Re: [CentOS] Help With Glade and C5 64-bit?
> maybe yum install glade2 ? > > yum search could be your friend Yep, yum was the first thing tried. Sorry I forgot to mention it. > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
On Wed, 2009-12-16 at 16:47 -0800, Peter Serwe wrote: > I didn't try compiling the SRPM. There is a thought in that. I have found that some F10-F12 srpm's (particularly command-line utility stuff) can be compiled on Centos with few or no changes required. You can't directly rebuild F11 and F12 srpms due to the change in the checksumming stuff, but extracting them and building a new srpm is pretty trivial. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
I did actually, try to compile IM from a tarball. Nailed all the dependencies except one or two, and ended up giving up for th easier, softer way. I didn't try compiling the SRPM. There is a thought in that. Peter On Wed, Dec 16, 2009 at 4:26 PM, Frank Cox wrote: > > On Wed, 2009-12-16 at 16:10 -0800, Peter Serwe wrote: > > > > The provider is coresense. For better or for worse. They do a lot of > > things stupidly, but it works, and for lack of a > > better option to suggest for a cart with a back-end that handles the > > things they do, it stays. > > Ok, then you either live with it or you fix it. > > Have you tried compiling an imagemagick srpm on Centos to see if that > fixes it? Your choice of srpm. Or perhaps compiling it directly from a > tarball? > -- > MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
On Wed, 2009-12-16 at 16:10 -0800, Peter Serwe wrote: > > The provider is coresense. For better or for worse. They do a lot of > things stupidly, but it works, and for lack of a > better option to suggest for a cart with a back-end that handles the > things they do, it stays. Ok, then you either live with it or you fix it. Have you tried compiling an imagemagick srpm on Centos to see if that fixes it? Your choice of srpm. Or perhaps compiling it directly from a tarball? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help With Glade and C5 64-bit?
Scott Ehrlich wrote: > I have a user with C5.4 64-bit, fully updated, performed a yum install > glade, it claimed to have installed everything, but we cannot get it > to run. Neither whereis nor locate revleal an executable. Have you tried rpm -ql glade | more? mark -- "The legitimate powers of government, extend to such acts only as are injurious to others. But it does me no injury for my neighbor to say there are twenty gods, or no God. It neither picks my pocket nor breaks my leg." -- Thomas Jefferson ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On Wednesday 16 December 2009 23:51:43 Jake Shipton wrote: > On 16/12/09 23:37, Marko Vojinovic wrote: > > On Wednesday 16 December 2009 21:52:05 Jake Shipton wrote: > >> Any machine I have that can run in x86_64, I normally install a x86_64 > >> OS, and recently, > >> I haven't found anything I need that is only i686. > > > > Skype? > > I knew someone would find something that isn't 64-bit, in fact, I was > waiting for it. :-p > > But, after a quick Google search, it's possible to run Skype on x86_64. > ;) just install the i686 libs, Yes, 86 of them, or so... (count is from Fedora 12, don't have CentOS handy here atm.) They seem to be the only thing that pollutes my nice&clean 64bit environment. ;-) > job done (apparently) :-) Sure, that's how I have it running now. :-) > PS: Seemingly, Your "Reply-To" makes my email client want to reply to > you only (Which I put back to CentOS instead) may cause others to also. > Just letting you know :-) Well, I usually send mail from one mail account and receive it on another, so I have set Reply-To header accordingly. Don't know how different clients behave when replying, though, but I didn't have any problems so far. :-) Best, :-) Marko ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
CentOS 5.2, [r...@pythagoras ~]# rpm -q ImageMagick ImageMagick-6.2.8.0-4.el5_1.1 On Wed, Dec 16, 2009 at 4:01 PM, Robert Heller wrote: > At Wed, 16 Dec 2009 15:16:00 -0800 CentOS mailing list > wrote: > > > > > > > > > I recently came across the need to convert jpg images with IM, did a > > standard install of "yum -y install ImageMagick" and found that > > images converted with CentOS's base port of IM would actually corrupt the > > images, yet using the same (albiet different version, different distro) > ^? > > software > > didn't corrupt the images at all. > > > > By corrupted, I mean, the bottom portion of the image under *some* > > webservers looked completely wrong, and had strange checkering of the > image > > in stripes across the bottom. > > > > At the time I had this problem, I took the issue to IM's forum, to no > > avail. I ended up just using it on a Debian machine instead. > > > Which version of CentOS? I use convert all of the time with CentOS 4.8, > using ImageMagick 6.0.7.1-20.el4 without any problems: > > sauron.deepsoft.com% rpm -q ImageMagick > ImageMagick-6.0.7.1-20.el4 > > *Exactly* which version of CentOS, ImageMagick? i386 or x86_64? > > > > > Peter > > > > -- > Robert Heller -- 978-544-6933 > Deepwoods Software-- Download the Model Railroad System > http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows > hel...@deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/ > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
I'd say that was true if the mystery server didn't serve images converted under Lenny just fine. In fact, it was argued during the issue that it wasn't our fault, that it works under a standard web server just fine. The fact remains, the Debian port of IM worked, the CentOS one didn't. I've already worked around the issue, I just do my conversions on Debian, being that I'm not really a Debian fanboy, I'm not terribly thrilled about maintaining a Debian install around, and I figured I'd ask. The provider is coresense. For better or for worse. They do a lot of things stupidly, but it works, and for lack of a better option to suggest for a cart with a back-end that handles the things they do, it stays. Peter On Wed, Dec 16, 2009 at 4:01 PM, Frank Cox wrote: > > On Wed, 2009-12-16 at 15:57 -0800, Peter Serwe wrote: > > I didn't notice the problem until it was hosted on a certain > > commercial storefront provider, under apache, I saw no problem. > > That suggests a problem with the way your "mystery software" is serving > the image rather than a problem with the image. Which points to a bug > in the "mystery software". > -- > MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
On Wed, 2009-12-16 at 15:57 -0800, Peter Serwe wrote: > I didn't notice the problem until it was hosted on a certain > commercial storefront provider, under apache, I saw no problem. That suggests a problem with the way your "mystery software" is serving the image rather than a problem with the image. Which points to a bug in the "mystery software". -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
At Wed, 16 Dec 2009 15:16:00 -0800 CentOS mailing list wrote: > > > > I recently came across the need to convert jpg images with IM, did a > standard install of "yum -y install ImageMagick" and found that > images converted with CentOS's base port of IM would actually corrupt the > images, yet using the same (albiet different version, different distro) ^? > software > didn't corrupt the images at all. > > By corrupted, I mean, the bottom portion of the image under *some* > webservers looked completely wrong, and had strange checkering of the image > in stripes across the bottom. > > At the time I had this problem, I took the issue to IM's forum, to no > avail. I ended up just using it on a Debian machine instead. Which version of CentOS? I use convert all of the time with CentOS 4.8, using ImageMagick 6.0.7.1-20.el4 without any problems: sauron.deepsoft.com% rpm -q ImageMagick ImageMagick-6.0.7.1-20.el4 *Exactly* which version of CentOS, ImageMagick? i386 or x86_64? > > Peter > -- Robert Heller -- 978-544-6933 Deepwoods Software-- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows hel...@deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On Wed, Dec 16, 2009 at 1:39 PM, Frank Cox wrote: > >> > I haven't found anything I need that is only i686. >> >> Skype? > > Actually, my contribution to your "list" would be acroread. The free > pdf readers still aren't up to the task in some cases, sadly. > > Interesting that it's the closed-source stuff that's holding back > progress. Skype, acroread, flash (up to a few months ago)... google gears! System requirements * Linux (details) * Firefox 1.5+ * 32-bit OS (64-bit not supported) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
888x888 jpeg to 420x420 150x150, 100x100, and 50x50, output image format is
jpeg.
I didn't notice the problem until it was hosted on a certain commercial
storefront provider, under apache, I saw no problem.
I'm doing with a pair of loops, so my actual convert line looks like:
/usr/bin/convert -resize ${size}x${size} $image
$OUTDIR/$image
Peter
On Wed, Dec 16, 2009 at 3:37 PM, Frank Cox wrote:
>
> On Wed, 2009-12-16 at 15:16 -0800, Peter Serwe wrote:
> > I recently came across the need to convert jpg images with IM, did a
> > standard install of "yum -y install ImageMagick" and found that
> > images converted with CentOS's base port of IM would actually corrupt
> > the images, yet using the same (albiet different version, different
> > distro) software
> > didn't corrupt the images at all.
>
> I use convert and mogrify on a reasonably regular basis for various
> tasks and haven't noticed any problems here.
>
> Is there anything "special" about your images? You are converting them
> from jpg to.. what format?
>
> --
> MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
--
Peter Serwe
http://truthlightway.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On 16/12/09 23:37, Marko Vojinovic wrote: > On Wednesday 16 December 2009 21:52:05 Jake Shipton wrote: > >> On 16/12/09 19:53, Scot P. Floess wrote: >> >>> I have one box on my home network that is x86_64 capable... >>> >> Personally, if you had asked this 3 years ago, I'd have said "Go i686" >> due to compatibility. >> But now-a-days with up-to-date distributions there isn't many packages >> that aren't for x86_64. >> Heck even flash finally got a x86_64 Linux version now :-D (Took them >> long enough though!) >> >> Any machine I have that can run in x86_64, I normally install a x86_64 >> OS, and recently, >> I haven't found anything I need that is only i686. >> > Skype? > > Best, :-) > Marko > > > > I knew someone would find something that isn't 64-bit, in fact, I was waiting for it. :-p But, after a quick Google search, it's possible to run Skype on x86_64. ;) just install the i686 libs, job done (apparently) :-) Same way as any OpenSim/Secondlife viewer is installed :-) Not the most ideal way to run programs on 64, but it works :-) Though I personally don't "need" or "use" Skype ;-) *waits for someone else to go list a bunch of anti-64 packages* PS: Seemingly, Your "Reply-To" makes my email client want to reply to you only (Which I put back to CentOS instead) may cause others to also. Just letting you know :-) -- Jake ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On Wed, 2009-12-16 at 23:37 +, Marko Vojinovic wrote: > > Any machine I have that can run in x86_64, I normally install a > x86_64 > > OS, and recently, > > I haven't found anything I need that is only i686. > > Skype? Actually, my contribution to your "list" would be acroread. The free pdf readers still aren't up to the task in some cases, sadly. Interesting that it's the closed-source stuff that's holding back progress. Skype, acroread, flash (up to a few months ago)... -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
On Wed, 2009-12-16 at 15:16 -0800, Peter Serwe wrote: > I recently came across the need to convert jpg images with IM, did a > standard install of "yum -y install ImageMagick" and found that > images converted with CentOS's base port of IM would actually corrupt > the images, yet using the same (albiet different version, different > distro) software > didn't corrupt the images at all. I use convert and mogrify on a reasonably regular basis for various tasks and haven't noticed any problems here. Is there anything "special" about your images? You are converting them from jpg to.. what format? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On Wednesday 16 December 2009 21:52:05 Jake Shipton wrote: > On 16/12/09 19:53, Scot P. Floess wrote: > > I have one box on my home network that is x86_64 capable... > > Personally, if you had asked this 3 years ago, I'd have said "Go i686" > due to compatibility. > But now-a-days with up-to-date distributions there isn't many packages > that aren't for x86_64. > Heck even flash finally got a x86_64 Linux version now :-D (Took them > long enough though!) > > Any machine I have that can run in x86_64, I normally install a x86_64 > OS, and recently, > I haven't found anything I need that is only i686. Skype? Best, :-) Marko ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Help With Glade and C5 64-bit?
Scott Ehrlich wrote: > I have a user with C5.4 64-bit, fully updated, performed a yum install > glade, it claimed to have installed everything, but we cannot get it > to run. Neither whereis nor locate revleal an executable. > > We obtained the latest glade source from the project's web site, > attempted to configure it, until it complained of needed dependencies, > namely gtk+ (newer than what was on the system). So I got the newest > source from the gtk project web site, tried to compile it, until it > complained of at least needing a newer glib. So I grabbed the newest > glib, compiled and installed, ran ldd, and tried gtk+ source compile > again. I still claimed glib wasn't new enough. > > What am I missing? I followed the glade install notes as best I could. > > Thanks for any help/insight. If need be, I'll look for a glade forum > to post to, but since this _is_ Centos 5 spedific for the machine I'm > working on, I felt it appropriate to ping this list first. > > Thanks. maybe yum install glade2 ? yum search could be your friend ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Image conversion with ImageMagick doesn't work on CentOS, but it works fine on Debian Lenny.
I recently came across the need to convert jpg images with IM, did a standard install of "yum -y install ImageMagick" and found that images converted with CentOS's base port of IM would actually corrupt the images, yet using the same (albiet different version, different distro) software didn't corrupt the images at all. By corrupted, I mean, the bottom portion of the image under *some* webservers looked completely wrong, and had strange checkering of the image in stripes across the bottom. At the time I had this problem, I took the issue to IM's forum, to no avail. I ended up just using it on a Debian machine instead. Peter -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Red Hat commercial support for CentOS/Fedora
On Wed, Dec 16, 2009 at 5:34 PM, Connie Sieh wrote: > On Wed, 16 Dec 2009, Ron Blizzard wrote: >> On Sat, Dec 12, 2009 at 1:10 AM, Rogelio wrote: >>> Someone told me that if you have a CentOS or Fedora server, you can pay a >>> Red Hat yearly fee and get them to support it (because the environments are >>> so similar). >>> >>> Can anyone here substantiate this claim? >> >> No support from Red Hat, as Robert Heller explained, but OpenLogic has >> recently announced commercial support for CentOS >> >> http://www.h-online.com/open/news/item/OpenLogic-offers-CentOS-Linux-support-for-enterprises-873790.html > > But if you want to pay for support for CentOS why not just pay RedHat for > RHEL . > > -Connie Sieh > You might have a bunch of servers already installed with CentOS that you need support on, or you might need some consulting on one problem without wanting to pay for yearly subscriptions and license fees. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Red Hat commercial support for CentOS/Fedora
Connie Sieh wrote: > On Wed, 16 Dec 2009, Ron Blizzard wrote: > >> On Sat, Dec 12, 2009 at 1:10 AM, Rogelio wrote: >>> Someone told me that if you have a CentOS or Fedora server, you can pay a >>> Red Hat yearly fee and get them to support it (because the environments are >>> so similar). >>> >>> Can anyone here substantiate this claim? >> No support from Red Hat, as Robert Heller explained, but OpenLogic has >> recently announced commercial support for CentOS >> >> http://www.h-online.com/open/news/item/OpenLogic-offers-CentOS-Linux-support-for-enterprises-873790.html >> >> > > But if you want to pay for support for CentOS why not just pay RedHat for > RHEL . > > -Connie Sieh Agreed. CentOS is pretty much RHEL without the support contract. - Ryan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Help With Glade and C5 64-bit?
I have a user with C5.4 64-bit, fully updated, performed a yum install glade, it claimed to have installed everything, but we cannot get it to run. Neither whereis nor locate revleal an executable. We obtained the latest glade source from the project's web site, attempted to configure it, until it complained of needed dependencies, namely gtk+ (newer than what was on the system). So I got the newest source from the gtk project web site, tried to compile it, until it complained of at least needing a newer glib. So I grabbed the newest glib, compiled and installed, ran ldd, and tried gtk+ source compile again. I still claimed glib wasn't new enough. What am I missing? I followed the glade install notes as best I could. Thanks for any help/insight. If need be, I'll look for a glade forum to post to, but since this _is_ Centos 5 spedific for the machine I'm working on, I felt it appropriate to ping this list first. Thanks. Scott ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Red Hat commercial support for CentOS/Fedora
On Wed, 16 Dec 2009, Ron Blizzard wrote: > On Sat, Dec 12, 2009 at 1:10 AM, Rogelio wrote: >> Someone told me that if you have a CentOS or Fedora server, you can pay a >> Red Hat yearly fee and get them to support it (because the environments are >> so similar). >> >> Can anyone here substantiate this claim? > > No support from Red Hat, as Robert Heller explained, but OpenLogic has > recently announced commercial support for CentOS > > http://www.h-online.com/open/news/item/OpenLogic-offers-CentOS-Linux-support-for-enterprises-873790.html > > But if you want to pay for support for CentOS why not just pay RedHat for RHEL . -Connie Sieh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Red Hat commercial support for CentOS/Fedora
On Sat, Dec 12, 2009 at 1:10 AM, Rogelio wrote: > Someone told me that if you have a CentOS or Fedora server, you can pay a > Red Hat yearly fee and get them to support it (because the environments are > so similar). > > Can anyone here substantiate this claim? No support from Red Hat, as Robert Heller explained, but OpenLogic has recently announced commercial support for CentOS http://www.h-online.com/open/news/item/OpenLogic-offers-CentOS-Linux-support-for-enterprises-873790.html -- RonB -- Using CentOS 5.4 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
Right, I was actually trying the things suggested by multiple people at the same time. nss_ldap's connection to ldap was the primary issue. The other stuff was merely fluff. Believe it or not, I actually have that book. I just looked on page 112 where Carter mentions the one level directory search. I'll dig deeper. I didn't think (didn't look either) that it covered nss_ldap as well as it does. Peter On Wed, Dec 16, 2009 at 1:45 PM, Craig White wrote: > On Wed, 2009-12-16 at 13:38 -0800, Peter Serwe wrote: > > Which part did I discard that was relevant? > > > > I don't have a People container at the moment. > > > > There was something that looked like ?one on the end of the string, I > > couldn't make sense of it. > > > > Which part are you offended by the discard of? > > After we fix the nss-ldap stuff, you change the DSA. I have to laugh. > > You are flailing and changing things and configurations far beyond where > you were an hour ago and so there is no way to know where you are at. > > Suggestion... LDAP System Administration by Gerald Carter > > It will teach you what you need to know. The book is pure spoon feeding > and makes it simple. I am sure that you will waste a ton of time if you > don't read this book. > > Craig > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
> I am largely, vehemently against webmin or any other gui tools for system > administration, including the X11 tools.. > I'm not vehemently, but I do almost all of my sysadmin work in shell, also. > And webmin is a big hairy security hole. > > It was useful for a moment though. Yes - it was *really* helpful three years ago, when I was fighting openldap. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Google Earth - How to uninstall, before installing newest version?
On Wed, Dec 16, 2009 at 4:33 PM, Robert wrote: > Lanny Marcus wrote: >> Desktop is CentOS 5.4 (32 bit). I have Google Earth version >> 4.2.205.5730 (13NOV2007 build date) installed. I have checkinstall > Lanny, if you don't have an /opt/google-earth/uninstall, welcome to the > club. > There seems to be a rash of that going around. The answer might be at > http://earth.google.com/support/bin/search.py?hl=en&forum=1&query=uninstall+more%3Aforum > > I've never tried Skype. Robert: I will try .uninstall and I hope it is there for me to use. Thanks! I am one of those who hasn't gotten audio out of the microphone, using the Skype Beta on Linux, but others have it working properly. Recently, there was a thread, about a Static (?) version of Skype, which seems to work well, so after I get the new version of Google Earth installed (Norad tracks Santa with Google Earth: http://www.noradsanta.org/en/track3d.html) I am going to uninstall the Skype Beta I now have and install the Static version of Skype. I have used Skype on M$ Windows and the call quality is usually excellent. Also, for video chat. Calls from Skype to Skype are free. I started to reply to your answer and clicked wrong and sent an extra message to the list. Sorry! Lanny ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mod_security
On 12/15/2009 09:03 PM Thomas Dukes wrote: > > >> -Original Message- >> From: centos-boun...@centos.org >> [mailto:centos-boun...@centos.org] On Behalf Of Jim Perrin >> Sent: Monday, December 14, 2009 11:13 PM >> To: CentOS mailing list >> Subject: Re: [CentOS] mod_security >> >> On Mon, Dec 14, 2009 at 9:02 PM, Thomas Dukes >> wrote: >>> I installed mod_security yesterday. Unbelievable the >> amount of crap >>> it will stop in 24 hrs. >>> >>> Picked up the rpm at http://rpm.pbone.net >> > > The rpm I used was mod_security-2.5.9-1.el5.i386.rpm. There was one lacking > dependency, lua-5.1.4-1.el5.i386.rpm. > > > >>> This should be made part of the CentOS extra, contribs or whatever! >> >> Just a few minutes ago I installed it, then got a notice from pup that an update was available, i.e., liblua, but the install of liblua failed. Trying it with yum got me this: ... ---> Package lua.i386 0:5.1.4-1.el5.rf set to be updated --> Finished Dependency Resolution mod_security-2.5.9-1.el5.i386 from installed has depsolving problems --> Missing Dependency: liblua-5.1.so is needed by package mod_security-2.5.9-1.el5.i386 (installed) Error: Missing Dependency: liblua-5.1.so is needed by package mod_security-2.5.9-1.el5.i386 (installed) You could try using --skip-broken to work around the problem ... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
I am largely, vehemently against webmin or any other gui tools for system administration, including the X11 tools.. And, to be honest, it pisses me off that virt-install is broken, but virt-manager can create a new VM for me just fine, even though it hangs on granular package selection.. gui tools don't script so easily, #!/bin/bash is my favorite tool. And webmin is a big hairy security hole. It was useful for a moment though. Peter On Wed, Dec 16, 2009 at 1:46 PM, wrote: > You wrote: > >> On Wed, Dec 16, 2009 at 11:33 AM, wrote: > >> > >>> First question: do you have tls enabled on the client, and not the > >>> server, or vice versa? > >>> > >>> Second question: on the server, can you do a search? > >>> > >>> Handy tool: webmin has a whole ldap section, and can give you a *lot* > >>> of clues as to what's going wrong. > >> > > Tried webmin. Blew out my whole ldap database and used webmin to create > > a new tree, and an example user. Guess what? My example user fails the > > same way. > > > > I'm running slapd with -d 128 as well.. > > Can you use webmin on the server? If so, that's good. Then, can you use it > from a client? If not, what errors is it showing, or what is it not able > to find? There are two or three different places to go in webmin (not > happy with that, though I like it in general). > >mark > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Google Earth - How to uninstall, before installing newest version?
On Wed, Dec 16, 2009 at 4:33 PM, Robert wrote: > > > Lanny Marcus wrote: >> Desktop is CentOS 5.4 (32 bit). I have Google Earth version >> 4.2.205.5730 (13NOV2007 build date) installed. I have checkinstall >> (spelling?) installed, but am not sure if that was installed before or >> after Google Earth was installed. I have the Google Repository >> installed, but apparently Google Earth cannot be updated via yum and >> probably it was not installed via yum. >> >> Question: What is the best way for me to uninstall this version of >> Google Earth, completely, before I install the newest version? >> (This also applies to removing Skype, which I am certain was not >> installed via yum, before I install the static version of Skype, that >> was recently recommended on the list). >> >> TIA and Happy Holidays! Lanny >> > Lanny, if you don't have an /opt/google-earth/uninstall, welcome to the > club. > There seems to be a rash of that going around. The answer might be at > http://earth.google.com/support/bin/search.py?hl=en&forum=1&query=uninstall+more%3Aforum > > I've never tried Skype. > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Google Earth - How to uninstall, before installing newest version?
On Wed, Dec 16, 2009 at 2:44 PM, earl ramirez wrote: > The easiest way to do this is to navigate to /opt/google-earth > then execute the following command from the command line > > ./uninstall > > > [r...@commandcenter google-earth]# ./uninstall > Product: Google Earth > Installed in /opt/google-earth > Uninstalling desktop menu entries... > Uninstalling mimetypes... > Google Earth has been successfully uninstalled. Earl: Thank you! I will try that. Lanny ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On 16/12/09 19:53, Scot P. Floess wrote: > I have a really silly question... but just want to ask... > > I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) > > Scot P. Floess > 27 Lake Royale > Louisburg, NC 27549 > > 252-478-8087 (Home) > 919-890-8117 (Work) > > Chief Architect JPlate http://sourceforge.net/projects/jplate > Chief Architect JavaPIM http://sourceforge.net/projects/javapim > > Architect Keros http://sourceforge.net/projects/keros > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > > > Personally, if you had asked this 3 years ago, I'd have said "Go i686" due to compatibility. But now-a-days with up-to-date distributions there isn't many packages that aren't for x86_64. Heck even flash finally got a x86_64 Linux version now :-D (Took them long enough though!) Any machine I have that can run in x86_64, I normally install a x86_64 OS, and recently, I haven't found anything I need that is only i686. And usually, when you *do* need a i686 package it's usually possible to install the i686 versions of the packages (depending on the repo of course) where a command such as: yum install httpd.i686 (or .i386 again depending on repo) would come in handy :-) and then you have the i686 version, though there not always stable like that :-| x86_64 has matured over the years and it's done it well :-) But then, personally, I'd say, keep the current OS, unless there is actually something that makes you actually need x86_64. As they say "If it ain't broke, Don't fix it". Though if you build/acquire a new x86_64 box, throw a x86_64 OS on it :-) But still, check make sure they are x86_64 binarys available. or sources that will compile on x86_64. In most cases, it will. Oh, and there's no such thing as a silly question ;-) -- Jake ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
m.r...@5-cent.us wrote: > Longer answer: every single move, down at the machine/assembly level, can > move twice as many bits as on a 32-bit system. That will show up as a very > serious speed increase in your software. > actually, the pentiums have had a 64bit physical memory bus since the first 60Mhz version, and all L1/L2 cache <=> physical memory operations are 64bits.the CPUs have all optimized things like REP MOVSB to move by 64bit chunks whenever possible. The main performance advantage of x86_64 vs i686 is in the additional general purpose registers, this allows the compiler (or assembler programmer) to minimize the number of load/store instructions to implement a given sequence of operations. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
You wrote: >> On Wed, Dec 16, 2009 at 11:33 AM, wrote: >> >>> First question: do you have tls enabled on the client, and not the >>> server, or vice versa? >>> >>> Second question: on the server, can you do a search? >>> >>> Handy tool: webmin has a whole ldap section, and can give you a *lot* >>> of clues as to what's going wrong. >> > Tried webmin. Blew out my whole ldap database and used webmin to create > a new tree, and an example user. Guess what? My example user fails the > same way. > > I'm running slapd with -d 128 as well.. Can you use webmin on the server? If so, that's good. Then, can you use it from a client? If not, what errors is it showing, or what is it not able to find? There are two or three different places to go in webmin (not happy with that, though I like it in general). mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 13:38 -0800, Peter Serwe wrote: > Which part did I discard that was relevant? > > I don't have a People container at the moment. > > There was something that looked like ?one on the end of the string, I > couldn't make sense of it. > > Which part are you offended by the discard of? After we fix the nss-ldap stuff, you change the DSA. I have to laugh. You are flailing and changing things and configurations far beyond where you were an hour ago and so there is no way to know where you are at. Suggestion... LDAP System Administration by Gerald Carter It will teach you what you need to know. The book is pure spoon feeding and makes it simple. I am sure that you will waste a ton of time if you don't read this book. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
And since I forgot. Thanks! Silly question, is any of this documented anywhere? Peter On Wed, Dec 16, 2009 at 1:40 PM, Peter Serwe wrote: > OMG. > > My bad. > > I thought ?one was an artifact of your copy of MailScanner. > > I added it and logged in. > > The People container is not present and I didn't put that back in. > > I can now log in as "exam...@$host". > > Peter > > > On Wed, Dec 16, 2009 at 1:38 PM, Peter Serwe wrote: > >> Which part did I discard that was relevant? >> >> I don't have a People container at the moment. >> >> There was something that looked like ?one on the end of the string, I >> couldn't make sense of it. >> >> Which part are you offended by the discard of? >> >> Peter >> >> >> On Wed, Dec 16, 2009 at 1:35 PM, Craig White wrote: >> >>> On Wed, 2009-12-16 at 13:02 -0800, Peter Serwe wrote: >>> > getent still fails, now I'm getting can't connect messages again. >>> > >>> > Dec 16 12:59:58 ldap nscd: nss_ldap: could not search LDAP server - >>> > Server is unavailable >>> > >>> > Also, the People container was removed and not re-added when I >>> > re-created the tree with webmin, >>> > hence, I modified the lines in /etc/ldap.conf to reflect: >>> > >>> > nss_base_passwd dc=tncionline,dc=net >>> > nss_base_shadow dc=tncionline,dc=net >>> > nss_base_group dc=tncionline,dc=net >>> >>> I think I give up. >>> >>> If you are going to ask for help and then discard - there's little >>> reason to try. >>> >>> Craig >>> >>> >>> -- >>> This message has been scanned for viruses and >>> dangerous content by MailScanner, and is >>> believed to be clean. >>> >>> ___ >>> CentOS mailing list >>> CentOS@centos.org >>> http://lists.centos.org/mailman/listinfo/centos >>> >> >> >> >> -- >> Peter Serwe >> http://truthlightway.blogspot.com/ >> > > > > -- > Peter Serwe > http://truthlightway.blogspot.com/ > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
OMG. My bad. I thought ?one was an artifact of your copy of MailScanner. I added it and logged in. The People container is not present and I didn't put that back in. I can now log in as "exam...@$host". Peter On Wed, Dec 16, 2009 at 1:38 PM, Peter Serwe wrote: > Which part did I discard that was relevant? > > I don't have a People container at the moment. > > There was something that looked like ?one on the end of the string, I > couldn't make sense of it. > > Which part are you offended by the discard of? > > Peter > > > On Wed, Dec 16, 2009 at 1:35 PM, Craig White wrote: > >> On Wed, 2009-12-16 at 13:02 -0800, Peter Serwe wrote: >> > getent still fails, now I'm getting can't connect messages again. >> > >> > Dec 16 12:59:58 ldap nscd: nss_ldap: could not search LDAP server - >> > Server is unavailable >> > >> > Also, the People container was removed and not re-added when I >> > re-created the tree with webmin, >> > hence, I modified the lines in /etc/ldap.conf to reflect: >> > >> > nss_base_passwd dc=tncionline,dc=net >> > nss_base_shadow dc=tncionline,dc=net >> > nss_base_group dc=tncionline,dc=net >> >> I think I give up. >> >> If you are going to ask for help and then discard - there's little >> reason to try. >> >> Craig >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > > > -- > Peter Serwe > http://truthlightway.blogspot.com/ > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
Which part did I discard that was relevant? I don't have a People container at the moment. There was something that looked like ?one on the end of the string, I couldn't make sense of it. Which part are you offended by the discard of? Peter On Wed, Dec 16, 2009 at 1:35 PM, Craig White wrote: > On Wed, 2009-12-16 at 13:02 -0800, Peter Serwe wrote: > > getent still fails, now I'm getting can't connect messages again. > > > > Dec 16 12:59:58 ldap nscd: nss_ldap: could not search LDAP server - > > Server is unavailable > > > > Also, the People container was removed and not re-added when I > > re-created the tree with webmin, > > hence, I modified the lines in /etc/ldap.conf to reflect: > > > > nss_base_passwd dc=tncionline,dc=net > > nss_base_shadow dc=tncionline,dc=net > > nss_base_group dc=tncionline,dc=net > > I think I give up. > > If you are going to ask for help and then discard - there's little > reason to try. > > Craig > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] C5 updates?
Do any of them happen to include a fix for ldap? ;) Peter On Wed, Dec 16, 2009 at 1:33 PM, Karanbir Singh wrote: > On 12/14/2009 11:12 AM, Karanbir Singh wrote: > > nope - updates will only start flowing once the issues are resolved - > > given the way things are looking right now, I'd expect that to be > > sometime tomorrow evening. > > > > all pending c5 updates are now syncing to the mirrors, wait for the > announcements soon ! > > - KB > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 13:02 -0800, Peter Serwe wrote: > getent still fails, now I'm getting can't connect messages again. > > Dec 16 12:59:58 ldap nscd: nss_ldap: could not search LDAP server - > Server is unavailable > > Also, the People container was removed and not re-added when I > re-created the tree with webmin, > hence, I modified the lines in /etc/ldap.conf to reflect: > > nss_base_passwd dc=tncionline,dc=net > nss_base_shadow dc=tncionline,dc=net > nss_base_group dc=tncionline,dc=net I think I give up. If you are going to ask for help and then discard - there's little reason to try. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Google Earth - How to uninstall, before installing newest version?
Lanny Marcus wrote: > Desktop is CentOS 5.4 (32 bit). I have Google Earth version > 4.2.205.5730 (13NOV2007 build date) installed. I have checkinstall > (spelling?) installed, but am not sure if that was installed before or > after Google Earth was installed. I have the Google Repository > installed, but apparently Google Earth cannot be updated via yum and > probably it was not installed via yum. > > Question: What is the best way for me to uninstall this version of > Google Earth, completely, before I install the newest version? > (This also applies to removing Skype, which I am certain was not > installed via yum, before I install the static version of Skype, that > was recently recommended on the list). > > TIA and Happy Holidays! Lanny > Lanny, if you don't have an /opt/google-earth/uninstall, welcome to the club. There seems to be a rash of that going around. The answer might be at http://earth.google.com/support/bin/search.py?hl=en&forum=1&query=uninstall+more%3Aforum I've never tried Skype. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] C5 updates?
On 12/14/2009 11:12 AM, Karanbir Singh wrote: > nope - updates will only start flowing once the issues are resolved - > given the way things are looking right now, I'd expect that to be > sometime tomorrow evening. > all pending c5 updates are now syncing to the mirrors, wait for the announcements soon ! - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
On Wed, Dec 16, 2009 at 12:58 PM, Craig White wrote: > allow bind_anon_dn > > access to attrs=userPassword,sambaNTPassword,sambaLMPassword >by self write >by anonymous auth >by * none > > access to dn.regex="^uid=([^,]+)ou=People,dc=azapple,dc=com$$" >by self read >by anonymous auth >by * none > > # a bottom catchall rule... > access to * >by anonymous read >by * read > > access to dn.base="cn=Subschema" by * read > > Have all that now.. Had to take out the samba stuff, openldap complained on restart. [r...@ldap home]# getent passwd | grep example [r...@ldap home]# Still nothing good from getent. Peter -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
I just had those users in there because I didn't want to attempt to hit ldap for known local users. Peter On Wed, Dec 16, 2009 at 12:58 PM, Craig White wrote: > On Wed, 2009-12-16 at 13:44 -0700, Craig White wrote: > > On Wed, 2009-12-16 at 12:39 -0800, Peter Serwe wrote: > > > I think not as well. The tactest user has been blown back out. I can > > > re-add it from ldif again. > > > > > > [r...@ldap home]# getent passwd | grep example > > > [r...@ldap home]# > > > > > > [r...@ldap home]# cat /etc/nsswitch.conf | grep -v \# > > > > > > > > > passwd: files ldap > > > shadow: files ldap > > > group: files ldap > > > > > > hosts: files dns > > > > > > > > > bootparams: nisplus [NOTFOUND=return] files > > > > > > ethers: files > > > netmasks: files > > > networks: files > > > protocols: files > > > rpc:files > > > services: files > > > > > > netgroup: nisplus > > > > > > publickey: nisplus > > > > > > automount: files nisplus > > > aliases:files nisplus > > > > > > [r...@ldap home]# cat /etc/pam.d/system-auth > > > #%PAM-1.0 > > > # This file is auto-generated. > > > # User changes will be destroyed the next time authconfig is run. > > > authrequired pam_env.so > > > authsufficientpam_unix.so nullok try_first_pass > > > authrequisite pam_succeed_if.so uid >= 500 quiet > > > authsufficientpam_ldap.so use_first_pass > > > authrequired pam_deny.so > > > > > > account required pam_unix.so broken_shadow > > > account sufficientpam_localuser.so > > > account sufficientpam_succeed_if.so uid < 500 quiet > > > account [default=bad success=ok user_unknown=ignore] pam_ldap.so > > > account required pam_permit.so > > > > > > passwordrequisite pam_cracklib.so try_first_pass retry=3 > > > passwordsufficientpam_unix.so md5 shadow nullok try_first_pass > > > use_authtok > > > passwordsufficientpam_ldap.so use_authtok > > > passwordrequired pam_deny.so > > > > > > session optional pam_keyinit.so revoke > > > session required pam_limits.so > > > session optional pam_mkhomedir.so > > > session [success=1 default=ignore] pam_succeed_if.so service in > > > crond quiet use_uid > > > session required pam_unix.so > > > session optional pam_ldap.so > > > > > > [r...@ldap home]# cat /etc/ldap.conf | grep -v \# > > > > > > > > > BASE dc=tncionline, dc=net > > > URI ldap://MailScanner warning: numerical links are often malicious: > > > 127.0.0.1 > > > port 389 > > > > > > SIZELIMIT12 > > > TIMELIMIT15 > > > DEREFnever > > > timelimit 600 > > > bind_timelimit 600 > > > bind_policy soft > > > idle_timelimit 3600 > > > > > > nss_initgroups_ignoreusers > > > pserwe,dgates,root,ldap,named,avahi,haldaemon,dbus > > > base dc=tncionline, dc=net > > > pam_password md5 > > > > here's a big problem... /etc/ldap.conf > > > > you need to add...(assuming this is where you have People/Groups) > > > > nss_base_passwd ou=People,tncionline,dc=net?one > > nss_base_shadow ou=People,tncionline,dc=net?one > > nss_base_group ou=Groups,tncionline,dc=net?one > > > > take the space out of base... > > base dc=tncionline,dc=net > > > > I'd also add (until you can deal)... > > ssl no > > oh... > > nss_initgroups_ignoreusers > pserwe,dgates,root,ldap,named,avahi,haldaemon,dbus > > you can remove pserwe,dgates from the list unless you have daemon services > running as those users prior to LDAP start (highly unlikely) > > and if the above doesn't work, it is because your slapd.conf ACL's are > blocking anonymous binds at the indicated dn's > > So you might want to either simplify your ACL's, permit anonymous binds to > the 'people/groups' or let us see what you've got for ACL's > > these are some rules that I've found good to have in > /etc/openldap/slapd.conf - YMMV > > allow bind_anon_dn > > access to attrs=userPassword,sambaNTPassword,sambaLMPassword >by self write >by anonymous auth >by * none > > access to dn.regex="^uid=([^,]+)ou=People,dc=azapple,dc=com$$" >by self read >by anonymous auth >by * none > > # a bottom catchall rule... > access to * >by anonymous read >by * read > > access to dn.base="cn=Subschema" by * read > > Craig > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
getent still fails, now I'm getting can't connect messages again. Dec 16 12:59:58 ldap nscd: nss_ldap: could not search LDAP server - Server is unavailable Also, the People container was removed and not re-added when I re-created the tree with webmin, hence, I modified the lines in /etc/ldap.conf to reflect: nss_base_passwd dc=tncionline,dc=net nss_base_shadow dc=tncionline,dc=net nss_base_group dc=tncionline,dc=net Peter On Wed, Dec 16, 2009 at 12:47 PM, Craig White wrote: > On Wed, 2009-12-16 at 12:39 -0800, Peter Serwe wrote: > > I think not as well. The tactest user has been blown back out. I can > > re-add it from ldif again. > > > > and by the way... don't waste time trying to authenticate users/groups > that don't exist. > > If they don't show up when you give commands like... > > getent passwd > getent group > > you aren't going to be able to authenticate... the system doesn't see > them. You can't authenticate users that don't exist. Likewise, groups > that don't exist or memberships to groups that don't exist are a > problem. > > Craig > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 13:44 -0700, Craig White wrote: > On Wed, 2009-12-16 at 12:39 -0800, Peter Serwe wrote: > > I think not as well. The tactest user has been blown back out. I can > > re-add it from ldif again. > > > > [r...@ldap home]# getent passwd | grep example > > [r...@ldap home]# > > > > [r...@ldap home]# cat /etc/nsswitch.conf | grep -v \# > > > > > > passwd: files ldap > > shadow: files ldap > > group: files ldap > > > > hosts: files dns > > > > > > bootparams: nisplus [NOTFOUND=return] files > > > > ethers: files > > netmasks: files > > networks: files > > protocols: files > > rpc:files > > services: files > > > > netgroup: nisplus > > > > publickey: nisplus > > > > automount: files nisplus > > aliases:files nisplus > > > > [r...@ldap home]# cat /etc/pam.d/system-auth > > #%PAM-1.0 > > # This file is auto-generated. > > # User changes will be destroyed the next time authconfig is run. > > authrequired pam_env.so > > authsufficientpam_unix.so nullok try_first_pass > > authrequisite pam_succeed_if.so uid >= 500 quiet > > authsufficientpam_ldap.so use_first_pass > > authrequired pam_deny.so > > > > account required pam_unix.so broken_shadow > > account sufficientpam_localuser.so > > account sufficientpam_succeed_if.so uid < 500 quiet > > account [default=bad success=ok user_unknown=ignore] pam_ldap.so > > account required pam_permit.so > > > > passwordrequisite pam_cracklib.so try_first_pass retry=3 > > passwordsufficientpam_unix.so md5 shadow nullok try_first_pass > > use_authtok > > passwordsufficientpam_ldap.so use_authtok > > passwordrequired pam_deny.so > > > > session optional pam_keyinit.so revoke > > session required pam_limits.so > > session optional pam_mkhomedir.so > > session [success=1 default=ignore] pam_succeed_if.so service in > > crond quiet use_uid > > session required pam_unix.so > > session optional pam_ldap.so > > > > [r...@ldap home]# cat /etc/ldap.conf | grep -v \# > > > > > > BASE dc=tncionline, dc=net > > URI ldap://MailScanner warning: numerical links are often malicious: > > 127.0.0.1 > > port 389 > > > > SIZELIMIT12 > > TIMELIMIT15 > > DEREFnever > > timelimit 600 > > bind_timelimit 600 > > bind_policy soft > > idle_timelimit 3600 > > > > nss_initgroups_ignoreusers > > pserwe,dgates,root,ldap,named,avahi,haldaemon,dbus > > base dc=tncionline, dc=net > > pam_password md5 > > here's a big problem... /etc/ldap.conf > > you need to add...(assuming this is where you have People/Groups) > > nss_base_passwd ou=People,tncionline,dc=net?one > nss_base_shadow ou=People,tncionline,dc=net?one > nss_base_group ou=Groups,tncionline,dc=net?one > > take the space out of base... > base dc=tncionline,dc=net > > I'd also add (until you can deal)... > ssl no oh... nss_initgroups_ignoreusers pserwe,dgates,root,ldap,named,avahi,haldaemon,dbus you can remove pserwe,dgates from the list unless you have daemon services running as those users prior to LDAP start (highly unlikely) and if the above doesn't work, it is because your slapd.conf ACL's are blocking anonymous binds at the indicated dn's So you might want to either simplify your ACL's, permit anonymous binds to the 'people/groups' or let us see what you've got for ACL's these are some rules that I've found good to have in /etc/openldap/slapd.conf - YMMV allow bind_anon_dn access to attrs=userPassword,sambaNTPassword,sambaLMPassword by self write by anonymous auth by * none access to dn.regex="^uid=([^,]+)ou=People,dc=azapple,dc=com$$" by self read by anonymous auth by * none # a bottom catchall rule... access to * by anonymous read by * read access to dn.base="cn=Subschema" by * read Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On Wed, Dec 16, 2009 at 11:53 AM, Scot P. Floess wrote: > I have a really silly question... but just want to ask... > > I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) > The number of bits of the OS is insignificant when considering disk IO. I'd use the best disk controller (where best is determined by measurement) and slap into the machine with the most CPU's and make sure it has sufficient memory. In the end, if your disks suck, so will your IO regardless of what you do. -- Enjoy global warming while it lasts. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 12:39 -0800, Peter Serwe wrote: > I think not as well. The tactest user has been blown back out. I can > re-add it from ldif again. > and by the way... don't waste time trying to authenticate users/groups that don't exist. If they don't show up when you give commands like... getent passwd getent group you aren't going to be able to authenticate... the system doesn't see them. You can't authenticate users that don't exist. Likewise, groups that don't exist or memberships to groups that don't exist are a problem. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] {Disarmed} Re: Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 12:39 -0800, Peter Serwe wrote: > I think not as well. The tactest user has been blown back out. I can > re-add it from ldif again. > > [r...@ldap home]# getent passwd | grep example > [r...@ldap home]# > > [r...@ldap home]# cat /etc/nsswitch.conf | grep -v \# > > > passwd: files ldap > shadow: files ldap > group: files ldap > > hosts: files dns > > > bootparams: nisplus [NOTFOUND=return] files > > ethers: files > netmasks: files > networks: files > protocols: files > rpc:files > services: files > > netgroup: nisplus > > publickey: nisplus > > automount: files nisplus > aliases:files nisplus > > [r...@ldap home]# cat /etc/pam.d/system-auth > #%PAM-1.0 > # This file is auto-generated. > # User changes will be destroyed the next time authconfig is run. > authrequired pam_env.so > authsufficientpam_unix.so nullok try_first_pass > authrequisite pam_succeed_if.so uid >= 500 quiet > authsufficientpam_ldap.so use_first_pass > authrequired pam_deny.so > > account required pam_unix.so broken_shadow > account sufficientpam_localuser.so > account sufficientpam_succeed_if.so uid < 500 quiet > account [default=bad success=ok user_unknown=ignore] pam_ldap.so > account required pam_permit.so > > passwordrequisite pam_cracklib.so try_first_pass retry=3 > passwordsufficientpam_unix.so md5 shadow nullok try_first_pass > use_authtok > passwordsufficientpam_ldap.so use_authtok > passwordrequired pam_deny.so > > session optional pam_keyinit.so revoke > session required pam_limits.so > session optional pam_mkhomedir.so > session [success=1 default=ignore] pam_succeed_if.so service in > crond quiet use_uid > session required pam_unix.so > session optional pam_ldap.so > > [r...@ldap home]# cat /etc/ldap.conf | grep -v \# > > > BASE dc=tncionline, dc=net > URI ldap://MailScanner warning: numerical links are often malicious: > 127.0.0.1 > port 389 > > SIZELIMIT12 > TIMELIMIT15 > DEREFnever > timelimit 600 > bind_timelimit 600 > bind_policy soft > idle_timelimit 3600 > > nss_initgroups_ignoreusers > pserwe,dgates,root,ldap,named,avahi,haldaemon,dbus > base dc=tncionline, dc=net > pam_password md5 here's a big problem... /etc/ldap.conf you need to add...(assuming this is where you have People/Groups) nss_base_passwd ou=People,tncionline,dc=net?one nss_base_shadow ou=People,tncionline,dc=net?one nss_base_group ou=Groups,tncionline,dc=net?one take the space out of base... base dc=tncionline,dc=net I'd also add (until you can deal)... ssl no Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Desktop/Server 32/64 (was Re: Silly question x64 vs i386)
> > All my machines - including my desktop - are 32 bit. This lone > x86_64 machine is a headless server (well I plug in a monitor from time to > time) - but > usually its headless (as are all my machines but my desktop)... > All of our servers have been 64bit since '04 or '05? Whenever the first 64bit multi-core AMD chips came out and were under $300. For a server, the big reason to go 64bit is capacity. While you might be running on a 2GB server today, it's quite possible that you'll move those disks to a 8/16/32GB server next year. If you didn't go 64bit at the start, you'd have to do the 32->64 move at the same time as hardware migration. (Just as a hypothetical "for instance" example. May not occur frequently in real life.) For desktop use, sounds like we're finally to the point where you can run 64bit Linux on the desktop and stay functional (i.e. Adobe Flash). ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
I think not as well. The tactest user has been blown back out. I can re-add it from ldif again. [r...@ldap home]# getent passwd | grep example [r...@ldap home]# [r...@ldap home]# cat /etc/nsswitch.conf | grep -v \# passwd: files ldap shadow: files ldap group: files ldap hosts: files dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc:files services: files netgroup: nisplus publickey: nisplus automount: files nisplus aliases:files nisplus [r...@ldap home]# cat /etc/pam.d/system-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. authrequired pam_env.so authsufficientpam_unix.so nullok try_first_pass authrequisite pam_succeed_if.so uid >= 500 quiet authsufficientpam_ldap.so use_first_pass authrequired pam_deny.so account required pam_unix.so broken_shadow account sufficientpam_localuser.so account sufficientpam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam_permit.so passwordrequisite pam_cracklib.so try_first_pass retry=3 passwordsufficientpam_unix.so md5 shadow nullok try_first_pass use_authtok passwordsufficientpam_ldap.so use_authtok passwordrequired pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_mkhomedir.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_ldap.so [r...@ldap home]# cat /etc/ldap.conf | grep -v \# BASE dc=tncionline, dc=net URI ldap://127.0.0.1 port 389 SIZELIMIT12 TIMELIMIT15 DEREFnever timelimit 600 bind_timelimit 600 bind_policy soft idle_timelimit 3600 nss_initgroups_ignoreusers pserwe,dgates,root,ldap,named,avahi,haldaemon,dbus base dc=tncionline, dc=net pam_password md5 Peter On Wed, Dec 16, 2009 at 12:24 PM, Craig White wrote: > On Wed, 2009-12-16 at 12:07 -0800, Peter Serwe wrote: > > Found an ldif user recipe for CentOS5.2.. > > > > Added the user "tactest" with the password "tactest". > > > > Dec 16 12:05:30 ldap sshd[11705]pam_unix(sshd:auth): check pass; user > > unknown > > Dec 16 12:05:30 ldap sshd[11705]: pam_unix(sshd:auth): authentication > > failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ldap > > Dec 16 12:05:30 ldap sshd[11705]: pam_succeed_if(sshd:auth): error > > retrieving information about user tactest > > > > auth still fails. > > before you get into authorizations... > > does the user show? I think not... > > getent passwd |grep tactest > > if that's the case, and you want help from the list... > > what is in files... > /etc/nsswitch.com > /etc/pam.d/system-auth > /etc/ldap.conf > > Craig > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
On Wed, 2009-12-16 at 14:53 -0500, Scot P. Floess wrote: > is there any advantage to my running > x86_64 on that machine instead of i386... A better question might be, do you have any particular reason not to run x86_64 on that machine? All of my machines and the machines that I look after are now running Centos x86_64, with the exception of one LTSP server and my Acer Aspire One laptop. The Acer netbook can't, of course, and the LTSP server runs dosemu which is much slower on x86_64. I just set up a new telephone answering system the other day and now it's x86_64 too. Not for any particular reason, but why not? The hardware can handle it and I see no reason not to. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
I'm not really seeing what the response is, running tcpdump -vvv -i lo, output of a whole transaction is: tcpdump: listening on lo, link-type EN10MB (Ethernet), capture size 96 bytes 12:33:48.197928 IP (tos 0x0, ttl 64, id 61456, offset 0, flags [DF], proto: TCP (6), length: 60) ldap.48322 > ldap.ssh: S, cksum 0xaa05 (correct), 805740654:805740654(0) win 32792 12:33:48.204532 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP (6), length: 60) ldap.ssh > ldap.48322: S, cksum 0x1510 (correct), 807996569:807996569(0) ack 805740655 win 32768 12:33:48.198050 IP (tos 0x0, ttl 64, id 61457, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.48322 > ldap.ssh: ., cksum 0xfd33 (correct), 1:1(0) ack 1 win 257 12:33:48.209188 IP (tos 0x0, ttl 64, id 23780, offset 0, flags [DF], proto: TCP (6), length: 72) ldap.ssh > ldap.48322: P, cksum 0xfe3c (incorrect (-> 0x4771), 1:21(20) ack 1 win 256 12:33:48.209315 IP (tos 0x0, ttl 64, id 61458, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.48322 > ldap.ssh: ., cksum 0xfd1b (correct), 1:1(0) ack 21 win 257 12:33:48.209523 IP (tos 0x0, ttl 64, id 61459, offset 0, flags [DF], proto: TCP (6), length: 72) ldap.48322 > ldap.ssh: P, cksum 0xfe3c (incorrect (-> 0x4757), 1:21(20) ack 21 win 257 12:33:48.209529 IP (tos 0x0, ttl 64, id 23781, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.ssh > ldap.48322: ., cksum 0xfd02 (correct), 21:21(0) ack 21 win 256 12:33:48.209772 IP (tos 0x0, ttl 64, id 61460, offset 0, flags [DF], proto: TCP (6), length: 764) ldap.48322 > ldap.ssh: P 21:733(712) ack 21 win 257 12:33:48.209778 IP (tos 0x0, ttl 64, id 23782, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.ssh > ldap.48322: ., cksum 0xfa2e (correct), 21:21(0) ack 733 win 268 12:33:48.211826 IP (tos 0x0, ttl 64, id 23783, offset 0, flags [DF], proto: TCP (6), length: 756) ldap.ssh > ldap.48322: P 21:725(704) ack 733 win 268 12:33:48.212006 IP (tos 0x0, ttl 64, id 61461, offset 0, flags [DF], proto: TCP (6), length: 76) ldap.48322 > ldap.ssh: P, cksum 0xfe40 (incorrect (-> 0xc918), 733:757(24) ack 725 win 268 12:33:48.214205 IP (tos 0x0, ttl 64, id 23784, offset 0, flags [DF], proto: TCP (6), length: 204) ldap.ssh > ldap.48322: P 725:877(152) ack 757 win 268 12:33:48.215046 IP (tos 0x0, ttl 64, id 61462, offset 0, flags [DF], proto: TCP (6), length: 196) ldap.48322 > ldap.ssh: P 757:901(144) ack 877 win 279 12:33:48.221627 IP (tos 0x0, ttl 64, id 23785, offset 0, flags [DF], proto: TCP (6), length: 772) ldap.ssh > ldap.48322: P 877:1597(720) ack 901 win 279 12:33:48.222696 IP (tos 0x0, ttl 64, id 61463, offset 0, flags [DF], proto: TCP (6), length: 68) ldap.48322 > ldap.ssh: P, cksum 0xfe38 (incorrect (-> 0xe90b), 901:917(16) ack 1597 win 290 12:33:48.256082 IP (tos 0x0, ttl 64, id 23786, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.ssh > ldap.48322: ., cksum 0xf335 (correct), 1597:1597(0) ack 917 win 279 12:33:48.256088 IP (tos 0x0, ttl 64, id 61464, offset 0, flags [DF], proto: TCP (6), length: 100) ldap.48322 > ldap.ssh: P 917:965(48) ack 1597 win 290 12:33:48.256092 IP (tos 0x0, ttl 64, id 23787, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.ssh > ldap.48322: ., cksum 0xf2fb (correct), 1597:1597(0) ack 965 win 279 12:33:48.256269 IP (tos 0x0, ttl 64, id 23788, offset 0, flags [DF], proto: TCP (6), length: 100) ldap.ssh > ldap.48322: P 1597:1645(48) ack 965 win 279 12:33:48.256407 IP (tos 0x0, ttl 64, id 61465, offset 0, flags [DF], proto: TCP (6), length: 116) ldap.48322 > ldap.ssh: P 965:1029(64) ack 1645 win 290 12:33:48.257338 IP (tos 0x0, ttl 64, id 36372, offset 0, flags [DF], proto: TCP (6), length: 254) ldap.36363 > ldap.ldap: P 545516257:545516459(202) ack 552281149 win 257 12:33:48.258726 IP (tos 0x0, ttl 64, id 17236, offset 0, flags [DF], proto: TCP (6), length: 66) ldap.ldap > ldap.36363: P, cksum 0xfe36 (incorrect (-> 0x9e99), 1:15(14) ack 202 win 273 12:33:48.258735 IP (tos 0x0, ttl 64, id 36373, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.36363 > ldap.ldap: ., cksum 0xe62d (correct), 202:202(0) ack 15 win 257 12:33:48.264465 IP (tos 0x0, ttl 64, id 23789, offset 0, flags [DF], proto: TCP (6), length: 132) ldap.ssh > ldap.48322: P 1645:1725(80) ack 1029 win 279 12:33:48.296113 IP (tos 0x0, ttl 64, id 61466, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.48322 > ldap.ssh: ., cksum 0xf226 (correct), 1029:1029(0) ack 1725 win 290 12:33:56.841644 IP (tos 0x0, ttl 64, id 61467, offset 0, flags [DF], proto: TCP (6), length: 196) ldap.48322 > ldap.ssh: P 1029:1173(144) ack 1725 win 290 12:33:56.881279 IP (tos 0x0, ttl 64, id 23790, offset 0, flags [DF], proto: TCP (6), length: 52) ldap.ssh > ldap.48322: ., cksum 0xe0d0 (correct), 1725:1725(0) ack 1173 win 290 12:33:59.378221 IP (tos 0x0, ttl 64, id 23791, offset 0, flags [DF], proto: TCP (6), length: 132) ldap.ssh > ldap.48322: P 1725:1805(80) ack 1173 win 290 12:33:59.378239 IP (tos 0x0, ttl 64, id 61468, o
Re: [CentOS] Problems with nss_ldap - where to start?
> > On Wed, Dec 16, 2009 at 11:33 AM, wrote: > >> >> First question: do you have tls enabled on the client, and not the server, >> or vice versa? >> >> Second question: on the server, can you do a search? >> >> Handy tool: webmin has a whole ldap section, and can give you a *lot* of >> clues as to what's going wrong. >> >> mark >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > Tried webmin. Blew out my whole ldap database and used webmin to create a new tree, and an example user. Guess what? My example user fails the same way. I'm running slapd with -d 128 as well.. Peter -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
At Wed, 16 Dec 2009 14:53:01 -0500 (EST) CentOS mailing list wrote: > > I have a really silly question... but just want to ask... > > I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) With only 1gig of RAM there is little reason for 64-bit addressing -- 1 gig is well within the range of 32-bit addressing (yes, you could set up a large swap partition and have lots of virtual addressing, but swapping like 8 gig of VM in and out of 1 gig of physical RAM would be painful). Also, 64-bit apps tend to be a little larger then their 32-bit versions (fatter pointers, integers, etc.). With 1 gig memory will be a wee bit tighter (modern 64-bit machines would normally have lots more RAM...). With what is obvious and 'older' 64-bit system, being limited to 4gig of RAM (which is still just within 32-bit address space), going 64-bit with this system would not buy you much. If you want a consistent operating environment, especially if you don't want to maintain two separate sets of updates, keeping all of your boxes at 32-bit for the time being probably makes sense. If and when you upgrade things, going 64-bit might make sense. > > Scot P. Floess > 27 Lake Royale > Louisburg, NC 27549 > > 252-478-8087 (Home) > 919-890-8117 (Work) > > Chief Architect JPlate http://sourceforge.net/projects/jplate > Chief Architect JavaPIM http://sourceforge.net/projects/javapim > > Architect Keros http://sourceforge.net/projects/keros > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > > > -- Robert Heller -- 978-544-6933 Deepwoods Software-- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows hel...@deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 12:07 -0800, Peter Serwe wrote: > Found an ldif user recipe for CentOS5.2.. > > Added the user "tactest" with the password "tactest". > > Dec 16 12:05:30 ldap sshd[11705]pam_unix(sshd:auth): check pass; user > unknown > Dec 16 12:05:30 ldap sshd[11705]: pam_unix(sshd:auth): authentication > failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ldap > Dec 16 12:05:30 ldap sshd[11705]: pam_succeed_if(sshd:auth): error > retrieving information about user tactest > > auth still fails. before you get into authorizations... does the user show? I think not... getent passwd |grep tactest if that's the case, and you want help from the list... what is in files... /etc/nsswitch.com /etc/pam.d/system-auth /etc/ldap.conf Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
Hey thats an interesting bit of trivia - thanks :) Large memory - bah - this silly machine maxes out at 4 GB... On Wed, 16 Dec 2009, John R Pierce wrote: > Scot P. Floess wrote: >> Its a Dell Pentium D - basically x86_64 but does not support hardware >> virtualization. Its a Dell Poweredge SC430 if that helps??? >> > > I believe those were a pair of the P4 "Prescott" chips in a single > package, and pretty much what I said, 64bit works, but there's little > point in it unless you have a need for the large memory. > > > > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
Ah good point... Wasn't thinking in those terms... Well clearly wasn't thinking at all ;) On Wed, 16 Dec 2009, m.r...@5-cent.us wrote: >> I have a really silly question... but just want to ask... >> >> I have one box on my home network that is x86_64 capable... My other >> boxes are all i386. As this x86_64 machine can, at most, house 4 GB of >> RAM (currently only has 1 GB) - is there any advantage to my running >> x86_64 on that machine instead of i386... Long story as to why I am >> asking - but before I go off and moveit down to i386 - just wanted some >> opinions :) > > Short answer: yes. > > Longer answer: every single move, down at the machine/assembly level, can > move twice as many bits as on a 32-bit system. That will show up as a very > serious speed increase in your software. > > mark "why you should *always* have an assembler course" > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
Scot P. Floess wrote: > Its a Dell Pentium D - basically x86_64 but does not support hardware > virtualization. Its a Dell Poweredge SC430 if that helps??? > I believe those were a pair of the P4 "Prescott" chips in a single package, and pretty much what I said, 64bit works, but there's little point in it unless you have a need for the large memory. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
> I have a really silly question... but just want to ask... > > I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) Short answer: yes. Longer answer: every single move, down at the machine/assembly level, can move twice as many bits as on a 32-bit system. That will show up as a very serious speed increase in your software. mark "why you should *always* have an assembler course" ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Desktop/Server 32/64 (was Re: Silly question x64 vs i386)
All my machines - including my desktop - are 32 bit. This lone x86_64 machine is a headless server (well I plug in a monitor from time to time) - but usually its headless (as are all my machines but my desktop)... On Wed, 16 Dec 2009, John Thomas wrote: >> I have one box on my home network that is x86_64 capable... My other >> boxes are all i386. As this x86_64 machine can, at most, house 4 GB of >> RAM (currently only has 1 GB) - is there any advantage to my running >> x86_64 on that machine instead of i386... Long story as to why I am >> asking - but before I go off and moveit down to i386 - just wanted some >> opinions :) > > If I may hijack, what about desktop machines? Would your 32/64 choice > be the same if it were primarily a desktop machine vs. primarily a > server? I recall a year or so ago the answer was 32 bit for desktops, > but perhaps that has changed. > > -- > Sincerely, > John Thomas > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
and, of course: Dec 16 12:05:31 ldap sshd[11705]: Failed password for invalid user tactest from 127.0.0.1 port 52949 ssh2 Peter On Wed, Dec 16, 2009 at 12:07 PM, Peter Serwe wrote: > Found an ldif user recipe for CentOS5.2.. > > Added the user "tactest" with the password "tactest". > > Dec 16 12:05:30 ldap sshd[11705]pam_unix(sshd:auth): check pass; user > unknown > Dec 16 12:05:30 ldap sshd[11705]: pam_unix(sshd:auth): authentication > failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ldap > Dec 16 12:05:30 ldap sshd[11705]: pam_succeed_if(sshd:auth): error > retrieving information about user tactest > > auth still fails. > > Peter > > > On Wed, Dec 16, 2009 at 11:49 AM, Peter Serwe wrote: > >> I was going to say no TLS on either side. >> >> Specifically because I wanted to make sure that I was doing it with basic >> auth prior to using tls, but I found TLS lines in the /etc/ldap.conf. >> >> I commented those out, and guess what, no more nss_ldap messages in >> /var/log/messages.. >> >> Now, I'm somewhat guessing that my directory doesn't have the right >> information in it. Maybe I just need an ldif recipe for adding the users. >> >> Peter >> >> >> On Wed, Dec 16, 2009 at 11:33 AM, wrote: >> >>> >>> First question: do you have tls enabled on the client, and not the >>> server, >>> or vice versa? >>> >>> Second question: on the server, can you do a search? >>> >>> Handy tool: webmin has a whole ldap section, and can give you a *lot* of >>> clues as to what's going wrong. >>> >>> mark >>> >>> ___ >>> CentOS mailing list >>> CentOS@centos.org >>> http://lists.centos.org/mailman/listinfo/centos >>> >> >> >> >> -- >> Peter Serwe >> http://truthlightway.blogspot.com/ >> > > > > -- > Peter Serwe > http://truthlightway.blogspot.com/ > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
Found an ldif user recipe for CentOS5.2.. Added the user "tactest" with the password "tactest". Dec 16 12:05:30 ldap sshd[11705]pam_unix(sshd:auth): check pass; user unknown Dec 16 12:05:30 ldap sshd[11705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ldap Dec 16 12:05:30 ldap sshd[11705]: pam_succeed_if(sshd:auth): error retrieving information about user tactest auth still fails. Peter On Wed, Dec 16, 2009 at 11:49 AM, Peter Serwe wrote: > I was going to say no TLS on either side. > > Specifically because I wanted to make sure that I was doing it with basic > auth prior to using tls, but I found TLS lines in the /etc/ldap.conf. > > I commented those out, and guess what, no more nss_ldap messages in > /var/log/messages.. > > Now, I'm somewhat guessing that my directory doesn't have the right > information in it. Maybe I just need an ldif recipe for adding the users. > > Peter > > > On Wed, Dec 16, 2009 at 11:33 AM, wrote: > >> >> First question: do you have tls enabled on the client, and not the server, >> or vice versa? >> >> Second question: on the server, can you do a search? >> >> Handy tool: webmin has a whole ldap section, and can give you a *lot* of >> clues as to what's going wrong. >> >> mark >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > > > -- > Peter Serwe > http://truthlightway.blogspot.com/ > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
so to be honest...what really spawned this... I put all my VMs on an NFS share. I've got an F11 VM I run...but on my x86_64 host - starting the F11 VM (its an i386 VM) fails to start. If I run F11 x86_64 it works fine. I' really just trying to simplify things and standards on one type of VM ;) Yes, I don't have any issues with CentOS guest VMs being i386 and running on the x86_64 host - works fine... On Wed, 16 Dec 2009, nate wrote: > Scot P. Floess wrote: >> I have a really silly question... but just want to ask... >> >> I have one box on my home network that is x86_64 capable... My other >> boxes are all i386. As this x86_64 machine can, at most, house 4 GB of >> RAM (currently only has 1 GB) - is there any advantage to my running >> x86_64 on that machine instead of i386... Long story as to why I am >> asking - but before I go off and moveit down to i386 - just wanted some >> opinions :) > > Really depends on what you are going to use it for, my own home system > is 3GB and runs i386 mainly for software compatibility reasons, my > co-located server runs i386 with 6GB ram mainly because VMware doesn't > support 64-bit mode on the older Xeons I have, so not a big point for > me to go 64-bit(and memory usage is quite low anyways). > > Myself I make it a point when dealing with VMs at least to make them > 32-bit unless they need a lot of memory, then I make them 64-bit. On > any modern host I have they are all 64-bit, and typically have > a minimum of 16-32GB of ram, so one would have to go to the nuthouse > to run 32-bit on 16+GB of ram these days..my own cut off point, line > in the sand for 32-64bit is 8GB. But certainly there are cases that > you want 64-bit for even a system running 3GB(such as running a > DB or VM process that uses a lot of memory). > > I would say stick to whatever your using now if it works, if the > rest of your network is i386 and that one box is i386, and you > could move it to x86_64, I would leave it at i386 myself. > > nate > > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Desktop/Server 32/64 (was Re: Silly question x64 vs i386)
> I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) If I may hijack, what about desktop machines? Would your 32/64 choice be the same if it were primarily a desktop machine vs. primarily a server? I recall a year or so ago the answer was 32 bit for desktops, but perhaps that has changed. -- Sincerely, John Thomas ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
Its a Dell Pentium D - basically x86_64 but does not support hardware virtualization. Its a Dell Poweredge SC430 if that helps??? On Wed, 16 Dec 2009, John R Pierce wrote: > Scot P. Floess wrote: >> I have a really silly question... but just want to ask... >> >> I have one box on my home network that is x86_64 capable... My other >> boxes are all i386. As this x86_64 machine can, at most, house 4 GB of >> RAM (currently only has 1 GB) - is there any advantage to my running >> x86_64 on that machine instead of i386... Long story as to why I am >> asking - but before I go off and moveit down to i386 - just wanted some >> opinions :) >> > > on most 64bit capable x86 CPUs, 64bit code is faster, because the x86_64 > mode has more registers than the traditional i386. On the first gen > Intel x86_64 CPUs, that would be P4's that had 64bit added to them, I'd > probably stick with 32bit, but on any AMD or Intel Core CPU, I'd > probably use x86_64 by default. > > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
Scot P. Floess wrote: > I have a really silly question... but just want to ask... > > I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) Really depends on what you are going to use it for, my own home system is 3GB and runs i386 mainly for software compatibility reasons, my co-located server runs i386 with 6GB ram mainly because VMware doesn't support 64-bit mode on the older Xeons I have, so not a big point for me to go 64-bit(and memory usage is quite low anyways). Myself I make it a point when dealing with VMs at least to make them 32-bit unless they need a lot of memory, then I make them 64-bit. On any modern host I have they are all 64-bit, and typically have a minimum of 16-32GB of ram, so one would have to go to the nuthouse to run 32-bit on 16+GB of ram these days..my own cut off point, line in the sand for 32-64bit is 8GB. But certainly there are cases that you want 64-bit for even a system running 3GB(such as running a DB or VM process that uses a lot of memory). I would say stick to whatever your using now if it works, if the rest of your network is i386 and that one box is i386, and you could move it to x86_64, I would leave it at i386 myself. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Silly question x64 vs i386
Scot P. Floess wrote: > I have a really silly question... but just want to ask... > > I have one box on my home network that is x86_64 capable... My other > boxes are all i386. As this x86_64 machine can, at most, house 4 GB of > RAM (currently only has 1 GB) - is there any advantage to my running > x86_64 on that machine instead of i386... Long story as to why I am > asking - but before I go off and moveit down to i386 - just wanted some > opinions :) > on most 64bit capable x86 CPUs, 64bit code is faster, because the x86_64 mode has more registers than the traditional i386. On the first gen Intel x86_64 CPUs, that would be P4's that had 64bit added to them, I'd probably stick with 32bit, but on any AMD or Intel Core CPU, I'd probably use x86_64 by default. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Silly question x64 vs i386
I have a really silly question... but just want to ask... I have one box on my home network that is x86_64 capable... My other boxes are all i386. As this x86_64 machine can, at most, house 4 GB of RAM (currently only has 1 GB) - is there any advantage to my running x86_64 on that machine instead of i386... Long story as to why I am asking - but before I go off and moveit down to i386 - just wanted some opinions :) Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
I was going to say no TLS on either side. Specifically because I wanted to make sure that I was doing it with basic auth prior to using tls, but I found TLS lines in the /etc/ldap.conf. I commented those out, and guess what, no more nss_ldap messages in /var/log/messages.. Now, I'm somewhat guessing that my directory doesn't have the right information in it. Maybe I just need an ldif recipe for adding the users. Peter On Wed, Dec 16, 2009 at 11:33 AM, wrote: > > First question: do you have tls enabled on the client, and not the server, > or vice versa? > > Second question: on the server, can you do a search? > > Handy tool: webmin has a whole ldap section, and can give you a *lot* of > clues as to what's going wrong. > > mark > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
Peter Serwe wrote: > I've been unsuccessfully trying to get nss_ldap to work. I've chased down > hundreds of google searches over the last 3 days, and I can't seem to get a > centos system to authenticate against ldap. > > Every daemon on the system is running into the same problem: Disable all SSL/TLS functions on the server and client and try it in the most basic mode, if it still doesn't work run tcpdump to look at what is actually being sent and what the response is. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Google Earth - How to uninstall, before installing newest version?
The easiest way to do this is to navigate to /opt/google-earth then execute the following command from the command line *./uninstall * [r...@commandcenter google-earth]# ./uninstall Product: Google Earth Installed in /opt/google-earth Uninstalling desktop menu entries... Uninstalling mimetypes... Google Earth has been successfully uninstalled. On Wed, Dec 16, 2009 at 2:35 PM, Lanny Marcus wrote: > Desktop is CentOS 5.4 (32 bit). I have Google Earth version > 4.2.205.5730 (13NOV2007 build date) installed. I have checkinstall > (spelling?) installed, but am not sure if that was installed before or > after Google Earth was installed. I have the Google Repository > installed, but apparently Google Earth cannot be updated via yum and > probably it was not installed via yum. > > Question: What is the best way for me to uninstall this version of > Google Earth, completely, before I install the newest version? > (This also applies to removing Skype, which I am certain was not > installed via yum, before I install the static version of Skype, that > was recently recommended on the list). > > TIA and Happy Holidays! Lanny > Magazine subscriptions Largest discount Credit/Debit Card Check PayPal > http://www.lowcostmagazines.com/ > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Evolution Of Linux OS "The Most Powerful Operating System In The World" ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
On Wed, Dec 16, 2009 at 11:33 AM, Craig White wrote: > forget 'telnet' > > Can you do an ldapsearch? > > ldapsearch -x -h localhost -D '$YOUR_ROOT_BIND_DN' -W '(ou=*)' > > Craig > > Sure I can, this is the output, slightly sanitized. # extended LDIF # # LDAPv3 # base <> with scope subtree # filter: (ou=*) # requesting: ALL # # People, mynet.net dn: ou=People,dc=mynet,dc=net ou: People objectClass: organizationalUnit # testuser, People, mynet.net dn: cn=testuser,ou=People,dc=mynet,dc=net uid: testuser cn: testuser sn: Test givenName: Test objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount ou: People uidNumber: 10001 gidNumber: 10001 userPassword:: dGVzdA== homeDirectory: /tmp mail: t...@mynet.net # search result search: 2 result: 0 Success # numResponses: 3 # numEntries: 2 Peter -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] OT: Google Earth - How to uninstall, before installing newest version?
Desktop is CentOS 5.4 (32 bit). I have Google Earth version 4.2.205.5730 (13NOV2007 build date) installed. I have checkinstall (spelling?) installed, but am not sure if that was installed before or after Google Earth was installed. I have the Google Repository installed, but apparently Google Earth cannot be updated via yum and probably it was not installed via yum. Question: What is the best way for me to uninstall this version of Google Earth, completely, before I install the newest version? (This also applies to removing Skype, which I am certain was not installed via yum, before I install the static version of Skype, that was recently recommended on the list). TIA and Happy Holidays! Lanny Magazine subscriptions Largest discount Credit/Debit Card Check PayPal http://www.lowcostmagazines.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
> I've been unsuccessfully trying to get nss_ldap to work. I've chased down > hundreds of google searches over the last 3 days, and I can't seem to get > a > centos system to authenticate against ldap. > > Every daemon on the system is running into the same problem: > > nss_ldap: could not search LDAP server - Server is unavailable > > sshd, nscd, httpd, you name it.. > > slapd is clearly running, telnet localhost 389 actually connects me to it. > > I've run authconfig, /etc/sysconfig/authconfig agrees. > > I'm at a complete and utter loss. I've followed every how-to out there, > RH, Openldap, Debian, FreeBSD I can verify ldap is working, I can't seem > to get any PAM applications to use it. First question: do you have tls enabled on the client, and not the server, or vice versa? Second question: on the server, can you do a search? Handy tool: webmin has a whole ldap section, and can give you a *lot* of clues as to what's going wrong. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with nss_ldap - where to start?
On Wed, 2009-12-16 at 11:24 -0800, Peter Serwe wrote: > I've been unsuccessfully trying to get nss_ldap to work. I've chased > down hundreds of google searches over the last 3 days, and I can't > seem to get a centos system to authenticate against ldap. > > Every daemon on the system is running into the same problem: > > nss_ldap: could not search LDAP server - Server is unavailable > > sshd, nscd, httpd, you name it.. > > slapd is clearly running, telnet localhost 389 actually connects me to > it. > > I've run authconfig, /etc/sysconfig/authconfig agrees. > > I'm at a complete and utter loss. I've followed every how-to out > there, RH, Openldap, Debian, FreeBSD I can verify ldap is working, I > can't seem to get any PAM applications to use it. forget 'telnet' Can you do an ldapsearch? ldapsearch -x -h localhost -D '$YOUR_ROOT_BIND_DN' -W '(ou=*)' Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Problems with nss_ldap - where to start?
I've been unsuccessfully trying to get nss_ldap to work. I've chased down hundreds of google searches over the last 3 days, and I can't seem to get a centos system to authenticate against ldap. Every daemon on the system is running into the same problem: nss_ldap: could not search LDAP server - Server is unavailable sshd, nscd, httpd, you name it.. slapd is clearly running, telnet localhost 389 actually connects me to it. I've run authconfig, /etc/sysconfig/authconfig agrees. I'm at a complete and utter loss. I've followed every how-to out there, RH, Openldap, Debian, FreeBSD I can verify ldap is working, I can't seem to get any PAM applications to use it. Peter -- Peter Serwe http://truthlightway.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
On Wed, Dec 16, 2009 at 09:57:38AM -0500, Thomas Harold wrote: > > Yah, RAID-6 at a minimum, I wouldn't depend on RAID-5, even with a > hot-spare. So to get 10TB, you'd need 13 drives (10 data, 2 parity, 1 > hot-spare). 2TB drives are available for ~$300-$400 each. Eight 2TB disks would provide 10TB of RAID6 storage with a hot spare, which could all fit in a 2U enclosure or a smaller desktop case than a 13 or 16 bay case. --keith -- kkel...@speakeasy.net pgpiBweUBekT9.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)
> Thanks for your answers! > >> Nope. Works fine. Between the nightly hot-copy backups and the >> internal design of the SVN FSFS storage engine, I'm not terribly >> worried. > > I tend to use svnadmin dump for my daily backups. > (some time ago, I ran into compatibility issues with hotcopy when > trying to restore on a different OS and it kind of frightened me.) > > What would make you prefer to use hotcopy rather than dump? Performance? > Inertia. Although we're running all CentOS 5 x86_64, so even if the machine went down, we would have lots of other choices. But I do need to look at using svnadmin dump instead. >> (We took advantage of repository sharding in 1.6, which is why we did a >> svn dump/load method. If we didn't need sharding, we probably could've >> just copied the directory tree across from the 1.4 to the 1.6 server.) > > Did you consider the type of filesystem when setting up sharding? > Or would you consider ext3 as good enough? > The only time I have problems with ext3 is with the deletion of large files. The ext3 file system is rather horrid, performance-wise, when you delete lots and lots of files, or a few really big files. I think it's trying to update the list of free blocks / inodes, but I'm not sure. Since a SVN repository (FSFS style) hardly ever deletes lots of files or large files (except maybe when assembling a 200-400MB check-in?), ext3 is fine for hosting a repository on. The sharding wasn't even really necessary for ext3 with directory indexing turned on, but I decided to play it safe and start sharding to limit the # of rev files in a single folder. The bigger performance bottlenecks for us are CPU time, and then maybe disk reaction time. (I did not feel the need to go with packed shards, where all of the revisions get packed into a single file.) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)
Thanks for your answers! > Nope. Works fine. Between the nightly hot-copy backups and the > internal design of the SVN FSFS storage engine, I'm not terribly worried. I tend to use svnadmin dump for my daily backups. (some time ago, I ran into compatibility issues with hotcopy when trying to restore on a different OS and it kind of frightened me.) What would make you prefer to use hotcopy rather than dump? Performance? > (We took advantage of repository sharding in 1.6, which is why we did a > svn dump/load method. If we didn't need sharding, we probably could've > just copied the directory tree across from the 1.4 to the 1.6 server.) Did you consider the type of filesystem when setting up sharding? Or would you consider ext3 as good enough? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sshfs & CentOS 5
On Wed, Dec 16, 2009 at 5:48 PM, Akemi Yagi wrote: > On Wed, Dec 16, 2009 at 7:43 AM, Rudi Ahlers wrote: >> Has anyone installed sshfs on CentOS 5 and used it sucessfully? > > Yes, works nicely: > > http://blog.toracat.org/2008/09/hello-world/ > > Please note that the blog is a bit old. In step (2), dkms-fuse is no > longer needed with the current CentOS kernel (as of 5.4) because the > fuse kernel module is included there. > > Akemi / toracat > ___ Thanx this tutorial was rather helpful :) Now I just need to get fuse working on the XEN domU. google.. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS-announce Digest, Vol 58, Issue 3
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ...@centos.org You can reach the person managing the list at centos-announce-ow...@centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1648 Moderate CentOS 4 i386 ntp - security update (take 2) (Tru Huynh) 2. CESA-2009:1648 Moderate CentOS 4 x86_64 ntp - security update (take 2) (Tru Huynh) -- Message: 1 Date: Tue, 15 Dec 2009 21:02:55 +0100 From: Tru Huynh Subject: [CentOS-announce] CESA-2009:1648 Moderate CentOS 4 i386 ntp - security update (take 2) To: centos-annou...@centos.org Message-ID: <20091215200255.ga30...@sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1648 re-release see http://bugs.centos.org/view.php?id=4065 for more details ntp security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2009-1648.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/ntp-4.2.0.a.20040617-8.el4_8.2.centos.i386.rpm source: updates/SRPMS/ntp-4.2.0.a.20040617-8.el4_8.2.centos.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update ntp Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B -- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.centos.org/pipermail/centos-announce/attachments/20091215/067b05ed/attachment-0001.bin -- Message: 2 Date: Tue, 15 Dec 2009 21:04:01 +0100 From: Tru Huynh Subject: [CentOS-announce] CESA-2009:1648 Moderate CentOS 4 x86_64 ntp - security update (take 2) To: centos-annou...@centos.org Message-ID: <20091215200401.gb30...@sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1648 re-release see http://bugs.centos.org/view.php?id=4065 for more details ntp security update for CentOS 4 x86_64: https://rhn.redhat.com/errata/RHSA-2009-1648.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/ntp-4.2.0.a.20040617-8.el4_8.2.centos.x86_64.rpm source: updates/SRPMS/ntp-4.2.0.a.20040617-8.el4_8.2.centos.src.rpm You may update your CentOS-4 x86_64 installations by running the command: yum update ntp Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B -- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.centos.org/pipermail/centos-announce/attachments/20091215/a51f43bd/attachment-0001.bin -- ___ CentOS-announce mailing list centos-annou...@centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 58, Issue 3 ** ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Old hd, new machine
At Wed, 16 Dec 2009 09:55:49 -0600 CentOS mailing list wrote: > > Robert Heller wrote: > > At Wed, 16 Dec 2009 07:33:38 -0600 CentOS mailing list > > wrote: > > > >> Jussi Hirvi wrote: > > What should I do to make an existing CentOS (5.4) disc boot up on a new > > computer? > > [...] > > Would it be enough to boot with a DVD in rescue mode, or boot with > > another hd, and install grub? > >>> On 16.12.2009 12:16, Sorin Srbu wrote: > For me it has worked to just install the old hd in the new machine and > boot > it up. Kudzo takes care of the rest. > >>> Then you have been lucky. :-) For me, the startup stopped already before > >>> the CentOS splash screen. I guess something was wrong with the initrd. > >>> > >> If the disk holding the / partition needs a different driver than what you > >> had > >> during the install, you have to rebuild the initrd. Anaconda knows how to > >> do > >> that, kudzo can't. You can do it from a rescue-mode boot, but you may > >> have to > >> know the right module names. > > > > *Before* swapping out the old disk, add an appropriate scsi_hostadapterN > > (N >= 1) alias to /etc/modprobe.conf and then do: > > > > mkinitrd -f /boot/initrd-`uname -r`.img `uname -r` > > > > All should be good then. > > > > IF both the old machine and the new machine have your basic, vanila IDE > > disks, then there is no problem. > > I've always wished the install/rescue disk had a mode to do this for you > after you've moved the disks or restored a backup. The reason you are > trying to bring up the new machine may be that the old one is dead - and > anaconda knows a lot more about picking the right driver modules than I > ever will. I've done it a time or two by installing a system on the new > (or matching) hardware with a separate /boot partition, then making sure > the old/new systems are updated to the same versions and keeping the new > /boot but copying the rest of the old system over. Until very recently, I've moved disks from one AHA-29xxx SCSI system to another AHA-29xxx SCSI system. Same driver, different controller card... My latest move was on the same system, different disks: SCSI disks (AHA-29160N controller) to SATA (ahci flavored controller). In this case, the motherboard, etc. were working just fine (so where one of the *old* SCSI disks -- it died a couple of weeks later). The AHA-29160N controller card is still in the machine, with nothing connected to it (one never knows if some interesting piece of hardware happens along). As for proper module: you just need to pay close attention to what anaconda is doing as it loads drivers. At least that is what I've seen. (I *always* use text mode with install/rescue disks.) > -- Robert Heller -- 978-544-6933 Deepwoods Software-- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows hel...@deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Using (was: Announcing) Gluster Storage Platform
Chan Chung Hang Christopher wrote: > Alan McKay wrote: >> On Tue, Dec 15, 2009 at 7:48 PM, Christopher Chan >> wrote: >>> A cluster filesystem >> OK, but you've just given me a circular definition. >> >>> When you do not need/want a cluster file system >> and again ... >> > > Okay, a cluster/distributed file system that does not have its own on > disk format. It makes use of whatever existing filesystem there is for > actual storage and allows you to replicate files/load balance requests > to files to 'storage servers' of any supported platform. > > At the same time, user level processes on 'clients' access the system as > if it was an actual file system. > > This enables one to have Linux clients that run say samba to export the > files to Windows clients but the actual files are kept on OpenSolaris > servers on zfs. Should the Linux clients all go down, the Windows > clients could still access the files on the OpenSolaris servers via samba. I'm having trouble finding any real information about how (and how well) this works and I'd like to know if it would be suitable for a backuppc storage archive which generates millions of hardlinks. Does it deal with hardlinks spanning backend storage servers transparently? And can it replicate efficiently enough to have remote copies? -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Old hd, new machine
Robert Heller wrote: > At Wed, 16 Dec 2009 07:33:38 -0600 CentOS mailing list > wrote: > >> Jussi Hirvi wrote: > What should I do to make an existing CentOS (5.4) disc boot up on a new > computer? > [...] > Would it be enough to boot with a DVD in rescue mode, or boot with > another hd, and install grub? >>> On 16.12.2009 12:16, Sorin Srbu wrote: For me it has worked to just install the old hd in the new machine and boot it up. Kudzo takes care of the rest. >>> Then you have been lucky. :-) For me, the startup stopped already before >>> the CentOS splash screen. I guess something was wrong with the initrd. >>> >> If the disk holding the / partition needs a different driver than what you >> had >> during the install, you have to rebuild the initrd. Anaconda knows how to >> do >> that, kudzo can't. You can do it from a rescue-mode boot, but you may have >> to >> know the right module names. > > *Before* swapping out the old disk, add an appropriate scsi_hostadapterN > (N >= 1) alias to /etc/modprobe.conf and then do: > > mkinitrd -f /boot/initrd-`uname -r`.img `uname -r` > > All should be good then. > > IF both the old machine and the new machine have your basic, vanila IDE > disks, then there is no problem. I've always wished the install/rescue disk had a mode to do this for you after you've moved the disks or restored a backup. The reason you are trying to bring up the new machine may be that the old one is dead - and anaconda knows a lot more about picking the right driver modules than I ever will. I've done it a time or two by installing a system on the new (or matching) hardware with a separate /boot partition, then making sure the old/new systems are updated to the same versions and keeping the new /boot but copying the rest of the old system over. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sshfs & CentOS 5
On Wed, Dec 16, 2009 at 7:43 AM, Rudi Ahlers wrote: > Has anyone installed sshfs on CentOS 5 and used it sucessfully? Yes, works nicely: http://blog.toracat.org/2008/09/hello-world/ Please note that the blog is a bit old. In step (2), dkms-fuse is no longer needed with the current CentOS kernel (as of 5.4) because the fuse kernel module is included there. Akemi / toracat ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sshfs & CentOS 5
> Has anyone installed sshfs on CentOS 5 and used it sucessfully? Yup, running on 5.4 x86_64, connecting to i386 and FreeBSD 7.2-STABLE/i386. No problems. Timo ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] sshfs & CentOS 5
Has anyone installed sshfs on CentOS 5 and used it sucessfully? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Old hd, new machine
At Wed, 16 Dec 2009 07:33:38 -0600 CentOS mailing list wrote: > > Jussi Hirvi wrote: > >>> What should I do to make an existing CentOS (5.4) disc boot up on a new > >>> computer? > >>> [...] > >>> Would it be enough to boot with a DVD in rescue mode, or boot with > >>> another hd, and install grub? > > On 16.12.2009 12:16, Sorin Srbu wrote: > >> For me it has worked to just install the old hd in the new machine and boot > >> it up. Kudzo takes care of the rest. > > > > Then you have been lucky. :-) For me, the startup stopped already before > > the CentOS splash screen. I guess something was wrong with the initrd. > > > > If the disk holding the / partition needs a different driver than what you > had > during the install, you have to rebuild the initrd. Anaconda knows how to do > that, kudzo can't. You can do it from a rescue-mode boot, but you may have > to > know the right module names. *Before* swapping out the old disk, add an appropriate scsi_hostadapterN (N >= 1) alias to /etc/modprobe.conf and then do: mkinitrd -f /boot/initrd-`uname -r`.img `uname -r` All should be good then. IF both the old machine and the new machine have your basic, vanila IDE disks, then there is no problem. > -- Robert Heller -- 978-544-6933 Deepwoods Software-- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows hel...@deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)
On 12/15/2009 4:22 AM, Mathieu Baudier wrote: > Hi, > > I'm planning to upgrade an old public/internal development > infrastructure and will use CentOS 5.4 x86_64 as basis. > > The Subversion version in CentOS 5.4 is v1.4, whereas RPMForge provides v1.6. > I use the RPMForge version as my client on the desktop. > > - Has anyone of you experience running Subversion servers on CentOS? Yes, when we upgraded to SVN 1.6 on the server, we moved from our old Linux box to CentOS. We did a svn dump/load cycle to move from the 1.4 server to the 1.6 server. And kept the 1.4 dump files for posterity. > - Would you in general consider as less secure / safe / stable to use > RPMForge packages for such critical tasks? Nope. Works fine. Between the nightly hot-copy backups and the internal design of the SVN FSFS storage engine, I'm not terribly worried. (We took advantage of repository sharding in 1.6, which is why we did a svn dump/load method. If we didn't need sharding, we probably could've just copied the directory tree across from the 1.4 to the 1.6 server.) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
On 12/16/2009 9:41 AM, William Warren wrote: > On 12/16/2009 12:10 AM, Eero Volotinen wrote: > Still going to need 10TB of backups. And i can guarantee you the > chances of having a URE during rebuild are almost certain with this > setup so a backup is going to be crucial. Sounds like a nightmare even > inside a supermicro or similar box. Yah, RAID-6 at a minimum, I wouldn't depend on RAID-5, even with a hot-spare. So to get 10TB, you'd need 13 drives (10 data, 2 parity, 1 hot-spare). And make sure you buy enterprise level SATA disks (the 1TB models are about $150 right now). (You can fit 15 3.5" drives into a SuperMicro 4U 942i 760W case with the 5:3 SATA mobile racks. The 942i is also a very quiet case due to using 120mm fans inside.) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
On 12/15/2009 7:48 AM, Scott Ehrlich wrote: > I have a client with a handful of USB drives connected to a CentOS > box. I am charged with binding the USB drives together into a single > LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap > storage in a single mount point). > (snip) > What are my best options? > Um, don't? Like other people said, go with eSATA, hopefully hooked up to a 4-drive or 8-drive enclosure (or even a 10-drive enclosure). Alternately, go with an external SAS storage rack that supports both SAS / SATA drives. A SAS card for PCIe is fairly inexpensive ($200?) and the external enclosures are probably going to be (but not certainly) better made then inexpensive SATA enclosures. The big problem with USB is that it only supports about 25MB/s per port, which means that it's going to be very very slow. Modern hard drives can push 50-80MB/s easily. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
On 12/16/2009 9:34 AM, Chan Chung Hang Christopher wrote: > Steve Thompson wrote: > >> On Wed, 16 Dec 2009, Chan Chung Hang Christopher wrote: >> >> >>> Steve Thompson wrote: >>> On Tue, 15 Dec 2009, Scott Ehrlich wrote: > I have a client with a handful of USB drives connected to a CentOS > box. I am charged with binding the USB drives together into a single > LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap > storage in a single mount point). > I tried doing this for fun once upon a time, using 6 1TB drives. I can save you a lot of grief by suggesting that you don't think about this any further. Boy is it slow. And extremely unreliable. And slow. Don't even do it for backups. Did I say it was slow? >>> Please qualify 'slow'. Was it dog slow, turtle-slow, snail-slow or >>> slowaris slow? >>> >> Slower than all of those. Top write speed I could ever achieve with a >> USB-2 interface and SATA drives was 20 MB/sec with a trailing wind, and >> usually half of that, with a single stream. I even tried USB-1 for more >> laughs; 1 MB/sec on a truly good day. With multiple writers, performance >> dropped so far as to be unusable (below 1 MB/sec). And we're talking mkfs >> times in _days_. The host was a CentOS 5.2 box, 32-bit. >> > Kudos to Steve for proving that USB2's 480mbits/sec is really just a sham. > > Now I wonder if you can daisy chain IEEE1394 devices...or try out > eSATA...:-P > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > > > Any host based technology won't get you half of the claimed speed with any kind of reliability. I don't think ti will ever really outrun something like SATAII or SAS. What makes it funnier is Intel is saying this will make external RAID on USB possible...just keep in mind FRIAD and that's what USB RAID really is. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
On 12/16/2009 12:10 AM, Eero Volotinen wrote: > On 12/15/09 2:48 PM, Scott Ehrlich wrote: > >> I have a client with a handful of USB drives connected to a CentOS >> box. I am charged with binding the USB drives together into a single >> LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap >> storage in a single mount point). >> > Err.. buy computer from supermicro and load it with 10 sata disks. > > http://www.supermicro.com/products/chassis/2U/?chs=213 > > -- > Eero > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > > > Still going to need 10TB of backups. And i can guarantee you the chances of having a URE during rebuild are almost certain with this setup so a backup is going to be crucial. Sounds like a nightmare even inside a supermicro or similar box. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
Steve Thompson wrote: > On Wed, 16 Dec 2009, Chan Chung Hang Christopher wrote: > >> Steve Thompson wrote: >>> On Tue, 15 Dec 2009, Scott Ehrlich wrote: >>> I have a client with a handful of USB drives connected to a CentOS box. I am charged with binding the USB drives together into a single LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap storage in a single mount point). >>> I tried doing this for fun once upon a time, using 6 1TB drives. I can >>> save you a lot of grief by suggesting that you don't think about this any >>> further. Boy is it slow. And extremely unreliable. And slow. Don't even do >>> it for backups. Did I say it was slow? >> Please qualify 'slow'. Was it dog slow, turtle-slow, snail-slow or >> slowaris slow? > > Slower than all of those. Top write speed I could ever achieve with a > USB-2 interface and SATA drives was 20 MB/sec with a trailing wind, and > usually half of that, with a single stream. I even tried USB-1 for more > laughs; 1 MB/sec on a truly good day. With multiple writers, performance > dropped so far as to be unusable (below 1 MB/sec). And we're talking mkfs > times in _days_. The host was a CentOS 5.2 box, 32-bit. Kudos to Steve for proving that USB2's 480mbits/sec is really just a sham. Now I wonder if you can daisy chain IEEE1394 devices...or try out eSATA...:-P ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
Scott Ehrlich wrote: > I have a client with a handful of USB drives connected to a CentOS > box. I am charged with binding the USB drives together into a single > LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap > storage in a single mount point). How about eSATA? Surely an eSATA enclosure for 10 drives won't be more expensive than ten individual usb enclosures?! > > The next fun piece is how to incorporate that storage space into an > existing Active Directory structure to apply AD acls for limited > access. AD does not have acls. NTFS does. The closet things to NTFS acls in UNIX is nfs4 acls. That you can get with ZFS. I suggest that you give OpenSolaris a shot instead. Or you can be one of the testers for ntfs-3g's acl implementation... > > I'd rather not use Samba, as that is its own infrastructure and > maintains its own credentials database. Have you ever used winbind? It maps AD credentials to POSIX credentials. > > What are my best options? Stuff not provided by Centos/RHEL at the moment. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
On Wed, 16 Dec 2009, Chan Chung Hang Christopher wrote: > Steve Thompson wrote: >> On Tue, 15 Dec 2009, Scott Ehrlich wrote: >> >>> I have a client with a handful of USB drives connected to a CentOS >>> box. I am charged with binding the USB drives together into a single >>> LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap >>> storage in a single mount point). >> >> I tried doing this for fun once upon a time, using 6 1TB drives. I can >> save you a lot of grief by suggesting that you don't think about this any >> further. Boy is it slow. And extremely unreliable. And slow. Don't even do >> it for backups. Did I say it was slow? > > Please qualify 'slow'. Was it dog slow, turtle-slow, snail-slow or > slowaris slow? Slower than all of those. Top write speed I could ever achieve with a USB-2 interface and SATA drives was 20 MB/sec with a trailing wind, and usually half of that, with a single stream. I even tried USB-1 for more laughs; 1 MB/sec on a truly good day. With multiple writers, performance dropped so far as to be unusable (below 1 MB/sec). And we're talking mkfs times in _days_. The host was a CentOS 5.2 box, 32-bit. Steve ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Canon Printer Woe
On Wednesday 16 December 2009 14:19, Eero Volotinen wrote: > By looking page: http://www.openprinting.org/printer_list.cgi?make=Canon > looks like your printer is unsupported? Thanks Eero, but Canon provide a cups driver here: http://software.canon-europe.com/products/0010407.asp However I am having difficulty making this work. Cheers, Colin ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LVM, usb drives, Active Directory
Steve Thompson wrote: > On Tue, 15 Dec 2009, Scott Ehrlich wrote: > >> I have a client with a handful of USB drives connected to a CentOS >> box. I am charged with binding the USB drives together into a single >> LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap >> storage in a single mount point). > > I tried doing this for fun once upon a time, using 6 1TB drives. I can > save you a lot of grief by suggesting that you don't think about this any > further. Boy is it slow. And extremely unreliable. And slow. Don't even do > it for backups. Did I say it was slow? > Please qualify 'slow'. Was it dog slow, turtle-slow, snail-slow or slowaris slow? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Canon Printer Woe
On 12/16/09 4:12 PM, Colin Coles wrote: > Hi, > Has anyone had any success using a Canon LBP5300 with CentOS or any other RH > type os for that matter, using the rpms and intructions downloaded from the > Canon website? I have it working on XP and OS X both via USB and network but > am having no success with either on CentOS 5.4 . Print jobs seem to be > processed correctly by CUPS but the printer doesn't respond at all and the > jobs show up as completed in the CUPS job list. I do not know how to test the > ccpd daemon but it seems to be running. Any pointers greatly appreciated. By looking page: http://www.openprinting.org/printer_list.cgi?make=Canon looks like your printer is unsupported? -- Eero ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Canon Printer Woe
Hi, Has anyone had any success using a Canon LBP5300 with CentOS or any other RH type os for that matter, using the rpms and intructions downloaded from the Canon website? I have it working on XP and OS X both via USB and network but am having no success with either on CentOS 5.4 . Print jobs seem to be processed correctly by CUPS but the printer doesn't respond at all and the jobs show up as completed in the CUPS job list. I do not know how to test the ccpd daemon but it seems to be running. Any pointers greatly appreciated. Cheers, Colin. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
