Re: [CentOS] how to move forward/undo/revert/fix re: a failed CentOS 5.5 to SL 5.5 migration ... [SOLVED?]
Larry Vaden ha scritto: AFAIK, that's the status of the clones at this time. Still unexplained is why 'host www.yahoo.com 208.67.220.220' and 'host www.yahoo.com 8.8.8.8' got completely different answers. For what I know OpenDNS (208.67.222.222, 208.67.220.220) does some more caching and puts on play some more distribution algorithms on it's own, that's why it doesn't give the same answers that other dns do. I remember there where issues also about www.google.com not giving the official google server but their own cache. Regards Lorenzo ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] limiting yum url question
Xinhuan Zheng wrote on Tue, 1 Feb 2011 14:33:17 -0500: That's what I thought. Is there a good resource that I can take a look for how to setting up a local repository server? The wiki on centos.org explains that if you want to setup your own repository with your own packages. If you just want to mirror CentOS for your network it's much easier. Just rsync down what you need and provide that structure via http or ftp, and change the repo file accordingly. That's all. Kai ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
looking for smarter questions on this list. This list is not a where is list. Thanks. Kai ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
On 02/02/2011 07:08 AM, Hal Davison wrote: Looking for glibc++6.2 and higher. Are you sure you have your version numbers right ? glibc lives in the 2.x version-space these days ( and has for many years now ) - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ~/.forward file?
On Tue, Feb 1, 2011 at 11:03 PM, Spook ZA spoo...@gmail.com wrote: On 2 February 2011 05:41, Joseph L. Casale jcas...@activenetwerx.com wrote: Any idea what it might be for? Procmail... If a mail message gets sent to the user with a .forward file, the message will be forwarded to all email addresses in the .forward file. Try Google for: unix mail .forward It's also useful for systems installed with sendmail and a non-qualified hostname. Even if you have a smarthost set up in your /etc/mail/sendmail.mc file, for such a host, the mail would still wind up delivered locally. A .forward is a very useful way for a user to set that mail to get passed along somewhere else. Using a .forward is also built into the various vacation programs, and it's a good way to set email for a former user to get bounced somewhere else. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
On Wed, Feb 2, 2011 at 2:08 AM, Hal Davison h...@faams.net wrote: Greetings ALL... V 5.5 Gnome. Desktop Looking for glibc++6.2 and higher. When looking for RPM's from CentOS and similar distributions, or for RPM's that can be ported to CentOS and RHEL, http://rpm.pbone.net/ is your dear, dar friend. That said, doing an in-place update to glibc-2.6.x is *begging* for pain. CentOS 6 will have glibc-2.12.x, and a set of compatibility libraries so older CentOS 5/RHEL 5 tools will work. And if you're in a rush, you could work with Fedora, which is noticeably ahead of CentOS and RHEL on most packages, but is not as industry tested and stable. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Significant speedup of package building with mock from EPEL for RHEL 6, should definitely go in CentOS 5
The speedups in building RPM's with mock from the EPEL packages for RHEL 6 are *profound*, especially if your environment is like mine and you have thousands of user id's. The issue seems to be the handling of /var/log/lastlog and similar files, which are otherwise quite large and take significant time to compress and uncompress when laying out new mock environments. Karabhir, what are the odds of encouragng a switch to http://mirrors.kernel.org/fedora-epel/6/mock-1.1.8-1.el6.src.rpm, and backporting it to centos/5/5/extras ? It's working very well for me, and I think it would be a helpful improvement in RPM building for both the CentOs 5.6 and CentOS 6 efforts. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
On Wednesday, February 02, 2011 01:52:37 pm Nico Kadel-Garcia wrote: On Wed, Feb 2, 2011 at 2:08 AM, Hal Davison h...@faams.net wrote: Greetings ALL... V 5.5 Gnome. Desktop Looking for glibc++6.2 and higher. The signal to noise ratio of this list is getting quite horrible. From the 2nd post (different thread) by the OP it's quite obvious he's looking for a package containing the file libstdc++-libc6.2-2.so.3. He already got an answer to that compat-libstdc++-296-2.96-138. What he didn't get was how you find that kind of information. When looking for RPM's from CentOS and similar distributions, or for RPM's that can be ported to CentOS and RHEL, http://rpm.pbone.net/ is your dear, dar friend. pbone.net is certainly _NOT_ the way to find a package for your CentOS-5. yum search/provides on the system itself is the way to go. # yum provides libstdc++-libc6.2-2.so.3 ... compat-libstdc++-296-2.96-138.i386 : Compatibility 2.96-RH standard C++ : libraries Repo: base Matched from: Other : libstdc++-libc6.2-2.so.3 /Peter -- -= Peter Kjellström -= National Supercomputer Centre signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Significant speedup of package building with mock from EPEL for RHEL 6, should definitely go in CentOS 5
On 02/02/2011 01:01 PM, Nico Kadel-Garcia wrote: Karabhir, what are the odds of encouragng a switch to http://mirrors.kernel.org/fedora-epel/6/mock-1.1.8-1.el6.src.rpm, and backporting it to centos/5/5/extras ? It's working very well for me, and I think it would be a helpful improvement in RPM building for both the CentOs 5.6 and CentOS 6 efforts. Performance isnt really a problem we need to solve on the centos-buildsys side of things; however keeping things consistent is an issue. Because of the way things have changed in mock = 0.8 I'm hesitant to change what we have in production for c3/4/5 since we know it works and it works across the entire distro tree from 4.0 to 5.6 So having the choice of the newer mock in epel isnt a bad thing as such, its just that the newer ver of mock isnt what is used internally within centos. Having said that, for centos6 we will almost certainly end up with a newer mock, at the moment its 1.1.3 ( slightly modified and has a few patches from 1.1.3+ ); but once we are ready to release we can bring in a newer mock, do a few tests and have that in c6/extras. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
http://www.catb.org/~esr/faqs/smart-questions.html -- Drew Nothing in life is to be feared. It is only to be understood. --Marie Curie ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
http://www.catb.org/~esr/faqs/smart-questions.html -- Drew Nothing in life is to be feared. It is only to be understood. --Marie Curie ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] how to move forward/undo/revert/fix re: a failed CentOS 5.5 to SL 5.5 migration ... [SOLVED?]
On Wed, Feb 2, 2011 at 3:04 AM, Lorenzo Quatrini lorenzo.quatr...@gmail.com wrote: Larry Vaden ha scritto: AFAIK, that's the status of the clones at this time. Still unexplained is why 'host www.yahoo.com 208.67.220.220' and 'host www.yahoo.com 8.8.8.8' got completely different answers. For what I know OpenDNS (208.67.222.222, 208.67.220.220) does some more caching and puts on play some more distribution algorithms on it's own, that's why it doesn't give the same answers that other dns do. I remember there where issues also about www.google.com not giving the official google server but their own cache. That doesn't explain the observed behavior of dig/host/nslookup. Nor does IMHO the official release notes, which are quoted again for focus: * The host/dig/nslookup utilities queried only servers from resolv.conf. With this update, the utilities query the servers specified on command line instead of in resolv.conf and the issue is resolved. ( BZ#561299) The official release notes imply that the argument on the command line was ignored and the contents of /etc/resolv.conf were used instead which should lead to consistent results between the two invocations. That wouldn't cause the observed behavior; the practice of backporting may be at play here. I'll check with the author's release notes for when/if this has ever been a feature in the stock isc.org code as well as BZ and report back to the list. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Lost root access
So on a virtual server the root password was no longer working (as in I couldn't ssh in anymore). Only I and one other know it and neither of us have changed it. No other account had the correct privileges to correct this so I'm wondering, if I had mounted that vdi as a secondary device on another VM, browsed the file system and delete /etc/shadow would this have wiped all users passwords meaning I could regain access again? (This is past tense because its sorted now but I'm curious if this would have worked? And if not, what could I have done?). -- Regards, James. http://www.jamesbensley.co.cc/ There are 10 kinds of people in the world; Those who understand Vigesimal, and J others...? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lost root access
On 02/02/2011 15:44, James Bensley wrote: So on a virtual server the root password was no longer working (as in I couldn't ssh in anymore). Only I and one other know it and neither of us have changed it. No other account had the correct privileges to correct this so I'm wondering, if I had mounted that vdi as a secondary device on another VM, browsed the file system and delete /etc/shadow would this have wiped all users passwords meaning I could regain access again? (This is past tense because its sorted now but I'm curious if this would have worked? And if not, what could I have done?). If you can edit /etc/shadow then you could have changed roots password. Depending on your access (console required) you could have booted to single-user mode and edited /etc/shadow that way. I would not recommend deleting the /etc/shadow file at all... don't think that would gain you access. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME Cryptographic Signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lost root access
At Wed, 2 Feb 2011 14:44:01 + CentOS mailing list centos@centos.org wrote: So on a virtual server the root password was no longer working (as in I couldn't ssh in anymore). Only I and one other know it and neither of us have changed it. No other account had the correct privileges to correct this so I'm wondering, if I had mounted that vdi as a secondary device on another VM, browsed the file system and delete /etc/shadow would this have wiped all users passwords meaning I could regain access again? No, it would not have. It would have resulted in NOONE having access. What you could have done is chroot to the secondary device on the other VM and then simply reset the root password with the passwd command. (This is past tense because its sorted now but I'm curious if this would have worked? And if not, what could I have done?). -- Robert Heller -- 978-544-6933 / hel...@deepsoft.com Deepwoods Software-- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lost root access
On Wed, Feb 2, 2011 at 9:44 AM, James Bensley jwbens...@gmail.com wrote: So on a virtual server the root password was no longer working (as in I couldn't ssh in anymore). Only I and one other know it and neither of us have changed it. No other account had the correct privileges to correct this so I'm wondering, if I had mounted that vdi as a secondary device on another VM, browsed the file system and delete /etc/shadow would this have wiped all users passwords meaning I could regain access again? :) Nope... would lock everyone out!! You can change the shadow to a known hash and that should work. But going through that exercise, though interesting, would not be the most direct method. Had you changed the default expiration setttings on the system? You can run the chage command to see the settings on different users. Also you may want to check the faillog. Is this system Internet accessible? I'd be very leery of trusting that system until you determine what caused it to lock out. Anyhoo, coincidentally I was thinking of ways to change a root password on a 24/7 system. Some of the things I tested was to overwrite some of the cron scripts that I had access to, create a suid binary on a trusted and mounted fs (i.e., no root squash, noexec not enabled), exec a shell from with a sudo command that had shell out capability, etc.. (This is past tense because its sorted now but I'm curious if this would have worked? And if not, what could I have done?). -- Regards, James. http://www.jamesbensley.co.cc/ There are 10 kinds of people in the world; Those who understand Vigesimal, and J others...? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Setting up persistent LUNs
Thank you, Alexander! I am not sure why it said /b/sde1 because I copy/pasted it... Thank you again, Asya On Feb 1, 2011, at 5:39 PM, Alexander Dalloz wrote: Am 01.02.2011 18:38, schrieb Dvorkin, Asya: Hello everyone, I am trying to setup persistent LUNs and having problems. I've been following instructions I found on the web and they refer to editing /etc/scsi_id.config file and adding options=-g line there. After doing so, I should be able to run scsi_id -g -s /dev/sd* and get proper results. I've modified file /etc/scsi_id.config appropriately: [root@psrwjmsafs1 etc]# grep options /etc/scsi_id.config vendor=ATA,options=-p 0x80 options=-g but whenever I run scsi_id -g -s /b/sde1 - i get nothing. [root@psrwjmsafs1 etc]# df -k |grep sde /dev/sde11754602560 93383616 1572090328 6% /test How come? Am i missing something? Thank you! Asya The proper scsi_id query would be scsi_id -g -s /block/sde Alexander ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 alpha testers
On Tue, 1 Feb 2011 21:24:34 +0100 valent.turko...@gmail.com valent.turko...@gmail.com wrote: Hi guys, who do I need to contact to become CentOS tester? When is first alpha due for release and testing? From what I've been able to gather from the list, as I'm not part of the dev testing team; there won't be an 'alpha' or 'beta', there will just be a final release 'when it's ready'. We aren't sure when that will be, but it will probably be within a few weeks after CentOS 5.6 is released. CentOS 5.6 will likewise be released 'when it's ready' and we don't know for sure when that will be, either. I would suspect that will be by the end of the month (Feb 2011) but I'm really only guessing. Cia W ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
On 2/2/2011 6:31 AM, Kai Schaetzl wrote: looking for smarter questions on this list. This list is not a where is list. Thanks. Kai ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Could you direct a member of 'Thev Great Unwashed' to the Where Is list...please... --Hal. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 alpha testers
On 02/02/2011 04:00 PM, Cia Watson wrote: From what I've been able to gather from the list, as I'm not part of the dev testing team; there won't be an 'alpha' or 'beta', there will just be a final release 'when it's ready'. We aren't sure when that will be, but it will probably be within a few weeks after CentOS 5.6 is Thats spot on. released. CentOS 5.6 will likewise be released 'when it's ready' and we don't know for sure when that will be, either. I would suspect that will be by the end of the month (Feb 2011) but I'm really only guessing. Just an update on that: I did the first 5.6 installs yesterday, there are a few issues that still need resolving but i'd say this weekend the distro should mostly be handed over to the QA guys, so we should see a release by or before mid Feb. Ofcourse, this is based on no one finding a 'blocker' issue in the process. So salt accordingly. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL-6 vs. CentOS-5.5 (was: Static assignment of, SCSI device names?)
On Wednesday, February 02, 2011 02:06:15 am Chuck Munro wrote: The real key is to carefully label each SATA cable and its associated drive. Then the little mapping script can be used to identify the faulty drive which mdadm reports by its device name. It just occurred to me that whenever mdadm sends an email report, it can also run a script which groks out the path info and puts it in the email message. Problem solved :-) Ok, perhaps I'm dense, but, if this is not a hot-swap bay you're talking about, wouldn't it be easier to have the drive's serial number (or other identifier found on the label) pulled into the e-mail, and compare with the label physically found on the drive, since you're going to have to open the case anyway? Using something like: hdparm -I $DEVICE | grep Serial.Number works here (the regexp Serial.Number matches the string Serial Number without requiring the double quotes). Use whatever $DEVICE you need to use, as long as it's on a controller compatible with hdparm usage. I have seen cases with a different Linux distribution where the actual module load order was nondeterministic (modules loaded in parallel); while upstream and the CentOS rebuild try to make things more deterministic, wouldn't it be safer to get a really unique, externally visible identifier from the drive? If the drive has failed to the degree that it won't respond to the query, then query all the good drives in the array for their serial numbers, and use a process of elimination. This, IMO, is more robust than relying on the drive detect order to remain deterministic. If in a hotswap or coldswap bay, do some data access to the array, and see which LED's don't blink; that should correspond to the failed drive. If the bay has secondary LED's, you might be able to blink those, too. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 alpha testers
From what I've been able to gather from the list, as I'm not part of the dev testing team; there won't be an 'alpha' or 'beta', there will just be a final release 'when it's ready'. We aren't sure when that will be, but it will probably be within a few weeks after CentOS 5.6 is Thats spot on. released. CentOS 5.6 will likewise be released 'when it's ready' and we don't know for sure when that will be, either. I would suspect that will be by the end of the month (Feb 2011) but I'm really only guessing. Just an update on that: I did the first 5.6 installs yesterday, there are a few issues that still need resolving but i'd say this weekend the distro should mostly be handed over to the QA guys, so we should see a release by or before mid Feb. Ofcourse, this is based on no one finding a 'blocker' issue in the process. So salt accordingly. I would rather get it when its ready then get it when its not ready... ;-) I am excited about CentOS 6.x though. Aren't there supposed to be some neat new features etc for virtualization and cloud computing? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 alpha testers
On 02/02/2011 04:20 PM, Matt wrote: I am excited about CentOS 6.x though. Aren't there supposed to be some neat new features etc for virtualization and cloud computing? this could be the start of a dangerously long thread nonrelated to OP. Why not start a new thread with 'CentOS-6 interesting upcoming features' :) - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] yum confusion...
Hi, I just installed a new server and my final yum update fails... I have rpmforge and rpmforge-extras, but with yum priorities... # grep enabled /etc/yum/pluginconf.d/priorities.conf enabled = 1 # cat /etc/yum.repos.d/CentOS-Base.repo | grep priority\|^\[ [base] priority=1 [updates] priority=1 ... # yum clean all # yum list | grep tcp_wrappers\|nfs-utils nfs-utils.x86_64 1:1.0.9-47.el5_5 installed nfs-utils-lib.x86_64 1.0.8-7.6.el5 installed tcp_wrappers.i386 7.6-40.7.el5 installed tcp_wrappers.x86_647.6-40.7.el5 installed nfs-utils-lib.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.x86_64 1.0.8-7.6.el5 base tcp_wrappers-devel.x86_64 7.6-57.el5.rfx rpmforge-extras tcp_wrappers-libs.x86_64 7.6-57.el5.rfx rpmforge-extras # yum update ... 132 packages excluded due to repository priority protections Setting up Update Process Resolving Dependencies -- Running transaction check -- Processing Dependency: tcp_wrappers for package: nfs-utils -- Processing Dependency: tcp_wrappers for package: nfs-utils --- Package tcp_wrappers-devel.x86_64 0:7.6-57.el5.rfx set to be updated --- Package tcp_wrappers-libs.x86_64 0:7.6-57.el5.rfx set to be updated -- Finished Dependency Resolution 1:nfs-utils-1.0.9-47.el5_5.x86_64 from installed has depsolving problems -- Missing Dependency: tcp_wrappers is needed by package 1:nfs-utils-1.0.9-47.el5_5.x86_64 (installed) Error: Missing Dependency: tcp_wrappers is needed by package 1:nfs-utils-1.0.9-47.el5_5.x86_64 (installed) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest I removed tcp_wrappers.i386 # yum list | grep tcp_wrappers\|nfs-utils nfs-utils.x86_64 1:1.0.9-47.el5_5installed nfs-utils-lib.x86_64 1.0.8-7.6.el5 installed tcp_wrappers.x86_647.6-40.7.el5installed nfs-utils-lib.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.x86_64 1.0.8-7.6.el5 base tcp_wrappers.i386 7.6-40.7.el5base tcp_wrappers-devel.x86_64 7.6-57.el5.rfx rpmforge-extras tcp_wrappers-libs.x86_64 7.6-57.el5.rfx rpmforge-extras # yum update ... 132 packages excluded due to repository priority protections Setting up Update Process Resolving Dependencies -- Running transaction check -- Processing Dependency: tcp_wrappers for package: nfs-utils --- Package tcp_wrappers-devel.x86_64 0:7.6-57.el5.rfx set to be updated --- Package tcp_wrappers-libs.x86_64 0:7.6-57.el5.rfx set to be updated -- Running transaction check --- Package tcp_wrappers.i386 0:7.6-40.7.el5 set to be updated -- Finished Dependency Resolution Dependencies Resolved Package ArchVersion RepositorySize Installing: tcp_wrappers-devel x86_64 7.6-57.el5.rfx rpmforge-extras 8.7 k replacing tcp_wrappers.x86_64 7.6-40.7.el5 tcp_wrappers-libs x86_64 7.6-57.el5.rfx rpmforge-extras 88 k replacing tcp_wrappers.x86_64 7.6-40.7.el5 Installing for dependencies: tcp_wrappersi3867.6-40.7.el5 base 109 k nfs-utils insists on reinstalling tcp_wrappers.i386, and priorities apparently does not protect the CentOS packages... If I disable rpmforge, I get No Packages marked for Update, but still have 7 packages excluded due to repository priority protections If I also disable priorities, I just get No Packages marked for Update # ll /etc/yum.repos.d/ total 28 -rw-r--r-- 1 root root 2412 Jan 27 14:38 CentOS-Base.repo -rw-r--r-- 1 root root 626 Apr 26 2010 CentOS-Media.repo -rw-r--r-- 1 root root 739 Nov 13 04:55 mirrors-rpmforge -rw-r--r-- 1 root root 717 Nov 13 04:55 mirrors-rpmforge-extras -rw-r--r-- 1 root root 728 Nov 13 04:55 mirrors-rpmforge-testing -rw-r--r-- 1 root root 1113 Feb 2 17:15 rpmforge.repo Any idea what is going on or how I can clean up this mess...? Do you have to block all i386 packages? Thx, JD ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 new virtualization features?
I am excited about CentOS 6.x though. Aren't there supposed to be some neat new features etc for virtualization and cloud computing? this could be the start of a dangerously long thread nonrelated to OP. Why not start a new thread with 'CentOS-6 interesting upcoming features' :) Your right. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lost root access
Kwan Lowe wrote: On Wed, Feb 2, 2011 at 9:44 AM, James Bensley jwbens...@gmail.com wrote: So on a virtual server the root password was no longer working (as in I couldn't ssh in anymore). Only I and one other know it and neither of us have changed it. No other account had the correct privileges to snip Anyhoo, coincidentally I was thinking of ways to change a root password on a 24/7 system. Some of the things I tested was to overwrite some of the cron scripts that I had access to, create a suid binary on a trusted and mounted fs (i.e., no root squash, noexec not enabled), exec a shell from with a sudo command that had shell out capability, etc.. snip Well, if you could get on the system at all, and had sudo privileges, no problem. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 new virtualization features?
On 02/02/2011 04:33 PM, Matt wrote: I am excited about CentOS 6.x though. Aren't there supposed to be some neat new features etc for virtualization and cloud computing? There is a distinct shift towards KVM as the virt-platform of choice, but I still feel the management tools around it are not quite 'there' as yet. Having said that, its also mportant to point out that Xen isnt going away. Its just that you would need to use CentOS-5 to host the dom0, and you can still run DomU's on CentOS-6. So atleast some part of the Xen is going away panic is unfounded. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 new virtualization features?
On Wed, Feb 2, 2011 at 6:33 PM, Matt lm7...@gmail.com wrote: I am excited about CentOS 6.x though. Aren't there supposed to be some neat new features etc for virtualization and cloud computing? this could be the start of a dangerously long thread nonrelated to OP. Why not start a new thread with 'CentOS-6 interesting upcoming features' :) Your right. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Yes, it's called KVM -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 new virtualization features?
Spot on KB, I like KVM but the management tools are just not quite there, unless your a big installation and can run RHEV on a windoze server. I know they are moving towards an open source RHEV implementation but it appears that it will take awhile to get there. I still plan to use KVM but will just manage with the cli or egads virt-manager for now for my small installations. There is a distinct shift towards KVM as the virt-platform of choice, but I still feel the management tools around it are not quite 'there' as yet. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Was, Re: CentOS 6.0 alpha testers, is features (actually syslogd)
Karanbir Singh wrote: On 02/02/2011 04:20 PM, Matt wrote: I am excited about CentOS 6.x though. Aren't there supposed to be some neat new features etc for virtualization and cloud computing? this could be the start of a dangerously long thread nonrelated to OP. Why not start a new thread with 'CentOS-6 interesting upcoming features' :) Ok, here's one: I'm having a problem with syslogd - due to the upper heirarchy, we've started logging our (*yuck*) Windows servers to our centralized logging server, and so far, the other admin hasn't managed to make WinBlows less than maximum verbosity. I know I can do filtering with syslog-ng and rsyslog, but 5.5 has syslogd. Now, I *thought* I heard one or the other of those other two was coming in, but thought it would be in CentOS 5.x; can anyone tell me a) if the change is coming, b) which of the two it'll be, and c) will it be in 5.6 or 6? mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 6.0 new virtualization features?
On Wed, Feb 2, 2011 at 8:45 AM, Tom Bishop bisho...@gmail.com wrote: Spot on KB, I like KVM but the management tools are just not quite there, unless your a big installation and can run RHEV on a windoze server. I know they are moving towards an open source RHEV implementation but it appears that it will take awhile to get there. I still plan to use KVM but will just manage with the cli or egads virt-manager for now for my small installations. There is a distinct shift towards KVM as the virt-platform of choice, but I still feel the management tools around it are not quite 'there' as yet. Someone who is a Former Red Hat Technical Support Engineer started helping in the CentOS forums yesterday. This post by him may be relevant to the current thread: http://www.centos.org/modules/newbb/viewtopic.php?viewmode=threadtopic_id=29961forum=37post_id=124965 Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum confusion...
John Doe wrote: Hi, I just installed a new server and my final yum update fails... I have rpmforge and rpmforge-extras, but with yum priorities... # grep enabled /etc/yum/pluginconf.d/priorities.conf enabled = 1 # cat /etc/yum.repos.d/CentOS-Base.repo | grep priority\|^\[ [base] priority=1 [updates] priority=1 Du you have a priority=XX in rpmforge.repo ? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum confusion...
On 02/02/2011 04:29 PM, John Doe wrote: # yum list | grep tcp_wrappers\|nfs-utils nfs-utils.x86_64 1:1.0.9-47.el5_5 installed nfs-utils-lib.x86_64 1.0.8-7.6.el5 installed tcp_wrappers.i386 7.6-40.7.el5 installed tcp_wrappers.x86_647.6-40.7.el5 installed nfs-utils-lib.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.x86_64 1.0.8-7.6.el5 base tcp_wrappers-devel.x86_64 7.6-57.el5.rfx rpmforge-extras tcp_wrappers-libs.x86_64 7.6-57.el5.rfx rpmforge-extras ... Any idea what is going on or how I can clean up this mess...? Do you have to block all i386 packages? I can guess that the rcp_weappers-libs and -devel are not being masked. Try running yum with a -d7 and see if it clears up what is going on - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
Hello CentOS Community Members, What is RH's be-all end-all justification for staying with an ancient code base for such important programs as BIND et al? A similar problem (to BZ561299) was first reported five (5) years ago on the isc.org mailing list. Is there any support among the CentOS community for a REPO of current vintage for such important functions as BIND et al? That question is based on the presumption that time is taking us to a more complete and correct implementation of the basic functions like DNS. IOW, is CentOS philosophy of tracking RH so nailed-to-the-wall that it is blasphemy to propose a REPO of current editions of certain very important functions? kind regards/ldv A quote from a long term mentor now at Internet2: It's fundamentally wrong for RedHat to attempt to backport security patches for such a fundamental service. I'd cuss a blue streak about this point, in fact, except that I don't want to trigger the anti-cuss features at Dr. Vaughn's place of employment. === Reported: 2010-02-03 05:32 EST by Duncan (see https://bugzilla.redhat.com/show_bug.cgi?id=561299): Additional info: Works fine in Fedora 4,8,9 and 11, Red Hat Enterprise Linux ES release 4 release 4 (Nahant Update 8) and Red Hat Enterprise Linux Server release 5.1 (Tikanga) Fails in 5.4 and Fedora 10. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On 02/02/2011 05:22 PM, Larry Vaden wrote: What is RH's be-all end-all justification for staying with an ancient code base for such important programs as BIND et al? Did you ask them ? what did they say ? Is there any support among the CentOS community for a REPO of current vintage for such important functions as BIND et al? you mean like the bind97 available in c5-testing right now, that should be in 5.6 soon ? - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
It takes fewer resources to back-port for and support a single suite of software over the lifespan of a major revision than would be needed to fix issues introduced by the major evolution of a large number of packages over the course of a 5-7 year product cycle. -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Larry Vaden Sent: Wednesday, February 02, 2011 9:22 AM To: CentOS mailing list Subject: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)? Hello CentOS Community Members, What is RH's be-all end-all justification for staying with an ancient code base for such important programs as BIND et al? A similar problem (to BZ561299) was first reported five (5) years ago on the isc.org mailing list. Is there any support among the CentOS community for a REPO of current vintage for such important functions as BIND et al? That question is based on the presumption that time is taking us to a more complete and correct implementation of the basic functions like DNS. IOW, is CentOS philosophy of tracking RH so nailed-to-the-wall that it is blasphemy to propose a REPO of current editions of certain very important functions? kind regards/ldv A quote from a long term mentor now at Internet2: It's fundamentally wrong for RedHat to attempt to backport security patches for such a fundamental service. I'd cuss a blue streak about this point, in fact, except that I don't want to trigger the anti-cuss features at Dr. Vaughn's place of employment. === Reported: 2010-02-03 05:32 EST by Duncan (see https://bugzilla.redhat.com/show_bug.cgi?id=561299): Additional info: Works fine in Fedora 4,8,9 and 11, Red Hat Enterprise Linux ES release 4 release 4 (Nahant Update 8) and Red Hat Enterprise Linux Server release 5.1 (Tikanga) Fails in 5.4 and Fedora 10. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] glibc++6.2?
If you have an RPM package with unmet dependencies, the way to install it is: yum localinstall packagename Yum will resolve the dependencies using the available repositories. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On 02/02/2011 09:22 AM, Larry Vaden wrote: What is RH's be-all end-all justification for staying with an ancient code base for such important programs as BIND et al? Directives in the configuration files have changed. Users of RHEL expect to be able to update their systems without anything breaking. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On Wed, Feb 2, 2011 at 11:22 AM, Karanbir Singh mail-li...@karan.org wrote: you mean like the bind97 available in c5-testing right now, that should be in 5.6 soon ? Karanbir, WIth a lot of due respect, no, not exactly, since 9.7.0-P2 (if I'm reading it correctly) was released almost a year ago by isc.org. I was thinking more along the lines of /isc/bind9/9.7.2-P3/, released 2 months ago. Is there that much distrust of the current output of leading authors that we need to wait a long while? kind regards/ldv ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On February 2, 2011 10:02:03 am Larry Vaden wrote: Is there that much distrust of the current output of leading authors that we need to wait a long while? You don't need to wait at all. Build your own packages or install from source. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On 02/02/2011 06:02 PM, Larry Vaden wrote: I was thinking more along the lines of /isc/bind9/9.7.2-P3/, released 2 months ago. If you feel that its the version you need or want, CentOS wont mind if you were to build it and run it yourself. Is there that much distrust of the current output of leading authors that we need to wait a long while? absolutely. Because I dont trust the authors of component XX to be working on every other component also released that is impacted either upstream or downstream in an app stack. Its the reason why policy and site testing happens. Expand that to cover the entire component base of whats in the distro and then see how that would fail so spectacularly. If you want a very small taste of what it can be, I'd suggest running rawhide with nightly yum upgrades. Then try to scale that to multiple machines working with different app stacks. The moment your focus shifts from delivering a service to running code, its game over in the user world. And I do honestly feel that the stabilisation and the expected long life of a nearly -guaranteed- abi/api compliant model in the *EL world makes it a lot easier to retain focus on the service delivery angle.[1] - KB [1]: I say that with a pinch of salt though - EL6 is a tad overdue. A lot of new projects and services need a codebase newer than whats on offer in C5. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On 02/02/2011 06:10 PM, Karanbir Singh wrote: If you feel that its the version you need or want, CentOS wont mind if you were to build it and run it yourself. btw, if you were to go down that route, the CentOSPlus repo would be a great place to host such a package :) One of the best advantages of CentOS is that we're not tied down to the EL codebase in any repo outside the [os] and [updates] - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On Wed, Feb 2, 2011 at 12:10 PM, Karanbir Singh mail-li...@karan.org wrote: [1]: I say that with a pinch of salt though - EL6 is a tad overdue. A lot of new projects and services need a codebase newer than whats on offer in C5. I agree with you 100%+. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On Wed, Feb 2, 2011 at 12:14 PM, Karanbir Singh mail-li...@karan.org wrote: On 02/02/2011 06:10 PM, Karanbir Singh wrote: If you feel that its the version you need or want, CentOS wont mind if you were to build it and run it yourself. btw, if you were to go down that route, the CentOSPlus repo would be a great place to host such a package :) One of the best advantages of CentOS is that we're not tied down to the EL codebase in any repo outside the [os] and [updates] Your approach is a superior approach to others advocating roll your own because if for no other reason most folks' skill sets can not be compared to those who do this every day vs. once a release for the important stuff like BIND et al. In short, not enough GOOD GDP/GNP results from roll your own. Rolling your own is working harder, not smarter. As far as providing current services e.g., I can't recall how long it has been since I attended the first ISC meeting at NANOG to discuss DNSSEC and yet it would surely be interesting to determine how many of the world's DNS servers remain open to exploits solved years ago. Along those lines, I'll let http://ftp.isc.org/isc/bind9/9.7.2-P3/RELEASE-NOTES-BIND-9.7.2-P3.html speak for itself. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On Wed, Feb 2, 2011 at 1:02 PM, Larry Vaden va...@texoma.net wrote: On Wed, Feb 2, 2011 at 11:22 AM, Karanbir Singh mail-li...@karan.org wrote: you mean like the bind97 available in c5-testing right now, that should be in 5.6 soon ? Karanbir, WIth a lot of due respect, no, not exactly, since 9.7.0-P2 (if I'm reading it correctly) was released almost a year ago by isc.org. I was thinking more along the lines of /isc/bind9/9.7.2-P3/, released 2 months ago. Is there that much distrust of the current output of leading authors that we need to wait a long while? kind regards/ldv I appreciate the long roadmap and release schedule. At my work we need to do two to three year forecasts. Budgets may allow infrastructure updates every three or four years. If upgrading to a newer package means breaking backwards compatibility (i.e., it's an upgrade versus an update), we cannot associate the work and resources to a maintenance budget and may need to find other sources of funding. That's the business case... On the technical side, for every application we deploy we need to go through an entire certification process. So updating bind does not mean that we run a few dig queries against the new server, but doing a complete regression test against all applications that rely on bind. This would include revenue generating websites, authentication mechanisms, SSL, NFS mappings, and other apps that require name resolution (and it's surprising how many apps need more than just name/ip). A few months ago there was an Active Directory update. It had repercussions for a CIFS service running on a human resources server. This affected payroll processing. Now we need to find resources to upgrade that application and we cannot use the same budget. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
At Wed, 2 Feb 2011 11:22:12 -0600 CentOS mailing list centos@centos.org wrote: Hello CentOS Community Members, What is RH's be-all end-all justification for staying with an ancient code base for such important programs as BIND et al? A similar problem (to BZ561299) was first reported five (5) years ago on the isc.org mailing list. Is there any support among the CentOS community for a REPO of current vintage for such important functions as BIND et al? That question is based on the presumption that time is taking us to a more complete and correct implementation of the basic functions like DNS. IOW, is CentOS philosophy of tracking RH so nailed-to-the-wall that it is blasphemy to propose a REPO of current editions of certain very important functions? The rpmforge repo has more current releases of some packages. I don't know is bind is one of them. There is also rpmfusion with newer versions as well. The centosplus repo has newer versions of some packages. Again I don't know if bind is one of them. Nothing is really stopping you from fetching the Fedora src RPMs and rebuilding them under CentOS. Something like bind would probably build cleanly with little or no messing with the spec file or patching the code, etc., since it probably does not depend on a complex collection of packages (eg like GTK+ or something like that). kind regards/ldv A quote from a long term mentor now at Internet2: It's fundamentally wrong for RedHat to attempt to backport security patches for such a fundamental service. I'd cuss a blue streak about this point, in fact, except that I don't want to trigger the anti-cuss features at Dr. Vaughn's place of employment. === Reported: 2010-02-03 05:32 EST by Duncan (see https://bugzilla.redhat.com/show_bug.cgi?id=561299): Additional info: Works fine in Fedora 4,8,9 and 11, Red Hat Enterprise Linux ES release 4 release 4 (Nahant Update 8) and Red Hat Enterprise Linux Server release 5.1 (Tikanga) Fails in 5.4 and Fedora 10. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Robert Heller -- 978-544-6933 / hel...@deepsoft.com Deepwoods Software-- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Squid and SELinux
Thks,
It's clear now for me, i have a lot of figths with SELinux, but i need
to learn more, so i don't want deactivate it, allow squit to search
home_root_t seems to be good, so i try to make the correct thinks and
prepare a partition outside the home dir for squid.
A lot of thks for your fast reply.
Regards.
El 01/02/11 21:30, Daniel J Walsh escribió:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/31/2011 08:29 PM, Tsuyoshi Nagata wrote:
Hi Mrcos
(2011/02/01 0:31), Marcos Lois Bermúdez wrote:
semanage fcontext -a -t squid_cache_t '/home/squid(/.*)?'
i check the files and are in the good context:
drwxr-xr-x squid squid user_u:object_r:squid_cache_t.
** drwxr-xr-x squid squid system_u:object_r:home_root_t ..
drwxr-x--- squid squid user_u:object_r:squid_cache_t00
drwxr-x--- squid squid user_u:object_r:squid_cache_t01
...
But when i want start it i get this:
type=AVC msg=audit(1296442326.932:739661): avc: denied { search } for
pid=30924 comm=squid name=/ dev=sda3 ino=2
scontext=user_u:system_r:squid_t:s0
tcontext=system_u:object_r:home_root_t:s0 tclass=dir
[root@localhost ~]# audit2allow -m squid
type=AVC msg=audit(1296442326.932:739661): avc: denied { search } for
pid=30924 comm=squid name=/ dev=sda3 ino=2
scontext=user_u:system_r:squid_t:s0
tcontext=system_u:object_r:home_root_t:s0 tclass=dir
Ctl-D
module squid 1.0;
require {
type home_root_t;
type squid_t;
class dir search;
}
#= squid_t ==
allow squid_t home_root_t:dir search;
[root@localhost ~]#
It seems the directory '/home/squid' has 'home_root_t' type.
Change it to 'squid_cache_t'
# chcon -u system_u -r object_r -t squid_cache_t /home/squid
--Tsuyoshi.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Do not change the context of /home to anything other the home_root_t.
If you changed the label then you probably would blow up confined
applications that need to access the homedirs and would not be allowed
to search through squid_cache_t.
The problem you are having is you setup the squid_cache_t directory
under a directory that squid is not allowed to search in. The easiest
thing to do is to add a rule that allows squid_t to search home_root_t
# grep home_root_t /var/log/audit/audit.log | audit2allow -M mysquid
# semodule -i mysquid.pp
Another option would be to move the directory to / and then squid_t
would be able to read it.
semanage fcontext -a -t squid_cache_t '/home/squid(/.*)?'
What the correct way to apply the label. Then run restorecon. Using
chcon should only be used for testing, since it is not permanent.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk1IbWAACgkQrlYvE4MpobNqrACeK+nSf0h8h0II4UpbPipOI62o
RhQAoJMfxjOOVOx7qzS7rp0PwAWd05n3
=Q6ax
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] how to move forward/undo/revert/fix re: a failed CentOS 5.5 to SL 5.5 migration ... [SOLVED?]
On Wednesday, February 02, 2011 09:31:43 am Larry Vaden wrote: * The host/dig/nslookup utilities queried only servers from resolv.conf. With this update, the utilities query the servers specified on command line instead of in resolv.conf and the issue is resolved. ( BZ#561299) The official release notes imply that the argument on the command line was ignored and the contents of /etc/resolv.conf were used instead which should lead to consistent results between the two invocations. I think the release notes do not reflect the actual bug, in this case. The bug text is: I have noticed that release 5.4 (Final) appears to ignore the server option when using host or nslookup if the host in question is not available. The commands should return no server available as they have in the past but instead decide to query the servers specified in resolv.conf and return results from that. As both of the servers you gave in the message provided results, the queries given do not trigger the actual bug; that is, if the server referenced is not available or does not return a result, *then* it went to the servers in resolv.conf rather than the previous behavior. Fault lies in the writer of the release note bullet point, which does not accurately describe the bug actually fixed. And that explains why 'host www.yahoo.com 208.67.220.220' and 'host www.yahoo.com 8.8.8.8' got completely different answers, as I know OpenDNS does fairly aggressive caching that semi-ignores $TTL, and google (8.8.8.8 is a google DNS server) probably does too. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] what pkg contains libstdc++-libc6.2-2.so.3
It's a symlink to /usr/lib/libstdc++-3-libc6.2-2-2.10.0.so, from compat-libstdc++-296-2.96-138 -- Don Krause Head Systems Geek, Waver of Deceased Chickens. Optivus Proton Therapy, Inc. P.O. Box 608 Loma Linda, California 92354 909.799.8327 Tel 909.799.8366 Fax dkra...@optivus.com www.optivus.com This message represents the official view of the voices in my head. smime.p7s Description: S/MIME cryptographic signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos + python + sqlalchemy + mysql
I am trying to use the following set (all from standard repositories):
centos (5.5) + python 2.6 + sqlalchemy + mysql. However while running my script
I get:
Traceback (most recent call last):
File ./oraping2.py, line 43, in module
main()
File ./oraping2.py, line 23, in main
db =
create_engine('mysql:///u1oraping@localhost:3306/oraping',echo=False,pool_recycle=1800)
File /usr/lib/python2.6/site-packages/sqlalchemy/engine/__init__.py, line
244, in create_engine
return strategy.create(*args, **kwargs)
File /usr/lib/python2.6/site-packages/sqlalchemy/engine/strategies.py, line
60, in create
dbapi = dialect_cls.dbapi(**dbapi_args)
File /usr/lib/python2.6/site-packages/sqlalchemy/dialects/mysql/mysqldb.py,
line 101, in dbapi
return __import__('MySQLdb')
File /usr/lib64/python2.4/site-packages/MySQLdb/__init__.py, line 19, in
module
import _mysql
ImportError: /usr/lib64/python2.4/site-packages/_mysql.so: undefined symbol:
Py_InitModule4
Did anybody faced this error ?
Does anybody use the above set of software on Centos ?
Regards
Przemek
-
Sprawdz pogode.
Kliknij http://linkint.pl/f2903
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] how to move forward/undo/revert/fix re: a failed CentOS 5.5 to SL 5.5 migration ... [SOLVED?]
On Wed, Feb 2, 2011 at 1:41 PM, Lamar Owen lo...@pari.edu wrote: On Wednesday, February 02, 2011 09:31:43 am Larry Vaden wrote: * The host/dig/nslookup utilities queried only servers from resolv.conf. With this update, the utilities query the servers specified on command line instead of in resolv.conf and the issue is resolved. ( BZ#561299) The official release notes imply that the argument on the command line was ignored and the contents of /etc/resolv.conf were used instead which should lead to consistent results between the two invocations. Genau. I think the release notes do not reflect the actual bug, in this case. The bug text is: I have noticed that release 5.4 (Final) appears to ignore the server option when using host or nslookup if the host in question is not available. The commands should return no server available as they have in the past but instead decide to query the servers specified in resolv.conf and return results from that. As both of the servers you gave in the message provided results, the queries given do not trigger the actual bug; that is, if the server referenced is not available or does not return a result, *then* it went to the servers in resolv.conf rather than the previous behavior. Fault lies in the writer of the release note bullet point, which does not accurately describe the bug actually fixed. And that explains why 'host www.yahoo.com 208.67.220.220' and 'host www.yahoo.com 8.8.8.8' got completely different answers, as I know OpenDNS does fairly aggressive caching that semi-ignores $TTL, and google (8.8.8.8 is a google DNS server) probably does too. I think your analysis is spot on. kind regards/ldv ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blasphemous? any support for a REPO of current edition BIND, et al (e.g., BZ561299)?
On Wed, Feb 2, 2011 at 12:14 PM, Karanbir Singh mail-li...@karan.org wrote: btw, if you were to go down that route, the CentOSPlus repo would be a great place to host such a package :) One of the best advantages of CentOS is that we're not tied down to the EL codebase in any repo outside the [os] and [updates] Is one expected to support all of the archs? If not, which set is the minimum to be considered for contribution? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] centos 5.5 check memoray usage too high???
We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. Since server have 128 GB RAM and only 1 application. I really don't belive that. Does there has some way can check memory utilitation ? Thanks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
On 2/2/11 1:58 PM, mcclnx mcc wrote: We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. Since server have 128 GB RAM and only 1 application. I really don't belive that. Does there has some way can check memory utilitation ? What is the output of the command free? ~Sean ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
on 2/2/2011 1:58 PM mcclnx mcc spake the following: We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. Since server have 128 GB RAM and only 1 application. I really don't belive that. Does there has some way can check memory utilitation ? Thanks. Linux has a habit of using memory to store buffers and speed disk re-accesses. As soon as an application needs that memory, it will be flushed if dirty and released. Memory unused is memory not needed. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
On Thu, Feb 03, 2011 at 05:58:19AM +0800, mcclnx mcc wrote: We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. It sounds like your monitor tool is probably misconfigured and is looking at free memory, which is a very low value 'cos unused memory is used as disk cache. eg % free -m total used free sharedbuffers cached Mem: 3987 3551435 0330 2987 -/+ buffers/cache:233 3753 Swap: 2047 0 2047 This machine has 435M free, out of almost 4G. Except not really; it's got 3753M available for programs to use and is only using 233M of memory for real stuff! -- rgds Stephen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] [OT] Best way to get dhcpd messages piped to a web service.
Starting off, it is important not to loose any dhcp messages, especially during log rotation. My first thought on this would be to add a fifo to syslog.conf and slup from it, like: # perl -ne 'm/.../ WWW::Curl ...' /var/log/messages.fifo Does anyone see a more proper way? tail -F / -f could both miss messages during log rotation (please correct me if I am wrong) What are some of the problems that could be manifested in syslog if the fifo consumer stops consuming or has other issues? -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100- - +1 (443) 269-1555 x333Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
on 05:58 Thu 03 Feb, mcclnx mcc (mcc...@yahoo.com.tw) wrote: We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. Since server have 128 GB RAM and only 1 application. I really don't belive that. Does there has some way can check memory utilitation ? Make sure your tool is reporting utilization less cache. As others have noted, the -/+ buffers/cache line in free output is what you're looking for. http://www.linuxatemyram.com/ If you've got sar (sysstat) installed and activated (read the manpage and /usr/share/doc/sysstat* materials if not), numerous system resource usages are logged every ten minutes. For memory usage: 'sar -r': 12:00:01 AM kbmemfree kbmemused %memused kbbuffers kbcached kbswpfree kbswpused %swpused kbswpcad 12:10:01 AM 45877732 3573788 7.23208792 1948316 2097144 0 0.00 0 12:20:01 AM 45875572 3575948 7.23208792 1948336 2097144 0 0.00 0 12:30:01 AM 45877120 3574400 7.23208796 1948352 2097144 0 0.00 0 12:40:01 AM 45878352 3573168 7.23208796 1948368 2097144 0 0.00 0 12:50:01 AM 45876080 3575440 7.23208800 1948384 2097144 0 0.00 0 01:00:01 AM 45877244 3574276 7.23208800 1948408 2097144 0 0.00 0 There are tools (NOT currently in CentOS) to graph/visualize these outputs as well. If you want per-process accounting, you can get that as well, but it'll cost you some performance overhead and a lot of set-up. -- Dr. Ed Morbius Chief Scientist Krell Power Systems Unlimited ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL-6 vs. CentOS-5.5 (was: Static assignment of SCSI device names?)
On 02/02/2011 09:00 AM, Lamar Owen wrote: On Wednesday, February 02, 2011 02:06:15 am Chuck Munro wrote: The real key is to carefully label each SATA cable and its associated drive. Then the little mapping script can be used to identify the faulty drive which mdadm reports by its device name. It just occurred to me that whenever mdadm sends an email report, it can also run a script which groks out the path info and puts it in the email message. Problem solved:-) Ok, perhaps I'm dense, but, if this is not a hot-swap bay you're talking about, wouldn't it be easier to have the drive's serial number (or other identifier found on the label) pulled into the e-mail, and compare with the label physically found on the drive, since you're going to have to open the case anyway? Using something like: hdparm -I $DEVICE | grep Serial.Number works here (the regexp Serial.Number matches the string Serial Number without requiring the double quotes). Use whatever $DEVICE you need to use, as long as it's on a controller compatible with hdparm usage. I have seen cases with a different Linux distribution where the actual module load order was nondeterministic (modules loaded in parallel); while upstream and the CentOS rebuild try to make things more deterministic, wouldn't it be safer to get a really unique, externally visible identifier from the drive? If the drive has failed to the degree that it won't respond to the query, then query all the good drives in the array for their serial numbers, and use a process of elimination. This, IMO, is more robust than relying on the drive detect order to remain deterministic. If in a hotswap or coldswap bay, do some data access to the array, and see which LED's don't blink; that should correspond to the failed drive. If the bay has secondary LED's, you might be able to blink those, too. Well no, you're not being dense. It's a case of making the best of what the physical hardware can do for me. In my case, the drives are segregated into several 3-drive bays which are bolted into the case individually, so removing each one to compare serial numbers would be a major pain, since I'd have to unbolt a bay and remove each drive one at a time to read the label. The use of the new RHEL-6/CentOS-6 'udevadm' command nicely maps out the hardware path no matter the order the drives are detected/named, and since hardware paths are fixed, I just have to attach a little tag to each SATA cable with that path number on it. One thing I did was reboot the machine *many* times to make sure the controller cards were always enumerated by Linux in the same slot order. I also notice that the RHEL-6 DriveInfo GUI application shows which drive is giving trouble, but it only maps the controllers in a vague way with respect to the hardware path. (At least that's what I remember seeing a couple of days ago, I could be mistaken.) On this particular machine I don't have the luxury of per-drive LED activity indicators, so whacking each drive with a big read won't point the way (but I have used that technique on other machines). I didn't have the funds to buy the hot-swap bays I would have preferred. I may retrofit later. Your suggestions are well taken, but the hardware I have doesn't readily allow my use of them. Thanks for the ideas. Chuck ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos + python + sqlalchemy + mysql
On 02/02/2011 08:32 PM, przemol...@poczta.fm wrote: I am trying to use the following set (all from standard repositories): centos (5.5) + python 2.6 + sqlalchemy + mysql. However while running my script I get: I would recommend you use the python 2.6 from EPEL, and the setuptools / pip from there to bring in the egg's you need. That would make sure you keep clear of the py2.4 file space / lib space. - KB ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] kernel errors
For monday this week I began to receive these advice by email from the server; Wht's the meaning? Disk read problem or else? - Kernel Begin WARNING: Kernel Errors Present I/O error: dev 08:02, sect...: 4Time(s) Additional sense indicates Unrecovered read error...: 4Time(s) Info fld=0x4f9c9, Current sd08:02: sense key Medium Error...: 1Time(s) Info fld=0x50e37, Current sd08:02: sense key Medium Error...: 1Time(s) Info fld=0x517a1, Current sd08:02: sense key Medium Error...: 1Time(s) Info fld=0x517e2, Current sd08:02: sense key Medium Error...: 1Time(s) -- --- Michel Donais___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] kernel errors
On 02/02/11 4:42 PM, Michel Donais wrote: For monday this week I began to receive these advice by email from the server; Wht's the meaning? Disk read problem or else? yes, disk IO errors of the bad sector type, on device 08:02, whatever that is in your system. appears to be on different sectors, which is not a good thing. that drive is likely dying ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] kernel errors
Thank's for the answer, That's what I was expecting.for the worst. I will replace it tomorrow morning. --- Michel Donais - Original Message - From: John R Pierce pie...@hogranch.com To: centos@centos.org Sent: Wednesday, February 02, 2011 7:53 PM Subject: Re: [CentOS] kernel errors On 02/02/11 4:42 PM, Michel Donais wrote: For monday this week I began to receive these advice by email from the server; Wht's the meaning? Disk read problem or else? yes, disk IO errors of the bad sector type, on device 08:02, whatever that is in your system. appears to be on different sectors, which is not a good thing. that drive is likely dying ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL-6 vs. CentOS-5.5
On 2/2/11 5:57 PM, Chuck Munro wrote: The use of the new RHEL-6/CentOS-6 'udevadm' command nicely maps out the hardware path no matter the order the drives are detected/named, and since hardware paths are fixed, I just have to attach a little tag to each SATA cable with that path number on it. One thing I did was reboot the machine *many* times to make sure the controller cards were always enumerated by Linux in the same slot order. I think there are ways that drives can fail that would make them not be detected at all - and for an autodetected raid member in a system that has been rebooted, not leave much evidence of where it was when it worked. If your slots are all full you may still be able to figure it out but it might be a good idea to save a copy of the listing when you know everything is working. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ~/.forward file?
I'm just poking thru our previous sysadmin's user adding script and saw reference to a ~/.forward file containing the users email address. Any idea what it might be for? It's a tricky one to Google ;-) The ancient art of Google-fu takes many years to perfect. But sometimes the most mundane conjurations are the most enlightening. what is a linux .forward file for nets many good results, but they are mostly discussions. For true enlightenment, however, the path is the most difficult because it appears to be so outwardly easy: .forward file ;) -- Spiro Harvey Knossos Networks Ltd (04) 460-2531 : (021) 295-1923 www.knossos.net.nz signature.asc Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos + python + sqlalchemy + mysql
On Wed, Feb 2, 2011 at 3:32 PM, przemol...@poczta.fm wrote: I am trying to use the following set (all from standard repositories): centos (5.5) + python 2.6 + sqlalchemy + mysql. However while running my script I get: I can't comment on the error you're getting specifically, but you might look at Fedora for this setup. Their Turbogears / SQLAlchemy / mysql-python are pretty good and well tested. Also, do you have MySQL-python installed on your CentOS system? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] Best way to get dhcpd messages piped to a web service.
On 03/02/11 12:45, Jason Pyeron wrote: [snip] Does anyone see a more proper way? That depends. What are you really wanting to achieve? Might your problem be better solved by looking at the dhcp leases file instead, or are you really just interested in the logs? search.cpan.org reveals Net::ISC::DHCPd and Text::DHCPLeases as possible candidates for inclusion. tail -F / -f could both miss messages during log rotation (please correct me if I am wrong) You could also include something like 'tail --follow=name'. If you are worried about log rotation, it would probably be better to hook into logrotate's pre/postrotate mechanism. What are some of the problems that could be manifested in syslog if the fifo consumer stops consuming or has other issues? You would need to do something intelligent if syslogd were to restart (eg. because of an update). You would also need to make sure that your script started after syslogd. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
On 03/02/11 10:58, mcclnx mcc wrote: We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. As previously mentioned, Linux operates on a memory full model, so caches and buffers need to accounted for. Is this monitor tool getting its data via SNMP? If so, you should be able to get the real amount of memory available using the formula memAvailReal + memBuffer + memCache (all of these can be found under UCD-SNMP-MIB::memory if you are using the NetSNMP agent.) $ snmpget -c public localhost UCD-SNMP-MIB::memCached.0 UCD-SNMP-MIB::memCached.0 = INTEGER: 169280 kB $ snmpget -c public localhost UCD-SNMP-MIB::memBuffer.0 UCD-SNMP-MIB::memBuffer.0 = INTEGER: 123400 kB $ snmpget -c public localhost UCD-SNMP-MIB::memAvailReal.0 UCD-SNMP-MIB::memAvailReal.0 = INTEGER: 26904 kB $ free -tk total used free sharedbuffers cached Mem:514512 487244 27268 0 123444 169344 -/+ buffers/cache: 194456 320056 Swap: 979956676 979280 Total: 1494468 4879201006548 Brief check: 26904 + 123400 + 169280 == 319584, which is near enough to 320056 (given that I ran the commands above with a bit of a pause in between) However, as a practical aside, looking at the amount of memory used is not particularly useful for determining if a host has too little. If that is what is wanted, it would be better to monitor the number of pages swapped in/out. (ie. what the 'vmstat' tool reports). If monitoring using SNMP, and the NetSNMP agent is being used, you can get this in the UCD-SNMP-MIB::ssSwapIn and ssSwapOut variables, which report amount of memory swapped in/out in the last minute (in SNMP terms, this is a gauge), or ssRawSwapIn and ssRawSwapOut if you want pages instead (which is a counter, and thus more useful). Hope it helps, Cameron ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum confusion...
On Wed, Feb 2, 2011 at 11:58 AM, Karanbir Singh mail-li...@karan.org wrote: On 02/02/2011 04:29 PM, John Doe wrote: # yum list | grep tcp_wrappers\|nfs-utils nfs-utils.x86_64 1:1.0.9-47.el5_5 installed nfs-utils-lib.x86_64 1.0.8-7.6.el5 installed tcp_wrappers.i386 7.6-40.7.el5 installed tcp_wrappers.x86_64 7.6-40.7.el5 installed nfs-utils-lib.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.i386 1.0.8-7.6.el5 base nfs-utils-lib-devel.x86_64 1.0.8-7.6.el5 base tcp_wrappers-devel.x86_64 7.6-57.el5.rfx rpmforge-extras tcp_wrappers-libs.x86_64 7.6-57.el5.rfx rpmforge-extras ... Any idea what is going on or how I can clean up this mess...? Do you have to block all i386 packages? I can guess that the rcp_weappers-libs and -devel are not being masked. Try running yum with a -d7 and see if it clears up what is going on The problem is probably that RPMforge's repository for x86_64 does not include matching i386 components, even if the out-of-date components for RHEL included both in the same repository. I ran into this headlong with Subversion: My system kept trying to reach back for the subverion.i386 and subversion-devel.i386 components, even though I 'd only asked for subverison. One option is to exclude them in yum.conf. Another is to exclude them in your CentOS yum files. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL-6 vs. CentOS-5.5
On Wednesday, February 02, 2011 08:04:43 pm Les Mikesell wrote: I think there are ways that drives can fail that would make them not be detected at all - and for an autodetected raid member in a system that has been rebooted, not leave much evidence of where it was when it worked. If your slots are all full you may still be able to figure it out but it might be a good idea to save a copy of the listing when you know everything is working. I'll echo this advice. I guess I'm spoiled to my EMC arrays, which light a yellow LED on the DAE and on the individual drive, as well as telling you which backend bus, which enclosure, and which drive in that enclosure. And the EMC-custom firmware is paranoid about errors. But my personal box is a used SuperMicro dual Xeon I got at the depth of the recession in December 2009, and paid a song and half a dance for it. It had the six bay hotswap SCSI, and I replaced it with the six bay hotswap SATA, put in a used (and cheap) 3Ware 9500S controller, and have a RAID5 of four 250GB drives for the boot and root volumes, and an MD RAID1 pair of 750GB drives for /home. The Supermicro motherboard didn't have SATA ports, but I got a 64-bit PCI-X dual internal SATA/dual eSATA low-profile board with the low-profile bracket to fit the 2U case. Total cost $500. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
On Wed, Feb 2, 2011 at 4:58 PM, mcclnx mcc mcc...@yahoo.com.tw wrote: We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it. This server only have one application running and few people use it. Every week I ata least get one or two messages from monitor tool mail to me say: Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) threshold. Since server have 128 GB RAM and only 1 application. I really don't belive that. Does there has some way can check memory utilitation ? What kernel are you using? Is your app 64-bit? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.5 check memoray usage too high???
On 02/02/11 1:58 PM, mcclnx mcc wrote: Since server have 128 GB RAM and only 1 application. I really don't belive that. Does there has some way can check memory utilitation ? while your app is running, $ top as everyone has said, remember to add the 'cached' and 'buffered' to the 'free' to find out whats actually potentially available. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-docs] The AIDE section of the Hardening CentOS wiki page
On Tue, Feb 1, 2011 at 7:40 PM, Jim Perrin jper...@gmail.com wrote: On Tue, Feb 1, 2011 at 7:00 PM, Alan Bartlett a...@elrepo.org wrote: The broken link is to a section of the blog of Jim Evolution Perrin. Are you still around Jim? If so, will you please fix it. :-) Yep, that'd be my fault. The machine I was hosting that site from was old and decrepit. I took it out behind the woodshed and put it out of its misery. I should have that in an archive somewhere and will dig it up. Also ... finiching the 'Auditd' section marked To Be Written will be nice. :-P Akemi ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-virt] OT: Recommendations for a virtual storage server
I may be wrong on this compdoc, but I'm pretty sure it's a pretty bad idea to have the host (Dom0 for me, in Xen) doing anything other than hosting the system for the DomUs. As far as the 'best' setup for your NAS server, it really depends on how much you know about Linux. Openfiler is really nice, but it has some limitations on what you can do as far as access controls. I found it to be to coarse-grained for my uses. In some situations it would work without a problem, I'm sure. I would give it a close look, really. It is very easy to set up and works well. I'm assuming you don't really know a lot more about Linux than I do because you are asking this question. It is really the same place I started. I have been looking at various solutions for quite a while. The last time I looked at Openfiler you could only use the 32bit version as a DomU in Xen. I think they have other images for other virtualization platforms, and I know they have an image for VMWare. FreeNAS really is nice, and I actually prefer the *BSDs to Linux, but depending on what you are looking for as far as ease of use and setup you may find it somewhat less refined than Openfiler. It is definitely not as 'pretty'. I hope this helps. compdoc wrote: I need to install a virtual machine acting as a virtual storage server under CentOS 5.x (using kvm, xen, virtualbox or vmware). Back when I started using virtual machines, I used guests to share large storage. Eventually, I found it was better to let the host do the sharing of storage, and let the guests connect to it. Seems more efficient that way, as well as helping to facilitate backups and maintenance. ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
[CentOS-virt] Trouble with virtio storage
I am trying to get a custom Centos 5 image going under Openstack Nova (a cloud framework). Trouble I have is that for whatever reason virtio storage doesn't work for me. For example if the VM is started using these options os typehvm/type kernel/opt/nova-state/instances/instance-0045/kernel/kernel cmdlineroot=/dev/vda console=ttyS0/cmdline initrd/opt/nova-state/instances/instance-0045/ramdisk/initrd /os disk type='file' driver type='qcow2'/ source file='/opt/nova-state/instances/instance-0045/disk'/ target dev='vda' bus='virtio'/ /disk Booting fails Creating root device. Mounting root filesystem. mount: could not find filesystem '/dev/root' If I then destroy the VM, change root to be /dev/sda and target dev=sda with bus=ide things boot properly. Kernel and ramdisk being used to boot are these vmlinuz-2.6.18-194.26.1.0.1.el5 initrd-2.6.18-194.26.1.0.1.el5.img I even tried Oracle's 2.6.32 kernels with same results. Underlying host OS is Oracle EL 5.5 Any clues ? Vladimir ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-virt] Trouble with virtio storage
Answering my own question :-). I had to recreate the initrd with virtio stuff included ie. mkinitrd --with virtio_pci --with virtio_blk --with virtio_net --with virtio_balloon --with virtio -f /boot/initrd-$(uname -r) $(uname -r) Somehow I thought it was already included :-/. Vladimir ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-es] Problemas MySql Socket UNIX - TCP
Desde la consola: /* INGRESAR A LA CONSOLA MYSLQ */ mysql -u USUARIO -h HOST -p /* PREGUNTA EL PASSWORD DEL USUARIO */ /* ESTANDO EN LA CONSOLA MYSQL*/ grant all privileges on DATABASE.* to 'USUARIO'@'CLIENTE' identified by 'CLAVE' with grant option; /* Donde: DATABASE= nombre de base de datos. USUARIO= nombre de usuario. CLIENTE= nombre de host o dirección IP del equipo desde donde se quiere conectar. % significa cualquier host. CLAVE= clave a proveer para el USUARIO. */ Try. 2011/1/31 Juan Pablo Botero juanpabloboterolo...@gmail.com Gonzalo. 2011/1/31 Gonzalo Cáceres gonzalocacere...@hotmail.com Gracias por las respuestas. Veamos... no he entendido mucho algunas cosas... pero creo que nos vamos acercando al problema. Yo he creado un usuario con el PhpMyAdmin... y he marcado todos los privilegios... incluido el de Grant. Luego he reiniciado el servidor... (lo hago cada vez que cambio algo). Supongo que da lo mismo crear el usuario y otorgarle privilegios desde la consola que desde el PhpMyadmin... Le he dado todos los privilegios a este usuario para cualquier servidor, %... para localhost... y para 127.0.0.1 Supongo que este es el caso, tienes el usuario para localhost y el usuario para 127.0.0.1, lo que indica que es la máquina del servidor MYSQL, localhost = 127.0.0.1 cambia este permiso para que el origen sea cualquiera. Es exactamente lo mismo que he hecho con otros dos servidores de mysql donde tengo las mismas db. Uno en windows y otro en un NAS preinstalado ya de fábrica como comenté antes. Y siempre me funciona (conectarme con el PC en red local desde el que lo estoy intentando, y con el mismo usuario y password de siempre)... pero en la instalación limpia de Centos que he hecho no hay manera... de conectarse remotamente La IP local del servidor responde bien al hacer un ping puedo entrar desde otro PC en red al Apache y al PhpMyAdmin instalado en el servidor mysql... y funciona perfectamente el mysql... pero desde otro equipo en red local no encuentro el modo de conectar... He intentado conectar mediante Telnet desde el equipo PC en red local al servidor... por la IP del servidor y por el puerto 3306 pero salen unas caracteres extraños y se interrumpe la conexión... El SELinux y el Firewall desactivados. El el host local del servidor mysql se que está escuchando por el puerto 3306 por cualquier IP pero no se como comprobar esto desde otro host... Sigo en las mismas -- From: Elsa Alarcon onexecuador_sist...@hotmail.com Sent: Monday, January 31, 2011 3:15 PM To: centos-es@centos.org Subject: Re: [CentOS-es] Problemas MySql Socket UNIX - TCP Buenos dias Necesito ayuda urgente, tengo un servidor CEntos 5 confirgurado como servidor de correos con send mail, hace unas 3 semanas me esta dando problemas, me cambia la hora de los correos de entrada a los usuarios no entiendo por que la hora de cada PC esta correcta, y la hora del server tambien esta correcta ayudenme porfavor necesito resolver este problema urgente. Att. Elsa Alarcón From: araqu...@gmail.com Date: Mon, 31 Jan 2011 11:29:22 -0300 To: centos-es@centos.org Subject: Re: [CentOS-es] Problemas MySql Socket UNIX - TCP Gonzalo, una consulta ? desde el propio server si le tiras un nmap localhost que ports te dice tiene atendiendo por un lado ? y por otro si haces lo mismo desde un host diferente que ves ? Si la prueba que haces desde otro host te da como resultado que entre otros ports esta escuchando el 3306 el problema que tenes es que tenes que habilitar via Mysql conexiones desde otros hosts eso lo haces con un el comando grant. Saludos y espero que sirva. *Lic. Christian G. Araquistain* 2011/1/31 Gonzalo Cáceres gonzalocacere...@hotmail.com Buenas... Tengo un pequeño problemilla con MySql. Agradecería cualquier ayuda al respecto. Situación: - Instalo Centos 5.5 64bits - Instalo mysql-server 5.0.77 y php - Instalo phpmyadmin 3.3.7 Todo para 64 bits. - Tengo dos tarjetas de red, hago bonding 5 para las dos y le asigno al bonding 192.168.1.200 Toda va bien en principio. Puedo acceder a mysql con el phpMyAdmin tanto en la máquina local como en cualquier otro PC en red local utilizando la IP del bonding. En PhpMyAdmin me dice que el nombre del servidor es localhost, pero en las variables que obtengo al escribir en el terminar mysqladmin variables, me dice que el hostname el otro, el mismo de la máquina cuando instalé Centos. También veo en PhpMyAdmin que MySql utiliza el socket UNIX. Problema: No puedo conectar desde otros PC en red local mediante aplicaciones php al servidor
[CentOS-es] ayuda DHCP y DNS
hola lista necesito montar dos servicios claves en mi red un servidor DNS en centos y otro DHCP, y que el DHCP actualize los registro DNS porfavor si alguien lo ah logrado prodria pasarme algun manualito o sitio donde este echo saludos -- Julio Cèsar Carballo Lòpez Administrador de Red Instituto de Geografìa Tropical Debian GNU/Linux User Linux Registered User: 477739 Telef: (537) 832/3494 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] ayuda DHCP y DNS
Julio Cesar wrote: hola lista necesito montar dos servicios claves en mi red un servidor DNS en centos y otro DHCP, y que el DHCP actualize los registro DNS porfavor si alguien lo ah logrado prodria pasarme algun manualito o sitio donde este echo saludos un día de esto lo pruebo, pero para dns de cache (con forward realmente) uso dnsmasq, que también permite dhcp y ellos indican en una pregunta que puede resolver el nombre a la ip de la máquina a la que se le asignó dhcp, pruébale, es extremadamente simple de configurar. saludos epe ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] ayuda DHCP y DNS
On Wed, 02 Feb 2011 11:34:23 -0500, Ing. Ernesto Pérez Estévez cen...@nuestroserver.com wrote: Julio Cesar wrote: hola lista necesito montar dos servicios claves en mi red un servidor DNS en centos y otro DHCP, y que el DHCP actualize los registro DNS porfavor si alguien lo ah logrado prodria pasarme algun manualito o sitio donde este echo saludos un día de esto lo pruebo, pero para dns de cache (con forward realmente) uso dnsmasq, que también permite dhcp y ellos indican en una pregunta que puede resolver el nombre a la ip de la máquina a la que se le asignó dhcp, pruébale, es extremadamente simple de configurar. saludos epe ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es me recomiendas dnsmasq ?? tienes alguna info sobre eso ? -- Julio Cèsar Carballo Lòpez Administrador de Red Instituto de Geografìa Tropical Debian GNU/Linux User Linux Registered User: 477739 Telef: (537) 832/3494 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] ayuda DHCP y DNS
tambien recomendaria Dnsmasq +1 Sls El 2 de febrero de 2011 11:26, Julio Cesar jce...@geotech.cu escribió: On Wed, 02 Feb 2011 11:34:23 -0500, Ing. Ernesto Pérez Estévez cen...@nuestroserver.com wrote: Julio Cesar wrote: hola lista necesito montar dos servicios claves en mi red un servidor DNS en centos y otro DHCP, y que el DHCP actualize los registro DNS porfavor si alguien lo ah logrado prodria pasarme algun manualito o sitio donde este echo saludos un día de esto lo pruebo, pero para dns de cache (con forward realmente) uso dnsmasq, que también permite dhcp y ellos indican en una pregunta que puede resolver el nombre a la ip de la máquina a la que se le asignó dhcp, pruébale, es extremadamente simple de configurar. saludos epe ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es me recomiendas dnsmasq ?? tienes alguna info sobre eso ? -- Julio Cèsar Carballo Lòpez Administrador de Red Instituto de Geografìa Tropical Debian GNU/Linux User Linux Registered User: 477739 Telef: (537) 832/3494 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Anthony Mogrovejo cel 01-995319333 Consultor IT Linux User # 433253 Ubuntu User # 9562 www.anferinux.blogspot.com twitter: @kde_tony ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] ayuda DHCP y DNS
No entiendo de dnsmasq pero yo uso dhcp y dns nativos del centos lo q se necesita es generar una clave y que el dhcp alimente el dns en google hay algunos manuales al respecto quiza no debas encerrarte en el tema de CentOS sino leer otros al final Linux es virtualmente igual Xavier Mauricio Tirado L. Unidad de Infraestructura Dirección de Tecnología y Comunicaciones MINISTERIO DEL AMBIENTE email: xtir...@ambiente.gob.ec Telefax: (593 2) 3987600 ext 1322 / 1323 www.ambiente.gob.ec Xavier Mauricio Tirado L. Unidad de Infraestructura Dirección de Tecnología y Comunicaciones MINISTERIO DEL AMBIENTE email: xtir...@ambiente.gob.ec Telefax: (593 2) 3987600 ext 1322 / 1323 www.ambiente.gob.ec - Mensaje original - De: Anthony Mogrovejo tony001...@gmail.com Para: centos-es@centos.org Enviados: Miércoles, 2 de Febrero 2011 12:03:06 Asunto: Re: [CentOS-es] ayuda DHCP y DNS tambien recomendaria Dnsmasq +1 Sls El 2 de febrero de 2011 11:26, Julio Cesar jce...@geotech.cu escribió: On Wed, 02 Feb 2011 11:34:23 -0500, Ing. Ernesto Pérez Estévez cen...@nuestroserver.com wrote: Julio Cesar wrote: hola lista necesito montar dos servicios claves en mi red un servidor DNS en centos y otro DHCP, y que el DHCP actualize los registro DNS porfavor si alguien lo ah logrado prodria pasarme algun manualito o sitio donde este echo saludos un día de esto lo pruebo, pero para dns de cache (con forward realmente) uso dnsmasq, que también permite dhcp y ellos indican en una pregunta que puede resolver el nombre a la ip de la máquina a la que se le asignó dhcp, pruébale, es extremadamente simple de configurar. saludos epe ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es me recomiendas dnsmasq ?? tienes alguna info sobre eso ? -- Julio Cèsar Carballo Lòpez Administrador de Red Instituto de Geografìa Tropical Debian GNU/Linux User Linux Registered User: 477739 Telef: (537) 832/3494 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Anthony Mogrovejo cel 01-995319333 Consultor IT Linux User # 433253 Ubuntu User # 9562 www.anferinux.blogspot.com twitter: @kde_tony ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es __ NOTA DE DESCARGO: La información contenida en este e-mail es confidencial y solo puede ser utilizada por su destinatario. El Ministerio del Ambiente - Ecuador no asume responsabilidad sobre información y opiniones o criterios contenidos en este e-mail. _ MENSAJE AMBIENTAL: Si vas a imprimir el presente correo, piensa bien si es preciso hacerlo ¡Cuidemos el Ambiente que es responsabilidad de todos! - Ministerio del Ambiente (txt) __ NOTA DE DESCARGO: La información contenida en este e-mail es confidencial y solo puede ser utilizada por su destinatario. El Ministerio del Ambiente - Ecuador no asume responsabilidad sobre información y opiniones o criterios contenidos en este e-mail. _ MENSAJE AMBIENTAL: Si vas a imprimir el presente correo, piensa bien si es preciso hacerlo ¡Cuidemos el Ambiente que es responsabilidad de todos! - Ministerio del Ambiente (txt) ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] ayuda DHCP y DNS
On Wed, 2 Feb 2011 12:36:56 -0500 (ECT), Xavier Mauricio Tirado L. xtir...@ambiente.gob.ec wrote: No entiendo de dnsmasq pero yo uso dhcp y dns nativos del centos lo q se necesita es generar una clave y que el dhcp alimente el dns en google hay algunos manuales al respecto quiza no debas encerrarte en el tema de CentOS sino leer otros al final Linux es virtualmente igual Xavier Mauricio Tirado L. Unidad de Infraestructura Dirección de Tecnología y Comunicaciones MINISTERIO DEL AMBIENTE email: xtir...@ambiente.gob.ec Telefax: (593 2) 3987600 ext 1322 / 1323 www.ambiente.gob.ec Xavier Mauricio Tirado L. Unidad de Infraestructura Dirección de Tecnología y Comunicaciones MINISTERIO DEL AMBIENTE email: xtir...@ambiente.gob.ec Telefax: (593 2) 3987600 ext 1322 / 1323 www.ambiente.gob.ec - Mensaje original - De: Anthony Mogrovejo tony001...@gmail.com Para: centos-es@centos.org Enviados: Miércoles, 2 de Febrero 2011 12:03:06 Asunto: Re: [CentOS-es] ayuda DHCP y DNS tambien recomendaria Dnsmasq +1 Sls El 2 de febrero de 2011 11:26, Julio Cesar jce...@geotech.cu escribió: On Wed, 02 Feb 2011 11:34:23 -0500, Ing. Ernesto Pérez Estévez cen...@nuestroserver.com wrote: Julio Cesar wrote: hola lista necesito montar dos servicios claves en mi red un servidor DNS en centos y otro DHCP, y que el DHCP actualize los registro DNS porfavor si alguien lo ah logrado prodria pasarme algun manualito o sitio donde este echo saludos un día de esto lo pruebo, pero para dns de cache (con forward realmente) uso dnsmasq, que también permite dhcp y ellos indican en una pregunta que puede resolver el nombre a la ip de la máquina a la que se le asignó dhcp, pruébale, es extremadamente simple de configurar. saludos epe ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es me recomiendas dnsmasq ?? tienes alguna info sobre eso ? -- Julio Cèsar Carballo Lòpez Administrador de Red Instituto de Geografìa Tropical Debian GNU/Linux User Linux Registered User: 477739 Telef: (537) 832/3494 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Anthony Mogrovejo cel 01-995319333 Consultor IT Linux User # 433253 Ubuntu User # 9562 www.anferinux.blogspot.com twitter: @kde_tony ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es __ NOTA DE DESCARGO: La información contenida en este e-mail es confidencial y solo puede ser utilizada por su destinatario. El Ministerio del Ambiente - Ecuador no asume responsabilidad sobre información y opiniones o criterios contenidos en este e-mail. _ MENSAJE AMBIENTAL: Si vas a imprimir el presente correo, piensa bien si es preciso hacerlo ¡Cuidemos el Ambiente que es responsabilidad de todos! - Ministerio del Ambiente (txt) __ NOTA DE DESCARGO: La información contenida en este e-mail es confidencial y solo puede ser utilizada por su destinatario. El Ministerio del Ambiente - Ecuador no asume responsabilidad sobre información y opiniones o criterios contenidos en este e-mail. _ MENSAJE AMBIENTAL: Si vas a imprimir el presente correo, piensa bien si es preciso hacerlo ¡Cuidemos el Ambiente que es responsabilidad de todos! - Ministerio del Ambiente (txt) ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es hola si gracias lo que necesito es como lo tienes tu ya que toda mi plataforma de server esta montada en centos y quiero poder montar el dns y dhcp para una red LAN, asi ya entonces apago los server que ahora mismo dan ese servicio pero en windows 2003 si me puedes echar un mano te lo agradeceria saludos julio -- Julio Cèsar Carballo Lòpez Administrador de Red Instituto de Geografìa Tropical Debian GNU/Linux User Linux Registered User: 477739 Telef: (537) 832/3494 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS-es] Sistema Operativo Solo Web
*Estimados:* Alguien me puede recomendar alguna distribución de Linux que tenga al arrancar solo acceso a Web (idealmente firefox) Algo como es el ClearOS, pero para clientes. gracias..!! * Atte.* - *Javier Laušić R.* Movil: +56 9 84057030 E-Mail : jav...@lausic.cl Web : www.lausic.cl ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Sistema Operativo Solo Web
Javier Laušić wrote: *Estimados:* Alguien me puede recomendar alguna distribución de Linux que tenga al arrancar solo acceso a Web (idealmente firefox) Algo como es el ClearOS, pero para clientes. eyeos gracias..!! * Atte.* - *Javier Laušić R.* Movil: +56 9 84057030 E-Mail : jav...@lausic.cl Web : www.lausic.cl ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Sistema Operativo Solo Web
Hola, 2011/2/2 Ing. Ernesto Pérez Estévez cen...@nuestroserver.com: Javier Laušić wrote: *Estimados:* Alguien me puede recomendar alguna distribución de Linux que tenga al arrancar solo acceso a Web (idealmente firefox) Algo como es el ClearOS, pero para clientes. Te puede servir http://fedoraproject.org/wiki/Fedora_Kiosk -- Oscar Osta Pueyo oostap.lis...@gmail.com _kiakli_ ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
