Re: [CentOS] question centos stream 8 applying updates

[Sergio Belkin]

El mar, 22 dic 2020 a las 19:46, Sergio Belkin ()
escribió:

>
>
> El mar, 22 dic 2020 a las 18:54, Matthew Miller ()
> escribió:
>
>> On Tue, Dec 22, 2020 at 05:39:57PM -0300, Sergio Belkin wrote:
>> > Edward, thanks for the reply, the tone has changed "if you don't like
>> > CentOS Stream well, you know pay Red Hat".
>> > "If you are using CentOS Linux 8 in a production environment, and are
>> > concerned that CentOS Stream will not meet your needs, we encourage you
>> to
>> > contact Red Hat about options."
>> >
>> > source: https://blog.centos.org/2020/12/future-is-centos-stream/
>>
>>
>> Again, please see
>> https://www.redhat.com/en/blog/faq-centos-stream-updates#Q10
>>
>> The other options being addressed are not all "pay Red Hat".
>>
>> --
>> Matthew Miller
>> 
>> Fedora Project Leader
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> https://lists.centos.org/mailman/listinfo/centos
>>
>
>
> Let's see the CentOS Description:
> «A *community project* for ecosystem developers who want to see what is
> coming in the next version of RHEL and need to introduce changes that
> enable their hardware or software. It also provides a place to develop
> technologies and tools so they‘re ready for the next version of RHEL»
>
> Definitely, is not a CentOS replacement. Again, everything points to Red
> Hat. I see that the focus is developer. I see no place for sysadmins...
>
> *Sorry I meant "CentOS Stream Description"


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question centos stream 8 applying updates

[Sergio Belkin]

El mar, 22 dic 2020 a las 18:54, Matthew Miller ()
escribió:

> On Tue, Dec 22, 2020 at 05:39:57PM -0300, Sergio Belkin wrote:
> > Edward, thanks for the reply, the tone has changed "if you don't like
> > CentOS Stream well, you know pay Red Hat".
> > "If you are using CentOS Linux 8 in a production environment, and are
> > concerned that CentOS Stream will not meet your needs, we encourage you
> to
> > contact Red Hat about options."
> >
> > source: https://blog.centos.org/2020/12/future-is-centos-stream/
>
>
> Again, please see
> https://www.redhat.com/en/blog/faq-centos-stream-updates#Q10
>
> The other options being addressed are not all "pay Red Hat".
>
> --
> Matthew Miller
> 
> Fedora Project Leader
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


Let's see the CentOS Description:
«A *community project* for ecosystem developers who want to see what is
coming in the next version of RHEL and need to introduce changes that
enable their hardware or software. It also provides a place to develop
technologies and tools so they‘re ready for the next version of RHEL»

Definitely, is not a CentOS replacement. Again, everything points to Red
Hat. I see that the focus is developer. I see no place for sysadmins...

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question centos stream 8 applying updates

[Sergio Belkin]

El dom, 20 dic 2020 a las 16:13, Matthew Miller ()
escribió:

> On Sun, Dec 20, 2020 at 10:43:25AM -0300, Sergio Belkin wrote:
> > I feel up to now the predominant tone of communications both fron CentOS
> > and RH is as if CentOS **professional** users were stealing something to
> > RH...
>
> Can you point me to where you are seeing this tone in Red Hat and CentOS
> communications? Because what I see is basically the opposite: Red Hat and
> CentOS saying that's not the motivation at all.
>
> --
> Matthew Miller
> 
> Fedora Project Leader
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

Edward, thanks for the reply, the tone has changed "if you don't like
CentOS Stream well, you know pay Red Hat".
"If you are using CentOS Linux 8 in a production environment, and are
concerned that CentOS Stream will not meet your needs, we encourage you to
contact Red Hat about options."

source: https://blog.centos.org/2020/12/future-is-centos-stream/

Is the PR what introduced the doubt about the CentOS Stream reliability...

I think that Red Hat is in its right to do with CentOS whatever it likes.
However there was a CentOS EOL that Red Hat from one day to the next
decided that it was not convenient to comply, wasn't it?

I think that if Centos Stream is just good enough to use in production
there is no need for Red Hat  advertisements in CentOS announcements. The
CentOS Community already knew that if it wanted guaranteed support and
beyoind it could pay and get Red Hat subscriptions.

At least there was a communication error.

If I'm wrong, let me know.
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question centos stream 8 applying updates

[Sergio Belkin]

El sáb, 19 dic 2020 a las 23:12, edward via CentOS ()
escribió:

>
> On 2020-12-19 14:33, Sergio Belkin wrote:
> >   In what moment "user" and "community" were replaced by "customers" in
> > CentOS?
>
>
> probably they want more of a  overall professional ecosystem for both
> rhel and centos
>
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

So was it a commercial decision wrapped in techie buzz...?
"Professional" does not necessarily mean people that are able or willing to
pay for support.

I feel up to now the predominant tone of communications both fron CentOS
and RH is as if CentOS **professional** users were stealing something to
RH...
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question centos stream 8 applying updates

[Sergio Belkin]

El vie, 11 dic 2020 a las 15:28, Matthew Miller ()
escribió:

>
>
>
>  https://blog.centos.org/2020/12/centos-stream-is-continuous-delivery/
>
>  https://blog.centos.org/2020/12/how-rhel-is-made/
>
> --
> Matthew Miller
> 
> Fedora Project Leader
> ___
>
>

 In what moment "user" and "community" were replaced by "customers" in
CentOS?

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I'm looking forward to the future of CentOS Stream

[Sergio Belkin]

El vie, 11 dic 2020 a las 12:33, Matthew Miller ()
escribió:

> On Fri, Dec 11, 2020 at 12:23:59AM -0800, Gordon Messmer wrote:
> > >This is not a production operating system."
> > Does he say that CentOS is a production operating system?
> >
> > As far as I know, Red Hat has never endorsed running CentOS in
> > production, so I don't understand why it's significant that they
> > also don't endorse running CentOS Stream in production.
>
> Yeah, I too think this is important context. I don't think you'll ever find
> anyone from the business side ever even suggesting that they think CentOS
> Linux, the rebuild, was *ever* something Red Hat recommended to run in
> production.
>
>
> --
> Matthew Miller
> 
> Fedora Project Leader
>

With all due respect. Please don't mix topics.
Everyone is grateful about the effort of CentOS developers in the last 16
years.
The problem is not only the announce and decision of RH, but also the
unfortunate PR of CentOS, how could you ask trust and confidence with
something like that:

> If you are using CentOS Linux 8 in a production environment, and are
concerned that CentOS Stream will not meet your needs, we encourage you to
contact Red Hat about options.

Please don't blame the rest of the world for things that you wrote.

Regards

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Moving to CentOS 8 Stream

[Sergio Belkin]

El jue, 10 dic 2020 a las 15:48, Kienker, Fred ()
escribió:

> "It takes years to build a reputation and seconds to destroy it."
>
> -- Business 101 class
>
>
Fear not in DEVops world you can rebuild your reputation in one seconds
using containers.  :-P


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

[Sergio Belkin]

El mar, 8 dic 2020 a las 13:44, Nicolas Kovacs ()
escribió:

> Le 08/12/2020 à 16:12, Johnny Hughes a écrit :
> > Another very good thing
> >
> > There is no longer a huge delay of a drop of 750 packages at once and a
> > delay of more than a month to get a new release.
> >
> > There will be on delay in stream .. it will be a constantly rolling
> > distribution .. updates will happen all the time with no 'big drop' at
> > point release time.
>
> When I read the first messages of this thread, I was quite concerned. But
> having read through your detailed explanations, let me state that I'm
> reassured.
>
> As a sysadmin, what I like about CentOS is that it's probably the most
> *boring*
> Linux distribution out there. Boring is good. No drama, no surprises. I
> know I
> can have yum-cron run once a day without Icinga suddenly sending me a
> tsunami
> of failure alerts and without clients calling me and yelling on the phone.
>
> Cheers,
>
> Niki
>
> --
> Microlinux - Solutions informatiques durables
> 7, place de l'église - 30730 Montpezat
> Site : https://www.microlinux.fr
> Blog : https://blog.microlinux.fr
> Mail : i...@microlinux.fr
> Tél. : 04 66 63 10 32
> Mob. : 06 51 80 12 12
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

+1 But for some It centennials progress is about destroying the present.
Smoke as a Service.
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 8 Stream: The Good, The Bad, The Ugly

[Sergio Belkin]

El jue, 10 dic 2020 a las 9:39, Steve Thompson ()
escribió:

> On Wed, 9 Dec 2020, Joshua Kramer wrote:
>
> > It can, however, be mitigated if RedHat backtracks, admits their
> > mistake, and affirmatively commits to support future CentOS point
> > releases.  I'll be interested to see how this turns out.
>
> It may already be too late. Even if RedHat says "my bad" and goes back on
> this decision, not many will trust them in the future.
>
> Steve
> --
>
> 
> Steve Thompson E-mail:  smt AT vgersoft DOT com
> Voyager Software LLC   Web: http://www DOT vgersoft DOT
> com
> 3901 N Charles St  VSW Support: support AT vgersoft DOT com
> Baltimore MD 21218
>"186,282 miles per second: it's not just a good idea, it's the law"
>
> 
>
>
The funniest thing is Change Advocates that say: "Don't spread the FUD,
CentOS Stream will be quite stable!" and at same time state:

"If you are using CentOS Linux 8 in a production environment, and are
concerned that CentOS Stream will not meet your needs, we encourage you to
contact Red Hat about options."

https://blog.centos.org/2020/12/future-is-centos-stream/?utm_source=rss&utm_medium=rss&utm_campaign=future-is-centos-stream


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Centos Developers Opinion

[Sergio Belkin]

I would like to know the opinion of the CentOS developers on the decision
to end CentOS. Because people already made his voice heard...

What do you think?

Is it a great decision and master play of business? Because you know
'devops-container-facebook-intel-thing' and "hey is the inevitable train of
history?

"Adapt or die?" Really?

How could you explain what hundred of people around the world that already
implemented CentOS 8 and helped reporting bugs, many of them cannot afford
RH subscription?

How could somebody trust on a company that one day happily says "if you
don't like CentOS Stream, pay us?" and sents to trash a project of 16 years?


Did nobody know what Red Hat was working on this? How strange is...


I read you, we, the CentOS community read you, what do you think?


Thanks in advance
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Error from unix_chkpwd

[Sergio Belkin]

Hi,
On CentOS 7.7.1908 I've got the following error message:
unix_chkpwd[1026]: could not obtain user info (root)

I dont' know why...

There are no SELinux errors, and the permissions of relevant files are:
ls -Z /etc/shadow /etc/passwd /usr/sbin/unix_chkpwd
-rw-r--r--. root root system_u:object_r:passwd_file_t:s0 /etc/passwd
--. root root system_u:object_r:shadow_t:s0/etc/shadow
-rwsr-xr-x. root root system_u:object_r:chkpwd_exec_t:s0
/usr/sbin/unix_chkpwd


Any idea?

Thanks in advance!
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] dbus issue on centos 7 as a lxc container

[Sergio Belkin]

Hi,
dbus on centos 7 lxc won't work.

So I'm unable to start  or query status units with systemd, for example:

systemctl status
Failed to get D-Bus connection: No such file or directory


I have no issues with centos 8 container (debian 10 ones work fine too)
This is the output of ps aux on centos 7:

USER PID %CPU %MEMVSZ   RSS TTY  STAT START   TIME COMMAND
root   1  0.0  0.0  42712  3860 ?Ss   20:11   0:00
/lib/systemd/systemd systemd.unified_cgroup_hierarchy=1
root   2  0.0  0.0  11840  3052 ?Ss   20:12   0:00 /bin/bash
root  28  0.0  0.0  51772  3548 ?R+   20:19   0:00 ps aux

On Centos 8 instead:

USER PID %CPU %MEMVSZ   RSS TTY  STAT START   TIME COMMAND
root   1  0.0  0.0 241980  5320 ?Ss   Oct06   0:01
/lib/systemd/systemd systemd.unified_cgroup_hierarchy=1
root  17  0.0  0.0  93944  5552 ?Ss   Oct06   0:00
/usr/lib/systemd/systemd-journald
root  22  0.0  0.0  97164  2892 ?Ss   Oct06   0:00
/usr/lib/systemd/systemd-udevd
root  34  0.0  0.0  85920  5252 ?Ss   Oct06   0:00
/usr/lib/systemd/systemd-logind
dbus  35  0.0  0.0  54108  2312 ?Ss   Oct06   0:00
/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile
--systemd-activat
ion --syslog-only
root  37  0.0  0.0 368376  7076 ?Ssl  Oct06   0:03
/usr/sbin/NetworkManager --no-daemon
root  42  0.0  0.0  78536  4124 ?Ss   Oct06   0:00
/usr/sbin/sshd -D
-oCiphers=aes256-...@openssh.com,chacha20-poly1...@openssh.com,aes256
-ctr,aes256-cbc,aes128-...@openssh.com,aes128-ctr,aes128-cbc
-oMACs=hmac-sha2-256-...@openssh.com,hmac-sha1-...@openssh.com,umac-128-...@openssh.com,hmac-
sha2-512-...@openssh.com,hmac-sha2-256,hmac-sha1,umac-...@openssh.com,hmac-sha2-512
-oGSSAPIKexAlgorithms=gss-gex-sha1-,gss-group14-sha1- -oKexAlgorithms=
curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellma
n-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
-oHostKeyAlgor
ithms=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-
cert-...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-c
ert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com
-oPubkeyAcceptedKeyTypes=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com,ecdsa-sha2-nistp256,ecdsa
-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ecdsa-sha2
-nistp521,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-cert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com
-oCASignatureAlgorith
ms=rsa-sha2-256,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,rsa-sha2-512,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa
root  45  0.0  0.0   6520   660 pts/3Ss+  Oct06   0:00
/sbin/agetty -o -p -- \u --noclear --keep-baud pts/3 115200,38400,9600
vt220
root  46  0.0  0.0   6520   724 pts/2Ss+  Oct06   0:00
/sbin/agetty -o -p -- \u --noclear --keep-baud pts/2 115200,38400,9600
vt220
root  47  0.0  0.0  22868  1848 ?Ss   Oct06   0:00
/usr/sbin/crond -n
root  48  0.0  0.0   6520   664 console  Ss+  Oct06   0:00
/sbin/agetty -o -p -- \u --noclear --keep-baud console
115200,38400,9600 linux
root  50  0.0  0.0   6520   728 pts/1Ss+  Oct06   0:00
/sbin/agetty -o -p -- \u --noclear --keep-baud pts/1 115200,38400,9600
vt220
root  61  0.0  0.0 283500  2176 ?Ssl  Oct06   0:07
/usr/sbin/rsyslogd -n
root 442  0.0  0.0   6520  1640 pts/0Ss+  19:47   0:00
/sbin/agetty -o -p -- \u --noclear --keep-baud pts/0 115200,38400,9600
vt220
root 461  0.0  0.0  12020  3340 ?Ss   20:12   0:00 /bin/bash
root 480  0.0  0.0  44600  3368 ?R+   20:22   0:00 ps auxwww

Is there a Centos Bug? Or I missing something?
The host is Fedora 32, if you need more information, ask me for.
Thanks in advance!
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Relabel /usr directory

[Sergio Belkin]

nevermind, I think is fixed:

ls -Z  /usr
unconfined_u:object_r:bin_t:s0 bin  unconfined_u:object_r:usr_t:s0 local
unconfined_u:object_r:usr_t:s0 gamesunconfined_u:object_r:bin_t:s0 sbin
unconfined_u:object_r:usr_t:s0 include  unconfined_u:object_r:usr_t:s0 share
unconfined_u:object_r:lib_t:s0 lib  unconfined_u:object_r:usr_t:s0 src
unconfined_u:object_r:lib_t:s0 lib64unconfined_u:object_r:usr_t:s0 tmp
unconfined_u:object_r:bin_t:s0 libexec

isn't it?

I simply re-enabled selinux in /etc/selinux/config and rebooted...

HTH

El mar., 4 feb. 2020 a las 14:59, Sergio Belkin ()
escribió:

> Hi,
> I've done the following:
> - Copy usr content with rsync to another partition:
>
> rsync -av --partial --progress /usr/ /mnt
>
> Then, unmounted, added to fstab a line for /usr, then deleted /usr/* (not
> the directory itself). But I've found that is bad labeled:
>
> ls -Z /usr
> unconfined_u:object_r:unlabeled_t:s0 bin
>  unconfined_u:object_r:unlabeled_t:s0 local
> unconfined_u:object_r:unlabeled_t:s0 games
>  unconfined_u:object_r:unlabeled_t:s0 sbin
> unconfined_u:object_r:unlabeled_t:s0 include
>  unconfined_u:object_r:unlabeled_t:s0 share
> unconfined_u:object_r:unlabeled_t:s0 lib
>  unconfined_u:object_r:unlabeled_t:s0 src
> unconfined_u:object_r:unlabeled_t:s0 lib64
>  unconfined_u:object_r:unlabeled_t:s0 tmp
>
> How can I restore the default contexts?
>
> I've tried with restorecon and with fixfiles, but no luck, for example:
>
> matchpathcon -V /usr
> /usr error: No data available
>
> How can I fix this?
>
> Thanks in advance.
> --
> --
> Sergio Belkin
> LPIC-2 Certified - http://www.lpi.org
>


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Relabel /usr directory

[Sergio Belkin]

Hi,
I've done the following:
- Copy usr content with rsync to another partition:

rsync -av --partial --progress /usr/ /mnt

Then, unmounted, added to fstab a line for /usr, then deleted /usr/* (not
the directory itself). But I've found that is bad labeled:

ls -Z /usr
unconfined_u:object_r:unlabeled_t:s0 bin
 unconfined_u:object_r:unlabeled_t:s0 local
unconfined_u:object_r:unlabeled_t:s0 games
 unconfined_u:object_r:unlabeled_t:s0 sbin
unconfined_u:object_r:unlabeled_t:s0 include
 unconfined_u:object_r:unlabeled_t:s0 share
unconfined_u:object_r:unlabeled_t:s0 lib
 unconfined_u:object_r:unlabeled_t:s0 src
unconfined_u:object_r:unlabeled_t:s0 lib64
 unconfined_u:object_r:unlabeled_t:s0 tmp

How can I restore the default contexts?

I've tried with restorecon and with fixfiles, but no luck, for example:

matchpathcon -V /usr
/usr error: No data available

How can I fix this?

Thanks in advance.
-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum4 and dnf on CentOS 8

[Sergio Belkin]

Thanks,

In fact I've found this:
# ls -l /usr/bin/yum
lrwxrwxrwx. 1 root root 5 may 13  2019 /usr/bin/yum -> dnf-3



El lun., 25 nov. 2019 a las 13:34, Paul Heinlein ()
escribió:

> On Sat, 23 Nov 2019, Stephen John Smoogen wrote:
>
> > On Sat, 23 Nov 2019 at 15:39, Sergio Belkin  wrote:
> >>
> >> Hi,
> >>
> >> I was using yum for years on CentOS servers, and since a few years ago
> dnf
> >> on Fedora desktops. My question is:
> >> Is the same yum4 on CentOS 8 that dnf? What should I use?
> >> Thanks in advance
> >>
> >
> > yum4 is a thin wrapper on dnf mainly because Enterprise Linux users
> > and scripts are used to the yum commands. You can use either dnf or
> > yum4 on the command line and get the same results.
>
> You mentioned you're familiar with Fedora, so you're probably aware of
> Application Streams -- but for those reading this thread unfamiliar
> with AppStreams, I'll add the caveat that dnf behaves differently than
> yum in this regard.
>
> Here's some background:
>
>
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/installing_managing_and_removing_user_space_components/using-appstream_using-appstream
>
> Right now, the only EL8 AppStream with multiple versions is
> postgresql, but it looks like several applications are setup for
> future multiple streams. To see the AppStream packages, run
>
> dnf module list
>
> If you squint carefully, you'll see that you can install either
> PostgreSQL 10 (the default) or 9.6.
>
> --
> Paul Heinlein
> heinl...@madboa.com
> 45°38' N, 122°6' W
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] yum4 and dnf on CentOS 8

[Sergio Belkin]

Hi,

I was using yum for years on CentOS servers, and since a few years ago dnf
on Fedora desktops. My question is:
Is the same yum4 on CentOS 8 that dnf? What should I use?
Thanks in advance

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Difference between "CentOS Linux 8" and "RHEL8"

[Sergio Belkin]

Hi,
I've read about all recent changes about workflow: Fedora>CentOS Stream.
I understood that in the end CentOS Linux (8) keeps on being "built from
publicly available open source source code provided by Red Hat, Inc for Red
Hat Enterprise Linux"[1]

Is that correct? I mean the only that changed are CentOS upstream (Fedora
and Centos Stream) didn't it?

Thanks in advance

[1]:
https://wiki.centos.org/FAQ/General#head-4b2dd1ea6dcc1243d6e3886dc3e5d1ebb252c194

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problem with Firefox and SSH/browser

[Sergio Belkin]

2016-06-01 19:36 GMT-03:00 :

> On 2016-06-01 09:53, Sergio Belkin wrote:
> > Hi folks,
> >
> > I have a problem, shame on me I feel as newbie, I cannot open Firefox
> > though ssh.
> >
> > ssh server is 7.2 and ssh client (running Xorg) is Fedora 23. Firefox
> does
> > not open. I've tried a lot of methods, even adding xauth cookie, and for
> > example:
> >
> > firefox --no-remote --no-xshm
> 
>
> Hi Sergio,
>
> Can you post the exact command used, for example:
>ssh -Y remotehostname /usr/lib64/firefox/firefox
>
> Thanks,
> --
> Charles Polisher
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

Hi Charles,

I've tried:

ssh -vvv -Y -X user@sshserver

Thanks in adavance

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Problem with Firefox and SSH/browser

[Sergio Belkin]

Hi folks,

I have a problem, shame on me I feel as newbie, I cannot open Firefox
though ssh.

ssh server is 7.2 and ssh client (running Xorg) is Fedora 23. Firefox does
not open. I've tried a lot of methods, even adding xauth cookie, and for
example:

firefox --no-remote --no-xshm
debug3: receive packet: type 90
debug1: client_input_channel_open: ctype x11 rchan 2 win 65536 max 16384
debug1: client_request_x11: request from 127.0.0.1 59181
debug2: fd 7 setting O_NONBLOCK
debug3: fd 7 is O_NONBLOCK
debug1: channel 1: new [x11]
debug1: confirm x11
debug3: send packet: type 91
debug3: receive packet: type 90
debug1: client_input_channel_open: ctype x11 rchan 3 win 65536 max 16384
debug1: client_request_x11: request from 127.0.0.1 59183
debug2: fd 8 setting O_NONBLOCK
debug3: fd 8 is O_NONBLOCK
debug1: channel 2: new [x11]
debug1: confirm x11
debug3: send packet: type 91
debug2: channel 2: rcvd adjust 39228

I need to open a browser, ok, I could install konqueror, but it pulls a
bunch of apps that really I don't need. I'd want to install a browser from
official repo...

Could you help me?

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] About mysql upgrade

[Sergio Belkin]

Thanks folks,


Really convincing answers!

2016-04-28 13:53 GMT-03:00 Dennis Jacobfeuerborn :

> On 28.04.2016 17:58, Lamar Owen wrote:
> > On 04/28/2016 08:45 AM, Sergio Belkin wrote:
> >> I've found some issues upgrading mysql, some people recommends run
> >> mysql_upgrade. I wonder why such a script is not run from scriptlet of
> >> mysql-server rpm.
> > Back in the Dark Ages of the PostgreSQL RPMset (PostgreSQL 6.5), early
> > in my time as RPM maintainer for the community PostgreSQL.org RPMset, I
> > asked a very similar question of some folks, and I got a canonical
> > answer from Mr. RPM himself, Jeff Johnson.
> >
> > The answer is not very complex, but it was spread across a several
> > message private e-mail thread.  The gist of it is that the RPM
> > scriptlets are very very limited in what they can do.  Trying to do
> > something clever inside an RPM scriptlet is almost never wise.  The key
> > thing to remember is that the scriptlet has to be able to be run during
> > the OS install phase (back when upgrades were actually supported by the
> > OS installer that is now known as anaconda). Quoting this introductory
> > section:
> >
> > On August 18, 1999, Jeff Johnson wrote:
> >> The Red Hat install environment is a chroot. That means no daemons,
> >> no network, no devices, nothing. Even sniffing /proc can be problematic
> >> in certain cases.
> >
> > Now, I realize that that is OLD information; however, anaconda is still
> > doing the same basic chrooted install, just with a prettier face.  You
> > cannot start a daemon in the chroot, since many things are simply not
> > available to the scriptlets when installed/upgraded by anaconda.
> > Scriptlets have to work in an environment other than 'yum update.'  And
> > also note that this is a very different situation than Debian packages
> > live in; RPM scriptlets are essentially forbidden from interactivity
> > with the user; Debian's equivalent are not so hindered.  At least that
> > was the rule as long as I was an active packager.
> >
> > Further reference a WayBack Machine archive of a page I wrote long ago:
> >
> https://web.archive.org/web/20010122090200/http://www.ramifordistat.net/postgres/rpm_upgrade.html
> >
> >
> > And leaving you with this thought, again from Jeff Johnson:
> >
> > On August 18, 1999, Jeff Johnson wrote:
> >> Good. Now you're starting to think like a packager  Avoiding MUD is
> >> *much* more important than attempting magic.
> > 
> >
> >> The bottom line is you shouldn't attempt a database conversion as
> >> part of the package install. The package, however, should contain
> > programs
> >> and procedures necessary to do the job.
>
> The real reason something like mysql_upgrade isn't run automatically
> hasn't really much to do with the technicalities of RPM but the fact
> that mysql_upgrade might kill your server if you don't know what you are
> doing.
> If for example you have a big table that takes up 70% of your storage
> and mysql_upgrade needs to convert it to a new format then it will
> create a copy of that table in the new format first and then delete the
> old one...except of course that this would require 140% of disk space to
> work.
>
> So independent of the packaging technology used major changes like these
> should never be done automatically and instead always be handled by an
> admin who knows what he is doing.
>
> Regards,
>   Dennis
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] About mysql upgrade

[Sergio Belkin]

Hi,


I've found some issues upgrading mysql, some people recommends run
mysql_upgrade. I wonder why such a script is not run from scriptlet of
mysql-server rpm.

Thanks in advance

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-14 16:43 GMT-03:00 Gordon Messmer :

> On 11/14/2015 09:20 AM, Sergio Belkin wrote:
>
>> I'd want to connect a VM to another VM (or eventually to the host) via the
>> "Linux bridge" so that I can demonstrate that capability in a classroom
>> with only one laptop.
>>
>
> You don't actually need to attach *any* ethernet interfaces to do that.
> If you create a bridge with no Ethernet slaves, and then create two VMs,
> those VMs will get virtual network interfaces that will then be slaved to
> the bridge.  So, you'll see the bridge with two network devices as slaves,
> and those network devices will be attached to the two VMs.
>
> If you create a bridge device with one Ethernet interface attached, then
> you'll end up with a bridge that spans two VMs and the Ethernet interface.
> That way the VMs will be connected to each other and to the Ethernet
> network.
>
> ___
>

Are you talking bearing in mind VirtualBox?

I've created a bridge on the host machine, and 2 VM's but br0 has no slaves:

[sergio@hope share]$ sudo brctl show  br0
bridge name bridge id   STP enabled interfaces
br0 8000.   no


Greets

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

Perhaps I don't explain myself enough.

I don't want to "bridge" physical machine with virtual machine, my idea was
create a transparent bridge in  a VM for example to demonstrate a proxy
with no need of topology change.

Greets

2015-11-16 5:58 GMT-03:00 Paul Knox-Kennedy :

> On 11/14/2015 09:20 AM, Sergio Belkin wrote:
> >
> > I'd want to connect a VM to another VM (or eventually to the host) via
> the
> > "Linux bridge" so that I can demonstrate that capability in a classroom
> > with only one laptop.
>
> The libvirt wiki covers this here [0]. These instructions create a
> bridge (br0), connect
> the physical ethernet interface to that bridge, then you can attach
> virtual machines to
> the same bridge.
>
> [0] http://wiki.libvirt.org/page/Networking#Fedora.2FRHEL_Bridging
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-13 16:43 GMT-03:00 Gordon Messmer :

> On 11/13/2015 09:15 AM, Sergio Belkin wrote:
>
>> But AFAIK, routers divide broadcast domains, and switches (and
>> therefore bridges) divide collision domains.
>>
>
> Oh good, Cisco terminology.  :)
>


Oh yeah,



>
> I'll be more specific than I was earlier, then.
>
> It's possible to unify two collision domains into a single broadcast
> domain with a router, but it's also possible to use a bridge to link
> collision domains to create a larger broadcast domain.  Don't get hung up
> on that.
>
> The comparison of a Linux bridge to a switch is apt.  You could,
> conceptually, connect two PCs to each other using a Linux bridge. You
> wouldn't, however, connect two ports on one switch (here, the Linux bridge)
> to two ports on another switch.  Doing that creates a loop in your network.
>
> Linux Ethernet bridges have several uses, so it's not clear what you're
> really trying to do.  That is, you've said that you're trying to create a
> virtualized Linux bridge, but a bridge is a tool, not a goal in itself.
> What do you expect the bridge to do when you've set it up?
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

I'd want to connect a VM to another VM (or eventually to the host) via the
"Linux bridge" so that I can demonstrate that capability in a classroom
with only one laptop.

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-13 13:52 GMT-03:00 Gordon Messmer :

> On 11/13/2015 03:22 AM, Sergio Belkin wrote:
>
>> I'm trying to create  virtualized linux bridge
>>
>
> Well, you can't do that by putting two interfaces on the same LAN. A
> bridge should be used to connect two separate LANs.
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


But AFAIK, routers divide broadcast domains, and switches (and
therefore bridges) divide collision domains.  For example:

"A bridge is a piece of software used to unite two or more network
segments. A bridge behaves like a virtual network switch, working
transparently (the other machines do not need to know or care about its
existence). Any real devices (e.g. eth0) and virtual devices (e.g. tap0)
can be connected to it." https://wiki.archlinux.org/index.php/Network_bridge

If I'm wrong please correct me.

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-13 12:32 GMT-03:00 Ulf Volmer :

> On 11/13/2015 12:57 PM, Sergio Belkin wrote:
>
> When I enable stp:
>>
>> [root@localhost ~]# brctl show br0
>> bridge name bridge id   STP enabled interfaces
>> br0 8000.080027a398e6   yes enp0s3
>>  enp0s8
>>
>
> As Gordon said, i recommend to remove one of the physical interfaces from
> the bridge.
>
>
> best regards
> Ulf
> ___
>

I've found that setting virtual interfaces as NAT instead bridge, it works,
any ideas?

(Remember that it's a guest OS)

Thanks in advance!

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-12 15:56 GMT-03:00 Ulf Volmer :

> On 11/12/2015 07:42 PM, Sergio Belkin wrote:
>
> I've created a bridge using 2 interfaces and have a lot of messages as
>> follows:
>>
>> nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own
>> address as source address
>> nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own
>> address as source address
>>
>
> sounds like a loop.
>
> What says 'brctl show'?
>


When I enable stp:

[root@localhost ~]# brctl show br0
bridge name bridge id   STP enabled interfaces
br0 8000.080027a398e6   yes enp0s3
enp0s8




>
> best regards
> Ulf
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-13 8:22 GMT-03:00 Sergio Belkin :

>
>
> 2015-11-12 18:07 GMT-03:00 James A. Peltier :
>
>> - Original Message -
>> | Hi,
>> |
>> | I've created a bridge using 2 interfaces and have a lot of messages as
>> | follows:
>> |
>> | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with
>> own
>> | address as source address
>> | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with
>> own
>> | address as source address
>> |
>> | And the operating systems is extremely slow
>> |
>> | Interfaces files :
>> |
>> | [root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-*
>> | DEVICE=br0
>> | TYPE=Bridge
>> | BOOTPROTO=dhcp
>> | ONBOOT=yes
>> | #STP=on
>> | #DELAY=0
>> | NM_CONTROLLED=no
>> | DEVICE=enp0s3
>> | #HWADDR=08:00:27:AB:1D:E6
>> | BOOTPROTO=none
>> | ONBOOT=yes
>> | NM_CONTROLLED=no
>> | BRIDGE=br0
>> |
>> | DEVICE=enp0s8
>> | HWADDR=08:00:27:A3:98:E6
>> | BOOTPROTO=none
>> | ONBOOT=yes
>> | NM_CONTROLLED=no
>> | BRIDGE=br0
>> | DEVICE=lo
>> | TYPE=loopback
>> | IPADDR=127.0.0.1
>> | NETMASK=255.0.0.0
>> | NETWORK=127.0.0.0
>> | # If you're having problems with gated making 127.0.0.0/8 a martian,
>> | # you can change this to something else (255.255.255.255, for example)
>> | BROADCAST=127.255.255.255
>> | ONBOOT=yes
>> | NAME=loopback
>> |
>> | I've disabled NetworkManager, but problem persists.
>> |
>> | System is:
>> |
>> | [root@localhost ~]# uname -a
>> | Linux localhost 3.10.0-123.el7.x86_64 #1 SMP Mon Jun 30 12:09:22 UTC
>> 2014
>> | x86_64 x86_64 x86_64 GNU/Linux
>> |
>> | And is virtualized on VirtualBox
>> |
>> | Please could you help me to fix it?
>> |
>> | Thanks in advance!
>> |
>> | --
>> | --
>> | Sergio Belkin
>> | LPIC-2 Certified - http://www.lpi.org
>>
>> You have a bridge with two interfaces on the same lan?  You're likely
>> creating the topology loop with this configuration.  What is it that you're
>> attempting to do here?
>>
>>
>> --
>> James A. Peltier
>> IT Services - Research Computing Group
>> Simon Fraser University - Burnaby Campus
>> Phone   : 604-365-6432
>> Fax : 778-782-3045
>> E-Mail  : jpelt...@sfu.ca
>> Website : http://www.sfu.ca/itservices
>> Twitter : @sfu_rcg
>> Powering Engagement Through Technology
>> ___
>>
>
>
> I'm trying to create  virtualized linux bridge, I've enabled STP and even
> with a forward delay with 300 but no luck...
>
>
> --
> --
> Sergio Belkin
> LPIC-2 Certified - http://www.lpi.org
>

I get an IP via dhcp but cannot ping only at host machine

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-12 18:07 GMT-03:00 James A. Peltier :

> - Original Message -
> | Hi,
> |
> | I've created a bridge using 2 interfaces and have a lot of messages as
> | follows:
> |
> | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own
> | address as source address
> | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own
> | address as source address
> |
> | And the operating systems is extremely slow
> |
> | Interfaces files :
> |
> | [root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-*
> | DEVICE=br0
> | TYPE=Bridge
> | BOOTPROTO=dhcp
> | ONBOOT=yes
> | #STP=on
> | #DELAY=0
> | NM_CONTROLLED=no
> | DEVICE=enp0s3
> | #HWADDR=08:00:27:AB:1D:E6
> | BOOTPROTO=none
> | ONBOOT=yes
> | NM_CONTROLLED=no
> | BRIDGE=br0
> |
> | DEVICE=enp0s8
> | HWADDR=08:00:27:A3:98:E6
> | BOOTPROTO=none
> | ONBOOT=yes
> | NM_CONTROLLED=no
> | BRIDGE=br0
> | DEVICE=lo
> | TYPE=loopback
> | IPADDR=127.0.0.1
> | NETMASK=255.0.0.0
> | NETWORK=127.0.0.0
> | # If you're having problems with gated making 127.0.0.0/8 a martian,
> | # you can change this to something else (255.255.255.255, for example)
> | BROADCAST=127.255.255.255
> | ONBOOT=yes
> | NAME=loopback
> |
> | I've disabled NetworkManager, but problem persists.
> |
> | System is:
> |
> | [root@localhost ~]# uname -a
> | Linux localhost 3.10.0-123.el7.x86_64 #1 SMP Mon Jun 30 12:09:22 UTC 2014
> | x86_64 x86_64 x86_64 GNU/Linux
> |
> | And is virtualized on VirtualBox
> |
> | Please could you help me to fix it?
> |
> | Thanks in advance!
> |
> | --
> | --
> | Sergio Belkin
> | LPIC-2 Certified - http://www.lpi.org
>
> You have a bridge with two interfaces on the same lan?  You're likely
> creating the topology loop with this configuration.  What is it that you're
> attempting to do here?
>
>
> --
> James A. Peltier
> IT Services - Research Computing Group
> Simon Fraser University - Burnaby Campus
> Phone   : 604-365-6432
> Fax : 778-782-3045
> E-Mail  : jpelt...@sfu.ca
> Website : http://www.sfu.ca/itservices
> Twitter : @sfu_rcg
> Powering Engagement Through Technology
> ___
>


I'm trying to create  virtualized linux bridge, I've enabled STP and even
with a forward delay with 300 but no luck...


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-12 18:17 GMT-03:00 John R Pierce :

> On 11/12/2015 10:42 AM, Sergio Belkin wrote:
>
>> DEVICE=enp0s8
>> HWADDR=08:00:27:A3:98:E6
>> BOOTPROTO=none
>> ONBOOT=yes
>> NM_CONTROLLED=no
>> BRIDGE=br0
>> DEVICE=lo
>> TYPE=loopback
>> IPADDR=127.0.0.1
>> NETMASK=255.0.0.0
>> NETWORK=127.0.0.0
>> ...
>>
>
> I hope thats two seperate files, ifcfg-enp0s8 and ifcfg-lo ... otherwise,
> why is a bridged physical interface configured to be loopback?!?
>




Yes they are separate ones


>
> mine looks like...
>
>
> # cat ifcfg-br0
> DEVICE=br0
> TYPE=Bridge
> ONBOOT=yes
> NM_CONTROLLED=no
> BOOTPROTO=none
> NETWORK=
> NETMASK=255.255.255.240
> IPADDR=.  (its a static IP)
> GATEWAY=
>
> # cat ifcfg-eth0
> DEVICE=eth0
> HWADDR=D8:D3:85:B5:8C:6A
> TYPE=Ethernet
> ONBOOT=yes
> NM_CONTROLLED=no
> BRIDGE=br0
>
> # cat ifcfg-lo
> DEVICE=lo
> IPADDR=127.0.0.1
> NETMASK=255.0.0.0
> NETWORK=127.0.0.0
> # If you're having problems with gated making 127.0.0.0/8 a martian,
> # you can change this to something else (255.255.255.255, for example)
> BROADCAST=127.255.255.255
> ONBOOT=yes
> NAME=loopback
>
> --
> john r pierce, recycling bits in santa cruz
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

2015-11-12 16:51 GMT-03:00 Gordon Messmer :

> On 11/12/2015 10:42 AM, Sergio Belkin wrote:
>
>> DEVICE=enp0s3
>> #HWADDR=08:00:27:AB:1D:E6
>> BOOTPROTO=none
>> ONBOOT=yes
>> NM_CONTROLLED=no
>> BRIDGE=br0
>>
>
> DEVICE=enp0s8
>> HWADDR=08:00:27:A3:98:E6
>> BOOTPROTO=none
>> ONBOOT=yes
>> NM_CONTROLLED=no
>> BRIDGE=br0
>>
>
> Do you have those two devices connected to the same LAN?
>


Yes I have.


>
> I've disabled NetworkManager, but problem persists.
>>
>
> Why would that matter, when all of your interfaces are NM_CONTROLLED=no?



Only as a last desesperate resource after hours of trying and not working :(


>
>
> _______
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Poor perfmance of bridged interfaces

[Sergio Belkin]

Hi,

I've created a bridge using 2 interfaces and have a lot of messages as
follows:

nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own
address as source address
nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own
address as source address

And the operating systems is extremely slow

Interfaces files :

[root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-*
DEVICE=br0
TYPE=Bridge
BOOTPROTO=dhcp
ONBOOT=yes
#STP=on
#DELAY=0
NM_CONTROLLED=no
DEVICE=enp0s3
#HWADDR=08:00:27:AB:1D:E6
BOOTPROTO=none
ONBOOT=yes
NM_CONTROLLED=no
BRIDGE=br0

DEVICE=enp0s8
HWADDR=08:00:27:A3:98:E6
BOOTPROTO=none
ONBOOT=yes
NM_CONTROLLED=no
BRIDGE=br0
DEVICE=lo
TYPE=loopback
IPADDR=127.0.0.1
NETMASK=255.0.0.0
NETWORK=127.0.0.0
# If you're having problems with gated making 127.0.0.0/8 a martian,
# you can change this to something else (255.255.255.255, for example)
BROADCAST=127.255.255.255
ONBOOT=yes
NAME=loopback

I've disabled NetworkManager, but problem persists.

System is:

[root@localhost ~]# uname -a
Linux localhost 3.10.0-123.el7.x86_64 #1 SMP Mon Jun 30 12:09:22 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux

And is virtualized on VirtualBox

Please could you help me to fix it?

Thanks in advance!

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] NetworkManager and network service

[Sergio Belkin]

Hi, folks,

I 've created interfaces files with the NM_CONTROLLED=no statement and I've
found that even after restarting network services changes are not commited.

Only it worked after running


nmcli connection reload


restart of the network service worked.

I wonder if it's either a feature or a bug...

Could you help me?

Thanks in advance!


-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] About ecryptfs-utils

[Sergio Belkin]

Thanks everybody!

2015-11-01 19:09 GMT-03:00 Itamar :

> On 10/31/2015 08:24 PM, Sergio Belkin wrote:
> > Hi folks,
> >
> > I've found ecryptfs module into kernel-plus, but ecryptfs-utils is
> missing:
> >
> > [root@centos7 ecryptfs-utils-108]# uname -r
> > 3.10.0-229.14.1.el7.centos.plus.x86_64
> > [root@centos7 ecryptfs-utils-108]# lsmod | grep ecryptfs
> > ecryptfs   85424  0
> >
> > [root@centos7 ecryptfs-utils-108]# yum -q repolist
> > id del repositorio  nombre del
> > repositorio  estado
> > Webmin  Webmin Distribution
> > Neutral   229
> > base/7/x86_64   CentOS-7 -
> > Base 8.652
> > centosplus/7/x86_64 CentOS-7 -
> > Plus63
> > epel/x86_64 Extra Packages for Enterprise
> > Linux 7 - x86_64  8.654
> > extras/7/x86_64 CentOS-7 -
> > Extras 236
> > updates/7/x86_64CentOS-7 -
> > Updates  1.540
> > zfs/x86_64  ZFS on Linux for
> > EL7  145
> > [root@centos7 ecryptfs-utils-108]# LANG=C yum -q search ecryptfs-utils
> > Warning: No matches found for: ecryptfs-utils
> >
> >
> >
> > Just I wonder why these package is not included in any CentOS repo (I
> guess
> > because is not included in upstream), do you know why?
> >
> > Thanks in advance!
> >
> I got the sources from fedora 21 and compiled it in koji.
>
> http://koji.fedoraproject.org/koji/taskinfo?taskID=11667432
>
> the package seems to be retired, you probably should not use it.
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] About ecryptfs-utils

[Sergio Belkin]

Hi folks,

I've found ecryptfs module into kernel-plus, but ecryptfs-utils is missing:

[root@centos7 ecryptfs-utils-108]# uname -r
3.10.0-229.14.1.el7.centos.plus.x86_64
[root@centos7 ecryptfs-utils-108]# lsmod | grep ecryptfs
ecryptfs   85424  0

[root@centos7 ecryptfs-utils-108]# yum -q repolist
id del repositorio  nombre del
repositorio  estado
Webmin  Webmin Distribution
Neutral   229
base/7/x86_64   CentOS-7 -
Base 8.652
centosplus/7/x86_64 CentOS-7 -
Plus63
epel/x86_64 Extra Packages for Enterprise
Linux 7 - x86_64  8.654
extras/7/x86_64 CentOS-7 -
Extras 236
updates/7/x86_64CentOS-7 -
Updates  1.540
zfs/x86_64  ZFS on Linux for
EL7  145
[root@centos7 ecryptfs-utils-108]# LANG=C yum -q search ecryptfs-utils
Warning: No matches found for: ecryptfs-utils



Just I wonder why these package is not included in any CentOS repo (I guess
because is not included in upstream), do you know why?

Thanks in advance!

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 6.4 on Xserve, IPMI error

[Sergio Rodrigues]

Arno B  writes:

> 
> Hello!
> 
> I'm trying to install Centos 6.4 64 bit on this Xserve:
>
http://www.everymac.com/systems/apple/xserve/specs/xserve-intel-xeon-2.8-eight-core-specs.html
> 
> I got a bootloader from:
>
http://blog.christophersmart.com/2009/07/23/linux-on-an-apple-xserve-efi-only-machine/
> as none of the official Centos releases (full, minimal, network 64 bit)
boot on this machine.
> They all crash when loading the bootx64.conf.
> 
> I have built a USB stick with a working bootx64.efi, grub.cfg, together
with an initrd and a vmlinuz
> from the isolinux folder.
> These seem to get me into booting a kernel until something called IPMI is
starting to throw
> errors at me:
> 
> Console: switching to colour frame buffer device 128x48
> fb0: VESA VGA frame buffer device
> ipmi message handler version 39.2
> IPMI System Interface driver.
> ipmi_si :09:00.4: enable device (0002 -> 0003)
> ipmi_si :09:00.4: PCI INT C -> GSI 16 (level, low) -> IRQ 16
> ipmi_si: Adding PCI-specified kcs state machine
> ipmi_si :09:00.7: enable device ( -> 0003)
> ipmi_si :09:00.7: PCI INT D -> GSI 17 (level, low) -> IRQ 17
> ipmi_si: Adding PCI-specified bt state machine
> ipmi_si: Trying PCI-specified kcs state machine at mem address 0x90841000,
slave address 0x0 irq 16
> IRQ 16/ipmi_si: IRQF_DISABLED is not guaranteed on shared IRQs
>Using irq 16
> ipmi: Found new BMC (man_id: 0x3f, prod_id: 0x0003, dev_id: 0x20)
> IPMI kcs interface initialized
> ipmi_si: Trying PCI-specified kcs state machine at mem address 0x9084,
slave address 0x0 irq 17
> Refined TSC clocksource calibration: 2792.999 MHz.
> Switching to clocksource tsc
> IPMI BT: timeout in XACTION [ B_BUSY ] 1 retries left
> IPMI BT: timeout in XACTION [ B_BUSY ]
> failed 2 retries, sending error response
> IPMI: BT reset (takes 5 secs)
> IPMI BT: timeout in XACTION [ B_BUSY H2B ]
> failed 2 retries, sending error response
> IPMI: BT reset (takes 5 secs)
> IPMI BT: timeout in XACTION [ B_BUSY H2B ]
> failed 2 retries, sending error response
> IPMI: BT reset (takes 5 secs)
> IPMI BT: timeout in XACTION [ B_BUSY H2B ]
> failed 2 retries, sending error response
> IPMI: BT reset (takes 5 secs)
> IPMI BT: timeout in XACTION [ B_BUSY H2B ]
> failed 2 retries, sending error response
> IPMI: BT reset (takes 5 secs)
> 
> then the screen goes to black and the machine doesn't respond to anything
anymore...
> 
> Can anyone please help me with this? Maybe just point me in a direction
where to find a solution?
> I've been googling for a few days now without much results...
> 
> thanks in advance
> 
> Arno Beekman
> 

Just add ipmi_si.addrs=0x90841000 ipmi_si.irqs=16 to the kernel boot options

In Ubuntu add this to /etc/default/grub

GRUB_CMDLINE_LINUX="ipmi_si.addrs=0x90841000 ipmi_si.irqs=16"

"The si_type may be either "kcs", "smic", or "bt".  If you leave it blank,
it defaults to "kcs"." source: http://openipmi.sourceforge.net/IPMI.txt

According to that only one can be used!

What happens is kcs loads then bt loads after and then it hangs and keeps
retrying, adding the mem addrs and irq solves this


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Bug 3831: basic_ncsa_auth Blowfish and SHA support, really fixed?

[Sergio Belkin]

Hi,

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7

I've configured squid for basic authentication, md5 password *works*, but
if fails when I try to use either blowfish or sha password.


Below is the cache.log when it fails:


2015/03/18 17:21:02.637 kid1| Checklist.cc(275) matchNode: 0x7f217e8baca8
matched=0 async=0 finished=0
2015/03/18 17:21:02.637 kid1| Checklist.cc(299) matchNode: 0x7f217e8baca8
simple mismatch
2015/03/18 17:21:02.637 kid1| Checklist.cc(160) checkAccessList:
0x7f217e8baca8 checking 'http_access  allow squid_access'
2015/03/18 17:21:02.637 kid1| Acl.cc(336) matches: ACLList::matches:
checking squid_access
2015/03/18 17:21:02.637 kid1| Acl.cc(319) checklistMatches:
ACL::checklistMatches: checking 'squid_access'
2015/03/18 17:21:02.637 kid1| Acl.cc(281) aclCacheMatchFlush:
aclCacheMatchFlush called for cache 0x7f217e9b8cc8
2015/03/18 17:21:02.637 kid1| Acl.cc(61) AuthenticateAcl: returning 2
sending credentials to helper.
2015/03/18 17:21:02.637 kid1| Acl.cc(321) checklistMatches:
ACL::ChecklistMatches: result for 'squid_access' is -1
2015/03/18 17:21:02.637 kid1| Acl.cc(346) matches: squid_access needs async
lookup
2015/03/18 17:21:02.637 kid1| Acl.cc(354) matches: squid_access result is
false
2015/03/18 17:21:02.637 kid1| Checklist.cc(275) matchNode: 0x7f217e8baca8
matched=0 async=1 finished=0
2015/03/18 17:21:02.637 kid1| Checklist.cc(312) matchNode: 0x7f217e8baca8
going async
2015/03/18 17:21:02.637 kid1| Checklist.cc(131) asyncInProgress:
ACLChecklist::asyncInProgress: 0x7f217e8baca8 async set to 1
2015/03/18 17:21:02.637 kid1| AclProxyAuth.cc(144) checkForAsync: checking
password via authenticator
2015/03/18 17:21:02.637 kid1| Checklist.cc(256) matchNodes: 0x7f217e8baca8
awaiting async operation
2015/03/18 17:21:02.638 kid1| Checklist.cc(131) asyncInProgress:
ACLChecklist::asyncInProgress: 0x7f217e8baca8 async set to 0
2015/03/18 17:21:02.638 kid1| Checklist.cc(160) checkAccessList:
0x7f217e8baca8 checking 'http_access  allow squid_access'
2015/03/18 17:21:02.638 kid1| Acl.cc(336) matches: ACLList::matches:
checking squid_access
2015/03/18 17:21:02.638 kid1| Acl.cc(319) checklistMatches:
ACL::checklistMatches: checking 'squid_access'
2015/03/18 17:21:02.638 kid1| Acl.cc(66) AuthenticateAcl: returning 3
sending authentication challenge.
2015/03/18 17:21:02.638 kid1| Checklist.cc(146) markFinished:
0x7f217e8baca8 answer AUTH_REQUIRED for AuthenticateAcl exception
2015/03/18 17:21:02.638 kid1| Acl.cc(321) checklistMatches:
ACL::ChecklistMatches: result for 'squid_access' is -1
2015/03/18 17:21:02.638 kid1| Acl.cc(343) matches: squid_access failed.
2015/03/18 17:21:02.638 kid1| Acl.cc(354) matches: squid_access result is
false
2015/03/18 17:21:02.638 kid1| Checklist.cc(275) matchNode: 0x7f217e8baca8
matched=0 async=0 finished=1
2015/03/18 17:21:02.638 kid1| Checklist.cc(294) matchNode: 0x7f217e8baca8
exception: AUTH_REQUIRED
2015/03/18 17:21:02.638 kid1| Checklist.cc(88) matchNonBlocking:
ACLChecklist::check: 0x7f217e8baca8 match found, calling back with
AUTH_REQUIRED
2015/03/18 17:21:02.638 kid1| Checklist.cc(182) checkCallback:
ACLChecklist::checkCallback: 0x7f217e8baca8 answer=AUTH_REQUIRED
2015/03/18 17:21:02.638 kid1| Gadgets.cc(58) aclGetDenyInfoPage: got called
for squid_access
2015/03/18 17:21:02.638 kid1| Gadgets.cc(77) aclGetDenyInfoPage:
aclGetDenyInfoPage: no match
2015/03/18 17:21:02.638 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist:
ACLFilledChecklist destroyed 0x7fffee83caa0
2015/03/18 17:21:02.638 kid1| Checklist.cc(334) ~ACLChecklist:
ACLChecklist::~ACLChecklist: destroyed 0x7fffee83caa0
2015/03/18 17:21:02.638 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist:
ACLFilledChecklist destroyed 0x7fffee83caa0
2015/03/18 17:21:02.638 kid1| Checklist.cc(334) ~ACLChecklist:
ACLChecklist::~ACLChecklist: destroyed 0x7fffee83caa0
2015/03/18 17:21:02.638 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist:
ACLFilledChecklist destroyed 0x7f217e8baca8
2015/03/18 17:21:02.638 kid1| Checklist.cc(334) ~ACLChecklist:
ACLChecklist::~ACLChecklist: destroyed 0x7f217e8baca8
2015/03/18 17:21:02.639 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist:
ACLFilledChecklist destroyed 0x7f217e8baca8
2015/03/18 17:21:02.639 kid1| Checklist.cc(334) ~ACLChecklist:
ACLChecklist::~ACLChecklist: destroyed 0x7f217e8baca8


Thanks in advance!
-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Asymmetric encryption for very large tar file

[mario sergio kirdeika junior]

hi all

sorry my poor english..

but you need encrypt that large file in symetric way. use the asymetric way
( public/private key par) to encrypt the symetric key.
Em 17/12/2014 15:58, "Markus"  escreveu:

> On 17/12/14 18:54, Leon Fauster wrote:
> > Am 17.12.2014 um 18:42 schrieb Les Mikesell :
> >> On Wed, Dec 17, 2014 at 11:14 AM, Xinhuan Zheng
> >>  wrote:
> >>> I have a requirement that I need to use encryption technology to
> encrypt
> >>> very large tar file on a daily basis. The tar file is over 250G size
> and
> >>> those are data backup. Every night the server generated a 250G data
> backup
> >>> and it¹s tar¹ed into one tarball file. I want to encrypt this big
> tarball
> >>> file. So far I have tried two technologies with no success.
> >>> 1) generating RSA 2048 public/private key pair via ³openssl req -x509
> >>> -nodes -newkey rsa:2048 -keyout private.pem -out public.pem² command
> and
> >>> uses the public key to encrypt the big tar file. The encryption
> command I
> >>> used is "openssl smime -encrypt -aes256 -in  backup.tar -binary
> -outform
> >>> DEM -out backup.tar.ssl  public.pem². The resulting backup.tar.ssl
> file is
> >>> only 2G then encryption process stops there and refuse to do more.
> Cannot
> >>> get around 2G.
> >>
> >> What happens if you use a pipeline or redirection instead of the -in
> >> and -out files?   I regularly write large tapes with something like:
> >> openssl aes-256-cbc -salt -k password  >> obs=10240 of=/dev/nst0
> >> Not quite the same, but there does not seem to be an inherent size
> >> limit in openssl as long as it is not handling files and it happens at
> >> a reasonable speed so it must be using the intel hardware support.
> >
> >
> >
> > Furthermore - is there the need to use "one" big tar file? Despite
> > having a capable workstation/server handling such big files, it has
> > also advantages splitting such backups (e.g. man split) ...
> >
> > --
> > LF
> >
> >
> >
> >
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
>
> Is it possible for you to use gpg? You could do something like:
> tar zcf /something - | gpg -e -r otherkey | cat - > backup.tgz
>
> Regards
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] rndc permission denied

[Sergio Belkin]

Well,

I've found that it was a permission issue:

touch /var/named/named.recursing ; chown named. /var/named/named.recursing

and now it doesn't complain...

However, file created has only the following:

;
; Recursing Queries
;
; Dump complete

I don't understand what's the use of recursing subcommand... please help me!


2014-09-21 19:39 GMT-03:00 Sergio Belkin :

> Hi, h when I have the following problem with rndc:
>
> [root@centos7 ~]# rndc   recursing and
> rndc: 'recursing' failed: permission denied
>
> SELinux is disables:
>
> named.conf config file is:
>
> //
> // named.conf
> //
> // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
> // server as a caching only nameserver (as a localhost DNS resolver only).
> //
> // See /usr/share/doc/bind*/sample/ for example named configuration files.
> //
>
> options {
> //listen-on port 53 { 127.0.0.1; };
> listen-on port 53 { 192.168.0.107; };
> //listen-on-v6 port 53 { ::1; };
> directory "/var/named";
> dump-file "/var/named/data/cache_dump.db";
> statistics-file "/var/named/data/named_stats.txt";
> memstatistics-file "/var/named/data/named_mem_stats.txt";
> allow-query { localhost; 192.168.0.0/24; };
>
> /*
>  - If you are building an AUTHORITATIVE DNS server, do NOT enable
> recursion.
>  - If you are building a RECURSIVE (caching) DNS server, you need to
> enable
>recursion.
>  - If your recursive DNS server has a public IP address, you MUST
> enable access
>control to limit queries to your legitimate users. Failing to do so
> will
>cause your server to become part of large scale DNS amplification
>attacks. Implementing BCP38 within your network would greatly
>reduce such attack surface
> */
> recursion yes;
>
> dnssec-enable yes;
> dnssec-validation yes;
> dnssec-lookaside auto;
>
>
> bindkeys-file "/etc/named.iscdlv.key";
>
> managed-keys-directory "/var/named/dynamic";
>
> };
>
> logging {
> channel default_debug {
> file "data/named.run";
> severity dynamic;
> };
> };
>
> zone "." IN {
> type hint;
> file "named.ca";
> };
>
>
> zone "example.com." IN {
> type master;
> file "example.com.fz";
> allow-update { none; };
> };
>
> zone "0.168.192.in-addr.arpa" IN {
> type master;
> file "example.com.rz";
> allow-update { none; };
> };
>
>
>
> include "/etc/named.rfc1912.zones";
> include "/etc/named.root.key";
>
> any ideas
>
>
> TIA
>
>
> --
> --
> Sergio Belkin  http://www.sergiobelkin.com
> LPIC-2 Certified - http://www.lpi.org
>



-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] rndc permission denied

[Sergio Belkin]

Hi, h when I have the following problem with rndc:

[root@centos7 ~]# rndc   recursing and
rndc: 'recursing' failed: permission denied

SELinux is disables:

named.conf config file is:

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
//listen-on port 53 { 127.0.0.1; };
listen-on port 53 { 192.168.0.107; };
//listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; 192.168.0.0/24; };

/*
 - If you are building an AUTHORITATIVE DNS server, do NOT enable
recursion.
 - If you are building a RECURSIVE (caching) DNS server, you need to
enable
   recursion.
 - If your recursive DNS server has a public IP address, you MUST
enable access
   control to limit queries to your legitimate users. Failing to do so
will
   cause your server to become part of large scale DNS amplification
   attacks. Implementing BCP38 within your network would greatly
   reduce such attack surface
*/
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;


bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "." IN {
type hint;
file "named.ca";
};


zone "example.com." IN {
type master;
file "example.com.fz";
allow-update { none; };
};

zone "0.168.192.in-addr.arpa" IN {
type master;
file "example.com.rz";
allow-update { none; };
};



include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

any ideas


TIA


-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Extraneous option in sshd_config?

[Sergio Belkin]

Hi,

I've found the option in CentOS 7 in sshd_config file

#Host *.local
#   CheckHostIP no

I think that option is for ssh_config, not for sshd_config. Please correct
me if I'm wrong.

Thanks in advance!

-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SAMBA as AD DC

[Sergio Belkin]

H perhaps I don't explain myself enough.

I already know that Samba "capable of working as a AD domain controller and
more".

I'm asking about the official packages of CentOS, I mean from official
repo's.


Thanks in advance


2014-09-06 18:01 GMT-03:00 Aly Khimji :

> Yes Samba4 is capable of working as a AD domain controller and more.
>
> See link.
>
> https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
>
> Aly
> On Sep 6, 2014 4:16 PM, "Sergio Belkin"  wrote:
>
> > Hi folks,
> >
> > Is able SAMBA on CentOS 7 to work as Active Directory Domain Controller?
> If
> > it's not, what is the recommended way of doing? Compiling from sources?
> > Install packages from SerNet?
> >
> > Thanks in advance!
> > --
> > --
> > Sergio Belkin  http://www.sergiobelkin.com
> > LPIC-2 Certified - http://www.lpi.org
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] SAMBA as AD DC

[Sergio Belkin]

Hi folks,

Is able SAMBA on CentOS 7 to work as Active Directory Domain Controller? If
it's not, what is the recommended way of doing? Compiling from sources?
Install packages from SerNet?

Thanks in advance!
-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] default MPM

[Sergio Belkin]

Hi folks

What is the default MPM in apache on CentOS 7?

Thanks in advance!

-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cannot Static Routes

[Sergio Belkin]

2014-08-28 3:02 GMT-03:00 Mihamina Rakotomandimby <
mihamina.rakotomandi...@rktmb.org>:

> On 08/27/2014 09:42 PM, Sergio Belkin wrote:
> > I'd want to configure persistent static routes, ie in config files, but I
> > can't configure static routes, I tested:
> > [root@centos7 ~]# cat /etc/sysconfig/network-scripts/routes-enp0s3
> > ADDRESS0=10.10.10.0
> > NETMASK0=255.255.255.0
> > GATEWAY0=192.168.1.1
> > logs says nothing:
> > [...]
> >
> > I've also tried using /etc/sysconfig/static-routes file as is in
> >
> http://www.ehowstuff.com/how-to-setup-persistent-static-routes-on-linux-centos-6-4/
>
> Hi Sergio,
>
> The log parts you posted are related to networkManager.
> What happens if you explicitely say in the configuration file that the
> interface is not managed by NetworkMAnager?
>
> Regards.
> ___
>

Hi Mihamina, it's all about wrong filename as I earlier said, however, I've
later disabled NetworkManager, I think that it's not a mature software for
production, but I may be wrong...

-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cannot Static Routes

[Sergio Belkin]

2014-08-27 15:42 GMT-03:00 Sergio Belkin :

> /etc/sysconfig/network-scripts/routes-enp0s3
>

Shame on me, it was /etc/sysconfig/network-
scripts/route-enp0s3 instead /etc/sysconfig/network-
scripts/routes-enp0s3

Sorry


-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Cannot Static Routes

[Sergio Belkin]

Hi,

I'd want to configure persistent static routes, ie in config files, but I
can't configure static routes, I tested:


[root@centos7 ~]# cat /etc/sysconfig/network-scripts/routes-enp0s3
ADDRESS0=10.10.10.0
NETMASK0=255.255.255.0
GATEWAY0=192.168.1.1

logs says nothing:

ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: 
Activation (enp0s3) Stage 5 of 5 (IPv4 Commit) complete.
ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]:  (enp0s3):
device state change: ip-check -> seconda...0 0]
ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]:  (enp0s3):
device state change: secondaries -> acti...0 0]
ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: 
NetworkManager state is now CONNECTED_LOCAL
ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]:  Policy
set 'enp0s3' (enp0s3) as default for IPv4 r...DNS.
ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: 
Activation (enp0s3) successful, device activated.
ago 27 15:38:29 centos7.vhgroup.corp network[4172]: Activando interfaz
enp0s3:  Connection successfully activated (...on/5)
ago 27 15:38:29 centos7.vhgroup.corp network[4172]: [  OK  ]
ago 27 15:38:29 centos7.vhgroup.corp systemd[1]: Started LSB: Bring up/down
networking.
-- Subject: Unit network.service has finished start-up


I've also tried using /etc/sysconfig/static-routes file as is in
http://www.ehowstuff.com/how-to-setup-persistent-static-routes-on-linux-centos-6-4/

It just doesn't work :(

How is the proper way to do it?

Thanks in advance!

-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Missing system-config-lvm?

[Sergio Belkin]

I don't rely on such a tool to manage lvms but I'm making a doc about
LVM's and it was interesting to have a graphical approach...


2014-08-22 14:55 GMT-03:00 Reindl Harald :

>
>
> Am 22.08.2014 um 19:10 schrieb Sergio Belkin:
> > I didn't find system-config-lvm package on centos 7 official repo's, why?
> > :)
>
> because it is dropped long ago upstream for good reasons
> https://ask.fedoraproject.org/en/question/38068/lvm-on-fedora20/
>
> recent LVM implementations support a ton of features unknown
> to "system-config-lvm" - would really like to risk act a
> unmaintained tool on a recent setup probably using thin-provision?
>
>
>


-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Missing system-config-lvm?

[Sergio Belkin]

Hi,

I didn't find system-config-lvm package on centos 7 official repo's, why?
:)

Greetings

-- 
--
Sergio Belkin  http://www.sergiobelkin.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Target TRACE in CentOS

[Sergio Belkin]

HI, I'm trying to use TRACE target of raw table but It doesn't work

It's a CentOS 6.2 with kernel 2.6.32-220.7.1.el6.x86_64.

 lsmod | egrep -i  "raw|trace|log"
iptable_raw 2264  1
ip_tables  17831  4
iptable_raw,iptable_filter,iptable_mangle,iptable_nat
xt_TRACE1060  1
ipt_LOG 5845  5
ipt_ULOG   10765  11
dm_log 10122  2 dm_mirror,dm_region_hash
dm_mod 81596  14 dm_mirror,dm_log

The problem is TRACE target maches but it isn't logging anything

Chain PREROUTING (policy ACCEPT 380796 packets, 194521672 bytes)
pkts  bytes target prot opt in out source
destination
   6  360 TRACE  tcp  --  *  *   0.0.0.0/0
A.B.C.D tcp dpt:443



if I use the LOG target it WORKS, but TRACE it's better for debugging, am I
doing something wrong or this CentOS release has no full support for this
target?

Thanks in advance!


-- 
--
Sergio Belkin  http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Replication with centos 6.4

[Sergio Alex]

Hi,
I need to create a real-time replication of a partition between two servers
with centos 6.4, I am researching and finding difficulty with drbd, corosync,
someone indicate material, do not need to run script automatically if a node
drops only replicate.
Grateful.

-- 
Sergio.Alex
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] DL380g8 - smart array B320i - CentOS 6.4

[Sergio Alex]

Thanks,
Perfect, initialize the smart array and the instalation can´t find a disk
yet,  i didnt´t have option to chose a logical drive, but if a chose use a
driver disk,  show /dev/sdb, so he find a new disk

Please help,


2013/6/26 ☼ Francis 

> Este é Inglês lista utilize palavras em inglês
>
>
> 2013/6/26 Sergio Alex 
>
> > Gostaria de instalar o Centos 6.4 em um dl380e g8 com uma smart array
> > b320i, na instalação não possui drives por isso aparece que não há discos
> > disponíveis, baixei os drives para red hat .dd do site da HP, como
> poderia
> > carregar esses drives durante a instalação? gravei eles em um pen drive.
> >
> > Obrigado.
> >
> >
> Have you tried to follow these
>
>
>
>
>1.
>2. 1. Download RHEL 6.3 Software Driver Update and extract it.
>3. 2. Copy hpvsa-1.2.4-4.rhel6u3.x86_64.dd to a USB Key formatted as
>FAT32.
>4. 3. Once the floppy driver diskette ready on the USB Key and the Array
>is being created, is time to begin the CentOS 6.3 installation by
> booting
>from the DVD.
>5. 4. On the main installation menu for CentOS, mount the USB Key with
>the driver on it. At the installation menu, select the installation
> method
>(just highlight it) and hit “ESC” key to receive the "boot:" prompt
>6. 5. At that "boot" prompt enter the following command: linux dd
>blacklist=ahci
>7. 6. Hit ENTER Select Yes for driver diskette, Select the USB drive.
>8. 7. Select the driver disk image and select OK .
>9. 8. Continue the OS installation, then just click select the logical
>volume where to install the CentOS 6.3.
>
> reference link<
> http://h30499.www3.hp.com/t5/General/CentOS-6-3-unable-to-install-in-DL360e-Gen8-Server/td-p/5887823#.UcqApvkwdgk
> >
>
>
> >
> > --
> > Sergio.Alex
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Sergio.Alex
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] DL380g8 - smart array B320i - CentOS 6.4

[Sergio Alex]

Gostaria de instalar o Centos 6.4 em um dl380e g8 com uma smart array
b320i, na instalação não possui drives por isso aparece que não há discos
disponíveis, baixei os drives para red hat .dd do site da HP, como poderia
carregar esses drives durante a instalação? gravei eles em um pen drive.

Obrigado.



-- 
Sergio.Alex
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Openswan or Ipsec-tools?

[Sergio Belkin]

2012/5/14 Steve Clark :
> On 05/14/2012 12:22 PM, Lorenzo Martínez Rodríguez wrote:
>> I have this problem with my IPSec implementation, whatever I change :O
>>
>> [root@Carmen ~]# /etc/init.d/ipsec start
>> failed to start openswan IKE daemon - the following error occured:
>> addconn:
>> /builddir/build/BUILD/openswan-2.6.32/lib/libipsecconf/confread.c:255:
>> load_setup: Assertion `kw->keyword.keydef->validity&  kv_config' failed.
>>
>>
>> El 14/05/12 18:14, Sergio Belkin escribió:
>>> 2012/5/14 Shaun
>>>> I didn't think ipsec-tools were in CentOS 6?
>>>>
>>>> Just openswan.
>>> Is there any reason for ipsec-tools is not in CentOS?
>>>
>>> Thanks in advance!
>>
> We use ipsec-tools.
>

On Centos 6?



-- 
--
Sergio Belkin  http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Openswan or Ipsec-tools?

[Sergio Belkin]

2012/5/14 Shaun 
> I didn't think ipsec-tools were in CentOS 6?
>
> Just openswan.

Is there any reason for ipsec-tools is not in CentOS?

Thanks in advance!
-- 
--
Sergio Belkin  http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Openswan or Ipsec-tools?

[Sergio Belkin]

Hi,

I wonder what is better on CentOS 6 if openswan or ipsec-tools, what
do you recommend me?

(I can't use openvpn)

Thanks in advance!

-- 
--
Sergio Belkin  http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
LPIC-2 Certified - http://www.lpi.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Gnome 2.32 backported to RHEL6

[Sergio Rubio]

Hi all,

In case anyone is interested, I´ve backported Gnome 2.32 from F14 to RHEL6
for my own good :

http://blog.frameos.org/2010/11/24/installing-gnome-2-32-in-red-hat-enterprise-linux-6-x86_64/

Packages tagged with frameos in the release version have been patched by my
self. Sources:

http://mirror.frameos.org/frameos/6/experimental/SRPMS/

Enjoy!

-- 
FrameOS Linux
website: http://www.frameos.org 
twitter:   @rubiojr
blog:  http://blog.frameos.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] undefined reference when linking against libresolv

[Sergio Belkin]

Hi,


I have a project that is a library that links against libresolv,
It works fine on recent distros: Ubuntu 10.x  Fedora 13, Mandriva
2010.1 but on Centos 5.x I get the following errors


glibc installed is: glibc-2.5-18.el5_1.1

g++ -DHAVE_CONFIG_H -I.  -I./include -I/usr/include/postgresql  -O3
-ansi   -Wall -Wno-deprecated  -D_FORTIFY_SOURCE=0 -MT testUpLog.o -MD
-MP -MF .deps/testUpLog.Tpo -c -o testUpLog.o testUpLog.cc
mv -f .deps/testUpLog.Tpo .deps/testUpLog.Po
/bin/sh ./libtool --tag=CXX   --mode=link g++  -O3 -ansi   -Wall
-Wno-deprecated  -D_FORTIFY_SOURCE=0  -L/usr/lib64 -L/lib64
-L/usr/lib64/mysql -o testUpLog testUpLog.o libUpTools.la -lpq
-lmysqlclient -lssl -lpthread
libtool: link: g++ -O3 -ansi -Wall -Wno-deprecated -D_FORTIFY_SOURCE=0
-o .libs/testUpLog testUpLog.o  -L/usr/lib64 -L/lib64
-L/usr/lib64/mysql ./.libs/libUpTools.so -lpq -lmysqlclient -lssl
-lpthread
./.libs/libUpTools.so: undefined reference to `__ns_name_uncompress'
./.libs/libUpTools.so: undefined reference to `__ns_initparse'
./.libs/libUpTools.so: undefined reference to `__ns_parserr'
collect2: ld returned 1 exit status
make[1]: *** [testUpLog] Error 1
make[1]: Leaving directory `/tmp/UpTools-8.5.3'
make: *** [check-am] Error 2


library.la file contains:
dlname='libUpTools.so.0'
library_names='libUpTools.so.0.0.0 libUpTools.so.0 libUpTools.so'
old_library='libUpTools.a'
inherited_linker_flags=''
dependency_libs=' -L/usr/lib64 -L/lib64 -L/usr/lib64/mysql -lpq
-lmysqlclient -lssl -lpthread'
weak_library_names=''
current=0
age=0
revision=0
installed=no
shouldnotlink=no
dlopen=''
dlpreopen=''
libdir='/usr/lib'


You can read my files on pastebin.com

*configure.ac

http://pastebin.com/hs5q21Rq

*Makefile.am;

http://pastebin.com/KW1sGZve

Thanks in advance


-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Blowfish issues with somewhat big files

[Sergio Belkin]

2010/7/29 R P Herrold :
> On largish files, on a CentOS 5, 64 bit arch, openssl seems to
> work fine here
>
> [herr...@centos-5 SRPMS]$ time openssl bf -in \
>        freeswitch-0.0.20100729.git-1.src.rpm -out \
>        freeswitch-0.0.20100729.git-1.src.rpm.bf
> enter bf-cbc encryption password:
> Verifying - enter bf-cbc encryption password:
>
> real    0m38.587s
> user    0m3.700s
> sys     0m0.568s
> [herr...@centos-5 SRPMS]$ time openssl bf -d -in \
>        freeswitch-0.0.20100729.git-1.src.rpm.bf -out \
>        new_freeswitch-0.0.20100729.git-1.src.rpm
> enter bf-cbc decryption password:
>
> real    0m39.543s
> user    0m3.652s
> sys     0m0.792s
> [herr...@centos-5 SRPMS]$ md5sum freeswitch-0.0.20100729.git-1.src.rpm \
>        new_freeswitch-0.0.20100729.git-1.src.rpm
> b33eed78ec8fbccb7ef632c0c4bfe8ac  freeswitch-0.0.20100729.git-1.src.rpm
> b33eed78ec8fbccb7ef632c0c4bfe8ac  new_freeswitch-0.0.20100729.git-1.src.rpm
> [herr...@centos-5 SRPMS]$ ls -alh freeswitch-0.0.20100729.git-1.src.rpm \
>        new_freeswitch-0.0.20100729.git-1.src.rpm
> -rw-r--r-- 1 herrold herrold 320M Jul 29 11:00 
> freeswitch-0.0.20100729.git-1.src.rpm
> -rw-rw-r-- 1 herrold herrold 320M Jul 29 12:33 
> new_freeswitch-0.0.20100729.git-1.src.rpm
> [herr...@centos-5 SRPMS]$
>
> As such perhaps you are overrunning a pipe, or have a problem
> elsewhere in the process
>
> -- Russ herrold
> ___

Thanks Russ,

Sadly I've tried the same process by hand on both ways and on
different physical servers running Centos:

openssl bf  -d -in $1 -out $ARCH -k $KEY

and

cat $1 | openssl  bf -debug -d -out $ARCH -k $KEY > $1.unc


and either failed :(

I am taken aback...
-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Blowfish issues with somewhat big files

[Sergio Belkin]

2010/7/29 Sergio Belkin :
> 2010/7/28 Sergio Belkin :
>> 2010/7/28 Stephen Harris :
>>> DFILE_OFFSET_BITS=64
>>
>> I have installed both 32 and 64 bit versions of openssl, can that be
>> the cause of this problem?
>>
>> Thanks in advance
>>
>> --
>> --
>
> My fault, indeed, somewhat large files is a relative term, for example
> it can't decrypt files
>
>
> You can read full ouput on: http://pastebin.com/7yZeGEa4
>
> I've tried using both
>
> "openssl bf  -d -in $1 -out $FILE -k $KEY"  and  "cat $1 | openssl  bf
> -debug -d -out $FILE -k $KEY > $1.unc"
>
>
> and failed either.
>
> For encrypting I use:
>
> # esta funcion reemplaza a guardapgsql, guardaldap, y guardamysql
> guardadump() {
>   logstr "guardando $1-dump con blowfish"
>   ARCH=$1.dump.all.$DATE.gz.bf
>   case $1 in
>      mysql) CMD='mysqldump -Q -l -F --add-locks --add-drop-table -A';;
>      ldap) CMD='slapcat -c ';;
>      pgsql) CMD='sudo -u postgres pg_dumpall -v -c';;
>   esac
>   $CMD | compress | openssl bf -out $ARCH -k "$key" 2>> $LOGFILE
>   return $?
> }
>
> (Of course it's only a part of a file)
>
>
> I started to think that size is not the problem, for example I have files:
>
> -rw-r--r-- 1 root root     10264 Jul 29 00:24
> usr.local.etc.Thu-29-Jul-2010.tgz.bf
> -rw-r--r-- 1 root root   4402600 Jul 29 00:23 dir.Thu-29-Jul-2010.gz
> -rw-r--r-- 1 root root   4853784 Jul 29 00:24
> usr.lib.perl5.5.8.8.UP.Thu-29-Jul-2010.tgz.bf
> -rw-r--r-- 1 root root  12554264 Jul 29 00:24 etc.Thu-29-Jul-2010.tgz.bf
> -rw-r--r-- 1 root root  17302224 Jul 29 00:23
> ldap.dump.all.Thu-29-Jul-2010.gz.bf
> -rw-r--r-- 1 root root  92241944 Jul 29 00:24 scripts.Thu-29-Jul-2010.tgz.bf
> -rw-r--r-- 1 root root 209591864 Jul 29 00:23
> pgsql.dump.all.Thu-29-Jul-2010.gz.bf
>
> And scripts.Thu-29-Jul-2010.tgz.bf can be decrypted. May compress the
> "culprit"? I tried with a small database (544 K compressed with
> ncompress) and have no problem anyway, so I am rather puzzled :(
>
> Any idea?
>
> TIA
>
>

I forgot to say that scripts.Thu-29-Jul-2010.tgz.bf it is generated in
a different way of dump files:

guardassl() {
   if [ "$2" != "" ];then
  EXCLUDE="--exclude \"$2\""
   fi
   logstr "guardando $1 con blowfish $EXCLUDE"
   ARCH=`echo "$1" | sed 's/^\///'|sed 's/\//./g'`.$DATE.tgz.bf
   tar --create --preserve --gzip $EXCLUDE $1 | openssl bf -out $ARCH
-k $KEY 2>> $LOGFILE
   return $?
}



-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Blowfish issues with somewhat big files

[Sergio Belkin]

2010/7/28 Sergio Belkin :
> 2010/7/28 Stephen Harris :
>> DFILE_OFFSET_BITS=64
>
> I have installed both 32 and 64 bit versions of openssl, can that be
> the cause of this problem?
>
> Thanks in advance
>
> --
> --

My fault, indeed, somewhat large files is a relative term, for example
it can't decrypt files


You can read full ouput on: http://pastebin.com/7yZeGEa4

I've tried using both

"openssl bf  -d -in $1 -out $FILE -k $KEY"  and  "cat $1 | openssl  bf
-debug -d -out $FILE -k $KEY > $1.unc"


and failed either.

For encrypting I use:

# esta funcion reemplaza a guardapgsql, guardaldap, y guardamysql
guardadump() {
   logstr "guardando $1-dump con blowfish"
   ARCH=$1.dump.all.$DATE.gz.bf
   case $1 in
  mysql) CMD='mysqldump -Q -l -F --add-locks --add-drop-table -A';;
  ldap) CMD='slapcat -c ';;
  pgsql) CMD='sudo -u postgres pg_dumpall -v -c';;
   esac
   $CMD | compress | openssl bf -out $ARCH -k "$key" 2>> $LOGFILE
   return $?
}

(Of course it's only a part of a file)


I started to think that size is not the problem, for example I have files:

-rw-r--r-- 1 root root 10264 Jul 29 00:24
usr.local.etc.Thu-29-Jul-2010.tgz.bf
-rw-r--r-- 1 root root   4402600 Jul 29 00:23 dir.Thu-29-Jul-2010.gz
-rw-r--r-- 1 root root   4853784 Jul 29 00:24
usr.lib.perl5.5.8.8.UP.Thu-29-Jul-2010.tgz.bf
-rw-r--r-- 1 root root  12554264 Jul 29 00:24 etc.Thu-29-Jul-2010.tgz.bf
-rw-r--r-- 1 root root  17302224 Jul 29 00:23
ldap.dump.all.Thu-29-Jul-2010.gz.bf
-rw-r--r-- 1 root root  92241944 Jul 29 00:24 scripts.Thu-29-Jul-2010.tgz.bf
-rw-r--r-- 1 root root 209591864 Jul 29 00:23
pgsql.dump.all.Thu-29-Jul-2010.gz.bf

And scripts.Thu-29-Jul-2010.tgz.bf can be decrypted. May compress the
"culprit"? I tried with a small database (544 K compressed with
ncompress) and have no problem anyway, so I am rather puzzled :(

Any idea?

TIA


-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Blowfish issues with somewhat big files

[Sergio Belkin]

2010/7/28 Stephen Harris :
> DFILE_OFFSET_BITS=64

I have installed both 32 and 64 bit versions of openssl, can that be
the cause of this problem?

Thanks in advance

-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Blowfish issues with somewhat big files

[Sergio Belkin]

2010/7/28 Gary Greene :
> On 7/28/10 12:10 PM, "Stephen Harris"  wrote:
>> On Wed, Jul 28, 2010 at 04:04:26PM -0300, Sergio Belkin wrote:
>>> I've encrypted some database dumps with
>>>
>>> openssl bf -d -in dumpfile.bf -out dumpfile -k mykey
>>>
>>> bad decrypt
>>> 14142:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
>>> decrypt:evp_enc.c:325:
>>>
>>> The weird thing is if I do the same with smaller files it can decrypt
>>> with no problem. I use openssl-0.9.8e-12.el5 on Centos 5.4.
>>
>> Is the file over 2Gb in size?  A number of programs have 2Gb filesize
>> limits (eg "unzip").  You could, perhaps, use it as a pipe:
>>   cat dumpfile.bf | openssl bf -d -k mykey > dumpfile
>
> This only is caused by applications that either a) impose a 2GB limit
> directly (zip being one) or b) have not been built with large file support
> (-DLARGEFILE_SOURCE -DFILE_OFFSET_BITS=64).
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Hi,

Do you mean that I should to recompile openssl?

I've tried Stephen solution's with no success :(

Debug ouput is:

BIO[00875EF0]:ctrl(106) - FILE pointer
BIO[00875EF0]:ctrl return 1
BIO[00875F70]:ctrl(108) - FILE pointer
BIO[00875F70]:ctrl return 1
BIO[00875F70]:write(0,8) - FILE pointer
BIO[00875F70]:write return 8
BIO[00875F70]:write(0,8) - FILE pointer
BIO[00875F70]:write return 8
BIO[00876230]:ctrl(6) - cipher
BIO[00875F70]:ctrl(6) - FILE pointer
BIO[00875F70]:ctrl return 0
BIO[00876230]:ctrl return 0
BIO[00875EF0]:read(0,8192) - FILE pointer
BIO[00875EF0]:read return 8192
BIO[00876230]:write(0,8192) - cipher
BIO[00875F70]:write(0,4096) - FILE pointer
BIO[00875F70]:write return 4096
BIO[00875F70]:write(0,4096) - FILE pointer
BIO[00875F70]:write return 4096
BIO[00876230]:write return 8192
BIO[00875EF0]:read(0,8192) - FILE pointer
BIO[00875EF0]:read return 8192
BIO[00876230]:write(0,8192) - cipher
BIO[00875F70]:write(0,4096) - FILE pointer
BIO[00875F70]:write return 4096
BIO[00875F70]:write(0,4096) - FILE pointer
BIO[00875F70]:write return 4096
BIO[00876230]:write return 8192
BIO[00875EF0]:read(0,8192) - FILE pointer
BIO[00875EF0]:read return 8192
BIO[00876230]:write(0,8192) - cipher
[...]
BIO[00876230]:ctrl(11) - cipher
BIO[00875F70]:write(0,8) - FILE pointer
BIO[00875F70]:write return 8
BIO[00875F70]:ctrl(11) - FILE pointer
BIO[00875F70]:ctrl return 1
BIO[00876230]:ctrl return 1
BIO[00875EF0]:Free - FILE pointer
BIO[00875F70]:Free - FILE pointer
BIO[00876230]:Free - cipher

Thanks in advance!!
-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Blowfish issues with somewhat big files

[Sergio Belkin]

Hi,

I've encrypted some database dumps with

openssl bf -d -in dumpfile.bf -out dumpfile -k mykey

bad decrypt
14142:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
decrypt:evp_enc.c:325:

The weird thing is if I do the same with smaller files it can decrypt
with no problem. I use openssl-0.9.8e-12.el5 on Centos 5.4.

Please could you tell me what I am doing wrong?

Thanks in advance!



-- 
--
Sergio Belkin http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Full Virtualized DomU won't boot

[Sergio Belkin]

2010/1/28 Pasi Kärkkäinen :
> On Wed, Jan 27, 2010 at 07:21:54PM -0300, Sergio Belkin wrote:
>> Hi, I use Centos 5.4 x86_64
>>
>> kernel used is 2.6.18-164.11.1.el5xen
>>
>> I have a physical machine running Debian Etch (32 bit) and Debian
>> Lenny and I virtualized the first one as follows:
>>
>> *Created a HVM DomU with Virt-Manager with a virtual disk file of 4 M
>> *Boot from LiveCD, and created a swap and a ext3 partitions (Yes, very
>> simple layout).
>> *Rsync'd files from root partition of physical machine to partition
>> mounted on LiveCD on DomU.
>> *Chrooted and edited files /boot/grub/menu.lst, /etc/fstab, etc/mtab,
>> /boot/grub/device.map.
>> *Then I rebooted from hard disk and stay freezed with the message
>> "booting from hard disk" . But it doesn't boot at all from hard disk.
>>
>> I can boot using grub-rescue-cdrom, but if I try to install grub with
>> grub-install it outputs:
>>
>>
>> "The file /boot/grub/stage1 not read correctly"
>>
>> (I've tried --recheck option, and depmod and update-grub commands with
>> no success)
>>
>
> Well.. stage1 is definitely needed by grub. So grub didn't get installed.
> Your domU can't boot then.
>
> - Do you have the stage1 file there?
> - Was the partition layout the same for the old server?
> - Is the grub.conf "root (hd0,X)" correct for the new disk?
>
> You can install grub from grub-shell like this, after chrooting to the 
> filesystem:
>
> # grub
> device (hd0) /dev/sda
> root (hd0,0)
> setup (hd0)
>
> replace "hd0,0" with the correct partition index.
>

I've tried that, If that was the  problem, I hadn't asked help to the list  :)

I've found that it was a misunderstanding between Grub and the
filesystem. Target filesystem has inodes of 256 bytes while debian
etch version can read inodes of 128 bytes.


>> --
>> --
>> Open Kairos http://www.sergiobelkin.com
>> Watch More TV http://sebelk.blogspot.com
>> Sergio Belkin -
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Full Virtualized DomU won't boot

[Sergio Belkin]

Hi, I use Centos 5.4 x86_64

kernel used is 2.6.18-164.11.1.el5xen

I have a physical machine running Debian Etch (32 bit) and Debian
Lenny and I virtualized the first one as follows:

*Created a HVM DomU with Virt-Manager with a virtual disk file of 4 M
*Boot from LiveCD, and created a swap and a ext3 partitions (Yes, very
simple layout).
*Rsync'd files from root partition of physical machine to partition
mounted on LiveCD on DomU.
*Chrooted and edited files /boot/grub/menu.lst, /etc/fstab, etc/mtab,
/boot/grub/device.map.
*Then I rebooted from hard disk and stay freezed with the message
"booting from hard disk" . But it doesn't boot at all from hard disk.

I can boot using grub-rescue-cdrom, but if I try to install grub with
grub-install it outputs:


"The file /boot/grub/stage1 not read correctly"

(I've tried --recheck option, and depmod and update-grub commands with
no success)


Output of file command on virtual disk file is:

/virtuales/videodisk.img: x86 boot sector; partition 1: ID=0x82,
starthead 1, startsector 63, 4273227 sectors; partition 2: ID=0x83,
active, starthead 0, startsector 4273290, 77626080 sectors

The DomU file is:

DomU (file):

name = "video"
uuid = "54d25d78-b9d0-0159-542c-bb601cc936bb"
maxmem = 1024
memory = 512
vcpus = 1
builder = "hvm"
kernel = "/usr/lib/xen/boot/hvmloader"
boot = "d"
pae = 1
acpi = 1
apic = 1
localtime = 0
on_poweroff = "destroy"
on_reboot = "restart"
on_crash = "restart"
device_model = "/usr/lib64/xen/bin/qemu-dm"
sdl = 0
vnc = 1
vncunused = 1
keymap = "es"
disk = [ "file:/virtuales/videodisk.img,hda,w",
"file:/virtuales/isos/grub-rescue-cdrom.iso,hdc:cdrom,r" ]
vif = [ "mac=00:16:36:0b:24:2d,bridge=xenbr0,script=vif-bridge" ]
parallel = "none"
serial = "pty"
EOF



With grub-rescue cd DomU can boot but as I've said can't install grub
and loads also loopback interface.


Please could you tell me what I am doing wrong?

Thanks in advance!!

-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 32 bit Full Virtualized DomU on 64 Dom0

[Sergio Belkin]

2010/1/23 Rudi Ahlers :
>
>
> On Sun, Jan 24, 2010 at 1:41 AM, Sergio Belkin  wrote:
>>
>> Hi,
>>
>> I need to virtualize a physical machine (Debian Etch 32 bit) to run on
>> Centos 5.4 64 bit. Can I do that? I mean can a full virtualized DomU
>> 32 bit run on a 64 bit Dom0.
>>
>> Thanks in advance!!
>>
>> --
>> --
>> Open Kairos http://www.sergiobelkin.com
>> Watch More TV http://sebelk.blogspot.com
>> Sergio Belkin -
>> ___
>>
>
> Sure it can, why not?
>
> --
> Kind Regards
> Rudi Ahlers
> SoftDux
>
> Website: http://www.SoftDux.com
> Technical Blog: http://Blog.SoftDux.com
> Office: 087 805 9573
> Cell: 082 554 7532

Thanks! it was only a techie superstition :)
!


-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] 32 bit Full Virtualized DomU on 64 Dom0

[Sergio Belkin]

Hi,

I need to virtualize a physical machine (Debian Etch 32 bit) to run on
Centos 5.4 64 bit. Can I do that? I mean can a full virtualized DomU
32 bit run on a 64 bit Dom0.

Thanks in advance!!

-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Just installed DomU won't boot

[Sergio Belkin]

2010/1/22 Lucian @ lastdot.org :
> On Fri, Jan 22, 2010 at 5:50 PM, Sergio Belkin  wrote:
>> Hi, I am using Centos 5.4 x86_64 with kernel 2.6.18-164.11.1.el5xen.
>> I've installed a Centos 5.4 (64 bit too) DomU (paravirtualized),
>> process was apparently with no problems, but DomU refuses to start,
>> this the error:
>>
>> Traceback (most recent call last):
>>  File "/usr/share/virt-manager/virtManager/engine.py", line 498, in 
>> run_domain
>>    vm.startup()
>>  File "/usr/share/virt-manager/virtManager/domain.py", line 573, in startup
>>    self.vm.create()
>>  File "/usr/lib64/python2.4/site-packages/libvirt.py", line 287, in create
>>    if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
>> libvirtError: La operación POST falló: xend_post: error del demonio de
>> xen: (xend.err "Error creating domain: Boot loader didn't return any
>> data!")
>>
>> End of Error Message.
>>
>> Config file is as follows:
>>
>> name = "fido"
>> uuid = "af13748d-6084-2357-73b7-0c7ff9ed9553"
>> maxmem = 1500
>> memory = 1500
>> vcpus = 16
>> bootloader = "/usr/bin/pygrub"
>> on_poweroff = "destroy"
>> on_reboot = "restart"
>> on_crash = "restart"
>> vfb = [ "type=vnc,vncunused=1,keymap=es" ]
>> disk = [ "phy:/dev/VolGroup00/LogVol02,xvda,w" ]
>> vif = [ "mac=00:16:36:19:a7:66,bridge=xenbr0,script=vif-bridge" ]
>>
>>
>> Please could you tell me what'w wrong with it?
>>
>> Thanks in advance!!
>>
>>
>> --
>> --
>> Open Kairos http://www.sergiobelkin.com
>> Watch More TV http://sebelk.blogspot.com
>> Sergio Belkin -
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
> What happens if you run:
>
> pygrub /dev/VolGroup00/LogVol02
>
> I suspect you don't have the required stuff (kernel, initrd and
> menu.lst/grub.conf) in your domU's /boot dir.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


Thanks now  I have not the server at hand, I'll try to keep in touch.
-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Just installed DomU won't boot

[Sergio Belkin]

Hi, I am using Centos 5.4 x86_64 with kernel 2.6.18-164.11.1.el5xen.
I've installed a Centos 5.4 (64 bit too) DomU (paravirtualized),
process was apparently with no problems, but DomU refuses to start,
this the error:

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/engine.py", line 498, in run_domain
vm.startup()
  File "/usr/share/virt-manager/virtManager/domain.py", line 573, in startup
self.vm.create()
  File "/usr/lib64/python2.4/site-packages/libvirt.py", line 287, in create
if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
libvirtError: La operación POST falló: xend_post: error del demonio de
xen: (xend.err "Error creating domain: Boot loader didn't return any
data!")

End of Error Message.

Config file is as follows:

name = "fido"
uuid = "af13748d-6084-2357-73b7-0c7ff9ed9553"
maxmem = 1500
memory = 1500
vcpus = 16
bootloader = "/usr/bin/pygrub"
on_poweroff = "destroy"
on_reboot = "restart"
on_crash = "restart"
vfb = [ "type=vnc,vncunused=1,keymap=es" ]
disk = [ "phy:/dev/VolGroup00/LogVol02,xvda,w" ]
vif = [ "mac=00:16:36:19:a7:66,bridge=xenbr0,script=vif-bridge" ]


Please could you tell me what'w wrong with it?

Thanks in advance!!


-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ldapsearch -f file doesn't work

[Sergio Belkin]

2009/12/2 Craig White :
> On Wed, 2009-12-02 at 06:06 -0700, Craig White wrote:
>

Well at last, it was easier I thought

Thanks God, google and this Novell page :D

http://www.novell.com/coolsolutions/tip/17144.html

I hope be useful...
-- 
--
Open Kairos http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ldapsearch -f file doesn't work

[Sergio Belkin]

2009/12/2 Sergio Belkin :
> Hi,
>
> Firstly, system info:
>
> Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007
> x86_64 x86_64 x86_64 GNU/Linux
>
>
> I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y
> openldap-2.3.27-8.el5_2.4
> I'd want to perform a query that return one attribute. So I did
> something as follows:
>
>
> ldapsearch -W  -f qbis.ldif -D "cn=Manager,dc=palermo,dc=edu" -b
> "ou=people,dc=mydomain,dc=edu" -x  legajo
>
> (Where legajo is the filter)
>
> There is no problem with filter but wih the file "qbis.ldif" which contains:
>
>
> dn: uid=jdoe,ou=people,dc=mydomain,dc=edu
>
>
> Of course I could perform that query with no need of one file, but I
> need to get "legajo" from around 800 users so it would be nice to be
> able to use "-f file". I cannot do something like a "loop for" because
> it would ask me every time the Manager password.
>
> Am I doing something wrong or is a ldap bug?
>
> Thanks in advance!
> --

Ouch, I forget to comment what is the problem, well the problem is
that query returns all database entries (onlt it works the filter) but
doesn't honor "-f file" at all. So that was my question, what's wrong
with that option?

Thanks in advance again :)



-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] ldapsearch -f file doesn't work

[Sergio Belkin]

Hi,

Firstly, system info:

Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007
x86_64 x86_64 x86_64 GNU/Linux


I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y
openldap-2.3.27-8.el5_2.4
I'd want to perform a query that return one attribute. So I did
something as follows:


ldapsearch -W  -f qbis.ldif -D "cn=Manager,dc=palermo,dc=edu" -b
"ou=people,dc=mydomain,dc=edu" -x  legajo

(Where legajo is the filter)

There is no problem with filter but wih the file "qbis.ldif" which contains:


dn: uid=jdoe,ou=people,dc=mydomain,dc=edu


Of course I could perform that query with no need of one file, but I
need to get "legajo" from around 800 users so it would be nice to be
able to use "-f file". I cannot do something like a "loop for" because
it would ask me every time the Manager password.

Am I doing something wrong or is a ldap bug?

Thanks in advance!
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IO statistic Centos 5.4

[Sergio Belkin]

2009/10/23 Benjamin Franz :
> Sergio Belkin wrote:
>> 2009/10/23 Scott McClanahan :
>>
>>> On Fri, 2009-10-23 at 09:35 -0300, Sergio Belkin wrote:
>>>
>>>> Hi,
>>>>
>>>> Has kernel-2.6.18-128.1.1 support for IO statistic for example when
>>>> using "pidstat -d"?
>>>>
>>>> Thanks in advance!
>>>>
>>> Is pidstat available in the 5.4 sysstat package or are you deviating
>>> from the stock sysstat package?
>>>
>>
>> Really I don't know, still I don't test release 5.4 it would be nice
>> that has it
> According to the man page for pidstat, 'pidstat -d' only works with
> 2.6.20 kernels and later. Since pidstat is not installed by the sysstat
> package for 5.3 (which is what 2.6.18-128.* kernel is from) it is
> probably a safe assumption that it won't work.
>
> --
> Benjamin Franz

I've found kernel   2.6.18-128 on
http://www.gtlib.gatech.edu/pub/centos/5.3/updates/x86_64/RPMS/

I skipped kernel-2.6.18-164.el5, so I ask again: does
kernel-2.6.18-164.el5 support IO statistic, I already know what man
page says :)  but I wonder if that kernel has that customization

Thanks in advance!!


-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IO statistic Centos 5.4

[Sergio Belkin]

2009/10/23 Scott McClanahan :
> On Fri, 2009-10-23 at 09:35 -0300, Sergio Belkin wrote:
>> Hi,
>>
>> Has kernel-2.6.18-128.1.1 support for IO statistic for example when
>> using "pidstat -d"?
>>
>> Thanks in advance!
>>
>
> Is pidstat available in the 5.4 sysstat package or are you deviating
> from the stock sysstat package?

Really I don't know, still I don't test release 5.4 it would be nice
that has it.

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] IO statistic Centos 5.4

[Sergio Belkin]

Hi,

Has kernel-2.6.18-128.1.1 support for IO statistic for example when
using "pidstat -d"?

Thanks in advance!

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Thermal information

[Sergio Belkin]

2009/9/18 Ned Slider :
> Sergio Belkin wrote:
>> 2009/9/18 Ned Slider :
>>> Sergio Belkin wrote:
>>>> Hi,
>>>>
>>>> I'd want know get thermal information on Centos 5.3 but get nohting.
>>>> If I run acpitool -e, it outputs:
>>>>
>>>>  acpitool -e
>>>>   Kernel version : 2.6.18-92.1.18.20060707   -    ACPI version :
>>>> 20060707
>>
>> Why are you asumming so quickly that is not a Centos kernel?
>>
>
> Because this is what the output from 'acpitool -e' looks like for me:
>
> $ acpitool -e
>   Kernel version : 2.6.18-164.el5   -    ACPI version : 20060707
>
> and your output shows 2.6.18-92.1.18.20060707 which is not a CentOS
> kernel format (to my knowledge?). I might be wrong, and am happy to be
> corrected if I am :)

Yes you're wrong :)

acpitool output it's not the same that uname -r. I mean it doesn't
show rpm package name.




>
>> rpm -qi kernel
>> Name        : kernel                       Relocations: (not
>> relocatable)
>> Version     : 2.6.18                            Vendor: CentOS
>> Release     : 92.el5                        Build Date: Tue 10 Jun
>
> Which is not the kernel you've shown running above??
>

Well, I explained it above. Sorry for my terrible sin, It is not
Centos 5.3 but 5.2.

Links Kernel used is below:

http://vault.centos.org/5.2/os/x86_64/CentOS/kernel-2.6.18-92.el5.x86_64.rpm

>>
>>
>> What's wrong with you?
>
> Nothing, I was trying to help.
>
> Have a nice weekend.
>


Sorry for I was rude Ned, but I am somewhat sick of answers of people
that don't want to help about anything and only  know to give moral
advices and ask "are you really using a system of every package Centos
that has been blessed?". Hey,  of course I ask here because I use
CentOS at work, and because supposedly there are people that has
experience using ir on daily basis.

Have a nice day
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Thermal information

[Sergio Belkin]

2009/9/18 Ned Slider :
> Sergio Belkin wrote:
>> Hi,
>>
>> I'd want know get thermal information on Centos 5.3 but get nohting.
>> If I run acpitool -e, it outputs:
>>
>>  acpitool -e
>>   Kernel version : 2.6.18-92.1.18.20060707   -    ACPI version :
>> 20060707

Why are you asumming so quickly that is not a Centos kernel?

rpm -qi kernel
Name: kernel   Relocations: (not
relocatable)
Version : 2.6.18Vendor: CentOS
Release : 92.el5Build Date: Tue 10 Jun
2008 10:09:15 PM ART
Install Date: Thu 27 Nov 2008 04:51:05 PM ARST  Build Host:
builder16.centos.org
Group   : System Environment/Kernel Source RPM:
kernel-2.6.18-92.el5.src.rpm
Size: 39056061 License: GPLv2
Signature   : DSA/SHA1, Sat 14 Jun 2008 08:35:41 PM ART, Key ID
a8a447dce8562897
URL : http://www.kernel.org/
Summary : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.


What's wrong with you?
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Thermal information

[Sergio Belkin]

Hi,

I'd want know get thermal information on Centos 5.3 but get nohting.
If I run acpitool -e, it outputs:

 acpitool -e
  Kernel version : 2.6.18-92.1.18.20060707   -ACPI version :
20060707
  ---
  Battery status : 

 Function Do_AC_Info_Sys: could not read directory
/sys/class/power_supply/
 Make sure your kernel has ACPI AC adapter support enabled.
  Fan: 

  CPU type   : Intel(R) Xeon(R) CPU5110  @
1.60GHz
  CPU speed  : 1595.980 MHz
  Cache size : 4096 KB
  Bogomips   : 3193.92
  Bogomips   : 3191.86

  # of CPU's found   : 2

  Processor ID   : 0
  Bus mastering control  : no
  Power management   : no
  Throttling control : yes
  Limit interface: yes
  Active C-state : C1
  C-states (incl. C0): 1
  T-state count  : 8
  Active T-state : T0


  Processor ID   : 1
  Bus mastering control  : no
  Power management   : no
  Throttling control : yes
  Limit interface: yes
  Active C-state : C1
  C-states (incl. C0): 1
  T-state count  : 8
  Active T-state : T0



  Thermal info   : 

   Device   Sleep state Status
  ---
  1. PCI0  5disabled


And:

grep THERMAL /boot/config-2.6.18-92.el5
CONFIG_X86_MCE_P4THERMAL=y
CONFIG_ACPI_THERMAL=y


Am I doing something wrong?

Thanks in advance!
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux messages after compiling new kernel

[Sergio Belkin]

2009/8/27 Johnny Hughes :
> Sergio Belkin wrote:
>> 2009/8/27 Filipe Brandenburger :
>>> Hi,
>>>
>>> On Thu, Aug 27, 2009 at 12:46, Sergio Belkin wrote:
>>>> Jim, thanks for the suggestion, but Firstly: I need a newer kernel in
>>>> order to get IO statistics from tools like atop, pidstat, etc. And
>>>> secondly and most important: my boss wants that :)
>>> Then CentOS is not what you want.
>>>
>>> There is a reason why RHEL/CentOS does not ship with the latest kernel
>>> (and other components) and backports fixes instead. It's not trivial
>>> to make different versions of these components work together. If you
>>> try to replace the kernel (or other core components) you will see how
>>> painful it is. In fact, you started to see it already. You may try to
>>> continue to go that way, but I doubt anyone in this list will be able
>>> to help you there... you're pretty much on your own.
>>>
>>>> So I'd be glad to hear other kind of solution :)
>>> Look at the latest Fedora or Ubuntu or another one of the "cutting
>>> edge" distributions that ship with more recent versions of components.
>>>
>>> Or ask yourself (or your boss) *WHY* you think you really need a later
>>> version of a certain component. What is your real problem? Is it
>>> support to a certain hardware? Is it network related? Is it
>>> (unfounded) fear that the kernel in CentOS might be vulnerable? It
>>> might be possible to solve your problem using CentOS in another way,
>>> if you come back to the list with the real problem we might be able to
>>> help you better.
>>>
>>> HTH,
>>> Felipe
>>
>> I've just explained the reason why I've compiled.
>>
>>
> Let me try it a different way.
>
> The current kernel used by Red Hat in RHEL 4 is a 2.6.9-x kernel and it
> has 1973 patches.  The one currently in use in RHEL 5 is a 2.6.18-x
> kernel with 2882 patches.
>
> Many packages are compiled against kernel-headers and depend on the proc
>  structure that is there.
>
> SELinux is just one of many issues you will have if you try to use a
> main line kernel on CentOS.  You will need to have several of the Red
> Hat patches (modified to work with the new kernel tree) incorporated in
> order to use a newer kernel on CentOS.
>
> If you absolutely have to have a newer kernel (you should not do this
> ... but hey, it IS your machine) ... then instead of trying to use a
> main line kernel, instead try to use the latest one from here:
>
> ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEMRG/SRPMS/
>
> This kernel has been tested for use with RHEL-5 and is 2.6.24-x.
>
> You still might have issues, but they should be far fewer than running a
> main line kernel on CentOS.
>
> Would you, if you boss told you he wanted you to, try to make the
> Windows Vista system files run on Windows 95?

Of course I wouldn't it. I think that the comparison has little to do.
Windows it's very different from Linux. MS it's product developed by
an only company and closed souce. I think that the difference from
using some distro with different kernel is far smaller that running
"Vista" apps on Windows 95. Of course I don't expect support in the
sense that someone solve my problems, I'm only was asking
suggestions...



-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux messages after compiling new kernel

[Sergio Belkin]

2009/8/27 Johnny Hughes :
> Sergio Belkin wrote:
>> 2009/8/27 Filipe Brandenburger :
>>> Hi,
>>>
>>> On Thu, Aug 27, 2009 at 12:46, Sergio Belkin wrote:
>>>> Jim, thanks for the suggestion, but Firstly: I need a newer kernel in
>>>> order to get IO statistics from tools like atop, pidstat, etc. And
>>>> secondly and most important: my boss wants that :)
>>> Then CentOS is not what you want.
>>>
>>> There is a reason why RHEL/CentOS does not ship with the latest kernel
>>> (and other components) and backports fixes instead. It's not trivial
>>> to make different versions of these components work together. If you
>>> try to replace the kernel (or other core components) you will see how
>>> painful it is. In fact, you started to see it already. You may try to
>>> continue to go that way, but I doubt anyone in this list will be able
>>> to help you there... you're pretty much on your own.
>>>
>>>> So I'd be glad to hear other kind of solution :)
>>> Look at the latest Fedora or Ubuntu or another one of the "cutting
>>> edge" distributions that ship with more recent versions of components.
>>>
>>> Or ask yourself (or your boss) *WHY* you think you really need a later
>>> version of a certain component. What is your real problem? Is it
>>> support to a certain hardware? Is it network related? Is it
>>> (unfounded) fear that the kernel in CentOS might be vulnerable? It
>>> might be possible to solve your problem using CentOS in another way,
>>> if you come back to the list with the real problem we might be able to
>>> help you better.
>>>
>>> HTH,
>>> Felipe
>>
>> I've just explained the reason why I've compiled.
>>
>>
> Let me try it a different way.
>
> The current kernel used by Red Hat in RHEL 4 is a 2.6.9-x kernel and it
> has 1973 patches.  The one currently in use in RHEL 5 is a 2.6.18-x
> kernel with 2882 patches.
>
> Many packages are compiled against kernel-headers and depend on the proc
>  structure that is there.
>
> SELinux is just one of many issues you will have if you try to use a
> main line kernel on CentOS.  You will need to have several of the Red
> Hat patches (modified to work with the new kernel tree) incorporated in
> order to use a newer kernel on CentOS.
>
> If you absolutely have to have a newer kernel (you should not do this
> ... but hey, it IS your machine) ... then instead of trying to use a
> main line kernel, instead try to use the latest one from here:
>
> ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEMRG/SRPMS/
>
> This kernel has been tested for use with RHEL-5 and is 2.6.24-x.
>
> You still might have issues, but they should be far fewer than running a
> main line kernel on CentOS.
>
> Would you, if you boss told you he wanted you to, try to make the
> Windows Vista system files run on Windows 95?
>
> Thanks,
> Johnny Hughes


Thanks for provide the more smart and constructive answer so far.

On ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEMRG/SRPMS/
I've only found kernel-rt, are they real time kernels?

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux messages after compiling new kernel

[Sergio Belkin]

2009/8/27 Filipe Brandenburger :
> Hi,
>
> On Thu, Aug 27, 2009 at 12:46, Sergio Belkin wrote:
>> Jim, thanks for the suggestion, but Firstly: I need a newer kernel in
>> order to get IO statistics from tools like atop, pidstat, etc. And
>> secondly and most important: my boss wants that :)
>
> Then CentOS is not what you want.
>
> There is a reason why RHEL/CentOS does not ship with the latest kernel
> (and other components) and backports fixes instead. It's not trivial
> to make different versions of these components work together. If you
> try to replace the kernel (or other core components) you will see how
> painful it is. In fact, you started to see it already. You may try to
> continue to go that way, but I doubt anyone in this list will be able
> to help you there... you're pretty much on your own.
>
>> So I'd be glad to hear other kind of solution :)
>
> Look at the latest Fedora or Ubuntu or another one of the "cutting
> edge" distributions that ship with more recent versions of components.
>
> Or ask yourself (or your boss) *WHY* you think you really need a later
> version of a certain component. What is your real problem? Is it
> support to a certain hardware? Is it network related? Is it
> (unfounded) fear that the kernel in CentOS might be vulnerable? It
> might be possible to solve your problem using CentOS in another way,
> if you come back to the list with the real problem we might be able to
> help you better.
>
> HTH,
>Felipe

I've just explained the reason why I've compiled.


-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux messages after compiling new kernel

[Sergio Belkin]

2009/8/27 Jim Perrin :
> On Thu, Aug 27, 2009 at 9:01 AM, Sergio Belkin wrote:
>
>>
>> How can I fix these errors?
>
> Easy. Use the kernel provided in the distribution.
>

Jim, thanks for the suggestion, but Firstly: I need a newer kernel in
order to get IO statistics from tools like atop, pidstat, etc. And
secondly and most important: my boss wants that :)

So I'd be glad to hear other kind of solution :)
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] SELinux messages after compiling new kernel

[Sergio Belkin]

Hi,

I compiled a kernel from sources (2.6.30.5) and when system is booting
shows these errors:

SELinux:  61 classes, 69080 rules
SELinux:  class peer not defined in policy
SELinux:  class capability2 not defined in policy
SELinux:  class kernel_service not defined in policy
SELinux:  permission open in class dir not defined in policy
SELinux:  permission open in class file not defined in policy
SELinux:  permission open in class chr_file not defined in policy
SELinux:  permission open in class blk_file not defined in policy
SELinux:  permission open in class sock_file not defined in policy
SELinux:  permission open in class fifo_file not defined in policy
SELinux:  permission recvfrom in class node not defined in policy
SELinux:  permission sendto in class node not defined in policy
SELinux:  permission ingress in class netif not defined in policy
SELinux:  permission egress in class netif not defined in policy
SELinux:  permission setfcap in class capability not defined in policy
SELinux:  permission nlmsg_tty_audit in class netlink_audit_socket not
defined in policy
SELinux:  permission forward_in in class packet not defined in policy
SELinux:  permission forward_out in class packet not defined in policy
SELinux: the above unknown classes and permissions will be denied


How can I fix these errors?

Thanks in advance!
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Somewhat OT: OpenOffice.org Headless issues as non-root user

[Sergio Belkin]

Hi,

I've installed recently OpenOffice.org 3.1 on Centos 5.3. I use OOo in
headless mode. I have no problem when running as root, but I'd prefer
run it as non-root user (oooserver user). When I run the script in
debug mode this is the output:

sh -x/tmp/ooo-headless-nonroot start
+ . /etc/rc.d/init.d/functions
++ TEXTDOMAIN=initscripts
++ umask 022
++ PATH=/sbin:/usr/sbin:/bin:/usr/bin
++ export PATH
++ '[' -z '' ']'
++ COLUMNS=80
++ '[' -z '' ']'
+++ /sbin/consoletype
++ CONSOLETYPE=pty
++ '[' -f /etc/sysconfig/i18n -a -z '' ']'
++ . /etc/profile.d/lang.sh
+++ sourced=0
+++ for langfile in /etc/sysconfig/i18n '$HOME/.i18n'
+++ '[' -f /etc/sysconfig/i18n ']'
+++ . /etc/sysconfig/i18n
 LANG=en_US.UTF-8
 SYSFONT=latarcyrheb-sun16
+++ sourced=1
+++ for langfile in /etc/sysconfig/i18n '$HOME/.i18n'
+++ '[' -f /root/.i18n ']'
+++ '[' -n '' ']'
+++ '[' 1 = 1 ']'
+++ '[' -n en_US.UTF-8 ']'
+++ export LANG
+++ '[' -n '' ']'
+++ unset LC_ADDRESS
+++ '[' -n '' ']'
+++ unset LC_CTYPE
+++ '[' -n '' ']'
+++ unset LC_COLLATE
+++ '[' -n '' ']'
+++ unset LC_IDENTIFICATION
+++ '[' -n '' ']'
+++ unset LC_MEASUREMENT
+++ '[' -n '' ']'
+++ unset LC_MESSAGES
+++ '[' -n '' ']'
+++ unset LC_MONETARY
+++ '[' -n '' ']'
+++ unset LC_NAME
+++ '[' -n '' ']'
+++ unset LC_NUMERIC
+++ '[' -n '' ']'
+++ unset LC_PAPER
+++ '[' -n '' ']'
+++ unset LC_TELEPHONE
+++ '[' -n '' ']'
+++ unset LC_TIME
+++ '[' -n '' ']'
+++ unset LC_ALL
+++ '[' -n '' ']'
+++ unset LANGUAGE
+++ '[' -n '' ']'
+++ unset LINGUAS
+++ '[' -n '' ']'
+++ unset _XKB_CHARSET
 /sbin/consoletype
+++ consoletype=pty
+++ '[' -n '' ']'
+++ '[' -n '' ']'
+++ '[' -n en_US.UTF-8 ']'
+++ case $LANG in
+++ '[' xterm = linux ']'
+++ unset SYSFONTACM SYSFONT
+++ unset sourced
+++ unset langfile
++ '[' -z '' ']'
++ '[' -f /etc/sysconfig/init ']'
++ . /etc/sysconfig/init
+++ BOOTUP=color
+++ GRAPHICAL=yes
+++ RES_COL=60
+++ MOVE_TO_COL='echo -en \033[60G'
+++ SETCOLOR_SUCCESS='echo -en \033[0;32m'
+++ SETCOLOR_FAILURE='echo -en \033[0;31m'
+++ SETCOLOR_WARNING='echo -en \033[0;33m'
+++ SETCOLOR_NORMAL='echo -en \033[0;39m'
+++ LOGLEVEL=3
+++ PROMPT=yes
+++ AUTOSWAP=no
++ '[' pty = serial ']'
++ '[' color '!=' verbose ']'
++ INITLOG_ARGS=-q
++ 
__sed_discard_ignored_files='/\(~\|\.bak\|\.orig\|\.rpmnew\|\.rpmorig\|\.rpmsave\)$/d'
+ ooffice=/opt/openoffice.org3/program/soffice.bin
+ prog='OpenOffice.org Headless'
+ pidfile=/var/run/ooo-headless/ooo-headless.pid
+ lockfile=/var/lock/subsys/ooo-headless
+ OPTIONS='-headless -nofirststartwizard -nologo -norestore -invisible
-accept=socket,host=localhost,port=2002;urp;StarOffice.Service'
+ RETVAL=0
+ case "$1" in
+ start
+ echo -n 'Starting OpenOffice.org Headless: '
Starting OpenOffice.org Headless: + su oooserver '-c
/opt/openoffice.org3/program/soffice.bin -headless -nofirststartwizard
-nologo -norestore -invisible
-accept=socket,host=localhost,port=2002;urp;StarOffice.Service
>/dev/null 2>&1 &'

End oif Output

You can see the ps output too:

root 19432  0.0  0.2   4908  1228 pts/0S+   10:46   0:00  |
 \_ su oooserver -c /opt/openoffice.org3/program/soffice.bin
-headless -nofirststartwizard -nologo -norestore -invisible
-accept=socket,host=localhost,port=2002;urp;StarOffice.Service
>/dev/null 2>&1 &
500  19433  0.0  0.2   4484  1040 ?Ss   10:46   0:00  |
 \_ bash -c  /opt/openoffice.org3/program/soffice.bin
-headless -nofirststartwizard -nologo -norestore -invisible
-accept=socket,host=localhost,port=2002;urp;StarOffice.Service
>/dev/null 2>&1 &
500  19434  6.4  5.0 100492 22520 ?Sl   10:46   0:00  |
 \_ /opt/openoffice.org3/program/soffice.bin -headless
-nofirststartwizard -nologo -norestore -invisible
-accept=socket,host=localhost,port=2002


Problem is that it fails at listening on port 2002 and it never
creates  pid file:

ls -ld /var/run/ooo-headless/
drwxr-xr-x 2 oooserver oooserver 4096 Jul 30 15:07 /var/run/ooo-headless/

Please could you help me to root as non-root user?

Thanks in advance!

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Problem with Tomcat

[Sergio Belkin]

reClassLoader.java:124)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:260)
at java.net.URLClassLoader.access$000(URLClassLoader.java:56)
at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2427)
at java.lang.Class.privateGetPublicMethods(Class.java:2547)
at java.lang.Class.getMethods(Class.java:1410)
at 
org.apache.tomcat.util.IntrospectionUtils.findMethods(IntrospectionUtils.java:812)
at 
org.apache.tomcat.util.IntrospectionUtils.setProperty(IntrospectionUtils.java:268)
at 
org.apache.catalina.startup.SetAllPropertiesRule.begin(SetAllPropertiesRule.java:59)
at 
org.apache.tomcat.util.digester.Digester.startElement(Digester.java:1276)
at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown 
Source)
at 
org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown
Source)
at 
org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
Source)
at 
org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown
Source)
at 
org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown
Source)
at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
at org.apache.xerces.parsers.XMLParser.parse(Unknown Source)
at org.apache.xerces.parsers.AbstractSAXParser.parse(Unknown Source)
at org.apache.xerces.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown 
Source)
at org.apache.tomcat.util.digester.Digester.parse(Digester.java:1562)
at org.apache.catalina.startup.Catalina.load(Catalina.java:490)
at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
... 6 more
Caused by: java.lang.ClassNotFoundException:
javax.servlet.http.HttpServletRequest
at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
... 38 more

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Force to install 64 bit packages only

[Sergio Belkin]

2008/12/16 Marco Benton :
> Sergio Belkin wrote:
>> How to configure yum for install only 64 bit packages?
>>
>> thanks in advance
>>
>
> Just thought I throw in that an "official" Sun Java 64bit browser plugin
> is now available.
>

Thanks for all answers

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] IBM Type 8795-1ux LTO-3

[Sergio Belkin]

I have an LTO-3 as described in the subject. I've installed lin_tape
and lin_taped RPMs for RHEL 5 but still it doesn't work.

/var/log/lin_tape.trace has:


/dev/IBMtape opened.
lin_taped  Tue Dec 16 15:53:18 2008
   Failed to detect any tape drives.
lin_taped  Tue Dec 16 15:53:18 2008
   Failed to detect any changer devices.
IBMtapeDevDriver  Tue Dec 16 15:53:18 2008
   lin_tape_add_class_device() entry
   lin_tape_add_class_device() entry
   lin_tape_add_class_device() entry
   lin_tape_add_class_device() entry



How can I solve it?

Thanks in advance
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Force to install 64 bit packages only

[Sergio Belkin]

How to configure yum for install only 64 bit packages?

thanks in advance

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT: is parted reliable?

[Sergio Belkin]

2008/10/15 Karanbir Singh <[EMAIL PROTECTED]>:
> David Mackintosh wrote:
>>
>> How off-topic is it to ask precisely what is on-topic for this list
>> if questions and discussions of the included components belong on the
>> support mechanisms for those individual parts, and the rest (ie anaconda
>> and friends) probably belongs in the upstream vendor's forums?
>
> A bit of common sense comes in handy. Talking about something that the
> developers of a component need to weight in on is definitely best suited to
> the upstream lists for the component. If you hit specific issues with the
> implementation on CentOS, thats different.
>
> Random drive by surveys, and request for comments on a blog posts etc are
> definitely a waste of time for *this* list.
>
> --

Karanbir, OK, you're right, although I'd be more flexible, the subject
was prefixed with an "OT:". I didn't ask what do you prefer to be
president of USA if Obama or McCain, neither I was offering a way of
improving sexual power :)

But again, if you put the rules in that way, ok you're right. Sorry
for annoyances.


-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] OT: is parted reliable?

[Sergio Belkin]

Hi, I've read on LPI Linux Certification (Ed O'Reilly)  in a nutshell
the following thing:

"parted, unfortunately, has been known to corrupt partition tables and
ruin filesystem."

What do you think about it?

Greets!

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Half-OT: Modify several ldap entries

[Sergio Belkin]

2008/10/2 Ralph Angenendt <[EMAIL PROTECTED]>:
> Sergio Belkin wrote:
>> Hi,
>>
>> I want to fix several entries of mail attribute mail that have an
>> error something like this:
>>
>> [EMAIL PROTECTED]
>> [EMAIL PROTECTED]
>> [EMAIL PROTECTED]
>>
>> and so on.
>>
>> I want to to change them to:
>>
>> [EMAIL PROTECTED]
>> [EMAIL PROTECTED]
>> [EMAIL PROTECTED]
>>
>> How can I perform it in one (or at least few) steps?
>
> Write a correct ldif file and use ldapmodify to make modifcations. See
> the ldapmodify manual page for examples on how to use that.
>
> Cheers,
>
> Ralph
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

Thanks, I know about ldapmodify, but I wonder if someone knows other
way yo do that,

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Half-OT: Modify several ldap entries

[Sergio Belkin]

Hi,

I want to fix several entries of mail attribute mail that have an
error something like this:

[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]

and so on.

I want to to change them to:

[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]

(Delete asterisks)

How can I perform it in one (or at least few) steps?

thanks in advance!


-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] shutdown and boot on Xen

[Sergio Belkin]

Hi,

I am using xen-3.0.3-41.el5 on Centos 5 with 2.6.18-53.1.21.el5xen
kernel. I'd like to:

1) When Dom0 shutdown, DomU's do the same.
2) When Dom0 boots. DomU's do the same.

Is that possible?

Thanks in advance!
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Proxy with no cache

[Sergio Belkin]

Hi,
I'd want to install a proxy server but  I no need cache, what software
do you recommend me?

thanks in advance!

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Cyrus + Ldap...

[Sergio Belkin]

Hi,

I have a server running with Centos 5.1  and:

Cyrus: Lan POP and IMAP server  both with SSL and plain and login mechanisms

LDAP with SSL + SASL

User passwords in LDAP are encrypted.

Everything works fine. But I'd want to reduce overhead due SSL and
change to Cyrus with md5 mechanism (or another nonplain mechanism) Can
I do that? Please bear in mind, that I don't want to use
non-encrypyted passwords on LDAP.

Thanks in advance!

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Boot from iso file (xen)

[Sergio Belkin]

Hi,

I don't remember how to boot from iso file. My current config file is:

name = "devel"
uuid = "4223e2e8-a3a7-91a7-aabf-e7b9f6f8a4a8"
maxmem = 256
memory = 256
vcpus = 1
boot= "d"
on_poweroff = "destroy"
on_reboot = "restart"
on_crash = "restart"
vfb = [ "type=vnc,vncunused=1,keymap=en-us" ]
disk = [ "phy:/dev/xen/devel,xvda,w", 'file:/tmp/mindi.iso,hdc:cdrom,r' ]
vif = [ "mac=00:16:3e:19:63:7f,bridge=xenbr0" ]
cdrom = "/tmp/mindi.iso"

EOF

Please, could you help me about it? I use Centos 5 + xen-3.0.3-41.el5_1.6.

Thanks in advance!!
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problem with mod_proxy_ajp.so

[Sergio Belkin]

2008/7/15 Johnny Hughes <[EMAIL PROTECTED]>:
> Sergio Belkin wrote:
>>
>> Hi,
>>
>> After updating httpd package it outputs an error when restarting
>> apache. Problem was "workarounded" commenting out line 2 of
>> /etc/httpd/modules/mod_proxy_ajp.so
>>
>> Starting httpd: httpd: Syntax error on line 210 of
>> /etc/httpd/conf/httpd.conf: Syntax error on line 3 of
>> /etc/httpd/conf.d/proxy_ajp.conf: Cannot load
>> /etc/httpd/modules/mod_proxy_ajp.so into server:
>> /etc/httpd/modules/mod_proxy_ajp.so: undefined symbol: proxy_module.
>>
>
> Have you built any "Non-RPM" apache modules.
>
> Is this an i386 or x86_64 version of CentOS-5 ... and if it is x86_64, do
> you have both versions of apache installed?

It's a x86_64 version of httpd (I have i386 packages too, but all of
apache are x86_64 packages)

Also:

 file /usr/sbin/httpd
/usr/sbin/httpd: ELF 64-bit LSB shared object, AMD x86-64, version 1
(SYSV), for GNU/Linux 2.6.9, stripped

file /usr/lib64/httpd/modules/mod_proxy_ajp.so
/usr/lib64/httpd/modules/mod_proxy_ajp.so: ELF 64-bit LSB shared
object, AMD x86-64, version 1 (SYSV), stripped



>
> I have checked both the i386 and x86_64 versions and they start by default
> with no undefined symbols.
>
>> When I issue /etc/httpd/conf.d/proxy_ajp.conf, it outputs:
>>
>> httpd-2.2.3-11.el5_1.centos.3
>>
>> I am using Centos 5 and and httpd-2.2.3-11.el5_1.centos.3
>>
>> Could you help me to find a better solution?
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>



-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Test - you don't need to read it

[Sergio Belkin]

-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Problem with mod_proxy_ajp.so

[Sergio Belkin]

Hi,

After updating httpd package it outputs an error when restarting
apache. Problem was "workarounded" commenting out line 2 of
/etc/httpd/modules/mod_proxy_ajp.so

Starting httpd: httpd: Syntax error on line 210 of
/etc/httpd/conf/httpd.conf: Syntax error on line 3 of
/etc/httpd/conf.d/proxy_ajp.conf: Cannot load
/etc/httpd/modules/mod_proxy_ajp.so into server:
/etc/httpd/modules/mod_proxy_ajp.so: undefined symbol: proxy_module.

When I issue /etc/httpd/conf.d/proxy_ajp.conf, it outputs:

httpd-2.2.3-11.el5_1.centos.3

I am using Centos 5 and and httpd-2.2.3-11.el5_1.centos.3

Could you help me to find a better solution?

Thanks in advance!
-- 
--
Open Kairos http://www.openkairos.com
Watch More TV http://sebelk.blogspot.com
Sergio Belkin -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos