Re: [CentOS] deny other hosts from synchronizing time with NTP client

2008-04-22 Thread Filipe Brandenburger
On Tue, Apr 22, 2008 at 5:07 AM, Simon Jolle [EMAIL PROTECTED] wrote: The problem is that other hosts are able to synchronize the time from our servers. How to disable that? Which other hosts? Other hosts in the same subnet as dns1 and dns2? If that is the problem, maybe you should try

Re: [CentOS] load level?

2008-04-25 Thread Filipe Brandenburger
On Fri, Apr 25, 2008 at 1:46 PM, Kevin Faulkner [EMAIL PROTECTED] wrote: Perhaps you could run iotop find out if there is a process chewing up your hard disks. You aren't just limited to top, you can also use vmstat and iostat in this situation. I also recommend dstat

Re: [CentOS] can't get Tomcat5 to work on centos 5.1, how do I get it to work?

2008-05-08 Thread Filipe Brandenburger
Hi, On Thu, May 8, 2008 at 6:00 PM, Rudi Ahlers [EMAIL PROTECTED] wrote: Exception in thread main java.lang.OutOfMemoryError: Cannot create It looks like it's running out of memory when starting more threads. Did you check if you have enough memory in this server to run Tomcat? I think you need

Re: [CentOS] problem with yumdownload?

2008-05-08 Thread Filipe Brandenburger
Hi, On Thu, May 8, 2008 at 4:38 PM, John R Pierce [EMAIL PROTECTED] wrote: coworker wants to download a module with all its dependencies, for use in updating an offline system... CentOS 5.latest ... [EMAIL PROTECTED] home]# yumdownloader --resolve gcc ... File

Re: [CentOS] can't get Tomcat5 to work on centos 5.1, how do I get it to work?

2008-05-09 Thread Filipe Brandenburger
Hi, On Fri, May 9, 2008 at 9:06 AM, Rudi Ahlers [EMAIL PROTECTED] wrote: Mem: 1048576k total, 799828k used, 248748k free,0k buffers Swap:0k total,0k used,0k free,0k cached You have no swap on the machine! Try adding it. You can do that by creating

Re: [CentOS] problem with yumdownload?

2008-05-09 Thread Filipe Brandenburger
2008/5/9 Ralph Angenendt [EMAIL PROTECTED]: Can you give us the bug number for that? https://bugzilla.redhat.com/show_bug.cgi?id=445773 It was closed as duplicate of another bug this morning, I don't know if I would agree with that. Filipe ___ CentOS

Re: [CentOS] Reseted net statistics

2008-05-11 Thread Filipe Brandenburger
On Sun, May 11, 2008 at 5:56 AM, happymaster23 [EMAIL PROTECTED] wrote: but its impossible to break my server These days it's very hard to state that. I would not bet any money on it. The only way to be really sure the server cannot be hacked is to disconnect the network cables (and maybe the

Re: [CentOS] Today's log - yum entries

2008-05-11 Thread Filipe Brandenburger
Hi, On Sun, May 11, 2008 at 5:26 AM, Ned Slider [EMAIL PROTECTED] wrote: I have the following entries, below, in today's log file (for yesterday, 10th May). I don't run the automated yum-updated and didn't run a yum update yesterday, and no packages were installed. Obviously the entries

Re: [CentOS] Re: Today's log - yum entries

2008-05-11 Thread Filipe Brandenburger
Hi, On Sun, May 11, 2008 at 10:24 AM, Robert Nichols [EMAIL PROTECTED] wrote: I fixed that problem for yum by editing /etc/logrotate.d/yum and changing size 30k to size 10k. For CentOS, a 10 kilobyte log file is enough to hold several months of yum activity, but small enough that the file

Re: [CentOS] A couple of CentOS 5.1 issues

2008-05-14 Thread Filipe Brandenburger
Hi, On Wed, May 14, 2008 at 9:37 AM, Alfred von Campe [EMAIL PROTECTED] wrote: First, I can not find kermit (or ckermit) in any of the repos (base, extras, centosplus, rpmforge). On my 4.6 systems, /usr/bin/kermit was provided by the package ckermit in the base repo. That package appears to

Re: [CentOS] OT DNS Question

2008-05-15 Thread Filipe Brandenburger
Hi, On Thu, May 15, 2008 at 8:45 PM, Chris Boyd [EMAIL PROTECTED] wrote: CNAMEs require two dips into the DNS (one to get the CNAME, another to look up the IP), and so can be much slower if you are the victim of a slow resolver. Not true (AFAIR). If I remember correctly, if the information

Re: [CentOS] Re: has something happened to grep

2008-05-16 Thread Filipe Brandenburger
On Fri, May 16, 2008 at 9:18 AM, Jerry Geis [EMAIL PROTECTED] wrote: Somehow the VIM start screen is in the -f file... Not sure how that happened but glad its gone. What do you mean? When you type vim on the terminal it tries to open the file named -f? If that's the case, check the .viminfo

Re: [CentOS] OOM condition with file-4.17-9.0.1.el5

2008-05-16 Thread Filipe Brandenburger
On Fri, May 16, 2008 at 8:30 AM, John [EMAIL PROTECTED] wrote: We just encountered several serious Out of Memory Problems caused by the file 4.17-9.0.1.EL5 utility on our mail Gateway. CentOS 5.1 kept it self alive by killing it parent process Amavisd-new. Manually restarting Amavisd-new and

Re: [CentOS] samba samba-common installed then erased, but by whom?

2008-05-16 Thread Filipe Brandenburger
On Fri, May 16, 2008 at 11:59 AM, Ned Slider [EMAIL PROTECTED] wrote: Johnny Tan wrote: I saw this in Logwatch today for one of my servers: Checking /var/log/yum.log for entries 1 year ago should confirm this. As this bit me once and I've just seen two people bitten by it again, I've taken

Re: [CentOS] samba samba-common installed then erased, but by whom?

2008-05-16 Thread Filipe Brandenburger
And another pet peeve of mine with logrotate: https://bugzilla.redhat.com/show_bug.cgi?id=447022 Once after an unclean reboot I got a corrupted /var/lib/logrotate.status, and after that logrotate just stopped working. The thing was that the server generated hundreds of megs per hour of log, and

Re: [CentOS] problem of building stardict

2008-05-18 Thread Filipe Brandenburger
On Sun, May 18, 2008 at 10:44 AM, cjzjm100 [EMAIL PROTECTED] wrote: Hi guys! today i tried to install the latest stardict. ... If i install the software from source code,how can i uninstall it? You should try to always stick to RPMs when using RHEL/CentOS. There are several advantages to it,

Re: [CentOS] Strange NTP problem

2008-05-20 Thread Filipe Brandenburger
On Tue, May 20, 2008 at 3:46 PM, Alfred von Campe [EMAIL PROTECTED] wrote: I have 30 identical Lenovo desktop systems running CentOS 5.1. On one of those systems the clock is running slow (5+ minutes from yesterday to this morning and another minute since this morning) despite the fact that

Re: [CentOS] Strange NTP problem

2008-05-20 Thread Filipe Brandenburger
On Tue, May 20, 2008 at 8:53 PM, Alfred von Campe [EMAIL PROTECTED] wrote: # ntpq -np remote refid st t when poll reach delay offset jitter == 10.101.32.104 67.128.71.65 3 u 689 1024

Re: [CentOS] Maybe OT: Some strange problem with postfix

2008-05-21 Thread Filipe Brandenburger
On Wed, May 21, 2008 at 9:48 AM, carlopmart [EMAIL PROTECTED] wrote: [EMAIL PROTECTED]: delivery via localhost[127.0.0.1]:10025: 250 2.0.0 Ok: queued as D61DDEC962 content_filter = imss:localhost:10025 Did you check if this could be related to whatever is running on port 10025? How is your

Re: [CentOS] RAID5 or RAID50 for database?

2008-05-22 Thread Filipe Brandenburger
On Thu, May 22, 2008 at 12:01 PM, Warren Young [EMAIL PROTECTED] wrote: At any rate, RAID-10 shouldn't be *slower*. I've actually seen equipments where RAID-10 was slower for reading than RAID-5 with the same number of disks. RAID-10 depends on the ability of the controller of balancing reads

Re: [CentOS] Interface bonding?

2008-05-23 Thread Filipe Brandenburger
On Fri, May 23, 2008 at 6:23 AM, James Pearson [EMAIL PROTECTED] wrote: Mag Gam wrote: Thanks Jim. Since, 802.3ad requires switch settings does it perform better than other modes? Does anyone have any benchmarks? I haven't done any benchmarks - but as I've managed to get 200+Mbyte/s read

Re: [CentOS] how to debug ssh slow connection issues.

2008-05-23 Thread Filipe Brandenburger
Try to change this in your /etc/ssh/sshd_config: If in CentOS 5, change: AddressFamily any to: AddressFamily inet If in CentOS 4, change: ListenAddress :: to: ListenAddress ip_address_of_your_server_here Uncomment those lines if needed. Change: GSSAPIAuthentication yes to:

Re: [CentOS] IPTables help

2008-05-23 Thread Filipe Brandenburger
On Fri, May 23, 2008 at 12:25 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: In terms of Cisco ACL's, how does iptables work, does it simply continue processing until it sees something explicitly denying if the default policy is ACCEPT, versus DROP, will it continue processing until it sees

Re: [CentOS] IPTables help

2008-05-24 Thread Filipe Brandenburger
On Sat, May 24, 2008 at 2:49 AM, Joseph L. Casale [EMAIL PROTECTED] wrote: Appreciate the help, but I think I am still unsure of that last point. If the default policy for INPUT is DROP, and a rule allowing traffic is not matched, once it gets to the end it performs the default policy action

Re: [CentOS] Bind Help

2008-05-27 Thread Filipe Brandenburger
On Tue, May 27, 2008 at 11:12 AM, Joseph L. Casale [EMAIL PROTECTED] wrote: I wondered if I could include the external view in the first view, or I suppose I can simply copy the details from the second view into the first, but that forces me to keep it updated in two places... Use includes for

Re: [CentOS] Secure iptables settings

2008-05-27 Thread Filipe Brandenburger
On Tue, May 27, 2008 at 9:33 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: Is it feasible to write protect the /etc/sysconfig/iptables file so nothing can overwrite it, such that at least the config is persistent through a reboot? If not, is there a better way to accomplish this? chmod a=r

Re: [CentOS] /etc/sysctl.conf edit not permanent

2008-05-28 Thread Filipe Brandenburger
On Wed, May 28, 2008 at 10:39 AM, Joseph L. Casale [EMAIL PROTECTED] wrote: I have edited ip forwarding in /etc/sysctl.conf yet when I issue a #service network restart I see it get set back to 0. Why is that? What exactly did you add to /etc/sysctl.conf? Do you have any errors when you run

Re: [CentOS] Frequent Gnome Terminal crashes in CentOS 5.1

2008-05-29 Thread Filipe Brandenburger
On Thu, May 29, 2008 at 3:14 PM, Alfred von Campe [EMAIL PROTECTED] wrote: write(2, The program \'gnome-terminal\' rec..., 592) = 592 This looks interesting, but unfortunately you cut the message too short to know what it was saying... You might find it in /var/log/Xorg.0.log, but I wouldn't

Re: [CentOS] Frequent Gnome Terminal crashes in CentOS 5.1

2008-05-29 Thread Filipe Brandenburger
On Thu, May 29, 2008 at 8:58 PM, Filipe Brandenburger [EMAIL PROTECTED] wrote: On Thu, May 29, 2008 at 3:14 PM, Alfred von Campe [EMAIL PROTECTED] wrote: write(2, The program \'gnome-terminal\' rec..., 592) = 592 This looks interesting, but unfortunately you cut the message too short to know

Re: [CentOS] another sed question...

2008-05-31 Thread Filipe Brandenburger
On Fri, May 30, 2008 at 12:33 PM, Craig White [EMAIL PROTECTED] wrote: where I'm taking the 'id:' field from each record and inserting an underscore and the id into the 'attributes' label directly above. Just for fun, this is a one-line sed script that would change that file: sed -n -e

Re: [CentOS] drbd strategy

2008-05-31 Thread Filipe Brandenburger
On Sat, May 31, 2008 at 7:40 AM, sbeam [EMAIL PROTECTED] wrote: We have a near-identical system I am thinking of bringing in as a DRBD/Heartbeat companion. One solution may be to use csync2 [http://oss.linbit.com/csync2/] on /etc and /usr/local (the only areas that will differ from the stock

Re: [CentOS] Hardened ver of CentOS?

2008-06-01 Thread Filipe Brandenburger
NSA guides on hardening RHEL5. Should be applicable to CentOS5 as well. http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=scg10.3.1.1 I read about this on /. some weeks ago, but I just skimmed through it, so I can't say how effective I think it is. I thought it would be useful to point to it on

Re: [CentOS] drbd strategy

2008-06-02 Thread Filipe Brandenburger
On Sat, May 31, 2008 at 7:40 AM, sbeam [EMAIL PROTECTED] wrote: I have an existing in-production LAMP server running Centos 5.1... We have a near-identical system I am thinking of bringing in as a DRBD/Heartbeat companion... Why don't you consider using MySQL master-slave replication? It

Re: [CentOS] Largish filesystems [was Re: XFS install issue]

2008-06-02 Thread Filipe Brandenburger
On Mon, Jun 2, 2008 at 8:18 AM, Bent Terp [EMAIL PROTECTED] wrote: Interesting, I thought that XFS was fairly safe for use. What would you recommend for filesystems in the 50-500 terabyte range? I would recommend you split it in several smaller (2-4TB) filesystems. Most applications would

Re: [CentOS] slightly OT - gphpedit on CentOS 5?

2008-06-02 Thread Filipe Brandenburger
On Mon, Jun 2, 2008 at 12:13 PM, Ray Leventhal [EMAIL PROTECTED] wrote: Hi all, Advance apologies for being slightly OT. Has anyone had successes with installing gphpedit on CentOS 5? There don't seem to be any rpms avail for our distro and I'm far too new to roll my own. Thanks in

[CentOS] SELinux error message on CentOS 5: multiple same specifications

2008-06-05 Thread Filipe Brandenburger
Hi all, I just installed a CentOS 5 machine from Kickstart. I configure NSS and PAM to lookup and authenticate users from LDAP with authconfig. On my LDAP I also have some automount configuration, but I'm not running automount on this server. SELinux is installed and enforcing. Whenever I try to

Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-05 Thread Filipe Brandenburger
On Thu, Jun 5, 2008 at 2:05 PM, Timothy Selivanow [EMAIL PROTECTED] wrote: things like 'put' and 'get', etc.), the connection hangs. If you wait a bit it returns with a 425 Failed to establish connection. I've tried Is the FTP client behind NAT? If it is then active FTP won't work, since the

Re: [CentOS] Mysqlnavigator ?????

2008-06-05 Thread Filipe Brandenburger
2008/6/5 Manuel Enrique Chavez Manzano [EMAIL PROTECTED]: from wich repo can I download Mysqlnavigator?? Have you tried the RPM from Sourceforge? http://sourceforge.net/project/showfiles.php?group_id=21623package_id=37304 HTH, Filipe ___ CentOS

Re: [CentOS] Web proxy/content filter w/ AD integration

2008-06-05 Thread Filipe Brandenburger
On Thu, Jun 5, 2008 at 6:02 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: I need to setup a proxy that does transparent auth to AD, does anyone have experience or suggestions for a setup that will run in CentOS? I came across an article on integrating Squid with Windows AD for auth but it

Re: [CentOS] Mysqlnavigator ?????

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 5:00 PM, Manuel Enrique Chavez Manzano [EMAIL PROTECTED] wrote: yes I have tried there, I have the packeage but when I tried to install it it asked for dependencies, and what I want is to install it by yum. # yum localinstall xxx.rpm This will try to pull the

[CentOS] Re: SELinux error message on CentOS 5: multiple same specifications

2008-06-06 Thread Filipe Brandenburger
Hi, For the record, I found and fixed the problem. I had some users with their home wrongly set on LDAP. One of them had the home set to /usr/local/whatever and a /bin/sh shell, and another had /colossus/users/herusername as home. The script genhomedircon (which apparently is run by RPM every

[CentOS] Hardening CentOS by removing hacker tools

2008-06-06 Thread Filipe Brandenburger
Hi, My boss asked me to harden a CentOS box by removing hacker tools, such as nmap, tcpdump, nc (netcat), telnet, etc. I would like to know which list of packages would you remove from a base install. I would appreciate if someone could point me to a standard way of doing this. I know there are

Re: [CentOS] Hardening CentOS by removing hacker tools

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 7:54 PM, Luke S Crawford [EMAIL PROTECTED] wrote: Removing network tools does not make it harder to break into the box, however, it can make it harder to do something with it once you are in. That's the idea. (also, [not] installing the programs just means that if your

Re: [CentOS] Hardening CentOS by removing hacker tools

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 10:09 PM, Jim Wildman [EMAIL PROTECTED] wrote: Better, google for tiny centos and build a new box with the minimum on it. Hmmm, that looks exactly like what I'm looking for! I'm actually trying to find someone who has already done the tough work and could give me some tips

[CentOS] Chroot'ed SSH

2008-06-06 Thread Filipe Brandenburger
Hi, Is anyone chrooting users that connect through SSH? I looked for it on Google and I basically saw several methods: - OpenSSH 5 supports ChrootDirectory (FC9 apparently has RPMs that probably could be rebuilt under CentOS 5) - There seem to be several patches for OpenSSH 4.x to do the chroot,

Re: [CentOS] Chroot'ed SSH

2008-06-06 Thread Filipe Brandenburger
On Sat, Jun 7, 2008 at 12:18 AM, Eric Wood [EMAIL PROTECTED] wrote: Just the other week sshd 4.9 enabled chroot for the first time I think. Fairly new stuff. You'll have to roll your own rpm for CentOS as it will be unlikely that they roll it - probably not even for 5.2 either. Yeah, I was

Re: [CentOS] Zoneminder

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 9:30 PM, Thomas Dukes [EMAIL PROTECTED] wrote: Does any one have current rpms for Zoneminder-1.23.3? I can't get the source to compile on 4.6. FC9 has 1.22.3. It probably shouldn't be hard to extract the specfile, edit it to use the 1.23.3 sources and try to rebuild it.

Re: [CentOS] using /dev/hda system to build initrd for /dev/sda system

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 10:58 PM, Jerry Geis [EMAIL PROTECTED] wrote: What might I look at changing to ensure my initrd is made correctly. Try copying /etc/modprobe.conf from the production machine to the machine where you built your kernel and then run mkinitrd again. You might also try to play

Re: [CentOS] Web proxy/content filter w/ AD integration

2008-06-08 Thread Filipe Brandenburger
On Sun, Jun 8, 2008 at 5:32 PM, Fabian Arrotin [EMAIL PROTECTED] wrote: It does it transparently in the way that for M$ Internet Explorer it will never ask a username/password , but it will for everything else. Actually, you can configure Firefox on Windows to authenticate using Windows

Re: [CentOS] Device Mapper and pretty names

2008-06-09 Thread Filipe Brandenburger
On Mon, Jun 9, 2008 at 8:31 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: How does one view the dm-{n} names wrt the actual dev names? I assume it involves dmsetup but I cant figure it out. I am using iostat to track some busy disk io and don't know which dm-{n} to watch :) Try ls -l

Re: [CentOS] Re: TFP inside firewall

2008-06-10 Thread Filipe Brandenburger
If conntrack can track the TFTP sessions, then you should be able to filter it using -m state in iptables. iptables -A ... -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A ... -m state --state NEW -p udp --dport 69 -j ACCEPT You can have one rule in INPUT and the other in OUTPUT, or

Re: [CentOS] control outgoing IP address?

2008-06-18 Thread Filipe Brandenburger
On Tue, Jun 17, 2008 at 6:51 PM, Les Mikesell [EMAIL PROTECTED] wrote: I'd like to have it use it's original IP as the source for outbound connections. Where do you control that? I didn't try it, but you probably can control that with the ip route command when you create a route to a

Re: [CentOS] remote access info please

2008-06-18 Thread Filipe Brandenburger
On Wed, Jun 18, 2008 at 4:28 PM, John Thomas [EMAIL PROTECTED] wrote: I use NX and find it amazing. I downloaded the RPMs from nomachine.com because I had not found that they are built in one of the repos (testing if memory serves). I second that. NX works over SSH so its connection is

Re: [CentOS] Forbidden: You don't have permission to access/phpMyAdmin/ on this server.

2008-06-18 Thread Filipe Brandenburger
On Wed, Jun 18, 2008 at 5:45 PM, Herta Van den Eynde [EMAIL PROTECTED] wrote: Joshua previously suggested SELinux might have something to do with it, but being new to it, I didn't know what to do with that info. I'll need to read up on what this means exactly. I originally untarred the

Re: [CentOS] Autofs and mount/umount entries in the nfs server logs

2008-06-20 Thread Filipe Brandenburger
On Fri, Jun 20, 2008 at 9:54 AM, Rob Lines [EMAIL PROTECTED] wrote: I would like to continue to see these messages but I would like to see them put else where but looking through the documentation for syslog I couldn't find any way to separate just those messages out. I also have the same

Re: [CentOS] Copy of own messages

2008-07-01 Thread Filipe Brandenburger
I noticed that behaviour too. Since then, whenever I start a new thread, just after sending the message I click on see sent message (or something to that effect) and then I tag it with centos or whatever tag is appropriate for that list. Apart from the [CentOS] tag on the subject, that fixes it

Re: [CentOS] How to Auto Add forward slash / when accessing a link/url through ProxyPass

2008-07-06 Thread Filipe Brandenburger
Hi, It's been long since I don't write Proxy rules, but IIRC you have to match /s on the left side and on the right side. On Sun, Jul 6, 2008 at 6:24 AM, ankush grover [EMAIL PROTECTED] wrote: ProxyPass /testdiaryhttp://testdiary.example.com/ ProxyPassReverse /testdiary

Re: [CentOS] configuration file for tunneling device

2008-07-06 Thread Filipe Brandenburger
Hi, On Sun, Jul 6, 2008 at 9:12 AM, Nabin Limbu [EMAIL PROTECTED] wrote: For GRE tunneling, how can I specify the parameters for tunneling device, so that I ifup-tunnel will automatically read and start the interface and I don't have to write the below scripts in my start-up file. Apparently

Re: [CentOS] Three Identical systems - short cut to setting up the drives?

2008-07-06 Thread Filipe Brandenburger
Hi, On Sun, Jul 6, 2008 at 6:36 AM, William L. Maltby [EMAIL PROTECTED] wrote: If it's a boot drive, remember to rebuild your initrd and modify the init file to ignore lvm lock failures with the new VG name. Otherwise you'll be fighting some more battles. Yes, I remember getting burned by

Re: [CentOS] Three Identical systems - short cut to setting up the drives?

2008-07-06 Thread Filipe Brandenburger
On Sun, Jul 6, 2008 at 3:28 PM, William L. Maltby [EMAIL PROTECTED] wrote: He is trying to copy an existing install, transport the drive and boot. Until he gets a boot that allows the new root to be detected *as* the new root, I don't know if that would work. You can actually do that by using

Re: [CentOS] Couple of CentOS 5.2 dhcp notes

2008-07-07 Thread Filipe Brandenburger
Hey, On Sun, Jul 6, 2008 at 7:39 PM, Ian Forde [EMAIL PROTECTED] wrote: In fact, here's the output... (IP, hostname, and Mac info changed...) [EMAIL PROTECTED] etc]# dhcpd Internet Systems Consortium DHCP Server V3.0.5-RedHat Copyright 2004-2006 Internet Systems Consortium. All rights

Re: [CentOS] install from USB thumdrive

2008-07-08 Thread Filipe Brandenburger
On Tue, Jul 8, 2008 at 11:53 AM, Jerry Geis [EMAIL PROTECTED] wrote: Is there a procedure to use an 8GIG thumbdrive to copy the centos 5.2 dvd contents to the thumbdrive then run isolinux (or something like it) and be able to use the thumbdrive as the install media? Look for a file named

Re: [CentOS] Does sprof work on CentOS5?

2008-07-09 Thread Filipe Brandenburger
On Wed, Jul 9, 2008 at 1:57 PM, Hywel Richards [EMAIL PROTECTED] wrote: LD_LIBRARY_PATH=. LD_PROFILE=libmy.so ./mymain ... $ sprof libmy.so /var/tmp/libmy.so.profile sprof: failed to load shared object `libmy.so' Acutally I have no idea of what sprof is or does, but from the error

Re: [CentOS] yum dependency problem

2008-07-09 Thread Filipe Brandenburger
On Wed, Jul 9, 2008 at 10:13 PM, fred smith [EMAIL PROTECTED] wrote: Error: Missing Dependency: libdirectfb-0.9.so.25 is needed by package mplayer This is an issue with rpmforge (Dag's) repository. It has been fixed today, it should be propagated to mirrors by tomorrow. See this post from Dag:

Re: [CentOS] rsh problems in CentOS 5.2 (was cvs command failure on 5.2)

2008-07-09 Thread Filipe Brandenburger
On Mon, Jul 7, 2008 at 7:31 PM, MHR [EMAIL PROTECTED] wrote: If I shut off the firewall on sushi (/etc/init.d/iptables stop), the rsh connections all work fine. I need to go research how to read the iptables output because right now it's greek to me - I can read the letters, but the words

Re: [CentOS] /etc/pam.d/system-auth changes in update

2008-07-09 Thread Filipe Brandenburger
On Wed, Jul 9, 2008 at 11:03 PM, listmail [EMAIL PROTECTED] wrote: Yum has placed /etc/pam.d/system-auth.rpmnew and it's different than the existing file, which is actually a link to system-auth-ac. The exact same question came up two weeks ago. Look here:

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 4:26 PM, Sean Carolan [EMAIL PROTECTED] wrote: You will need to reboot the server to enable the changes. IIRC, ipv6 is not a module that you can load or unload anytime like a network or sound card driver. No, not at all. If you just try to ifconfig after commenting the

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 5:19 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: # echo ifdown eth0 ifup eth0 | at now What you probably mean is: # echo ifdown eth0 ifup eth0 | at now Otherwise it will run echo, and then it will run ifup eth0 piping its output to at. I don't see what's the problem

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 7:22 PM, Meenoo Shivdasani [EMAIL PROTECTED] wrote: I'm running up against a problem that seems to be related to SELinux. Any ideas? If it's SELinux related, have a look at /var/log/audit/audit.log, that will tell you what is being blocked in SELinux. That would be a

Re: [CentOS] Understanding iptables

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 6:08 PM, MHR [EMAIL PROTECTED] wrote: ACCEPT tcp -- anywhere anywherestate NEW tcp dpt:login ACCEPT tcp -- anywhere anywherestate NEW tcp dpt:shell It seems right to me... Try using iptables -vL, it will show

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 9:41 PM, Meenoo Shivdasani [EMAIL PROTECTED] wrote: type=AVC msg=audit(1215740151.446:796): avc: denied { name_bind } for pid=21081 comm=named src=16660 scontext=root:system_r:named_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=udp_socket SELinux is preventing

Re: [CentOS] Understanding iptables

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 9:53 PM, MHR [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] mrichter]$ rsh sushi ls sushi: Connection refused Are you sure the daemons are up and listening on those ports? What does netstat -ltp says on sushi? Filipe ___ CentOS

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 10:39 PM, Meenoo Shivdasani [EMAIL PROTECTED] wrote: To be more accurate, I installed the patched version of BIND which randomizes the source port to address the latest DNS vulnerability. Did you update the selinux-policy package at the same time? On my system I have

Re: [CentOS] Understanding iptables

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 10:42 PM, Robert Spangler [EMAIL PROTECTED] wrote: Could you post /etc/sysconfig/iptables? /etc/sysconfig/iptables doesn't necessarily reflect what is running right now, and you can't include the counters with it. An acceptable compromise would be posting the output of

Re: [CentOS] Latest samaba updates

2008-07-11 Thread Filipe Brandenburger
On Fri, Jul 11, 2008 at 8:24 AM, David G. Mackay [EMAIL PROTECTED] wrote: Thanks, I will remember. Now I just need to find out what it means by read-only. A find -perm 400 on the directory gives no hits, nor do most other variations, like 444, etc. Try: find . \! -perm /222 See man find

Re: [CentOS] Finding a python module

2008-07-11 Thread Filipe Brandenburger
On Fri, Jul 11, 2008 at 9:08 AM, Robert Moskowitz [EMAIL PROTECTED] wrote: Error: Missing Dependency: python(abi) = 2.5 is needed by package hipl-lib Centos 5.2 provides python 2.5.1. Are you sure? On an up to date system: # cat /etc/redhat-release CentOS release 5.2 (Final) # rpm -q python

Re: [CentOS] Finding a python module

2008-07-11 Thread Filipe Brandenburger
On Fri, Jul 11, 2008 at 9:42 AM, Robert Moskowitz [EMAIL PROTECTED] wrote: Oh, wow, is my system hosed now Yes, for sure! Replacing the system's python is a pretty bad idea these days, as many of RedHat's tools depend on it. I am going to either have to find 2.5 that I can install on

Re: [CentOS] Re: Problem with Bonding Driver

2008-07-11 Thread Filipe Brandenburger
On Fri, Jul 11, 2008 at 3:06 PM, Art Age Software [EMAIL PROTECTED] wrote: That works! I did not realize that the Red Hat network scripts have support for bonding options. (I did not find this documented anywhere.) But sure enough, I am able to set up a different primary interface for each

[CentOS] Firefox 3 for CentOS 4

2008-07-11 Thread Filipe Brandenburger
Hi, I'm trying to make Firefox 3 work in CentOS 4. So far I was able to do it by installing the evolution28-* rpms, which have a more recent GTK, Cairo, Pango, etc. With those libs installed and configured, Firefox 3 from mozilla.org works fine. The only thing is that it doesn't use the

Re: [CentOS] yum remove from stdout

2008-07-13 Thread Filipe Brandenburger
On Sun, Jul 13, 2008 at 11:16 AM, Ray Van Dolson [EMAIL PROTECTED] wrote: You could probably also do something like: # for line in `cat packages.txt`; do echo remove $line yumshell.txt; done # echo run yumshell.txt # yum shell yumshell.txt Or, without the tempfile and in one line: # {

Re: [CentOS] Can an ISO be specified allow mount setsebool -P allow_mount_iso=1 insted of setsebool -P allow_mount_anyfile=1 SE context samba share

2008-07-13 Thread Filipe Brandenburger
Hi, Please try to be more specific about what you are trying to do, how you are trying to do it, what you expected, what is going wrong, and what you tried to do to repair it. Your previous mail looks like the output of a tool, I don't even know which. Knowing that would help solve your issue.

Re: [CentOS] Cluster: understanding virtual IP

2008-07-13 Thread Filipe Brandenburger
On Sun, Jul 13, 2008 at 10:56 AM, Dirk H. Schulz [EMAIL PROTECTED] wrote: Okay, I found that ifconfig does not show the virtual IP address Are you sure? These are interface aliases, they should show up as a different interface such as eth0:0 or eth0:1. If you run ifconfig without any

Re: [CentOS] background process

2008-07-15 Thread Filipe Brandenburger
On Tue, Jul 15, 2008 at 08:34, David Hláčik [EMAIL PROTECTED] wrote: When i am connected to server using SSH . How can i fetch process to background and close ssh session and not kill that process? And how can i later connect to server and fetch process from background to console? Ctrl-Z will

Re: [CentOS] vncviewer via gateway option question

2008-07-15 Thread Filipe Brandenburger
On Tue, Jul 15, 2008 at 10:36, Robert Moskowitz [EMAIL PROTECTED] wrote: VNC_VIA_CMD=/usr/bin/ssh -p 7722 -f -L $L:$H:$R $G sleep 20 You could actually do this a little bit easier, by defining a user ssh config file in ~/.ssh This simplified my ssh commands, not having to include the -p

Re: [CentOS] Stopping a server not controled by service

2008-07-15 Thread Filipe Brandenburger
On Tue, Jul 15, 2008 at 15:54, Alex [EMAIL PROTECTED] wrote: If you want to terminate the process you can find the PID via 'ps aux' and issue the command 'kill -9 pidofprocess'. If you know the name of the process you may use 'killall -9 processname'. Why the hell -9? TERM is -15 and HUP is

[CentOS] e-SATA card well supported by Linux (CentOS) with built-in drivers and that supports hot plug

2008-07-23 Thread Filipe Brandenburger
Hi, I'm looking for a good e-SATA card, preferrently one that is supported by Linux with built-in drivers (no need to compile the modules from the vendor), or at least that the vendor's drivers are packaged with dkms or something similar that makes it easy on kernel upgrades. It's essential that

Re: [CentOS] rpm dependency question

2008-07-30 Thread Filipe Brandenburger
On Wed, Jul 30, 2008 at 18:22, Mark Belanger [EMAIL PROTECTED] wrote: Problem is, the vendor supplied un-install script fails to un-install because of the dependency MyPackage has on one of it's libraries. Well, that's the correct behaviour, that's what RPM is for after all. If you uninstall

Re: [CentOS] out of memory

2008-07-30 Thread Filipe Brandenburger
On Wed, Jul 30, 2008 at 20:31, Craig White [EMAIL PROTECTED] wrote: how does one determine who the culprit was? Very hard... the kernel tries to guess which process is causing the issue, but from what I've seen (and I see OOMs every week) it guesses wrong most of the time. In my case, the victim

Re: [CentOS] Outbound connections not using primary eth0 IP

2008-08-04 Thread Filipe Brandenburger
On Mon, Aug 4, 2008 at 13:00, Neil Aggarwal [EMAIL PROTECTED] wrote: Any ideas why this is happening? Because you have two different default gateways. In that case, Linux will rotate between them, using one or the other for each outgoing packet. If you want all your outgoing traffic to go

Re: [CentOS] Outbound connections not using primary eth0 IP

2008-08-04 Thread Filipe Brandenburger
On Mon, Aug 4, 2008 at 15:31, Neil Aggarwal [EMAIL PROTECTED] wrote: I don't understand how that works since the IP addresses from :0 and :1 are on a different subnet than the one for eth0 and they have a different gateway. I guess I don't understand the finer points of networking. The point

Re: [CentOS] Changing boot drives

2008-08-12 Thread Filipe Brandenburger
On Tue, Aug 12, 2008 at 21:22, MHR [EMAIL PROTECTED] wrote: So, what is the best way to put a correct MBR that will boot from /dev/sda on /dev/sda if /dev/sda is the first boot device? Assuming you use grub to boot: # grub-install /dev/sda HTH, Filipe

Re: [CentOS] Missing fonts for tightvnc

2008-08-12 Thread Filipe Brandenburger
On Tue, Aug 12, 2008 at 14:53, Robert Moskowitz [EMAIL PROTECTED] wrote: Font directory '/usr/X11R6/lib/X11/fonts/misc' not found - ignoring (then the same message for Speedo, Type1, 75dpi, and 100dpi). Then a fatel server error about: could not open default fount 'fixed' From the path, I'm

Re: [CentOS] Sendmail is not putting the full information in the received header anymore

2008-08-12 Thread Filipe Brandenburger
Hi, On Tue, Aug 12, 2008 at 09:38, Jason Pyeron [EMAIL PROTECTED] wrote: Previously, when our server received an email it would slap the rcpt to in the received headers by adding a for ... any ideas what has changed? In my (vast) experience with e-mail (most of it with Postfix though) I

Re: [CentOS] Missing fonts for tightvnc

2008-08-13 Thread Filipe Brandenburger
On Tue, Aug 12, 2008 at 22:42, Robert Moskowitz [EMAIL PROTECTED] wrote: No. This is Centos 5! So perhaps there is an issue with tightVNC Yes, you may try to create symbolic links to have the fonts on the other path. I'm not an expert on X11 here, but I don't think applications would have

Re: [CentOS] can't get Ethernet SNMP information

2008-08-13 Thread Filipe Brandenburger
On Wed, Aug 13, 2008 at 04:00, Rudi Ahlers [EMAIL PROTECTED] wrote: Unfortunately this didn't work. Although I could see a whole lot of MIB's now, Cacti still doesn't graph the network interface I'm not an expert on Cacti, but... are you sure you configured the proper interface name on it? Are

Re: [CentOS] NFS issues

2008-08-14 Thread Filipe Brandenburger
On Wed, Aug 13, 2008 at 09:48, Johan Swensson [EMAIL PROTECTED] wrote: I was also thinking about mounting the nfs shares as soft, is this a good idea? No, this is a bad idea. Mounting as soft means that if there is any errors or timeouts, your writes will fail, and most programs don't check for

Re: [CentOS] Help setting up external drive via Firewire

2008-08-14 Thread Filipe Brandenburger
On Wed, Aug 13, 2008 at 18:43, Bill Campbell [EMAIL PROTECTED] wrote: My experience with Firewire has not been all that good. I figured that since Apple had been using it for years, and it is an IEEE standard, that Firewire would be more reliable than USB. I was also a bit wary as the USB

Re: [CentOS] FSID and NFS

2008-08-17 Thread Filipe Brandenburger
On Sat, Aug 16, 2008 at 11:30, Mag Gam [EMAIL PROTECTED] wrote: What is the purpose of FSIDs? I am exporting 30 volumes via NFS. Do I need a FSID option? FSID is needed in NFSv3 if the devices you are exporting may change minor numbers across reboots. For example, if you have a filesystem on

Re: [CentOS] Missing fonts for tightvnc

2008-08-18 Thread Filipe Brandenburger
Hi, On Mon, Aug 18, 2008 at 16:42, Robert Moskowitz [EMAIL PROTECTED] wrote: vncserver: The USER environment variable is not set. So, is it set or not? It's usually set by /etc/profile, so if it's not set, that might indicate you have an issue with your setup. HTH, Filipe

Re: [Centos] mirroring with LVM?

2008-08-18 Thread Filipe Brandenburger
Hi, On Sun, Aug 17, 2008 at 09:50, Gordon McLellan [EMAIL PROTECTED] wrote: Command: lvconvert -m1 /dev/vg1/iscsi_deeds_data Insufficient suitable allocatable extents for logical volume : 10240 more required Any ideas? Did you try: lvconvert -m1 /dev/vg1/iscsi_deeds_data /dev/sdb4 ? HTH,

  1   2   3   4   5   6   >