Re: [CentOS] Back-up connection

2013-08-16 Thread Ken godee
On 8/16/2013 4:33 AM, Timothy Murphy wrote:
 Some weeks ago, I asked if anyone had set up a backup scheme for a remote
 server.
 By backup here, I mean an alternative arrangement that can be called upon
 if eg the DSL connection to the remote machine fails.


Not sure if this is what you are thinking about but
I had similar problem back in the day with a router
that the only was I could get it back online was
to power cycle it.

Picked up one these on Ebay for like $30.00

http://www.baytech.net/products/showprod.php?prod=ds2-rpc

Was really handy, still have it just in case.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to setup RAID 5 + 1 hot spare?

2013-01-24 Thread Ken godee
raid 6

On 1/24/2013 7:37 AM, Wenshan Ren wrote:

 Rudi Ahlers writes:

 On Thu, Jan 24, 2013 at 7:59 AM, Ren Wen shan renws1...@gmail.com wrote:

 Hello everyone,

 I am new to this group so please forgive me if this question has been
 already asked.

 With four identical hard drives, I want to setup RAID 5 + 1 hot spare by a
 fresh CentOS (6.3) installation.

 I have read this article (

 http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-raid-config.html
 )
 and watched this video (http://www.youtube.com/watch?v=qm3MkuTfDLw), now I
 have the basic ideas.

 However, due to my limited experience and knowledge on this area, I am
 still confused.

 To make things easier, I only need a swap and a `/' partition.

 Could you give me any hint on this? What should I read to get the basic
 knowledge? How can I setup a simple RAID 5 + hot spare?


 Regards,
 - Meatball
 ___


 Since you're new to this list, and this topic, I'm going to spare you the
 headache. Don't use RAID5 Even with a hot-spare, if you use large drives
 chances are you'll loose everything if one of the drive fail and you need
 to rebuild the whole set.

 Rather use RAID 10. The newer CentOS installation disks has an option to
 setup RAID10, alternatively.

 There are numerous tutorials out there on how todo it, but this one seems
 quite easy to follow:
 http://www.youtube.com/watch?v=zlOK1voR2nA

 Hi Rudi,

 Thanks a lot for your reply, the video is very helpful.

 I read this discussion on serverfault.com
 http://serverfault.com/questions/106131/raid-5-with-hot-spare-or-raid-10-with-no-hot-spare


 but still quite confused as some people think RAID-10 is way safer while
 some people wrote:
 
 I'd have to disagree with CHopper3. Since there are only 4 drives in
 this situation your failure capabilities are the same (2 drives) with
 either scenario, except with raid 10 if you happen to lose the wrong 2
 drives then you'll have a real problem. Also there is definitely an
 added benefit of having a global spare for your other RAIDs as well.
 


 My new question is:
 As RAID 10 requires at least 4 hard drives (not very sure about this
 information), with only 4 hard disks, is RAID-10 without hot spare a
 better solution than RAID-5 + 1 hot spare? Why or why not?

 --
 Wenshan Ren
 Email: renws1...@gmail.com
 Blog: wenshanren.org
 Douban: www.douban.com/people/renws
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] wiping out data on a disk (no physical acess to the machine)

2013-01-09 Thread Ken godee

 Thanks. Is it possible that shred exit abnormally in any case (for example,
 some files that it relies on have been shreded)?

 Without physical access to the machine so you can see (and control) what is
 actually going on, there is no way to 100% guarantee that the data is
 completely destroyed.


If you had some disk space could you create a partition
and install a minimalistic Linux version, set your
system to boot the minimalistic Linux version, log
in and completely destroy any partition you want and
you could just leave the minimalistic Linux version.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Order of sata/sas raid cards

2012-08-24 Thread Ken godee
I've done that before to get some old data off a drive and
the system appended a 1 to all matching label names.

On 8/23/2012 5:42 PM, John R Pierce wrote:
 On 08/23/12 4:15 PM, Jobst Schmalenbach wrote:
 I will try the LABEL way of doing 

 the problem with labels, there's no guarantee they will be unique.  the
 default labels that the centos installer uses are the same on every
 system, so if you plug a drive into another computer, the odds are
 pretty high there will be a collision.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Oracle tries to capture CentOS users

2012-07-20 Thread Ken godee
 Fernando Cassia wrote:
 On Fri, Jul 20, 2012 at 2:16 PM, John Hinton webmas...@ew3d.com wrote:
 Meanwhile, if this is linux.oracle.com, shouldn't Oracle database be
 included in the 'free version'?

 No, as IBM doesn´t make DB2 GPL either. It´s the big bucks from the
 fortune 500 proprietary products which pays -in part- for all the FOSS
 goodness like OpenJDK, Netbeans, Virtualbox, Glassfish, MySQL, Btrfs,
 InnoDB, BerkeleyDB...

Why don't they just continue to do something more useful
like continue the support for OpenSolaris!



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Universal server hardware platform - which to choose?

2012-06-26 Thread Ken godee
 From: Rafał Radecki radecki.ra...@gmail.com

 We are looking for something rather not expensive but reliable which has a 
 good support.


I'd add a few more things to the list.

Redundant power supplies
dual gig nics
dual quad core cpu's
raid support w/battery backed cache
remote management

pick up a 2nd(err..3rd) generation HP DL380G5

There's a lot of equipment around
and can be had for a good price.

Save enough to even pick up a second one
and keep on site for RD and equipment/parts backup.






___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] we want to delete all files in a folder except the files with the most recent date

2012-06-19 Thread Ken godee

#!/bin/sh
find /files/* -mtime +2 -exec rm {} \;



On 6/19/2012 12:26 AM, mav...@telenet.be wrote:


 Hi,

 We want to delete all files in a folder except the files with the most recent 
 date
 example

 ls -l
 jun 3 10:45 file1
 jun 3 12:20 file2
 jun 2 10:20 file3
 jun 2 05:00 file4
 jun 1 12:00 file5
 jun 1 10:00 file6

 jun2 en jun1 must be deleted

 regards,
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PCI/DSS compliance on CentOS

2012-05-25 Thread Ken godee
wow, seems like quite a lot.

What level of PCI/DSS compliance are you going for?

The only other thing I might add

Are you hosting the hardware? If it's
hosted else where then the facility that's
hosting the hardware needs to be PCI/DSS complaint.

On 5/25/2012 10:22 AM, Arun Khan wrote:
 I have a client project to implement PCI/DSS compliance.

 The PCI/DSS auditor has stipulated that the web server, application
 middleware (tomcat), the db server have to be on different systems.
 In addition the auditor has also stipulated that there be a NTP
 server, a patch server,

 The Host OS on all of the above nodes will be CentOS 6.2.

 Below is a list of things that would be necessary.

 1. Digital Certificates for each host on the PCI/DSS segment
 2. SELinux on each Linux host in the PCI/DSS network segment
 3. Tripwire/AIDE on each Linux host in the PCI/DSS segment
 4. OS hardening scripts (e.g. Bastille Linux)
 5. Firewall
 6. IDS (Snort)
 6. Central “syslog” server

 However, beyond this I would appreciate any comments/feedback /
 suggestion if you or your organization has undergone a PCI/DSS audit
 and what are the gotchas that you encountered, especially with respect
 to CentOS/ open source stack.

 I came across this which kind of brings out issues between the
 implementer and the PCI/DSS auditor.
 http://webmasters.stackexchange.com/questions/15098/pci-dss-compliance-for-a-vps-using-centos

 Thanks very much.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PCI/DSS compliance on CentOS

2012-05-25 Thread Ken godee
 What level of PCI/DSS compliance are you going for?

 I have to check this with the client.   Credit card information will
 be encrypted and stored in client's own db.

Yup, this is exactly what they don't want people to do and
I believe in the future they'll strive for just a handful
of processors that will meet there criteria.

 The client will be hosting it on their own office premise (the
 physical security aspect is being handled by another vendor).


I'm sure I'm talking way over my head at this point but
this must be for a fairly large merchant (1M+ transactions yearly).

Not quite sure why one wouldn't use one of processors gateway 
facilities, there's convenient api's that would handle anything to do
with cc's and at a small fraction of the price to set up and maintain.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] bridge connection and two linux servers

2012-04-16 Thread Ken godee


On 4/16/2012 8:04 AM, Arif Hossain wrote:
 I need to set up following network architecture :


 Internet
  ^
  +-+ |  +--+
  |  Centos6-1  | |  |  Centos6-2   |
  |  + eth0 + +  |  |
  | (br0)|  ||  |
  |  + eth1 ++ eth0 |
  +-++--+
   ( cable connection )


 Two public IP's are to be configured like follows :

 + **eth0** and **eth1** of **Centos6-1 are to be configured as a bridge
 with IP1
 - **Centos6-1** can be accessed with IP1
 - **eth0** of **Centos6-2** is configured with IP2
 - any request destined to IP2 will flow through **Centos6-1**

 How can i accomplish this feat?

Not sure if I'm understanding this

You're trying to present a service running on box 2 to the internet
through box 1's public interface? (securely)

If so I might have a look at this software

http://www.delegate.org/delegate/

You'll be able to create a reverse proxy on box 1 to box 2 or
any services running on your internal network, etc.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Updating/Backing Up Server

2012-02-01 Thread Ken godee
 Matt wrote:

 I am slowly migrating the data etc off an old CentOS32 4.x server to a
 new CentOS64 5.x server.  The old server only has 15Gbyte of its hard
 drive in use.  Is there an easy/safe way to copy the entire contents
 of old server root directory to a directory on the new server for
 future reference?  Most of the data is various test files, perl
 scripts, etc. scattered all over.

 tar?

If possible, save and install old drive into new server and
mount when/if you need something.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] confidence in partitioning tool (6.2)

2012-01-30 Thread Ken godee
 On Mon, Jan 30, 2012 at 8:14 AM, Larry Martelllarry.mart...@gmail.com
 wrote:
 I have a Windows 7 laptop that I want to make dual boot with CentOS
 6.2. My plan was to use the Windows Disk Management tool to partition
 the disk, but I do not have the needed admin rights on the box to use
 that. Has anyone used the partitioning tool that comes with 6.2 to do
 snip

Maybe a little different answer than you're looking for

But why not install VMware Workstation (free)?

Unless there's some specific reason,

now a days, me personally, I wouldn't do it any other way.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Can anyone talk infrastructure with me?

2012-01-26 Thread Ken godee
 option for me than getting their ADSL2+ service? I mean, is the T
 faster over all given it is all my traffic and I am not sharing?
 Can you explain a bit so I can develop a better understanding of how
 they advertise speeds, etc?

 Yes, the cost for a T1 will seem very high.  It is antiquated telco
 tech.  T1s are generally very reliable, but very very slow.

 1.5Mbps is not faster than 40Mbps.  There's nothing hidden in the way
 they advertise speeds.

 DSL and DOCSIS technologies have advanced and matured over the last
 couple of decades.  T1 has not.  A T1 connection is the same now as it
 has always been.

Not so much haven't matured but are capable of some other technologies
besides internet access that the local CO could setup, like channelizing 
and different types of signaling, not to mention a
dedicated circuit to the CO.

I might compare SLA of the two. Might find a drastic difference.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS and LessFS

2012-01-16 Thread Ken godee
 We have been looking at implementing deduplication on a backup server.

 If not LessFS can you suggest an alternate deduplication software?


http://openindiana.org/
Solaris 11 Express
http://www.freebsd.org/releases/9.0R/announce.html

(ZFS pool version = 28)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-31 Thread Ken godee
 IP address allocation needs to be done smarter so that geographical
 regions can be isolated easier. And at some point it probably will
 be.

 There already is that capability to some extent. Between geoip and
 the RIR's, one can get a pretty good handle on which /8 or /16 blocks
 need to be blocked at your firewall. In fact the linux based router's
 we use have a specific Country Blocking feature which I use to
 block large swathes of the Net from our systems.


We've been thinking of using the MaxMind GeoIP Country database with 
Apache mod_geoip API to limit certain countries visiting our websites.

Has anyone used this or have any input on it's usefulness?




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-31 Thread Ken godee
 On 12/31/11 2:17 PM, Ken godee wrote:
 We've been thinking of using the MaxMind GeoIP Country database with
 Apache mod_geoip API to limit certain countries visiting our websites.

 Has anyone used this or have any input on it's usefulness?

 the virus/worm folks will just move to open relays that are not
 blocked.   I have something like 1/2 the total IP space blocked on this
 one forum I host that seems to attract a very large number of bogus
 signups, and it hasn't abated the 50-100/day of fake registrations yet.
 there's now 1700 subnets and another 1000 specific IPs blocked.   I can
 tell they are robotic assisted fake registrations because the 'Bio'
 field ('about you, why you want to join this forum') is always filled
 with one of 4 specific entries (LO qUe eS bRaKbEaT, Me gusta la
 guasa, Loading..., or less often, Robot).  initially, the vast
 majority of these fake registrations came from china, russia.  now they
 are coming from everywhere since I have almost all of china and russia
 blocked.


Grrr... didn't think of that. A quick google shows plenty of free or low 
cost US proxy servers. That would be the first thing I would do.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6 x86_64 can't detect raid 10

2011-12-30 Thread Ken godee
 Dear All,

 I just got a new server with the following specifications:
 motherboard : Intel S5500BC
 CPU : Xeon Quad Core 2.6Ghz
 RAM : 8GB
 HDD : 4 x 2TB SATA with configured raid 10 using raid embedded
 server.

 The problem is the centos installer can't detect raid virtual disk. I
 can't find any log error with the following error messages during
 installation process:

 Disks sda, sdb, sdc, sdd contain BIOS RAID metadata but are not part of
 any recognized BIOS RAID sets.

 I'm already use search engine to find the information regarding to this
 issue, but I can't find the solutions for CentOS.

 Thanks in advance


I believe it's possible, it's just that you need to install
the drivers. CentOS/RedHat does not include them.

I would start here with the Intel Deployment Assistant

http://www.intel.com/design/servers/ism/deployment.htm


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Refresh all packages?

2011-12-29 Thread Ken godee
 Hello, I have dedicated server on CentOS Linux 6.1 with
 webmin/virtualmin and it tell me:

 Package updates   145 updates to system packages are available. Use the
 Virtualmin Package Updates module to install them selectively.

 4 updates to Virtualmin packages are available. Use the Virtualmin
 Package Updates module to install them selectively.

 Should I update all packages?

Sure, if you want to stay current and move along
to 6.2

Update Webmin too.

Yum update should take care of it.

Of coarse it's always nice to make a snapshot/backup
in case things go screwy. Which really should not unless
you've gone off the standard install. (beside Webmin)




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what percent of time are there unpatched exploits against default config?

2011-12-27 Thread Ken godee
 password?  That's what I'm talking about -- how often does this sort of
 thing happen, where you need to be subscribed to be a security mailing list
 in order to know what workaround to make to stay safe, as opposed to simply
 running yum-updatesd to install latest patches automatically.

Happens all the time! Count on it! If running any server available to 
the public there is no set and forget if you're responsible for that 
server you best stay informed/subscribed and ready to take action be it 
a work around, update or whatever.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Reboot problem with Apache

2011-12-10 Thread Ken godee
 I have CentOS 6 and with webmin/virtualmin panel, and each time that I
 reboot Apache can't start:


 Starting httpd: (98)Address already in use: make_sock: could not bind
 to address [::]:80
 (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80
 no listening sockets available, shutting down

 I do:

 netstat -tulpn| grep :80
 tcp0  0 :::80:::*   LISTEN  1584/httpd


 killall -9 httpd


 And then Apache can start. But do you why thos problem in each reboot?
 I like to fix this problem.

 Thansks you.

 Ernesto

Possibly Webmin and Apache are stepping on each other

add a virt ip for webmin

example

Apache eth0 192.168.1.126:80
Webmin eth0:1 192.168.1.127:80

setup hosts

webmin.host.com

should be good to go



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Reboot problem with Apache

2011-12-10 Thread Ken godee
Webmin doesn't need Apache to run
it uses miniserv.pl

Apache and miniserv.pl are trying to bind to the same ip.

That is unless you have set up a virtual server to run webmin under 
Apache? Default, webmin does not use Apache.



On 12/10/2011 12:59 PM, Craig White wrote:
 On Sat, 2011-12-10 at 14:44 -0500, Weplica wrote:
 Quoting James A. Peltierjpelt...@sfu.ca:

 - Original Message -
 | I have CentOS 6 and with webmin/virtualmin panel, and each time that I
 | reboot Apache can't start:
 |
 |
 | Starting httpd: (98)Address already in use: make_sock: could not bind
 | to address [::]:80
 | (98)Address already in use: make_sock: could not bind to address
 | 0.0.0.0:80
 | no listening sockets available, shutting down
 |
 | I do:
 |
 | netstat -tulpn| grep :80
 | tcp 0 0 :::80 :::* LISTEN 1584/httpd
 |
 |
 | killall -9 httpd
 |
 |
 | And then Apache can start. But do you why thos problem in each reboot?
 | I like to fix this problem.
 |
 | Thansks you.
 |
 | Ernesto

 Is there another web server starting before Apache?  For example,
 nginx.  You could try and use lsof -pPID  or lsof -i :80 to see
 what is holding the port before Apache.


 Thanks James, I get this:


 lsof -i :80
 COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
 httpd   1507 root5u  IPv6  10107  0t0  TCP *:http (LISTEN)





 lsof -p 1507
 COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
 httpd   1507 root  cwdDIR9,0 40962 /
 httpd   1507 root  rtdDIR9,0 40962 /
 httpd   1507 root  txtREG9,0   993010 14161559 /usr/sbin/httpd
 httpd   1507 root  memREG9,0  1532908  2363869 /lib/libdb-4.7.so
 httpd   1507 root  memREG9,0   185388 14161462
 /usr/lib/libapr-1.so.0.3.9
 httpd   1507 root  memREG9,019784  2360213 /lib/libdl-2.12.so
 httpd   1507 root  memREG9,016868  2360449 /lib/libuuid.so.1.3.0
 httpd   1507 root  memREG9,064876 14162016
 /usr/lib/httpd/modules/mod_auth_digest.so
 httpd   1507 root  memREG9,030491 14162017
 /usr/lib/httpd/modules/mod_authn_alias.so
 httpd   1507 root  memREG9,023617 14162020
 /usr/lib/httpd/modules/mod_authn_default.so
 httpd   1507 root  memREG9,029186 14162027
 /usr/lib/httpd/modules/mod_authz_owner.so
 httpd   1507 root  memREG9,031057 14162025
 /usr/lib/httpd/modules/mod_authz_groupfile.so
 httpd   1507 root  memREG9,0   126754 14162043
 /usr/lib/httpd/modules/mod_ldap.so
 httpd   1507 root  memREG9,0   310244  2363873
 /lib/libldap-2.4.so.2.5.6
 httpd   1507 root  memREG9,057340  2363855
 /lib/liblber-2.4.so.2.5.6
 httpd   1507 root  memREG9,019166 14162063
 /usr/lib/httpd/modules/mod_version.so
 httpd   1507 root  memREG9,0   122436  2360428 /lib/libselinux.so.1
 httpd   1507 root  memREG9,0   101064  2360426 /lib/libresolv-2.12.so
 httpd   1507 root  memREG9,0   179160 14161860 /usr/lib/libsmime3.so
 httpd   1507 root  memREG9,012164  2363852 /lib/libplds4.so
 httpd   1507 root  memREG9,016676  2363851 /lib/libplc4.so
 httpd   1507 root  memREG9,0   102740 14157933
 /usr/lib/libsasl2.so.2.0.23
 httpd   1507 root  memREG9,075952  2360207 /lib/libz.so.1.2.3
 httpd   1507 root  memREG9,060383 14162022
 /usr/lib/httpd/modules/mod_authnz_ldap.so
 httpd   1507 root  memREG9,023789 14162024
 /usr/lib/httpd/modules/mod_authz_default.so
 httpd   1507 root  memREG9,0   104808 14161529
 /usr/lib/httpd/modules/mod_include.so
 httpd   1507 root  memREG9,064831 14162044
 /usr/lib/httpd/modules/mod_log_config.so
 httpd   1507 root  memREG9,051697 14162039
 /usr/lib/httpd/modules/mod_ext_filter.so
 httpd   1507 root  memREG9,051499 14161519
 /usr/lib/httpd/modules/mod_deflate.so
 httpd   1507 root  memREG9,034634 14162056
 /usr/lib/httpd/modules/mod_setenvif.so
 httpd   1507 root  memREG9,045364 14161527
 /usr/lib/httpd/modules/mod_headers.so
 httpd   1507 root  memREG9,042731 14162046
 /usr/lib/httpd/modules/mod_mime.so
 httpd   1507 root  memREG9,052524 14162058
 /usr/lib/httpd/modules/mod_status.so
 httpd   1507 root  memREG9,032409 14162057
 /usr/lib/httpd/modules/mod_speling.so
 httpd   1507 root  memREG9,030144 14161553
 /usr/lib/httpd/modules/mod_userdir.so
 httpd   1507 root  memREG9,025588 14162021
 /usr/lib/httpd/modules/mod_authn_file.so
 httpd   1507 root  memREG9,0   298818 14161516
 /usr/lib/httpd/modules/mod_dav.so
 httpd   1507 root  memREG9,088126 14162048
 /usr/lib/httpd/modules/mod_negotiation.so
 httpd   1507 root  memREG9,0   179791 14162049
 /usr/lib/httpd/modules/mod_proxy.so
 httpd   1507 root  memREG9,077416 14162053
 /usr/lib/httpd/modules/mod_proxy_ftp.so
 httpd   1507 root  memREG9,034498 14162052
 

Re: [CentOS] Reboot problem with Apache

2011-12-10 Thread Ken godee
 When I start manual way:

 # killall -9 httpd
 # service httpd start

 Starting httpd: Apache/2.2.15 mod_ssl/2.2.15 (Pass Phrase Dialog)
 Some of your private key files are encrypted for security reasons.
 In order to read them you have to provide the pass phrases.

 Server kuales.com:443 (RSA)
 Enter pass phrase:

 OK: Pass Phrase Dialog successful.



 Can I submit RSA key in automatic way?

 ___

http://wiki.apache.org/httpd/RemoveSSLCertPassPhrase


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssd quandry

2011-10-23 Thread Ken godee

Maybe try to partition it to see what happens.



On 10/23/2011 12:07 AM, John R Pierce wrote:
 On a CentOS 6 64bit system, I added a couple prototype SAS SSDs on a HP
 P411 raid controller (I believe this is a rebranded LSI megaraid with HP
 firmware) and am trying to format them for best random IO performance
 with something like postgresql.

 so, I used the raid command tool to build a raid0 with 2 SAS SSDs

 # hpacucli ctrl slot=1 logicaldrive 3 show detail

 Smart Array P410 in Slot 1

  array C

 Logical Drive: 3
Size: 186.3 GB
Fault Tolerance: RAID 0
Heads: 255
Sectors Per Track: 32
Cylinders: 47869
Strip Size: 256 KB
Status: OK
Array Accelerator: Enabled
Unique Identifier: 600508B1001C2EDB6026F9ADF9F88A09
Disk Name: /dev/sdc
Mount Points: /ssd 186.3 GB
Logical Drive Label: AF36B716PACCRCN810E1R9J646A

 # hpacucli ctrl slot=1 show config

 Smart Array P410 in Slot 1(sn: PACCRCN810E1R9J)
 
  array C (Solid State SAS, Unused Space: 0 MB)


 logicaldrive 3 (186.3 GB, RAID 0, OK)

 physicaldrive 1I:1:23 (port 1I:box 1:bay 23, Solid State SAS, 100
 GB, OK)
 physicaldrive 1I:1:24 (port 1I:box 1:bay 24, Solid State SAS, 100
 GB, OK)

 # hpacucli ctrl slot=1 show ssdinfo detail

 Smart Array P410 in Slot 1
  Total Solid State Drives with Wearout Status: 0
  Total Smart Array Solid State Drives: 2
  Total Solid State SAS Drives: 2
  Total Solid State Drives: 2


  array C

 physicaldrive 1I:1:23
Port: 1I
Box: 1
Bay: 23
Status: OK
Drive Type: Data Drive
Interface Type: Solid State SAS
Size: 100 GB
Firmware Revision: 1234
Serial Number: 99
Model: XYZZY M2011
Current Temperature (C): 30
Maximum Temperature (C): 37
SSD Smart Trip Wearout: Not Supported
PHY Count: 2
PHY Transfer Rate: 6.0GBPS, Unknown

 physicaldrive 1I:1:24
Port: 1I
Box: 1
Bay: 24
Status: OK
Drive Type: Data Drive
Interface Type: Solid State SAS
Size: 100 GB
Firmware Revision: 1234
Serial Number: 99
Model: XYZZY M2011
Current Temperature (C): 29
Maximum Temperature (C): 36
SSD Smart Trip Wearout: Not Supported
PHY Count: 2
PHY Transfer Rate: 6.0GBPS, Unknown



 # tail /var/log/messages
 Oct 22 22:56:24 svfis-dl180b kernel: sd 0:0:0:3: Attached scsi generic
 sg3 type 0
 Oct 22 22:56:24 svfis-dl180b kernel: sd 0:0:0:3: [sdc] 390611040
 512-byte logical blocks: (199 GB/186 GiB)
 Oct 22 22:56:24 svfis-dl180b kernel: sd 0:0:0:3: [sdc] 8192-byte
 physical blocks
 Oct 22 22:56:24 svfis-dl180b kernel: sd 0:0:0:3: [sdc] Write Protect is off
 Oct 22 22:56:24 svfis-dl180b kernel: sd 0:0:0:3: [sdc] Write cache:
 disabled, read cache: enabled, doesn't support DPO or FUA
 Oct 22 22:56:24 svfis-dl180b kernel: sdc: unknown partition table
 Oct 22 22:56:24 svfis-dl180b kernel: sd 0:0:0:3: [sdc] Attached SCSI disk
 Oct 22 22:56:36 svfis-dl180b cmaeventd[2540]: Logical drive 3 of Array
 Controller in slot 1, has changed from status Unconfigured to OK

 # mkfs.ext4 /dev/sdc
 mke2fs 1.41.12 (17-May-2010)
 /dev/sdc is entire device, not just one partition!
 Proceed anyway? (y,n) y
 Filesystem label=
 OS type: Linux
 Block size=8192 (log=3)
 Fragment size=8192 (log=3)
 Stride=1 blocks, Stripe width=0 blocks
 12210528 inodes, 24413190 blocks
 1220659 blocks (5.00%) reserved for the super user
 First data block=0
 Maximum filesystem blocks=4311218176
 373 block groups
 65528 blocks per group, 65528 fragments per group
 32736 inodes per group
 Superblock backups stored on blocks:
   65528, 196584, 327640, 458696, 589752, 1638200, 1769256, 3210872,
   5307768, 8191000, 15923304, 22476104

 Writing inode tables: done
 Creating journal (32768 blocks): done
 Writing superblocks and filesystem accounting information: done


 # mount -t ext4 /dev/sdc /ssd
 mount: wrong fs type, bad option, bad superblock on /dev/sdc,
  missing codepage or helper program, or other error
  In some cases useful info is found in syslog - try
  dmesg | tail  or so

 # tail /var/log/messages
 ...
 Oct 22 23:54:36 svfis-dl180b kernel: EXT4-fs (sdc): bad block size 8192

 ok, so lets try 4K blocks?

 # mkfs.ext4 -b 4096 /dev/sdc
 mke2fs 1.41.12 (17-May-2010)
 /dev/sdc is entire device, not just one partition!
 Proceed anyway? (y,n) y
 mkfs.ext4: Invalid argument while setting blocksize; too small for device



 hmmm.   can't do that either?

 can I configure this 64bit system for large pages or something so it
 will support 8K blocks?






Re: [CentOS] CentOS 6 Partitioning Help

2011-08-31 Thread Ken godee

 The server which is housed at the datacenter only has a single 1TB
 drive. Just to confirm, LVM allows you to increase and decrease space on
 any partition on the fly, but setting each volume manually with EXT4 is
 a physical mount?

 If I were to set hard limits by setting each volume on EXT4 (not using
 the LVM option), do you recommend only setting up a /, /boot, and SWAP?
 In the past this was my partition scheme:

 Root filesystem (/) = 10240MB (10GB)
 /boot = 200MB
 swap =  1024MB (1GB)
 /var = 20480MB (20GB)
 /tmp = 10240MB (10GB)
 /usr = 51200MB (50GB)
 /home = all remaining space on the drive

 Is the above a bad partition?


Man, a thread like this could go on for a long, long time..

In the last couple of years I find myself more in the
John r. camp.

Keeping OS separated from data.

Having the OS on a 10gb part and keeping
all data, including home dirs off the OS. part.

Your OS is not likely to grow much, but your data
will and it's very easy to move/copy the data partitions
more manageable for backups too.

I use this kind of set up on hosts on ESXi, windows, EC2.

What's you backup strat, how about disaster recovery?

Do you need snap shots, or do you need to freeze the
file system or mount data part ro for your backups?

Ext4, XFS, reiserfs, LVM, 

cough, cough, I'm very fond of zfs, sigh, maybe someday.

Keep in mind some file systems can grow, but not shrink.

I think the best bet is to install a couple of test
systems vmware style and hack around a little.

Test your backup and disaster recovery methods, grow/shrink
partitions, test associated fs tools.

You might find you're more comfortable doing/using certain
things.

oh

disk1
/boot
/
/swap
disk2
/data (including home if needed)

my 2c












___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] resize2fs

2011-08-29 Thread Ken godee
 I am trying to resize a centos (5.2) VM drive.  I use VMware and I have
 increased the size of the drive by 40G.  I am running resize2fs on
 /dev/sdb1 (which is my root partition)  but when I do I get this error:

 [root@centos ~]# resize2fs /dev/sdb1 120G
 resize2fs 1.39 (29-May-2006)
 The containing partition (or device) is only 19970795 (4k) blocks.
 You requested a new size of 31457280 blocks.

 How can I change the block size?

 I have also tried to use gparted live cd but it will not allow me to
 increase the size even though it sees 40g of unused space.  I can only
 create a new partition.

 Any help would be appreciated.


I just ran into same kinda of thing and
I for one found much easier to create new
virtual 40gb drive, restore backup, drop old drive,
use new one. done.

If anything goes wrong you still have old virtual drive
you can go back to.







___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Remote control of a WinXP machine from a Linux host

2009-01-10 Thread Ken Godee

 That was my initial idea, but seems too complicated to work out, so I asked 
 for a possible easier alternative. :-)
 

Might be to easy an alternative.

http://www.gotomypc.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Disabling shutdown and suspend for normal users

2007-09-19 Thread Ken Godee

  For Reboot and Halt this works. Setting SuspendCommand= does nothing.
  Suspend still shows up in the menu, and hangs the machine.



Create your own GDM theme and customize exactly how
you want it. Here's ours, users have no access to
anything but logging in.

http://www.perfect-image.com/images/scrn.gif


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] backing up with dump and DLT

2007-09-13 Thread Ken Godee

Please, I'm now looking in google but I'd like to hear your opinion
about this error...



Try the dump users list..

https://lists.sourceforge.net/lists/listinfo/dump-users
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos