I have installed CFMX 6.1 on FC4.  No selinux but I did install iptables.  I
just modified the firewall rules before I installed CF.

No problems here.

Mike

-----Original Message-----
From: Lee Foster [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, August 30, 2005 6:54 PM
To: CF-Linux
Subject: Installing CFMX 6.1 on Fedora 4

Ok, I've been trying to install ColdfusionMX 6.1 on at rebuilt server that
it used to run on before a hard drive crashed.  I loaded it under Fedora 2
orginally and have upgraded it over time.  Applications are something that
we just reload but the database and files are backed up.  I've done alot of
reading on the problems others have stated.  So far there wasn't a clear
answer anywhere.  The version I'm trying to reload is Fedora 4 which it was
run before the drive failure as a clean install.

I saw something from talking tree about adding selinux=0 to the kernel line;
didn't work.  Tried to change the line in SELinux conf to disable; no go.  I
tried to removing the Selinux and IPtables from the system and kernel;
didn't work.  I tried to customize the OS to a large extend minus a handful
of areas that I left alone.  Either was thinking about using it later or
just left it because I wasn't sure at the time.

I tried to grep the process but didn't see cfusion in the list like I
normally do.  The errors that I was getting was about a firewall problem.

Could not connect to any JRun/ColdFusion servers on host localhost.
Possible causes:
o Server not running
  -Start Macromedia JRun4 or ColdFusion MX server
o Server running
  -JNDI listen port in jndi.properties blocked by TCP/IP filtering or
firewall
   on server
  -host restriction in security.properties blocking communication with
server

I reloaded SELinux and IPTables with logging enabled in the kernel and
learnt that it was looking for port 36148 on 127.0.0.1 and it was showing
reject in the firewall but the only rules was allow anything.  I loaded the
compat-libstdc++-33-3.2.3-47 and compat-libstdc++-296-2.96-132 on the off
chance it could have been a lib probem; didn't work.

Even tried to patch ColdfusionMX to the latest patch from Macromedia; no go.
I have ended up with a backup web server that went down because of a hard
disk crash and a primary web server that corrupted on upgrade first.  On the
off chance I missed something; high chance due to lack of sleep.  I'll
include what can think of so maybe the simple answer that I'm missing will
be clear to someone else.

Process list:

  PID TTY      STAT   TIME COMMAND
    1 ?        S      0:02 init [3]                   
    2 ?        S      0:00 [migration/0]
    3 ?        SN     0:00 [ksoftirqd/0]
    4 ?        S      0:00 [migration/1]
    5 ?        SN     0:00 [ksoftirqd/1]
    6 ?        S<     0:00 [events/0]
    7 ?        S<     0:00 [events/1]
    8 ?        S<     0:00 [khelper]
    9 ?        S<     0:00 [kthread]
   28 ?        S<     0:00 [kblockd/0]
   29 ?        S<     0:00 [kblockd/1]
   71 ?        S      0:00 [pdflush]
   72 ?        S      0:00 [pdflush]
   74 ?        S<     0:00 [aio/0]
   75 ?        S<     0:00 [aio/1]
   73 ?        S      0:00 [kswapd0]
  659 ?        S      0:00 [kseriod]
  685 ?        S<     0:00 [exec-osm/0]
  686 ?        S<     0:00 [exec-osm/1]
  690 ?        S      0:00 [kirqd]
  716 ?        S      0:00 [scsi_eh_0]
  774 ?        S      0:00 [kjournald]
  830 ?        S      0:00 [khubd]
 1691 ?        S<s    0:00 udevd
 1849 ?        S      0:00 [kjournald]
 1850 ?        S      0:00 [kjournald]
 1851 ?        S      0:00 [kjournald]
 1852 ?        S      0:00 [kjournald]
 2097 ?        Ss     0:00 syslogd -m 0
 2099 ?        Ss     0:00 klogd -x
 2137 ?        Ss     0:00 /usr/bin/perl /usr/libexec/usermin/miniserv.pl
/etc/u
 2142 ?        Ss     0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl
/etc/we
 2242 ?        Ss     0:00 /usr/sbin/automount --timeout=60 /misc file
/etc/auto
 2291 ?        Ss     0:00 /usr/sbin/automount --timeout=60 /net program
/etc/au
 2302 ?        Ss     0:00 nifd -n
 2344 ?        Ss     0:00 cupsd
 2399 ?        Ss     0:00 /usr/sbin/sshd
 2419 ?        S      0:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
 2502 ?        Ss     0:00 /usr/sbin/dovecot
 2523 ?        Ss     0:00 sendmail: accepting connections
 2533 ?        S      0:00 dovecot-auth
 2547 ?        Ss     1:12 /usr/bin/spamd -d -c -m5 -H
 2554 ?        Ss     0:00 gpm -m /dev/input/mice -t imps2
 2564 ?        Ss     0:01 /usr/sbin/httpd
 2575 ?        S<     0:00 [kauditd]
 2707 ?        S      0:00 spamd child
 2708 ?        S      0:00 spamd child
 2711 ?        S      0:00 spamd child
 2714 ?        S      0:00 spamd child
 2715 ?        S      0:00 spamd child
 2827 ?        Ss     0:00 crond
 2853 ?        Ss     0:00 smbd -D
 2855 ?        S      0:00 smbd -D
 2864 ?        Ss     0:00 winbindd
 2866 ?        S      0:00 winbindd
 2880 ?        Ss     0:00 /usr/sbin/atd
 2895 ?        Ss     0:00 cups-config-daemon
 2903 ?        Ss     0:01 hald --retain-privileges
 2914 ?        S      0:07 hald-addon-storage
 2930 tty1     Ss+    0:00 /sbin/mingetty tty1
 2931 tty2     Ss+    0:00 /sbin/mingetty tty2
 2932 tty3     Ss+    0:00 /sbin/mingetty tty3
 2933 tty4     Ss+    0:00 /sbin/mingetty tty4
 2934 tty5     Ss+    0:00 /sbin/mingetty tty5
 2935 tty6     Ss+    0:00 /sbin/mingetty tty6
 3034 ?        S      0:00 smbd -D
29610 ?        Ss     0:00 sshd: lee [priv] 
29640 pts/0    S      0:00 su -
29642 pts/0    S      0:00 -bash
30915 pts/0    R+     0:00 ps x

SELinux rules stat:

allow_execmem                     active
allow_execmod                     active
allow_execstack                   active
allow_ftpd_anon_write             inactive
allow_httpd_anon_write            inactive
allow_httpd_sys_script_anon_write inactive
allow_kerberos                    active
allow_rsync_anon_write            inactive
allow_saslauthd_read_shadow       inactive
allow_smbd_anon_write             inactive
allow_write_xshm                  inactive
allow_ypbind                      inactive
apmd_disable_trans                inactive
arpwatch_disable_trans            inactive
auditd_disable_trans              inactive
bluetooth_disable_trans           inactive
canna_disable_trans               inactive
cardmgr_disable_trans             inactive
comsat_disable_trans              inactive
cupsd_config_disable_trans        inactive
cupsd_disable_trans               inactive
cupsd_lpd_disable_trans           inactive
cvs_disable_trans                 inactive
cyrus_disable_trans               inactive
dbskkd_disable_trans              inactive
dhcpc_disable_trans               inactive
dhcpd_disable_trans               inactive
dovecot_disable_trans             inactive
fingerd_disable_trans             inactive
ftp_home_dir                      active
ftpd_disable_trans                inactive
ftpd_is_daemon                    active
gssd_disable_trans                inactive
hald_disable_trans                inactive
hotplug_disable_trans             inactive
howl_disable_trans                inactive
hplip_disable_trans               inactive
httpd_builtin_scripting           active
httpd_can_network_connect         inactive
httpd_disable_trans               active
httpd_enable_cgi                  active
httpd_enable_homedirs             active
httpd_ssi_exec                    active
httpd_suexec_disable_trans        inactive
httpd_tty_comm                    inactive
httpd_unified                     active
inetd_child_disable_trans         inactive
inetd_disable_trans               inactive
innd_disable_trans                inactive
kadmind_disable_trans             inactive
klogd_disable_trans               inactive
krb5kdc_disable_trans             inactive
ktalkd_disable_trans              inactive
lpd_disable_trans                 inactive
mysqld_disable_trans              inactive
named_disable_trans               inactive
named_write_master_zones          inactive
nfs_export_all_ro                 active
nfs_export_all_rw                 active
nfsd_disable_trans                inactive
nmbd_disable_trans                inactive
nscd_disable_trans                inactive
ntpd_disable_trans                inactive
portmap_disable_trans             inactive
postgresql_disable_trans          inactive
pppd_can_insmod                   inactive
pppd_disable_trans                inactive
pppd_for_user                     inactive
pptp_disable_trans                inactive
privoxy_disable_trans             inactive
ptal_disable_trans                inactive
radiusd_disable_trans             inactive
radvd_disable_trans               inactive
read_default_t                    active
rlogind_disable_trans             inactive
rpcd_disable_trans                inactive
rsync_disable_trans               inactive
samba_enable_home_dirs            inactive
saslauthd_disable_trans           inactive
slapd_disable_trans               inactive
smbd_disable_trans                inactive
snmpd_disable_trans               inactive
squid_connect_any                 inactive
squid_disable_trans               inactive
stunnel_disable_trans             inactive
stunnel_is_daemon                 inactive
syslogd_disable_trans             inactive
system_dbusd_disable_trans        inactive
telnetd_disable_trans             inactive
tftpd_disable_trans               inactive
udev_disable_trans                inactive
use_nfs_home_dirs                 inactive
use_samba_home_dirs               inactive
uucpd_disable_trans               inactive
winbind_disable_trans             inactive
ypbind_disable_trans              active
ypserv_disable_trans              inactive
zebra_disable_trans               inactive

IPTable Policy:

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

IP errors in the message log:

PROTO=6 127.0.0.1:36148 127.0.0.1:35352 L=60 S=0x00 I=9353 F=0x4000 T=64
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  
skb: pf=2 (unowned) dev=lo len=60
PROTO=6 127.0.0.1:35352 127.0.0.1:36148 L=60 S=0x00 I=0 F=0x4000 T=64   
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  
skb: pf=2 (unowned) dev=lo len=52
PROTO=6 127.0.0.1:36148 127.0.0.1:35352 L=52 S=0x00 I=9355 F=0x4000 T=64
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  
skb: pf=2 (unowned) dev=lo len=52
PROTO=6 127.0.0.1:36148 127.0.0.1:35352 L=52 S=0x00 I=9357 F=0x4000 T=64
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  
skb: pf=2 (unowned) dev=lo len=52
PROTO=6 127.0.0.1:35352 127.0.0.1:36148 L=52 S=0x00 I=61103 F=0x4000 T=6
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  
skb: pf=2 (unowned) dev=lo len=52
PROTO=6 127.0.0.1:36148 127.0.0.1:35352 L=52 S=0x00 I=9359 F=0x4000 T=64
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  
skb: pf=2 (unowned) dev=lo len=60
PROTO=6 127.0.0.1:35353 127.0.0.1:2900 L=60 S=0x00 I=15609 F=0x4000 T=64
ip_local_deliver: bad skb: PRE_ROUTING LOCAL_IN LOCAL_OUT POST_ROUTING  



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Stay Ahead of Hackers - Download ZoneAlarm Pro
http://www.houseoffusion.com/banners/view.cfm?bannerid=65

Message: http://www.houseoffusion.com/lists.cfm/link=i:14:4043
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/14
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:14
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.14
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to