Re: [CentOS] C8 and backup solution

2020-04-03 Thread miguel medalha
I have been using rsnapshot for years, with great success.

https://rsnapshot.org/


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] File server as host for a Windows Server VM?

2019-09-14 Thread miguel medalha



works but must be licensed.
Not sure if it works for you, but there’s an SQL server that runs on 
Linux.

https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-overview?view=sql-server-2017


The Express version (which would be enough for my case) is free.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] File server as host for a Windows Server VM?

2019-09-14 Thread miguel medalha



Not sure if it works for you, but there’s an SQL server that runs on Linux.


I am aware of that, and it would be my first choice. Unfortunately, in 
addition they want to use some damned printing account software, which 
only runs on Windows :-(


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] File server as host for a Windows Server VM?

2019-09-14 Thread miguel medalha

So far you have not provided stats on server usage (cpu,ram) over a
24hour or 7 day 8am-5pm timeframe. So I will asume you have plenty of
usage/performance to spare.

Yes, I do.

Unless using SSDs when creating the VM pleae do not use dynamic disk
allocation. MS SQL may be very intensive and you are already sharing
resources, lets not be the i/o intensity of the expanding disk one of
them.
The Windows VM machine would have (for now) two 1TB enterprise class 
disks in a mirror configuration exclusively available to it.

remember SQL server is all about RAM, the more the merrier.

I can give it 24 GB or even 36 GB if needed.

is your partition aligned?


Yes.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] File server as host for a Windows Server VM?

2019-09-14 Thread miguel medalha




Do they really need Server for that, or would a workstation do?


A workstation wouldn't do because the number of concurrent connections 
to it would be higher than MS allows for a workstation.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] File server as host for a Windows Server VM?

2019-09-14 Thread miguel medalha

I hope that someone here can give some advice on the following:

I have a Samba based Active Directory. A CentOS 7.6 machine runs as a 
file server and hosts the Windows user profiles for all the Windows 
workstations.


Now management has decided that they need a Windows server for a couple 
of administrative applications, which need MS SQL Server. That would be 
the only role of this Windows. Since the above mentioned server has 
enough resources (2x Quad Core Xeon 2.66 GHz with HT and 48 GB of RAM, a 
dual port 10 Gb NIC) I thought of making it a host for a Windows virtual 
machine using KVM. Given the resources and current setup we have, at the 
moment it wouldn't be practical to implement both servers as VMs on top 
of a bare metal hypervisor.


According to your experience, is there any motive why I shouldn't use 
such a setup?


Thank you for any insights.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] raid 5 install

2019-07-01 Thread miguel medalha

You seem to be saying that hardware RAID can’t lose data.  You’re ignoring the 
RAID 5 write hole:

 https://en.wikipedia.org/wiki/RAID#WRITE-HOLE

If you then bring up battery backups, now you’re adding cost to the system.  
And then some ~3-5 years later, downtime to swap the battery, and more 
downtime.  And all of that just to work around the RAID write hole.


Yes. Furthermore, with the huge capacity disks in use today, rebuilding 
a RAID 5 array after a disk fails, with all the necessary parity 
calculations, can take days.

RAID 5 is obsolete, and I'm not the only one saying it.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] What files to edit when changing the sdX of hard drives?

2019-02-28 Thread miguel medalha

No, I dislike UUIDs. I dislike, strongly, lots of extra typing that
doesn't really get me anything. MAYBE, if you're in a Google or Amazon
datacenter, with 500,000 physical servers (I phone interviewed with them
10 years ago)... but short of that? Nope.


You can (perhaps should...) use the World Wide Name, which is a 
manufacturer ID unique to each disk. Contrary to the /sdX, it doesn't 
change with different configurations, OS or computer. An example of such 
an ID is the following:


/dev/disk/by-id/wwn-0x50025ee3b4f5ca61

Many modern disks have their WWN printed on their labels.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Good linux software RAID primer advise

2017-12-01 Thread Miguel Medalha
>> Could someone recommend good Linux software RAID primer. It would >> be good 
>> if it has good coverage of monitoring and dealing with failures.

https://raid.wiki.kernel.org/index.php/Linux_Raid
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] semi-OT:apcupsd

2017-11-18 Thread Miguel Medalha
>> I can't seem to find apcupsd for C 6. Just went to epel's website, 
>> and not visible. Anyone have a clue?

I am running apcupsd on CentOS 6.9, monitoring through the network a common UPS 
that is physically connected to another server via USB.

Just download the latest source code and compile it yourself. It's as easy as
./configure
make
make install

No problems whatsoever.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow Samba

2017-07-23 Thread Miguel Medalha
Please ask this question on the Samba list. The probability of getting an 
answer is higher there.

sa...@lists.samba.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] frozen bubble for C7

2017-03-18 Thread Miguel Medalha

>
> Can't find perl(compress::bzip2) anywhere.

Are you looking for this? (first hit on Google)

http://search.cpan.org/~rurban/Compress-Bzip2-2.25/lib/Compress/Bzip2.pm

Or this?

ftp://195.220.108.108/linux/centos/7.3.1611/os/x86_64/Packages/perl-IO-Compress-2.061-2.el7.noarch.rpm
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Realtek 8111GR on C7

2016-06-07 Thread Miguel Medalha



I'm planning to buy a mobo (z170-K) that has Realtek 8111GR (nic).

Is the Realtek 8111GR supported or I must change mobo?


I have been using a small server with a Realtek 8111E under CentOS 7 
without any problem.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hard drives being renamed

2016-05-24 Thread Miguel Medalha
>> I've run into this with ZFS on Linux. The 'blkid' is useful to identify the 
>> target device and then add that to your fstab. I don't use device names >> 
>> at all anymore, too ambiguous (depending on the circumstance) in my >> 
>> opinion.

Right. And there are other ways to identify disks unequivocally. Under CentOS, 
for example, I find the following directories:

/dev/disk/by-id
/dev/disk/by-path
/dev/disk/by-uuid

Each one has its optimal use case.

It seems to me that in general the ideal would  be to use the WWN identifier, 
which now comes printed on the disk label sticker and uniquely identifies the 
disk, offering a clear correspondence between physical and logical disks. Under 
CentOS, the WWN ID of detected disks can be found under /dev/disk/by-id. WWN 
stands for "World Wide Name". There's a Wikipedia article about it here:

https://en.wikipedia.org/wiki/World_Wide_Name

"hdparm - I" or even "smartctl  -a" will show which /dev/sdX or whatever 
corresponds to which WWN or other relatively stable ID types. The advantage of 
WWN is that the ID won't change if you connect the disk to a different 
controller, for example from a SAS one to a SATA one. In one of my servers, if 
I unplug a SATA disk from a LSI-Avago SAS controller and I connect it to a 
Intel onboard SATA controller the ID changes from "scsi-idnumber" to 
"ata-brand-model-serialnumber" but the WWN remains constant.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] SSD disk and SMART errors

2016-04-01 Thread Miguel Medalha
Two days ago I installed a brand new SSDNow E50 series (Enterprise) disk 
on a server. I intend to move the OS there. I just did the physical 
install and copied a few files to and from it just to see if it was OK. 
I left it there, waiting for an opportunity to configure it to do real work.


Now I have looked at it with smartctl -a and it gives me the following info:

  1 Raw_Read_Error_Rate 0x0033   104   104   050Pre-fail 
Always   -   9127078
  5 Reallocated_Sector_Ct   0x0033   100   100   003Pre-fail 
Always   -   0
  9 Power_On_Hours  0x0032   100   100   000Old_age 
Always   -   55 (241 12 0)
 12 Power_Cycle_Count   0x0032   100   100   000Old_age 
Always   -   7
 13 Read_Soft_Error_Rate0x0032   104   104   000Old_age 
Always   -   9127078
100 Unknown_Attribute   0x0032   000   000   000Old_age 
Always   -   4
170 Unknown_Attribute   0x0032   000   000   000Old_age 
Always   -   8480
171 Unknown_Attribute   0x000a   100   100   000Old_age 
Always   -   0
172 Unknown_Attribute   0x0032   100   100   000Old_age 
Always   -   0
174 Unknown_Attribute   0x0030   000   000   000Old_age 
Offline  -   6
177 Wear_Leveling_Count 0x   000   000   000Old_age 
Offline  -   0
181 Program_Fail_Cnt_Total  0x000a   100   100   000Old_age 
Always   -   0
182 Erase_Fail_Count_Total  0x0032   100   100   000Old_age 
Always   -   0
184 End-to-End_Error0x0032   100   100   090Old_age 
Always   -   0
187 Reported_Uncorrect  0x0012   100   100   000Old_age 
Always   -   0
194 Temperature_Celsius 0x0022   028   033   000Old_age 
Always   -   28 (Min/Max 20/33)
195 Hardware_ECC_Recovered  0x001c   120   120   000Old_age 
Offline  -   9127078
196 Reallocated_Event_Count 0x0033   100   100   003Pre-fail 
Always   -   0
198 Offline_Uncorrectable   0x0010   120   120   000Old_age 
Offline  -   75479755259904
199 UDMA_CRC_Error_Count0x0032   200   200   000Old_age 
Always   -   0
201 Unknown_SSD_Attribute   0x001c   120   120   000Old_age 
Offline  -   9127078
204 Soft_ECC_Correction 0x001c   120   120   000Old_age 
Offline  -   9127078
230 Unknown_SSD_Attribute   0x0013   100   100   000Pre-fail 
Always   -   0
231 Temperature_Celsius 0x   100   100   011Old_age 
Offline  -   0
232 Available_Reservd_Space 0x0032   000   000   000Old_age 
Always   -   33
233 Media_Wearout_Indicator 0x0032   000   000   000Old_age 
Always   -   6
234 Unknown_Attribute   0x0032   000   000   000Old_age 
Always   -   7
235 Unknown_Attribute   0x0033   100   100   002Pre-fail 
Always   -   0
241 Total_LBAs_Written  0x0032   000   000   000Old_age 
Always   -   7
242 Total_LBAs_Read 0x0032   000   000   000Old_age 
Always   -   5



Just look at the number under "198 Offline_Uncorrectable". Is this 
normal for this type of disk? Is smartctl misinterpreting the disk's 
features? The disk has been there essentially doing nothing and it 
presents such enormous numbers of errors. Why?


This is under CentOS 7 (1511).
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Any experiences with newer WD Red drives?

2016-03-01 Thread Miguel Medalha


any chance your SATA cables aren't up to SATA3 (6gbps) performance 
levels ?




In my experience, that's the most likely cause.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Any experiences with newer WD Red drives?

2016-03-01 Thread Miguel Medalha


I discovered, amidst great initial pain, that most, if not all, of the 
problems I had with SATA disks were caused by SATA cables and not by 
the disks themselves. Intermittent problems, such as disks randomly 
not showing up in RAID groups, were solved when I replaced the cables 
with proper ones. Some of the bad cables even came from well known names.


Coincidence or not, all of the cables I had problems with were of the 
same general type: thin and covered with wrapped aluminum foil. I don't 
think I ever had problems with the flat, wider ones.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Any experiences with newer WD Red drives?

2016-03-01 Thread Miguel Medalha



However, the latest C7 server I built, ran into problems with them on
on a Intel C236 board (SuperMicro X11SSH) with tons of "ata bus error
write fpdma queued". Googling on it threw up old suggestions to limit
SATA link speed to 1.5Gbps using libata.force boot options and/or
noncq. Lowering the link speed helped to reduce the frequency of the
errors (from not getting a smartctl output to getting a complete
listing within 2 tries).



I discovered, amidst great initial pain, that most, if not all, of the 
problems I had with SATA disks were caused by SATA cables and not by the 
disks themselves. Intermittent problems, such as disks randomly not 
showing up in RAID groups, were solved when I replaced the cables with 
proper ones. Some of the bad cables even came from well known names.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] C7 AD server

2016-02-07 Thread Miguel Medalha
>> How I can assing permission on this share?

You can easily do it by following the instructions on the Samba Wiki:

https://wiki.samba.org/index.php/User_Documentation
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] C7 AD server

2016-02-06 Thread Miguel Medalha
>> Try this. I have been thinking of trying it on C7.
>> http://www.linuxhelp.net/forums/index.php?showtopic=10868

I wouldn't follow the instructions on that link.

Disable iptables? Nah!

The author lumps SELinux and the firewall together.

What is said about DNS is also misleading. DNS is crucial for AD.

Please look at the Samba Wiki instead.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CENTOS not DoD approved

2015-04-28 Thread Miguel Medalha


 nowhere does it say that centos is approved for use in DoD. it is not on 
 the APL, only RedHat and SuSE
 

So what? If that is so important to you, you can go and buy a RedHat 
license.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] which uuid to specify a raid in fstab

2015-03-07 Thread Miguel Medalha
Assuming your raid group is /dev/md127, you can run:

ls -l /dev/disk/by-uuid

or

blkid /dev/md127

and use the ID both will show for /dev/md127

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] selinux allow FTP

2015-03-02 Thread Miguel Medalha
 
 Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow
 regular ol' FTP using SELinux? Or does that just defeat the purpose of
 having a secure SELlinux server entirely?
 

Maybe use FTP in a jail? Or Linux containers?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ZFS

2014-09-15 Thread Miguel Medalha
 Maybe you can tune ZFS further, but I tried it in userspace (with FUSE) and 
 reading was a almost 5 times slower than MDADM.

That alone is meaningless.  MDADM with which filesystem? 

Zfsonlinux does not work in user space,  it is a kernel module. Just try it. 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SAMBA as AD DC

2014-09-14 Thread Miguel Medalha
 Why don't  you use Sernet Enterprise Samba?

 (...) they do not provide RPMs for RHEL/CentOS 7. So this seems not to be an 
 option.

As someone said before, you don't need to use the latest and greatest to run 
a functional service... On a production environment that is even often 
undesirable until things settle down...

Anyway, Sernet also provides a source rpm. Why not build up from that base?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SAMBA as AD DC

2014-09-13 Thread Miguel Medalha
Why don't  you use Sernet Enterprise Samba? 

They provide precompiled packages for a bunch of distros. 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT hard disk geometry

2014-02-08 Thread Miguel Medalha
With some SATA drives the mode change can only be done by a software utility. 
Some of them don't have jumpers at all.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT hard disk geometry

2014-02-08 Thread Miguel Medalha
The server's manual recommends filling the drive bays in the 1,2,3,4 order.
At this point, you should check the HP support page for the server, Look for 
controller firmware updates, BIOS updates, troubleshooting advice and so on.

Did you try to connect the drive alone? If it is detected alone, you will have 
a clue there. Some drives don't go along with some others when installed in the 
same pair of ports, for example.

I would also suspect the cable. I have had more problems with SATA cables than 
I could expect.

Also, the drive itself can be defective. I once received two new WD high end 
drives that couldn't be detected by any controller and I had to return them. 
The new ones worked fine.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT hard disk geometry

2014-02-07 Thread Miguel Medalha
It seems to me that there's some confusion on your part about what a 
SATA power connector is...

The SATA edge connector is divided in two parts, a larger one and a 
narrower one. The narrower one is the signal, or data, connector. The 
larger one is the power connector.

Some older drives also had an additional common Molex connector for 
power, for compatibility reasons, since at first only a few power 
supplies had the SATA power connector. Note that the Molex connector 
does not enable the hot-plugging and unplugging of SATA drives. This 
needs the 3.3V supply that only the SATA connector provides. As far as I 
can see, the ST3250318AS does not have such a connector.

The manual for the ST3250318AS is here:

http://www.seagate.com/staticfiles/support/disc/manuals/desktop/Barracuda%207200.12/100529369b.pdf

On page 28 you can read about the SATA cables and connectors. The pins 
you refer to, which are not present on the WD at the same position, are 
NOT power connections, that is a jumper block as you can read on the 
first image of page 28. The manual states the following:

«
It is usually not necessary to set any jumpers on the drive
for proper operation; however, if you connect the drive and receive a 
“drive not detected” error, your SATAequipped
motherboard or host adapter may use a chipset that does not support SATA 
speed autonegotiation. If
you have a motherboard or host adapter that does not support 
autonegotiation:
-Install a jumper as shown in Figure 1 below to limit the data transfer 
rate to 1.5 Gbits per second (and leave the drive connected to the 
SATA-equipped motherboard or host adapter that doesn’t support 
autonegotiation) or
-Install a SATA host adapter that supports autonegotiation, leave the 
drive jumper block set to “Normal operation” (see Figure 1 below), and 
connect the drive to that adapter. This option has the benefit of not 
limiting the drive to a 1.5 Gbits/sec transfer rate.
»

I think this is not a power connector issue.

The WD is a SATA3 drive (6gb/s). Are you sure that your motherboard 
supports SATA3 drives? Maybe SOME ports support them while others do 
not? If not, can you force the WD to operate in a lower mode? Some 
drives can, either by hardware or software.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT hard disk geometry

2014-02-07 Thread Miguel Medalha

  that I am running CentOS-6.5 on my HP MicroServer.

Can you please tell us which exact model of MicroServer do you have?
That way, it will be easier to help you.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 6.4 Release Date.

2013-03-09 Thread Miguel Medalha
 I just checked the mirrors this morning and nothing has shown up for 6.4.


That's strange! Yesterday I've seen it in a few mirrors, including a 
couple here in Portugal.
As an example:

ftp://ftp.dei.uc.pt/pub/linux/CentOS/6.4/

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] md raid 10

2012-03-07 Thread Miguel Medalha

 the problem with that is when your boot drive dies your can't boot...with
 ubuntu at least if any drive dies i can stilll boot off of the other 3..:)

You don't need a boot drive, you only need a *boot partition*.

So, you create a small *boot partition* with RAID1 and then allocate the 
rest of your drives to a RAID10 array.

You will still have redundancy (RAID1) on your boot partition.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] md raid 10

2012-03-07 Thread Miguel Medalha
  i then have to redo my entire array...and loose space inside the
  array.  Plus if i raid1 it then i only have two bootable disks..at
  least this way i have 4 bootable disks..:)

Lose space? 100 or 200MB? Why the heck wouldn't you be able to spare 100 
or 200MB of the gigantic size of today's drives?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] md raid 10

2012-03-07 Thread Miguel Medalha

  Plus if i raid1 it then i only have two bootable disks..at least 
this way i have 4 bootable disks..:)

No, you don't have 4. Please study the way a RAID10 array works.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Software RAID1 with CentOS-6.2

2012-02-29 Thread Miguel Medalha

A few months ago I had an enormous amount of grief trying to understand 
why a RAID array in a new server kept getting corrupted and suddenly 
changing configuration. After a lot of despair and head scratching it 
turned out to be the SATA cables. This was a rack server from Asus with 
a SATA backplane. The cables, made by Foxconn, came pre-installed.

After I replaced the SATA cables with new ones, all problems were gone 
and the array is now rock solid.

Many SATA cables on the market are pieces of junk either incapable of 
coping with the high frequencies involved in SATA 3Gb/s or 6Gb/s or 
their connector are made of bad quality plastics unable to keep the 
necessary pressure on the contacts.

I had already found this problem with desktop machines, I simply 
wouldn't believe that such a class of hardware would exhibit it also.

So, I would advise you to replace the SATA cables with good quality ones.


As an additional information, I quote from the Caviar Black range datasheet:

Desktop / Consumer RAID Environments - WD Caviar Black Hard Drives are 
tested and recommended for use in consumer-type RAID applications 
(RAID-0 /RAID-1).
- Business Critical RAID Environments – WD Caviar Black Hard Drives are 
not recommended for and are not warranted for use in RAID environments 
utilizing Enterprise HBAs and/or expanders and in multi-bay chassis, as 
they are not designed for, nor tested in, these specific types of RAID 
applications. For all Business Critical RAID applications, please 
consider WD’s Enterprise Hard Drives that are specifically designed with 
RAID-specific, time-limited error recovery (TLER), are tested 
extensively in 24x7 RAID applications, and include features like 
enhanced RAFF technology and thermal extended burn-in testing.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to setup a computer using CentOS6 as a firewall for the whole network in my place?

2012-02-24 Thread Miguel Medalha

 pfsense for a newbie?

Yup! Based on the simple requirements that the OP expressed, i.e. a 
firewall for the whole network in my place, I would again recommend 
pfsense. It may seem paradoxical but it's not. It just *works* after a 
very simple and quick installation. The user only has to answer a couple 
of simple questions. A WAN interface and a LAN interface are ready and 
working together and that's it.

It can be installed on anything, from a Compact Flash card to a USB 
sticker, it doesn't even need a hard disk.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to setup a computer using CentOS6 as a firewall for the whole network in my place?

2012-02-24 Thread Miguel Medalha
 pfsense for a newbie?

 A CentOS-like firewall would be ClearOS (formerly Clarkconnect) and again 
 would reduce the number of simultaneously-learned layers to wade through.  
 While it works very well, it is yet another layer and difference to learn, 
 and when learning is is really good to not overload the number of layers to 
 learn at once.  IMHO, YMMV, etc.

 Since I have done cisco IOS stuff for a decade and a half, now, I'd recommend 
 Vyatta over pfsense, but, there again, it is yet another, different, layer to 
 learn that *will* overwhelm a newbie.

Isn't Vyatta a comercial product? I suppose that it wouldn't fit a 
newbie either...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to setup a computer using CentOS6 as a firewall for the whole network in my place?

2012-02-23 Thread Miguel Medalha

Why does it have to be CentOS? If you want a wonderful router/firewall 
that you can have up and running in a few minutes, you should look at this:

www.pfsense.org

I quote from their website:

pfSense is a free, open source customized distribution of FreeBSD 
http://www.freebsd.org tailored for use as a firewall and router. In 
addition to being a powerful, flexible firewalling and routing platform, 
it includes a long list of related features and a package system 
allowing further expandability without adding bloat and potential 
security vulnerabilities to the base distribution.


If you insist in using Linux instead, you could look at this:

www.ipcop.org

Once again, a distro specialized on the function it performs.

Why have a generic and bloated system that you then have to customize 
from scratch when such wonderful specialized projects already exist?

I use Linux servers and a pfsense firewall to protect the network. Works 
like a charm, with amazing stability and reliability.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to setup a computer using CentOS6 as a firewall for the whole network in my place?

2012-02-23 Thread Miguel Medalha

 For a newbie one like me ... which option you would advise me to go for?
 I do not have any special preferences but I do care  for the one that 
 is more stable and provide really more security.

It seems to me that the last line of my previous post already contained 
my answer to your question :-)

I use Linux servers and a pfsense firewall to protect the network. 
Works like a charm, with amazing stability and reliability.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird XFS problem

2012-01-22 Thread Miguel Medalha

 Now the machine is not particularly powerful: it is 64-bit machine, dual
 core CPU, 3 GB RAM. So perhaps this is a factor in why I am having the
 following problem: once in awhile that XFS partition starts generating
 multiple I/O errors, files that had content become 0 byte, directories
 disappear, etc. Every time a reboot fixes that, however. So far I've looked
 at logs but could not find a cause of precipitating event.

Is the CentOS you are running a 64 bit one?

The reason I am asking this is because the use of XFS under a 32 bit OS 
is NOT recommended.
If you search this list's archives you will find some discussion about 
this subject.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird XFS problem

2012-01-22 Thread Miguel Medalha
 Correction to the above: the XFS partition is 26TB, not 16 TB (not that it
 should matter in the context of this particular situation).

Yes, it does matter:

Read this:

*[CentOS] 32-bit kernel+XFS+16.xTB filesystem = potential disaster*
http://lists.centos.org/pipermail/centos/2011-April/109142.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird XFS problem

2012-01-22 Thread Miguel Medalha


 uname -a
 Linux nrims-bs 2.6.18-274.12.1.el5xen #1 SMP Tue Nov 29 14:18:21 EST 
 2011 x86_64 x86_64 x86_64 GNU/Linux

 this is clearly a 64-bit OS so the 32-bit limitations ought not to apply.


Ok! Since you didn't inform us in your initial post, I thought I should 
ask you in order to eliminate that possible cause.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird XFS problem

2012-01-22 Thread Miguel Medalha

Nevertheless, it seems to me that you should have more than 3GB of RAM 
on a 64 bit system...
Since the width of the binary word is 64 bit in this case, 3GB 
correspond to 1.5GB on a 32 bit system...
If you have a 64 bit system you should give it space to work properly.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird XFS problem

2012-01-22 Thread Miguel Medalha

 Nevertheless, it seems to me that you should have more than 3GB of RAM
 on a 64 bit system...
 Since the width of the binary word is 64 bit in this case, 3GB
 correspond to 1.5GB on a 32 bit system...
 If you have a 64 bit system you should give it space to work properly.

... and the fact that a reboot seems to fix the problem could also point 
in that direction.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird XFS problem

2012-01-22 Thread Miguel Medalha



 You are right - it would indeed be desirable to have more than 3 GB of 
 RAM on that system. However it is not obvious to me that having that 
 little RAM should cause I/O failure? Why? That it would make the 
 machine slow is to be expected - and especially so given that I had to 
 jack the swap up to some 40 GB. But I do not necessarily see why I 
 should have outright failures due solely to not having more RAM.


If I were you, I would be monitoring the system's memory usage. Maybe 
some software component has a memory leak which keeps worsening until a 
reboot cleans it.
Also, I wouldn't discard the possibility of a physical memory problem. 
Can you test it?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dedicated Firewall/Router

2012-01-16 Thread Miguel Medalha

 I want to build a dedicated firewall/router as I am launching a NPO and I can 
 host this in my garage. (Comcast offered me a 100 x 20 circuit for $99/mo 
 with 5 statics)

 Thoughts, opinions, suggestions are welcome as to what to do!

http://www.pfsense.org/

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba + Openldap

2011-10-18 Thread Miguel Medalha

 Anyone have an update tutorial/howto for samba to authenticate to ldap?


http://www.samba.org/samba/docs/man/Samba-Guide/happy.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Two ftp clients? Why?

2011-08-02 Thread Miguel Medalha




 What I'm left wondering is:

 1) Why you are relying on PATH expansion for this from something as
 critical as a cron job.  It is good sysadmin practice to specify
 explicit paths for situations like this rather than to worry about
 whether or not there is a good or valid reason for there being 2 ftp
 clients installed on the system.

That was precisely my thought. I often noticed that people find it 
easier to blame others rather then questioning and rethinking their own 
actions...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slightly OT: First Time KVM and LVM on Centos

2011-06-13 Thread Miguel Medalha

 (...) I am hoping that someone here can give me some pointers, or point me to 
 some clear
 how-to's somewhere.  Any help is appreciated.  Thanks

Some good guides on virtualization and LVM reside here:

https://access.redhat.com/knowledge/docs/Red_Hat_Enterprise_Linux/

vmware also has some very useful documentation:

http://www.vmware.com/support/pubs/

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Miguel Medalha
I think that the most secure setup is to use both LDAPI (ldap 
connections over Unix sockets) for connections inside the ldap server 
and TLS for connections from everywhere else on the network. Plus, ldapi 
connections are much faster than TCP connections.

Am I wrong?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

You can use something like this Atom 525 dual core motherboard:

http://www.jetwaycomputer.com/NF99.html

Or this Atom C550 dual core board:

http://www.jetwaycomputer.com/NC9C.html

With the AD3INLAN-G daughterboard:

http://www.jetwaycomputer.com/Daughter_Board.html

This will give you 5 Gigabit Ethernet ports (2 on PCIe and 3 on PCI) and 
a free PCI slot on which you can put up to 4 more.
Of course it all depends on the needed concurrent traffic.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha


 pci is a shared bus with a max of 2 gigabits.  you'll see a gigabit but
 never see two or more.

I am aware of that. But as I said it depends on your particular needs in 
*concurrent* traffic. Although it cannot sustain simultaneous Gigabit 
debits on all interfaces, i can sustain Gigabit bursts that are not 
simultaneous, as is often the case.

I have found that such a solution is perfectly capable when isolating a 
LAN, or several LANs,  from a WAN, for example.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

 pci is a shared bus with a max of 2 gigabits.  you'll see a gigabit but
 never see two or more.
 I am aware of that. But as I said it depends on your particular needs in
 *concurrent* traffic. Although it cannot sustain simultaneous Gigabit
 debits on all interfaces, i can sustain Gigabit bursts that are not
 simultaneous, as is often the case.

 I have found that such a solution is perfectly capable when isolating a
 LAN, or several LANs,  from a WAN, for example.

If you really need concurrent Gigabit traffic on several interfaces, I 
would suggest that you get proper *dedicated* firewall/router hardware 
instead of building one from standard parts. It will be much more efficient.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

 I would defiantly stick with PCIe for 5 NICs. Additionally Realtek
 NICs don't offer the best performance and their drivers are hit or
 miss. The Supermicro board has Intel PCIe NICs onboard and a PCIe
 expansion slot. This should give you full performance depending on the
 Atom processor. It really comes down to if you are just moving packets
 or needing to do packet inspection

The daughterboard I pointed to contains Intel 3 Gigabit chips.

By the way, the OP never told us what would be the intended use for the 
firewall he needs.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

 The daughterboard I pointed to contains Intel 3 Gigabit chips.

Ooops, I meant *3 Intel Gigabit chips*.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

 I'm assuming the OP is trying to save money. A firewall with 5xGbe
 interfaces is going to thousands of dollars.

I was assuming the same. That's why I suggested the Jetway solution. I 
is economic and works very well in many scenarios.
Not, of course, if you need *concurrent* Gigabit access on several 
interfaces. I stress *concurrent*.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

 I was assuming the same. That's why I suggested the Jetway solution. I
 is economic and works very well in many scenarios.
 Not, of course, if you need *concurrent* Gigabit access on several
 interfaces. I stress *concurrent*

I built one of these to connect several vlans to a 24Mbit ADSL internet 
access. It runs pfsense 2.0 and it works very well. Stable, fast and 
effective.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1U firewall hardware

2011-05-15 Thread Miguel Medalha

 Does it have to be 1RU ?

This one is 1U:

http://routerboard.com/pricelist.php?showProduct=98

13 Gigabit ports

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Affordable KVM over IP switch

2011-03-23 Thread Miguel Medalha

 Ok, I won't argue with that; a it fails in this scenario overrides
 a it works for me.  I will add though, that were it got into the state
 described above was where I was able to recover it by using the reset
 button.  You might want to try that next time instead of the cable
 disconnect solution

My unit does not have a reset switch. I told you it's a PITA :-)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Affordable KVM over IP switch

2011-03-22 Thread Miguel Medalha

 Which is about $400, not counting cables, which are expensive.

Well, you said not thousands of dollars... And I bought the cables for 
about 20 dollars each.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Affordable KVM over IP switch

2011-03-22 Thread Miguel Medalha

 That part isn't a function of the iPEPS, it's a function of your
 KVM switch.  So yes, I was thinking about models that do it with
 a particular key stroke.  I've used the D-Link DKVM-8E as a decent
 low cost unit, although it has the tendancy to get confused during
 a full power outage of your data center, requiring a hard reset.
 Because the DKVM-8E takes power from both its own power brick and
 from the keyboard connectors, you can't reset it by using a remote
 power distribution unit; you have to have someone present in the
 data center press a button.  Given my druthers, I'd use a different
 unit that didn't exhibit this behavior, but I find it's not too
 onerous (I've had two cases in the last 18 months that required
 this on-site intervention, and even then the servers are fine; I
 just can't reach the consoles.)


The D-Links are NOT suitable for professional use. I used one of their 
models and it hanged on me multiple times. Because it is powered by the 
keyboard/mouse/video connectors, the only way to recover it is to 
physically disconnect ALL cables and reconnect them again. As long as 
ONE of the sources of power is connected, the unit won't recover. 
Someday you quickly need to access a machine only to suddenly discover 
that you are stuck and can go nowhere. A real PITA!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Affordable KVM over IP switch

2011-03-21 Thread Miguel Medalha

 Are there any KVM over IP switches that are not thousands of dollars?
 Ideally a 3-4 port switch for a few hundred seems reasonable to me.


Try this 8-port one from LevelOne:

http://global.level1.com/Business-Products/KVM-Switches---Extenders/Rackmount-KVM-Switches/KVM-0831/421.html

It has an expansion slot which accepts a IP module:

http://download.level1.com/level1/manual/ACC-2000v1.0_UM.pdf

I use the base KVM, without the IP module, and it is very stable. It 
connects a USB keyboard and a USB mouse to USB and/or PS2 ports on the 
servers.

It is also cascadable.

I hope this helps.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Rebuilding samba3x rpms results in size doubled

2010-11-28 Thread Miguel Medalha

 I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are 
 nearly in triple size of the original RPMs. I have installed and 
 checked the binary files are stripped. What can result in such 
 difference in RPM sizes?

Debugging information not removed from binaries?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CENTOS 5 (X86 32 bits) only support 16 Gb RAM???

2010-11-16 Thread Miguel Medalha

 I think I did not say clearly.   It is NOT application can use 4GB MAX.  What 
 I say is HARDWARE(server) HAVE 64gb ram OR 128 gb ram but O.S. only 
 understand 16 GB.

That was clear from the beggining.

With that amount of RAM you should really use a 64 bit OS. Otherwise, 
you will be doing a disservice to yourself...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Building Samba RPM packages for RHEL/CentOS 5 - Needed corrections to the .spec file

2010-11-02 Thread Miguel Medalha
I just built from source the Samba 3.5.6 RPM packages for CentOS 
5.x/RHEL5.x.

I found some glitches in the included samba.spec file and I thought 
someone else might benefit from my recent experience. The spec file for 
RHEL/CentOS resides, on the sources tree, under 
samba-3.5.6\packaging\RHEL\.


1 - The process initially fails due to a dependency problem: missing 
keyutils-devel. Change the respective entry on line 31 
(BuildRequires:) to keyutils-libs-devel (yum install this file from 
the repositories if needed).

2 - Although it is called by the packaging process, the umount.cifs 
file is not compiled and therefore cannot be found in sources3/bin at 
the moment of packaging. Therefore, the RPM build process fails. Either 
comment the references to the file from lines 237, 396 and 414, if you 
don't need this function, or add the following to the ./configure 
command, starting on line 137:

 --with-cifsumount

The default for this parameter is no, and therefore it is not included 
in the configure process as is.

3 - The RPM build process finally fails because some files, which were 
compiled and copied to the temporary tree, are not called by the 
packaging process. The following lines must be included on the spec 
file, under Files section:

/usr/share/locale/de/LC_MESSAGES/net.mo

%{_includedir}/wbc_async.h

%{_mandir}/man5/pam_winbind.conf.5.gz

I suggest you include them close to related lines (same paths) for the 
sake of clarity.


After these corrections the build of the RPM packages went on with no 
errors and was successful. All the packages installed correctly afterward.

I hope these tips will be useful to someone.


PS - The sources for Samba 3.5.6 are here:
http://www.samba.org/

Before building, you might be interested in patching the sources with 
the patch provided by Volker Lendecke to improve compliance with Windows 
ACLs. The patch is here, thanks to Volker:

http://samba.org/~jra/samba-3-5-x-acl-jumbo-patch.tgz

patch -b -p1  jumbo-patch-3-5-6.diff

After applying the patch and modifying the .spec file you can proceed to 
the building process. cd to 
/usr/src/redhat/SOURCES/samba-3.5.6/packaging/RHEL and execute the 
makerpms.sh script there.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to set ACLs on windows share

2010-10-26 Thread Miguel Medalha

 I have to get/set acls on a windows share by script.
 I can mount the windows share by mount.cifs but I don't know how to 
 set/get acls... anyone could help me ?
 thx so much.

You would benefit from posing this question to the Samba mailing list:

sa...@lists.samba.org

Do you want to set the ACLs from the Windows side or from the Unix 
server side?

What do you use to store ACLs? Linux ACLs? A Samba VFS module?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LDAP authentication on a remote server (via ldaps://) [SOLVED]

2010-10-07 Thread Miguel Medalha

 The reason why I (think I) need both is that many third party apps on
 the server (PHP applications typically) do not easily manage StartTLS.
 Meanwhile, having two different ports make it easier to manage via iptables.


You can also use StartTLS over the network and LDAPI (connection over 
Unix sockets, which are inherently secure) for apps running on the 
server. I use it, both with OpenLDAP and 389 Directory Server (a.k.a. 
Fedora DS, Red Hat DS).

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LDAP authentication on a remote server (via ldaps://) [SOLVED]

2010-10-06 Thread Miguel Medalha

Are you aware that SSL on port 636 is now considered deprecated in favor 
of START_TLS on port 389?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LDAP authentication on a remote server (via ldaps://) [SOLVED]

2010-10-06 Thread Miguel Medalha

 Are you aware that SSL on port 636 is now considered deprecated in favor of
 START_TLS on port 389?
 No, I'm not (I actually thought that it was the other way round)

 (...)

 What are the pro and cons of both approaches?

 Comments more than welcome

You can, as an example, consult the Wikipedia article on LDAP. It states:

---

StartTLS

The StartTLS operation establishes Transport Layer Security (the 
descendant of SSL) on the connection. It can provide data 
confidentiality (to protect data from being observed by third parties) 
and/or data integrity protection (which protects the data from 
tampering). During TLS negotiation the server sends its X.509  
certificate to prove its identity. The client may also send a 
certificate to prove its identity. After doing so, the client may then 
use SASL/EXTERNAL. By using the SASL/EXTERNAL, the client requests the 
server derive its identity from credentials provided at a lower level 
(such as TLS). Though technically the server may use any identity 
information established at any lower level, typically the server will 
use the identity information established by TLS.

Servers also often support the non-standard LDAPS (Secure LDAP, 
commonly known as LDAP over SSL) protocol on a separate port, by 
default 636. LDAPS differs from LDAP in two ways: 1) upon connect, the 
client and server establish TLS before any LDAP messages are transferred 
(without a StartTLS operation) and 2) the LDAPS connection must be 
closed upon TLS closure.

LDAPS was used with LDAPv2, because the StartTLS operation had not yet 
been defined. The use of LDAPS is deprecated, and modern software should 
only use StartTLS .

http://en.wikipedia.org/wiki/LDAP

---

A quick search will provide plenty of articles about the subject.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EXT4 mount issue

2010-10-04 Thread Miguel Medalha

Can you give us the output of tune4fs -l /dev/sdb ?

Does it show  has_journal under Filesystem features?

If it doesn't, you can input the following:

tune4fs -o journal_data

The option journal_data fits the case in which you don't care about 
the fastest speed but you put your focus on data integrity instead.

By the way, if you only used the defaults when creating the ext4 
filesystems, I am afraid that you didn't use the ext4 specific features 
that give it a real advantage over ext3. Some of them cannot be 
configured latter, they have to be specified when you create the filesystem.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EXT4 mount issue

2010-10-04 Thread Miguel Medalha

 Below is the output from tune4fs. From what people are saying it 
 looks like et4 may not be the way to go.


What people are saying? So instead of understanding and solving some 
issue you just jump wagon, maybe only to find some other issue there?

ext4 is stable and works perfectly. You just have to configure it 
properly, as with anything.

Can you still recreate the filesystems? If so, study the parameters for 
ext4 and use them. You will want extents, because it provides a much 
better use of disk space and avoids fragmentation.

As you are, you can still create a journal on the filesystem you have, 
using tune4fs. Look under switch -o (options).

As an example, I give you some of what I have here with a ext4 partition:

In /etc/fstab:

LABEL=/data1/data   ext4
defaults,data=journal,acl,user_xattr 1 2

tune2fs gives me the following:

Filesystem features:  has_journal ext_attr resize_inode dir_index 
filetype needs_recovery extent flex_bg sparse_super large_file huge_file 
uninit_bg dir_nlink extra_isize
Filesystem flags: signed_directory_hash
Default mount options:journal_data user_xattr acl

Regards

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EXT4 mount issue

2010-10-04 Thread Miguel Medalha

 Filesystem state: not clean


You should really look at that line and at why it is there.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EXT4 mount issue

2010-10-04 Thread Miguel Medalha

 I was just a little worried at the response from Brent earlier quote 
 Don't play Russian Roulette and use ext4.  .

Maybe he was referring to some old information dating back to the 
development period.

ext4 has been declared stable by the kernel people. As a matter of fact 
it is now the default filesystem for several major Linux distros.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EXT4 mount issue

2010-10-04 Thread Miguel Medalha

 The defaults are determined by /etc/mke2fs.conf.  If you've modified or
 removed that file, mkfs.ext4 will behave differently

On my CentOS 5.5 systems, defaults for ext4 reside on /etc/mke4fs.conf.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Raid 10 questions...2 drive

2010-09-25 Thread Miguel Medalha

 And don't do it that way.

 If you have a single drive failure with RAID 0+1 you've lost *all* of
 your redundancy - one more failure and you are dead. If you create two
 RAID1 sets and then strip them into a RAID0 you get pretty much the same
 performance and space efficiency characteristics, but if you have a
 drive failure you still have partial redundancy. You could actually take
 a *second* drive failure as long as it was in the other RAID1 pair. With
 4 drives raid0+1 can only survive 1 drive failure. With 4 drives in raid
 1+0 you can survive an average of 1.67 drive failures.

Indeed.

This article explains the odds of loosing data with RAID 1+0 vs 0+1:


Why is RAID 1+0 better than RAID 0+1?
http://www.aput.net/~jheiss/raid10/

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Raid 10 questions...2 drive

2010-09-25 Thread Miguel Medalha

 Mdraid10 actually allows for a 3 drive raid10 set. It isn't raid10 per say 
 but a raid level based on distributing copies of chunks around the spindles 
 for redundancy.

Isn't this what they call RAID 1e (RAID 1 Enhanced), which needs a 
minimum of 3 drives?

This seems to me a much better name for it than calling it RAID 10...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Raid 10 questions...2 drive

2010-09-25 Thread Miguel Medalha

 The raid1e type probably didn't exist when Neil Brown came up with the 
 algorithm.

You are probably right.

 He should have patented it though...

Maybe...

 Maybe he started out with the idea to create a raid10, but didn't want the 
 complexity of managing sub-arrays so decided just to redistribute chunk 
 copies instead and then it took off from there.

Yes. I didn't want to sound harsh to him. I am VERY grateful for his 
outstanding work.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to show that a filesystem is ACL-enabled?

2010-09-16 Thread Miguel Medalha

   
can someone clarify this?  is there a command that shows whether a
 filesystem is currently acl-enabled?  and is the mount man page
 simply incomplete in that respect?  thanks.

tune2fs -l /dev/[hda1,sda1]

The values between [ ] are an example only. Replace, of course, with 
your own storage device.

Look at Filesystem features and Default mount options.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Anyone Having Any Luck Downloaing the DVD ISO?

2010-09-08 Thread Miguel Medalha

I don't quite understand why all this fuss about some DVD ISOs...

At least the Portuguese mirrors work very nicely...
Here's an example:

ftp://ftp.di.uminho.pt/pub/centos/5.5/

Regards

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] boot process glitch due to missing 2nd disk

2010-07-20 Thread Miguel Medalha

This is not a Dell-specific BIOS hack. Dear child, ask your folks about
PCs. I think it was only this decade that PCs would actually boot
*without* a keyboard. EVERY PC EVER MADE before would not.

Nah! Every BIOS since I remember (at least from 1990) had a choice on 
the first page, Standard BIOS Setup. Halt on all errors, Halt on 
keyboard/video errors, Halt on no errors. At least these three were 
always present.

Of course the default is always Halt on all errors. Unless you modify 
the settings on purpose, that's what happens.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] boot process glitch due to missing 2nd disk

2010-07-20 Thread Miguel Medalha

 This is not a Dell-specific BIOS hack. Dear child, ask your folks about
 PCs. I think it was only this decade that PCs would actually boot
 *without* a keyboard. EVERY PC EVER MADE before would not.


Nah! Every BIOS since I remember (at least from 1990) had a choice on
the first page, Standard BIOS Setup. Halt on all errors, Halt on
keyboard/video errors, Halt on no errors. At least these three were
always present.

Of course the default is always Halt on all errors. Unless you modify
the settings on purpose, that's what happens.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba and (and maybe other characters) in paths/files

2010-06-25 Thread Miguel Medalha

 I have samba installed on my server, with a fileshare. When connecting to 
 samba, using windows, filesnames with  (double quotes) in them become 
 gibberish on the windows client.


Since Windows doesn't allow double quotes in filenames, Samba doesn't 
either.

Single quotes (') are allowed and you can use them instead.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] XFS on CentOS

2010-06-22 Thread Miguel Medalha

 Does anybody know why unlike so many Linux distros (Fedora, Ubuntu,
 OpenSUSE) CentOS does not come with XFS support by default but rather
 requires custom modifications after the install in order for you to be
 able to support XFS on your CentOS machine? Just seems a little odd
 given how much CentOS is oriented to be used as a server OS

The 64 bit version of CentOS does support XFS.

The reason why it is only supported by the 64bit version has recently 
been discussed on this list. Please search the list's archives.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] XFS on CentOS

2010-06-22 Thread Miguel Medalha

 It's not available in the installer since it's considered a technology
 preview by Redhat.


... which causes no problem whatsoever. It is normally used for data 
partitions, not system partitions.
One can install the OS and then create the necessary partitions with XFS.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Disabling services in CentOS 5.5

2010-06-16 Thread Miguel Medalha

The following NSA document provides very good information on the secure 
configuration of Red Hat Enterprise Linux 5/CentOS 5.x:

Guide to the Secure Configuration of Red Hat Enterprise Linux 5
http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf

It goes through almost all the services and gives you guidance on 
whether and how you should disable a service.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to download CENTOS 5.5 DVD version??

2010-06-11 Thread Miguel Medalha

 I want to CENTOS download side and tried to download CENTOS 5.5 X86_64 DVD 
 version.  I can NOT find on any site

Somebody already answered to you, but I will repeat:

http://isoredirect.centos.org/centos/5/isos/x86_64/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to download CENTOS 5.5 DVD version??

2010-06-11 Thread Miguel Medalha
One more mirror with DVD ISOs, this one in Portugal:

ftp://ftp.di.uminho.pt/pub/centos/5.5/isos/x86_64/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to download CENTOS 5.5 DVD version??

2010-06-11 Thread Miguel Medalha
One more, also in Portugal:

http://mirrors.nfsi.pt/CentOS/5.5/isos/x86_64/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to download CENTOS 5.5 DVD version??

2010-06-11 Thread Miguel Medalha
ISOs here:

http://mirror.chpc.utah.edu/pub/centos/5.5/isos/x86_64/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to download CENTOS 5.5 DVD version??

2010-06-11 Thread Miguel Medalha

 When I try to download, none of the mirrors in UK seems to have these
 isos, nor in the nearby countries mirrors

Here in Portugal practically all the mirrors have them :-)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ulimit [SOLVED]

2010-04-11 Thread Miguel Medalha

 I know it works because I just tested it and it survived the server's
 reboot. I ran ulimit -a and the new value was there.
  
 ...from a login shell.  If you don't have a login shell /etc/profile
 isn't read on bash startup.


In my case, I am doing the change because of Samba. When you run 
tesparm, the lastest versions of Samba give the following warning:

rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)

When I add the line ulimit -n 1024 to /etc/profile, the warning 
disappears, even after a reboot.
So, this certainly works for processes running as root.

But you are right in that it will probably depend on the particular user 
requirement.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ulimit

2010-04-10 Thread Miguel Medalha

 I need to to change the ulimit to 16384(ulimit -n 16384) on boot on
 Centos 5.4 64 bit.  How do I do that?  Been searching and have yet to
 find a good answer.  Tried to do it in rc.local but it appears to
 happen to late there

In order to make the change permanent, add the following line to 
/etc/security/limits.conf:

* - nofile 16384

 From limits.conf's header:

«Quote:

- the wildcard *, for default entry
- nofile - max number of open files

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ulimit [SOLVED]

2010-04-10 Thread Miguel Medalha

 I need to to change the ulimit to 16384(ulimit -n 16384) on boot on
 Centos 5.4 64 bit.  How do I do that?

After replying to you, I tested the solution I gave you and it didn't 
work.

I found a working solution. I added the following line to /etc/profile:

ulimit -n 16384

This works as the general default setting. If you want to apply the 
setting to a particular user, you should add it to the .bash_profile 
file in the user's home directory.

I know it works because I just tested it and it survived the server's 
reboot. I ran ulimit -a and the new value was there.

Please excuse me for the involuntary mislead. I was pretty sure that it 
did work once upon a time...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Forgetting network settings

2010-03-28 Thread Miguel Medalha

 i am adding routr options with
 route add -net xxx dev eth0
 but when i reset computer it is not in netstat table anymore

In about five (5) seconds I found this on Google:

Adding Persistent Routes
http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flattopic_id=1927forum=30

I suppose you would be able to find it too...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] generate certiciate help

2010-03-25 Thread Miguel Medalha
Maybe this will help:

http://www.ibm.com/developerworks/lotus/library/ls-Certification_Authority/index.html

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] CAT5 IP-capable rackmount KVM units?

2009-12-31 Thread Miguel Medalha

 Overall using CAT5 is a lot easier, just don't make the mistake of
 thinking that it's ethernet.  CAT5 just provides the wires, the
 signaling is proprietary and would probably fry an ethernet port if
 you plugged one in.  I suggest using different color cables
 specifically for the KVM connections.


That may be true for the solution you know but certainly it is not true 
for many solutions out there. Look for KVM over IP.

As a quick example, see this page:

http://www.lindy-usa.com/kvm/extenders-listed-by-features/kvm-over-ip/

You can even control equipment over the Internet.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] CAT5 IP-capable rackmount KVM units?

2009-12-31 Thread Miguel Medalha

 What you're referring to is accessing the KVM box itself via IP, which
 the Aten does allow. What Aten *also* does is use CAT5 cable to link
 the KVM switch to various adapters which plug into the server(s). It's
 the signalling on those lines that Brian was referring to, not
 remotely accessing the KVM itself.



Ok! Sometimes we jump to conclusions without reading carefuly. Sorry!
Thank you for the explanation.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS 5.4 - Problem with Enumeration of NICs

2009-12-12 Thread Miguel Medalha
I just made a new CentOS 5.4 installation. The machine has an Intel 
10/100 and an Intel GB on board, and a Broadcom GB card on a PCI-X (64 
bit) slot. After the install finished, I noticed that the order and 
naming of the Ethernet interfaces is totally screwed up. Under Network 
Manager, the Intel GB card shows the MAC address of the Broadcom and 
vice-versa. As a consequence, none of them works. When I push the Probe 
button, they show each other's MAC Adress. The names of the devices do 
not correspond to the names of the interfaces. If I correct the problem 
by manually editing the configuration files, they MAY get wrong again 
upon reboot. Only the 10/100 interface stays put.

After a remote reboot for kernel update, I just lost connection with the 
machine, so I guess it happened again.
This NEVER happened with CentOS 5.2 or 5.3 on the same machine.

I want to manually assign a ID to the cards and let them keep it forever.
Will the manual entry of the HWADDR=/ /parameter in the ifcfg-ethx 
files fix this for good or will it be overrided by some other component 
of the OS?

Thank you.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.4 - Problem with Enumeration of NICs

2009-12-12 Thread Miguel Medalha

 As I recall my solution was to comment out the modprobe alias created
 for the network cards (/etc/modprobe.conf) and then in
 network-scripts, use the HWADDR in each config script.  Make sure the
 device=ethX matches the name of the file, if nothing else, for your
 own sanity - since the OS checks that line, and does not care what the
 file is named.

   

Thank you for your answer. I will look it up.

I found this useful article:

Linux Enumeration of NICs
http://linux.dell.com/files/whitepapers/nic-enum-whitepaper-v4.pdf

The author, a Dell employee, made a script to automate the process of 
ordering the NICs. He also gives tips to manually solve this recurring 
problem.

Regards
Miguel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Is ext4 safe for a production server?

2009-12-10 Thread Miguel Medalha

 XFS is not stable on 32-bit systems. You should not use it there. You 
 need a 64-bit kernel.

 Default for servers should be 64-bit now anyway. Not many reasons left 
 for a 32-bit system, and more and more 3. party applications have less 
 and less support for 32-bit platforms in general.
   

That is for you rich people :-) Not everyone can afford the latest and 
greatest server hardware. There are tons of older servers out there. I 
still manage some servers with only 2GB of RAM and some of their 
motherboards accept a *maximum* of 4GB. Those precious few GB are better 
used with a 32bit OS, don't you agree?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  1   2   >