Re: [CentOS-es] Resumen de CentOS-es, Vol 56, Envío 23

2011-08-26 Thread Walter Cervini
Para poder hacer una reduccion del FS, debes primero desmontar el
filesystem antes de hacer el resize2fs. Si no lo haces asi, destruyes
el filsystem.



Saludos


Walter Cervini
RHCSA-RHCVA

El 20/08/2011, Roberto Chavez Caiche rocha...@hotmail.com escribió:



 Hola.
 hazle un  df -h  para ver la informacion en  GB
 deseas reducir el LVM
 solo tienes 3 LVM
 /
 /boot
 /ora06
 disculpa asumo que el ora06 es una particion de alojamiento de b/d
 por si acaso detuviste el servicio de la base de datos
 y desmontaste la particion /ora06 y ejecutaste el redimensionamiento de
 particiones



 Tengo el siguiente FS de prueba, necesito hacer esto en un equipo en
 produccion esta noche, y quiero realizar pruebas sobre esto, y no quiero
 morir mañana!!

 [root@prueba3 ~]# df
 Filesystem   1K-blocks  Used Available Use% Mounted on
 /dev/mapper/VolGroup00-LogVol00
  111952528   1578988 104596672   2% /
 /dev/mapper/VolGroup00-LVOra06
   99190192192252  93877940   1% /u06
 /dev/sda1   101086 12624 83243  14% /boot
 tmpfs   513464 0513464   0% /dev/shm

 Pasos:

 lvreduce -L-10.00G /dev/mapper/VolGroup00-LVOra06

 resize2fs -p /dev/mapper/VolGroup00-LVOra06

 lvextend -L+10.00G /dev/mapper/VolGroup00-LogVol00

 resize2fs -p /dev/mapper/VolGroup00-LogVol00

 Al realizar esto solo pude hacer el resize en VolGroup00-LogVol00,
 no me funciono con VolGroup00-LVOra06 !!!

 Alguien me podria ayudar en decirme cual es mi error!!

 Gracias por su tiempo y saludos!


 --

 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es


 Fin de Resumen de CentOS-es, Vol 56, Envío 23
 *
   
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es

___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS] XFCE missing applets: weather and xfapplet

2011-08-26 Thread wwp
Hello there,


I'm just looking for two XFCE applets I'm missing: the weather and
xfapplet (the one to load GNOME applets). Couldn't find them in
repositories I know of. Any hint or do I have to either wait or
compile their sources by hand?

Thanks in advance for any XFCE help!


Regards,

-- 
wwp


signature.asc
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Simon Matter
 --On Thursday, August 25, 2011 9:09 PM +0100 Always Learning
 cen...@u61.u22.net wrote:

 The temporary fix is shown on several web sites as this, shown below,
 added to Apache's conf file:-

 I try to minimize changes to main files. Presumably putting that code in a
 separate file (eg. conf.d/RangeVulnerabilityWorkaround.conf) should work
 equally well?

Hi,

Attached is what I've put into /etc/httpd/conf.d/CVE-2011-3192.conf and
I'll just remove it after the coming update is done.
At least killapache.pl doesn't kill anymore.

Works for me, YMMW.

Simon

CVE-2011-3192.conf
Description: Binary data
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Simon Matter
 --On Thursday, August 25, 2011 9:09 PM +0100 Always Learning
 cen...@u61.u22.net wrote:

 The temporary fix is shown on several web sites as this, shown below,
 added to Apache's conf file:-

 I try to minimize changes to main files. Presumably putting that code in
 a
 separate file (eg. conf.d/RangeVulnerabilityWorkaround.conf) should work
 equally well?

 Hi,

 Attached is what I've put into /etc/httpd/conf.d/CVE-2011-3192.conf and
 I'll just remove it after the coming update is done.
 At least killapache.pl doesn't kill anymore.

 Works for me, YMMW.

Sorry, forgot to mention that this is for EL4.

Simon

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Kenneth Porter
I don't see any mention of this in the CentOS announcements forum. I'd 
consider dropping the mailing list and switching to forums if this kind of 
warning appeared there.

https://www.centos.org/modules/newbb/viewforum.php?forum=53
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problems with kickstart installation into a Virtualbox

2011-08-26 Thread John Hodrien
On Thu, 25 Aug 2011, Paul Heinlein wrote:

 On Thu, 25 Aug 2011, John Hodrien wrote:

 This is a known bug of CentOS 6.0.  Redo the install without
 including the updates repo in your kickstart file, and you'll find
 it installs fine.

 Odd. I've had no trouble doing kickstarts with the updates repo
 specified in the kickstart configuration.

http://bugs.centos.org/view.php?id=4978

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Rudi Ahlers
On Fri, Aug 26, 2011 at 9:45 AM, Kenneth Porter sh...@sewingwitch.com wrote:
 I don't see any mention of this in the CentOS announcements forum. I'd
 consider dropping the mailing list and switching to forums if this kind of
 warning appeared there.

 https://www.centos.org/modules/newbb/viewforum.php?forum=53
 ___



The CentOS forum is pretty useless IMO

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] svnserve and SysVinit

2011-08-26 Thread Andrew Dorozhkin
26.08.2011 2:13, Craig White wrote:
 ah - never installed or used it - simply used the ssh/http/file transports I 
 guess - seemed to be enough.
Indeed, I really forgot to mention ssh-tunneling in the op-post.

But I likeclassic svn:// access scheme with per-repo configuration and
artificial user accounts stored in $REPO/conf/svnserve.conf most of all, 
so I have configured
svnserve to be spawned on demand by xinetd already and it works well.

Even though there is not an actual problem to make svnserve up and 
running in 6.x I am still
concerned about possible reasons which lead to svnserve-as-daemon 
abandonment as of 6.0.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] perl-Sys-Filesystem on 6.0

2011-08-26 Thread John Doe
From: m.r...@5-cent.us m.r...@5-cent.us

 I'm trying to install a number of perl modules, and yum gives up with
 perl-Sys-Filesystem, because it has a dependency of
 perl(:MODULE_COMPAT_5.8.8)

Not sure where you get your perl-Sys-Filesystem from but it 
works for me:

Dependencies Resolved


 Package  Arch    Version   Repository Size

Installing:
 perl-Sys-Filesystem  noarch  1.30-1.el6.rf rpmforge   57 k
Installing for dependencies:
 perl-Params-Util x86_64  1.00-3.el6    base   36 k

Transaction Summary

Install   2 Package(s)
Upgrade   0 Package(s)

# rpm -qR perl-Sys-Filesystem
perl(Carp)  
perl(FindBin)  
perl(IO)  
perl(Module::Pluggable) = 3.9
perl(Params::Util) = 1.00
perl = 5.008
rpmlib(FileDigests) = 4.6.0-1
rpmlib(PayloadFilesHavePrefix) = 4.0-1
rpmlib(CompressedFileNames) = 3.0.4-1
rpmlib(VersionedDependencies) = 3.0.3-1
rpmlib(VersionedDependencies) = 3.0.3-1
rpmlib(PayloadIsXz) = 5.2-1

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] new memory not getting regonized

2011-08-26 Thread sylvan . dcunha

dear All,

I had a Centos 5.5 OS running for about 6 months used as a Xen VM server  
prfectly running 3 Virtual machines


Its a Sun Blade server with 8 core Xeon Proceesor with 32 GB Ram

couple of days back I added another 32 gb ram .

The bios shows the added ram that is now it shows me 64 GB but the Centos  
OS just recognizes 32gb only


the OS details are:

Centos release 5.5 final
Kernel 2.6.18-194.32.1.el5xen on an x86_64

now also running uname -a shows me

Linux hypervisor2 2.6.18-194.32.1.el5xen #1 SMP Wed Jan 5 18:44:24 EST 2011  
x86_64 x86_64 x86_64 GNU/Linux


shows that PAE support is not there

I do believe that installing kernel PAE with yum should solve the problem  
but since the server is a online production server just wanted to verify if  
I would run into some problems


apprecite your kinf help and suggestions

regards


sylvan
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] new memory not getting regonized

2011-08-26 Thread Leonard den Ottolander
Hello Sylvan,

On Fri, 2011-08-26 at 10:10 +, sylvan.dcu...@gmail.com wrote:
 Kernel 2.6.18-194.32.1.el5xen on an x86_64 

 I do believe that installing kernel PAE with yum should solve the
 problem but since the server is a online production server just wanted
 to verify if I would run into some problems 

I have no idea why your server doesn't see the extra 32GB, but you do
*not* need a PAE kernel. PAE is a hack for 32bit system to use more than
4GB of memory. Your machine is a 64bit system, so you don't need a PAE
kernel on it.

Regards,
Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] new memory not getting regonized

2011-08-26 Thread benedict dcunha
Thanks Leonard,

Thanks for the immedite reply . apprecite.
actually many post s say the PAE kernel required for addressing more than 4
gb ram . but since my server already detects 32 gb ram , detecting 64 also
should not be an issue..

but just wondering why??.



regards

simon



On Fri, Aug 26, 2011 at 1:23 PM, Leonard den Ottolander 
leon...@den.ottolander.nl wrote:

 Hello Sylvan,

 On Fri, 2011-08-26 at 10:10 +, sylvan.dcu...@gmail.com wrote:
  Kernel 2.6.18-194.32.1.el5xen on an x86_64

  I do believe that installing kernel PAE with yum should solve the
  problem but since the server is a online production server just wanted
  to verify if I would run into some problems

 I have no idea why your server doesn't see the extra 32GB, but you do
 *not* need a PAE kernel. PAE is a hack for 32bit system to use more than
 4GB of memory. Your machine is a 64bit system, so you don't need a PAE
 kernel on it.

 Regards,
 Leonard.

 --
 mount -t life -o ro /dev/dna /genetic/research


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Thu, 2011-08-25 at 22:56 -0700, John R Pierce wrote:

 by putting all your site specific configurations in various 
 .conf files in the conf.d directory, your stuff is portable, and can
 be rpm deployed on any el system without complications.

That is exactly the flexibility I have when I put my site specific
Apache stuff in /data/config/apache


Paul.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 08:13 +0200, Simon Matter wrote:

 Attached is what I've put into /etc/httpd/conf.d/CVE-2011-3192.conf and
 I'll just remove it after the coming update is done.
 At least killapache.pl doesn't kill anymore.
 
 Works for me, YMMW.

IfModule mod_setenvif.c
SetEnvIf Range (,.*?){5,} bad-range=1
RequestHeader unset Range
/IfModule


Very useful.  Thanks Simon.

I found the Range temporary solution stopped the loading of a MySQL
table vua PHPmyAdmin,



-- 
With best regards,

Paul.
England,
EU.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool (temp fix update)

2011-08-26 Thread Colin Coles
On Thursday 25 Aug 2011, Colin Coles wrote:
 
 There are some work-around suggestions here:
 http://lwn.net/Articles/456268/

This has now been updated as original work-around was incomplete:

http://lists.grok.org.uk/pipermail/full-disclosure/2011-August/082427.html


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread John Doe
From: Jimmy Bradley bmobil...@ocellaris.net

      I've been out of pocket for a while, so don't shoot me, if this has
 already been brought up. I'm having a problem with my desktop freezing
 up, and I'm running Cent OS 6. It seems to happen while I'm running
 firefox. I'm not sure if it's firefox, or the OS that's locking up.
 When it freezes up, nothing will respond, so I'm inclined  to think it's
 the OS that's freezing up. Has anyone else been having this problem?

I've had many temporary whole desktop freezes due to Firefox being overloaded.
Not sure who is the culprit... Gnome? Xorg? NVidia driver?
Guess nothing in the bios or lnux logs?
You could try another browser for a while and see if there are no more 
freezes...

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] new memory not getting regonized

2011-08-26 Thread Dennis Jacobfeuerborn
On 08/26/2011 12:51 PM, benedict dcunha wrote:
 Thanks Leonard,
 Thanks for the immedite reply . apprecite.
 actually many post s say the PAE kernel required for addressing more than 4
 gb ram . but since my server already detects 32 gb ram , detecting 64 also
 should not be an issue..

many posts say a lot of things. Either these posts are specifically 
talking about 32bit systems or they are wrong.
With a 32bit integer you can only address 4gb of ram so a hack was devised 
to make it possible go beyond that limit called PAE.
Since with 64bit you no longer have that problem PAE doesn't exist on a 
64bit system.

http://en.wikipedia.org/wiki/Physical_Address_Extension

 but just wondering why??.

No idea but it has nothing to do with PAE. Can you post the output of xm 
info?

Regards,
   Dennis
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] new memory not getting regonized

2011-08-26 Thread John Doe
From: sylvan.dcu...@gmail.com sylvan.dcu...@gmail.com
I had a Centos 5.5 OS  running for about 6 months used as a Xen VM server 
prfectly running 3 Virtual machines 
Its a Sun Blade server with 8 core Xeon Proceesor with 32 GB Ram 
couple of days back I added another 32 gb ram . 
The bios shows the added ram that is now it shows me 64 GB but the Centos OS 
just recognizes 32gb only 


No Xen experience but did you do this?

http://wiki.xensource.com/xenwiki/XenFaq#head-f13e54576168210e3e59c16a1f2096e93ee4ed6d

JD

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Simon Matter
 --On Thursday, August 25, 2011 9:09 PM +0100 Always Learning
 cen...@u61.u22.net wrote:

 The temporary fix is shown on several web sites as this, shown below,
 added to Apache's conf file:-

 I try to minimize changes to main files. Presumably putting that code
 in
 a
 separate file (eg. conf.d/RangeVulnerabilityWorkaround.conf) should
 work
 equally well?

 Hi,

 Attached is what I've put into /etc/httpd/conf.d/CVE-2011-3192.conf and
 I'll just remove it after the coming update is done.
 At least killapache.pl doesn't kill anymore.

 Works for me, YMMW.

 Sorry, forgot to mention that this is for EL4.

And while looking into it again I realize that my solution is not really
a solution...

Simon

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread m . roth
John Doe wrote:
 From: Jimmy Bradley bmobil...@ocellaris.net

      I've been out of pocket for a while, so don't shoot me, if this
has already been brought up. I'm having a problem with my desktop
freezing up, and I'm running Cent OS 6. It seems to happen while I'm
running firefox. I'm not sure if it's firefox, or the OS that's locking
up. When it freezes up, nothing will respond, so I'm inclined  to think
it's the OS that's freezing up. Has anyone else been having this
problem?

 I've had many temporary whole desktop freezes due to Firefox being
overloaded.
 Not sure who is the culprit... Gnome? Xorg? NVidia driver?
 Guess nothing in the bios or lnux logs?
 You could try another browser for a while and see if there are no more
freezes...

I wouldn't say many, but yes, it does. It also does things like slowing
to a crawl, and then there's when I allow something via noscript, and
refresh the page... and then have to refresh and restart the streaming
media that's running in another tab.

mark



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help integrating CentOS 6 with existing network login infrastructure

2011-08-26 Thread Steven Crothers
Are they logging in locally or via SSH?

If they are logging in via SSH you can probably increase the verbosity of
that and SSH usually has some pretty great messages.

On Thu, Aug 25, 2011 at 11:49 AM, Alfred von Campe alf...@von-campe.comwrote:

 I've updated my kickstart configuration files to work with CentOS 6 and am
 most of the way there integrating a CentOS 6 system into our LDAP/NIS
 environment.  My authconfig line in the kickstart file is as follows:

  authconfig --enablemd5 --passalgo=sha512 --enablenis --nisdomain=XXX
 --nisserver=nis.XXX.com --useshadow --enablekrb5 --krb5realm=XXX.COM--krb5kdc=
 ldap.XXX.com --krb5adminserver=ldap.XXX.com

 This is virtually identical to the authconfig line I was using in CentOS 5.
  My issue is that users cannot log in with their network (NIS) usernames and
 passwords.

 If I log in as root, I can do a su - username and get the user's
 automounted home directory with the correct uid/gid, but if I try to log in
 as the user, or do a su - username as a non-root user and have to enter
 the password, authentication always fails.

 The entries in /var/log/secure just say su: pam_unix(su-l:auth):
 authentication failure.  I'm not a pam expert and don't know how to debug
 this.  Anyone else run into this and/or know what might be the problem? This
 works just fine in CentOS 5.

 Alfred

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos




-- 
Steven Crothers
steven.croth...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help integrating CentOS 6 with existing network login infrastructure

2011-08-26 Thread Alfred von Campe
On Aug 26, 2011, at 9:18, Steven Crothers wrote:

 Are they logging in locally or via SSH?

Locally.  Remote logins via ssh work just fine as the home directory is 
auto-mounted and ssh can find its keys.

I think I solved the problem, but am out of the office today to fully test it.  
It involved setting the default realm and adding some encryption types to the 
/etc/krb5.conf file.  What I still don't understand is what has changed in 
CentOS 6 that causes a kickstarted system not to be able to authenticate users 
whereas a CentOS 5 system can.  I need to do a few more installs to track down 
the root cause, and then I'll post an update here.

Alfred

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] updating 5.6 but not going to 6.0

2011-08-26 Thread Peter Kjellström
On Thursday, August 25, 2011 09:17:39 PM John R Pierce wrote:
 On 08/25/11 12:09 PM, Mike VanHorn wrote:
  I'm confused as to how to install updates for CentOS 5.6 without
  upgrading to 6.0. When I do a yum check-updates, the new *-release
  packages for 6.0 are listed, so I don't think I want to do a simply yum
  update.
  
  Is there a way to update 5.6 without going to 6.0?
 
 somethign is hosed in your yum.repos.d or something...  it should not be
 installing a 6.0 -release package

Agreed. CentOS-5.6 will only upgrade to 5.7, 5.8, ...

6.0 will in a similar fashion become 6.1, 6.2, ...

If you have a system where yum wants to install the CentOS-6 centos-release 
then either the distribution network is horribly messed up or you've got an 
incorrectly modified local yum configuration. My guess is on the latter.

/Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John Hinton
On 8/26/2011 7:27 AM, Always Learning wrote:
 On Thu, 2011-08-25 at 22:56 -0700, John R Pierce wrote:

 by putting all your site specific configurations in various
 .conf files in the conf.d directory, your stuff is portable, and can
 be rpm deployed on any el system without complications.
 That is exactly the flexibility I have when I put my site specific
 Apache stuff in /data/config/apache


 Paul.
I think the point is making use of what is by default built in to apache 
on our CentOS boxes. And this is and has been for some time making use 
of the include directed to look in /etc/httpd/conf.d directory and read 
in any *.conf files in that directory. So, why try to teach somebody to 
use another structure and customization?

And why is this a good idea? Well, it does add complication in having 
multiple files to deal with. But the upside to that is it does reduce 
the number of edits to the main conf file. What is useful about this? 
Well, I do remember one time editing httpd.conf in Vi and after I 
finished Apache wouldn't restart. Panic of course immediately sets in 
when a webserver is not running and I looked and looked and looked and 
looked and couldn't find any problem with what I had done. Finally, 
after what seemed like an eternity, I found that I must have 
accidentally hit the 'x' key just after opening the file and had deleted 
the first '#' from the first line.

I was working on a new virtual server during that edit and just knew I 
hadn't edited anywhere else... so had been totally concentrating on the 
end of the conf file instead of really looking at the top. If this had 
been in vhost.conf, I could have easily moved vhost.conf to 
vhost.conf.bak and immediately known that it was not the problem... and 
actually, wouldn't have had the main conf open to start with so would 
never have made that mistake.

So, argue all you want, but many programs 'by default' add their apache 
conf files into /etc/httpd/conf.d so why not follow conventions? If you 
die, the next admin should know to look there first. And, removing or  
doing a temp something.conf.bak file quickly takes potential errors out 
of the equation. To me, the use of this includes directory is simply 
good practice for multiple reasons. On this list, teaching best 
'standard' practices is a good idea. Who is going to think to tell 
someone to go look in /data/config/apache for a configuration two years 
from now when something breaks due to following non-standard practices?

John Hinton

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problems with kickstart installation into a Virtualbox

2011-08-26 Thread Paul Heinlein
On Fri, 26 Aug 2011, John Hodrien wrote:

 On Thu, 25 Aug 2011, Paul Heinlein wrote:

 On Thu, 25 Aug 2011, John Hodrien wrote:

 This is a known bug of CentOS 6.0.  Redo the install without 
 including the updates repo in your kickstart file, and you'll find 
 it installs fine.

 Odd. I've had no trouble doing kickstarts with the updates repo 
 specified in the kickstart configuration.

 http://bugs.centos.org/view.php?id=4978

No, I understand that it's a problem in some cases. I simply noted 
that it's odd that I've been able to include the updates repo 
without any problem.

-- 
Paul Heinlein  heinl...@madboa.com  http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 10:59 -0400, John Hinton wrote:

  To me, the use of this includes directory is simply 
 good practice for multiple reasons. On this list, teaching best 
 'standard' practices is a good idea. Who is going to think to tell 
 someone to go look in /data/config/apache for a configuration two
 years from now when something breaks due to following non-standard
 practices?

Unlike some other installations everything is documented, so everyone
knows.  Keeping information a secret from other workers is not practised
here.

Apache creates a default set-up. Default for those who need something
which 'works out of the box'. Apache then gives the creative person the
facilities to experiment and, as you illustrated, the ability to
minimise collateral disruption when something goes wrong when changing
files (like the mouse wheel button pasting copied text into unwanted
places).

Everything in, for example /data, is entire operating system
independent. Simple. The operating system dependant parts of Apache are
in the /etc /usr and /var directories, so they can be updated with other
operating system revisions. Remember the /etc /usr /var directories are
operating system directories, so we keep non-operating system items out
of them.

If I wanted to move everything to another operating system, for example
Solaris or BCD, everything in /data will work on the new operating
system without changes ! Just needs a few quick changes to the operating
system configuration files. Simple, Easy and Reliable.

An English saying is: Rules were made for the guidance of wise men but
for the obedience of fools.  Naturally I am not implying, nor would I,
that anyone on this list are in the latter category. However I believe
that saying makes a valid point.

Once upon a time people were killed for believing the world was not flat
and if one sailed far enough their ship would drop-off the edge of the
world. Blind and unthinking obedience and the intellectual inability to
question and experiment are not conducive to the successful development
and using of computers.

Please note I do not teach on here. I've already got a large
workload :-)

Best regards,

Paul.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Off topic list for centos please?

2011-08-26 Thread Lamar Owen
On Thursday, August 25, 2011 12:53:20 PM Les Mikesell wrote:
  And if anything drove posters away from here it was certain people
 telling them their input wasn't wanted.

Or correcting them in miniscule details and arguing about it ad nauseum.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS 6: add icon to desktop

2011-08-26 Thread Michael D. Berger
On my old CentOS 5 KDE, if I add a link to ~/Desktop, it
appears on the desktop as an icon.  But on my new CentOS 6
KDE, this does not work.  How can I make it work?

Thanks,
Mike.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6: add icon to desktop

2011-08-26 Thread nux
Michael D. Berger writes:

 On my old CentOS 5 KDE, if I add a link to ~/Desktop, it
 appears on the desktop as an icon.  But on my new CentOS 6
 KDE, this does not work.  How can I make it work?

Mike,

The difference between KDe 3.5 and KDE 4 that ships with Centos 6.0 is quite 
huge and a LOT of things have changed, better take this to KDE mailing list.

--
Nux!
www.nux.ro

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Les Mikesell
On Fri, Aug 26, 2011 at 10:37 AM, Always Learning cen...@u61.u22.net wrote:

 Apache creates a default set-up. Default for those who need something
 which 'works out of the box'.

'Apache' is infinitely configurable.  It is the upstream/Centos
distribution that provides a working base configuration that is also
the expected base for a large number of optional packages.

 Apache then gives the creative person the
 facilities to experiment and, as you illustrated, the ability to
 minimise collateral disruption when something goes wrong when changing
 files (like the mouse wheel button pasting copied text into unwanted
 places).

That's kind of irrelevant.  The thing that matters in a distribution
managed by a package manager is that the base and optional components
don't conflict with each other.  In many places the distribution
handles this by splitting what might be one big file into a directory
of included components so each package can manage its own optional
components.  Apache is one of these.  There are a number of web
applications available in the base and 3rd party repos that drop
snippets of apache config into /etc/httpd.conf.d and if you add your
own packages you can do the same without conflict as long as you
choose a different filename.

 Everything in, for example /data, is entire operating system
 independent. Simple. The operating system dependant parts of Apache are
 in the /etc /usr and /var directories, so they can be updated with other
 operating system revisions. Remember the /etc /usr /var directories are
 operating system directories, so we keep non-operating system items out
 of them.

Your are kind of missing the point there.   Do you also think /home
belongs to the OS and put your own files elsewhere?

 If I wanted to move everything to another operating system, for example
 Solaris or BCD, everything in /data will work on the new operating
 system without changes ! Just needs a few quick changes to the operating
 system configuration files. Simple, Easy and Reliable.

That's equivalent to saying you should always install programs from
source tarballs with 'configure; make; make install'.  You can do that
across different platforms, but that's probably much less important to
most people than having automatic updates available from packages
already well tested on your distribution.  Once in a while there is a
good reason to do something that isn't pre-packaged, but even then you
don't have to do it in a way that is incompatible with existing
packages.

-- 
  Les Mikesell
   lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Off topic list for centos please?

2011-08-26 Thread Les Mikesell
On Fri, Aug 26, 2011 at 10:37 AM, Lamar Owen lo...@pari.edu wrote:
 On Thursday, August 25, 2011 12:53:20 PM Les Mikesell wrote:
  And if anything drove posters away from here it was certain people
 telling them their input wasn't wanted.

 Or correcting them in miniscule details and arguing about it ad nauseum.

Nothing is wrong with getting details right - telling people to go
away is something else.  And if there is _one_ thing that should be on
topic and of utmost interest for CentOS users, it should be _when_ a
version or update is going to be available.  Practically everything
else is about upstream or the tiny differences.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

Les,

There are no /home directories on our servers. 

Data we create which is NOT essential for the operating system to
function is usually not in an operating system directory.

'yum update' still works successfully.

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6: howto install and run KDE

2011-08-26 Thread Anne Wilson
On Thursday 25 Aug 2011 Michael D. Berger wrote:
 On my laptop, I have not been able to get KDE to run; I
 always get gnome.  I installed selecting KDE, and I tried
 yum groupinstall, which appeared to work, but I still get
 gnome running.  BTW, I boot to level 3, and run startx.
 
The session you get should default to what you used last.  The problem is that 
if that was gnome, the way to switch is not obvious.  Try this.

On the login screen put in your username but not your password.
Look carefully at the bottom of the window - you should find that one of the 
icons there allows you to change your session type.  It is not visible until 
you have entered your username.

Once you have selected KDE you can add your password and continue.

Anne


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Les Mikesell
On Fri, Aug 26, 2011 at 11:13 AM, Always Learning cen...@u61.u22.net wrote:

 Les,

 There are no /home directories on our servers.

I thought you were trying to give general advice - or that what you
posted might be taken that way.

 Data we create which is NOT essential for the operating system to
 function is usually not in an operating system directory.

That's interesting, but not a necessary condition for anything.


 'yum update' still works successfully.


But, can you still 'yum install' any/all of the large number of
packaged web applications from the base and 3rd party repos  that will
drop additional files into conf.d and expect a certain base setup?

-- 
  Les Mikesell
   lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 11:22 -0500, Les Mikesell wrote:

 But, can you still 'yum install' any/all of the large number of
 packaged web applications from the base and 3rd party repos  that will
 drop additional files into conf.d and expect a certain base setup?

Definitely. That is essential. Non-operating system customisations go
in /data


Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6: add icon to desktop

2011-08-26 Thread Anne Wilson
On Friday 26 Aug 2011 Michael D. Berger wrote:
 On my old CentOS 5 KDE, if I add a link to ~/Desktop, it
 appears on the desktop as an icon.  But on my new CentOS 6
 KDE, this does not work.  

The reason is that Desktop is quite simply a directory - remember how it fits 
into the file system tree.  KDE 3.x made a special case of that directory, 
making everything in it visible on your workspace.  The default in KDE 4.x is 
not so.

 How can I make it work?

Two things you can do, depending on how you like to work.

a)  Right-click on an open space on your desktop.  You will see that it is set 
to Type: Desktop.  This is intended to stay a clean, empty desktop, apart from 
any widgets that you choose to add.  If you change the type to Folderview it 
will in fact show the contents of ~/Desktop - looking exactly like your old 
view.

b) If you like a clean desktop, but miss the easy access to shortcuts, etc., 
you can add a Folderview widget.  Initially it is rather big and points to ~/
  If you hover over a folderview you will see a 'handle' or 'toolbox' appear.  
The top icon allows you to resize it - you can also resize the icons within it 
by mouse-scrolling.  The second icon is for rotation - most people don't use 
that.  The next icon opens the Settings menu - and there you can change the 
directory that the folderview points to - if you use remote directories that 
is very useful.

You will find many changes explained in UserBase, but I'd recommend that you 
start with http://userbase.kde.org/Plasma - and the other section I'd really 
recommend that you read early is the Dolphin pages, particularly 
http://userbase.kde.org/Dolphin/File_Management

HTH

Anne


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John Hinton
On 8/26/2011 12:13 PM, Always Learning wrote:
 Les,

 There are no /home directories on our servers.

 Data we create which is NOT essential for the operating system to
 function is usually not in an operating system directory.

 'yum update' still works successfully.

 Paul.


All good that you customize your servers and that shows the beauty of 
our chosen OS. However, posting non-standard configs on this list shows 
up in google searches all over the place and has a good potential to 
confuse those that need some help. That's my point. Obviously your point 
is you can put them anywhere and your company has decided that is a best 
practice. I would never argue against your decision to do that.

Meanwhile, the original 'good suggestion' to use the /etc/httpd/conf.d 
directory for adding the patches has been totally watered down by this 
blathering (me included) which would best be under a totally different 
thread about how you can put stuff any where you want. Or, 'the merits 
of using a data directory'.

You don't teach? If you post, you teach... like it or not.

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Les Mikesell
On Fri, Aug 26, 2011 at 11:30 AM, Always Learning cen...@u61.u22.net wrote:

 But, can you still 'yum install' any/all of the large number of
 packaged web applications from the base and 3rd party repos  that will
 drop additional files into conf.d and expect a certain base setup?

 Definitely. That is essential. Non-operating system customisations go
 in /data


But there is nothing related in those two statements.  It would be
equally true if you put your customizations in differently named files
under /etc/httpd/conf.d and in directories under /var/www/html.   The
difference is that anyone familiar with the standard layout could look
at a system and understand it quickly where your non-standard
locations would have to be carefully documented and a new admin would
need to waste time figuring it out.

-- 
  Les Mikesell
   lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John Hinton
On 8/26/2011 12:30 PM, Always Learning wrote:
 On Fri, 2011-08-26 at 11:22 -0500, Les Mikesell wrote:

 But, can you still 'yum install' any/all of the large number of
 packaged web applications from the base and 3rd party repos  that will
 drop additional files into conf.d and expect a certain base setup?
 Definitely. That is essential. Non-operating system customisations go
 in /data
OK, so if you do an install of squirrelmail from a repo, is that 
operating system or customization? Where does squirrelmail.conf wind up? 
Are you running two include lines in httpd.conf? One for 
/data/apache/custom and one for /etc/httpd/conf.d? Or maybe doing a ln 
from conf.d to custom?

John
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 11:46 -0500, Les Mikesell wrote:

 But there is nothing related in those two statements.  It would be
 equally true if you put your customizations in differently named files
 under /etc/httpd/conf.d and in directories under /var/www/html.   The
 difference is that anyone familiar with the standard layout could look
 at a system and understand it quickly where your non-standard
 locations would have to be carefully documented and a new admin would
 need to waste time figuring it out.

As previously mentioned everything is documented, so too is the logic
for the decisions.

We do not willingly add anything to /etc/httpd/conf.d or
to /var/www/html. Our chosen operating system does not require it.

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Craig White

On Aug 26, 2011, at 8:37 AM, Always Learning wrote:

 
 On Fri, 2011-08-26 at 10:59 -0400, John Hinton wrote:
 
  To me, the use of this includes directory is simply 
 good practice for multiple reasons. On this list, teaching best 
 'standard' practices is a good idea. Who is going to think to tell 
 someone to go look in /data/config/apache for a configuration two
 years from now when something breaks due to following non-standard
 practices?
 
 Unlike some other installations everything is documented, so everyone
 knows.  Keeping information a secret from other workers is not practised
 here.
 
 Apache creates a default set-up. Default for those who need something
 which 'works out of the box'. Apache then gives the creative person the
 facilities to experiment and, as you illustrated, the ability to
 minimise collateral disruption when something goes wrong when changing
 files (like the mouse wheel button pasting copied text into unwanted
 places).
 
 Everything in, for example /data, is entire operating system
 independent. Simple. The operating system dependant parts of Apache are
 in the /etc /usr and /var directories, so they can be updated with other
 operating system revisions. Remember the /etc /usr /var directories are
 operating system directories, so we keep non-operating system items out
 of them.
 
 If I wanted to move everything to another operating system, for example
 Solaris or BCD, everything in /data will work on the new operating
 system without changes ! Just needs a few quick changes to the operating
 system configuration files. Simple, Easy and Reliable.
 
 An English saying is: Rules were made for the guidance of wise men but
 for the obedience of fools.  Naturally I am not implying, nor would I,
 that anyone on this list are in the latter category. However I believe
 that saying makes a valid point.
 
 Once upon a time people were killed for believing the world was not flat
 and if one sailed far enough their ship would drop-off the edge of the
 world. Blind and unthinking obedience and the intellectual inability to
 question and experiment are not conducive to the successful development
 and using of computers.
 
 Please note I do not teach on here. I've already got a large
 workload :-)
 
 Best regards,

oy - no wonder you turn off selinux - you are determined to re-engineer things 
that were designed with logic and intent.

Perhaps you should use some other non-redhat type of distribution 
(debian/ubuntu) to get a feel for the fact that there actually is intelligent 
ways to plan out configuration files and gasp, in /etc/

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread m . roth
Always Learning wrote:

 On Fri, 2011-08-26 at 11:46 -0500, Les Mikesell wrote:

 But there is nothing related in those two statements.  It would be
 equally true if you put your customizations in differently named files
 under /etc/httpd/conf.d and in directories under /var/www/html.   The
 difference is that anyone familiar with the standard layout could look
 at a system and understand it quickly where your non-standard
 locations would have to be carefully documented and a new admin would
 need to waste time figuring it out.
snip
 We do not willingly add anything to /etc/httpd/conf.d or
 to /var/www/html. Our chosen operating system does not require it.

Does not require?

I dunno. My current job, and the last two - that goes back to '06 - *all*
did minimal changes to /etc/httpd/conf/httpd.conf, and put *everything*
else in /etc/httpd/conf.d, including ssl.conf.  IIRC, in fact, the package
install puts proxy_agp.conf there.

Also, it makes things a *lot* cleaner to have website1.conf,
website2.conf, etc in conf.d, rather than in one huge httpd.conf.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 12:47 -0400, John Hinton wrote:

 OK, so if you do an install of squirrelmail from a repo, is that 
 operating system or customization? Where does squirrelmail.conf wind
 up? 

We do not use Squirrelmail.

 Are you running two include lines in httpd.conf? One for 
 /data/apache/custom and one for /etc/httpd/conf.d? Or maybe doing a ln
 from conf.d to custom?

/etc/httpd/conf/httpd.conf has:-

112: Include conf.d/*.conf

126: User apache
127: Group apache
128:
129: #  Section 2: 'Main' server configuration 
130:
131: Include /data/config/apache/server.conf
132:
133: #- Section 3: Virtual Hosts ---
134:
135: include /data/config/apache/domain.*
136:
137: #--


Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Off topic list for centos please?

2011-08-26 Thread Anne Wilson
On Thursday 25 Aug 2011 John R Pierce wrote:
 On 08/25/11 9:46 AM, R P Herrold wrote:
  yeah -- just like there is presently any self control being
  shown by certain serial offenders here.  We could set it up,
  but the people who need to use it wont't
 
 sadly, we'd see the same crap cross-posted to all those lists

I read many lists, and I've seen more crap in this single thread than in all 
the other lists put together.  Most of it comes from the self-righteous.

Anne


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread m . roth
Always Learning wrote:

 On Fri, 2011-08-26 at 12:47 -0400, John Hinton wrote:

 OK, so if you do an install of squirrelmail from a repo, is that
 operating system or customization? Where does squirrelmail.conf wind
 up?

 We do not use Squirrelmail.

Paul, you've completely missed what John was asking: what qualifies as
o/s, and what qualifies as third party, or whatever? Which is apache, or
php, or gcc, or tomcat5? Certainly, tomcat and httpd get fired off by root
at system boot.
snip

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 13:37 -0400, m.r...@5-cent.us wrote:

 Paul, you've completely missed what John was asking: what qualifies as
 o/s, and what qualifies as third party, or whatever? Which is apache, or
 php, or gcc, or tomcat5? Certainly, tomcat and httpd get fired off by root
 at system boot.

Mark,

I don't know about your systems but on ours

php
gcc
tomcat5

do NOT require customisation. Apache does. For example:-

ServerAdmin
ServerName
DirectoryIndex
DefaultLanguage
LanguagePriority and all the other site options

Keeping the bits that remain static separate from the bits that change
per server is our choice.

Putting virtual hosts, including those with sub-domains, in a individual
'domain name' text file ensures for us smooth running. For us deleting a
virtual host is deleting one named text file. Adding a virtual host
means creating one text file. Changing a virtual host means changing one
file. Moving a virtual host to a different server or even to a different
operating system means moving one file. Of course it requires a 

service httpd restart or reload

Meanwhile nothing else is disrupted, or at risk of disruption or
inadvertently altered.  We like quickness, simpleness and easiness. Keep
it plain and simple is our motive.

Those who like dumping everything in one large text file can. I was
speaking to a sys admin this week who has only 1,200 virtual hosts in
the main Apache file.


Paul.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Les Mikesell
On Fri, Aug 26, 2011 at 1:00 PM, Always Learning cen...@u61.u22.net wrote:

 Putting virtual hosts, including those with sub-domains, in a individual
 'domain name' text file ensures for us smooth running.

No one has suggested otherwise.  The question is, what do you gain by
putting this file in a place where no one but you would know to look
for it instead of the place that is conveniently provided?  And for
the things that might be sensitive to loading order, how do you
control that with different include locations?

-- 
  Les Mikesell
   lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John R Pierce
On 08/26/11 11:00 AM, Always Learning wrote:
 Those who like dumping everything in one large text file can. I was
 speaking to a sys admin this week who has only 1,200 virtual hosts in
 the main Apache file.

which part of /etc/httpd/conf.d/*.conf are you missing?   Each vhost 
gets its OWN conf file, ideally packaged with the vhost's application 
files and depedencies as an RPM, so it can be deployed/undeployed by a 
single command, or included in a kickstart, or whatever...

there should be NOTHING in the main httpd.conf that needs changing, I 
haven't had to touch that file in years on any of my EL4/5/6 systems.  I 
put global stuff in a /etc/httpd/conf.d/00globalstuff.conf  (the *.conf 
files are loaded in sort order so a 00something file will get loaded 
before any others).



-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread m . roth
Always Learning wrote:

 On Fri, 2011-08-26 at 13:37 -0400, m.r...@5-cent.us wrote:

 Paul, you've completely missed what John was asking: what qualifies as
 o/s, and what qualifies as third party, or whatever? Which is apache, or
 php, or gcc, or tomcat5? Certainly, tomcat and httpd get fired off by
 root
 at system boot.

 I don't know about your systems but on ours

   php
   gcc
   tomcat5

 do NOT require customisation. Apache does. For example:-

   ServerAdmin
   ServerName
   DirectoryIndex
   DefaultLanguage
   LanguagePriority and all the other site options

 Keeping the bits that remain static separate from the bits that change
 per server is our choice.

shakes head
Yeah, but that's a very non-standard concept. If you and the rest of your
team go out to lunch, and are killed by food poisoning, or an
out-of-control senior citizen, anyone walking in will take a good bit
longer to find where all versions of *Nix normally put their configuration
files, ain't. And you *are* customizing /etc/httpd/conf/httpd.conf.

 Putting virtual hosts, including those with sub-domains, in a individual
 'domain name' text file ensures for us smooth running. For us deleting a
 virtual host is deleting one named text file. Adding a virtual host

Missed that part, but that's what I said everybody seems to do... but they
do it in /etc/httpd/conf.d
snip
 Those who like dumping everything in one large text file can. I was
 speaking to a sys admin this week who has only 1,200 virtual hosts in
 the main Apache file.

So, you were speaking to the guy who was at the bottom of their class?
That's inane.

I stay with std. practice, as much as I can. It works, too. The first time
I ever did system admin, back in the mid-nineties, I'd worked in Unix for
about 4 years, but never done admin work. For the next 9 or 10 mos, along
with my wife, I slept with Frisch's Essential Systems Administration. from
O'Reilly. When the division had grown from 4 teams to 27, and the co.
brought in a sysadmin team, they told me that my box was one of *two* that
looked normal; everyone else was a disaster (everyone had root, and/or
directories scattered all over, including in /...).

Leaving stuff in std. places is *not* security risk, it's making life
easier. And remember, if you go on vacation, whoever has to take care of
it will have to take the time to figure it out, rather than go to where
everyone expects stuff.

Oh, and php *certainly* requires configuration.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread Keith Roberts
On Thu, 25 Aug 2011, Jimmy Bradley wrote:

 To: CentOS mailing list centos@centos.org
 From: Jimmy Bradley bmobil...@ocellaris.net
 Subject: [CentOS] Cent OS 6 freezing up

 I've been out of pocket for a while, so don't shoot me, if this has
 already been brought up. I'm having a problem with my desktop freezing
 up, and I'm running Cent OS 6. It seems to happen while I'm running
 firefox. I'm not sure if it's firefox, or the OS that's locking up.
 When it freezes up, nothing will respond, so I'm inclined  to think it's
 the OS that's freezing up. Has anyone else been having this problem?

I've noticed something similar on Centos 5.6 when using 
Firefox. I traced it down to the Firefox flashplayer plugin 
- something called npviewer.bin

If I upload a picture to www.tinypic.com and then highlight 
the text to copy the picture's url, right clicking on the 
highlighted text causes Firefox to freeze, and swapping 
desktops is very slugish. Killing npviewer.bin unlocks the 
system again.

Is this some sort of bug in the flashplugin?

Kind Regards,

Keith Roberts

-
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John Hinton
On 8/26/2011 1:18 PM, Always Learning wrote:
 Are you running two include lines in httpd.conf? One for
 /data/apache/custom and one for /etc/httpd/conf.d? Or maybe doing a ln
 from conf.d to custom?
 /etc/httpd/conf/httpd.conf has:-

 112: Include conf.d/*.conf

 126: User apache
 127: Group apache
 128:
 129: #  Section 2: 'Main' server configuration 
 130:
 131: Include /data/config/apache/server.conf
 132:
 133: #- Section 3: Virtual Hosts ---
 134:
 135: include /data/config/apache/domain.*
 136:
 137: #--


OK, so you have just chosen to put your vhost confs in an alternate 
directory. There are sound reasons for doing that, like ease of backups 
and dumb minded restores that any low level tech could do. Me... I just 
do a single vhost.conf file for all virtual servers. Works fine for me 
thus far and there's less trash to look through when trying to find a 
conf file. All good. I backup all of /etc and am not worried as we have 
no dumb minded techs that would ever be doing a restore so don't need an 
easier solution. Doing what you are doing might be a simpler solution or 
a vastly more complex solution... all depending on the services 
running... upgrade frequency and how well everything works during those 
updates. It all depends on what the servers are doing. To suggest others 
follow in your footsteps however is very short sighted. Again, I would 
never tell you that you shouldn't do it your way. That would be very 
short sighted of me.

The two includes in httpd.conf allows both areas to load, but does break 
'alternative' installs, such as squirrelmail as just one of many 
examples (assuming you got rid of the /etc/httpd/conf.d include). So, 
yum install squirrelmail would not work without customization on your 
system, along with a number of other system wide tools one might want to 
run under apache. Python, php, manual, welcome, webalizer, ssl, squid, 
proxy_ajp, perl, cacti are all examples.

Again though, adding in one new conf file for a temporary patch has 
nothing to do with how your servers are set up but how the vast majority 
of CentOS servers 'are' set up and to suggest an alternative area is 
just off the topic and potentially confusing to those that are trying to 
follow a step by step procedure down to the letter.

I'm done with this this part of this thread and hope it can get back to 
what it was intended to do and that was simply how to avoid this DoS 
attack... NOT how to relocate where files are stored. I do recognize the 
merits of what you are doing.

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 19:31 +0100, Keith Roberts wrote:

 Is this some sort of bug in the flashplugin?

The Internet is littered with news of Flash bugs. HTML 5 offers the same
facilities except it does not hide information on your hard disk like
Flash does.

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 14:34 -0400, John Hinton wrote:

 OK, so you have just chosen to put your vhost confs in an alternate 
 directory. There are sound reasons for doing that, like ease of backups 
 and dumb minded restores that any low level tech could do.

Thank you.

 To suggest others follow in your footsteps however is very short
 sighted.

I have never, not once, suggested others copy my layout.

 The two includes in httpd.conf allows both areas to load, but does break 
 'alternative' installs, such as squirrelmail as just one of many 
 examples (assuming you got rid of the /etc/httpd/conf.d include).

We have no intention of using Squirrel Mail.

 So, yum install squirrelmail would not work without customization on your 
 system, along with a number of other system wide tools one might want to 
 run under apache. Python, php, manual, welcome, webalizer, ssl, squid, 
 proxy_ajp, perl, cacti are all examples.

We have no problems running Apache with MySQL, PHP, SSL ...

   to suggest an alternative area is 
 just off the topic and potentially confusing to those that are trying to 
 follow a step by step procedure down to the letter.

I have never, not once, suggested others copy my layout.

 I do recognize the merits of what you are doing.

Thank you.


Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] was, Re: Cent OS 6 freezing up, is flash danger

2011-08-26 Thread m . roth
Speaking of flash bugs, did anyone read slashdot today? They've got a
story on *finally* finding the exact vector of the RSA intrusion: someone
at the parent co. got an attached .xls file, and in the spreadsheet was an
embedded flash video that actually used a known vulnerability to install
malware.

As the guy in the original story asked, why would you want to embed a
flash video in a freakin' spreadsheet?

Flash is dangerous. Treat it that way. I've got noscript, and the only
flash I see are ones *I* explicitly choose to watch.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] was, Re: Cent OS 6 freezing up, is flash danger

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 14:54 -0400, m.r...@5-cent.us wrote:

 Flash is dangerous. Treat it that way. I've got noscript, and the only
 flash I see are ones *I* explicitly choose to watch.

Yep. We have always been 100% Flash free. We thought it dangerous years
ago but 99.9% of people seem desperate to use it. Nice to know we we
*right*.


Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 14:19 -0400, m.r...@5-cent.us wrote:

 If you and the rest of your
 team go out to lunch, and are killed by food poisoning, or an
 out-of-control senior citizen, anyone walking in will take a good bit
 longer to find where all versions of *Nix normally put their configuration
 files, ain't. And you *are* customizing /etc/httpd/conf/httpd.conf.

We have D-O-C-U-M-E-N-T-A-T-I-O-N which remains behind we we go home, go
to lunch and go on holiday.

 I stay with std. practice, as much as I can.

I do too but where there are multiple servers using almost the same
setup, the changeable bits are 'included' and kept in individual files. 

 I slept with Frisch's Essential Systems Administration. from
 O'Reilly.

I'll have a look but I prefer to sleep with someone who is warm and
cuddly. Not sure a book is an adequate substitute however interesting
the text may be :-)

 Oh, and php *certainly* requires configuration.

Can't remember what I changed in /etc if I changed it.


Paul.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] was, Re: Cent OS 6 freezing up, is flash danger

2011-08-26 Thread Lamar Owen
On Friday, August 26, 2011 02:54:11 PM m.r...@5-cent.us wrote:
 As the guy in the original story asked, why would you want to embed a
 flash video in a freakin' spreadsheet?

Intriguing.

As to why, well, probably for the same or similar reasons as you'd embed into a 
powerpoint presentation.  I can see some utility in video cells in a 
spreadsheet for certain things.  I know, it's alien to the 'unix way' that we 
all know and love, but businesses like to have packaged 'things' that just have 
everything you need in them.  Embedded app data inside other apps files is a 
seriously common technique in business; and it's fairly old tech, at least 
dating to OLE way back when.  Once to can embed a generic OLE object, there 
will be a user out there that starts thinking up wierd and wonderful ways of 
presenting data with such embedding.

Instead of a 'notes' cell documenting the reason for, say, a manufacturing line 
failure or success you could have a video documenting same, and all within the 
spreadsheet.  Yeah, I wouldn't do that, but I know businesspeople who would in 
a heartbeat.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Lamar Owen
On Friday, August 26, 2011 03:02:06 PM Always Learning wrote:
 On Fri, 2011-08-26 at 14:19 -0400, m.r...@5-cent.us wrote:
  And you *are* customizing /etc/httpd/conf/httpd.conf.

 We have D-O-C-U-M-E-N-T-A-T-I-O-N which remains behind we we go home, go
 to lunch and go on holiday.

  I stay with std. practice, as much as I can.

 I do too but where there are multiple servers using almost the same
 setup, the changeable bits are 'included' and kept in individual files. 

What can you do with this setup that you can't with the standard way of putting 
those files, including other includes, in the standard /etc/httpd/conf.d/ 
directory?  As the stock httpd.conf is already set up to do those automatic 
includes out of /etc/httpd/conf.d/, no customization nor special documentation 
is required to handle essentially everything you've said on this topic.  If you 
put those individual vhost files in the /etc/httpd/conf.d/ directory, you don't 
have to do anything at all extra, and you don't have to document it, since it's 
already the standard way, which saves you time and money.  (Or, to paraphrase a 
common rejoinder in NANOG, 'I encourage my competitors to do it that way.')

You can have a single file per vhost, no problem, in /etc/httpd/conf.d/.  You 
can back it up easily (/etc should be a stock part of everyone's backups, 
right?).  You can subinclude, even making a subtree under the 
/etc/httpd/conf.d/ directory.  And it's all already set up to just work with 
SELinux and the other RHEL (RHCE!) documented ways of doing things.   And it IS 
the standard way of doing what you're saying is the way you do things.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John R. Dennison
Forget it.  He won't listen and will continue to further his
nonsensical methods of configuration with silly justifications that
don't hold up.  Please, just let him be right so he'll stop needing to
get the last word in all the time and perhaps this thread can die.




John
-- 
Those who know do not speak; those who speak do not know.

-- Tao


pgpAqbK9XtR38.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 15:13 -0400, Lamar Owen wrote:

 And it IS the standard way of doing what you're saying is the way you
 do things.

Thanks. Have a nice weekend.

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John Hinton
On 8/26/2011 3:02 PM, Always Learning wrote:
 Oh, and php *certainly* requires configuration.
 Can't remember what I changed in /etc if I changed it.
It should be there in your documentation... ;) LOL!!! Me? My 
documentation is in my head... 'burned' into my brain, from following 
upstream's suggestions for the last 15 or more years. And yes that 
'upstream book' has been revised over those years, but not everything.

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 15:25 -0400, John Hinton wrote:

 On 8/26/2011 3:02 PM, Always Learning wrote:
  Oh, and php *certainly* requires configuration.
  Can't remember what I changed in /etc if I changed it.
 It should be there in your documentation... ;) LOL!!! Me? My 
 documentation is in my head... 'burned' into my brain, from following 
 upstream's suggestions for the last 15 or more years. And yes that 
 'upstream book' has been revised over those years, but not everything.

With so much valuable information in your head, don't let Mark take you
out to lunch in case you get food poisoning, run-over or mugged by a
group of old pensioners ;-) 

I only wish I have come to Linux years ago. It is so refreshingly nice.
Everything a real operating system should be and reminiscent of the once
great Mainframes.


Paul.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] was, Re: Cent OS 6 freezing up, is flash danger

2011-08-26 Thread m . roth
Always Learning wrote:

 On Fri, 2011-08-26 at 14:54 -0400, m.r...@5-cent.us wrote:

 Flash is dangerous. Treat it that way. I've got noscript, and the only
 flash I see are ones *I* explicitly choose to watch.

 Yep. We have always been 100% Flash free. We thought it dangerous years
 ago but 99.9% of people seem desperate to use it. Nice to know we we
 *right*.

Oh, hey, then there's two of my favorite rants: flash and HR depts. A
couple of years ago, when I was jobhunting, there was one very large
corporation whose website had a *video* of some HR person telling you
about their hot jobs, while you were trying to search. Then there was
the one, a couple years before, that had a flash video -ON THE RESUME
SUBMISSION FORM-

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread m . roth
Always Learning wrote:

 On Fri, 2011-08-26 at 14:19 -0400, m.r...@5-cent.us wrote:

 If you and the rest of your
 team go out to lunch, and are killed by food poisoning, or an
 out-of-control senior citizen, anyone walking in will take a good bit
 longer to find where all versions of *Nix normally put their
 configuration files, ain't. And you *are* customizing /etc/httpd
 /conf/httpd.conf.

 We have D-O-C-U-M-E-N-T-A-T-I-O-N which remains behind we we go home, go
 to lunch and go on holiday.

Right. And you have a 100% confidence level that it will a) *always* be up
to date, b) available, and c) actually readable
http://24.5-cent.us/http://24.5-cent.us/egoless_documentation.doc We'll
ignore the old Dilbert where, was it Dogbert or Dilbert, who stood on a
chair, with their head over the top of the cube farm, and yelled out, HAS
ANYONE RTFM?!, and got no answers

 I stay with std. practice, as much as I can.

 I do too but where there are multiple servers using almost the same
 setup, the changeable bits are 'included' and kept in individual files.

 I slept with Frisch's Essential Systems Administration. from
 O'Reilly.

 I'll have a look but I prefer to sleep with someone who is warm and
 cuddly. Not sure a book is an adequate substitute however interesting
 the text may be :-)

I did say that was in addition to my ...late... wife.

 Oh, and php *certainly* requires configuration.

 Can't remember what I changed in /etc if I changed it.

Oh, no, it used to be worse - I'd have to edit the sucker down in, where
was it, /usr/lib/php, or /usr/local/lib/php?

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 16:12 -0400, m.r...@5-cent.us wrote:

 Right. And you have a 100% confidence level that it will a) *always* be up
 to date, b) available, and c) actually readable

I've always been praised for my good documentation.

 http://24.5-cent.us/http://24.5-cent.us/egoless_documentation.doc

404 Error File Not Found

http://24.5-cent.us/egoless_documentation.doc - was that an IQ test ?


 I did say that was in addition to my ...late... wife.

Sorry to learn of your loss.

 Oh, no, it used to be worse - I'd have to edit the sucker down in, where
 was it, /usr/lib/php, or /usr/local/lib/php?

Not there on Centos 5.6 and /usr/local is empty.

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Installing 6.0 via USB

2011-08-26 Thread Kenneth Porter
I'm using LiveUSB-Creator to create a bootable USB drive from 
CentOS-6.0-i386-netinstall.iso, and it gives me an error at startup:

vesamenu.c32: Not a COM32R image

I can hit tab and select linux and then it loads vmlinux and the initrd, 
says Ready, and then just hangs. I'm not sure what's supposed to happen 
next. vesa and rescue do the same thing.

The error message above apparently is caused by the syslinux in the ISO not 
matching the one that LiveUSB-Creator installs to boot from:

https://bugzilla.redhat.com/show_bug.cgi?id=662557

The system has 512 MB of memory. Is that enough to boot the installer?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6.0 and freenx

2011-08-26 Thread Akemi Yagi
On Tue, Aug 2, 2011 at 12:54 PM, Akemi Yagi amy...@gmail.com wrote:
 On Tue, Aug 2, 2011 at 8:34 AM, Akemi Yagi amy...@gmail.com wrote:
 On Tue, Aug 2, 2011 at 6:34 AM, Daniel J Walsh dwa...@redhat.com wrote:

 I have updated that web site.  What is the path of the .ssh directory
 that is giving you a problem?  Does running restorecon on the directory
 solve it?

 Thanks for the post at:

 http://blog.toracat.org/2010/12/selinux-and-freenx/

 User nx's home directory is /var/lib/nxserver/home .

 I will test your suggestion and report back with what I find.

 Yes, that indeed solved the selinux issue.  First, using a test VM, I
 made sure connection failed if selinux was enabled.  Then I ran:

 restorecon -R -v /var/lib/nxserver

 and now I am able to connect without a problem.

 Thanks for your help. I will update the blog accordingly.

I now have an updated version of freenx that runs the above restorecon
command upon installation. With this version, there is no need for the
selinux tweak. Please test if you can.

http://centos.toracat.org/misc/nx-freenx/6/

freenx-0.7.3-8.el6.ay is the latest. nx remains the same ( nx-3.4.0-7.el6.ay ).

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] vmxnet3 patch for CentOS6 kernel?

2011-08-26 Thread Akemi Yagi
On Tue, Aug 23, 2011 at 1:31 PM, Akemi Yagi amy...@gmail.com wrote:

 On Thu, Aug 11, 2011 at 2:17 PM, Matti Aarnio matti.aar...@methics.fi 
 wrote:
 Hi,

 Could CentOS kernel keepers apply following patch on current kernel?
    http://patchwork.ozlabs.org/patch/95785/

 (snip)

 Could this be applied on stock CentOS kernel so that I could return on 
 un-customized kernel use?

 Submitted the request on behalf of the OP:

 http://bugs.centos.org/view.php?id=5054

 A kernel update ( 2.6.32-131.12.1.el6 ) came out upstream today. This
 patch will be added to the centosplus kernel.

The latest centosplus test kernel (  kernel-2.6.32-131.12.1.el6.ayplus
) has the patch  referenced by the OP. The binaries are here:

http://centos.toracat.org/kernel/centos6/centosplus-testing/

Matti, can you please test this kernel?

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Installing 6.0 via USB

2011-08-26 Thread Kenneth Porter
--On Friday, August 26, 2011 2:41 PM -0700 Kenneth Porter 
sh...@sewingwitch.com wrote:

 I'm using LiveUSB-Creator to create a bootable USB drive from
 CentOS-6.0-i386-netinstall.iso, and it gives me an error at startup:

I tried with the minimal image and get the exact same result.

The x64 image includes memtest86, and I'm able to run that. So it looks 
like something about the installation kernel is blocking me.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread m . roth
Always Learning wrote:
 On Fri, 2011-08-26 at 15:25 -0400, John Hinton wrote:
 On 8/26/2011 3:02 PM, Always Learning wrote:
snip
 I only wish I have come to Linux years ago. It is so refreshingly nice.
 Everything a real operating system should be and reminiscent of the once
 great Mainframes.

You don't think they're still great? Check IBM, who's sales of m'frames
keep up, and grow. Y'know, 'bout 10 years ago, using their VM (that
they've had since the seventies...), one of their engineers found that he
could comfortably run 32000 instances of Linux on one big iron, and only
maxed it out at over 48000 VMs

And, of course, IBM really, *really wants folks to use Linux. I mean, if
*you* were Big Blue, would you want to support, uh,
sys38/4000/RISC6000/AIX/DOS/VSE/SP/whatever letters in the last 15
years)/MVS/zOS... or just Linux? (You've grown your business, and need a
bigger machine? Great! Here's the next large box, just throw it on, maybe
just recompile, and no porting needed!)

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread m . roth
Always Learning wrote:
 On Fri, 2011-08-26 at 16:12 -0400, m.r...@5-cent.us wrote:

 Right. And you have a 100% confidence level that it will a) *always* be
 up to date, b) available, and c) actually readable

 I've always been praised for my good documentation.

 http://24.5-cent.us/http://24.5-cent.us/egoless_documentation.doc
   404 Error File Not Found
 http://24.5-cent.us/egoless_documentation.doc - was that an IQ test ?

Sorry, typing too fast, had to go do actual work. g
snip
 Oh, no, it used to be worse - I'd have to edit the sucker down in, where
 was it, /usr/lib/php, or /usr/local/lib/php?

 Not there on Centos 5.6 and /usr/local is empty.

php used to get installed in one of those, back in RHEL 3. Of course,
where I was, we had to actually *build* the damn thing, since out of the
box didn't support encryption.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John R Pierce
On 08/26/11 2:16 PM, m.r...@5-cent.us wrote:
 And, of course, IBM really, *really wants folks to use Linux. I mean, if
 *you*  were Big Blue, would you want to support, uh,
 sys38/4000/RISC6000/AIX/DOS/VSE/SP/whatever letters in the last 15
 years)/MVS/zOS... or just Linux? (You've grown your business, and need a
 bigger machine? Great! Here's the next large box, just throw it on, maybe
 just recompile, and no porting needed!)

they still push z/OS (the descendent of OS/370) as a primary mainframe 
OS for large scale database and batch processing, and AIX on Power 
servers for big database servers and such.Linux still has vertical 
scaling issues for larger workloads, and transaction processing doesn't 
scale well horizontally without massive complications.

System/38 long ago (late 1980s) gave way to AS/400 which is now IBM i 
(aka i5/OS), and runs on the same Power servers as AIX, either 
virtualized or whole-iron.   RS/6000 long ago was renamed pSeries or 
Power, and is hardware, which runs AIX, i, and Linux.

but, i don't believe CentOS runs on Z (descendent of System/370) or 
Power (also known as PowerPC) architectures, so this is all off topic.




-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 15:38 -0700, John R Pierce wrote:

 they still push z/OS (the descendent of OS/370)

Whatever happened to IBM 360 and OS/360  ?

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-26 Thread John R Pierce
On 08/26/11 3:42 PM, Always Learning wrote:
 they still push z/OS (the descendent of OS/370)
 Whatever happened to IBM 360 and OS/360  ?

circa 1970, virtual memory hardware was added and it became the 
System/370, and the various flavors of OS/360 became OS/VS1, OS/VS2, 
which became MVS, which spawned an endless train of eTLA's leading up to 
today's z/OS.   Amazingly enough, many programs written in the 1960s for 
the MFT and MVT flavors of OS/360 still run on today's z/OS without any 
modifications or even recompilation.



-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread ken

On 08/26/2011 02:35 PM Always Learning wrote:
 On Fri, 2011-08-26 at 19:31 +0100, Keith Roberts wrote:
 
 Is this some sort of bug in the flashplugin?
 
 The Internet is littered with news of Flash bugs. HTML 5 offers the same
 facilities except it does not hide information on your hard disk like
 Flash does.
 
 Paul.

Thanks for the news.  I don't pick all the latest very often.

Even back when I was running 5.5, I'd get those hangs/freezes.  I went
into FF's Preferences (I think) and disabled flash.  Most of the
problems went away.

One site I went to every day had flash stuff all over it.  When I
disabled the plugin, in the places where formerly there were
eye-grabbing advertisements there was no just code.  After a few weeks
they must have noticed, because the code was replaced by more or less
static images.  So maybe advertisers notice when people turn off the
flash crap.  And maybe that will make adobe eventually get their act
together.  Hope so... I kind of like some of the videos.

-- 
War is a failure of the imagination.
--William Blake
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread Craig White

On Aug 26, 2011, at 4:33 PM, ken wrote:

 
 On 08/26/2011 02:35 PM Always Learning wrote:
 On Fri, 2011-08-26 at 19:31 +0100, Keith Roberts wrote:
 
 Is this some sort of bug in the flashplugin?
 
 The Internet is littered with news of Flash bugs. HTML 5 offers the same
 facilities except it does not hide information on your hard disk like
 Flash does.
 
 Paul.
 
 Thanks for the news.  I don't pick all the latest very often.
 
 Even back when I was running 5.5, I'd get those hangs/freezes.  I went
 into FF's Preferences (I think) and disabled flash.  Most of the
 problems went away.
 
 One site I went to every day had flash stuff all over it.  When I
 disabled the plugin, in the places where formerly there were
 eye-grabbing advertisements there was no just code.  After a few weeks
 they must have noticed, because the code was replaced by more or less
 static images.  So maybe advertisers notice when people turn off the
 flash crap.  And maybe that will make adobe eventually get their act
 together.  Hope so... I kind of like some of the videos.

you can use flash block plugin on FF which allows you to simply click on the 
flash objects you're interested in and let the rest just show placeholders

Craig
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] mysql authentication in proftpd

2011-08-26 Thread Tim Dunphy
Hello list,

 I was able to get passive mode worked out. I'm really glad I was able to do 
this. I'm able to log into the ftp server, list directories, enter 
subdirectories and upload/download files. However my next task is to enable 
virtual users using mysql. I have installed proftpd-mysql and enabled the sql 
modules in the config. 


 I found a good article on how to do this here:

 http://www.khoosys.net/single.htm?ipg=848



  I set everything up according to this article, and authentication with the 
test user I have stored in the user table is failing. 

[root@LCENT05:~] #/usr/bin/ftp -d mydomain.net
Connected to snjh.net (xx.xx.xx.xx).
220 FTP Server ready.
Name (snjh.net:root): jfuser
--- USER jfuser
331 Password required for jfuser
Password:
--- PASS 
530 Login incorrect.
Login failed.
--- SYST
215 UNIX Type: L8
Remote system type is UNIX.
Using binary mode to transfer files.


I setup a debug log session and this is what I've found:

192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'USER 
jfuser' to mod_tls
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'USER 
jfuser' to mod_core
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'USER 
jfuser' to mod_core
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'USER 
jfuser' to mod_delay
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'USER 
jfuser' to mod_auth
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching CMD command 'USER 
jfuser' to mod_auth
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching POST_CMD command 'USER 
jfuser' to mod_sql
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching POST_CMD command 'USER 
jfuser' to mod_delay
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching LOG_CMD command 'USER 
jfuser' to mod_sql
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching LOG_CMD command 'USER 
jfuser' to mod_log
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_tls
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_core
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_core
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_sql_passwd
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_sql
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_vroot
192.168.1.30 (189.15.88.64[189.15.88.64]) - mod_vroot/0.8.5: vroot registered
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_delay
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching PRE_CMD command 'PASS 
(hidden)' to mod_auth
192.168.1.30 (189.15.88.64[189.15.88.64]) - dispatching CMD command 'PASS 
(hidden)' to mod_auth
192.168.1.30 (189.15.88.64[189.15.88.64]) - USER jfuser (Login failed): No such 
user found.


It looks like authentication is bypassing mod_sql altogether and selecting 
mod_auth instead. The only authentication method I have enabled in the config 
is mod_sql so I'm not sure why this is occuring.

Here is the authentication section of my config:

# Use pam to authenticate (default) and be authoritative
#AuthPAMConfigproftpd
#AuthOrdermod_auth_pam.c* mod_auth_unix.c
AuthOrdermod_sql.c


This is my sql login section:

# SQL login 
SQLConnectInfo ftpdb@db1 proftpd secret

Which I have verified does work from the ftp server:

[root@VIRTCENT08:~] #mysql -uproftpd -psecret -h db1
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3354
Server version: 5.5.15-log MySQL Community Server (GPL) by Remi

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql use ftpdb
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
mysql

I was hoping I could ask some advice as to why this doesn't work in it's 
present form. 

Here's the full config. Thanks in advance!


# This is the ProFTPD configuration file
#
# See: http://www.proftpd.org/docs/directives/linked/by-name.html

# Server Config - config used for anything outside a VirtualHost or Global 
context
# See: http://www.proftpd.org/docs/howto/Vhost.html

ServerNameProFTPD server
ServerIdenton FTP Server ready.
ServerAdminroot@localhost
DefaultServeron


# Cause every FTP user except adm to be chrooted into their home directory
# Aliasing /etc/security/pam_env.conf into the chroot allows pam_env to
# work at session-end time (http://bugzilla.redhat.com/477120)
VRootEngineon
DefaultRoot/var/www/html/jokefire.com
VRootAlias  

Re: [CentOS] Cent OS 6 freezing up

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 19:33 -0400, ken wrote:

  The Internet is littered with news of Flash bugs. HTML 5 offers the same
  facilities except it does not hide information on your hard disk like
  Flash does.

 Thanks for the news.  I don't pick all the latest very often.
 
 Even back when I was running 5.5, I'd get those hangs/freezes.  I went
 into FF's Preferences (I think) and disabled flash.  Most of the
 problems went away.

Advantages of FF 4 with HTML 5

http://hacks.mozilla.org/2010/05/firefox-4-the-html5-parser-inline-svg-speed-and-more/


Problems with no 'official' video format for HTML 5

http://lifehacker.com/5488607/can-i-play-html5-youtube-videos-in-firefox-right-now


An alternative to Flash

http://neosmart.net/blog/2009/watch-youtube-videos-in-html5/

The last 2 links mentioned Linux problems with buggy Flash.


Paul.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mysql authentication in proftpd

2011-08-26 Thread Always Learning

On Sat, 2011-08-27 at 01:24 +0100, Always Learning wrote:
 I use SSH (I think it is) from with Gnome to transfer some date
 between servers.

Sorry, that should be 

I use SSH (I think it is) from within Gnome to transfer some data
between servers.

(back to the ImageMagick task)

Paul.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ImageMagick : Centos GUI ?

2011-08-26 Thread Always Learning

I accidentally discovered 'convert'. It is a command line utility.
Changing a file from png to gif works like this

convert aaa.png aaa.gif

Amazingly simple, powerful and effective.

I've since discovered it has an amazing list of options

convert --help

a manual

file:///usr/share/doc/ImageMagick-6.2.8/www/convert.html  

and a web site

http://www.imagemagick.org/


Does anyone have suggestions for a GUI which works for Centos 5.6 ?
In production I run the command line program from PHP with 'exec'.


Thank you,

Paul.


Currently automatically, rotating when necessary, downsizing photographs
to 900 pixels wide (the software calculates the height) and labelling
them with the file reference and photograph date - all in one quick
operation.  Mind boggling options, more than I've ever seen in similar
software.

Really amazed :-)



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ImageMagick : Centos GUI ?

2011-08-26 Thread John R Pierce
On 08/26/11 7:22 PM, Always Learning wrote:
   http://www.imagemagick.org/


 Does anyone have suggestions for a GUI which works for Centos 5.6 ?
 In production I run the command line program from PHP with 'exec'.

imagemagick is a batch oriented utility.putting a gui wrapper on a 
batch program inevitably ends up with something clunky and not usable.

for GUI image editing, you want to use something interactive like Gimp.







-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ImageMagick : Centos GUI ?

2011-08-26 Thread Always Learning

On Fri, 2011-08-26 at 19:46 -0700, John R Pierce wrote:

 imagemagick is a batch oriented utility.putting a gui wrapper on a 
 batch program inevitably ends up with something clunky and not usable.
 
 for GUI image editing, you want to use something interactive like Gimp.

I wanted to explore all the options and see the effects in a GUI
application rather than laboriously type-in the parameters on the
command line then double-click on the latest photograph to see the
effects.

Paul.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ImageMagick : Centos GUI ?

2011-08-26 Thread John R Pierce
On 08/26/11 7:50 PM, Always Learning wrote:
 I wanted to explore all the options and see the effects in a GUI
 application rather than laboriously type-in the parameters on the
 command line then double-click on the latest photograph to see the
 effects.

but there's a nearly infinite number of possible combinations of the 
options, and the order you specify transforms can have an effect on the 
output, how would you represent this in a GUI ?



-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ImageMagick : Centos GUI ?

2011-08-26 Thread Scott Robbins
On Fri, Aug 26, 2011 at 09:12:28PM -0700, John R Pierce wrote:
 On 08/26/11 7:50 PM, Always Learning wrote:
  I wanted to explore all the options and see the effects in a GUI
  application rather than laboriously type-in the parameters on the
  command line then double-click on the latest photograph to see the
  effects.

Two possibilities come to mind.  One, the display command, also part of
the ImageMagick suite will display the picture.  If you click on said
picture, a menu pops up.  In that menu are many options.

Second possibility, type in the commands and put all your output into
one directory.  When you've made your different pictures, install feh
with yum install feh.  

Then, you can type feh directory_name and hit the n (as in next) key.
This will go through the pictures, showing a new one each time you hit
the next key.

The real advantage of convert and other commands is the fact that they
are typed commands.  For example, at an old job, a graphic artist was
given a bunch of pictures.  She had to resize them, often dozens at a
time, and the only way she knew how to do it was in photoshop, one by
one.  Now _that_ was laborious. 

When she mentioned it to me, I had her drop them in a directory on a
server and I would run a script to resize them.  

Anyway, good luck with it.  The whole ImageMagick suite is extremely
userful.



-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Angel: I'm weak. I've never been anything else. I wanted to lose 
myself in you. I know it will cost me my soul, and part of me 
didn't care. It's not the demon in me that needs killing, Buffy, 
it's the man. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ImageMagick : Centos GUI ?

2011-08-26 Thread John R Pierce
On 08/26/11 9:34 PM, Scott Robbins wrote:
 The real advantage of convert and other commands is the fact that they
 are typed commands.  For example, at an old job, a graphic artist was
 given a bunch of pictures.  She had to resize them, often dozens at a
 time, and the only way she knew how to do it was in photoshop, one by
 one.  Now_that_  was laborious.

 When she mentioned it to me, I had her drop them in a directory on a
 server and I would run a script to resize them.

photoshop has a very powerful macro and batch facility.  you can 
interactively create a complex series of operations as a macro, then run 
it on a bunch of files

but thats neither here nor there.   certainly not CentOS related.



-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos