Re: [CentOS] Migrating / upgrading CentOS Linux 8 to CentOS Stream release 8

[Götz Reinicke]

> Am 04.02.2022 um 12:10 schrieb Leon Fauster via CentOS :
> 
> Am 04.02.22 um 14:25 schrieb Götz Reinicke:
>> Hi,
>> is it still possible to migrating / upgrading CentOS Linux 8 to CentOS 
>> Stream release 8 ? Any hint is welcome!
>> Right now I do get errors:
>> dnf install centos-release-stream
>> CentOS Linux 8 - AppStream   111  B/s |  38  B 00:00 
>>Fehler: Failed to download metadata for repo 'appstream': Cannot prepare 
>> internal mirrorlist: No URLs in mirrorlist
> 
> The repos are empty now. Try
> 
> dnf --disablerepo '*' --enablerepo extras swap centos-linux-repos 
> centos-stream-repos
> 
> dnf distro-sync

Looks good and works :)


Thanks! /Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Migrating / upgrading CentOS Linux 8 to CentOS Stream release 8

[Götz Reinicke]

Hi,

is it still possible to migrating / upgrading CentOS Linux 8 to CentOS Stream 
release 8 ? Any hint is welcome!

Right now I do get errors:

dnf install centos-release-stream

CentOS Linux 8 - AppStream   111  B/s |  38  B 00:00
Fehler: Failed to download metadata for repo 'appstream': Cannot prepare 
internal mirrorlist: No URLs in mirrorlist


Thanks for any suggestions. /Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] your thoughts on dnf-makecache

[Götz Reinicke]

Hi and thanks.

> Am 08.11.2021 um 13:09 schrieb Leon Fauster via CentOS :
> 
> Am 08.11.21 um 09:59 schrieb Götz Reinicke:
>> Hi,
>> From time to time I see different errors for dnf-makecache in the logs. e.g. 
>> „Errors during downloading metadata“, „Couldn't connect to server for“, 
>> „Timeout was reached“, „Couldn't resolve host name " or „Operation too slow“.
>> In all cases, a restart of the service solves the „problem“ and in other 
>> cases the next run dose it.
>> Beside having the errors, our current service monitoring triggers in most 
>> cases a warning message, and depending on the solution recovers too, which 
>> makes me wonder what would be the best practice for such situation.
>> a) do I need dnf-makecache? Will it speed up things so much and makes 
>> package management much more easy, so having some errors is o.k.?
>> b) adjust the config for dnf-makecache, so it will trigger less errors?
>> c) adjust our monitoring to ignore some errors or be more soft with 
>> triggering warnings?
>> C is the least preferred option right now.
>> What do you think, how do you handle dnf-makecache?
> 
> It depends on your needs. We are okay with; stopping

hm, I don't see any real benefit in our environment. If I do an update, waiting 
few seconds more or less for the repo data to be downloaded, dose not matter.

> and disabling dnf-makecache.timer for prod systems.
> 
> We have dnf-automatic enabled. So, the cache is
> rebuilded anyway …


I see.

/Götz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] your thoughts on dnf-makecache

[Götz Reinicke]

Hi,

From time to time I see different errors for dnf-makecache in the logs. e.g. 
„Errors during downloading metadata“, „Couldn't connect to server for“, 
„Timeout was reached“, „Couldn't resolve host name " or „Operation too slow“.

In all cases, a restart of the service solves the „problem“ and in other cases 
the next run dose it.

Beside having the errors, our current service monitoring triggers in most cases 
a warning message, and depending on the solution recovers too, which makes me 
wonder what would be the best practice for such situation.

a) do I need dnf-makecache? Will it speed up things so much and makes package 
management much more easy, so having some errors is o.k.?

b) adjust the config for dnf-makecache, so it will trigger less errors?

c) adjust our monitoring to ignore some errors or be more soft with triggering 
warnings? 

C is the least preferred option right now.

What do you think, how do you handle dnf-makecache?


Thanks for feedback and suggestions. Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple NICs, different IP Networks and routing centos 8

[Götz Reinicke]

Thanks.

> Am 15.06.2021 um 19:06 schrieb Gordon Messmer :
> 
> On 6/15/21 7:18 AM, Götz Reinicke wrote:
>> Till now I was not able to figure that out, how do I configure such a setup 
>> in centos?
> 
> 
> You're looking for documentation on "multi-homed" networking or "policy based 
> routing".
> 
> This is the shortest document that looks like it will work from a quick 
> search for "multihomed centos":
> 
> https://dvsn.io/post/multihomed-network-config/


Worked for me with installing the NetworkManager-dispatcher package.

Regards . Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Multiple NICs, different IP Networks and routing centos 8

[Götz Reinicke]

Hi all

Recently I installed a new server with a network setup I never had or needed 
till now.

The server has three interfaces, which all should have their own IP from 
different networks. Two interfaces are „user faced“ one is so to say „backend 
faced“.

The backend faced just needs to find hosts in the same subnet.

The two user faced networks should be accessible from different other (client) 
networks and the traffic should also go outband from the same interface it came 
in.

Till now I was not able to figure that out, how do I configure such a setup in 
centos?

Thanks for hints and suggestions and best regards . Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Samba setup

[Götz Reinicke]

Hi,

> Am 18.01.2021 um 20:08 schrieb Robert G. (Doc) Savage via CentOS 
> :
> 
> I'm
> following 
> https://www.linuxbabe.com/redhat/set-up-samba-server-on-centos-8-rhel-8-for-file-sharing
>  to set up Samba 4.12.3-12 on my Storinator fileserver running CentOS
> 8.3. I am trying to share out /tank/Windows/ as a Samba share:
> 
> # ls -al /tank
> total 61
> drwxr-xr-x. 6 root root 7 Dec 26 10:43 Backups
> drwxr-xr-x. 6 root root 6 Dec 4 22:47 Repos
> drwxrwxrwx. 2 doc doc 4 Dec 28 14:01 VMs
> drwxrwxrwx.  2 root root 2 Jan 17 17:04 Windows
> 
> My /etc/samba/smb.conf file is set up as follows:
> 
> # testparm
> Load smb config files from /etc/samba/smb.conf
> Loaded services file OK.
> Server role: ROLE_STANDALONE
> 
> Press enter to see a dump of your service definitions
> 
> # Global parameters
> [global]
> printcap name = cups
> security = USER
> idmap config * : backend = tdb
> cups options = raw
> hosts allow = 192.168.0
> 
> ...
> 
> [public]
> comment = public share, no need to enter username and password
> guest ok = Yes
> path = /tank/Windows
> read only = No
> 
> When I try to map network drive from my Windows 10 PC using the
> graphical File Explorer, it asks me for my username and password. It
> doesn't accept my password. When I try to map it at the CMD cli, I get:
> 
> C:\> net use S: \\192.168.1.20\public\
> System error 67 has occurred.
> 
> The network name cannot be found.
> 
> Could this be a network browsing problem in Samba? What have I missed?

Anything in the samba logs? May be SELinux/Firewall issues?

Regards . Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Updated krb5 rpm package altered existing krb5.conf - No go

[Götz Reinicke]

> Am 18.06.2018 um 16:33 schrieb m...@tdiehl.org:
> 
> On Mon, 18 Jun 2018, G?tz Reinicke wrote:
> 
>> 
>> 
>>> Am 15.06.2018 um 01:04 schrieb Gordon Messmer :
>>> 
>>> On 06/14/2018 09:30 AM, m...@tdiehl.org wrote:
 On Thu, 14 Jun 2018, Richard Grainger wrote:
 
> I looked at the spec file in the source RPM for the krb5-libs package
> and it it has the correct %config(noreplace) directive next to that
> file in the %files section, so this is mysterious.
 
 I too can confirm this behavior.
>>> 
>>> # rpm -qa krb\* --triggers
>>> triggerun scriptlet (using /bin/sh) -- krb5-libs < 1.15.1-13
>>> if ! grep -q 'includedir /etc/krb5.conf.d' /etc/krb5.conf ; then
>>>sed -i '1i # Other applications require this directory to perform krb5 
>>> configuration.\nincludedir /etc/krb5.conf.d/\n' /etc/krb5.conf
>>> fi
>>> 
>>> 
>>> Looks like that's the culprit.
>> 
>> 
>> Good to know, but writing a rpmnew or rpmsave file would be nice to check 
>> against the life used file.
> 
> Agreed! IMO this is a packaging bug. Triggers do not drop rpmsave files. I 
> suspect the chances of getting
> Red Hat to fix it are slim to none. Fixing it would most likely break other 
> things for them.
> 
>> 
>> The samba people are aware of that problem regarding the include line and 
>> are working on a patch ? the support at SerNet told me.
> 
> I agree they are aware of it but I suspect it is a low priority thing given
> they have known about this since 2016-12-29.
> 
> I do think it would be relatively easy for SerNet to patch around in their
> paid for rpms. alas I do not have the budget for them. :-(
> 
> The bug is available at https://bugzilla.samba.org/show_bug.cgi?id=12488 
> 

Patched https://bugzilla.samba.org/show_bug.cgi?id=11573 


/Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Updated krb5 rpm package altered existing krb5.conf - No go

[Götz Reinicke]

> Am 15.06.2018 um 01:04 schrieb Gordon Messmer :
> 
> On 06/14/2018 09:30 AM, m...@tdiehl.org wrote:
>> On Thu, 14 Jun 2018, Richard Grainger wrote:
>> 
>>> I looked at the spec file in the source RPM for the krb5-libs package
>>> and it it has the correct %config(noreplace) directive next to that
>>> file in the %files section, so this is mysterious.
>> 
>> I too can confirm this behavior. 
> 
> # rpm -qa krb\* --triggers
> triggerun scriptlet (using /bin/sh) -- krb5-libs < 1.15.1-13
> if ! grep -q 'includedir /etc/krb5.conf.d' /etc/krb5.conf ; then
> sed -i '1i # Other applications require this directory to perform krb5 
> configuration.\nincludedir /etc/krb5.conf.d/\n' /etc/krb5.conf
> fi
> 
> 
> Looks like that's the culprit.


Good to know, but writing a rpmnew or rpmsave file would be nice to check 
against the life used file.

The samba people are aware of that problem regarding the include line and are 
working on a patch … the support at SerNet told me.

Regards . Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Updated krb5 rpm package altered existing krb5.conf - No go

[Götz Reinicke]

> Am 13.06.2018 um 17:55 schrieb Richard Grainger :
> 
> On Wed, Jun 13, 2018 at 3:54 PM Götz Reinicke
>  wrote:
>> 
>> Hi,
>> 
>> I did an centos update from 7.4 to 7.5 and the krb5 package altered the 
>> existing and used config file! That should be a no go from my pov, as in my 
>> setup it broke some services which had a problem with the includedir line 
>> which was added.
> 
> Which config file?


/etc/krb5.conf

Regards . Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Updated krb5 rpm package altered existing krb5.conf - No go

[Götz Reinicke]

Hi,

I did an centos update from 7.4 to 7.5 and the krb5 package altered the 
existing and used config file! That should be a no go from my pov, as in my 
setup it broke some services which had a problem with the includedir line which 
was added.

Shouldn*t there be a rpmnew config file be created instead with the 
new/optional/added settings?

Regards . Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT: Problems with NextCloud 13.0.1 under Centos7

[Götz Reinicke]

Hi,

> Am 28.03.2018 um 11:36 schrieb C. L. Martinez :
> 
> Hi all,
> 
> I have a strange problem with a clean NextCloud 13.0.1 install under
> CentOS 7 (fully patched): when I try to login with admin user immediately
> after setup, returns to login page without returning any error.
> 
> An no errors in nginx or php log files ...
> 
> I am using the following components:
> 
> rh-php71
> rh-mariadb102
> nginx 1.12
> 
> Any idea?
> 

Any hints in the nextcloud log?


/Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Is CentOS Linux protected against the Meltdown and Spectre security flaws?

[Götz Reinicke]

Hi,

Depends on your centos release; 6 or 7 … The most recent kernel are patched; 
have a look at the release notes, e.g.

https://www.redhat.com/archives/rhsa-announce/2018-January/msg00080.html 


https://access.redhat.com/errata/RHSA-2018:0008 


Regards . Götz


> Am 19.02.2018 um 13:18 schrieb Turritopsis Dohrnii Teo En Ming 
> :
> 
> What are the patches that I can download and install to be protected
> against the Meltdown and Spectre security vulnerabilities?
> 
> ===BEGIN SIGNATURE===
> 
> Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017
> 
> [1] https://tdtemcerts.wordpress.com/
> 
> [2] http://tdtemcerts.blogspot.sg/
> 
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
> 
> ===END SIGNATURE===

<…>


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] bind named fails after logrotate

[Götz Reinicke]

Hi,

on our centos 7.3.1611 server the named dies after the log rotates script is 
executed.

systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor 
preset: disabled)
   Active: failed (Result: exit-code) since Di 2017-09-12 14:27:57 CEST; 2s ago
  Process: 20714 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || 
/bin/kill -TERM $MAINPID (code=exited, status=1/FAILURE)
  Process: 20684 ExecReload=/bin/sh -c /usr/sbin/rndc reload > /dev/null 2>&1 
|| /bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)
 Main PID: 14496 (code=killed, signal=ABRT)


Any suggestions or hints or is that a known problem?

logrotate-3.8.6
bind-9.9.4

Thanks and regards . Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vfstp and renaiming of files with ftp client - CLOSED

[Götz Reinicke - IT Koordinator]

Am 13.07.17 um 17:59 schrieb Pete Biggs:
>> The permissions for the upload folder are drwx-wx--- and the owner is
>> Bob group is ftpuploadgroup
>>
>> Alice is member of that group, but should only drop files in.
>>
>> The files are ownd by Alice, and I'm bit iritated, taht Bob can rename
>> tham ... as Bob only has read permision (from the group)
> A directory is just a special file which holds information on other
> files (such as names and the inodes those names point to). As such in
> order to rename a file you need write permission to the directory
> special file (i.e. '.') - the ownership and permissions of the file in
> question are not involved in renaming.
>
>> The files in a subfolder have the same permissions and Bob cant change
>> tham...
>>
> Because Bob does not have write permission to the directory.
>
> As someone else said, tell us what your aim is and we can try and tell
> you what file/directory permissions need to be applied. It may be that
> what you are trying to do is not possible within the standard Unix
> permissions, but some filesystems have extended ACLs which could help.
>
> P.
Hi and thanks to all suggestions. We currently go with the "old" way:
the users do the up- and download as told in the last years so we dont
have to change permissions or the server software and next year we may
change the system totally.

This is an upload ftp server for one annual event, so.

Learned some things and thanks again . Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vfstp and renaiming of files with ftp client

[Götz Reinicke - IT Koordinator]

Am 13.07.17 um 17:10 schrieb Tris Hoar:
> On 13/07/2017 14:38, Götz Reinicke - IT Koordinator wrote:
>> Am 13.07.17 um 14:46 schrieb Pete Biggs:
>>>> I have a vsftp server and two users for up and download.
>>>>
>>>> If user Alice uploads a file, the owner is set to Alice as expected
>>>> "-rw-r--r-- alice ftpuploadgroup"
>>>>
>>>> Now Bob can login to the same folder and is able to rename the
>>>> uploaded
>>>> file.
>>>>
>>>> Bob can also rename an uploaded folder, but can't rename a file in
>>>> that
>>>> folder 
>>>>
>>>> I'm confused, as I don't get why this is possible at all.
>>>>
>>> What are the permissions and ownership on the directory the uploads go
>>> in? If its group is 'ftpuploadgroup' and has group write permissions
>>> than any member of that group can rename files in that directory. If a
>>> user creates a directory, then that will have rwxr-xr-x permissions so
>>> they won't be able to rename files within that directory.
>>
>> The permissions for the upload folder are drwx-wx--- and the owner is
>> Bob group is ftpuploadgroup
>>
>> Alice is member of that group, but should only drop files in.
>>
>> The files are ownd by Alice, and I'm bit iritated, taht Bob can rename
>> tham ... as Bob only has read permision (from the group)
>>
>> The files in a subfolder have the same permissions and Bob cant change
>> tham...
>>
>>
>>  Thanks for your feedback . /G
>>
>>
>
> He does not have read only permission from the group. He is the folder
> owner and so can change things within that folder. You need to change
> the folder to something other than Bob.
> The sub dir does not have the same permissions. Alice is the owner.
>
> What is the end goal you want. E.g. Bob and Alice and can upload, Bob
> can read files both he and Alice upload but Alice can only read her
> files. Perhaps we can suggest permissions that would do what you want? 
Thanks Tris, thanks Peter,

the goal is, that the FTP server is a Dropbox for Alice, so she can
upload files and folders and is not able to see the uploaded files
(drwx-wx--- for the main older).

Bob should be able to rename the files and folders by ftp. (and of
course be able to download them.)

If this is not possible with the standad permissions, I'm fine, in the
past Users did not try to upload folders and others did not rename
...Than we look for an other workflow.

But hey, may be you have an idea on a god permission set.

Regards . Götz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vfstp and renaiming of files with ftp client

[Götz Reinicke - IT Koordinator]

Am 13.07.17 um 14:46 schrieb Pete Biggs:
>> I have a vsftp server and two users for up and download.
>>
>> If user Alice uploads a file, the owner is set to Alice as expected
>> "-rw-r--r-- alice ftpuploadgroup"
>>
>> Now Bob can login to the same folder and is able to rename the uploaded
>> file.
>>
>> Bob can also rename an uploaded folder, but can't rename a file in that
>> folder 
>>
>> I'm confused, as I don't get why this is possible at all.
>>
> What are the permissions and ownership on the directory the uploads go
> in? If its group is 'ftpuploadgroup' and has group write permissions
> than any member of that group can rename files in that directory. If a
> user creates a directory, then that will have rwxr-xr-x permissions so
> they won't be able to rename files within that directory.

The permissions for the upload folder are drwx-wx--- and the owner is
Bob group is ftpuploadgroup

Alice is member of that group, but should only drop files in.

The files are ownd by Alice, and I'm bit iritated, taht Bob can rename
tham ... as Bob only has read permision (from the group)

The files in a subfolder have the same permissions and Bob cant change
tham...


Thanks for your feedback . /G



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] vfstp and renaiming of files with ftp client

[Götz Reinicke - IT Koordinator]

Hi,

I have a vsftp server and two users for up and download.

If user Alice uploads a file, the owner is set to Alice as expected
"-rw-r--r-- alice ftpuploadgroup"

Now Bob can login to the same folder and is able to rename the uploaded
file.

Bob can also rename an uploaded folder, but can't rename a file in that
folder 

I'm confused, as I don't get why this is possible at all.

Some vsftp magic? :)

Can someone explain that to me?

Thanks and regards . Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] attempt to access beyond end of device XFS Disks

[Götz Reinicke - IT Koordinator]

Hi,

I rebooted some CEPH servers with 24 HDs and do get some messages for
some of the disks:

[  519.667055] XFS (sdk1): Mounting V4 Filesystem
[  519.692307] XFS (sdk1): Ending clean mount
[  519.781975] attempt to access beyond end of device
[  519.781984] sdk1: rw=0, want=1560774288, limit=1560774287

All disks are xfs formated and currently I don't see any problem on the
CEPH side.

But I have a bad feeling.

I updated the kernel too from kernel-3.10.0-514.21.1 to
kernel-3.10.0-514.26.1, but nothing changed.

Any hints, suggestions?

Thanks & regards . Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Question about 7.3

[Götz Reinicke]

> Am 31.01.2017 um 02:41 schrieb TE Dukes :
> 
> I haven't done a fresh install in years. I've always gone the upgrade route.
> Seemed to have always worked for me.
> 
> I moved to 7.3 since it supports the latest versions of some programs I want
> to use to implement as a backup server/RAID/NAS for 3 machines here at home
> and a remote laptop at work.
> 
> So, the question is, is there something different in 7.3 than the previous 7
> versions?

Have a look:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
 


> 
> The reason I ask is I was running a lesser version of 7, I think 7.1, as a
> VM on 6.8. I remember I chose not to install the most recent version at the
> time. Never had these issues. Not really issues but everything just worked
> without a lot of expertise involved.
> 
> One thing I could never figure out is that on 6.8, I have the zoneminder
> repo installed and when I did a yum update on the 7.1 VM, it was also
> accessing the zmrepo which wasn't installed. Just thought it was odd.
> 
> Anyway, I really appreciate the help and keep paying it forward!

So your question is, why your Centos 7.x VM is accessing the same repository as 
your 6.x Installation you upgraded from?

If you did an upgrade 6.x to 7.x it keeps the settings for the repos I guess.

Regards . Götz
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] upgrade reference docs

[Götz Reinicke]

> Am 10.10.2016 um 21:58 schrieb Götz Reinicke <goetz.reini...@filmakademie.de>:
> 
> Hi,
> 
>> Am 10.10.2016 um 21:20 schrieb Chuck Campbell <campb...@accelinc.com>:
>> 
>> Is there a Centos 6.x to Centos 7.x guide somewhere? What has changed, that 
>> I need to learn about as an admin, before I jump in and flounder?
>> 
> 
> may be some hints …:
> 
> http://simplylinuxfaq.blogspot.de/p/major-difference-between-rhel-7-and-6.html
>  
> <http://simplylinuxfaq.blogspot.de/p/major-difference-between-rhel-7-and-6.html>
> 
> https://access.redhat.com/sites/default/files/attachments/rhel_5_6_7_cheatsheet_27x36_1014_jcs_web.pdf
>  
> <https://access.redhat.com/sites/default/files/attachments/rhel_5_6_7_cheatsheet_27x36_1014_jcs_web.pdf>

and one more …

https://www.ravellosystems.com/blog/rhel7-centos7-linux-distribution/ 
<https://www.ravellosystems.com/blog/rhel7-centos7-linux-distribution/>

/G
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] upgrade reference docs

[Götz Reinicke]

Hi,

> Am 10.10.2016 um 21:20 schrieb Chuck Campbell :
> 
> Is there a Centos 6.x to Centos 7.x guide somewhere? What has changed, that I 
> need to learn about as an admin, before I jump in and flounder?
> 

may be some hints …:

http://simplylinuxfaq.blogspot.de/p/major-difference-between-rhel-7-and-6.html 


https://access.redhat.com/sites/default/files/attachments/rhel_5_6_7_cheatsheet_27x36_1014_jcs_web.pdf
 


cheers . Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] DHCP max-lease-time maximum

[Götz Reinicke - IT Koordinator]

Thanks, I did know that and we are using this in other situations. But
as written in my third reply:

To much work every MAC I dont have to type counts.

Regards . Götz



Am 07.07.16 um 11:44 schrieb Eero Volotinen:
> Static MAC ip mapping on dhcp server?
>
> Eero
> 7.7.2016 12.38 ip. "Götz Reinicke - IT Koordinator" <
> goetz.reini...@filmakademie.de> kirjoitti:
>
> Am 06.07.16 um 18:19 schrieb John R Pierce:
>> On 7/6/2016 1:27 AM, Götz Reinicke - IT Koordinator wrote:
>>> :)  ... the long lease is for some Accesspoints which we dont like to
>>> configure static, just plug in and run.
>> why not configure reservations for those access points?
>>
>> the downside of a really long lease time is if you have to change
>> something like DNS, gateway, whatever, the clients with a really long
>> lease will not 'see' the change until 50% of hte lease time expires as
>> thats the default refresh.
>>
>>
> Hi, what do you mean with "reservations"? the APs in question just need
> an IP for connecting to the managemnt server which is in the same subnet.
>
> Thanks for your feedback . Götz
>


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] DHCP max-lease-time maximum

[Götz Reinicke - IT Koordinator]

Am 06.07.16 um 18:19 schrieb John R Pierce:
> On 7/6/2016 1:27 AM, Götz Reinicke - IT Koordinator wrote:
>> :)  ... the long lease is for some Accesspoints which we dont like to
>> configure static, just plug in and run.
>
> why not configure reservations for those access points?
>
> the downside of a really long lease time is if you have to change
> something like DNS, gateway, whatever, the clients with a really long
> lease will not 'see' the change until 50% of hte lease time expires as
> thats the default refresh.
>
>
Hi, what do you mean with "reservations"? the APs in question just need
an IP for connecting to the managemnt server which is in the same subnet.

Thanks for your feedback . Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] DHCP max-lease-time maximum

[Götz Reinicke - IT Koordinator]

To much work ;) every MAC I dont have to type counts.

/G


Am 06.07.16 um 10:31 schrieb Eero Volotinen:
> How about static ip mapping on dhcp?
>
> Eero

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] DHCP max-lease-time maximum

[Götz Reinicke - IT Koordinator]

:) ... the long lease is for some Accesspoints which we dont like to
configure static, just plug in and run.

/Götz

Am 06.07.16 um 10:24 schrieb Eero Volotinen:
> DHCP uses 16 to represent an infinite lease. Try if it's supported.
> Anyway, it's insane value as year lease time :)
>
> Eero
>
> 2016-07-06 11:22 GMT+03:00 Götz Reinicke - IT Koordinator <
> goetz.reini...@filmakademie.de>:
>
>> Hi,
>>
>> I m looking for the max value for max-lease-time. would 512640 seconds
>> (1 year) work?
>>
>> Thanks . Götz
>>

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] DHCP max-lease-time maximum

[Götz Reinicke - IT Koordinator]

Hi,

I m looking for the max value for max-lease-time. would 512640 seconds
(1 year) work?

Thanks . Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Suggestions for Config Management Tool - Thanks

[Götz Reinicke - IT Koordinator]

Hi all,

thanks for your feedback! We will check in a test which tool might be
good for us.

Regards . Götz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Suggestions for Config Management Tool

[Götz Reinicke - IT Koordinator]

Hi,

we see a growing need for a better Configuration management for our servers.

Are there any known good resources for a comparison of e.g. Puppet,
Chef, Ansible etc?

What would you suggest and why? :)

Thanks and Regards . Götz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network bond - one port goes down from time to time

[Götz Reinicke - IT Koordinator]

Am 29.03.16 um 13:57 schrieb Marcelo Ricardo Leitner:
> Em 29-03-2016 03:46, Götz Reinicke - IT Koordinator escreveu:
>> Am 28.03.16 um 16:23 schrieb Marcelo Ricardo Leitner:
>>> Em 28-03-2016 06:27, Götz Reinicke escreveu:
>>>> Hi,
>>>>
>>>> may be someone has an idea:
>>>>
>>>> We have three supermicron servers with two 10Gb Ports each, connected
>>>> to a cisco switch stack 1Gb ports. All are on auto speed.
>>>>
>>>> I configured a LACP bond on both sides on all servers, first with
>>>> citrix xen server.
>>>>
>>>> On one server eth0 goes down from time to time … maybe within minutes,
>>>> someday it is up for some hours.
>>>>
>>>> Two server are fine; the bond is up for 24 days(!) now without any
>>>> problem.
>>>>
>>>> Recently I installed centos 7.2 on that server in question and - bam -
>>>> eth0 is going down from time to time …
>>>>
>>>> I checked patch cables, tried an other switch port channel,
>>>> reconfigured the ports, reinstalled the os. Same behavior.
>>>>
>>>> And: We got a replacement server. Same behavior …. :)
>>>>
>>>> Currently the cisco tech guys don’t see a problem on the switch (which
>>>> is up for 3 Years now with 10+ servers connected … no problem so far),
>>>> from the citrix side I don’t get much more hints.
>>>>
>>>> In the logs i just have a Nic Link is Down … Nic Link is Up. It is
>>>> always eth0.
>>>>
>>>> Question:
>>>>
>>>> Any idea ? One suggestion was Disable all power saving features in the
>>>> server bios. Did not do that yet.
>>>>
>>>> Is there any chance to set some sort of higher debug level for that
>>>> nic/kernel/whatever to get some server os side feedback why the port
>>>> goes down?
>>>>
>>>> Regards and thanks for any hint! . Götz
>>>
>>> If you are seeing NIC Link is Down as in:
>>> [710442.668059] e1000e: enp0s25 NIC Link is Down
>>> then the NIC lost its link and bond is just protecting you as you
>>> probably didn't have any downtime due to that. IOW bonding is not the
>>> issue.
>>>
>>> Which NIC do you have on those servers?
>>
>>
>> The mainbord is a supermicro X10DRI-T with Intel X540 Dual port
>> 10GBase-T.
> 
> Okay, it's probably using ixgbe driver then.
> You may consider testing a newer kernel and see how that goes out,
> before doing too much debugging.
> You can install v4.5 using one of ELrepo's kernels at
> http://elrepo.org/linux/kernel/el7/x86_64/RPMS/
> http://elrepo.org/tiki/tiki-index.php
> There are some changes between 7.2 and that kernel that it's good to be
> tested.
> 
> Or... enable ixgbe debug, module param debug=16, and send the dmesg log,
> specially the lines around the event.

Hm,, could you give me a hint, how to enable that (at runtime) for
centos 7.2? I cant figure that out.

Would be nice. cheers . Götz


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network bond - one port goes down from time to time

[Götz Reinicke - IT Koordinator]

Am 29.03.16 um 11:12 schrieb John R Pierce:
> On 3/28/2016 11:44 PM, Götz Reinicke - IT Koordinator wrote:
>>> How is your interface exactly configured ?
>> TYPE=Bond   #Interface type set to bond
>> BOOTPROTO=static
>> BONDING_MASTER=yes
>> BONDING_OPTS="mode=4"  #i set mode to active-backup
>> DEFROUTE=yes
>> IPADDR="192.168.xxx.xxx"
>> NETMASK=255.255.255.0
>> GATEWAY="192.168.xxx.xxx"
>> IPV4_FAILURE_FATAL=no
>> IPV6INIT=no
>> NAME=bond0
>> DEVICE=bond0
>> ONBOOT=yes
>>
>>
>> TYPE="Ethernet"
>> MASTER=bond0
>> SLAVE=yes
>> NAME="enp4s0f0"
>> UUID="xxx"
>> DEVICE="enp4s0f0"
>> ONBOOT="yes"
>>
>> TYPE="Ethernet"
>> MASTER=bond0
>> SLAVE=yes
>> NAME="enp4s0f0"
>> UUID="xxx"
>> DEVICE="enp4s0f1"
>> ONBOOT="yes"
> 
> should both those 'ethernet' devices have the same NAME ?
> 
> 

Copy and Past error, they dont have the same name.

/Götz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network bond - one port goes down from time to time

[Götz Reinicke - IT Koordinator]

Am 28.03.16 um 16:23 schrieb Marcelo Ricardo Leitner:
> Em 28-03-2016 06:27, Götz Reinicke escreveu:
>> Hi,
>>
>> may be someone has an idea:
>>
>> We have three supermicron servers with two 10Gb Ports each, connected
>> to a cisco switch stack 1Gb ports. All are on auto speed.
>>
>> I configured a LACP bond on both sides on all servers, first with
>> citrix xen server.
>>
>> On one server eth0 goes down from time to time … maybe within minutes,
>> someday it is up for some hours.
>>
>> Two server are fine; the bond is up for 24 days(!) now without any
>> problem.
>>
>> Recently I installed centos 7.2 on that server in question and - bam -
>> eth0 is going down from time to time …
>>
>> I checked patch cables, tried an other switch port channel,
>> reconfigured the ports, reinstalled the os. Same behavior.
>>
>> And: We got a replacement server. Same behavior …. :)
>>
>> Currently the cisco tech guys don’t see a problem on the switch (which
>> is up for 3 Years now with 10+ servers connected … no problem so far),
>> from the citrix side I don’t get much more hints.
>>
>> In the logs i just have a Nic Link is Down … Nic Link is Up. It is
>> always eth0.
>>
>> Question:
>>
>> Any idea ? One suggestion was Disable all power saving features in the
>> server bios. Did not do that yet.
>>
>> Is there any chance to set some sort of higher debug level for that
>> nic/kernel/whatever to get some server os side feedback why the port
>> goes down?
>>
>> Regards and thanks for any hint! . Götz
> 
> If you are seeing NIC Link is Down as in:
> [710442.668059] e1000e: enp0s25 NIC Link is Down
> then the NIC lost its link and bond is just protecting you as you
> probably didn't have any downtime due to that. IOW bonding is not the
> issue.
> 
> Which NIC do you have on those servers?


The mainbord is a supermicro X10DRI-T with Intel X540 Dual port 10GBase-T.

regards . Götz






___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network bond - one port goes down from time to time

[Götz Reinicke - IT Koordinator]

Am 28.03.16 um 12:12 schrieb Leon Fauster:
> Am 28.03.2016 um 11:27 schrieb Götz Reinicke <goetz.reini...@filmakademie.de>:
>> We have three supermicron servers with two 10Gb Ports each, connected to a 
>> cisco switch stack 1Gb ports. All are on auto speed.
>>
>> I configured a LACP bond on both sides on all servers, first with citrix xen 
>> server. 
>>
>> On one server eth0 goes down from time to time … maybe within minutes, 
>> someday it is up for some hours.
>>
>> Two server are fine; the bond is up for 24 days(!) now without any problem.
>>
>> Recently I installed centos 7.2 on that server in question and - bam - eth0 
>> is going down from time to time …
>>
>> I checked patch cables, tried an other switch port channel, reconfigured the 
>> ports, reinstalled the os. Same behavior.
>>
>> And: We got a replacement server. Same behavior …. :)
>>
>> Currently the cisco tech guys don’t see a problem on the switch (which is up 
>> for 3 Years now with 10+ servers connected … no problem so far), from the 
>> citrix side I don’t get much more hints.
>>
>> In the logs i just have a Nic Link is Down … Nic Link is Up. It is always 
>> eth0.
>>
>> Question:
>>
>> Any idea ? One suggestion was Disable all power saving features in the 
>> server bios. Did not do that yet.
>>
>> Is there any chance to set some sort of higher debug level for that 
>> nic/kernel/whatever to get some server os side feedback why the port goes 
>> down?
> 
> 
> How is your interface exactly configured ? 


TYPE=Bond   #Interface type set to bond
BOOTPROTO=static
BONDING_MASTER=yes
BONDING_OPTS="mode=4"  #i set mode to active-backup
DEFROUTE=yes
IPADDR="192.168.xxx.xxx"
NETMASK=255.255.255.0
GATEWAY="192.168.xxx.xxx"
IPV4_FAILURE_FATAL=no
IPV6INIT=no
NAME=bond0
DEVICE=bond0
ONBOOT=yes


TYPE="Ethernet"
MASTER=bond0
SLAVE=yes
NAME="enp4s0f0"
UUID="xxx"
DEVICE="enp4s0f0"
ONBOOT="yes"

TYPE="Ethernet"
MASTER=bond0
SLAVE=yes
NAME="enp4s0f0"
UUID="xxx"
DEVICE="enp4s0f1"
ONBOOT="yes"


/Götz



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Network bond - one port goes down from time to time

[Götz Reinicke]

Hi,

may be someone has an idea:

We have three supermicron servers with two 10Gb Ports each, connected to a 
cisco switch stack 1Gb ports. All are on auto speed.

I configured a LACP bond on both sides on all servers, first with citrix xen 
server. 

On one server eth0 goes down from time to time … maybe within minutes, someday 
it is up for some hours.

Two server are fine; the bond is up for 24 days(!) now without any problem.

Recently I installed centos 7.2 on that server in question and - bam - eth0 is 
going down from time to time …

I checked patch cables, tried an other switch port channel, reconfigured the 
ports, reinstalled the os. Same behavior.

And: We got a replacement server. Same behavior …. :)

Currently the cisco tech guys don’t see a problem on the switch (which is up 
for 3 Years now with 10+ servers connected … no problem so far), from the 
citrix side I don’t get much more hints.

In the logs i just have a Nic Link is Down … Nic Link is Up. It is always eth0.

Question:

Any idea ? One suggestion was Disable all power saving features in the server 
bios. Did not do that yet.

Is there any chance to set some sort of higher debug level for that 
nic/kernel/whatever to get some server os side feedback why the port goes down?

Regards and thanks for any hint! . Götz

 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] strange diskspace consuming

[Götz Reinicke - IT Koordinator]

Hi,

I do a tgz-backup some maildir-folders with n*1000 off files and a lot
of GB in storage. The backuped maildirs are removed after the tar.

My assumption was, that the free diskspace should be bigger after that,
but from what I get with df, it looks like I'm loosing space.

Currently the tgz is saved on the same disk/mountpoint.

Any hint, why removing the maildirs dont free diskspace as expected?

It is still an ext3 filesystme

Regards and thanks for hints . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] OpenLDAP on Centos/RHEL 6 still without openssl support?

[Götz Reinicke - IT Koordinator]

Hi,

I heard that the RHEL/Centos rpm packages of OpenLDAP 2.4 should support
openssl and file pathes to the certs/keys in the online config too.

But from the RHEL Documentation it is stated, that still ONLY Mozilla
NSS DB Files are supported.

Can anyone comment on that? Is that true?

Thanks and Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] rsync stuck at +- 50 MB/s, cp and scp are +- 200 MB/s

[Götz Reinicke - IT Koordinator]

Hi,

i have two servers, connected to to the lan by 10Gb with 10Gb and DAS
hardware raid.

Each system con read and write locally or to the 10G iscsi by more than
200 MB/s.

Now I have to transfer backups form A to B and doing this with rsync
always stuck at +- 48-50MB/s no matter which options, compressions,
encryption etc I use. Even the plain default rsync is at that 50 Mb limit.

coyp by scp goes up to 200 MB/s.

Copy from and to my workstation with scp from or to both servers is at
1Gb limit (so +- 100 MB/s)


Why is rsync stuck at +- 50 MB/s ? Any suggestions hints ...

Thanks and regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] rsync stuck at +- 50 MB/s, cp and scp are +- 200 MB/s

[Götz Reinicke]

Hi,

I tried different encryptions like arc four, but always with the same result. 
BTW: googling shows some similar questions and they are stuck on set same speed 
+-.

But non of that solutions helped me.

/Götz




 Am 11.08.2015 um 12:14 schrieb Eero Volotinen eero.voloti...@iki.fi:
 
 Usually problem in encryption.
 
 try cipher arcfour or apply hpn patches to ssh. 
 (http://www.psc.edu/index.php/hpn-ssh http://www.psc.edu/index.php/hpn-ssh)
 
 --
 Eero
 
 2015-08-11 12:37 GMT+03:00 Götz Reinicke - IT Koordinator 
 goetz.reini...@filmakademie.de mailto:goetz.reini...@filmakademie.de:
 Hi,
 
 i have two servers, connected to to the lan by 10Gb with 10Gb and DAS
 hardware raid.
 
 Each system con read and write locally or to the 10G iscsi by more than
 200 MB/s.
 
 Now I have to transfer backups form A to B and doing this with rsync
 always stuck at +- 48-50MB/s no matter which options, compressions,
 encryption etc I use. Even the plain default rsync is at that 50 Mb limit.
 
 coyp by scp goes up to 200 MB/s.
 
 Copy from and to my workstation with scp from or to both servers is at
 1Gb limit (so +- 100 MB/s)
 
 
 Why is rsync stuck at +- 50 MB/s ? Any suggestions hints ...
 
 Thanks and regards . Götz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] NSS Tools certutil buggy ? Centos 6 nss-tools-3.18.0

[Götz Reinicke - IT Koordinator]

Hi,

I try to add a certificate to a fresh certificate db, but the trust
attributes are not set as expected. Neither can I change tham.

The cert/pem is valid and double checked :)


Any idea/suggestion?


certutil -N -d certdb-test

certutil -A -n foobar -t u,u,u -d certdb-test/ -i foobar.pem

certutil -L -d certdb-test/


Certificate NicknameTrust Attributes
SSL,S/MIME,JAR/XPI
foobar ,,



certutil -M -n foobar -t u,u,u -d /tmp/certdb-test/


certutil -L -d certdb-test/

Certificate NicknameTrust Attributes
SSL,S/MIME,JAR/XPI
foobar ,,





Thanks and regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mysql 5.6, Centos 7 and errno: 24 - Too many open files

[Götz Reinicke - IT Koordinator]

Hi,

as that example is for maria db, teh oracle mysql rpm dose not ship with
something like

/etc/systemd/system/mysqld.service.d

Can I just create /etc/systemd/system/mysqld.service.d/limits.conf and
than I'm ready to go?

Thanks for your patience and regards . Götz

Am 29.04.15 um 14:58 schrieb Johan Kooijman:
 Gotz,
 
 This is due to systemd, it overrules your settings. Add a file to systemd
 config fixes it:
 
 [root@mysql2 ~]# cat /etc/systemd/system/mariadb.service.d/limits.conf
 [Service]
 LimitNOFILE=1
 LimitMEMLOCK=1



-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mysql 5.6, Centos 7 and errno: 24 - Too many open files

[Götz Reinicke - IT Koordinator]

+1 Thanks! That was a little bit confusing at first.

Regards . Götz

Am 30.04.15 um 04:21 schrieb carlh04...@gmail.com:
 Thank you for clarifying this, Johan. Very much appreciated!
 
 On Wed, 29 Apr 2015 22:28:00 +0200
 Johan Kooijman wrote:
 
 Carl,

 By default my.cnf has to obey the OS limits, so in this case the
 order is: systemd  /etc/security/limits*  /etc/my*.
...


-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Mysql 5.6, Centos 7 and errno: 24 - Too many open files

[Götz Reinicke - IT Koordinator]

Hi,

may be somewon has a working solution and information on that:

I installed the most recent mysql community on a server and do get a lot
of errno: 24 - Too many open files.

There are suggestions to increase the open_files_limit, change/add that
to /etc/security/limits.conf and modify the systemd script by hand.

Depending on how you start mysql (restart, or at systemboot time ...)
the limit get set or not.

Question: Is that may be a known bug or something?

And thats mit a question regarding mariadb or mysql.

Regards . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] NFS Stale file handle drives me crazy (Centos 6)

[Götz Reinicke - IT Koordinator]

Hi folks,

I have a Centos 6 NFS server, which dirves me crazy.

The directory I try to export cant be accessed by different clients.

I tried a centos 7, centos 6 and a pool of vmware esxi 5.5 systems.

At the client side I get errors like:

mount.nfs: Stale file handle

or Sysinfo set operation VSI_MODULE_NODE_mount failed with the tatus
Unable to query remote mount point's attributes.


On the server I get messages in the log like

svc: 172.17.252.35, port=851: unknown version (0 for prog 13, nfsd)

rpc.mountd[1927]: authenticated mount request from 


The curious thing is, that other directories exported on the same
filesysten can be exported.


so /home/stuff works /home/students fails. chmode 777 is set,
/etc/exports is double checked. nfs/rpc/etc is up and running. selinux 
firewall for debugging off.

I use xfs on all shared filesystems.

Googling for VMWARE and native NFS suggestions did not help so far :-/

Any hint or suggestion is very very welcome! Regard  thanks . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] network copy performance is poor (rsync) - debugging suggestions?

[Götz Reinicke - IT Koordinator]

Hi,

I do have two centos 6.6 servers. With a performance optimized rsync I
get an speed of 15 - 20 MB/s

The options I use are:

rsync -aHAXxv --numeric-ids --progress -e ssh -T -c arcfour -o
Compression=no -x

If I copy files by smb to/from the servers I do get 60 - 80 MB/s, a dd
(r/w) on the storages attached gives 90 MB/s on the 1Gbit ISCSI (Source
Server) and up to 600MB/s on the 10Gbit ISCSI (Destination Server) storage.

Both servers have plenty of memory and cpu usage looks low.

Currently we dont use jumbo frames. Network over all usage is moderate
to low. There are no special sysctl tweeks yet in use.

As mentioned, I'm confused that even with SMB I do get 3 to 4 times
better performance.

Any hint and suggestion to track that problem down is welcome!

Thanks and best regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Actual complaining: nixspam

[Götz Reinicke - IT Koordinator]

Am 08.10.14 um 23:07 schrieb John R. Dennison:
 On Wed, Oct 08, 2014 at 05:04:45PM -0400, m.r...@5-cent.us wrote:

 Well, no: they tell me that they are *billed* for each major incident.
 
 There is a legal term that applies to this use case: extortion


AFAIK IX is not billing  They do a great job for couple of years.

The problem might be m.roths provider, if they have a zombi spam system
somewhere and dynamic IPs e.g. they can be put on the list.

http://www.heise.de/ix/NiX-Spam-DNSBL-and-blacklist-for-download-499637.html

If your mail server is affected by our blacklist please ask your
internet service provider or your network administrator to shut down the
spam source in your network because this is the blacklisting reason.
Follow the removal instructions on www.dnsbl.manitu.net if you need to
speed up the delisting process.


my2cents /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Actual complaining: nixspam

[Götz Reinicke - IT Koordinator]

Am 19.11.14 um 15:31 schrieb m.r...@5-cent.us:
 Götz Reinicke - IT Koordinator wrote:
 Am 08.10.14 um 23:07 schrieb John R. Dennison:
 On Wed, Oct 08, 2014 at 05:04:45PM -0400, m.r...@5-cent.us wrote:

 Well, no: they tell me that they are *billed* for each major incident.

 There is a legal term that applies to this use case: extortion

 AFAIK IX is not billing  They do a great job for couple of years.
 
 They have NOT been doing a great job for many years. Back around 2000 or
 2001, Cogeco in Canada was using them... and they blocked Chicago
 Roadrunner, which was *the* ISP for most of the city of Chicago, one of
 the three largest cities in the US (competition? what's that?) Right now,
 hostmonster, my hosting provider, uses a primary mailserver to send from
 their literal millions of domains (I got that figure from their tech
 support), and it was hostmonster's tech support that told me they were
 paying something like $150 per incident to get themselves removed - I
 assume this is when nixspam claims they've got too many complaints for me
 to remove myself. In ANY large hosting provider, anyone can buy a domain
 and start spamming in hours, if not minutes, and I challenge you to show
 me a large hosting provider that does not have this problem.
 

So some tech support tells you something, and you believe him for 100%?
Go and get some real prove.

 Twenty years ago, when there were thousands of small ISPs, nixspam's
 method made sense. With the mergers, and the near-death of small ISPs,
 it's an *idiot's* idea. Plus, they don't offer a whitelist, to get one's
 self listed, for love or money.

If it is such and idiot's idea, why are they still so famous and widely
used?

 
 No, they're assholes, using a methodology that's 15+ years out of date.
 And, I'll note, even the CentOS list gets spam, in spite of nixspam.

Uh. your rudeness gives an deep insight of your state of mind and your
POV. masterstroke to be taken seriously!


 The problem might be m.roths provider, if they have a zombi spam system
 somewhere and dynamic IPs e.g. they can be put on the list.
 
 See above. Perhaps you don't understand the current business model of
 large hosting providers, and the reality of what they have to deal with.

I know that and a lot of them (still) suck. We hat all over Germany
problems couple of years ago with phone companies like eplus and cable
tv providers as ISPs getting an RBLs etc. Still web.de, 11 and gmx with
++45 millions of mail accounts suck in some ways (currently we are
investigating such an issue.)


 http://www.heise.de/ix/NiX-Spam-DNSBL-and-blacklist-for-download-499637.html

 If your mail server is affected by our blacklist please ask your
 internet service provider or your network administrator to shut down the
 spam source in your network because this is the blacklisting reason.
 Follow the removal instructions on www.dnsbl.manitu.net if you need to
 speed up the delisting process.
 
 Wait, *YOUR* blacklist? Are you actually affiliated with nixspam? If so,
 then add a significant number of curses and insults, because you have *NO*
 answer to what I say, above. And, btw, when are you going to block, say,
 yahoo's mailservers?

//very confused head-shaking//

Read all information provided, than start shouting ... if you where
interested in a objective discussion and problem solving you would have
opened the link and read the text and would have seen that this is a
quote. sorry that I forgot to mark and underline and point this out that
a  like you can see this.

Over and out. my last2cents on this.

/Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 10 Gbps adapter recommendation

[Götz Reinicke - IT Koordinator]

Am 11.11.14 um 10:22 schrieb Nux!:
 Hi guys,
 
 I'm yet to use 10 Gbps with CentOS, hence my question. I'm looking for a 
 cheap (doh) adapter that won't cause me problems with CentOS. Any 
 recommendations?

I'd say, depends on what you wanna do with it; e.g. iscsi trafic too,
how mayn ports, copper or sfp+?

We have intel and emulex (including hardware iscsi) cards in use and no
trouble so far. Depending on the intended purpose.

/Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] strange disk space calculation ext4 df and du

[Götz Reinicke - IT Koordinator]

Am 03.11.14 um 19:54 schrieb Jonathan Billings:
 On Mon, Nov 03, 2014 at 04:53:05PM +0100, Götz Reinicke - IT Koordinator 
 wrote:
 in one server I do have a SSD raid 1 size 219GB.

 df shows 9.4 GB free, 198GB used.

 If I do du -sch * | sort -h -r on /, I just have close to 3.5GB used 

 Any hints, what's eating up the space?
 
 Deleted files (check out the output of 'lsof' and look for deleted
 files)?  This happens a lot when your log rotation system rotates a
 log but the daemon logging to it isn't restarted or told to use the
 new log files.
 
 Also, you could have sparse files (read the man page for 'du' under
 --apparent-size) that appear to be using more space than 'du' normally
 reports. 
 

Hi, I checked your suggestions but still no clue what might be wrong.

lsof reports just two DEL Files sshd  /dev/zero and a du with
--apparent-size shows the same result.

still wondering ... Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] strange disk space calculation ext4 df and du

[Götz Reinicke - IT Koordinator]

Am 04.11.14 um 08:45 schrieb Rick Thomas:
 On Nov 3, 2014, at 7:53 AM, Götz Reinicke - IT Koordinator 
 goetz.reini...@filmakademie.de wrote:
 
 Hi,

 in one server I do have a SSD raid 1 size 219GB.

 df shows 9.4 GB free, 198GB used.

 If I do du -sch * | sort -h -r on /, I just have close to 3.5GB used 

 Any hints, what's eating up the space?

 Centos 6.6, fs = ext4.

  regards . Götz
 
 The ext[234] filesystems reserve a certain amount of space for use by root 
 only.  If I remember correctly, the default if 5%, but you can tune that with 
 tune2fs(8) or mkfs.ext4(8). The df command subtracts the reserved space when 
 it shows the amount free.  So an empty 1GB filesystem would show as having 
 950 MB free.


Hi thanks, I'm aware of that, and in my case that would be as if 95% are
reserved for root. Currently I miss 195 +- GB 

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] strange disk space calculation ext4 df and du

[Götz Reinicke - IT Koordinator]

Am 04.11.14 um 09:43 schrieb Peter Kjellström:
 On Mon, 03 Nov 2014 16:53:05 +0100
 Götz Reinicke - IT Koordinator goetz.reini...@filmakademie.de wrote:
 
 ...
 df shows 9.4 GB free, 198GB used.

 If I do du -sch * | sort -h -r on /, I just have close to 3.5GB
 used 
 
 Next thing to check is stuff hiding under mount points. That is for
 example the /tmp directory on the root fs containing stuff but another
 fs then mounted on /tmp hiding that.

df -h

FilesystemSize  Used Avail Use% Mounted on
/dev/mapper/vg_richter2-lv_root
  219G  198G  9,3G  96% /
tmpfs  16G 0   16G   0% /dev/shm
/dev/sda1 477M   49M  403M  11% /boot
/dev/sdb  8,2T  1,1T  7,1T  14% /srv/files

so I dont see any hidden fs under / beside /srv/files, which is not
included in my du calculation.

Thanks and regards for more hints ... /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] strange disk space calculation ext4 df and du - SOLVED

[Götz Reinicke - IT Koordinator]

Am 04.11.14 um 14:11 schrieb Leon Fauster:
 Am 04.11.2014 um 10:40 schrieb Götz Reinicke - IT Koordinator 
 goetz.reini...@filmakademie.de:
 Am 04.11.14 um 09:43 schrieb Peter Kjellström:
 On Mon, 03 Nov 2014 16:53:05 +0100
 Götz Reinicke - IT Koordinator goetz.reini...@filmakademie.de wrote:

 ...
 df shows 9.4 GB free, 198GB used.

 If I do du -sch * | sort -h -r on /, I just have close to 3.5GB
 used 

 Next thing to check is stuff hiding under mount points. That is for
 example the /tmp directory on the root fs containing stuff but another
 fs then mounted on /tmp hiding that.

 df -h

 FilesystemSize  Used Avail Use% Mounted on
 /dev/mapper/vg_richter2-lv_root
  219G  198G  9,3G  96% /
 tmpfs  16G 0   16G   0% /dev/shm
 /dev/sda1 477M   49M  403M  11% /boot
 /dev/sdb  8,2T  1,1T  7,1T  14% /srv/files

 so I dont see any hidden fs under / beside /srv/files, which is not
 included in my du calculation.
 
 
 hidden stuff not hidden fs - just unmount /boot + /srv/files and check 
 the emptiness in this directories.

@-) Thanks 100 kowtows; under /srv there was hidden stuff (195GB)

case closed. /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] strange disk space calculation ext4 df and du

[Götz Reinicke - IT Koordinator]

Hi,

in one server I do have a SSD raid 1 size 219GB.

df shows 9.4 GB free, 198GB used.

If I do du -sch * | sort -h -r on /, I just have close to 3.5GB used 

Any hints, what's eating up the space?

Centos 6.6, fs = ext4.

regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] squid proxy, https and apple store - SOLVED

[Götz Reinicke - IT Koordinator]

Am 11.06.14 17:57, schrieb Arun Khan:
 On Wed, Jun 11, 2014 at 7:18 PM, Götz Reinicke - IT Koordinator
 goetz.reini...@filmakademie.de wrote:
 Am 11.06.14 15:43, schrieb Arun Khan:

 CentOS version?

 old one 5.10

 Squid version?

 squid-2.6.STABLE21-6.el5


 FWIW, Squid2 supports http 1.0 and Squid3 supports http1.1.

 My team faced similar issues with Debian (Wheezy) + Squid2.  Switched
 to Squid3 and the problems went away.

 O.K. may be I'll try 3.x if not someone knows somthing different.

 
 And let us know if it resolves your problem.

Hi,

I checked the old config again and cant find any misconfiguration and
did not get any more feedback.

On a centos 6.x system I installed as suggested squid3 (squid-3.1.19)
from http://people.redhat.com/jskala/squid/ using my squid2 config.

No problems so far and I can access the Apple app store with the Apple
app store app within OS X.

Problem solved!

Thanks very much for that hint . Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] XFS project quota and samba

[Götz Reinicke - IT Koordinator]

Hi,

I managed to configure project quotas on a xfs device on a centos 6.5
server. (just pquota in fstab, no grquota, rebooted server)

Reporting the quota settings and usage looks good.

But mounting a smb-share with the proect quota enabled on my os x client
shows much less space used (3GB) and 0% free.

Currently 650 GB are used, the quota limit is set to 1TB.

My user I'm mounting the smb-share has no quota limits set.

The users are in ldap.

Any suggestions or hints what might be wrong?

Thanks and best regards . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] squid proxy, https and apple store

[Götz Reinicke - IT Koordinator]

Hi,

I'm a bit confused regarding the connection of a Mac OS X system to the
app store by the app store client.

Squid is configured using ncsa_auth and I can access https and http
websites without a problem.

But the app store app is not logging in. I do get

== /var/log/squid/cache.log ==
2014/06/11 13:23:10| The request CONNECT p12-buy.itunes.apple.com:443 is
DENIED, because it matched 'ncsa_users'
2014/06/11 13:23:10| The reply for CONNECT p12-buy.itunes.apple.com:443
is ALLOWED, because it matched 'ncsa_users'
2014/06/11 13:23:10| The request CONNECT p12-buy.itunes.apple.com:443 is
ALLOWED, because it matched 'CONNECT'


in my squid logfile.

Any hints or suggestions? Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] squid proxy, https and apple store

[Götz Reinicke - IT Koordinator]

Am 11.06.14 14:02, schrieb mark:
 On 06/11/14 07:45, Götz Reinicke - IT Koordinator wrote:
 Hi,

 I'm a bit confused regarding the connection of a Mac OS X system to the
 app store by the app store client.
 
 Hi,
 
 I'm a bit confused as to why you're posting a Mac OSX question, and one 
 that I assume deals with the Apple app store, to the CentOS mailing list?
 

Hi, now I'm confused, so you say, my squid configuration is correct and
i should be able to connect to the service?

/Götz


 Squid is configured using ncsa_auth and I can access https and http
 websites without a problem.

 But the app store app is not logging in. I do get

 == /var/log/squid/cache.log ==
 2014/06/11 13:23:10| The request CONNECT p12-buy.itunes.apple.com:443 is
 DENIED, because it matched 'ncsa_users'
 2014/06/11 13:23:10| The reply for CONNECT p12-buy.itunes.apple.com:443
 is ALLOWED, because it matched 'ncsa_users'
 2014/06/11 13:23:10| The request CONNECT p12-buy.itunes.apple.com:443 is
 ALLOWED, because it matched 'CONNECT'


 in my squid logfile.

 Any hints or suggestions? Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] squid proxy, https and apple store

[Götz Reinicke - IT Koordinator]

Am 11.06.14 15:43, schrieb Arun Khan:
 On Wed, Jun 11, 2014 at 5:15 PM, Götz Reinicke - IT Koordinator
 goetz.reini...@filmakademie.de wrote:
 I'm a bit confused regarding the connection of a Mac OS X system to the
 app store by the app store client.

 Squid is configured using ncsa_auth and I can access https and http
 websites without a problem.

 
 CentOS version?

old one 5.10

 Squid version?

squid-2.6.STABLE21-6.el5

 
 FWIW, Squid2 supports http 1.0 and Squid3 supports http1.1.
 
 My team faced similar issues with Debian (Wheezy) + Squid2.  Switched
 to Squid3 and the problems went away.

O.K. may be I'll try 3.x if not someone knows somthing different.

Thanks! Regards . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] xfs and user quota

[Götz Reinicke - IT Koordinator]

Am 24.05.14 00:32, schrieb Ulf Volmer:
 
 On 23.05.2014 13:53, Götz Reinicke - IT Koordinator wrote:
  xfs_quota -x -c 'limit bsoft=2m bhard=22000m username' /home

 would set the quota for that user.

 But I do get an error:

  Command limit not found.
 The error message looks like you are confounding single quotes with 
 backticks

Hi,

its a bug:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=634952

xfsprogs: xfs_quota commands are internationalized

Dont know if redhat is planing to fix that to.

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] xfs and user quota

[Götz Reinicke - IT Koordinator]

Hi,

I try to enable userquota an a new xfs filesystem.

Its centos 6.5, the filesystem is mounted with usrquota, the server was
rebooted.

I thought

xfs_quota -x -c 'limit bsoft=2m bhard=22000m username' /home

would set the quota for that user.

But I do get an error:

Command limit not found.


Did I miss something?


Any hints/how to beside the official sgi xfs and redhat doc would be nice.

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Ext4 mess .... and EXT4-fs error (device sdc): ext4_mb_generate_buddy - SOLVED

[Götz Reinicke - IT Koordinator]

Hi,

if anybody wondered what happend:

One logic volume on the iscsi storage was configured to two different
LUNs, the second LV was not connected at all.

So the server was logged in to the same LV and at some point the Journal
got messed etc ...

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Ext4 mess .... and EXT4-fs error (device sdc): ext4_mb_generate_buddy

[Götz Reinicke - IT Koordinator]

Hi,
I'm faced with a very strange behaviour:

Centos 6.5 server, Hardware ISCSI HBA from Emulex OneConnect, most
recent drivers and firmware from emulex installed.

Directly attached a 10G ISCSI Storage from QSan. Two Raid volumes, Raid
5, 8 Disks each at 2 TB so 14 TB each logic raid volume.

Both volumes are logged in and usable as sdb and sdc to the server.

Formatted with ext4  -m 0 -v /dev/sd...

Now I copied about 600 GB from an old server to one of the new volumes.
No problems at all.

But moving other data from the old server to the second volume shows the
error in the logs:

EXT4-fs error (device sdc): ext4_mb_generate_buddy: EXT4-fs: group 2592:
0 blocks in bitmap, 24544 in gd

group grows by 16.

But the more strange thing I realised today is, that all the data on the
first volume (on sdb) shows up on sdc as well + the new data too.

Now I'm totally confused and currently there are no more messages in the
system log.

The files on sdc don't show up on sdb!

If I do e.g. a md5sum on the files on both volumes they are the same as
is the contents of e.g. some textfiles I checked.

May be someone has an idea what might cause

a) the error and
b) why dose the data from sdb also shows up on sdc?

b) also occurred also with the original redhat/centos driver for the
ISCSI HBA.

May be I have to use partitions and not the whole device or LVM, ... xfs?

Other storages from Qsan dont show that problem and other storages with
bigger filesystems or e.g. xfs are o.k. too.


confused regards . Götz
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] suggestions for large filesystem server setup (n * 100 TB)

[Götz Reinicke - IT Koordinator]

Hi,

over time the requirements and possibilities regarding filesystems
changed for our users.

currently I'm faced with the question:

What might be a good way to provide one big filesystem for a few users
which could also be enlarged; backuping the data is not the question.

Big in that context is up to couple of 100 TB may be.

O.K. I could install one hardware raid with e.g. N big drives format
with xfs. And export one big share. Done.

On the other hand, e.g. using 60 4 TB Disks in one storage would be a
lot of space, but a nightmare in rebuilding on a disk crash.

Now if the share fills up, my users complain, that they usually get a
new share (what is a new raidbox).

From my POV I could e.g. use hardware raidboxes, and use LVM and
filesystem growth options to extend the final share, but what if one of
the boxes crash totally? The whole Filesystem would be gone.

hm.

So how do you handle big filesystems/storages/shares?

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What is eating up Swap - Thanks to all feedback

[Götz Reinicke - IT Koordinator]

Am 10.12.13 17:18, schrieb John R Pierce:
 On 12/10/2013 6:01 AM, Götz Reinicke - IT Koordinator wrote:
 recently I noticed, that one of our webservers is using swap space,
 while there is plenty of physical ram available.

 free -m
   total   used   free sharedbuffers cached
 Mem:  8118   2014   6103  0 85261
 -/+ buffers/cache:   1667   6450
 Swap: 8197 77   8119


 It's not that much, but why?
 
 during idle time, dirty pages will be written to swap so they can then 
 be discarded if needed.   ignore it, it means nothing

Hi thanks to all feedbacks, I'f found that the httpd is eating up swap;
currently about 500MB while 4GB RAM are still free.

I'll look into that.

Regard . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] What is eating up Swap

[Götz Reinicke - IT Koordinator]

Hi,

recently I noticed, that one of our webservers is using swap space,
while there is plenty of physical ram available.

free -m
 total   used   free sharedbuffers cached
Mem:  8118   2014   6103  0 85261
-/+ buffers/cache:   1667   6450
Swap: 8197 77   8119


It's not that much, but why?

Any ideas how to debug that? Thanks for any hint and suggestion.

/Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Filesystem labeling confusion or mess up

[Götz Reinicke - IT Koordinator]

Hi Cliff,

theer is just one path; I rechecked. The storage and server are attached
currently direct with one twinaxial cable and just one ip on each side.

Multipathing was never configured.

I'm confused.

Currently I reattached the targets and reformatted the devices.

in dmesg I just see one sdb and one sdc.

sda is the internal disk and no more disk devices show up e.g. with
fdisk -l.

Any more suggestions or thoughts?

/Götz

Am 26.11.13 23:08, schrieb Cliff Pratt:
 Looks like you have more than one path to the devices. I would expect to
 see *4* devices.
 
 Cheers,
 
 Cliff
 
 
 On Wed, Nov 27, 2013 at 2:36 AM, Götz Reinicke - IT Koordinator 
 goetz.reini...@filmakademie.de wrote:
 
 Hi,

 I do have an iscsi storage with two raidsets. I'm logged in to the
 target and get two devices: /dev/sdb and /dev/sdc.

 After formatting the devices with ext4 I realised, that I had used a
 wrong label, so I tried to relabel the devices.

 But now I'm confused:

 doing a e2label /dev/sdb or /dev/sdc returns always the same label name
 for both devices.

 so I did  e2label /dev/sdb students and e2label /dev/sdc staff and
 now mounting the devices shows the same filesystem under sdb and sdc!

 Looks like sdc (an empty device) is gone...


 Any suggestions or explanations?

 Thanks and best regards . Götz
...


-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Filesystem labeling confusion or mess up

[Götz Reinicke - IT Koordinator]

Hi,

I do have an iscsi storage with two raidsets. I'm logged in to the
target and get two devices: /dev/sdb and /dev/sdc.

After formatting the devices with ext4 I realised, that I had used a
wrong label, so I tried to relabel the devices.

But now I'm confused:

doing a e2label /dev/sdb or /dev/sdc returns always the same label name
for both devices.

so I did  e2label /dev/sdb students and e2label /dev/sdc staff and
now mounting the devices shows the same filesystem under sdb and sdc!

Looks like sdc (an empty device) is gone...


Any suggestions or explanations?

Thanks and best regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] strange speed of mkfs Centos vs. Debian

[Götz Reinicke - IT Koordinator]

Hi,

I'm testing a storage system and different network settings and I'm
faced with a strange phenomen.

Doing a mkfs.ext4 on the centos server lasts 11 minutes.

The same mkfs.ext4 command on the debian installation is done in 20 seconds.

It is formatting a 14 TB 10Gbit ISCSI Target.

It is the same server. Centos and debian are installed on different
internal harddisks.

Any explanations why debian is so f*** fast? Any hint?

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] how to calculate mail storage/traffic used

[Götz Reinicke - IT Koordinator]

Hi,

we have to setup a server which gets a copy of all messages send and
received by our mailserver as a 1:1 copy. Mails send to multiple
recipients should be calculated and saved per user. (great if you
usually have lost of mails send to groups of people.)

So no dedublication should be used here. (e.g. save the message and
refer the different recipients to it.)

How can I calculate the current traffic in the best way to extrapolate
the amount of space to be planed for the new server?

We think to have a couples of days to be saved.

Thanks for any hint or comment. Regards Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] cleaning up some LVM stuff

[Götz Reinicke - IT Koordinator]

Hi,

one more LVM thing:

on one server some LVM stores are physically removed but still there are
some informatione somwher spread adcross teh server.

e.g. if I do a vgdisplay  or pvcreat I get an error regarding that old
storage:

  /dev/raid_10/lvol0: read failed after 0 of 4096 at 14000515383296:
Eingabe-/Ausgabefehler

How can I remove all information?

Thanks for any hint. Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Intel 10G X520-2 and iscsi storage poor performance

[Götz Reinicke - IT Koordinator]

Am 27.09.13 17:39, schrieb John Doe:
 From: Götz Reinicke - IT Koordinator goetz.reini...@filmakademie.de
 
 we have a storageserver (Centos 6.4) with a dualport Intel 10G X520-2
 Adapter.

 A QSan P600Q-D316 Storage is configured with 8*SATA Drives raid 5 for
 test, connected trought a Cisco UCS 6100 Series Fabric
 Interconnect 10G Switch.

 I formated the storage with ext4 defaults, one volume and got r/w rates
 about 10MB/s some up to 40MB/s  VERY POOR
 
 Maybe have a look at:
  http://downloadmirror.intel.com/14687/eng/readme.txt
 There are some performance tuning sections...

Thanks JD for that link; I was hoping that someone already found some
basic tunig suggestions, so that I dont have to reinvent the wheel.

cheers . Götz

--
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Intel 10G X520-2 and iscsi storage poor performance

[Götz Reinicke - IT Koordinator]

Hi,

we have a storageserver (Centos 6.4) with a dualport Intel 10G X520-2
Adapter.

A QSan P600Q-D316 Storage is configured with 8*SATA Drives raid 5 for
test, connected trought a Cisco UCS 6100 Series Fabric
Interconnect 10G Switch.

I formated the storage with ext4 defaults, one volume and got r/w rates
about 10MB/s some up to 40MB/s  VERY POOR

So we returned the storage to our dealer and they tested the hardware
and did some IO Meter Test with VMware ESXi 5.1 Server - virtual
Windows 2k8-R2 on the Qsan Storage.

The VM did some r/w IO Meter Benchmark up to 1000 MB/Sec. Better.
Hardware looks o.k.

Than they installed a Windows 2k8-R2 server and attached the QSAN. The
r/w speed is about 400-500 MB/s.

After that the dealer installed a Centos 6.4 as I did and the r/w
performance is back to our results  up to 40MB/s 

What the hell? Are the default driver and settings so bad? I know and
researched a lot of tuning options like buffers, new drivers etc.

We did not check that for now, but are'nt there some defalut values and
settings which apply as well to be much faster?

Or in other words, are some realy simple hints and suggestions to

a) debug / find the bottleneck and

b) to increase the performance to the same level as windows?


Thanks a lot for any help and feedback . Götz


-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] to lvm or not to lvm - why/when to use lvm

[Götz Reinicke - IT Koordinator]

Hi,

I was wondering, why/when it is useful or when should I avoid to use LVM.

I think the big advantage of LVMing is if you modify (rezising, ...)
disk and filesystem layouts a lot.

Are there any real pros or cons for following situations regarding e.g.
management and speed?

e.g.:

I do have a server system raid for which the disk layout will not
change; e.g. /var /usr /home will not change much in size.

OR

I do have some file storage shares (iscsi raids) up to some TB each on
one big storage device.

Sometimes (e.g. after a server crash) it is useful to remount the
storage to a different server.

Should I use LVM on the iscsi storage volumes?

Any suggestion and comment is welcome . Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Best Practice to remove an ISCSI LVM from a system

[Götz Reinicke - IT Koordinator]

Am 25.09.13 16:12, schrieb m.r...@5-cent.us:
 Götz Reinicke - IT Koordinator wrote:
 Hi,

 I'd like to know what would be the best way to remove an iscsi lvm
 storage from a server. (removing all reference to that storage etc.)

 The storage in question will be reset and reformated and used on a
 different server; so no LVM export is needed.

 Do I have to do lvremove ..., vgremove ..., pvremove ... and do an

 iscsiadm -m node -T ... -p ... -u and

 iscsiadm -m node -o delete -T ... -p ...

 in order to achieve that?

 Or is there some more simple way?

 This may be a stupid question, but couldn't you simply umount the storage
 from everywhere, maybe the iscsiadm commands, and then just unplug the
 thing? Why do you need to do *anything* with lvm?


AFAIK LVM etc create some traces and file information in some
places/caches .. and I like to remove all traces...

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Best Practice to remove an ISCSI LVM from a system

[Götz Reinicke - IT Koordinator]

Am 25.09.13 17:10, schrieb Ian Pilcher:
 On 09/25/2013 08:58 AM, Götz Reinicke - IT Koordinator wrote:
 I'd like to know what would be the best way to remove an iscsi lvm
 storage from a server. (removing all reference to that storage etc.)
 
 My approach would be:
 
 * Disable all volume groups on the iSCSI LUN(s) with vgchange -a n ...
 
 * Use iscsiadm to log out of the target and delete it from the database
 
 * Run vgscan to update the LVM cache
 
 HTH
 

Helped :) thx /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Best Practice to remove an ISCSI LVM from a system

[Götz Reinicke - IT Koordinator]

Am 25.09.13 20:01, schrieb John R Pierce:
 On 9/25/2013 6:58 AM, Götz Reinicke - IT Koordinator wrote:
 I'd like to know what would be the best way to remove an iscsi lvm
 storage from a server. (removing all reference to that storage etc.)

 The storage in question will be reset and reformated and used on a
 different server; so no LVM export is needed.

 Do I have to do lvremove ..., vgremove ..., pvremove ... and do an

 iscsiadm -m node -T ... -p ... -u and

 iscsiadm -m node -o delete -T ... -p ...

 in order to achieve that?

 Or is there some more simple way?
 
 
 umount any file systems, remove them from /etc/fstab, then vgremove the 
 volume group should be sufficient to remove history of the LV's and VG's 
 ... I don't believe its neccessary to pvremove the individual disks.
 
 then drop the target LUN on the storage server.
 


Helped :) thx /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Best Practice to remove an ISCSI LVM from a system

[Götz Reinicke - IT Koordinator]

Hi,

I'd like to know what would be the best way to remove an iscsi lvm
storage from a server. (removing all reference to that storage etc.)

The storage in question will be reset and reformated and used on a
different server; so no LVM export is needed.

Do I have to do lvremove ..., vgremove ..., pvremove ... and do an

iscsiadm -m node -T ... -p ... -u and

iscsiadm -m node -o delete -T ... -p ...

in order to achieve that?

Or is there some more simple way?


Thanks for any suggestion and best regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Did anybody do a dovecot update on centos 5.x?

[Götz Reinicke - IT Koordinator]

Hi,

dose anybody did a dovecot update from the original 1.0.7 to e.g. 1.1 or
1.2 from atrpms repository?

We dont have any special settings; Each user one mbox mailbox. About 500
imap/pop3 accounts, 400GB data.

Any suggestions and comments are welcome.

Regards . G. Reinicke

-- 
Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Did anybody do a dovecot update on centos 5.x?

[Götz Reinicke - IT Koordinator]

Hi,
Am 26.02.13 14:40, schrieb Giles Coochey:
 On 26/02/2013 13:31, Götz Reinicke - IT Koordinator wrote:
 Hi,

 dose anybody did a dovecot update from the original 1.0.7 to e.g. 1.1 or
 1.2 from atrpms repository?

 We dont have any special settings; Each user one mbox mailbox. About 500
 imap/pop3 accounts, 400GB data.

 Any suggestions and comments are welcome.

 Regards . G. Reinicke


 I use the city-fan repo. I think I'm running dovecot 2.1.15 or so...

And did you do an upgrade from a running, working 1.0 installation?

regards . Götz


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] looking for sssd basics and simple config with existing ldap centos 6.3

[Götz Reinicke - IT Koordinator]

Hi,

I'm planing to setup a new samba fileserver as a member to an existing
samba 3.x SMB.

The old server is still nss-pam-ldapd configured (historic left overs).

As I dont have any pressure to have the new server up and running within
the next few hours, I liked to set up sssd with our existing openldap.

After googling and reading some documentations from redhat/fedora I
think I do have a basic clue on how it should work.

But at the end I'm not getting it up and running the way I expected.

My question:

rpm -ql sssd shows a config in /etc/sssd/sssd.conf, but this file dose
not exist on my system. (May be some how a packagebug?)

Dose anybody has a working example file to share with me?

I tried to edit some examples from the web and put some config together,
but without working success.

Thanks for any suggestion, hint etc. Regards Götz

-- 
Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] what might cause iSCSI connection 1:0 error ISCSI_ERR_CONN_FAILED

[Götz Reinicke - IT Koordinator]

Hi,

I do have a centos 6.x server which accessed two different iscsistorages
for a long time without any trouble.

The storage-connection is done by a separate NIC and VLAN. The LAN
access is on an other NIC.

This weekend something broke and I don't have any clue what might be the
problem or what caused it.

The storages where mounted RO.

In /var/loge/messages there are lot of messages; so from dmesg:

Dec 10 17:13:21 richter kernel: connection3:0: ping timeout of 5 secs
expired, recv timeout 5, last rx 4324582419, last ping 4324587419, now
4324592419
Dec 10 17:13:21 richter kernel: connection3:0: detected conn error (1011)
Dec 10 17:13:22 richter iscsid: Kernel reported iSCSI connection 3:0
error (1011 - ISCSI_ERR_CONN_FAILED: iSCSI connection failed) state (3)



From dmesg:

 connection1:0: ping timeout of 5 secs expired, recv timeout 5, last rx
4324597423, last ping 4324602423, now 4324607423
 connection1:0: detected conn error (1011)

I restarted the server and the filesystems are back online RW, but there
are still that messages.

Thanks for any suggestion or hint! Regards . Götz

-- 
Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] disk device lvm iscsi questions ....

[Götz Reinicke - IT Koordinator]

Am 06.11.12 17:30, schrieb James A. Peltier:
 - Original Message -
 | Hi,
 | 
 | I have an iscsistorage which I attached to a new centos 6.3 server. I
 | added logic volumes as usual, the block devices (sdb  sdc) showed up
 | in
 | dmesg; I can mount and access the stored files.
 | 
 | Now we did an firmware software update to that storage (while
 | unmounted/detached from the fileserver) and after reboot of the
 | storage
 | and reatache the iscsi nodes I do get new devices. (sdd  sde)
 | 
 | The last time I remember a simple vgchange -ay changed all neede
 | settings so that I can mount and use the volumes as expected.
 | 
 | But this time I do get an IO error like
 | 
 |   /dev/sun7110to_dali_LUN_3/lvol0: read failed after 0 of 4096 at
 | 1610608476160: Eingabe-/Ausgabefehler
 | 
 | but also:
 | 
 |   1 logical volume(s) in volume group sun7110to_dali_LUN_3 now
 |   active
 | 
 | What might be messed up? What can I try do get the
 | storage/filesystems
 | back online?
 | 
 | Thanks for any sugesstion and regards . Götz
 | 
 | 
 | --
 | Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH
 | 
 | 
 | ___
 | CentOS mailing list
 | CentOS@centos.org
 | http://lists.centos.org/mailman/listinfo/centos
 | 
 
 Sounds like the update may have renamed the old devices to something new.  
 This has happened once to be with a Dell Equallogic firmware update.  Are you 
 mounting the devices using a device name or using device labels?  If the 
 former you should use labels if you created them or the UUID.  If you have a 
 look in /dev/disk you'll see all the options available to your OS.  If you 
 choice to go with UUID then have a look in /dev/disk/by-uuid to get the path
 


Hi,

on that storage I did not used labels AFAIK ... it was long ago that I
set that up. So I looked up the uuid, but dont got a working clue for me.

I than tried the steps from Hal Martins mail removing the LVM settings
etc and created a new LVM (PD/VG) with the settings I used for
installing the storage on the old server.

But I still cant mount the volumes.

May be I messed more up than to fix? :(


We dont use multipathing on that storage.


ANY suggestion and hint is very welcome!

Thanks and best regards. Götz
-- 
Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] disk device lvm iscsi questions ....

[Götz Reinicke - IT Koordinator]

Hi,

I have an iscsistorage which I attached to a new centos 6.3 server. I
added logic volumes as usual, the block devices (sdb  sdc) showed up in
dmesg; I can mount and access the stored files.

Now we did an firmware software update to that storage (while
unmounted/detached from the fileserver) and after reboot of the storage
and reatache the iscsi nodes I do get new devices. (sdd  sde)

The last time I remember a simple vgchange -ay changed all neede
settings so that I can mount and use the volumes as expected.

But this time I do get an IO error like

  /dev/sun7110to_dali_LUN_3/lvol0: read failed after 0 of 4096 at
1610608476160: Eingabe-/Ausgabefehler

but also:

  1 logical volume(s) in volume group sun7110to_dali_LUN_3 now active

What might be messed up? What can I try do get the storage/filesystems
back online?

Thanks for any sugesstion and regards . Götz


-- 
Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Migrate to Linux Server

[Götz Reinicke - IT Koordinator]

Hi,

Am 04.11.12 21:36, schrieb Ashkan Rahmani:
 Hi Ljubomir Ljubojevic
 
 On Sun, Nov 4, 2012 at 9:00 PM, Ljubomir Ljubojevic off...@plnet.rs wrote:
 
 On 11/04/2012 06:23 PM, Ashkan Rahmani wrote:
..:
 4. Run tests on one OS then reboot and run same tests on another. In
 this setup you can even run realtime tests on Linux in off-hours.

 
 you wrote 4. Run tests on one. tests. I want to know about tests.
 What tests can help me to compare?


http://www.devshed.com/c/a/BrainDump/Benchmarking-Tomcat-Performance/

and

Preface http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring

HTH 2 /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] migrating from Centos 5.8 - 6.3 LDAP Client Config

[Götz Reinicke - IT Koordinator]

Dear Benjamin,

Am 08.10.12 11:13, schrieb Benjamin Hackl:
 Dear Goetz,
 
 On Mon, 08 Oct 2012 10:22:16 +0200
 Götz Reinicke - IT Koordinator goetz.reini...@filmakademie.de wrote:
 
 May be someone can point me to a good how to or has some
 hints/suggetions?
 
 nslcd provides this service for you. (pkg: nss-pam-ldapd)
 
 /etc/nslcd.conf
 
 And /etc/pam_ldap.conf (pkg: pam_ldap)
 
 Make sure that nslcd is running when starting samba.


Thanks. Can you tell me why not to use the SSSD? Im not yet familiar
with it, but found some postings in the web and will try to understand it.

Or is 'nlscd' just the old school way and SSSD the new one?

cheers . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] migrating from Centos 5.8 - 6.3 LDAP Client Config

[Götz Reinicke - IT Koordinator]

Hi,

I run a Centos 5.8 samba server which uses a separate LDAP centos 6.3
server for user and group authentication.

Now we migrate to a new centos 6.3 samba server and I'd like to know how
do 'ldapify' that new server the best way.

I'm a bit confused if I can use the same nss setup like on the current
old server or how and what to configure to go with SSSD?

May be someone can point me to a good how to or has some hints/suggetions?

Thanks and best regards . Götz
-- 
Götz Reinicke
IT-Koordinator

www.filmakademie.de

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ldap 2.4 for centos 5/rhel 5

[Götz Reinicke]

Am 10.09.12 18:36, schrieb Eero Volotinen:
 Hi,
 
 Is there any good source for openldap-server 2.4 version for centos 5 / rhel 
 5 ?

Hi, AFAIK that was a tricky one, we ended up to go with centos 6.x
because there was to much trouble, dependencies with other packages, the
berkley db/libs etc.

But thats one++ year ago.

Look here: http://ltb-project.org/wiki/download#openldap may be today it
is better.

Good luck /Götz

-- 
Götz Reinicke
IT-Koordinator

Filmakademie Baden-Württemberg GmbH


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] suggestion for filesystem or general performance optimization

[Götz Reinicke]

Hi,

recently I noticed, that we have some performance issues regarding our
central samba fileserver. Red Hat EL 5.8, samba3x-3.5.10-0.109.

Doing a rsync, scp or accessing a share from a client and copy large
files (e.g. 3 GB ISO), I do get a read / write average about 60 to 90
MB/sec. So LAN and general hardware can work at max. lan speed.

But copying or syncing small files, e.g. user profiles etc. or doing a
backup of the smaller files lets drop the average performance to 10
MB/Sec or less :(

We use ext3 (noatime), the storage is connected by iscsi, it is a sun
storage with sas harddisk.

All suggestions so far: migrate to ext4 and good luck :)

I read a couple of filesystem comparisons and ext4 looks like the best
option, but what else could I do or expect?

Locking? Limits ... blocksizes, more RAM (4GB installed), we have about
600GB of user data. so not really much...

Thanks for any suggestion or hint . Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Filmakademie Baden-Württemberg GmbH


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Advice on partitioning a Dell MD1200 disk array

[Götz Reinicke]

Hi Tony,

because I suggest just something very general I post off list :)

From my POV as I'm currently facing similar setups with different
hardware rolling back from fine granular setups to simple 'bigger' less
complex configurations. (we do have 6 iscsi storages from 2TB (sun ZFS)
up to 32 TB)

keep it small and simple! :)

I think you are very familiar with the general problems of big HW raids
and big filesystems like rebuild or check times, but splitting up and
adding more complex layers like multiple raids joining in lvm etc. makes
debugging and general handling very hard.

On the other hand, I checked and read a lot about filesystems the last
days being faced with serving user windows samba profiles with lot of
small files and big video/audio data etc.

Long story short:

I usually do one raidvolume per hardware raid box; e.g. we use 16*1TB
drives. Raid6 or Raid5 with spare. I did not notice big performance
differences.

I use LVM to make partitions or I prefer using just one big partition.

I tried xfs and ext4 and will go with ext4 as some test went better for
my setup and from what I read it looks not bad :)

I think you can combine block level devices (like multiple raid boxes)
by LVM into one bigger LV.

And last but not least: The CPU/RAM/Network of the host serving the
files is also very important! :)

I noticed, that the same iscsi storage got about 70MB/s on a new server
(xeon multicore), while on the old fileserver it just got up to 40MB/s.



my2cents :) regards . Götz



May be worth reading:

http://www.techforce.com.br/news/linux_blog/lvm_raid_xfs_ext3_tuning_for_small_files_parallel_i_o_on_debian#.UEPSI1RqYso

http://monolight.cc/2011/02/linux-filesystems-small-file-performance-on-hdds/

http://unix.stackexchange.com/questions/28756/what-is-the-most-high-performance-linux-filesystem-for-storing-a-lot-of-small-fi

https://wiki.archlinux.org/index.php/Ext3

https://wiki.archlinux.org/index.php/Ext4#Tips_and_tricks



Am 04.09.12 13:10, schrieb Tony Molloy:
 
 Hi,
 
 I've just got possession of a Dell PE R720 with 2 MD1200 disk 
 enclosures.
 
 Both MD1200 are fully populated with 12 x 3 TB disks
 
 The system will basically be a student file-server running CentOS 6.x  
 serving various size files from small c programs to multi gigabyte 
 audio and video files over GB ethernet.
 
 The first MD1200 will be configured as the NFS disk. The requirements 
 are for 6 fixed equally sized partitions, one for each cohort of 
 students. For this I was thinking of splitting the MD1200 into 2 RAID5 
 arrays with a hot spare each. Then partitioning each into 3 ext4 
 partitions.
 
 The second MD1200 will be used to backup the first, using BackupPC and 
 for other storage purposes.
 
 As I won't know the storage requirements for the backup partition 
 and they will probably change over time anyway. I was thinking of 
 using LVM for it. So how to partition the MD1200 for LVM. I don't want 
 to put all 12 disks in  a RAID5 and put a LVM volume on it. Can I 
 split it into 2 RAID5 and have a LVM volume spanning both.
 
 Any suggestions. 
 
 Just remember I'm due to retire at the end of this month so this will 
 be my last big job for the Dept. And due to financial constraints I 
 will not be replaced. So I will be handing this machine over to a co-
 worker who is basically a Windoze admin with only a basic knowledge of 
 Linux so nothing too fancy.  ;-)
 
 Thanks,
 
 Tony
 
 
 --
 
 Tony Molloy
 
 CTO, Dept. of Comp. Sci.
 University of Limerick
 Limerick.
 Ireland 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 


-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos machine sometimes unreachable

[Götz Reinicke]

Am 22.08.12 15:01, schrieb Richard Reina:
 I have a simple perl script that every few hours pings the handful of
 machines on my LAN. Lately I've sometimes been getting
 
 ping of 192.168.0.1 succeeded
 ping of 192.168.0.7 succeeded
 ping of 192.168.0.5 FAILED
 ping of 192.168.0.6 succeeded
 ping of 192.168.0.9 succeeded
 
   This machine in question has been running Centos faithfully for about six
 years and no recent changes to it have been made. When I try and ping the
 machine manually it works.   /var/og/messages does not seem irregular. Does
 anyone know know what might be the problem or what else I might check?

Recently I was faced with a similar problem (cant ping a device from
time to time which was not touched for about two years...). My solution:
check the lan cabel.

The system I had problems with had been standing in the sun behind a
window and the lan cabel was 'melting' and did not fit properly into the
adapter.

my2cents.


-- 
Götz Reinicke . Filmakademie Baden-Württemberg GmbH


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Debugging/optimizing LAN/Fileserver Performance

[Götz Reinicke]

Hi,

I do have one fileserver, which is compared to other systems slow when
transferring file through the lan.

The test I did get a transfer speed of about 70 - 80 MB/s. I copy files
by rsync or scp from a SSD disk to the servers ISCSI Storage and I
tested to copy to a serverside RAM disk.

I copy one big file of about 2/10 GB; 2 is to the RAM disk.

The point is, the mentioned one server just get rates off 35+- MB :/ To
DAS HW Raid and RAM disk.

And I don't have any clue, why it is so slow 

All servers and clients are connected to gbit full duplex cisco switche
ports, which are configured the same. The servers ar centos 6.3.
Filesystems ext4 with default settings.

I checked cables and logfiles but don't get any errors/warnings to.

The difference is: The concerned server has a 'small' CPU: Intel(R)
Xeon(R) CPU 3040 @ 1.86GHz Dual Core.

My question: What can affect the network speed? What parameters can I check?

Thanks for any suggestion or hints! Best Regards . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Debugging/optimizing LAN/Fileserver Performance

[Götz Reinicke]

Am 21.08.12 09:14, schrieb Mogens Kjaer:
 On 08/21/2012 08:54 AM, Götz Reinicke wrote:
 The test I did get a transfer speed of about 70 - 80 MB/s. I copy files
 by rsync or scp from a SSD disk to the servers ISCSI Storage and I
 tested to copy to a serverside RAM disk.
 
 What does top say on the server when you're copying?


load average: 0.75, 0.23, 0.07

Cpu(s): 56.8%us, 12.1%sy,  0.0%ni, 19.0%id,  8.6%wa,  0.3%hi,  3.1%si,
0.0%st

564 root  20   0 98.5m 6872 2968 R 99.0  0.2   1:08.10 sshd
569 root 20   0  105m  860  360 R 35.2  0.0   0:22.33 rsync

/Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Debugging/optimizing LAN/Fileserver Performance

[Götz Reinicke]

Am 21.08.12 09:37, schrieb Mogens Kjaer:
 On 08/21/2012 09:30 AM, Götz Reinicke wrote:
 564 root  20   0 98.5m 6872 2968 R 99.0  0.2   1:08.10 sshd
 
 It looks like ssh is the rate limiting step in your rsync.
 
 What cipher are you using for ssh?
 
 I use
 
 rsync --rsh='/usr/bin/ssh -c arcfour128' ...
 
 that helps quite a bit on my hardware, your hardware might do better
 with another cipher.
 
 You should check out https://bbs.archlinux.org/viewtopic.php?id=136713 
 to learn more about this.


Thanks, that shows a much different transfer speed :)

I was not thinking, that rsync also involves ssh and de/encryption speed
.. so the bottleneck looks like the cpu in my test.

Thanks a lot I learned something new to me :) Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] proftp drives me crazy ....

[Götz Reinicke]

Hi,

I installed proftpd from Centos repository to my Centos 6.3 server.

Iptables and selinux are off; I do have one unix user which can ssh and
login to the server.

I do use the default config and cant login to the ftp server (home
directory of that user is all I want) :/

I use filezilla and Mac OS X native ftp access, both fails with
incorrect login (530)

WTF can be wrong? Or what may I have to change?


Thanks for any hints and suggestions! Regards . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] proftp drives me crazy ....

[Götz Reinicke]

Am 21.08.12 11:39, schrieb anax:
 The shell of the approp user not defined in /etc/shells?

It is, login by ssh uses that shell.

 The user in /etc/ftpusers to deny access?

nop

 The ftp server not started?

it is started

 ...
 
 suomi
 
 On 2012-08-21 11:29, Götz Reinicke wrote:
 Hi,

 I installed proftpd from Centos repository to my Centos 6.3 server.

 Iptables and selinux are off; I do have one unix user which can ssh and
 login to the server.

 I do use the default config and cant login to the ftp server (home
 directory of that user is all I want) :/

 I use filezilla and Mac OS X native ftp access, both fails with
 incorrect login (530)

 WTF can be wrong? Or what may I have to change?


  Thanks for any hints and suggestions! Regards . Götz


-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] proftp drives me crazy ....

[Götz Reinicke]

Am 21.08.12 11:41, schrieb Karanbir Singh:
 Hi,
 
 On 08/21/2012 10:29 AM, Götz Reinicke wrote:
 I installed proftpd from Centos repository to my Centos 6.3 server.
 
 CentOS does not ship proftpd - so you might want to check where you got
 it from.
 

/(§ repositories; it's from rpmforge. Sorry.

 can be wrong? Or what may I have to change?
 look at the log files on the server to see what is reported, then read
 the config files to make sure there is authentication setup.
 
 Or even better, get rid of proftpd and just install vsftpd which should
 work out of the box on a CentOS machine ( and its included in the CentOS
 repos )

I'll try vsftpd.

 
 
 Also, have you considered trimming your signature a bit ? at 23 lines
 its a bit over the usual 4 lines that most people stick with on mailing
 lists.
 

Sorry for that much mail signature, but that's our company policy and
have to use it that way...


Thanks  Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] iscsi storage, LACP or Multipathing | Migration or rebuild?

[Götz Reinicke]

Hi,

I do have one iscsi storage with 4 GBit nics of which currently only one
is configured with an ip and which is in productive use by one cent os
6.3 server.

Doing some research brought me to the idea to use some nic bonding or
multipathing for that storage, but multipathing I did about four or five
years ago only once :)

Furthormore I can't find the ultimate answer (may be there is not such)
what will be better for us:

bonding or multipathing.

The storage is used for backup; it's connected to an backupserver which
pulls data from different servers ... may be at the same time or one
after an other. The server uses two bonded nics to the LAN.

My question regarding the setup is, what might be good or better:
bonding or multipathing. We'd like to increase performance and nic
failover if one link breaks.

If multipathing is to be preferred, is it possible to preserve the data
currently saved on the storages ext4?

And googling shows up a lot of different how tos and the redhat doc; but
I din not found one describing a straight forward setup.

So thanks a lot for any suggestion or comments!

Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] bonding and ifcfg config

[Götz Reinicke]

Hi,

I'd like to bond two existing interfaces and checked the RH EL 6.3 [1] doc.

Comparing the current settings of e.g. eth0 to the example config in the
docs I wonder what options I still have to use/copy and which I can drop.

e.g. what should happen to my RH 6.3 eth0 settings not in the docs?

DNS1=
GATEWAY=.
HWADDR=..
NM_CONTROLLED=...
TYPE=
UUID=


Thanks for any suggestion and best regards . Götz


[1]
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s2-networkscripts-interfaces-chan.html
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sec-Using_Channel_Bonding.html
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] 4 GBit nic bonding new centos 6.3 system with cisco VSS switches - suggestions?

[Götz Reinicke]

Hi,

I install a new 4 Port GBit Server with centos 6.3 and I'd like to use
nic bonding.

Searching for a good how to pinted to this page:

http://www.how2centos.com/centos-6-channel-bonding/

My question: Is this the current, good way to bond the 4 ports?

The other question: What should I set on the cisco switch for the
Port-channel options?

As far as I understand for performance and redundancy I will use LACP
and balance-alb.

The switches are 6500 VSS so they should act as one physical device as
required by LACP.

thanks for any suggestion and comments . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] How to handel smtp to public servers

[Götz Reinicke]

Hi,

we do have some subnetworks for private computers, which are allowed to
use there public smtp servers like msn, web.de or whatever with the
users private accounts.

All our own computers have to send mail trough our mailserver with user
authentication.

From time to time we are faced with the fact, that a virus infected
private notebook sends spam and we are told by our ISP to take care :)

What might be a good choice to allow clients to send unrestricted
transparent mails (= use smtp(s)) but we can monitor? E.g. like a
redirect or proxy for smtp?

I like to know which private computer sends lot of mail. :)

Thanks for any hint and suggestion. /Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to handel smtp to public servers

[Götz Reinicke]

Am 27.06.12 10:29, schrieb Fajar Priyanto:
 On Wed, Jun 27, 2012 at 4:23 PM, Götz Reinicke
 goetz.reini...@filmakademie.de wrote:
 Hi,

 we do have some subnetworks for private computers, which are allowed to
 use there public smtp servers like msn, web.de or whatever with the
 users private accounts.

 All our own computers have to send mail trough our mailserver with user
 authentication.

 From time to time we are faced with the fact, that a virus infected
 private notebook sends spam and we are told by our ISP to take care :)

 What might be a good choice to allow clients to send unrestricted
 transparent mails (= use smtp(s)) but we can monitor? E.g. like a
 redirect or proxy for smtp?

 I like to know which private computer sends lot of mail. :)
 
 Hi,
 1. Many malware have their own smtp and can send spam directly.
 To overcome this, block port tcp 25 on your gateway, and only allow
 your mailserver.
From the firewall log then you will know which client is infected.
 
 2. In the case that the malware use your mailserver to send the spam,
 there are plugins to log how many email sent by which client.
 HTH
 


Hi, thanks for your suggestion. But for the mentioned clients thats not
possible. :/ (For our own we do exactly as you suggest :) )

We do have about 100th of freelancers 'flying in and out' of our academy
which we cant 'restrict' by forcing tham to change there clients settings.

But may be we have to think about that if thats the only chance we have

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats:
Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer:
Prof. Thomas Schadt



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos