Re: [CentOS] RHEL 5.3 released

[Tim Verhoeven]

On Wed, Jan 21, 2009 at 1:08 AM, Akemi Yagi  wrote:
> On Tue, Jan 20, 2009 at 4:04 PM, Karanbir Singh  wrote:
>> Akemi Yagi wrote:
>>>
>>> http://www.centos.org/modules/newbb/viewtopic.php?topic_id=18223&forum=37
>>>
>>
>> Would it be possible to migrate this info to a wiki page ? So more
>> people can edit the main content, perhaps a link from the wiki page to
>> this forum post so people who want to talk about it, can carry on doing
>> so - but still refer people to the wiki page for a real status update /
>> release situation.
>
> Certainly it is possible.  Tim? Ralph? Fabian? Ned?

Yep,

But I'm wondering where we need to put it ? I was thinking in either
the general CentOS FAQ or in the CentOS 5 FAQ ? Anyone can think of a
better place ?

Regards,
Tim

-- 
Tim Verhoeven - tim.verhoeven...@gmail.com - 0479 / 88 11 83

Hoping the problem  magically goes away  by ignoring it is the
"microsoft approach to programming" and should never be allowed.
(Linus Torvalds)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache Server Tuning for Performance

[Ralph Angenendt]

Kai Schaetzl wrote:
> There's your limit. However, you should check with your hardware if upping 
> it is really desirable. With 4 GB I think you won't be able to handle much 
> more anyway.

That really depends. If you only shove out static pages and have one or
two or three odd cgis on the machine, you can flatten down the httpd
binary quite a bit by throwing out unneeded modules.

500 to 750 clients shouldn't be that much of a problem then ...

Cheers,

Ralph


pgpt1nOUMM0KR.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 5.3 released

[Ralph Angenendt]

Tim Verhoeven wrote:
> But I'm wondering where we need to put it ? I was thinking in either
> the general CentOS FAQ or in the CentOS 5 FAQ ? Anyone can think of a
> better place ?

I don't think people will find that when it's put in the FAQ, especially
if work is being done on that page (like adding to it when the first
build is through, adding to it when QA found out that another complete
build has to be done, add to it when translators are done). 

But I'm not too sure on where to prominently put it either. 

Remove the "Stay in touch at planet centos" link and put a prominent
link like "Stay in touch with 5.3 development" on there? 

Cheers,

Ralph


pgpJf459YmUof.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox error msg.

[Ralph Angenendt]

Bob Taylor wrote:
> After installing my backup of /home and seeing firefox not restart, I
> started it from the command line with the immediate error:
> 
> Could not find compatible GRE between version 1.9.0.5 and 1.9.0.5.
> 
> I'm sorry, I'm at a complete loss. What's a GRE?

It's probably misspelt and something on your disk was eaten by a GRUE. 

Try "sudo xulrunner --register-global", because somehow firefox believes
that it cannot find a working xulrunner instance on your machine.

Do that *after* you checked that firefox and xulrunner are updated to
the latest versions:

[angen...@shutdown ~]$rpm -q firefox xulrunner
firefox-3.0.5-1.el5.centos.x86_64
xulrunner-1.9.0.5-1.el5.x86_64
[angen...@shutdown ~]$

Cheers,

Ralph

PS:  A GRE really isn't as fearsome as a GRUE is, a GRE is just the Gecko
 Runtime Environment.
PPS: Depending on how you have been socialized:
 


pgpGs3QEo9smQ.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ext4 in 5.3

[Renato de Oliveira Diogo]

Hi;

Do you test in other file system? Like xfs or jfs?
You can use the "time" command to get the exate time:
# time cp /pathsource/file8g /pathdest/

Post here yours results.

[]s

Renato de Oliveira Diogo

Bacharel em Ciência da Computação
UNESP - Bauru

LPIC1 - Linux Professional Institute Certification - Nível 1

renato.di...@gmail.com
renato.di...@yahoo.com.br


On Wed, Jan 21, 2009 at 02:11, Stephen John Smoogen wrote:

> On Tue, Jan 20, 2009 at 6:33 PM, Jerry Geis  wrote:
> > Hi guys - I'm really looking forward to 5.3 for the potential of ext4.
> > I am moving/copying image files lately 8G file and it is slow. I am
> > hoping that ext4 really speeds that up.
>
> I don't think it will speed things up much. 8GB files are mostly
> hardware throughput and ext3/4 will actually be slower because the
> journalling etc are to make it more robust but at a speed cost. You
> would probably see better speed by going to ext2.
>
>
>
>
>
> --
> Stephen J Smoogen. -- BSD/GNU/Linux
> How far that little candle throws his beams! So shines a good deed
> in a naughty world. = Shakespeare. "The Merchant of Venice"
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Compile Problem

[Joseph L. Casale]

>OK - well, I am pretty much sold on Alfresco but I can't guarantee that
>it will do the SSO with FF - it definitely will do AD and I think kicks
>Viewpoint butt.

Nice interface, do I understand this right: the only community version is
a dev snapshot, and it needs java (shudder)?

I just started looking at Mindtouch which distributes a stable community
version in rpm format and doesn't use java. I continue trying to get the
auth in Dokuwiki for one more day, then I will have to trow the towel in:)

Thanks for the reco!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Compile Problem

[Craig White]

On Wed, 2009-01-21 at 05:35 -0700, Joseph L. Casale wrote:
> >OK - well, I am pretty much sold on Alfresco but I can't guarantee that
> >it will do the SSO with FF - it definitely will do AD and I think kicks
> >Viewpoint butt.
> 
> Nice interface, do I understand this right: the only community version is
> a dev snapshot, and it needs java (shudder)?
> 
> I just started looking at Mindtouch which distributes a stable community
> version in rpm format and doesn't use java. I continue trying to get the
> auth in Dokuwiki for one more day, then I will have to trow the towel in:)
> 
> Thanks for the reco!

Re: Alfresco...tomcat - so yes, java. Hardly a show stopper in my book.

Development has been extremely robust...company is making money, new
versions and features are regularly released/updated and the community
version works exceptionally well.

also, automation is/can be javascript (weird I know), but it's quite
robust.

It's not a simple system but it's got a ton of features.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Web pages time out after server rebuild

[Rob Kampen]

Hi All,
I have an old (2004) Intel based server with 4G of ram running
Linux ndgonline.net 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 
2008 i686 i686 i386 GNU/Linux

fully up to date using centOS rpms for apache, php, and mysql.
I have just changed from dmraid to md raid for the OS on mirrored 80Gb 
SATA drives. (long story for another time)
Mysql lives on a Intel hardware raid 5 controlled array - as is has for 
four years.
My application has not changed and also runs just fine on another server 
(although this one is 64 bit) that has a mirrored mysql database 
replication from this one.

I have compared apache conf files, my.cnf and all appears well.
The page that times out on our firefox browsers after 30 seconds does 
have a series of complex mysql queries.

There are no log messages other than ssl_error_log that shows:
PHP Fatal error:  Maximum execution time of 30 seconds exceeded in 
/var/www/htdocs/ndg/includes/customHandler.inc on line 87

the line number varies as does the file name it reports.
It will serve pages that only have a few records, yet on my functioning 
server even the large pages return over the internet in less than 2 seconds.

So I'm thinking not enough memory? - but it was working well last Monday.
something slowing mysql?? - all other queries in this app appear just fine
php having issues?
How do I get some extra log info to track this down?

Kind regards
Rob
begin:vcard
fn:Rob Kampen
n:Kampen;Rob
email;internet:rkam...@kampensonline.com
tel;home:407-876-4854
version:2.1
end:vcard

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Status of PostgreSQL and PHP in Testing

[Peter Hopfgartner]

Peter Hopfgartner wrote:
> Dear CentOS developers
>
> I would like to have ask some questions about the PostgreSQL and PHP 
> packages in the current Testing repository for CentOS 5.
>
> In http://wiki.centos.org/QaWiki/TestingRepo there is a note, that the 
> testing period is about 3 weeks. Currently, the PostgreSQL and PHP 
> packages in http://dev.centos.org/centos/5/testing/SRPMS were created in 
> September 08.
>
> Do the developers need more feedback about the packages in testing? Is 
> there something (a wiki page, a ticket in the bug tracker or something 
> else) where the feedback can be collected?
>
>   
I've tried the packaged on our development server, an Opteron server 
with a curent CentOS5-x86_64 installation with 9 GB of postgresql data, 
a good part of which geografical data.

Basically, until now everything runs as expected. No problems with the 
selected packages.

Regards,

Peter
> Is there a testing plan for the packages (works with this and that 
> software, upgrade from base works)?
>
> What is the best way I can help? Simply sending feedback to the ML?
>
> Is there a kind of policy for the upstream version, something like: 
> version is expected to be in the next major Red Hat release, must be 
> part of Upstream Web Stack or another Upstream product. Casting this to 
> a concrete question: Can upgrades to PHP 5.2.8 or PostgreSQL 8.2.11 be 
> expected to happen.
>
> And is there already a concrete plan to move those 2 packages to Plus 
> [http://mirror.centos.org/centos/5/centosplus/]?
>
> Regards and thank you for this great distribution. The more I work with 
> it the more I like it.
>
> Peter
>
>   


-- 
 
Dott. Peter Hopfgartner
 
R3 GIS Srl - GmbH
Via Johann Kravogl-Str. 2
I-39012 Meran/Merano (BZ)
Email: peter.hopfgart...@r3-gis.com
Tel. : +39 0473 494949
Fax  : +39 0473 069902
www  : http://www.r3-gis.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache Server Tuning for Performance

[Kai Schaetzl]

Ralph Angenendt wrote on Wed, 21 Jan 2009 10:52:59 +0100:

> That really depends. If you only shove out static pages and have one or
> two or three odd cgis on the machine, you can flatten down the httpd
> binary quite a bit by throwing out unneeded modules.
> 
> 500 to 750 clients shouldn't be that much of a problem then ...

Sure it depends ;-) I do serve dynamic pages but by removing the really 
unnecessary modules I made my httpds much faster (especially on pipelined 
image downloads) and they only have some 10 MB (RES) per worker.

But I would expect that they are running the default set of modules.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Help with find

[Matt]

This finds all files modified 5 minutes ago.

find /home/*/ -cmin 5 -type f -mindepth 1 -maxdepth 1

I want to find all files modified 5 or less minutes ago.  How do I do
that?  "find -mtime -1" only works in 24 hour increments.

Matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Help with find

[Pintér Tibor]

Matt wrote:
> This finds all files modified 5 minutes ago.
> 
> find /home/*/ -cmin 5 -type f -mindepth 1 -maxdepth 1
> 
> I want to find all files modified 5 or less minutes ago.  How do I do
> that?  "find -mtime -1" only works in 24 hour increments.

-cmin -5

t
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache Server Tuning for Performance

[nate]

Ralph Angenendt wrote:
> Kai Schaetzl wrote:
>> There's your limit. However, you should check with your hardware if upping
>> it is really desirable. With 4 GB I think you won't be able to handle much
>> more anyway.
>
> That really depends. If you only shove out static pages and have one or
> two or three odd cgis on the machine, you can flatten down the httpd
> binary quite a bit by throwing out unneeded modules.
>
> 500 to 750 clients shouldn't be that much of a problem then ...

Yeah gotta monitor it.. just checked in on some servers I ran at
my last company and the front end proxies (99% mod_proxy) seem to
peak out traffic wise at about 230 workers. For no other reason other
than because I could each proxy has 8 apache instances running(4 for
HTTP 4 for HTTPS). CPU usage peaks at around 3%(dual proc single core),
memory usage around 800MB. About 100 idle workers. Keepalive was set
to 300 seconds due to poor application design.

One set of back end apache servers peaks traffic wise at around 100
active workers, though memory usage was higher, around 2GB because
of mod_fcgid running ruby on rails. CPU usage seems to be at around
25%(dual proc quad core) for that one application.

Each back end application had it's own dedicated apache instance(11
apps) for maximum stability/best performance monitoring. The bulk
of them ran on the same physical hardware though.

Traffic routing was handled by a combination of F5 load balancers
and the apache servers previously mentioned(F5 iRules were too slow
and F5's TMM was not scalable at the time).

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web pages time out after server rebuild

[nate]

Rob Kampen wrote:

> How do I get some extra log info to track this down?

Have you tried to run 'show full processlist' on mysql while
the query is running? It should show all active queries, what
they are doing and how long they have been running for.

Also enable slow query logging and logging when not using
indexes, add to /etc/my.cnf and restart mysql:

example:
log-slow-queries= /var/lib/mysql_logs/slowqueries.log
log-queries-not-using-indexes
long_query_time = 3

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ext4 in 5.3

[nate]

Renato de Oliveira Diogo wrote:
> Hi;
>
> Do you test in other file system? Like xfs or jfs?
> You can use the "time" command to get the exate time:
> # time cp /pathsource/file8g /pathdest/
>
> Post here yours results.

I like to use rsync with --progress so it shows realtime
updates on the status of the copy when testing performance
like that.

But I agree that the file system likely will not have a
noticeable overhead with regards to copy performance on
single 8GB files, now 10,000 files that take up 8GB of
space I can see a file system having a performance impact.

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ext4 in 5.3

[Peter Kjellstrom]

On Wednesday 21 January 2009, nate wrote:
> Renato de Oliveira Diogo wrote:
> > Hi;
> >
> > Do you test in other file system? Like xfs or jfs?
> > You can use the "time" command to get the exate time:
> > # time cp /pathsource/file8g /pathdest/
> >
> > Post here yours results.
>
> I like to use rsync with --progress so it shows realtime
> updates on the status of the copy when testing performance
> like that.
>
> But I agree that the file system likely will not have a
> noticeable overhead with regards to copy performance on
> single 8GB files, now 10,000 files that take up 8GB of
> space I can see a file system having a performance impact.

I disagree. On most raid-controllers we use XFS has a significant advantage 
over Ext3 when it comes to large sequential writes. Ext3 gets nowhere near 
the bare metal performance.

So, in short, I think it will be interesting to see how Ext4 performs for 
this.

/Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache Server Tuning for Performance

[Rainer Duffner]

Kai Schaetzl schrieb:
> Ralph Angenendt wrote on Wed, 21 Jan 2009 10:52:59 +0100:
>
>   
>> That really depends. If you only shove out static pages and have one or
>> two or three odd cgis on the machine, you can flatten down the httpd
>> binary quite a bit by throwing out unneeded modules.
>>
>> 500 to 750 clients shouldn't be that much of a problem then ...
>> 
>
> Sure it depends ;-) I do serve dynamic pages but by removing the really 
> unnecessary modules I made my httpds much faster (especially on pipelined 
> image downloads) and they only have some 10 MB (RES) per worker.
>
> But I would expect that they are running the default set of modules.
>
> Kai
>
>   

If you can separate-out the images to a specific URL (img.domain.com)
and put them all in the same directory, you can use NGINX to serve them.
Of course, the actual transfer-speed will not increase much - but
latency will go down to the absolute minimum.
And latency is what makes a page appear "fast" or "slow" to customers.




Rainer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Help with find

[Matt]

>> find /home/*/ -cmin 5 -type f -mindepth 1 -maxdepth 1
>>
>> I want to find all files modified 5 or less minutes ago.  How do I do
>> that?  "find -mtime -1" only works in 24 hour increments.
>
> -cmin -5

I cant believe I missed that.  Thanks.

Matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web pages time out after server rebuild

[Scott Silva]

on 1-21-2009 7:14 AM Rob Kampen spake the following:
> Hi All,
> I have an old (2004) Intel based server with 4G of ram running
> Linux ndgonline.net 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST
> 2008 i686 i686 i386 GNU/Linux
> fully up to date using centOS rpms for apache, php, and mysql.
> I have just changed from dmraid to md raid for the OS on mirrored 80Gb
> SATA drives. (long story for another time)
> Mysql lives on a Intel hardware raid 5 controlled array - as is has for
> four years.
> My application has not changed and also runs just fine on another server
> (although this one is 64 bit) that has a mirrored mysql database
> replication from this one.
> I have compared apache conf files, my.cnf and all appears well.
> The page that times out on our firefox browsers after 30 seconds does
> have a series of complex mysql queries.
> There are no log messages other than ssl_error_log that shows:
> PHP Fatal error:  Maximum execution time of 30 seconds exceeded in
> /var/www/htdocs/ndg/includes/customHandler.inc on line 87
> the line number varies as does the file name it reports.
> It will serve pages that only have a few records, yet on my functioning
> server even the large pages return over the internet in less than 2
> seconds.
> So I'm thinking not enough memory? - but it was working well last Monday.
> something slowing mysql?? - all other queries in this app appear just fine
> php having issues?
> How do I get some extra log info to track this down?
> 
Did you do the obvious and check for table or index corruption?


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web pages time out after server rebuild

[Rob Kampen]

Scott Silva wrote:

  on 1-21-2009 7:14 AM Rob Kampen spake the following:
  
  
Hi All,
I have an old (2004) Intel based server with 4G of ram running
Linux ndgonline.net 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST
2008 i686 i686 i386 GNU/Linux
fully up to date using centOS rpms for apache, php, and mysql.
I have just changed from dmraid to md raid for the OS on mirrored 80Gb
SATA drives. (long story for another time)
Mysql lives on a Intel hardware raid 5 controlled array - as is has for
four years.
My application has not changed and also runs just fine on another server
(although this one is 64 bit) that has a mirrored mysql database
replication from this one.
I have compared apache conf files, my.cnf and all appears well.
The page that times out on our firefox browsers after 30 seconds does
have a series of complex mysql queries.
There are no log messages other than ssl_error_log that shows:
PHP Fatal error:  Maximum execution time of 30 seconds exceeded in
/var/www/htdocs/ndg/includes/customHandler.inc on line 87
the line number varies as does the file name it reports.
It will serve pages that only have a few records, yet on my functioning
server even the large pages return over the internet in less than 2
seconds.
So I'm thinking not enough memory? - but it was working well last Monday.
something slowing mysql?? - all other queries in this app appear just fine
php having issues?
How do I get some extra log info to track this down?


  
  Did you do the obvious and check for table or index corruption?
  

Yes, mysqlcheck -A shows all OK.
I am not sure this is a mysql problem as all other pages in the app
work fine and some of these also retrieve lots of data with no noticed
lag.

  

  
  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  



begin:vcard
fn:Rob Kampen
n:Kampen;Rob
email;internet:r...@kampensonline.net
tel;cell:407-341-3815
version:2.1
end:vcard

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web pages time out after server rebuild

[Rob Kampen]

nate wrote:

  Rob Kampen wrote:

  
  
How do I get some extra log info to track this down?

  
  
Have you tried to run 'show full processlist' on mysql while
the query is running? It should show all active queries, what
they are doing and how long they have been running for.

Also enable slow query logging and logging when not using
indexes, add to /etc/my.cnf and restart mysql:

example:
log-slow-queries= /var/lib/mysql_logs/slowqueries.log
log-queries-not-using-indexes
long_query_time = 3

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  

Have entered those into the my.cnf file, restarted mysqld and monitored
the file - no entries forthcoming with the faulty page request.
looking at show full processlist, I see the start of a new process,
then almost immediately it goes to sleep and then just sits there
Thanks for these items Nate - look useful for the future.
I think I need to look in the php direction
Rob


begin:vcard
fn:Rob Kampen
n:Kampen;Rob
email;internet:r...@kampensonline.net
tel;cell:407-341-3815
version:2.1
end:vcard

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] help with udev rules needed

[rray_1]

I am migrating from Fedora 8 to CentOS 5.2
I have usb dvd

On F8 I have /etc/udev/rules/00-my-custom.rules
BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N 
",SYMLINK="dvd",OWNER="rray"
When I plug in dvd I get
$ ll /dev/scd1
lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1
  ll /dev/sr1
brw-r- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1
Everything is ok

On C5.2 I have /etc/udev/rules/00-my-custom.rules
BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
",SYMLINK="dvd",OWNER="rray"
When I plug in dvd I get
# ll /dev/scd0
brw-rw 1 root disk 11, 0 Jan 21 12:30 /dev/scd0
I have also tried MODE="0666" and it also has no affect

I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both 
machines and they are the same

Any suggestions

Thanks
Richard Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache Server Tuning for Performance

[RobertH]

> 
> > KeepAliveTimeout 150
> 
>reduce this to 10 or 5.
> 
> 
> Kai
> 
> --
> Kai Schätzl, Berlin, Germany

Kai,

what do you think about the "general Timeout

it is set to 300

ive never much thought about it, yet should we be consider and possible
reduce that one too?

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox error msg.

[Bob Taylor]

On Wed, 2009-01-21 at 11:13 +0100, Ralph Angenendt wrote:
> Bob Taylor wrote:
> > After installing my backup of /home and seeing firefox not restart, I
> > started it from the command line with the immediate error:
> > 
> > Could not find compatible GRE between version 1.9.0.5 and 1.9.0.5.
> > 
> > I'm sorry, I'm at a complete loss. What's a GRE?
> 
> It's probably misspelt and something on your disk was eaten by a GRUE. 
> 
> Try "sudo xulrunner --register-global", because somehow firefox believes
> that it cannot find a working xulrunner instance on your machine.
> 
> Do that *after* you checked that firefox and xulrunner are updated to
> the latest versions:

Your first request.
# rpm -q firefox xulrunner
firefox-3.0.5-1.el5.centos
xulrunner-1.9.0.5-1.el5

Your second request.
# xulrunner --register-global
# 
This returns nothing.

> [angen...@shutdown ~]$rpm -q firefox xulrunner
> firefox-3.0.5-1.el5.centos.x86_64
> xulrunner-1.9.0.5-1.el5.x86_64
> [angen...@shutdown ~]$
> 
> Cheers,
> 
> Ralph
> 
> PS:  A GRE really isn't as fearsome as a GRUE is, a GRE is just the Gecko
>  Runtime Environment.
> PPS: Depending on how you have been socialized:
>  

I thank you! Will peruse the above URL when I have a working Firefox.
This was working before hard drive change.
-- 
Bob Taylor

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] error installing Twinkle - libresolv.so.2(GLIBC_PRIVATE)

[Mr.Vandeley]

Hello,
I have an error while try to install twinkle:

# yum install twinkle
[...]
Resolving Dependencies
--> Running transaction check
---> Package twinkle.i386 0:1.2-1.el5.rf set to be updated
--> Processing Dependency: libresolv.so.2(GLIBC_PRIVATE) for package: twinkle
--> Finished Dependency Resolution
Error: Missing Dependency: libresolv.so.2(GLIBC_PRIVATE) is needed by
package twinkle
[...]

But libresolv.so.2 is there:

# locate libresolv.so.2
/lib/libresolv.so.2


Any idea what is happening?

cheers,
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] help with udev rules needed

[Farkas Levente]

rra...@comcast.net wrote:
> I am migrating from Fedora 8 to CentOS 5.2
> I have usb dvd
> 
> On F8 I have /etc/udev/rules/00-my-custom.rules
> BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N 
> ",SYMLINK="dvd",OWNER="rray"
> When I plug in dvd I get
> $ ll /dev/scd1
> lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1
>   ll /dev/sr1
> brw-r- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1
> Everything is ok
> 
> On C5.2 I have /etc/udev/rules/00-my-custom.rules
> BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
> ",SYMLINK="dvd",OWNER="rray"
> When I plug in dvd I get
> # ll /dev/scd0
> brw-rw 1 root disk 11, 0 Jan 21 12:30 /dev/scd0
> I have also tried MODE="0666" and it also has no affect
> 
> I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both 
> machines and they are the same

what's the problem?
the above rule has nothing to do with sdcX it's just create dvd symlink,
the device itself created by system udev rules.

-- 
  Levente   "Si vis pacem para bellum!"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 5.3 released

[James A. Peltier]

This is great news, I'm sure CentOS will be a great release.  My question 
is will CentOS 5.3 support other architectures again? Namely IA64?  I 
suspect not as I've been waiting since 5.0 for it.  Is there are hardware 
issue, like not having any, that is delaying this?

-- 
James A. Peltier
Systems Analyst (FASNet), VIVARIUM Technical Director
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.fas.sfu.ca | http://vivarium.cs.sfu.ca
MSN : subatomic_s...@hotmail.com

To make a mistake is human.
To blame it on others... that's management material!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] help with udev rules needed

[rray_1]

On Wed, 21 Jan 2009, Farkas Levente wrote:

> rra...@comcast.net wrote:
>> I am migrating from Fedora 8 to CentOS 5.2
>> I have usb dvd
>>
>> On F8 I have /etc/udev/rules/00-my-custom.rules
>> BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
>> ",SYMLINK="dvd",OWNER="rray"
>> When I plug in dvd I get
>> $ ll /dev/scd1
>> lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1
>>   ll /dev/sr1
>> brw-r- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1
>> Everything is ok
>>
>> On C5.2 I have /etc/udev/rules/00-my-custom.rules
>> BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
>> ",SYMLINK="dvd",OWNER="rray"
>> When I plug in dvd I get
>> # ll /dev/scd0
>> brw-rw 1 root disk 11, 0 Jan 21 12:30 /dev/scd0
>> I have also tried MODE="0666" and it also has no affect
>>
>> I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both
>> machines and they are the same
>
> what's the problem?
> the above rule has nothing to do with sdcX it's just create dvd symlink,
> the device itself created by system udev rules.
>
>

On C5.2 the device has root:disk ownership and 660 perms
The OWNER="rray" part of the udev rule appears to be ignored
How can I change the owner to "rray" or perms to "0666"

Richard Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] error installing Twinkle - libresolv.so.2(GLIBC_PRIVATE)

[Rex Dieter]

Mr.Vandeley wrote:

> I have an error while try to install twinkle:
> # yum install twinkle
> [...]
> Resolving Dependencies
> --> Running transaction check
> ---> Package twinkle.i386 0:1.2-1.el5.rf set to be updated
> --> Processing Dependency: libresolv.so.2(GLIBC_PRIVATE) for package:

> Any idea what is happening?

Broken build (shouldn't contain GLIBC_PRIVATE dependencies)... report to ...
rpmforge?

-- Rex

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web pages time out after server rebuild

[Rob Kampen]

Rob Kampen wrote:



nate wrote:

Rob Kampen wrote:

  

How do I get some extra log info to track this down?



Have you tried to run 'show full processlist' on mysql while
the query is running? It should show all active queries, what
they are doing and how long they have been running for.

Also enable slow query logging and logging when not using
indexes, add to /etc/my.cnf and restart mysql:

example:
log-slow-queries= /var/lib/mysql_logs/slowqueries.log
log-queries-not-using-indexes
long_query_time = 3

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
Have entered those into the my.cnf file, restarted mysqld and 
monitored the file - no entries forthcoming with the faulty page request.
looking at show full processlist, I see the start of a new process, 
then almost immediately it goes to sleep and then just sits there

Thanks for these items Nate - look useful for the future.
I think I need to look in the php direction
Rob


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
Found the issue - in the php we are doing a strtotime() call and we did 
not have the date.timezone
setup, thus for every call to this function it was calling the error 
reporting code and dumping all the stack trace data, thus using up 30 
seconds and timing out.

Thanks all for your comments and help
Rob
begin:vcard
fn:Rob Kampen
n:Kampen;Rob
email;internet:r...@kampensonline.net
tel;cell:407-341-3815
version:2.1
end:vcard

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 5.3 released

[Craig White]

On Tue, 2009-01-20 at 23:40 +0200, Pasi Kärkkäinen wrote:
> Hello list!
> 
> http://www.redhat.com/about/news/prarchive/2009/rhel_5_3.html
> 

gee...when is it going to be ready?  ;-)

seriously though, found this little tidbit which seems important to note
(under known issues)...

http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Release_Notes/sect-Release_Notes-Known_Issues.html

When upgrading from an earlier version of Red Hat Enterprise Linux to
5.3, you may encounter the following error: 
Updating  : mypackage ### [ 472/1655]
rpmdb: unable to lock mutex: Invalid argument

The cause of the locking issue is that the shared futex locking in glibc
was enhanced with per-process futexes between 5.2 and 5.3. As a result,
programs running against the 5.2 glibc can not properly perform shared
futex locking against programs running with the 5.3 glibc.

This particular error message is a side effect of a package calling rpm
as part of its install scripts. The rpm instance performing the upgrade
is using the prior glibc throughout the upgrade, but the rpm instance
launched from within the script is using the new glibc. 

To avoid this error, upgrade glibc first in a separate run: 
# yum update glibc
# yum update
You will also see this error if you downgrade glibc to an earlier
version on an installed 5.3 system. 

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox error msg.

[Ralph Angenendt]

Bob Taylor wrote:
> > Try "sudo xulrunner --register-global", because somehow firefox believes
> > that it cannot find a working xulrunner instance on your machine.
>
> Your second request.
> # xulrunner --register-global
> # 
> This returns nothing.

Yes, but does it work again after doing that? If not - try moving your 
.mozilla directory somewhere safe and try again. Firefox will build a new 
.mozilla directory then.

If that works, remove that .mozilla and move back your old copy. Then try

xulrunner --register-user

Cheers,

Ralph

pgpVnvWVHhntK.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 5.3 released

[Joseph L. Casale]

>To avoid this error, upgrade glibc first in a separate run: 

Nice! So all the systems that autoupdate won't have the logic :)
Glad I don't do that...

jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 5.3 released

[Stephen John Smoogen]

On Wed, Jan 21, 2009 at 2:34 PM, Joseph L. Casale
 wrote:
>>To avoid this error, upgrade glibc first in a separate run:
>
> Nice! So all the systems that autoupdate won't have the logic :)
> Glad I don't do that...

Well we didn't get bitten by the problem on our 50 servers last
nigth... but we probably got lucky (and no I don't recommend
autoupdate but live with it.).



-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS4 pam_tally2 config

[Jim Perrin]

Okay, it's been a while since I've messed with EL4, and apparently
I've gone stupid with respect to pam and properly enabling pam_tally2
in an appropriate fashion. My notes are for EL5, so if someone would
be so kind as to smack me in the right direction, I'd appreciate it.

-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS4 pam_tally2 config

[Stephen John Smoogen]

On Wed, Jan 21, 2009 at 2:45 PM, Jim Perrin  wrote:
> Okay, it's been a while since I've messed with EL4, and apparently
> I've gone stupid with respect to pam and properly enabling pam_tally2
> in an appropriate fashion. My notes are for EL5, so if someone would
> be so kind as to smack me in the right direction, I'd appreciate it.

Hmmm is it any different from EL5? I haven't done it in a long time
myself for EL4 but it didn't seem that different.



-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] help with udev rules needed

[Farkas Levente]

rra...@comcast.net wrote:
> On Wed, 21 Jan 2009, Farkas Levente wrote:
> 
>> rra...@comcast.net wrote:
>>> I am migrating from Fedora 8 to CentOS 5.2
>>> I have usb dvd
>>>
>>> On F8 I have /etc/udev/rules/00-my-custom.rules
>>> BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
>>> ",SYMLINK="dvd",OWNER="rray"
>>> When I plug in dvd I get
>>> $ ll /dev/scd1
>>> lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1
>>>   ll /dev/sr1
>>> brw-r- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1
>>> Everything is ok
>>>
>>> On C5.2 I have /etc/udev/rules/00-my-custom.rules
>>> BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
>>> ",SYMLINK="dvd",OWNER="rray"
>>> When I plug in dvd I get
>>> # ll /dev/scd0
>>> brw-rw 1 root disk 11, 0 Jan 21 12:30 /dev/scd0
>>> I have also tried MODE="0666" and it also has no affect
>>>
>>> I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both
>>> machines and they are the same
>> what's the problem?
>> the above rule has nothing to do with sdcX it's just create dvd symlink,
>> the device itself created by system udev rules.
>>
>>
> 
> On C5.2 the device has root:disk ownership and 660 perms
> The OWNER="rray" part of the udev rule appears to be ignored
> How can I change the owner to "rray" or perms to "0666"

_which_ device? scd1 or dvd!!!?
your rule is about dvd it has nothing to with scd1!

-- 
  Levente   "Si vis pacem para bellum!"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS4 pam_tally2 config

[Jim Perrin]

On Wed, Jan 21, 2009 at 5:06 PM, Stephen John Smoogen  wrote:
> On Wed, Jan 21, 2009 at 2:45 PM, Jim Perrin  wrote:
>> Okay, it's been a while since I've messed with EL4, and apparently
>> I've gone stupid with respect to pam and properly enabling pam_tally2
>> in an appropriate fashion. My notes are for EL5, so if someone would
>> be so kind as to smack me in the right direction, I'd appreciate it.
>
> Hmmm is it any different from EL5? I haven't done it in a long time
> myself for EL4 but it didn't seem that different.

The format is slightly different, and apparently I've caught a nasty
case of the stupid. So far the things I'm trying aren't working, so I
was hoping someone had a cut/paste example handy.


-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] help with udev rules needed

[rray_1]

On Wed, 21 Jan 2009, Farkas Levente wrote:

> rra...@comcast.net wrote:
>> On Wed, 21 Jan 2009, Farkas Levente wrote:
>>
>>> rra...@comcast.net wrote:
 I am migrating from Fedora 8 to CentOS 5.2
 I have usb dvd

 On F8 I have /etc/udev/rules/00-my-custom.rules
 BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
 ",SYMLINK="dvd",OWNER="rray"
 When I plug in dvd I get
 $ ll /dev/scd1
 lrwxrwxrwx 1 root root 3 Aug 25 08:17 /dev/scd1 -> sr1
   ll /dev/sr1
 brw-r- 1 rray disk 11, 1 2009-01-21 12:29 /dev/sr1
 Everything is ok

 On C5.2 I have /etc/udev/rules/00-my-custom.rules
 BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N
 ",SYMLINK="dvd",OWNER="rray"
 When I plug in dvd I get
 # ll /dev/scd0
 brw-rw 1 root disk 11, 0 Jan 21 12:30 /dev/scd0
 I have also tried MODE="0666" and it also has no affect

 I have checked "udevinfo -a -p $(udevinfo -q path -n /dev/scd0/1)" on both
 machines and they are the same
>>> what's the problem?
>>> the above rule has nothing to do with sdcX it's just create dvd symlink,
>>> the device itself created by system udev rules.
>>>
>>>
>>
>> On C5.2 the device has root:disk ownership and 660 perms
>> The OWNER="rray" part of the udev rule appears to be ignored
>> How can I change the owner to "rray" or perms to "0666"
>
> _which_ device? scd1 or dvd!!!?
> your rule is about dvd it has nothing to with scd1!
>
>

I believe I am very confused
Please ignore everything above
If I wanted to write a udev rules such that when I plugged in my usb dvd 
drive, the owner of the device file is "rray" what might that rule look 
like given udevinfo tells me these characteristics describe my dvd drive
BUS=="scsi", SYSFS{vendor}=="TSSTcorp", SYSFS{model}=="CDDVDW SH-S203N"

Thanks
Richard Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Old Small Box

[Mike -- EMAIL IGNORED]

I have an old 400mHz Dell with a 20G hard drive
and 125M ram.  Can I install and run CentOS on it?
Thanks,
Mike.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Stephen John Smoogen]

On Wed, Jan 21, 2009 at 4:06 PM, Mike -- EMAIL IGNORED
 wrote:
> I have an old 400mHz Dell with a 20G hard drive
> and 125M ram.  Can I install and run CentOS on it?
> Thanks,

You can install/run the CentOS-3 OS. CentOS-4 might run. I do not
think CentOS-5 would be able to be installed on the system.



-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[James A. Peltier]

On Wed, 21 Jan 2009, Stephen John Smoogen wrote:

> On Wed, Jan 21, 2009 at 4:06 PM, Mike -- EMAIL IGNORED
>  wrote:
>> I have an old 400mHz Dell with a 20G hard drive
>> and 125M ram.  Can I install and run CentOS on it?
>> Thanks,
>
> You can install/run the CentOS-3 OS. CentOS-4 might run. I do not
> think CentOS-5 would be able to be installed on the system.
>

CentOS 5 requires 512MB for installation due to building package 
dependancy trees.  Once installed it will *run* with less, of course, 
package dependency issues can still arise afterwards. ;)

-- 
James A. Peltier
Systems Analyst (FASNet), VIVARIUM Technical Director
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.fas.sfu.ca | http://vivarium.cs.sfu.ca
MSN : subatomic_s...@hotmail.com

To make a mistake is human.
To blame it on others... that's management material!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Robert Moskowitz]

Mike -- EMAIL IGNORED wrote:
> I have an old 400mHz Dell with a 20G hard drive
> and 125M ram.  Can I install and run CentOS on it?

Bring the memory up to 256Mb.

I have a number of test servers running on similar platforms. But you 
have to get the memory up to at least 256Mb...


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Warren Young]

James A. Peltier wrote:
> 
> CentOS 5 requires 512MB for installation

I had an EL5 install attempt fail on a VM with 512 MB of RAM.  Big ugly 
anaconda Python stack dump type error.  Upped the RAM for the VM, and it 
installed.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Scott Silva]

on 1-21-2009 3:42 PM Robert Moskowitz spake the following:
> Mike -- EMAIL IGNORED wrote:
>> I have an old 400mHz Dell with a 20G hard drive
>> and 125M ram.  Can I install and run CentOS on it?
> 
> Bring the memory up to 256Mb.
> 
> I have a number of test servers running on similar platforms. But you 
> have to get the memory up to at least 256Mb...
And use a text based install.

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Lanny Marcus]

On Wed, Jan 21, 2009 at 6:37 PM, James A. Peltier  wrote:
> On Wed, 21 Jan 2009, Stephen John Smoogen wrote:
>> On Wed, Jan 21, 2009 at 4:06 PM, Mike -- EMAIL IGNORED
>>  wrote:
>>> I have an old 400mHz Dell with a 20G hard drive
>>> and 125M ram.  Can I install and run CentOS on it?

>
> CentOS 5 requires 512MB for installation due to building package
> dependancy trees.  Once installed it will *run* with less, of course,
> package dependency issues can still arise afterwards.

I have one box running CentOS 5.2 with 384 MB of RAM. I did the
graphical install on it, as on the 2 boxes with 512 MB of RAM.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Kevin Krieser]

You can install 5 on it, but you probably won't be too happy with it.   
Make sure to have more than the default amount of swap installed.

On Jan 21, 2009, at 5:16 PM, Stephen John Smoogen wrote:

> On Wed, Jan 21, 2009 at 4:06 PM, Mike -- EMAIL IGNORED
>  wrote:
>> I have an old 400mHz Dell with a 20G hard drive
>> and 125M ram.  Can I install and run CentOS on it?
>> Thanks,
>
> You can install/run the CentOS-3 OS. CentOS-4 might run. I do not
> think CentOS-5 would be able to be installed on the system.
>
>
>
> -- 
> Stephen J Smoogen. -- BSD/GNU/Linux
> How far that little candle throws his beams! So shines a good deed
> in a naughty world. = Shakespeare. "The Merchant of Venice"
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Kevin Krieser]

Just to comment that this was with an actual RH installation DVD, not  
CentOS.  The only systems I've installed CentOS on has had at least  
1GB of RAM.

On Jan 21, 2009, at 6:54 PM, Kevin Krieser wrote:

> You can install 5 on it, but you probably won't be too happy with it.
> Make sure to have more than the default amount of swap installed.
>
> On Jan 21, 2009, at 5:16 PM, Stephen John Smoogen wrote:
>
>> On Wed, Jan 21, 2009 at 4:06 PM, Mike -- EMAIL IGNORED
>>  wrote:
>>> I have an old 400mHz Dell with a 20G hard drive
>>> and 125M ram.  Can I install and run CentOS on it?
>>> Thanks,
>>
>> You can install/run the CentOS-3 OS. CentOS-4 might run. I do not
>> think CentOS-5 would be able to be installed on the system.
>>
>>
>>
>> -- 
>> Stephen J Smoogen. -- BSD/GNU/Linux
>> How far that little candle throws his beams! So shines a good deed
>> in a naughty world. = Shakespeare. "The Merchant of Venice"
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Antivirus for CentOS? (yuck!)

[Amos Shapira]

Hi All,

Yes, I know, it's really really embarrassing to have to ask but I'm
being pushed to the wall with PCI DSS Compliance procedure
(http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
we don't need to install an anti-virus or find an anti-virus to run on
our CentOS 5 servers.

Whatever I do - it needs to be convincing enough to make the PCI
compliance guy tick the box.

So:

1. Has anyone here gone though such a procedure and got good arguments
against the need for anti-virus?
2. Alternatively - what linux anti-virus (oh, the shame of typing this
word combination :() do you use which doesn't affect our systems
performance too much.

The reviewed servers run both Internet-facing web applications and
internal systems, mostly using proprietary protocol for internal
communications. They are being administrated remotely via IPSec VPN
(and possibly in the future also OpenVPN).

Thanks,

--Amos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Barry Brimer]

> I have an old 400mHz Dell with a 20G hard drive
> and 125M ram.  Can I install and run CentOS on it?
> Thanks,
> Mike.

My firewall is a Pentium 75 with 48 MB of RAM running CentOS 4.7 + 
current.  I did a text based install, and the install took a very long 
time, but it works very well ..despite taking about 5 minutes to boot up.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Ian Forde]

On Thu, 2009-01-22 at 12:19 +1100, Amos Shapira wrote:
> Hi All,
> 
> Yes, I know, it's really really embarrassing to have to ask but I'm
> being pushed to the wall with PCI DSS Compliance procedure
> (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
> we don't need to install an anti-virus or find an anti-virus to run on
> our CentOS 5 servers.

Note - I am *NOT* a lawyer.  This advice is freely given, and may be
worth exactly what you paid for it... ;)

> Whatever I do - it needs to be convincing enough to make the PCI
> compliance guy tick the box.
> 
> So:
> 
> 1. Has anyone here gone though such a procedure and got good arguments
> against the need for anti-virus?

Yep - on the wikipedia page you referenced, look in the "Requirements"
section, section 5.  It says: "Use and regularly update anti-virus
software on all systems commonly affected by malware"

Note that CentOS isn't commonly affected by malware.  So you should be
okay here.

> 2. Alternatively - what linux anti-virus (oh, the shame of typing this
> word combination :() do you use which doesn't affect our systems
> performance too much.

None... clamav, amavis, etc... are used for protecting Windows boxes
behind the Linux boxes.  If you aren't running any Windows hosts on the
same network as the Linux hosts, that should take care of the sweet spot
of the AV argument.  (Though if you're connected to a site via VPN or
private link that has Windows boxes, that may be a different story.)

> The reviewed servers run both Internet-facing web applications and
> internal systems, mostly using proprietary protocol for internal
> communications. They are being administrated remotely via IPSec VPN
> (and possibly in the future also OpenVPN).

Yep - then you want to make sure that since you're using a VPN, nothing
(like say, an Apache worm) can jump over...

PCI Compliance can be a bear.  Just make sure that you have management
buy-in, and good external scanning vendor...

-I

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS4 pam_tally2 config

[Jim Perrin]

On Wed, Jan 21, 2009 at 5:27 PM, Jim Perrin  wrote:

> The format is slightly different, and apparently I've caught a nasty
> case of the stupid. So far the things I'm trying aren't working, so I
> was hoping someone had a cut/paste example handy.


Oversight on my part. It was enabled, but not being enforced, because
I missed the accounts line. All is well.


-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Ross Walker]

On Jan 21, 2009, at 8:32 PM, Barry Brimer  wrote:

>> I have an old 400mHz Dell with a 20G hard drive
>> and 125M ram.  Can I install and run CentOS on it?
>> Thanks,
>> Mike.
>
> My firewall is a Pentium 75 with 48 MB of RAM running CentOS 4.7 +
> current.  I did a text based install, and the install took a very long
> time, but it works very well ..despite taking about 5 minutes to  
> boot up.

I remember running a color NeXTstation with 24MB in 1994 and it ran  
smoothly and I had Wordperfect and Lotus Improv running.

Now if I could only have an OS from back then running on today's  
hardware.

-Ross

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Amos Shapira]

2009/1/22 Ian Forde :
> On Thu, 2009-01-22 at 12:19 +1100, Amos Shapira wrote:
>> Hi All,
>>
>> Yes, I know, it's really really embarrassing to have to ask but I'm
>> being pushed to the wall with PCI DSS Compliance procedure
>> (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
>> we don't need to install an anti-virus or find an anti-virus to run on
>> our CentOS 5 servers.
>
> Note - I am *NOT* a lawyer.  This advice is freely given, and may be
> worth exactly what you paid for it... ;)

Thanks. We are paying some guy ~$US2000 a day to do this officially.
But any preperation we can make to shorten the time he spends with us
might save us a lot of money. And your advise below looks very
reasonable.

>
>> Whatever I do - it needs to be convincing enough to make the PCI
>> compliance guy tick the box.
>>
>> So:
>>
>> 1. Has anyone here gone though such a procedure and got good arguments
>> against the need for anti-virus?
>
> Yep - on the wikipedia page you referenced, look in the "Requirements"
> section, section 5.  It says: "Use and regularly update anti-virus
> software on all systems commonly affected by malware"
>
> Note that CentOS isn't commonly affected by malware.  So you should be
> okay here.

:) Thanks.

>
>> 2. Alternatively - what linux anti-virus (oh, the shame of typing this
>> word combination :() do you use which doesn't affect our systems
>> performance too much.
>
> None... clamav, amavis, etc... are used for protecting Windows boxes
> behind the Linux boxes.  If you aren't running any Windows hosts on the

e.g. in situations where the Linux box is the internet-facing SMTP
server, right?

> same network as the Linux hosts, that should take care of the sweet spot
> of the AV argument.  (Though if you're connected to a site via VPN or
> private link that has Windows boxes, that may be a different story.)

Rightso. You reminded me - we have a couple of Windows servers there
as well (running software we didn't get around to port to Linux yet).
They only talk to internal systems and we'll install BitDefender on
them (that's what we have around here).

They talk to a couple of the Linux servers internally using our
proprietary protocol.

Is this the sort of situation that triggers requirement for AV on linux?

>
>> The reviewed servers run both Internet-facing web applications and
>> internal systems, mostly using proprietary protocol for internal
>> communications. They are being administrated remotely via IPSec VPN
>> (and possibly in the future also OpenVPN).
>
> Yep - then you want to make sure that since you're using a VPN, nothing
> (like say, an Apache worm) can jump over...

Yes. We defined the "PCI Zone" as the remote data centre and have a
"border" between it and the rest of the world, including our offices.

>
> PCI Compliance can be a bear.  Just make sure that you have management
> buy-in, and good external scanning vendor...

This requirement came from management, though the vendor we picked
gives an impression that he knows his stuff about security and will
help with real pen-testing rather than just tick boxes on papers.

Thanks very much for your help!

Cheers,

--Amos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Joseph L. Casale]

>Whatever I do - it needs to be convincing enough to make the PCI
>compliance guy tick the box.

Eset has a current linux client, though their product *AND* support
suck the biggest one.

https://www.icsalabs.com/icsa/product.php?tid=dfgdf$gdhkkjk-

for more

HTH,
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Adam Tauno Williams]

> Yes, I know, it's really really embarrassing to have to ask but I'm
> being pushed to the wall with PCI DSS Compliance procedure
> (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
> we don't need to install an anti-virus or find an anti-virus to run on
> our CentOS 5 servers.
> Whatever I do - it needs to be convincing enough to make the PCI
> compliance guy tick the box.
> 1. Has anyone here gone though such a procedure and got good arguments
> against the need for anti-virus?

There is no good argument against running malware detection on any
sever.

> 2. Alternatively - what linux anti-virus (oh, the shame of typing this
> word combination :() do you use which doesn't affect our systems
> performance too much.

CLAMAV works well.

> The reviewed servers run both Internet-facing web applications and
> internal systems, mostly using proprietary protocol for internal
> communications. They are being administrated remotely via IPSec VPN
> (and possibly in the future also OpenVPN).

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Les Bell]

Ian Forde  wrote:

>>
Yep - on the wikipedia page you referenced, look in the "Requirements"
section, section 5.  It says: "Use and regularly update anti-virus
software on all systems commonly affected by malware"
<<

I doubt Amos's QSA is using Wikipedia as his reference, unfortunately. The
PCI DSS Ver 1.2 standard (of Oct. 2008 - get it from
https://www.pcisecuritystandards.org/security_standards/pci_dss_download.html)
 actually states:

5.1 Deploy anti-virus software on all
systems commonly affected by
malicious software (particularly personal
computers and servers).

but then goes on, under "Testing Procedures" to state:

5.1 For a sample of system components including all
operating system types commonly affected by malicious
software, verify that anti-virus software is deployed if
applicable anti-virus technology exists.

Unfortunately, both open-source and commercial anti-virus software that
will run on Centos do exist, which gives the assessor some wiggle-room.
Even worse, the Summary of Changes from 1.1 to 1.2 says:

Requirement & Testing Procedure: Clarified
requirement applies to all operating systems types
commonly affected by malicious software, if applicable
anti-virus technology exists.
Besides use of the term "anti-virus software", changed
the term "virus" to "malicious software".
Deleted note stating "Systems commonly affected by
viruses typically do not include UNIX-based operating
systems or mainframes."

That last sentence is a killer, unfortunately - it means they have been
tightening up on *ix systems. Looks like you could be in for a battle if
the QSA is an intransigent sort. You could argue that while anti-virus
programs do exist, their purpose is to detect infected files which could
harm connected Windows systems, and are therefore not applicable in your
specific case, particularly since you are using proprietary protocols and
not running Windows file-sharing software (e.g. Samba, FTP, etc.)

It really comes down to whether your Assessor is clueful, or a box-ticking
droid.

Best,

--- Les Bell
[http://www.lesbell.com.au]
Tel: +61 2 9451 1144
FreeWorldDialup: 800909


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Ned Slider]

Amos Shapira wrote:
> 2009/1/22 Ian Forde :
> 
>> same network as the Linux hosts, that should take care of the sweet spot
>> of the AV argument.  (Though if you're connected to a site via VPN or
>> private link that has Windows boxes, that may be a different story.)
> 
> Rightso. You reminded me - we have a couple of Windows servers there
> as well (running software we didn't get around to port to Linux yet).
> They only talk to internal systems and we'll install BitDefender on
> them (that's what we have around here).
> 

IF AV is needed, then BitDefender used to do a free command line based 
package for Linux. I don't know if it's still available, but if that's 
what you're using then might be worth looking into for evaluation 
purposes. The free version might not be available for commercial use 
though, but if you're already purchasing licences from them...

The joke of this is that when I tested a bunch of Linux based AVs a few 
years back, most of them didn't actually detect any Linux virus samples 
in my corpus - they only detected Windows-based samples.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[John R Pierce]

ClamAV is probably your best bet.

That said, the question is, what do you scan?  It can be used several 
ways, typically scanning files on demand...  its not an intrusion 
detection system like most MS Windows scanners, where it automatically 
scans every file being read or written (while slowing the system down 
300%).If your system isn't handling 'files', it becomes harder to 
figure out what to do with it...  I suppose you could crontab a nightly 
scan of all files on the system with clamscan, or something.  of course, 
you want to run freshclam once or twice a day to pick up new definitions.

I most typically use ClamAV in my email flow, where MailScanner runs 
every inbound (and outbound) email through it.  I've also run it 
periodically against file systems used as a file server.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Christopher Chan]

> 2. Alternatively - what linux anti-virus (oh, the shame of typing this
> word combination :() do you use which doesn't affect our systems
> performance too much.
> 

Sophos AV if you have to get something on.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[jkinz]

On Thu, Jan 22, 2009 at 12:19:27PM +1100, Amos Shapira wrote:
> Hi All,
> 
> Yes, I know, it's really really embarrassing to have to ask but I'm
> being pushed to the wall with PCI DSS Compliance procedure
> (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
> we don't need to install an anti-virus or find an anti-virus to run on
> our CentOS 5 servers.
> 
> Whatever I do - it needs to be convincing enough to make the PCI
> compliance guy tick the box.
> 
> So:
> 
> 1. Has anyone here gone though such a procedure and got good arguments
> against the need for anti-virus?

Amos - the best argument I have ever seen along those lines is
here :  (And its a good one )

http://linuxmafia.com/~rick/faq/index.php?page=virus

All UNIX/Linux aficionados should be familiar with its content.

FAIR WARNING, It is long and complex. Because it is 
comprehensive and detailed. Those among you familiar with Rick
Moen will understand and appreciate why.

A portion pasted here: 

The most recent version of these essays can be found at
http://linuxmafia.com/~rick/faq/.
Rick's Rants

  Virus . . .
  o Should I get anti-virus software for my Linux box?
  o But didn't security expert Simson Garfinkel say that
all Linux systems need virus checkers?
  o Don't the rise of Linux worms show that Linux now has
a virus problem?
  o Isn't Microsoft Corporation's market dominance,
making Linux an insignificant target, the only reason it doesn't
have a virus problem?
  o But how can you say there's no virus problem, when
there have been several dozen Linux viruses?


  Should I get anti-virus software for my Linux box?

  The problem with answering this question is that those
asking it know only OSes where viruses, trojan-horse programs,
worms, nasty Javascripts, ActiveX controls with destructive
payloads, and ordinary misbehaved applications are a constant
threat to their computing. Therefore, they refuse to believe
Linux could be different, no matter what they hear.

  And yet it is.

  Here's the short version of the answer: No. If you simply
never run untrusted executables while logged in as the root user
(or equivalent), all the "virus checkers" in the world will be at
best superfluous; at worst, downright harmful. "Hostile"
executables (including viruses) are almost unfindable in the
Linux world — and no real threat to it — because they lack
root-user authority, and because Linux admins are seldom stupid
enough to run untrusted executables as root, and because Linux
users' sources for privileged executables enjoy paranoid-grade
scrutiny (such that any unauthorised changes would be detected
and remedied).

  Here's the long version: Still no. Any program on a Linux
box, viruses included, can only do what the user who ran it can
do. Real users aren't allowed to hurt the system (only the root
user can), so neither can programs they run.

  Because of the distinction between privileged (root-run)
processes and user-owned processes, a "hostile" executable that a
non-root user receives (or creates) and then executes (runs)
cannot "infect" or otherwise manipulate the system as a whole.
Just as you can delete only your own files (i.e., those you have
"write" permission to), executables you run cannot affect other
users' (or root's) files. Therefore, although you can create (or
retrieve), and then run, a virus, worm, trojan horse, etc., it
can't do much. Unless you do so as "root". Which it's simple to
avoid doing.

==

This is just the beginning - it continues on to cover every
aspect of the issue in a mere 1100 lines 

All of it well worth reading.


Jeff Kinz.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [Solved] Firefox error msg.

[Bob Taylor]

On Wed, 2009-01-21 at 22:31 +0100, Ralph Angenendt wrote:
> Bob Taylor wrote:
> > > Try "sudo xulrunner --register-global", because somehow firefox believes
> > > that it cannot find a working xulrunner instance on your machine.
> >
> > Your second request.
> > # xulrunner --register-global
> > # 
> > This returns nothing.
> 
> Yes, but does it work again after doing that? If not - try moving your 
> .mozilla directory somewhere safe and try again. Firefox will build a new 
> .mozilla directory then.

It occurred to me to rpm -e firefox and rpm -e --nodeps xulrunner. After
yum install firefox xlrunner completed, I successfully brought up
firefox.
Don't know what the problem was, but I'm happy now. Moving .mozilla had
occurred to me if reinstalling both firefox and xlrunner didn't work.
This is something I don't really want to do as I don't know where
firefox keeps my login/passwords.

Thanks for your input.
-- 
Bob Taylor

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Ian Forde]

On Wed, 2009-01-21 at 21:06 -0500, Adam Tauno Williams wrote:
> > Yes, I know, it's really really embarrassing to have to ask but I'm
> > being pushed to the wall with PCI DSS Compliance procedure
> > (http://en.wikipedia.org/wiki/PCI_DSS) and have to either justify why
> > we don't need to install an anti-virus or find an anti-virus to run on
> > our CentOS 5 servers.
> > Whatever I do - it needs to be convincing enough to make the PCI
> > compliance guy tick the box.
> > 1. Has anyone here gone though such a procedure and got good arguments
> > against the need for anti-virus?
> 
> There is no good argument against running malware detection on any
> sever.

That depends upon how you define malware detection.  Antivirus software
for Linux typically scans for Windows viruses and malware.  On the other
hand, if you're talking about detection in the sense of Tripwire, or a
cron job that runs a 'rpm -V' every night, I completely agree that this
is something that should be done.

> CLAMAV works well.

For detecting Windows malware, which isn't really the point...

-I

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache Server Tuning for Performance

[Kai Schaetzl]

RobertH wrote on Wed, 21 Jan 2009 11:26:41 -0800:

> what do you think about the "general Timeout
> 
> it is set to 300
> 
> ive never much thought about it, yet should we be consider and possible
> reduce that one too?

I'm using 120, but I don't think reducing this value has much impact.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[John]

> -Original Message-
> From: centos-boun...@centos.org 
> [mailto:centos-boun...@centos.org] On Behalf Of Barry Brimer
> Sent: Wednesday, January 21, 2009 8:33 PM
> To: CentOS mailing list
> Subject: Re: [CentOS] Old Small Box
> 
> > I have an old 400mHz Dell with a 20G hard drive
> > and 125M ram.  Can I install and run CentOS on it?
> > Thanks,
> > Mike.
> 
> My firewall is a Pentium 75 with 48 MB of RAM running CentOS 4.7 + 
> current.  I did a text based install, and the install took a 
> very long 
> time, but it works very well ..despite taking about 5 minutes 
> to boot up.
---
Yes, even with a HP Machine 400Mhz Celeron and 128 MB of ram will work
wonders. Top it off running on the GUI, all a bit slow but it will steam
along. Try to find 3 more MB of ram because you really need it. Firefox is a
lag to load but will eventually get rolling.

JohnStanley

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Issues with Ldap client on Centos 5

[ankush grover]

Hi Friends,

We are running some of the Centos 5 32 bit, 5.2 64-bit systems. These
systems are ldap clients and the ldap server is Windows 2003 Server.
Sometimes 1 or 2 services on these servers sucks 100% cpu and the load
becomes high on the server.

Below is an example where one the httpd process was eating 100% cpu
and we took dump of this process

gcore  17711

Core was generated by `/usr/sbin/httpd'.

#0  0x2ad1849cd997 in ldap_chase_v3referrals () from
/usr/lib64/libldap-2.3.so.0

(gdb) bt full

#0  0x2ad1849cd997 in ldap_chase_v3referrals () from
/usr/lib64/libldap-2.3.so.0

No symbol table info available.

#1  0x2ad1849bc4dd in ldap_msgdelete () from /usr/lib64/libldap-2.3.so.0

No symbol table info available.

#2  0x2ad1849bceb0 in ldap_result () from /usr/lib64/libldap-2.3.so.0

No symbol table info available.


/etc/ldap.conf file



host dc.example.com
base ou=users,dc=example,dc=com
binddn cn=ldap,ou=extra accounts,dc=example,dc=com
bindpw QrQcepFKHR6wGNXu4
scope sub
ssl no
nss_base_passwd dc=example,dc=com?sub
nss_base_shadow dc=example,dc=com?sub
nss_base_group dc=example,dc=com?sub
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute uidNumber UidNumber
nss_map_attribute gidNumber GidNumber
nss_map_attribute loginShell LoginShell
nss_map_attribute gecos name
nss_map_attribute userPassword unixUserPassword
nss_map_attribute homeDirectory unixHomeDirectory
nss_map_objectclass posixGroup Group
nss_map_attribute uniqueMember msSFU30PosixMember
nss_map_attribute cn cn
pam_login_attribute sAMAccountName
pam_filter objectclass=user
pam_password md5
timelimit 0
sizelimit 0
tls_cacertdir /etc/openldap/cacerts

There are 2 bugs listed on the redhat site but no solution for this
problem has been provided.


https://bugzilla.redhat.com/show_bug.cgi?id=222667

https://bugzilla.redhat.com/show_bug.cgi?id=474181



Thanks & Regards

Ankush
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Antivirus for CentOS? (yuck!)

[Les Bell]

Ian Forde  wrote:

>>
That depends upon how you define malware detection.  Antivirus software
for Linux typically scans for Windows viruses and malware.  On the other
hand, if you're talking about detection in the sense of Tripwire, or a
cron job that runs a 'rpm -V' every night, I completely agree that this
is something that should be done.
<<

Bingo. The changes made in PCI DSS v 1.2 broaden the scope of section 5
from "viruses" to "malicious software". This covers viruses, worms,
trojans, spyware, rootkits, etc. Use of AIDE or Open-Source Tripwire, with
a carefully set up policy, should meet the requirements. I would write an
"explanation of non-applicability" that states that CentOS is at low risk
of infection by viruses and only slightly higher risk of infection by
worms, and that implementation of a host filesystem integrity verification
system (or host intrusion detection system) provides an appropriate control
to alert administrators to unauthorised changes of any kind on the system.
Add appropriate verbiage about SELinux, etc. if appropriate. I'd say that
should get the job done.

Best,

--- Les Bell
[http://www.lesbell.com.au]
Tel: +61 2 9451 1144
FreeWorldDialup: 800909


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Old Small Box

[Robert Moskowitz]

Scott Silva wrote:
> on 1-21-2009 3:42 PM Robert Moskowitz spake the following:
>   
>> Mike -- EMAIL IGNORED wrote:
>> 
>>> I have an old 400mHz Dell with a 20G hard drive
>>> and 125M ram.  Can I install and run CentOS on it?
>>>   
>> Bring the memory up to 256Mb.
>>
>> I have a number of test servers running on similar platforms. But you 
>> have to get the memory up to at least 256Mb...
>> 
> And use a text based install.

It depends.  If you have all 256Mb, it still works.  But if your video 
'steals' some of it, yes you go to text install...


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos