[CentOS] apache httpd, webdav, ssl - something is wrong, but what?

2010-01-11 Thread Götz Reinicke - IT-Koordinator
Hi,

happy new year!

Today I set up a new web(dav) server for our .ical-System (phpIcalendar)
and copied the config and data files from the old server.

But somthing is wrong with the configuration and I'm blind to find the
error.

On the old server, I can still publish my calender from e.g. Apple iCal
at the server URL with http

http://oldserver.filmakademie.de/DAVdocs

On the new server, I can publish only with https - so only ssl secured.

https://newserver.filmakademie.de/DAVdocs

The webpage for the calendars can be accessed unsecured with http.

http://oldserver.filmakademie.de/

http://newserver.filmakademie.de/

Thanks for any hint or support or suggestion to find the error.

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner
Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium

Geschäftsführer:
Prof. Thomas Schadt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problems with IPTABLES recent module.

2010-01-11 Thread Nicolas Thierry-Mieg


James B. Byrne wrote:
>
> On Fri, January 8, 2010 15:32, James B. Byrne wrote:
>> I went to reload (iptables-restore) my iptables configuration and
>> obtained an error at the COMMIT statement.  No further details were
>> provided even when I ran restore with the -v option.
>>
>
>
> I ran lsmod and I do not find that ipt_recent is loaded.  In fact, I
> don not see any ipt modules other than itp_LOG. There was a recent
> kernel update. Does anyone know if this had any adverse effects on
> loading ipt_recent?
>
>   .  .  .
> ip_tables  17029  3
> iptable_nat,iptable_mangle,iptable_filter
> ipt_LOG10049  6
> ipv6  267489  23 ip6t_REJECT
>   .  .  .
>
> And this does not look good either:
>
> # modprobe --first-time ipt_recent
> FATAL: Error inserting ipt_recent
> (/lib/modules/2.6.18-164.9.1.el5/kernel/net/ipv4/netfilter/ipt_recent.ko):
> Unknown symbol in module, or unknown parameter (see dmesg)
>
> There is no entry in /var/log/dmesg relating to this problem.
>

fwiw, no problem here with the before-last kernel:

[r...@tryo nthierry]# uname -a
Linux tryo.imag.fr 2.6.18-164.9.1.el5 #1 SMP Tue Dec 15 20:57:57 EST 
2009 x86_64 x86_64 x86_64 GNU/Linux
[r...@tryo nthierry]# modprobe --first-time ipt_recent
[r...@tryo nthierry]# lsmod | grep ipt_recent
ipt_recent 42969  0
x_tables   50505  5 
ipt_recent,ipt_REJECT,xt_state,xt_tcpudp,ip_tables


And also no problem with the latest kernel:
[after a reboot to 2.6.18-164.10.1.el5]
[r...@tryo nthierry]# uname -a
Linux tryo.imag.fr 2.6.18-164.10.1.el5 #1 SMP Thu Jan 7 19:54:26 EST 
2010 x86_64 x86_64 x86_64 GNU/Linux
[r...@tryo nthierry]# modprobe --first-time ipt_recent
[r...@tryo nthierry]# lsmod ipt_recent
Usage: lsmod
[r...@tryo nthierry]# lsmod | grep ipt_recent
ipt_recent 42969  0
x_tables   50505  5 
ipt_recent,ipt_REJECT,xt_state,xt_tcpudp,ip_tables


what's your kernel?
did you reboot after upgrading?

modprobe is trying to insert the 2.6.18-164.9.1.el5 module, but you 
mentioned the latest kernel upgrade (which is 164-10.1)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 2 CPU's problem(Centos5)

2010-01-11 Thread Peter Kjellstrom
On Saturday 09 January 2010, Anas Alnaffar wrote:
> I'll install cpufreq-utils and microcode-ctl, and I'll be right back to u
> soon, if I need to install another packages or doing kernel update please
> let me know,

As I wrote in my first answer. The warning from microcode-ctl can be safely 
ignored.

But, the kernel you are running is ancient which hints at a real problem => 
your system is vulnerable to a few years worth of CVEs. You should consider 
upgrading but if this is recently installed I'd simply suggest re-installing 
with latest CentOS-5(.4).

/Peter

> Thanks John
>
> Anas Al-Naffar


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Rudi Ahlers
Hi all,

does anyone know where I can download  kernel-xen- 2.6.18-164.el5 for
CentOS 5? I can't install it with yum, since yum has a much newer
version already. I have searched google, but can't find a download
link, only a lot of references to the kernel w.r.t problems.

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Götz Reinicke - IT-Koordinator
Rudi Ahlers schrieb:
> Hi all,
> 
> does anyone know where I can download  kernel-xen- 2.6.18-164.el5 for
> CentOS 5? I can't install it with yum, since yum has a much newer
> version already. I have searched google, but can't find a download
> link, only a lot of references to the kernel w.r.t problems.
> 

ftp://zid-lux1.uibk.ac.at/pub/dist/centos/5/os/i386/CentOS/kernel-xen-2.6.18-164.el5.i686.rpm

and

ftp://zid-lux1.uibk.ac.at/pub/dist/centos/5/os/x86_64/CentOS/kernel-xen-2.6.18-164.el5.x86_64.rpm


Works for me. Regards.

/Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner
Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium

Geschäftsführer:
Prof. Thomas Schadt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread John R Pierce
Rudi Ahlers wrote:
> Hi all,
>
> does anyone know where I can download  kernel-xen- 2.6.18-164.el5 for
> CentOS 5? I can't install it with yum, since yum has a much newer
> version already. I have searched google, but can't find a download
> link, only a lot of references to the kernel w.r.t problems.
>
>   

isn't that the stock 5.4 kernel?
http://mirror.centos.org/centos-5/5.4/os/x86_64/CentOS/

(replace x86_64 with i386 if needed)


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] rsync optimization

2010-01-11 Thread xufengnju
Hi,

We currently have upload servers in one data center(A), and users upload the 
images there. We have storage server in another data center(B). When users 
upload many images at the same time, we face sync difficulties.

On B, we use rsync in server mode, with authentication.
On A, we use  `rsync -azpogtRv --safe-links 1/ rsync://u...@serverb/img/ 
--password-file=/var/www/r.passwd `

Both ends run centos 5.3 X86_64.

Any suggestions to optimize rsync in this case?

Thank you in advance.

2010-01-11 



xufengnju 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rsync optimization

2010-01-11 Thread Eero Volotinen
Quoting xufengnju :

> Hi,
>
> We currently have upload servers in one data center(A), and users   
> upload the images there. We have storage server in another data   
> center(B). When users upload many images at the same time, we face   
> sync difficulties.
>
> On B, we use rsync in server mode, with authentication.
> On A, we use  `rsync -azpogtRv --safe-links 1/   
> rsync://u...@serverb/img/ --password-file=/var/www/r.passwd `
>
> Both ends run centos 5.3 X86_64.
>
> Any suggestions to optimize rsync in this case?


Well, at least remove v (verbose) and possibly also z (compression)


--
Eero

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Karanbir Singh
On 01/08/2010 05:28 PM, R-Elists wrote:
> what is wrong or what problems are you referring to with cciss please ?
>

problems mostly centered around management and performance issues. the 
world is littered with stores of cciss fail


-- 
Karanbir Singh
London, UK| http://www.karan.org/ | twitter.com/kbsingh
ICQ: 2522219  | Yahoo IM: z00dax  | Gtalk: z00dax
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Pasi Kärkkäinen
On Fri, Jan 08, 2010 at 12:33:39PM +0100, Rainer Duffner wrote:
> Karanbir Singh schrieb:
> > On 01/08/2010 01:58 AM, Christopher Chan wrote:
> >   
> >>> the thumpers make for decent backup or vtl type roles, not so much for
> >>> online high density storage.
> >>>   
> >> I wonder how much that would change with a bbu NVRAM card for an
> >> external journal for ext4 and the disks on md. Unless one cannot add a
> >> bbu NVRAM card...
> >> 
> >
> > Good question, they are after all ( the Sun 45xx's ) just opteron box's 
> > with a mostly standard build. Finding a CentOS compatible ( drivers 
> > pre-included, and not crap like cciss ) would not be too hard.
> >
> >   
> 
> 
> With ZFS, the whole machine is the RAID-controller (basically).
> NVRAM in ZFS would be used for L2ARC.
> Of course, this ask for a sane system-desgin (which the thumpers do
> have, as mentioned - AFAIK, there are virtually no off-the-shelf
> motherboads that can offer the thumper's distribution of SATA-channels
> over HT-links.
> 
> CentOS wouldn't run bad on such a motherboard, either (and RHEL is
> supported).
> ;-)
> 

Last time I checked only RHEL4 was support.. RHEL5 lacks (properly working) 
SATA driver for the controller used in the thumper.

Is RHEL5 supported/working nowadays?

-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rsync optimization

2010-01-11 Thread Kwan Lowe
On Mon, Jan 11, 2010 at 4:36 AM, xufengnju  wrote:
> Hi,
>
> We currently have upload servers in one data center(A), and users upload the
> images there. We have storage server in another data center(B). When users
> upload many images at the same time, we face sync difficulties.
>
> On B, we use rsync in server mode, with authentication.
> On A, we use  `rsync -azpogtRv --safe-links 1/
> rsync://u...@serverb/img/ --password-file=/var/www/r.passwd `
>
> Both ends run centos 5.3 X86_64.
>
> Any suggestions to optimize rsync in this case?

You can add the following options:
--ignore-times
--delay-updates

The first will speed up the comparison. The second can prevent some
errors related to synchronization on the receiving side.

BTW, have you considered using a DRBD volume with GFS?  This might
work better than rsync, depending on your configuration.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Peter Kjellstrom
On Monday 11 January 2010, Karanbir Singh wrote:
> On 01/08/2010 05:28 PM, R-Elists wrote:
> > what is wrong or what problems are you referring to with cciss please ?
>
> problems mostly centered around management and performance issues. the
> world is littered with stores of cciss fail

I would certainly not go as far as saying that I like cciss, but, they are 
imho not much worse than other products. We currently have ~500T on p800 and 
it behaves quite well.

As for the specifics:
- Management: hpacucli is certainly odd, but then again neither tw_cli (3ware) 
nor cli64 (areca) shines.
- Performance: certainly not a strong point, but a p800 can sustain quite a 
bit more than the 1G ethernet link I need.

/Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Select pam module for select users

2010-01-11 Thread yanagik317
Dear CentOS people,

Maybe I didn't read enough, but is there a way to use pam_ldap for some 
users (w/o trying pam_krb5 first, which is listed before pam_ldap) and 
pam_krb5 for others.

Thank you,

--Koji
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Pasi Kärkkäinen
On Mon, Jan 11, 2010 at 03:00:41PM +0200, Pasi Kärkkäinen wrote:
> On Fri, Jan 08, 2010 at 12:33:39PM +0100, Rainer Duffner wrote:
> > Karanbir Singh schrieb:
> > > On 01/08/2010 01:58 AM, Christopher Chan wrote:
> > >   
> > >>> the thumpers make for decent backup or vtl type roles, not so much for
> > >>> online high density storage.
> > >>>   
> > >> I wonder how much that would change with a bbu NVRAM card for an
> > >> external journal for ext4 and the disks on md. Unless one cannot add a
> > >> bbu NVRAM card...
> > >> 
> > >
> > > Good question, they are after all ( the Sun 45xx's ) just opteron box's 
> > > with a mostly standard build. Finding a CentOS compatible ( drivers 
> > > pre-included, and not crap like cciss ) would not be too hard.
> > >
> > >   
> > 
> > 
> > With ZFS, the whole machine is the RAID-controller (basically).
> > NVRAM in ZFS would be used for L2ARC.
> > Of course, this ask for a sane system-desgin (which the thumpers do
> > have, as mentioned - AFAIK, there are virtually no off-the-shelf
> > motherboads that can offer the thumper's distribution of SATA-channels
> > over HT-links.
> > 
> > CentOS wouldn't run bad on such a motherboard, either (and RHEL is
> > supported).
> > ;-)
> > 
> 
> Last time I checked only RHEL4 was support.. RHEL5 lacks (properly working) 
> SATA driver for the controller used in the thumper.
> 
> Is RHEL5 supported/working nowadays?
> 

It seems X4500 (not available anymore) had Marvell SATA controllers, that
are not supported with RHEL5.

X4540 uses LSI SATA controllers, that are supported.

-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Rainer Duffner
Am 11.01.2010 15:26, schrieb Pasi Kärkkäinen:
>
> It seems X4500 (not available anymore) had Marvell SATA controllers, that
> are not supported with RHEL5.
>
> X4540 uses LSI SATA controllers, that are supported.
>   


Indeed:

http://www.sun.com/servers/x64/x4540/os.jsp

5.3+ is needed.

Of course, for a true Solaris-admin, this would be a big waste.
;-)
But if you have an application that runs on Linux (but not Solaris) or
runs much more stable on Linux, this is a viable option.



Regards,
Rainer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Rudi Ahlers
On Mon, Jan 11, 2010 at 11:21 AM, John R Pierce  wrote:
> Rudi Ahlers wrote:
>> Hi all,
>>
>> does anyone know where I can download  kernel-xen- 2.6.18-164.el5 for
>> CentOS 5? I can't install it with yum, since yum has a much newer
>> version already. I have searched google, but can't find a download
>> link, only a lot of references to the kernel w.r.t problems.
>>
>>
>
> isn't that the stock 5.4 kernel?
> http://mirror.centos.org/centos-5/5.4/os/x86_64/CentOS/
>
> (replace x86_64 with i386 if needed)
>
>
> ___


Nope, there's a newer kernel installed already. I need this particular
older one for one of the XEN domU's on this server, and don't want to
downgrade the running kernel and reboot the server


-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT ] Re: Laptop for CentOS-5

2010-01-11 Thread James B. Byrne

In case anyone is interested in the result of the advice and
discussion that my query generated, I bought a Macintosh PowerBook
on Saturday.

My initial experience was very satisfactory.  The strong points were
the ease of set-up, an amazingly short start up time (even from a
cold start), and a simply unbelievable battery life.

The weak points including the magnetic coupled power supply--the d/c
cable from the transformer to the laptop is simply too short. Even
with the optional long a/c cable and plug the cable is just too
short to avoid dislodging it frequently when adjusting ones sitting
position. another 40 to 50 cm of cable length is required I think.

Another weakness is a re-occurring problem with the AirPort wireless
adapter.  The Mac worked with my existing WPA2/TKIP shared secret
mixed-mode wireless home lan out of the box (once the key was
provided).  When Internet connectivity was established I immediately
updated the OS to 10.6.2.  Once this completed I  worked on the
system for a few hours getting somewhat accustomed to the Apple way
of doing things.  Everything worked very well.

The next day however, after again working with the system on the
wireless network without problem for several hours, I performed an
Apple software update.  Immediately following this update the
AirPort wireless network adapter began exhibiting poor performance
with many dropped packets, resulting in poor response times, and
frequent disconnections from the wireless network.

I spent about seven hours tracking this problem down, resetting the
PRAM and so-forth on the basis of instructions found on various
blogs, FAQs and forums.  Apparently this problem is fairly common
although strangely absent from the official Apple FAQ, at least as
far as  I could see.  Along the way I discovered that with OS-X 10.6
the PRAM no longer holds any network configuration setting so older
how-to's which advise this are useless.

In the end I followed a frequently encountered recommendation to purge:

/Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist

and immediately restarted the powerbook.  This seemed to clear the
problem, although by this time it was after midnight and I did not
stay up to test it extensively.

I also uncovered and issue with Firefox 3.5.7 and Mac Java.  If one
has a Java application active in any tab then switching tabs results
in the java application window staying visible, although no longer
responsive.  The contents of the active tab are thereby obscured
while those portions of the page that are not under the java window
are displayed.  Switching back to the tab containing the java app
restores responsiveness to the application window.

I could not find any thing on this from Google, although I am not
sure how one describes this circumstance to a search engine.

I am really not enthralled with the inability to cut and paste from
a Safari web page, or any desktop application for that matter,
directly into a terminal window.  This is a particular PAI for me as
I often have to connect via ssh to remote sites and perform
maintenance in vi.  The inability to cut and paste is excruciating
and I am investigating alternatives to mac terminal.  This lack and
the poor colour support in Termian.app is, to me, surprising
functional omissions for a GUI orientated OS.  This is a feature
that I could even manage between MS-IE and cygwin's rxvt on
MS-WinXP.

Anyway, these minor points aside (although if the AirPort
connectivity issue is not resolved then that will be a show-stopper)
I seem to have been captured by the light side.  We will have to see
if I escape or become assimilated.

-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Nicolas Thierry-Mieg


Rudi Ahlers wrote:
> On Mon, Jan 11, 2010 at 11:21 AM, John R Pierce  wrote:
>> Rudi Ahlers wrote:
>>> Hi all,
>>>
>>> does anyone know where I can download  kernel-xen- 2.6.18-164.el5 for
>>> CentOS 5? I can't install it with yum, since yum has a much newer
>>> version already. I have searched google, but can't find a download
>>> link, only a lot of references to the kernel w.r.t problems.
>>>
>>>
>>
>> isn't that the stock 5.4 kernel?
>> http://mirror.centos.org/centos-5/5.4/os/x86_64/CentOS/
>>
>> (replace x86_64 with i386 if needed)
>>
>>
>> ___
>
>
> Nope, there's a newer kernel installed already. I need this particular
> older one for one of the XEN domU's on this server, and don't want to
> downgrade the running kernel and reboot the server

so what? you can download the old kernel from John's link and do 
whatever you want with it.
It's there... Did you click on the link he provided??
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Rudi Ahlers
On Mon, Jan 11, 2010 at 11:20 AM, Götz Reinicke - IT-Koordinator
 wrote:
> Rudi Ahlers schrieb:
>> Hi all,
>>
>> does anyone know where I can download  kernel-xen- 2.6.18-164.el5 for
>> CentOS 5? I can't install it with yum, since yum has a much newer
>> version already. I have searched google, but can't find a download
>> link, only a lot of references to the kernel w.r.t problems.
>>
>
> ftp://zid-lux1.uibk.ac.at/pub/dist/centos/5/os/i386/CentOS/kernel-xen-2.6.18-164.el5.i686.rpm
>
> and
>
> ftp://zid-lux1.uibk.ac.at/pub/dist/centos/5/os/x86_64/CentOS/kernel-xen-2.6.18-164.el5.x86_64.rpm
>
>
> Works for me. Regards.
>
>        /Götz
>
> --
> Götz Reinicke
> IT-Koordinator
>


Thanx Gotz,

this link, like all the others that I found isn't working. Do you by
any chance have the RPM somewhere that I can download from FTP? I'm
looking for a x64 version, for CentOS 5.4



-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Karanbir Singh
On 01/11/2010 03:17 PM, Rudi Ahlers wrote:
> Nope, there's a newer kernel installed already. I need this particular
> older one for one of the XEN domU's on this server, and don't want to
> downgrade the running kernel and reboot the server

man yum,

look at the --showduplicates option. you can then use the output to have 
yum with specific versions eg:

yum install -

-- 
Karanbir Singh
London, UK| http://www.karan.org/ | twitter.com/kbsingh
ICQ: 2522219  | Yahoo IM: z00dax  | Gtalk: z00dax
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Securing http authentication from brute force attacks

2010-01-11 Thread James B. Byrne
We have several web applications deployed under Apache that require
a user id / password authentication.  Some of these use htdigest and
others use the application itself.

Recently we have experienced several brute force attacks against
some of these services which have been dealt with for the nonce by
changes to iptables.  However, I am not convinced that these changes
are the answer.

Therefore I have been looking at http protection and have run across
a few independently provided modules for Apache http security,
mod_security being one of them.

I would like the opinion of other CentOS sysadmins who already have
faced this same problem, with respect to the solutions available and
those that they choose for themselves.

Sincerely,



-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Securing http authentication from brute force attacks

2010-01-11 Thread John Doe
From: James B. Byrne 
> We have several web applications deployed under Apache that require
> a user id / password authentication.  Some of these use htdigest and
> others use the application itself.
> 
> Recently we have experienced several brute force attacks against
> some of these services which have been dealt with for the nonce by
> changes to iptables.  However, I am not convinced that these changes
> are the answer.
> 
> Therefore I have been looking at http protection and have run across
> a few independently provided modules for Apache http security,
> mod_security being one of them.
> 
> I would like the opinion of other CentOS sysadmins who already have
> faced this same problem, with respect to the solutions available and
> those that they choose for themselves.

I did not test it but maybe check:
http://www.zdziarski.com/projects/mod_evasive/

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Securing http authentication from brute force attacks

2010-01-11 Thread Jim Perrin
On Mon, Jan 11, 2010 at 10:59 AM, James B. Byrne  wrote:
> We have several web applications deployed under Apache that require
> a user id / password authentication.  Some of these use htdigest and
> others use the application itself.
>
> Recently we have experienced several brute force attacks against
> some of these services which have been dealt with for the nonce by
> changes to iptables.  However, I am not convinced that these changes
> are the answer.
>
> Therefore I have been looking at http protection and have run across
> a few independently provided modules for Apache http security,
> mod_security being one of them.
>
> I would like the opinion of other CentOS sysadmins who already have
> faced this same problem, with respect to the solutions available and
> those that they choose for themselves.


You can configure fail2ban to help deal with this, along with ssh
protection. I'm also heavily in favor of mod_security when it comes to
apache protection.

-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Kai Schaetzl
Rudi Ahlers wrote on Mon, 11 Jan 2010 17:17:14 +0200:

> and don't want to
> downgrade the running kernel and reboot the server

you have to reboot the VM (I assume you mean this by "server"?), anyway, 
for a new kernel.

Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Robert Heller
At Mon, 11 Jan 2010 18:01:24 +0100 CentOS mailing list  
wrote:

> 
> Rudi Ahlers wrote on Mon, 11 Jan 2010 17:17:14 +0200:
> 
> > and don't want to
> > downgrade the running kernel and reboot the server
> 
> you have to reboot the VM (I assume you mean this by "server"?), anyway, 
> for a new kernel.

I think the OP does not want to reboot xen itself and the dom0 VM or
any of the virtual machines, *except* the one with the 'bad' kernel.

> 
> Kai
> 

-- 
Robert Heller -- 978-544-6933
Deepwoods Software-- Download the Model Railroad System
http://www.deepsoft.com/  -- Binaries for Linux and MS-Windows
hel...@deepsoft.com   -- http://www.deepsoft.com/ModelRailroadSystem/
   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread John R Pierce
Pasi Kärkkäinen wrote:
> It seems X4500 (not available anymore) had Marvell SATA controllers, that
> are not supported with RHEL5.
>   

And those marvell controllers caused major grief for Sun, especially 
when Solaris added support for NCQ somewhere in there. under heavy IO 
workloads, the controllers would just hang.   Some nasty bugs.  Driver 
software workarounds caused a big performance hit.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Rudi Ahlers
On Mon, Jan 11, 2010 at 7:07 PM, Robert Heller  wrote:
> At Mon, 11 Jan 2010 18:01:24 +0100 CentOS mailing list  
> wrote:
>
>>
>> Rudi Ahlers wrote on Mon, 11 Jan 2010 17:17:14 +0200:
>>
>> > and don't want to
>> > downgrade the running kernel and reboot the server
>>
>> you have to reboot the VM (I assume you mean this by "server"?), anyway,
>> for a new kernel.
>
> I think the OP does not want to reboot xen itself and the dom0 VM or
> any of the virtual machines, *except* the one with the 'bad' kernel.
>
>>
>> Kai
>>
>
> --

Yup, that's exactly what I want todo :) But I can't find this kernel's
RPM on the internet to install it on the dom0 host


-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ntpd appears to not be able to query ntp servers automatically?

2010-01-11 Thread Ryan Pugatch
Hello all,

After reboot, one of my servers running CentOS5 no longer keeps its 
clock synced automatically.  ntpd is running and I don't see anything 
weird being logged.  If I kick off ntpd with 'ntpd -q', it will sync the 
clock.  However, if I just rely on ntpd started with 'service ntpd 
start', syncing does not happen.

I previously had:

# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available.
server 127.127.1.0 # local clock
fudge  127.127.1.0 stratum 10

and noticed that ntpd would fail down to using the undisciplined local 
clock if I checked with ntpstat.  I commented those out, and now ntpstat 
simply says:

unsynchronised
   time server re-starting
polling server every 64

Any idea as to why ntpd -q will sync, but otherwise the clock will not 
stay in sync even when the local clock drifts by several minutes?  It 
worked fine prior to reboot.

Thanks,

Ryan
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Bent Terp
On Wed, Jan 6, 2010 at 10:35 PM, Boris Epstein  wrote:
> some storage servers to run under Linux - most likely CentOS. The storage
> volume would be in the range specified: 8-15 TB. Any recommendations as far
> as hardware?

I'm kind of partial to Areca raid controllers, you can get up to 24
ports, so that can be as much as 20 TB (that's real world terabytes,
not hardware manufacturer's) in a raid 6 with hot-spare using 1000 GB
drives.

BR Bent
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Les Mikesell
On 1/11/2010 11:38 AM, John R Pierce wrote:
> Pasi Kärkkäinen wrote:
>> It seems X4500 (not available anymore) had Marvell SATA controllers, that
>> are not supported with RHEL5.
>>
>
> And those marvell controllers caused major grief for Sun, especially
> when Solaris added support for NCQ somewhere in there. under heavy IO
> workloads, the controllers would just hang.   Some nasty bugs.  Driver
> software workarounds caused a big performance hit.

Is that a different chipset than 
http://www.newegg.com/Product/Product.aspx?Item=N82E16815121009 uses?  I 
replaced a Paradise and Adaptec card with one of these (or maybe the 
PCI-E version) and Centos recognized it and worked better than with the 
two different cards.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Setup multiple bridges for use with KVM

2010-01-11 Thread Jacob Hydeman
>
> I'm using the same setup for multiple bridges for Xen, no problem. But I
> use static IP addresses. You *have* to use IP numbers from different
> subnets.
>
>
I've setup just the IPADDR= and NETMASK= to have different static IPs in
different subnets and changed to the BOOTPROTO=static in each of the
ifcfg-brX scripts.

This hasn't fixed my issue. Perhaps it's because of the way I'm trying to
use it (or I don't get it). Does each VM that is using a specific bridged
device need to have the same IP subnet as that of the static brX address?

What I am trying to accomplish here is this:

Router (192.168.7.1) -> eth0/br0 (10.1.10.1) -> VM01
(with internal vr0 and vr1 attached to br0 and br1 and a bridged IP of
192.168.7.253, running Untangle in bridge mode)

VM01 > eth1/br1 ---> local switch -> eth2/br2
--> other running VMs.

Thinking that the internal bridging done by the Untangle VM might have
caused an issue... I setup just a stock Win Server 2003 install with a
single ethernet device attached to br0 and set a static IP in the
192.168.7.X range (in Win 2k3 VM). The untangle VM is shutdown. I still
can't ping 192.168.7.1 from the Win2k3 VM.

Thanks,

Jacob
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5 [SOLVED]

2010-01-11 Thread Rudi Ahlers
On Mon, Jan 11, 2010 at 5:49 PM, Karanbir Singh  wrote:
> On 01/11/2010 03:17 PM, Rudi Ahlers wrote:
>> Nope, there's a newer kernel installed already. I need this particular
>> older one for one of the XEN domU's on this server, and don't want to
>> downgrade the running kernel and reboot the server
>
> man yum,
>
> look at the --showduplicates option. you can then use the output to have
> yum with specific versions eg:
>
> yum install -
>
> --
> Karanbir Singh


Thanx, this is exactly what I needed :) And now I learned something new as well

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT ] Re: Laptop for CentOS-5

2010-01-11 Thread Mathieu Baudier
> In case anyone is interested in the result of the advice and
> discussion that my query generated, I bought a Macintosh PowerBook
> on Saturday.

My understanding is that PowerBook are (were) based on PPC
architecture and are not sold by Apple anymore.
Since you talk about Mac OS 10.6 (aka. Snow Leopard) I assume that you
bought an intel-based one, so I guess this is either a MacBook or a
MacBook Pro.

(I still have an old PowerBook 12'' running Fedora 11 PPC, that I
don't really use anymore but we went through a lot of weird countries
and experiences together, so I keep it and let my 1.5 year son play
with it from time to time... Sorry for the sentimental OT)

> Anyway, these minor points aside (although if the AirPort
> connectivity issue is not resolved then that will be a show-stopper)
> I seem to have been captured by the light side.  We will have to see
> if I escape or become assimilated.

If I may give you an advice: before you have configured to much on the
Mac OS side, please repartition it and leave a 20/50 GB space on it
(at the end)

This is very very manageable to use Linux on these computers, Fedora
and even CentOS (see my previous posts, and our discussion off-list),
but a sticky point is the repartioning. Very often the simplest way is
to reinstall MacOS (there are other ways though). So even if you don't
plan to use Linux on it on the short time, just leave some space for
it now on the harddrive. As long as you have done that, Linux
installation is painless (using rEFIT) and safe for your MacOS
install.

(and the terminal is quite good on Linux...)

Feel free to contact me offlist or open a new thread if I can help you
with that (as I told you before, this is on my TODO list to add
documentation regarding Mactels on the CentOS wiki)

My 20$ (at least)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread William Warren
On 1/11/2010 1:33 PM, Les Mikesell wrote:
> On 1/11/2010 11:38 AM, John R Pierce wrote:
>
>> Pasi Kärkkäinen wrote:
>>  
>>> It seems X4500 (not available anymore) had Marvell SATA controllers, that
>>> are not supported with RHEL5.
>>>
>>>
>> And those marvell controllers caused major grief for Sun, especially
>> when Solaris added support for NCQ somewhere in there. under heavy IO
>> workloads, the controllers would just hang.   Some nasty bugs.  Driver
>> software workarounds caused a big performance hit.
>>  
> Is that a different chipset than
> http://www.newegg.com/Product/Product.aspx?Item=N82E16815121009 uses?  I
> replaced a Paradise and Adaptec card with one of these (or maybe the
> PCI-E version) and Centos recognized it and worked better than with the
> two different cards.
>
>
http://linuxmafia.com/faq/Hardware/sata.html#marvell

it's fakeraid.  I don't know if it's a different one than what was in 
there previously though..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Pasi Kärkkäinen
On Mon, Jan 11, 2010 at 08:12:33PM +0200, Rudi Ahlers wrote:
> On Mon, Jan 11, 2010 at 7:07 PM, Robert Heller  wrote:
> > At Mon, 11 Jan 2010 18:01:24 +0100 CentOS mailing list  
> > wrote:
> >
> >>
> >> Rudi Ahlers wrote on Mon, 11 Jan 2010 17:17:14 +0200:
> >>
> >> > and don't want to
> >> > downgrade the running kernel and reboot the server
> >>
> >> you have to reboot the VM (I assume you mean this by "server"?), anyway,
> >> for a new kernel.
> >
> > I think the OP does not want to reboot xen itself and the dom0 VM or
> > any of the virtual machines, *except* the one with the 'bad' kernel.
> >
> >>
> >> Kai
> >>
> >
> > --
> 
> Yup, that's exactly what I want todo :) But I can't find this kernel's
> RPM on the internet to install it on the dom0 host
> 

You don't have to install the kernel rpm to dom0/host.

You can install the kernel only to domU, and use Xen pygrub to load the
domU grub.conf and kernel+initrd from the guests filesystem.

Are you really saying you can't find that kernel rpm? It's available
from every CentOS (FTP) mirror.

-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT ] Re: Laptop for CentOS-5

2010-01-11 Thread Les Mikesell
On 1/11/2010 9:35 AM, James B. Byrne wrote:
>
> I also uncovered and issue with Firefox 3.5.7 and Mac Java.  If one
> has a Java application active in any tab then switching tabs results
> in the java application window staying visible, although no longer
> responsive.  The contents of the active tab are thereby obscured
> while those portions of the page that are not under the java window
> are displayed.  Switching back to the tab containing the java app
> restores responsiveness to the application window.

I've never liked browser tabs much so I tend to open everything in new 
windows - but FF 3.x should have a feature of being able to drag a tab 
out and have it become a window.  Does doing that to the tab with the 
java app fix it?

> I am really not enthralled with the inability to cut and paste from
> a Safari web page, or any desktop application for that matter,
> directly into a terminal window.  This is a particular PAI for me as
> I often have to connect via ssh to remote sites and perform
> maintenance in vi.  The inability to cut and paste is excruciating
> and I am investigating alternatives to mac terminal.  This lack and
> the poor colour support in Termian.app is, to me, surprising
> functional omissions for a GUI orientated OS.  This is a feature
> that I could even manage between MS-IE and cygwin's rxvt on
> MS-WinXP.

I'm using 10.5 and haven't found much of anything that won't cut/paste, 
but I use a mouse with the right button enabled and use the pop-up menus 
to do it (mostly because that is much less confusing when you jump 
around among windows/mac/linux).  This should even work between local 
apps and virtualbox, NX, remote windows desktop, vnc, etc.

> Anyway, these minor points aside (although if the AirPort
> connectivity issue is not resolved then that will be a show-stopper)
> I seem to have been captured by the light side.  We will have to see
> if I escape or become assimilated.

If you only want to be partly assimilated you can run virtualbox or 
VMware fusion with other OS guests, use the NX client from 
www.nomachine.com with freenx/Centos on another machine, or the remote 
windows desktop client with windows on another machine.   But, Apple has 
a way of timing their OS and ilife updates on a different cycle than 
hardware releases so don't be surprised if you have to buy those over 
again if you really are assimilated.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for kernel-xen- 2.6.18-164.el5

2010-01-11 Thread Rudi Ahlers
On Mon, Jan 11, 2010 at 9:42 PM, Pasi Kärkkäinen  wrote:
>>
>
> You don't have to install the kernel rpm to dom0/host.
>
> You can install the kernel only to domU, and use Xen pygrub to load the
> domU grub.conf and kernel+initrd from the guests filesystem.
>
> Are you really saying you can't find that kernel rpm? It's available
> from every CentOS (FTP) mirror.
>
> -- Pasi
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

The application, fluidVM, that I'm using relies on the kernel to be
installed on the host dom0 in order for the domU to work - i.e. it
doesn't use pygub. But I got it working with "yum search kernel-xen
--showduplicates"

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Help finding the X man page.

2010-01-11 Thread Todd Denniston
I would like to tweak the way my gnome-terminals are coming up and the `man 
gnome-terminal` refers 
me to the "X" man page (specifically for --geometry).
Although I have found what is probably an adequate version on line[1] (from the 
x.org folks no 
less), I would like to have the man page from CentOS ON my system.

my yum foo is not doing so well...
$ yum  whatprovides \*/man7\*/X\*gz
Loaded plugins: fastestmirror, security
No Matches found

and
$ yum  whatprovides \*/man\*/X\*gz
... is a bit overwhelming and did not seem to have what I was looking for.


further gentle clue-by-four available?

[1] http://www.x.org/archive/X11R6.8.1/doc/X.7.html

-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help finding the X man page.

2010-01-11 Thread Nicolas Thierry-Mieg


Todd Denniston wrote:
> I would like to tweak the way my gnome-terminals are coming up and the `man 
> gnome-terminal` refers
> me to the "X" man page (specifically for --geometry).
> Although I have found what is probably an adequate version on line[1] (from 
> the x.org folks no
> less), I would like to have the man page from CentOS ON my system.
>
> my yum foo is not doing so well...
> $ yum  whatprovides \*/man7\*/X\*gz
> Loaded plugins: fastestmirror, security
> No Matches found
>
> and
> $ yum  whatprovides \*/man\*/X\*gz
> ... is a bit overwhelming and did not seem to have what I was looking for.
>
>
> further gentle clue-by-four available?
>
> [1] http://www.x.org/archive/X11R6.8.1/doc/X.7.html
>

man Xorg ?

a few others visible here:
[nthie...@localhost ~]$ rpm -q xorg-x11-server-Xorg -l | grep man
/usr/share/man/man1/Xorg.1x.gz
/usr/share/man/man1/Xserver.1x.gz
/usr/share/man/man1/cvt.1.gz
/usr/share/man/man1/gtf.1x.gz
/usr/share/man/man1/scanpci.1x.gz
/usr/share/man/man4/fbdevhw.4.gz
/usr/share/man/man5/xorg.conf.5x.gz
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Horde - epel vs. extras?

2010-01-11 Thread Les Mikesell
When updating a centos 5.x box with the horde package, should the extras 
or epel version win?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Tom Georgoulias
On 01/11/2010 09:42 AM, Rainer Duffner wrote:
> Am 11.01.2010 15:26, schrieb Pasi Kärkkäinen:

>> X4540 uses LSI SATA controllers, that are supported.
>>
>
>
> Indeed:
>
> http://www.sun.com/servers/x64/x4540/os.jsp
>
> 5.3+ is needed.
>
> Of course, for a true Solaris-admin, this would be a big waste.
> ;-)
> But if you have an application that runs on Linux (but not Solaris) or
> runs much more stable on Linux, this is a viable option.

CentOS 5.4 x86_64 works fine on the x4540s, I've installed it myself and 
didn't have to do anything special to see and use all of the disks.

In my testing, the IO was faster and the storage easier to administer 
with when using Solaris and ZFS rather than with CentOS and software 
raid.  That kind of box is just made for ZFS.

Tom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Horde - epel vs. extras?

2010-01-11 Thread Rob Kampen

Les Mikesell wrote:
When updating a centos 5.x box with the horde package, should the extras 
or epel version win?


  

Les,
I have extras in priority over epel and horde 4.3.4 seems to work fine
HTH
<>___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Vmware server 2.0.2 and Centos 5.4

2010-01-11 Thread Akemi Yagi
On Sun, Jan 10, 2010 at 7:02 AM, Tom Bishop  wrote:
> I know of the issue using vmware server 2.0.2 and centos 5.4, but is their
> any reason not to use the .rpm install of  for centos?  I have always used
> the .tar file but this time used the rpm and it appeared to install and not
> crash.  I went ahead and did the glib correction but I was wondering if
> using the rpm was not the rght thing to do, Thanks.

I personally do not see anything wrong with using the rpm to install
VMware Server.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Christopher Chan
Karanbir Singh wrote:
> On 01/08/2010 05:28 PM, R-Elists wrote:
>> what is wrong or what problems are you referring to with cciss please ?
>>
> 
> problems mostly centered around management and performance issues. the 
> world is littered with stores of cciss fail
> 
> 

Really? Man, I have been given this spanking new HP DL370 G6 and running 
Centos 5.4 on it...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Christopher Chan
Bent Terp wrote:
> On Wed, Jan 6, 2010 at 10:35 PM, Boris Epstein  wrote:
>> some storage servers to run under Linux - most likely CentOS. The storage
>> volume would be in the range specified: 8-15 TB. Any recommendations as far
>> as hardware?
> 
> I'm kind of partial to Areca raid controllers, you can get up to 24
> ports, so that can be as much as 20 TB (that's real world terabytes,
> not hardware manufacturer's) in a raid 6 with hot-spare using 1000 GB
> drives.
> 

I see that the Areca driver has finally made it into the mainline Linux 
kernel. But I wonder how things have improved from this particular case.

http://notemagnet.blogspot.com/2008/08/linux-disk-failures-areca-is-not-so.html

Any comments? With 3ware lately not looking so good from comments I have 
heard on the list over the past few years performance wise, I wonder how 
Adaptec and Areca look now?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] multipath

2010-01-11 Thread Paras pradhan
Hi.

Somehow I do not see any out put using multipath -l or multipath -ll . But I
can see using dry run ie multipath -d.

Also I do not see /dev/dm-*

It was there before. How do I re claim it.


Thanks!
Paras.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] multipath

2010-01-11 Thread nate
Paras pradhan wrote:
> Hi.
>
> Somehow I do not see any out put using multipath -l or multipath -ll . But I
> can see using dry run ie multipath -d.
>
> Also I do not see /dev/dm-*
>
> It was there before. How do I re claim it.

Are the modules loaded?

[r...@dc1-mysql001a:~]# lsmod | grep dm
dm_zero35265  0
dm_mirror  60617  0
dm_round_robin 36801  1
dm_multipath   52945  2 dm_round_robin
dm_mod 99737  17 dm_zero,dm_mirror,dm_multipath
[r...@dc1-mysql001a:~]# multipath -l
350002ac0006a0714dm-1 3PARdata,VV
[size=1.0T][features=0][hwhandler=0]
\_ round-robin 0 [prio=0][active]
 \_ 1:0:0:3 sdc 8:32  [active][undef]
 \_ 1:0:1:3 sde 8:64  [active][undef]
 \_ 2:0:0:3 sdg 8:96  [active][undef]
 \_ 2:0:1:3 sdi 8:128 [active][undef]
350002ac000790714dm-0 3PARdata,VV
[size=2.0T][features=0][hwhandler=0]
\_ round-robin 0 [prio=0][active]
 \_ 1:0:0:2 sdb 8:16  [active][undef]
 \_ 1:0:1:2 sdd 8:48  [active][undef]
 \_ 2:0:0:2 sdf 8:80  [active][undef]
 \_ 2:0:1:2 sdh 8:112 [active][undef]



nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Vmware server 2.0.2 and Centos 5.4

2010-01-11 Thread Tom Bishop
Thanks, rpms have made me lazy ;)

On 1/11/10, Akemi Yagi  wrote:
> On Sun, Jan 10, 2010 at 7:02 AM, Tom Bishop  wrote:
>> I know of the issue using vmware server 2.0.2 and centos 5.4, but is their
>> any reason not to use the .rpm install of  for centos?  I have always used
>> the .tar file but this time used the rpm and it appeared to install and
>> not
>> crash.  I went ahead and did the glib correction but I was wondering if
>> using the rpm was not the rght thing to do, Thanks.
>
> I personally do not see anything wrong with using the rpm to install
> VMware Server.
>
> Akemi
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] multipath

2010-01-11 Thread Paras pradhan
Yes every thing's loaded.

Here is the output:

[r...@cvprd1 ~]# lsmod | grep dm
dm_round_robin 36801  0
rdma_cm68565  1 ib_iser
ib_cm  73449  1 rdma_cm
iw_cm  43465  1 rdma_cm
ib_sa  75209  2 rdma_cm,ib_cm
ib_core   105157  6 ib_iser,rdma_cm,ib_cm,iw_cm,ib_sa,ib_mad
ib_addr41929  1 rdma_cm
dm_multipath   56153  1 dm_round_robin
scsi_dh41665  1 dm_multipath
dm_raid45  99401  0
dm_message 36289  1 dm_raid45
dm_region_hash 46273  1 dm_raid45
dm_mem_cache   39489  1 dm_raid45
dm_snapshot52105  0
dm_zero35265  0
dm_mirror  54737  0
dm_log 44993  3 dm_raid45,dm_region_hash,dm_mirror
dm_mod101521  11
dm_multipath,dm_raid45,dm_snapshot,dm_zero,dm_mirror,dm_log



Thanks
Paras.



On Mon, Jan 11, 2010 at 6:33 PM, nate  wrote:

> Paras pradhan wrote:
> > Hi.
> >
> > Somehow I do not see any out put using multipath -l or multipath -ll .
> But I
> > can see using dry run ie multipath -d.
> >
> > Also I do not see /dev/dm-*
> >
> > It was there before. How do I re claim it.
>
> Are the modules loaded?
>
> [r...@dc1-mysql001a:~]# lsmod | grep dm
> dm_zero35265  0
> dm_mirror  60617  0
> dm_round_robin 36801  1
> dm_multipath   52945  2 dm_round_robin
> dm_mod 99737  17 dm_zero,dm_mirror,dm_multipath
> [r...@dc1-mysql001a:~]# multipath -l
> 350002ac0006a0714dm-1 3PARdata,VV
> [size=1.0T][features=0][hwhandler=0]
> \_ round-robin 0 [prio=0][active]
>  \_ 1:0:0:3 sdc 8:32  [active][undef]
>  \_ 1:0:1:3 sde 8:64  [active][undef]
>  \_ 2:0:0:3 sdg 8:96  [active][undef]
>  \_ 2:0:1:3 sdi 8:128 [active][undef]
> 350002ac000790714dm-0 3PARdata,VV
> [size=2.0T][features=0][hwhandler=0]
> \_ round-robin 0 [prio=0][active]
>  \_ 1:0:0:2 sdb 8:16  [active][undef]
>  \_ 1:0:1:2 sdd 8:48  [active][undef]
>  \_ 2:0:0:2 sdf 8:80  [active][undef]
>  \_ 2:0:1:2 sdh 8:112 [active][undef]
>
>
>
> nate
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Keith Keller
On Tue, Jan 12, 2010 at 08:07:17AM +0800, Christopher Chan wrote:
> 
> I see that the Areca driver has finally made it into the mainline Linux 
> kernel. But I wonder how things have improved from this particular case.
> 
> http://notemagnet.blogspot.com/2008/08/linux-disk-failures-areca-is-not-so.html

I can't speak to this, except to point out that it is almost 18 months
old, which is quite a long time in kernel development space.

With the right incantation, one can call smartctl directly on a drive
connected to a 3ware controller, no matter what kind of array it is in.
(I believe you can even call it on a drive assigned as a hot spare.)

> Any comments? With 3ware lately not looking so good from comments I have 
> heard on the list over the past few years performance wise, I wonder how 
> Adaptec and Areca look now?

I've run an exclusively 3ware shop since I ditched my last aacraid
machines a few years back.  But with all their issues, I am definitely
considering trying Areca on my next server that's not planned to be
immediately mission-critical.  (I wouldn't switch back to Adaptec unless
I knew their interface tools, and especially their cli, had improved
dramatically; the aaccli/afacli interfaces were simply atrocious.)

--keith

-- 
kkel...@speakeasy.net



pgpY0toMUNyqK.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-15 TB storage: any recommendations?

2010-01-11 Thread Christopher Chan
Keith Keller wrote:
> On Tue, Jan 12, 2010 at 08:07:17AM +0800, Christopher Chan wrote:
>> I see that the Areca driver has finally made it into the mainline Linux 
>> kernel. But I wonder how things have improved from this particular case.
>>
>> http://notemagnet.blogspot.com/2008/08/linux-disk-failures-areca-is-not-so.html
> 
> I can't speak to this, except to point out that it is almost 18 months
> old, which is quite a long time in kernel development space.

Which is why I am asking.

> 
> With the right incantation, one can call smartctl directly on a drive
> connected to a 3ware controller, no matter what kind of array it is in.
> (I believe you can even call it on a drive assigned as a hot spare.)

Which is why I specifically said 'performance wise' as respects 3ware. I 
don't remember anything bad about 3ware stability wise or monitoring wise.

> 
>> Any comments? With 3ware lately not looking so good from comments I have 
>> heard on the list over the past few years performance wise, I wonder how 
>> Adaptec and Areca look now?
> 
> I've run an exclusively 3ware shop since I ditched my last aacraid
> machines a few years back.  But with all their issues, I am definitely
> considering trying Areca on my next server that's not planned to be
> immediately mission-critical.  (I wouldn't switch back to Adaptec unless
> I knew their interface tools, and especially their cli, had improved
> dramatically; the aaccli/afacli interfaces were simply atrocious.)
> 

What issues are you having with 3ware?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rsync optimization

2010-01-11 Thread xufengnju

We are now doing on the work to reduce the amount of images that would be 
compared before rsync many of which maybe aready exist on the receiving end.
After we do a successful rsync, we log the images transfered, and we use 
another script to delete them on the send end. And that turns out to be helpful 
in this case.



2010-01-12 



xufengnju 



发件人: Kwan Lowe 
发送时间: 2010-01-11  21:14:58 
收件人: CentOS mailing list 
抄送: 
主题: Re: [CentOS] rsync optimization 
 
On Mon, Jan 11, 2010 at 4:36 AM, xufengnju  wrote:
> Hi,
>
> We currently have upload servers in one data center(A), and users upload the
> images there. We have storage server in another data center(B). When users
> upload many images at the same time, we face sync difficulties.
>
> On B, we use rsync in server mode, with authentication.
> On A, we use  `rsync -azpogtRv --safe-links 1/
> rsync://u...@serverb/img/ --password-file=/var/www/r.passwd `
>
> Both ends run centos 5.3 X86_64.
>
> Any suggestions to optimize rsync in this case?
You can add the following options:
--ignore-times
--delay-updates
The first will speed up the comparison. The second can prevent some
errors related to synchronization on the receiving side.
BTW, have you considered using a DRBD volume with GFS?  This might
work better than rsync, depending on your configuration.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Raising ftp priority?

2010-01-11 Thread hadi motamedi
On Mon, Jan 11, 2010 at 7:05 AM, John R Pierce  wrote:

> hadi motamedi wrote:
> > Thank you for your reply . So the only way is cloning his hard disk .
> > Am I right?
>
> I'd consider using dump to dump each ext3fs file system, then use
> 'restore' to restore each of these dumps to appropriately sized file
> systems for the new target system.   the source system should be shut
> down to single user mode, and all file systems umounted except / when
> you do this.  you can pipe the output of the dump to a ssh command
> to write the dump to drive on a remote system. for instance...
>
># dump -0uv /dev/sda2 | ssh r...@target -c "restore -rf -  /mnt/var"
>
> where /dev/sda2 is the /var file system on the local system, and
> /mnt/var is the temporary home of the new disk, freshly formatted, with
> the new /usr mounted as /mnt/usr
>
> of course, you repeat this for each file system on the source system.
> See the man pages for dump and restore.  Don't forget to install the
> grub boot loader on this new disk, then move it to the target hardware,
> which presumably is near identical to the original system.
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


Thank you for your reply . Can you please help me on the real scenario , as
the followings?
My local(source) CentOS server @192.168.0.2
My remote CentOS client @192.168.0.70
On the local system :
#df -m
Filesystem  Mounted on
/dev/hda3 /
/dev/hda1 /boot
tmpfs  /dev/shm
On the local system , issue the followings to make client and server as
identical :
#dump -0uvf - /dev/hda3 | ssh r...@192.168.0.70 -c "restore -rf - /"
#dump -0uvf - /dev/hda1 | ssh r...@192.168.0.70 -c "restore -rf - /boot"
#dump -0uvf - /dev/shm | ssh r...@192.168.0.70 -c "restore -rf - /tmpfs"
Can you please confirm if my understanding is right?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] digikam and mp3 sound on RHEL

2010-01-11 Thread Kevin Kempter
Hi All;

after years of running free Linux distros I've finally come to a place where I 
must have solid stability for my work laptop so I've purchased RHEL 
Workstation.

I like it well enough - however I'd like to install digikam and get my system 
to play mp3's.  I'm thinking I could get both of these from a centos 
repository. What do you'all think?

If so, could someone point me to the correct repo(s) and the packages I'd need 
for playing mp3's?


Thanks in advance
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] digikam and mp3 sound on RHEL

2010-01-11 Thread Eero Volotinen
Quoting Kevin Kempter :

> Hi All;
>
> after years of running free Linux distros I've finally come to a   
> place where I
> must have solid stability for my work laptop so I've purchased RHEL
> Workstation.
>
> I like it well enough - however I'd like to install digikam and get my system
> to play mp3's.  I'm thinking I could get both of these from a centos
> repository. What do you'all think?
>
> If so, could someone point me to the correct repo(s) and the   
> packages I'd need
> for playing mp3's?

http://wiki.centos.org/FAQ/General#head-a3f995090c5d170e4738c162fc126524ef7a62c4

--
Eero

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos