547260 253:30 1.8T 0 mpath └─WDC_WD20EFRX-68AX9N0_WD-WMC1T2547260p1 253:8

Re: [CentOS] Problem with softwareraid

2017-08-18 Thread Gordon Messmer
On 08/18/2017 12:35 PM, Mr Typo wrote: mdadm: /dev/sda1 is busy - skipping mdadm: /dev/sdb1 is busy - skipping mdadm: /dev/sdc1 is busy - skipping mdadm: /dev/sdd1 is busy - skipping That's plenty strange. The output of "lsblk" might tell you why those devices are busy.

Re: [CentOS] Centos 7 specific cure for Spamassassin DNS lookup problem

2017-08-14 Thread Gordon Messmer
On 08/14/2017 01:38 AM, Gary Stainburn wrote: I will add the code, although updating RPM contents is one of the things I was trying to avoid. "systemctl edit" creates a "drop-in" that overrides a portion of the vendor-provided file. It exists specifically to avoid editing rpm-provided

Re: [CentOS] Kernel:[Hardware Error]: use of vacuum

2017-08-13 Thread Gordon Messmer
On 08/13/2017 05:18 AM, ken wrote: Also, cowboys scoff, but I always wear a grounded wrist strap when handling electronics. It's a good idea, especially in low-humidity climates. Also noteworthy: the air moving through a hose can cause a vacuum's hose or attachment to build up a static

Re: [CentOS] Btrfs going forward, was: Errors on an SSD drive

2017-08-11 Thread Gordon Messmer
On 08/11/2017 10:52 AM, hw wrote: Software RAID with mdadm is a bad idea because it comes with quite some performance loss. That's not usually the case in my experience. Battery-backed write caches make benchmarks like bonnie++ look amazing, but in real workloads I typically see better

Re: [CentOS] Centos 7 specific cure for Spamassassin DNS lookup problem

2017-08-10 Thread Gordon Messmer
On 08/10/2017 01:21 AM, Gary Stainburn wrote: I have the following error message in my /var/log/spamd spf: lookup failed: available_nameservers: No DNS servers available! Try starting spamassassin later. Run "systemctl edit spamassassin.service" and insert two lines: [Unit]

Re: [CentOS] firewalld and LISTEN

2017-07-27 Thread Gordon Messmer
On 07/27/2017 06:36 PM, 望月忠雄 wrote: But by ss -nat, IPV4 443 is not listend. How can I fix? # ss -nat | grep LISTEN | grep 443 LISTEN 0 128 :::443 :::* By default, Linux processes that listen on an IPv6 port will also listen on the IPv4 port (when no

Re: [CentOS] Cron sending to root after changing MAILTO

2017-07-20 Thread Gordon Messmer
On 07/20/2017 01:03 AM, isdtor wrote: postfix only uses the aliases map for local delivery. If the recipient email address is fully qualified, local delivery is not even in the picture ... postfix is not the problem here as the log shows ... to=, orig_to= ... I read it the

Re: [CentOS] Cron sending to root after changing MAILTO

2017-07-19 Thread Gordon Messmer
On 07/19/2017 02:42 PM, Chad Cordero wrote: I have “root:ecssupp...@csusb.edu” in my /etc/aliases file already. Did you run "newaliases"? ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7, NM, and IPv6

2017-07-14 Thread Gordon Messmer
On 07/12/2017 04:22 PM, mark wrote: On 07/12/17 12:09, Gordon Messmer wrote: On 07/12/2017 07:13 AM, m.r...@5-cent.us wrote: 4. It appears to try, several times, and then give up - as our manager puts it, "I to renew the lease", "Here it is","Nope,

Re: [CentOS] CentOS 7, NM, and IPv6

2017-07-14 Thread Gordon Messmer
On 07/12/2017 04:22 PM, mark wrote: On 07/12/17 12:09, Gordon Messmer wrote: On 07/12/2017 07:13 AM, m.r...@5-cent.us wrote: 4. It appears to try, several times, and then give up - as our manager puts it, "I to renew the lease", "Here it is","Nope,

Re: [CentOS] Postfix fails after reboot

2017-07-14 Thread Gordon Messmer
On 07/13/2017 02:26 PM, Chad Cordero wrote: My question is, should I modify my After line in the “[Unit]” section of my postfix.service file to read “After=syslog.target network.target opendkim.service saslauthd.service” or is there a better way to accomplish this? Use "systemctl edit

Re: [CentOS] Distribution of Commercial RPM

2017-07-12 Thread Gordon Messmer
On 07/12/2017 01:20 AM, david allan finch wrote: Is there a location to upload paid for RPM for distrubution, ie a store for CentOS? Not that I'm aware of. Is there a discription of how to create your own RPM repository for distrubution? This could be documented a little better... You

Re: [CentOS] CentOS 7, NM, and IPv6

2017-07-12 Thread Gordon Messmer
On 07/12/2017 07:13 AM, m.r...@5-cent.us wrote: 4. It appears to try, several times, and then give up - as our manager puts it, "I to renew the lease", "Here it is","Nope, don't like that, try again", and eventually, after 4 or 5 or so tries, gives up. NM tends to

Re: [CentOS] System Start-Up Issue Progress

2017-07-04 Thread Gordon Messmer
On 07/04/2017 02:17 PM, Chris Olson wrote: The actual system has totally legitimate names for domain and host. What actually happened during the system update is still being investigated. Your investigation should include: hostname dig +short $(hostname) host $(dig +short

Re: [CentOS] System Start-Up Issue Progress

2017-07-04 Thread Gordon Messmer
On 07/04/2017 09:21 AM, Chris Olson wrote: It remains a mystery what could have happened during a standard yum update of the system to cause this domain and/or host related sendmail issue. Run "hostname". Has the hostname changed? Run "ls -l /etc/hosts /etc/resolv.conf". Have those files

Re: [CentOS] System Start-Up Issue

2017-07-03 Thread Gordon Messmer
On 07/03/2017 05:07 AM, Chris Olson wrote: A progress bar at the bottom of the start-up screen never reaches completion. Press "alt+d" on the keyboard to disable the graphical (or text) progress bar and view the console output of the startup sequence.

Re: [CentOS] rsync and cause/source of an empty file

2017-07-01 Thread Gordon Messmer
On 06/30/2017 01:42 PM, James B. Byrne wrote: The setup is somewhat complicated in that the VAN will not permit direct rsync access and so we establish the link via sshfs and then mount remote location as local. sshfs doesn't seem to preserve/transmit ctime, so rsync won't be able to

Re: [CentOS] [Fwd: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?]

2017-07-01 Thread Gordon Messmer
On 06/30/2017 08:47 AM, Dario Lesca wrote: My first take is that this doesn't represent a very serious threat. Do you disagree? The module doesn't represent an unknown security flaw, so my inclination is to say "no." I'd also note that if your systems aren't extremely old, they probably

Re: [CentOS] mdraid doesn't allow creation: device or resource busy

2017-07-01 Thread Gordon Messmer
On 06/29/2017 05:06 PM, adam_kalisz wrote: Do you have any ideas? What logs/ information should I provide if you want to have a look into this. Run "vgs" to see if the drives brought up an old volume group. Run "pvs" to see if they were imported into the volume group you were already

<    1   2   3   4   5   6   7   8   9   10   >