Re: [CentOS] How to remove USB dependency form the boot process.

[Jussi Hirvi]

On 19.5.2010 9.12, Vijay Shanker Dubey wrote:
> Hi friend,
>
> I have just installed the centos 5.3 on my server machine. It looks for
> a USB media to boot. But I am not able to figure it out what i have done
> wrong. Is there any way i can remove this dependency. Or I have to
> reinstall the OS again?

Bios problem, right? You should disable USB boot from the bios, and 
check that hd boot has been selected instead.

- Jussi


-- 
Jussi Hirvi * Green Spot
Topeliuksenkatu 15 C * 00250 Helsinki * Finland
Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms)
jussi.hi...@greenspot.fi * http://www.greenspot.fi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Bug in freeradius 1.1.3-1.5.el5_4 rpm

[Lars Hecking]

lheck...@users.sourceforge.net writes:
> Ian Forde writes:
> > I upgraded one of my servers to CentOS 5.4 today.  The freeradius
> > service (radiusd) didn't start up due to permissions errors.  I tracked
> > it to the permissions on the /etc/raddb/certs/ directory being set to
> > 640 rather than 750, so the radius user couldn't enter the directory.
> > In the spec file from the source rpm, line 200 should read:
> > 
> > %attr(750,root,radiusd) %config (noreplace) /etc/raddb/certs
> > 
> > rather than the current:
> > 
> > %attr(640,root,radiusd) %config (noreplace) /etc/raddb/certs
> > 
> > Note that this bug also exists in the the 1.1.3-1.4.el5 version that's
> > part of the CentOS 5.4 release.  I'm not sure if it exists upstream
> > though, but there it is... ;)
>  
>  Thanks for the heads-up. This bug was already in 5.3, but it looks like it
>  was never reported.

 Still broken in 5.5.



---
This message and any attachments may contain Cypress (or its
subsidiaries) confidential information. If it has been received
in error, please advise the sender and immediately delete this
message.
---

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] setup firewall with 3 nic cards

[J.Witvliet]

Hi Jerry,

Just a general remark.
When deploying a firewall, it is advisable to have (atleast for input, better 
for all) to have the general policy set to drop, and only allow in what you 
expect to be coming in. If you put a "-j log" line as a final line for each 
section, you'll see every packet you forgot about...

Now the default is "allow", and only doing some SNAT and DNAT rules...

hw

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of 
Jerry Geis
Sent: Tuesday, May 11, 2010 12:10 AM
To: CentOS ML
Subject: [CentOS] setup firewall with 3 nic cards

I have a centos box with 3 nics. eth0 is internal, eth1 is T1 data and eth2 is 
cable data.
Everything is working on eth2 cable. External NAT is working just fine for eth2.
However external address 74.x.x.x on eth1 is not working.

Below is my iptables information.

I setup eth1 same as eth2 just a different IP address of course. What did I 
miss that
eth1 and NAT is not working?

Just looking for both public IP's incoming to NAT to the correct IP address. 
Only 1 is working at this time.


Thanks,

Jerry

---

Chain INPUT (policy ACCEPT)
target prot opt source   destination 
RH-Firewall-1-INPUT  all  --  0.0.0.0/00.0.0.0/0   

Chain FORWARD (policy ACCEPT)
target prot opt source   destination 
RH-Firewall-1-INPUT  all  --  0.0.0.0/00.0.0.0/0   

Chain OUTPUT (policy ACCEPT)
target prot opt source   destination 

Chain RH-Firewall-1-INPUT (2 references)
target prot opt source   destination 
ACCEPT all  --  0.0.0.0/00.0.0.0/0   
ACCEPT all  --  0.0.0.0/00.0.0.0/0   
ACCEPT all  --  0.0.0.0/00.0.0.0/0   
ACCEPT icmp --  0.0.0.0/00.0.0.0/0   icmp type 255 
ACCEPT esp  --  0.0.0.0/00.0.0.0/0   
ACCEPT ah   --  0.0.0.0/00.0.0.0/0   
ACCEPT udp  --  0.0.0.0/0224.0.0.251 udp dpt:5353 
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:631 
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:631 
ACCEPT all  --  0.0.0.0/00.0.0.0/0   state 
RELATED,ESTABLISHED 
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0   state NEW tcp 
dpt:25 
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0   state NEW tcp 
dpt:22 
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0   state NEW tcp 
dpt:80 
REJECT all  --  0.0.0.0/00.0.0.0/0   reject-with 
icmp-host-prohibited 


Chain PREROUTING (policy ACCEPT)
target prot opt source   destination 
DNAT   tcp  --  0.0.0.0/024.123.23.170   tcp dpt:22 
to:192.168.1.209:22 
DNAT   tcp  --  0.0.0.0/024.123.23.170   tcp dpt:25 
to:192.168.1.209:25 
DNAT   tcp  --  0.0.0.0/024.123.23.170   tcp dpt:80 
to:192.168.1.209:80 
DNAT   tcp  --  0.0.0.0/074.223.8.179tcp dpt:22 
to:192.168.1.58:22
DNAT   tcp  --  0.0.0.0/074.223.8.179tcp dpt:25 
to:192.168.1.58:25 
DNAT   tcp  --  0.0.0.0/074.223.8.179tcp dpt:80 
to:192.168.1.58:80 


Chain POSTROUTING (policy ACCEPT)
target prot opt source   destination 
SNAT   all  --  192.168.1.0/24   0.0.0.0/0   to:24.123.23.170 
SNAT   all  --  0.0.0.0/0192.168.1.209   to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.209   to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.209   to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.209   to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.209   to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.209   to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.58to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.58to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.58to:192.168.1.1
SNAT   all  --  0.0.0.0/0192.168.1.58to:192.168.1.1
SNAT   all  --  0.0.0.0/0192.168.1.58to:192.168.1.1 
SNAT   all  --  0.0.0.0/0192.168.1.58to:192.168.1.1 


Chain OUTPUT (policy ACCEPT)
target prot opt source   destination 
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse Iface
24.123.23.168   0.0.0.0 255.255.255.248 U 0  00 eth2
74.223.8.1760.0.0.0 255.255.255.240 U 0  00 eth1
192.168.1.0 0.0.0.0 255.255.255.0   U 0  00 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0  00 eth2
0.0.0.0 24.123.2

Re: [CentOS] Benchmark Disk IO

[Matt Keating]

2010/5/6 Matt Keating :
> Thanks for all the updates. Will look into iozone and the advice given
> about the rest.

Either I'm doing/reading something wrong or a 1TB SATA 7200 RPM drive
is faster than 4x300GB SCSI 10K RPM drives in raid 10.
Both of the results below were from iozone, running the following command:
$ iozone -R -l 5 -u 5 -r 4k -s 100m -F /tmp/F1 /tmp/F2 /tmp/F3 /tmp/F4 /tmp/F5

SATA:
"Throughput report Y-axis is type of test X-axis is number of processes"
"Record size = 4 Kbytes "
"Output is in Kbytes/sec"

"  Initial write "  564135.95
"Rewrite " 2021499.52
"   Read " 5937227.44
"Re-read " 5898310.02
"   Reverse Read " 5652286.96
"Stride read " 5556376.58
"Random read " 5505582.00
" Mixed workload " 3570796.92
"   Random write " 1913500.58
" Pwrite "  580229.98
"  Pread " 5310776.62


RAID:
"Throughput report Y-axis is type of test X-axis is number of processes"
"Record size = 4 Kbytes "
"Output is in Kbytes/sec"

"  Initial write "  253099.59
"Rewrite "  915449.39
"   Read " 1911688.05
"Re-read " 1906603.72
"   Reverse Read " 1847584.97
"Stride read " 1772254.31
"Random read " 1550438.36
" Mixed workload " 1276847.84
"   Random write "  930307.99
" Pwrite "  206193.02
"  Pread " 2631370.07

Am I doing something wrong? Please advise.

Thanks,
Matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] VNC failed to initialize HAL

[John Doe]

From: sync 
> **(gnome-volume-manger:30626):WARING**: manager.c/912:failed to initialize 
> HAL!

service haldaemon status?

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] /etc/inittab

[John Doe]

From: Thomas Dukes 
> Where can I get a 5.2, 'stock' 
> inittab file not in a rpm so I can use a
> rescue disk to create this file? Or 
> if possible, could someone please post
> their's for me?

rpm -qf /etc/inittab   =>  initscripts
=> 
http://vault.centos.org/5.2/updates/i386/RPMS/initscripts-8.45.19.1.EL-1.el5.centos.i386.rpm
or 
http://vault.centos.org/5.2/updates/x86_64/RPMS/initscripts-8.45.19.1.EL-1.el5.centos.x86_64.rpm
rpm2cpio initscripts-8.45.19.1.EL-1.el5.centos.XXX.rpm | cpio -idmv *inittab

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 install

[Nicolas Thierry-Mieg]

Digimer wrote:
> On 10-05-18 08:51 PM, Thomas Dukes wrote:
>> Just installed from scratch 5.5
>>
>> Weird, eth0 is now eth1 and eth1 is eth0. Don't even know how I'm sending
>> this message as the the CentOS machine can't connect to the internet and
>> this windoze box uses the Centos box as a gateway.
>
> I've had to swap out the ethX mapping enough times that I wrote down how
> to do it here:
>
> http://wiki.alteeve.com/index.php/Changing_the_ethX_to_Ethernet_Device_Mapping_in_Red_Hat/CentOS
>
> Sorry for the long URL. Also, it's a side page to a larger paper, so the
> Xen stuff you can ignore. Other than that, it's a step-by-step
> walkthrough on swapping the ethX devices around.
>

nice, but a couple of comments:
you have DEVICE=eth0 in all ifcfg-ethX files, shouldn't these match?
you have the same HWADDR for the intel and d-link, you probably should 
have 00:AA:BB:CC:DD:EE for the d-link?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] VNC failed to initialize HAL

[sync]

On Wed, May 19, 2010 at 6:13 PM, John Doe  wrote:

> From: sync 
> > **(gnome-volume-manger:30626):WARING**: manager.c/912:failed to
> initialize HAL!
>
> service haldaemon status?
>
> Maybe it is the haldaemon problem.

I google the "What is the hald service used for?"

The answer is the following :

hald is a service provided by the hal (hardware abstraction layer) package,
that allows you to set up hardware (such as a keymap for multimedia enabled
keyboard) and allows user-space applications to access and manage hardware
such as Xorg*, *rhn_register, and likewise.

On desktops such as GNOME or KDE use this service to allow users and
applications to manage available hardware resources. A typical example would
be to allow a user to auto-mount removable media when an MP3 player is
connected.


So , Should I restart that daemon service in the server ?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] LVS IPv6 Support

[Juergen Gotteswinter]

Hello Folks,

regarding linuxvirtualserver.org, experimental v6 Support for ipv6 was
integrated into kernel 2.6.28-rc3, does anyone know if those patches
have been backported to the centos kernel?

Thanks!

Juergen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Benchmark Disk IO

[Benjamin Franz]

On 05/19/2010 02:44 AM, Matt Keating wrote:
> 2010/5/6 Matt Keating:
>
>> Thanks for all the updates. Will look into iozone and the advice given
>> about the rest.
>>  
> Either I'm doing/reading something wrong or a 1TB SATA 7200 RPM drive
> is faster than 4x300GB SCSI 10K RPM drives in raid 10.
> Both of the results below were from iozone, running the following command:
> $ iozone -R -l 5 -u 5 -r 4k -s 100m -F /tmp/F1 /tmp/F2 /tmp/F3 /tmp/F4 /tmp/F5
>
>
[...]
> Am I doing something wrong? Please advise.
>

I don't usually use iozone (I usually use bonnie++) so take this with a 
grain of salt, but those speed look suspiciously like cache speeds. Bump 
the size (-s parameter) up to twice your real RAM size.

-- 
Benjamin Franz
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Benchmark Disk IO

[Matt Keating]

> I don't usually use iozone (I usually use bonnie++) so take this with a
> grain of salt, but those speed look suspiciously like cache speeds. Bump
> the size (-s parameter) up to twice your real RAM size.
>
> --
> Benjamin Franz
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Will give that a try - 16gb file incoming :/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Benchmark Disk IO

[John Doe]

From: Matt Keating 
>> I don't usually use iozone (I usually use bonnie++) so take this with 
>> a grain of salt, but those speed look suspiciously like cache speeds. 
>> Bump the size (-s parameter) up to twice your real RAM size.
> Will give that a try - 16gb file incoming 

Or maybe do a:
  sync; echo 3 > /proc/sys/vm/drop_caches
between the 2 tests...?

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 install

[Digimer]

On 10-05-19 07:10 AM, Nicolas Thierry-Mieg wrote:
> Digimer wrote:
>> On 10-05-18 08:51 PM, Thomas Dukes wrote:
>>> Just installed from scratch 5.5
>>>
>>> Weird, eth0 is now eth1 and eth1 is eth0. Don't even know how I'm sending
>>> this message as the the CentOS machine can't connect to the internet and
>>> this windoze box uses the Centos box as a gateway.
>>
>> I've had to swap out the ethX mapping enough times that I wrote down how
>> to do it here:
>>
>> http://wiki.alteeve.com/index.php/Changing_the_ethX_to_Ethernet_Device_Mapping_in_Red_Hat/CentOS
>>
>> Sorry for the long URL. Also, it's a side page to a larger paper, so the
>> Xen stuff you can ignore. Other than that, it's a step-by-step
>> walkthrough on swapping the ethX devices around.
>>
>
> nice, but a couple of comments:
> you have DEVICE=eth0 in all ifcfg-ethX files, shouldn't these match?
> you have the same HWADDR for the intel and d-link, you probably should
> have 00:AA:BB:CC:DD:EE for the d-link?

Doh! I'll fix that in a couple of hours, thanks for pointing that out!

-- 
Digimer
E-Mail: li...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Benchmark Disk IO

[Jerry Franz]

On 05/19/2010 06:14 AM, John Doe wrote:
> From: Matt Keating
>
>>> I don't usually use iozone (I usually use bonnie++) so take this with
>>> a grain of salt, but those speed look suspiciously like cache speeds.
>>> Bump the size (-s parameter) up to twice your real RAM size.
>>>
>> Will give that a try - 16gb file incoming
>>  
> Or maybe do a:
>sync; echo 3>  /proc/sys/vm/drop_caches
> between the 2 tests...?
>
It wouldn't help. The problem is the tests were using file sizes small 
enough to easily fit completely into the system caches. So you end up 
benchmarking the performance of the I/O system caches - not the drives 
themselves.

-- 
Benjamin Franz
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Benchmark Disk IO

[Waleed Harbi]

*Try dbench.*
*
*
*
http://publib.boulder.ibm.com/infocenter/lnxinfo/v3r0m0/index.jsp?topic=/liaag/journalingfilesystem/publicjournal12.htm
*
*
*
*
OR*
*
*
*http://linuxhelp.150m.com/resources/fs-benchmarks.htm*
*
*
* 
http://www.phoronix-test-suite.com/?k=home
*
--
Best Wishes,
Waleed Harbi

Dream | Do | Be


On Wed, May 19, 2010 at 4:04 PM, Matt Keating  wrote:

> > I don't usually use iozone (I usually use bonnie++) so take this with a
> > grain of salt, but those speed look suspiciously like cache speeds. Bump
> > the size (-s parameter) up to twice your real RAM size.
> >
> > --
> > Benjamin Franz
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
>
> Will give that a try - 16gb file incoming :/
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 install

[tdukes]

 Digimer  wrote: 
> On 10-05-19 07:10 AM, Nicolas Thierry-Mieg wrote:
> > Digimer wrote:
> >> On 10-05-18 08:51 PM, Thomas Dukes wrote:
> >>> Just installed from scratch 5.5
> >>>
> >>> Weird, eth0 is now eth1 and eth1 is eth0. Don't even know how I'm sending
> >>> this message as the the CentOS machine can't connect to the internet and
> >>> this windoze box uses the Centos box as a gateway.
> >>
> >> I've had to swap out the ethX mapping enough times that I wrote down how
> >> to do it here:
> >>
> >> http://wiki.alteeve.com/index.php/Changing_the_ethX_to_Ethernet_Device_Mapping_in_Red_Hat/CentOS
> >>
> >> Sorry for the long URL. Also, it's a side page to a larger paper, so the
> >> Xen stuff you can ignore. Other than that, it's a step-by-step
> >> walkthrough on swapping the ethX devices around.
> >>

Thanks,

I edited the files last night and got it set like it was.

Eddie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Networking setup/help

[tdukes]

I had to install 5.5 from scratch and now I have to rebuild my home networking 
system.

I haven't had to mess with this stuff in over 5+ years and I'm sure there may 
be better ways of doing it now.

My liunx box acts as firewall/gateway for 2 other pcs. I was using a script 
from the Linux IP Masquerade HOWTO with ddclient (since I have a dynamic ip). 

Also, I don't think I need a full name server. Can I get by with a caching 
nameserver?

Thanks!!

Eddie


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Enrique Verdes]

El mié, 19-05-2010 a las 09:42 -0400, tdu...@sc.rr.com escribió:
> I had to install 5.5 from scratch and now I have to rebuild my home 
> networking system.
> 
> I haven't had to mess with this stuff in over 5+ years and I'm sure there may 
> be better ways of doing it now.
> 
> My liunx box acts as firewall/gateway for 2 other pcs. I was using a script 
> from the Linux IP Masquerade HOWTO with ddclient (since I have a dynamic ip). 
> 
> Also, I don't think I need a full name server. Can I get by with a caching 
> nameserver?
> 
Yes, you don't need more than that for your home network.

> Thanks!!
> 
> Eddie
> 
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

-- 
Enrique Verdes 
Depto. de Ingeniería - CONATEL S.A.


Este mensaje es privado y confidencial y tiene como único destinatario la 
persona a la que va dirigida. La responsabilidad de su contenido es del 
remitente y no de CONATEL. Si usted ha recibido este mensaje por error, tenga 
presente que le está prohibido revelarlo, copiarlo o distribuirlo, debiendo 
avisar de inmediato al remitente y borrarlo de su sistema. El error de 
transmisión no implica renuncia a la privacidad y confidencialidad.

This email is private and confidential and intended solely for the use of the 
individual to whom it is addressed. The responsibility of its content is the 
sender's and not CONATEL'S. If you have received this email by mistake please 
notify the sender immediately and delete it from your system. Its disclosure, 
copy or distribution is absolutely forbidden. The transmission error does not 
imply a waiver of privacy and confidentiality.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[m . roth]

> I had to install 5.5 from scratch and now I have to rebuild my home
> networking system.

Oy!
>
> I haven't had to mess with this stuff in over 5+ years and I'm sure there
> may be better ways of doing it now.

Unless you're dealing with many systems all the time, that's the way it
always is. I got openLDAP (gag!) working in '06, and upgraded in '08, but
I'd have to do heavy research to redo that today.
>
> My liunx box acts as firewall/gateway for 2 other pcs. I was using a
> script from the Linux IP Masquerade HOWTO with ddclient (since I have a
> dynamic ip).

Have you run Bastille on the firewall/gateway?
>
> Also, I don't think I need a full name server. Can I get by with a caching
> nameserver?

I never set one up, and have been meaning to for a while. I'm interested
in the answer.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Kwan Lowe]

On Wed, May 19, 2010 at 9:42 AM,   wrote:
> I had to install 5.5 from scratch and now I have to rebuild my home 
> networking system.
>
> I haven't had to mess with this stuff in over 5+ years and I'm sure there may 
> be better ways of doing it now.
>
> My liunx box acts as firewall/gateway for 2 other pcs. I was using a script 
> from the Linux IP Masquerade HOWTO with ddclient (since I have a dynamic ip).
>

Though there are many benefits to running gateway services through a
Linux system, for the past couple years I've opted for an inexpensive
wireless router that has been properly secured. It came down to power
utilization as the Linux machine used about 10 times as much power as
the dedicated router.

As to benefits, I do run a Squid proxy server on my network. My
internet connection is not the fastest and I've seen pretty good cache
hit percentage (hovering near 30%-50%).

> Also, I don't think I need a full name server. Can I get by with a caching 
> nameserver?

Yes, certainly.  However, there are some benefits to running a full
nameserver especially if you have any wireless devices that may need
to use printers, file servers, etc.. For example, I can connect a
wireless laptop and print to HPLaser1 or access the fileshare as
\\fileserver\. When I change the fileserver it's a simple matter of
pointing my alias over to the new server.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Les Mikesell]

On 5/19/2010 8:42 AM, tdu...@sc.rr.com wrote:
> I had to install 5.5 from scratch and now I have to rebuild my home 
> networking system.
>
> I haven't had to mess with this stuff in over 5+ years and I'm sure there may 
> be better ways of doing it now.
>
> My liunx box acts as firewall/gateway for 2 other pcs. I was using a script 
> from the Linux IP Masquerade HOWTO with ddclient (since I have a dynamic ip).
>
> Also, I don't think I need a full name server. Can I get by with a caching 
> nameserver?

If you are starting from scratch and don't know your way around the 
linux system, why not use one of the 'appliance' style distributions 
like ClearOS (fairly new) or SMEserver (older but still works)?  These 
are based on CentOS code but have a simple web interface for 
configuration and will probably set up the firewalling/NAT better than 
you would do by yourself.

But to answer your question - the only difference between the caching 
nameserver package and a normal nameserver is that the caching version 
will overwrite your local configs on updates (since you shouldn't have 
made any changes).  If you want to have a local zone for your own 
machines - even if it isn't official or public, you don't want the 
caching version.

-- 
  Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 install

[Les Mikesell]

On 5/19/2010 8:25 AM, tdu...@sc.rr.com wrote:

>
> Weird, eth0 is now eth1 and eth1 is eth0. Don't even know how I'm sending
> this message as the the CentOS machine can't connect to the internet and
> this windoze box uses the Centos box as a gateway.

 I've had to swap out the ethX mapping enough times that I wrote down how
 to do it here:

 http://wiki.alteeve.com/index.php/Changing_the_ethX_to_Ethernet_Device_Mapping_in_Red_Hat/CentOS

 Sorry for the long URL. Also, it's a side page to a larger paper, so the
 Xen stuff you can ignore. Other than that, it's a step-by-step
 walkthrough on swapping the ethX devices around.

>
> Thanks,
>
> I edited the files last night and got it set like it was.

Sometimes it's easier to just move the cables... Or have someone on site 
do it.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 install

[Digimer]

On 10-05-19 07:10 AM, Nicolas Thierry-Mieg wrote:
> Digimer wrote:
>> On 10-05-18 08:51 PM, Thomas Dukes wrote:
>>> Just installed from scratch 5.5
>>>
>>> Weird, eth0 is now eth1 and eth1 is eth0. Don't even know how I'm sending
>>> this message as the the CentOS machine can't connect to the internet and
>>> this windoze box uses the Centos box as a gateway.
>>
>> I've had to swap out the ethX mapping enough times that I wrote down how
>> to do it here:
>>
>> http://wiki.alteeve.com/index.php/Changing_the_ethX_to_Ethernet_Device_Mapping_in_Red_Hat/CentOS
>>
>> Sorry for the long URL. Also, it's a side page to a larger paper, so the
>> Xen stuff you can ignore. Other than that, it's a step-by-step
>> walkthrough on swapping the ethX devices around.
>>
>
> nice, but a couple of comments:
> you have DEVICE=eth0 in all ifcfg-ethX files, shouldn't these match?
> you have the same HWADDR for the intel and d-link, you probably should
> have 00:AA:BB:CC:DD:EE for the d-link?

It's fixed, thanks for catching that and letting me know. :)

-- 
Digimer
E-Mail: li...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 install

[Digimer]

On 10-05-19 10:33 AM, Les Mikesell wrote:
> On 5/19/2010 8:25 AM, tdu...@sc.rr.com wrote:
>
>>
>> Weird, eth0 is now eth1 and eth1 is eth0. Don't even know how I'm sending
>> this message as the the CentOS machine can't connect to the internet and
>> this windoze box uses the Centos box as a gateway.
>
> I've had to swap out the ethX mapping enough times that I wrote down how
> to do it here:
>
> http://wiki.alteeve.com/index.php/Changing_the_ethX_to_Ethernet_Device_Mapping_in_Red_Hat/CentOS
>
> Sorry for the long URL. Also, it's a side page to a larger paper, so the
> Xen stuff you can ignore. Other than that, it's a step-by-step
> walkthrough on swapping the ethX devices around.
>
>>
>> Thanks,
>>
>> I edited the files last night and got it set like it was.
>
> Sometimes it's easier to just move the cables... Or have someone on site
> do it.

This is sometimes possible, but not always. Here are a few cases I can 
think of where it isn't:

* If you've got IPMI piggy-backing on a physical interface, you may not 
want it to be on an Internet-facing LAN.
* If you have a particularly fast ethernet device you need for a storage 
network.
* If you've got a subnet that needs to use jumbo frames but only one NIC 
supports frames large enough for your application...

-- 
Digimer
E-Mail: li...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] 5.5 ISO size vs RHEL

[Anthony Caetano]

Hi

We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the CentOS 
one 
is 4602MB (***) split over two DVDs.  Is this reasonable and correct?  Any 
ideas 
why would there be such a discrepancy if they are built from the same (or very 
similar) source?

Regards
Anthony Caetano

**  the md5sum checks out, and RHN lists the size as 3,532 MB

*** CentOS-5.5-x86_64-bin-DVD-1of2.iso + CentOS-5.5-x86_64-bin-DVD-2of2.iso 
(according to ftp.heanet.ie:/pub/centos/5.5/isos/x86_64 )
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Kwan Lowe]

On Wed, May 19, 2010 at 10:46 AM, Anthony Caetano
 wrote:
> Hi
>
> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the CentOS 
> one
> is 4602MB (***) split over two DVDs.  Is this reasonable and correct?  Any 
> ideas
> why would there be such a discrepancy if they are built from the same (or very
> similar) source?

The upstream has different ISOs for different versions. Clustering,
for example, is split out.  The CentOS disks have them all in one ISO.
More bang for the buck...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Todd Denniston]

Anthony Caetano wrote, On 05/19/2010 10:46 AM:
> Hi
> 
> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the CentOS 
> one 
> is 4602MB (***) split over two DVDs.  Is this reasonable and correct? 

would have been nice if the split would have been below 32 bit MS tool limits.

>  Any ideas 
> why would there be such a discrepancy if they are built from the same (or 
> very 
> similar) source?
> 
> Regards
> Anthony Caetano
> 
> **  the md5sum checks out, and RHN lists the size as 3,532 MB
> 
> *** CentOS-5.5-x86_64-bin-DVD-1of2.iso + CentOS-5.5-x86_64-bin-DVD-2of2.iso 
> (according to ftp.heanet.ie:/pub/centos/5.5/isos/x86_64 )

perhaps the following will help in understanding.
https://www.centos.org/modules/newbb/viewtopic.php?topic_id=25548&viewmode=flat&order=ASC&start=29



-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Tony Molloy]

On Wednesday 19 May 2010 15:46:57 Anthony Caetano wrote:
> Hi
> 
> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the
>  CentOS one is 4602MB (***) split over two DVDs.  Is this reasonable and
>  correct?  Any ideas why would there be such a discrepancy if they are
>  built from the same (or very similar) source?
> 
> Regards
> Anthony Caetano
> 
> **  the md5sum checks out, and RHN lists the size as 3,532 MB
> 
> *** CentOS-5.5-x86_64-bin-DVD-1of2.iso + CentOS-5.5-x86_64-bin-DVD-2of2.iso
> (according to ftp.heanet.ie:/pub/centos/5.5/isos/x86_64 )
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 


Not correct. From ftp.heanet.ie

/pub/centos/5.5/isos/i386>

4185118720 May 11 09:59 CentOS-5.5-i386-bin-DVD.iso
That's 4.1GB

/pub/centos/5.5/isos/x86_64> 

4393723904 May 13 23:37 CentOS-5.5-x86_64-bin-DVD-1of2.iso
That's 4.3 GB

432361472 May 13 23:42 CentOS-5.5-x86_64-bin-DVD-2of2.iso
That's 432Mb

So total is 4.7Gb approx

Maybe you downloaded CentOS-5.5-x86_64-bin-DVD-2of2.iso twice.

Tony

-- 

Chief Technical Officer.   Tel: +353 061-202778
Dept. of Comp. Sci.
University of Limerick.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Rudi Ahlers]

On Wed, May 19, 2010 at 6:21 PM, Tony Molloy  wrote:

>  On Wednesday 19 May 2010 15:46:57 Anthony Caetano wrote:
> > Hi
> >
> > We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the
> >  CentOS one is 4602MB (***) split over two DVDs.  Is this reasonable and
> >  correct?  Any ideas why would there be such a discrepancy if they are
> >  built from the same (or very similar) source?
> >
> > Regards
> > Anthony Caetano
> >
> > **  the md5sum checks out, and RHN lists the size as 3,532 MB
> >
> > *** CentOS-5.5-x86_64-bin-DVD-1of2.iso +
> CentOS-5.5-x86_64-bin-DVD-2of2.iso
> > (according to ftp.heanet.ie:/pub/centos/5.5/isos/x86_64 )
> > ___
>


As matter of interest, what is the 2nd DVD for?



>  --
> Kind Regards
> Rudi Ahlers
> SoftDux
>
> Website: http://www.SoftDux.com
> Technical Blog: http://Blog.SoftDux.com
> Office: 087 805 9573
> Cell: 082 554 7532
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Tony Molloy]

On Wednesday 19 May 2010 17:24:49 Rudi Ahlers wrote:
> On Wed, May 19, 2010 at 6:21 PM, Tony Molloy  wrote:
> >  On Wednesday 19 May 2010 15:46:57 Anthony Caetano wrote:
> > > Hi
> > >
> > > We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the
> > >  CentOS one is 4602MB (***) split over two DVDs.  Is this reasonable
> > > and correct?  Any ideas why would there be such a discrepancy if they
> > > are built from the same (or very similar) source?
> > >
> > > Regards
> > > Anthony Caetano
> > >
> > > **  the md5sum checks out, and RHN lists the size as 3,532 MB
> > >
> > > *** CentOS-5.5-x86_64-bin-DVD-1of2.iso +
> >
> > CentOS-5.5-x86_64-bin-DVD-2of2.iso
> >
> > > (according to ftp.heanet.ie:/pub/centos/5.5/isos/x86_64 )
> > > ___
> 
> As matter of interest, what is the 2nd DVD for?
> 


As far as I know it contains most of the OpenOffice language packs. It 
shouldn't 
be needed to do an install unless you are going to install some of the more 
unusual packs.

Regards,

Tony
> >  --
> > Kind Regards
> > Rudi Ahlers
> > SoftDux
> >
> > Website: http://www.SoftDux.com
> > Technical Blog: http://Blog.SoftDux.com
> > Office: 087 805 9573
> > Cell: 082 554 7532
> 

-- 

Chief Technical Officer.   Tel: +353 061-202778
Dept. of Comp. Sci.
University of Limerick.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Nautilus: Error: Not on the same filesystem

[Frank Cox]

There appears to be a new bug in Nautilus in Centos 5.5 when trying to
move and delete files.

Error "Not on the same file system" while moving.

A google search found this:

http://centos.org/modules/newbb/viewtopic.php?topic_id=26205&forum=37


-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[John Doe]

From: Tony Molloy 
> On Wednesday 19 May 2010 15:46:57 Anthony Caetano wrote:
>> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), 
>> the CentOS one is 4602MB (***) split over two DVDs.  Is this 
>> reasonable and correct?
>> **  the md5sum checks out, and RHN lists the size as 3,532 MB
>> *** CentOS-5.5-x86_64-bin-DVD-1of2.iso + 
>> CentOS-5.5-x86_64-bin-DVD-2of2.iso
>> (according to ftp.heanet.ie:/pub/centos/5.5/isos/x86_64 )

> Not correct. From ftp.heanet.ie
> /pub/centos/5.5/isos/x86_64> 
> CentOS-5.5-x86_64-bin-DVD-1of2.isoThat's 4.3 GB
> CentOS-5.5-x86_64-bin-DVD-2of2.isoThat's 432Mb
> So total is 4.7Gb approx

That's mostly what he said (4.6Gb for the x86_64)...
If RH DVD is 3.5GB, how come CentOS one is 4.7GB...?
Isn't there a RH Desktop and Server distinction?

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Karanbir Singh]

On 05/19/2010 05:15 PM, Todd Denniston wrote:
>> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the 
>> CentOS one
>> is 4602MB (***) split over two DVDs.  Is this reasonable and correct?
>
> would have been nice if the split would have been below 32 bit MS tool limits.
>

which is what ? are '32 bit MS tools' not able to burn a regular dvd ?

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[John R Pierce]

Karanbir Singh wrote:
> On 05/19/2010 05:15 PM, Todd Denniston wrote:
>   
>>> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the 
>>> CentOS one
>>> is 4602MB (***) split over two DVDs.  Is this reasonable and correct?
>>>   
>> would have been nice if the split would have been below 32 bit MS tool 
>> limits.
>>
>> 
>
> which is what ? are '32 bit MS tools' not able to burn a regular dvd ?
>   


no idea which 'ms tools' he's referring to, but the freeware IMGBURN has 
no problem with burning >4GB .ISO files to DVD on 32bit Windows.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Todd Denniston]

Karanbir Singh wrote, On 05/19/2010 01:11 PM:
> On 05/19/2010 05:15 PM, Todd Denniston wrote:
>>> We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the 
>>> CentOS one
>>> is 4602MB (***) split over two DVDs.  Is this reasonable and correct?
>> would have been nice if the split would have been below 32 bit MS tool 
>> limits.
>>
> 
> which is what ? are '32 bit MS tools' not able to burn a regular dvd ?
> 

I had a proxy, somewhere in the chain, spit out "Arithmetic result exceeded 32 
bits."
each time it encountered the first image.
Hopefully there is a small amount of the CentOS population behind such Proxies, 
granted the CDs made
t OK.
-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[Les Mikesell]

On 5/19/2010 12:23 PM, John R Pierce wrote:
> Karanbir Singh wrote:
>> On 05/19/2010 05:15 PM, Todd Denniston wrote:
>>
 We use CentOS and RHEL, the 5.5 RHEL ISO for x86_64 is 3.7GB (**), the 
 CentOS one
 is 4602MB (***) split over two DVDs.  Is this reasonable and correct?

>>> would have been nice if the split would have been below 32 bit MS tool 
>>> limits.
>>>
>>>
>>
>> which is what ? are '32 bit MS tools' not able to burn a regular dvd ?
>>
>
>
> no idea which 'ms tools' he's referring to, but the freeware IMGBURN has
> no problem with burning>4GB .ISO files to DVD on 32bit Windows.

Unless maybe it was downloaded to a VFAT partition - but that's a 
generic problem with dvd images.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Generic RAID question

[James Bensley]

Does anyone know if using unequal drives in a RAID 0 is possible?

I was looking to set up a software stripe but if I have two volumes of
unequal size I wish to stripe over, will the OS try and work around
this by say only using as much space as is available on the smallest
drive or is there anyway it will use all of both drives?

Does it have to be a perfect block/byte balance across drives? (I'm
assuming yes?)

-- 
Regards,
James.

http://www.jamesbensley.co.cc/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Generic RAID question

[m . roth]

> Does anyone know if using unequal drives in a RAID 0 is possible?
>
> I was looking to set up a software stripe but if I have two volumes of
> unequal size I wish to stripe over, will the OS try and work around
> this by say only using as much space as is available on the smallest
> drive or is there anyway it will use all of both drives?
>
> Does it have to be a perfect block/byte balance across drives? (I'm
> assuming yes?)

Not sure... but if so, why not just partition the larger to have one
that's the same size as the smaller?

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.5 ISO size vs RHEL

[John R Pierce]

Les Mikesell wrote:
> Unless maybe it was downloaded to a VFAT partition - but that's a 
> generic problem with dvd images.
>   

well, FAT is a problem regardless of OS or wordsize, it flat out doesn't 
support files greater than 4GB

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Generic RAID question

[Benjamin Franz]

On 05/19/2010 10:50 AM, James Bensley wrote:
> Does anyone know if using unequal drives in a RAID 0 is possible?
>
> I was looking to set up a software stripe but if I have two volumes of
> unequal size I wish to stripe over, will the OS try and work around
> this by say only using as much space as is available on the smallest
> drive or is there anyway it will use all of both drives?
>
> Does it have to be a perfect block/byte balance across drives? (I'm
> assuming yes?)
>
>
In general, RAID0 will only size to the smallest volume. If your goal is 
just to make the largest volume out of multiple smaller volumes, use LVM 
instead. If you specifically want the performance enhancement of RAID0's 
striping you will have to live with it sizing to the smallest drive.

-- 
Benjamin Franz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] yum install

[Jerry Geis]

I have centos 5.4 and trying the command "yum install yum-utils", it 
gives me an error.  I tried the "yum clean all"
and the did the command again with same message.

I only have [base] and [updates] in the repo.

 yum install yum-utils
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror.nexcess.net
 * updates: mirrors.gigenet.com
base

 
| 1.1 kB 00:00
Traceback (most recent call last):
  File "/usr/bin/yum", line 29, in ?
yummain.user_main(sys.argv[1:], exit_code=True)
  File "/usr/share/yum-cli/yummain.py", line 309, in user_main
errcode = main(args)
  File "/usr/share/yum-cli/yummain.py", line 178, in main
result, resultmsgs = base.doCommands()
  File "/usr/share/yum-cli/cli.py", line 345, in doCommands
self._getTs(needTsRemove)
  File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 101, in 
_getTs
self._getTsInfo(remove_only)
  File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 112, in 
_getTsInfo
pkgSack = self.pkgSack
  File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 661, in 

pkgSack = property(fget=lambda self: self._getSacks(),
  File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 501, in 
_getSacks
self.repos.populateSack(which=repos)
  File "/usr/lib/python2.4/site-packages/yum/repos.py", line 260, in 
populateSack
sack.populate(repo, mdtype, callback, cacheonly)
  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 190, in 
populate
dobj = repo_cache_function(xml, csum)
  File "/usr/lib64/python2.4/site-packages/sqlitecachec.py", line 42, in 
getPrimary
self.repoid))
TypeError: Parsing primary.xml error: Start tag expected, '<' not found

What is the next step?

jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Kanwar Ranbir Sandhu]

On Wed, 2010-05-19 at 09:31 -0500, Les Mikesell wrote:
> If you are starting from scratch and don't know your way around the 
> linux system, why not use one of the 'appliance' style distributions 
> like ClearOS (fairly new) or SMEserver (older but still works)?  These 
> are based on CentOS code but have a simple web interface for 
> configuration and will probably set up the firewalling/NAT better than 
> you would do by yourself.

ClearOS looks awesome.  Have you tried it?

Regards,

Ranbir

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum install

[Les Mikesell]

On 5/19/2010 1:04 PM, Jerry Geis wrote:
> I have centos 5.4 and trying the command "yum install yum-utils", it
> gives me an error.  I tried the "yum clean all"
> and the did the command again with same message.
>
> I only have [base] and [updates] in the repo.
>
>   yum install yum-utils
> Loaded plugins: fastestmirror
> Loading mirror speeds from cached hostfile
>   * base: mirror.nexcess.net
>   * updates: mirrors.gigenet.com
> base
> | 1.1 kB 00:00
> Traceback (most recent call last):
>File "/usr/bin/yum", line 29, in ?
>  yummain.user_main(sys.argv[1:], exit_code=True)
>File "/usr/share/yum-cli/yummain.py", line 309, in user_main
>  errcode = main(args)
>File "/usr/share/yum-cli/yummain.py", line 178, in main
>  result, resultmsgs = base.doCommands()
>File "/usr/share/yum-cli/cli.py", line 345, in doCommands
>  self._getTs(needTsRemove)
>File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 101, in
> _getTs
>  self._getTsInfo(remove_only)
>File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 112, in
> _getTsInfo
>  pkgSack = self.pkgSack
>File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 661, in
> 
>  pkgSack = property(fget=lambda self: self._getSacks(),
>File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 501, in
> _getSacks
>  self.repos.populateSack(which=repos)
>File "/usr/lib/python2.4/site-packages/yum/repos.py", line 260, in
> populateSack
>  sack.populate(repo, mdtype, callback, cacheonly)
>File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 190, in
> populate
>  dobj = repo_cache_function(xml, csum)
>File "/usr/lib64/python2.4/site-packages/sqlitecachec.py", line 42, in
> getPrimary
>  self.repoid))
> TypeError: Parsing primary.xml error: Start tag expected, '<' not found
>
> What is the next step?

A similar problem was reported recently on the yum list and turned out 
to be one of the xml libs replaced by a non-distribution openoffice 
install.  Does 'rpm -Vv libxml2' show anything missing or broken?

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum install

[Jerry Geis]

>
> A similar problem was reported recently on the yum list and turned out 
> to be one of the xml libs replaced by a non-distribution openoffice 
> install.  Does 'rpm -Vv libxml2' show anything missing or broken?
>   
 rpm -Vv libxml2

S.5./usr/bin/xmlcatalog
S.5./usr/bin/xmllint
L.../usr/lib64/libxml2.so.2
prelink: /usr/lib64/libxml2.so.2.6.26: at least one of file's 
dependencies has changed since prelinking
S.?./usr/lib64/libxml2.so.2.6.26
/usr/share/doc/libxml2-2.6.26
  d /usr/share/doc/libxml2-2.6.26/AUTHORS
  d /usr/share/doc/libxml2-2.6.26/ChangeLog.gz
  d /usr/share/doc/libxml2-2.6.26/Copyright
  d /usr/share/doc/libxml2-2.6.26/NEWS
  d /usr/share/doc/libxml2-2.6.26/README
  d /usr/share/doc/libxml2-2.6.26/TODO
  d /usr/share/man/man1/xmlcatalog.1.gz
  d /usr/share/man/man1/xmllint.1.gz
  d /usr/share/man/man3/libxml.3.gz
/usr/bin/xmlcatalog
/usr/bin/xmllint
/usr/lib/libxml2.so.2
/usr/lib/libxml2.so.2.6.26
/usr/share/doc/libxml2-2.6.26
  d /usr/share/doc/libxml2-2.6.26/AUTHORS
  d /usr/share/doc/libxml2-2.6.26/ChangeLog.gz
  d /usr/share/doc/libxml2-2.6.26/Copyright
  d /usr/share/doc/libxml2-2.6.26/NEWS
  d /usr/share/doc/libxml2-2.6.26/README
  d /usr/share/doc/libxml2-2.6.26/TODO
  d /usr/share/man/man1/xmlcatalog.1.gz
  d /usr/share/man/man1/xmllint.1.gz
  d /usr/share/man/man3/libxml.3.gz

Now what?

Jerry

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum install

[Les Mikesell]

On 5/19/2010 1:29 PM, Jerry Geis wrote:
>>
>> A similar problem was reported recently on the yum list and turned out
>> to be one of the xml libs replaced by a non-distribution openoffice
>> install.  Does 'rpm -Vv libxml2' show anything missing or broken?
>>
>   rpm -Vv libxml2
>
> S.5./usr/bin/xmlcatalog
> S.5./usr/bin/xmllint
> L.../usr/lib64/libxml2.so.2
> prelink: /usr/lib64/libxml2.so.2.6.26: at least one of file's
> dependencies has changed since prelinking
> S.?./usr/lib64/libxml2.so.2.6.26
> /usr/share/doc/libxml2-2.6.26
>   d /usr/share/doc/libxml2-2.6.26/AUTHORS
>   d /usr/share/doc/libxml2-2.6.26/ChangeLog.gz
>   d /usr/share/doc/libxml2-2.6.26/Copyright
>   d /usr/share/doc/libxml2-2.6.26/NEWS
>   d /usr/share/doc/libxml2-2.6.26/README
>   d /usr/share/doc/libxml2-2.6.26/TODO
>   d /usr/share/man/man1/xmlcatalog.1.gz
>   d /usr/share/man/man1/xmllint.1.gz
>   d /usr/share/man/man3/libxml.3.gz
> /usr/bin/xmlcatalog
> /usr/bin/xmllint
> /usr/lib/libxml2.so.2
> /usr/lib/libxml2.so.2.6.26
> /usr/share/doc/libxml2-2.6.26
>   d /usr/share/doc/libxml2-2.6.26/AUTHORS
>   d /usr/share/doc/libxml2-2.6.26/ChangeLog.gz
>   d /usr/share/doc/libxml2-2.6.26/Copyright
>   d /usr/share/doc/libxml2-2.6.26/NEWS
>   d /usr/share/doc/libxml2-2.6.26/README
>   d /usr/share/doc/libxml2-2.6.26/TODO
>   d /usr/share/man/man1/xmlcatalog.1.gz
>   d /usr/share/man/man1/xmllint.1.gz
>   d /usr/share/man/man3/libxml.3.gz
>
> Now what?

Fix the ones that are different, I guess...  Where does 
/usr/lib64/libxml2.so.2 point now?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] apache redirection

[Ski Dawg]

Hello everyone,

Part of our website has secured access with an SSL certificate. The
problem we are running into is that the certificate is for
www.domainname.com, so when they go to domainname.com (without the
www. in front), the users are getting a "This connection is untrusted"
warning, because the url doesn't match the certificate.

I found one site that said to make a change to the apache conf file,
which I have done. The change that I made is adding:

ServerName domainname.com
Redirect permanent / http://www.domainname.com/


This works great to redirect the users to http://www.domainname.com
when they go to http://domainname.com.

The problem I am running into is if they go to https://domainname.com
(straight to the secure site), I am not able to find a solution that
will redirect them to https://www.domainname.com, so that the ssl
certificate matches and they won't get the "This connection is
untrusted" warning.

I tried using the same thing as above, but changing the port number to
443, and the http to https on the redirect line, but that actually
breaks the site, and only displays an error:
Secure Connection Failed
(Error code: ssl_error_rx_record_too_long)

Is there something obvious that I am missing? Is there a better way to
ensure that everyone will always end up with the www in the url, so
the certificate always matches?

Any thoughts and suggestions would be greatly appreciated.
-- 
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
   -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Craig White]

On Wed, 2010-05-19 at 14:08 -0600, Ski Dawg wrote:
> Hello everyone,
> 
> Part of our website has secured access with an SSL certificate. The
> problem we are running into is that the certificate is for
> www.domainname.com, so when they go to domainname.com (without the
> www. in front), the users are getting a "This connection is untrusted"
> warning, because the url doesn't match the certificate.
> 
> I found one site that said to make a change to the apache conf file,
> which I have done. The change that I made is adding:
> 
> ServerName domainname.com
> Redirect permanent / http://www.domainname.com/
> 
> 
> This works great to redirect the users to http://www.domainname.com
> when they go to http://domainname.com.
> 
> The problem I am running into is if they go to https://domainname.com
> (straight to the secure site), I am not able to find a solution that
> will redirect them to https://www.domainname.com, so that the ssl
> certificate matches and they won't get the "This connection is
> untrusted" warning.
> 
> I tried using the same thing as above, but changing the port number to
> 443, and the http to https on the redirect line, but that actually
> breaks the site, and only displays an error:
> Secure Connection Failed
> (Error code: ssl_error_rx_record_too_long)
> 
> Is there something obvious that I am missing? Is there a better way to
> ensure that everyone will always end up with the www in the url, so
> the certificate always matches?

yes, put the same VirtualHost directive into /etc/httpd/conf.d/ssl.conf

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS 5.5 - VMware Fencing in Cluster

[James]

I'm trying to use the newly integrated fence_vmware script within luci. 
I add it as a shared device and assume it is setup right (it is added as 
a device but it doesn't seem to do any connection test). When I try and 
add my shared fencing device as the primary device to a node it says it 
is updating the node configuration but then doesn't actually add the 
fence in the node's configuration within luci.

If I try and fence the device it predictably fails to fence the device.

I tried using fence_vmware from the command line (which seem to have 
some trivial errors which keep it from even running) and it works fine 
(after I fixed fence_vmware).

Can anyone offer me advice on setting up the shared fence and applying 
it to nodes for VMware Fencing?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Robert Heller]

At Wed, 19 May 2010 14:08:59 -0600 CentOS mailing list  
wrote:

> 
> Hello everyone,
> 
> Part of our website has secured access with an SSL certificate. The
> problem we are running into is that the certificate is for
> www.domainname.com, so when they go to domainname.com (without the
> www. in front), the users are getting a "This connection is untrusted"
> warning, because the url doesn't match the certificate.
> 
> I found one site that said to make a change to the apache conf file,
> which I have done. The change that I made is adding:
> 
> ServerName domainname.com
> Redirect permanent / http://www.domainname.com/
> 

You don't really need this -- you can just add the line below to your existing
 spec for www.domainname.com

ServerAlias domainname.com

> 
> This works great to redirect the users to http://www.domainname.com
> when they go to http://domainname.com.
> 
> The problem I am running into is if they go to https://domainname.com
> (straight to the secure site), I am not able to find a solution that
> will redirect them to https://www.domainname.com, so that the ssl
> certificate matches and they won't get the "This connection is
> untrusted" warning.
> 
> I tried using the same thing as above, but changing the port number to
> 443, and the http to https on the redirect line, but that actually
> breaks the site, and only displays an error:
> Secure Connection Failed
> (Error code: ssl_error_rx_record_too_long)

Probably because the VirtualHost for domainname.com:443 does not include
the SSL cert info.  You can try including a ServerAlias line to your
VirtualHost:443 container for www.domainname.com.

The only other thought would be look at your DNS record(s) for
domainname.com and make sure those records are 'sane' (in terms of which
name has the IP address and which is a CNAME record).

> 
> Is there something obvious that I am missing? Is there a better way to
> ensure that everyone will always end up with the www in the url, so
> the certificate always matches?
> 
> Any thoughts and suggestions would be greatly appreciated.

-- 
Robert Heller -- Get the Deepwoods Software FireFox Toolbar!
Deepwoods Software-- Linux Installation and Administration
http://www.deepsoft.com/  -- Web Hosting, with CGI and Database
hel...@deepsoft.com   -- Contract Programming: C/C++, Tcl/Tk


   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Zack Colgan]

On 05/19/2010 04:08 PM, Ski Dawg wrote:
> The problem I am running into is if they go to https://domainname.com
> (straight to the secure site), I am not able to find a solution that
> will redirect them to https://www.domainname.com, so that the ssl
> certificate matches and they won't get the "This connection is
> untrusted" warning.
> 
> Is there something obvious that I am missing? Is there a better way to
> ensure that everyone will always end up with the www in the url, so
> the certificate always matches?

The problem you are running into is that SSL sessions are negotiated
prior to the browser sending the virtual host name, so there is no
opportunity to redirect the client to the www URL before it's too late.
 Aside from purchasing a second SSL certificate for the plain domain
name or getting a wildcard certificate to cover both, I would just make
sure the links on your web site to the secure version of the domain
specify the www in the URL.

-Zack
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] trying to rebuild an old nvidia driver

[m . roth]

Let me start by saying that no, I can't get a new card for my user.

So, I've got the 96 nvidia driver. I've rebuilt it several times before,
and Nvidia's installer's always worked fine. Actually, I have the 73 on my
system, and just updated to 5.5, and no problem.

HOWEVER, I last rebuilt my user's driver back in mid-April, after the last
kernel update (was that mid-March?), and everything was fine... until the
other day, when he walked in to tell me he'd had to reboot, and it wasn't
working, and dropped him to command line.

I rebuilt it... and it dies. As in, sometimes, I have to go to another
machine and ssh in to reboot, and sometimes, I have to power cycle his
system. I get garbage with the nvidia driver; with nv, I can at least get
one of his two monitors working.

When I try x with the nvidia driver, it just keeps printing out
initializing GART, I think it is (I've lost the log), and then that it has
failed to allocate ROP.

Anyone see anything like this? I've unpacked the executable, and started
working with the makefiles (and yes, I do understand makefiles), but see
things like a lot of warning in the compile, and the one that makes me
nervous is
  make CC=cc KBUILD_OUTPUT=/lib/modules/2.6.18-194.3.1.el5/build
KBUILD_VERBOS
   E=1 -C /lib/modules/2.6.18-194.3.1.el5/source
SUBDIRS=/scratch/NVIDIA-Linux-
   x86-96.43.13-pkg1/usr/src/nv modules
   make -C /lib/modules/2.6.18-194.3.1.el5/build \
KBUILD_SRC=/usr/src/kernels/2.6.18-194.3.1.el5-i686 \
KBUILD_EXTMOD="/scratch/NVIDIA-Linux-x86-96.43.13-pkg1/usr/src/nv"
-f /usr/
   src/kernels/2.6.18-194.3.1.el5-i686/Makefile modules
   test -e include/linux/autoconf.h -a -e include/config/auto.conf || (   
 \
echo;   \
echo "  ERROR: Kernel configuration is invalid.";   \
echo " include/linux/autoconf.h or
include/config/auto.conf are mis
   sing.";  \
echo " Run 'make oldconfig && make prepare' on kernel src
to fix it
   .";  \
echo;   \
/bin/false)

Even though both those files exist and are where they should be. I've
googled, and find no references to those, and really hope it's not the
card going bad So, any clues?

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Ski Dawg]

On Wed, May 19, 2010 at 2:13 PM, Craig White  wrote:
> On Wed, 2010-05-19 at 14:08 -0600, Ski Dawg wrote:
>> I found one site that said to make a change to the apache conf file,
>> which I have done. The change that I made is adding:
>> 
>>     ServerName domainname.com
>>     Redirect permanent / http://www.domainname.com/
>> 
>> the certificate always matches?
> 
> yes, put the same VirtualHost directive into /etc/httpd/conf.d/ssl.conf

Thanks for the quick response Craig.

In our ssl.conf file, our domain is not set up. The ssl configuration
for our domain is in our httpd.conf file. Is there a particular place
to put this redirect or can it just go at the end of the ssl.conf
file?

In our httpd.conf file, we have:



ServerName www.domainname.com
ServerAlias domainname.com
DocumentRoot /home/username/public_html
UseCanonicalName off

BytesLog /usr/local/apache/domlogs/domainname.com-bytes_log
ScriptAlias /cgi-bin/ /home/username/public_html/cgi-bin/
SSLEngine on
SSLCertificateFile /etc/ssl/certs/domainname.com.crt
SSLCertificateKeyFile /etc/ssl/private/domainname.com.key
SSLLogFile /usr/local/apache/domlogs/domainname.com-ssl_data_log
CustomLog /usr/local/apache/domlogs/domainname.com-ssl_log combined
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown



I had tried adding the redirect section into this area in our
httpd.conf file, inside the Virtualhost section, within the IfDefine,
but outside the VirtualHost section, but it still kept giving me the
error
Secure Connection Failed
(Error code: ssl_error_rx_record_too_long)


-- 
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
   -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] trying to rebuild an old nvidia driver

[Akemi Yagi]

On Wed, May 19, 2010 at 2:05 PM,   wrote:
> Let me start by saying that no, I can't get a new card for my user.

No problem with that.

> So, I've got the 96 nvidia driver. I've rebuilt it several times before,
> and Nvidia's installer's always worked fine. Actually, I have the 73 on my
> system, and just updated to 5.5, and no problem.

I suggest you give the ELRepo package a try:

http://elrepo.org/tiki/kmod-nvidia-96xx

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Ski Dawg]

On Wed, May 19, 2010 at 2:33 PM, Robert Heller  wrote:
> At Wed, 19 May 2010 14:08:59 -0600 CentOS mailing list  
> wrote:
>> 
>>     ServerName domainname.com
>>     Redirect permanent / http://www.domainname.com/
>> 
>
> You don't really need this -- you can just add the line below to your existing
>  spec for www.domainname.com
>
> ServerAlias domainname.com

This doesn't work. This is what we had before. When you just add the
ServerAlias domainname.com to the VirtualHost configuration, when the
user goes to http://domainname.com, it stays on http://domainname.com,
and does not redirect to http://www.domainname.com. We need to have it
go to http://www.domainname.com so that when they click a link on out
site that then takes them to https://www.domainname.com so that it
matches the SSL certificate.

>> I tried using the same thing as above, but changing the port number to
>> 443, and the http to https on the redirect line, but that actually
>> breaks the site, and only displays an error:
>> Secure Connection Failed
>> (Error code: ssl_error_rx_record_too_long)
>
> Probably because the VirtualHost for domainname.com:443 does not include
> the SSL cert info.  You can try including a ServerAlias line to your
> VirtualHost:443 container for www.domainname.com.

That is already done, and still is giving us the SSL error, when
trying to do a redirect.

> The only other thought would be look at your DNS record(s) for
> domainname.com and make sure those records are 'sane' (in terms of which
> name has the IP address and which is a CNAME record).

I believe this is correct, but I will double check that. Thanks for
the suggestion.
-- 
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
  -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] trying to rebuild an old nvidia driver

[m . roth]

Akemi wrote:
> On Wed, May 19, 2010 at 2:05 PM,   wrote:
>> Let me start by saying that no, I can't get a new card for my user.
>
> No problem with that.
>
>> So, I've got the 96 nvidia driver. I've rebuilt it several times before,
>> and Nvidia's installer's always worked fine. Actually, I have the 73 on
>> my
>> system, and just updated to 5.5, and no problem.
>
> I suggest you give the ELRepo package a try:
>
> http://elrepo.org/tiki/kmod-nvidia-96xx

Thanks! I'll try that tomorrow.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Ski Dawg]

On Wed, May 19, 2010 at 3:02 PM, Zack Colgan
 wrote:
> On 05/19/2010 04:08 PM, Ski Dawg wrote:
>> The problem I am running into is if they go to https://domainname.com
>> (straight to the secure site), I am not able to find a solution that
>> will redirect them to https://www.domainname.com, so that the ssl
>> certificate matches and they won't get the "This connection is
>> untrusted" warning.
>
> The problem you are running into is that SSL sessions are negotiated
> prior to the browser sending the virtual host name, so there is no
> opportunity to redirect the client to the www URL before it's too late.
>  Aside from purchasing a second SSL certificate for the plain domain
> name or getting a wildcard certificate to cover both, I would just make
> sure the links on your web site to the secure version of the domain
> specify the www in the URL.

Zack,

Thanks for the reply.

All of our links use the correct syntax (with the www), we were just
trying to catch the corner cases where if someone tries to go directly
to https://domainname.com instead of https://www.domainname.com then
it would not give them the error.

I was hoping to be able to do this without another certificate, since
this is just some corner cases, but I will investigate that as well.
Thanks.
-- 
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
   -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Created a custom/minimal CentOS 5.x install ISO

[Digimer]

Hi all,

   I'd like to try rolling a somewhat stripped down and customized 
CentOS DVD. This is particularly interesting to me now that CentOS 5.5 
is 2 DVDs. I dare not call it a new distro as I suspect I will be the 
only one to use it. ;)

   I've been googling for ways to do this, figuring it must be somewhat 
straight forward, but my google-fu is weak it seems. Can someone point 
me to a how-to or doc on rolling your own CentOS derivative ISO? Also, 
I'm not talking about just rolling a new ISO, I can do that already, I 
want to update the list of RPMs (not)available to the installer.

Thanks!

PS - I found this link, but it's from 2006. Otherwise it's in-line with 
the kind of thing I want to do: 
http://lateral.netmanagers.com.ar/stories/38.html

-- 
Digimer
E-Mail: li...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Created a custom/minimal CentOS 5.x install ISO

[Digimer]

Subject should have been "How to *create* a ...", not "created". Sorry. :)

On 10-05-19 05:37 PM, Digimer wrote:
> Hi all,
>
> I'd like to try rolling a somewhat stripped down and customized
> CentOS DVD. This is particularly interesting to me now that CentOS 5.5
> is 2 DVDs. I dare not call it a new distro as I suspect I will be the
> only one to use it. ;)
>
> I've been googling for ways to do this, figuring it must be somewhat
> straight forward, but my google-fu is weak it seems. Can someone point
> me to a how-to or doc on rolling your own CentOS derivative ISO? Also,
> I'm not talking about just rolling a new ISO, I can do that already, I
> want to update the list of RPMs (not)available to the installer.
>
> Thanks!
>
> PS - I found this link, but it's from 2006. Otherwise it's in-line with
> the kind of thing I want to do:
> http://lateral.netmanagers.com.ar/stories/38.html


-- 
Digimer
E-Mail: li...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Generic RAID question

[Ross Walker]

On May 19, 2010, at 1:59 PM, Benjamin Franz  wrote:

> On 05/19/2010 10:50 AM, James Bensley wrote:
>> Does anyone know if using unequal drives in a RAID 0 is possible?
>>
>> I was looking to set up a software stripe but if I have two volumes  
>> of
>> unequal size I wish to stripe over, will the OS try and work around
>> this by say only using as much space as is available on the smallest
>> drive or is there anyway it will use all of both drives?
>>
>> Does it have to be a perfect block/byte balance across drives? (I'm
>> assuming yes?)
>>
>>
> In general, RAID0 will only size to the smallest volume. If your  
> goal is
> just to make the largest volume out of multiple smaller volumes, use  
> LVM
> instead. If you specifically want the performance enhancement of  
> RAID0's
> striping you will have to live with it sizing to the smallest drive.

Actually using LVM you can do both!

If you create the LV over two PVs, one bigger then the other, provide  
a size greater then the smaller can fit (size/2 > smaller disk free  
space) with an interleave of 2 it will put the remaining allocations  
sequentially on the bigger drive. Of course not ideal, but possible.

-Ross

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Robert Heller]

At Wed, 19 May 2010 15:21:06 -0600 CentOS mailing list  
wrote:

> 
> On Wed, May 19, 2010 at 2:33 PM, Robert Heller  wrote:
> > At Wed, 19 May 2010 14:08:59 -0600 CentOS mailing list  
> > wrote:
> >> 
> >>     ServerName domainname.com
> >>     Redirect permanent / http://www.domainname.com/
> >> 
> >
> > You don't really need this -- you can just add the line below to your 
> > existing
> >  spec for www.domainname.com
> >
> > ServerAlias domainname.com
> 
> This doesn't work. This is what we had before. When you just add the
> ServerAlias domainname.com to the VirtualHost configuration, when the
> user goes to http://domainname.com, it stays on http://domainname.com,
> and does not redirect to http://www.domainname.com. We need to have it
> go to http://www.domainname.com so that when they click a link on out
> site that then takes them to https://www.domainname.com so that it
> matches the SSL certificate.

The https: URL should be an absolute, fully qualified URL and
*explicitly* have the www.domainname.com hostname.  It should NOT be a
relative URL or any other games, including PHP/Perl/etc/ code that
(blindly) uses the SERVER_NAME environment variable -- that is the code
should either have the proper URL hard-wired OR should programatically
check SERVER_NAME for the presense of the 'www.' in the front (eg if
NOT regexp '^www.' SERVER_NAME then prepend 'www.' onto SERVER_NAME).  It
should not matter what name is being used to access the non-SSL side of
the side.

> 
> >> I tried using the same thing as above, but changing the port number to
> >> 443, and the http to https on the redirect line, but that actually
> >> breaks the site, and only displays an error:
> >> Secure Connection Failed
> >> (Error code: ssl_error_rx_record_too_long)
> >
> > Probably because the VirtualHost for domainname.com:443 does not include
> > the SSL cert info.  You can try including a ServerAlias line to your
> > VirtualHost:443 container for www.domainname.com.
> 
> That is already done, and still is giving us the SSL error, when
> trying to do a redirect.
> 
> > The only other thought would be look at your DNS record(s) for
> > domainname.com and make sure those records are 'sane' (in terms of which
> > name has the IP address and which is a CNAME record).
> 
> I believe this is correct, but I will double check that. Thanks for
> the suggestion.

-- 
Robert Heller -- Get the Deepwoods Software FireFox Toolbar!
Deepwoods Software-- Linux Installation and Administration
http://www.deepsoft.com/  -- Web Hosting, with CGI and Database
hel...@deepsoft.com   -- Contract Programming: C/C++, Tcl/Tk

 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Robert Heller]

At Wed, 19 May 2010 17:02:31 -0400 CentOS mailing list  
wrote:

> 
> On 05/19/2010 04:08 PM, Ski Dawg wrote:
> > The problem I am running into is if they go to https://domainname.com
> > (straight to the secure site), I am not able to find a solution that
> > will redirect them to https://www.domainname.com, so that the ssl
> > certificate matches and they won't get the "This connection is
> > untrusted" warning.
> > 
> > Is there something obvious that I am missing? Is there a better way to
> > ensure that everyone will always end up with the www in the url, so
> > the certificate always matches?
> 
> The problem you are running into is that SSL sessions are negotiated
> prior to the browser sending the virtual host name, so there is no
> opportunity to redirect the client to the www URL before it's too late.
>  Aside from purchasing a second SSL certificate for the plain domain
> name or getting a wildcard certificate to cover both, I would just make
> sure the links on your web site to the secure version of the domain
> specify the www in the URL.

Also: don't 'advertise' the https:// URL at all.  Visitors should
always go to you non-SSL site first.

> 
> -Zack
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
>  

-- 
Robert Heller -- Get the Deepwoods Software FireFox Toolbar!
Deepwoods Software-- Linux Installation and Administration
http://www.deepsoft.com/  -- Web Hosting, with CGI and Database
hel...@deepsoft.com   -- Contract Programming: C/C++, Tcl/Tk

  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Nataraj]

Ski Dawg wrote:
> On Wed, May 19, 2010 at 3:02 PM, Zack Colgan
>  wrote:
>   
>> On 05/19/2010 04:08 PM, Ski Dawg wrote:
>> 
>>> The problem I am running into is if they go to https://domainname.com
>>> (straight to the secure site), I am not able to find a solution that
>>> will redirect them to https://www.domainname.com, so that the ssl
>>> certificate matches and they won't get the "This connection is
>>> untrusted" warning.
>>>   
>> The problem you are running into is that SSL sessions are negotiated
>> prior to the browser sending the virtual host name, so there is no
>> opportunity to redirect the client to the www URL before it's too late.
>>  Aside from purchasing a second SSL certificate for the plain domain
>> name or getting a wildcard certificate to cover both, I would just make
>> sure the links on your web site to the secure version of the domain
>> specify the www in the URL.
>> 
>
> Zack,
>
> Thanks for the reply.
>
> All of our links use the correct syntax (with the www), we were just
> trying to catch the corner cases where if someone tries to go directly
> to https://domainname.com instead of https://www.domainname.com then
> it would not give them the error.
>
> I was hoping to be able to do this without another certificate, since
> this is just some corner cases, but I will investigate that as well.
> Thanks.
>   
You might try rewrite instead of redirect.  It would seem that rewrite 
might happen before processing the certificate. 

Here's an example of where I've used rewrite, you'll have to substitute 
the correct regular expressions for your needs.  Also see RewriteCond of 
needed...
RewriteEngine On
RewriteRule ^/$ https://www.myhost.org/

Let us know if this works for you.

There are also mechanisms to create single certificates with multiple 
domainnames.  There are apparently many ways to do this, and only 
certain of these methods work with various http servers and/or 
browsers.  I've not spent the time to fully understand this (I tried it 
briefly with cacert.org and never got it working), though if you just 
recently purchased the certificate and you are having a problem, most of 
the CA's will redo the certificate.  You might ask your CA what they 
recommend in this case.

Nataraj



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Robert Heller]

At Wed, 19 May 2010 15:29:51 -0600 CentOS mailing list  
wrote:

> 
> On Wed, May 19, 2010 at 3:02 PM, Zack Colgan
>  wrote:
> > On 05/19/2010 04:08 PM, Ski Dawg wrote:
> >> The problem I am running into is if they go to https://domainname.com
> >> (straight to the secure site), I am not able to find a solution that
> >> will redirect them to https://www.domainname.com, so that the ssl
> >> certificate matches and they won't get the "This connection is
> >> untrusted" warning.
> >
> > The problem you are running into is that SSL sessions are negotiated
> > prior to the browser sending the virtual host name, so there is no
> > opportunity to redirect the client to the www URL before it's too late.
> >  Aside from purchasing a second SSL certificate for the plain domain
> > name or getting a wildcard certificate to cover both, I would just make
> > sure the links on your web site to the secure version of the domain
> > specify the www in the URL.
> 
> Zack,
> 
> Thanks for the reply.
> 
> All of our links use the correct syntax (with the www), we were just
> trying to catch the corner cases where if someone tries to go directly
> to https://domainname.com instead of https://www.domainname.com then
> it would not give them the error.

Is there any *legitimate* reason why someone would want to *type*
https://domainname.com in the location/address bar? There really should
not be a reason to do that. If people are doing this, then that means
there is some reason for it (maybe the https://www.domtainname.com/...
link is too deeply burried in the regular site?).

> 
> I was hoping to be able to do this without another certificate, since
> this is just some corner cases, but I will investigate that as well.
> Thanks.

-- 
Robert Heller -- Get the Deepwoods Software FireFox Toolbar!
Deepwoods Software-- Linux Installation and Administration
http://www.deepsoft.com/  -- Web Hosting, with CGI and Database
hel...@deepsoft.com   -- Contract Programming: C/C++, Tcl/Tk


   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problems after update to 5.5

[C Linus Hicks]

On Mon, 2010-05-17 at 01:20 -0400, JohnS wrote:
> I am just wondering if any of you guys with the udev hang problem have
> tried:
> rpm -e the new kernel?  Then try to reinstall it via yum install.  You
> should delete the new kernel from /var/cache/yum first.
> 
> Just a point in why I say that is I have seen several machines that have
> yummed corrupt packages and bad repo metadata.  After pegging yum to
> pull from a distinct mirror the problem has gone away.
> 
> John

How about this: I downloaded the new kernel rpm again manually then used
rpm2cpio to load the files into a work directory then ran this script:

$ rpm -qlp ../kernel-2.6.18-194.3.1.el5.x86_64.rpm | while read rl
do
  rstr=$(cmp $rl .$rl 2>&1)
  rc=$?
  if (( rc != 0 )); then
echo $rstr | grep -v "Is a directory" > /dev/null
rc=$?
if (( rc == 0 )); then
  echo "Error: $rstr"
fi
  fi
done
Error: cmp: ./boot/initrd-2.6.18-194.3.1.el5.img: No such file or directory
Error: cmp: ./lib/modules/2.6.18-194.3.1.el5/build: No such file or directory
Error: cmp: ./lib/modules/2.6.18-194.3.1.el5/source: No such file or directory


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to create a printer that prints directly to a file?

[Bryan Berry]

cornel, that worked perfectly, thanks for the tip

On Sun, May 16, 2010 at 12:49 PM, cornel panceac  wrote:

>
>
> 2010/5/16 Bryan Berry 
>
> I am trying to learn how to share printers using samba. I am doing most of
>> my experiments at home w/ libvirt and where there are no printers.
>>
>> How can I set up a printer device that just prints to a file on my system?
>> That would really help me in my experiments.
>>
>
> try this:
>
>  http://www.linux.com/archive/feed/61826
>
> --
> Among the maxims on Lord Naoshige's wall, there was this one: "Matters of
> great concern should be treated lightly." Master Ittei commented, "Matters
> of small concern should be treated seriously."
> (Ghost Dog : The Way of The Samurai)
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Ski Dawg]

On Wed, May 19, 2010 at 3:52 PM, Robert Heller  wrote:
> Is there any *legitimate* reason why someone would want to *type*
> https://domainname.com in the location/address bar? There really should
> not be a reason to do that. If people are doing this, then that means
> there is some reason for it (maybe the https://www.domtainname.com/...
> link is too deeply burried in the regular site?).

No, I don't think there is a legitimate reason for it, but it came up
as a possible situation during our testing, so they wanted me to fix
that issue as well. As far as I know, no one actually every types in
https://domainname.com, but management wants it fixed anyway. So that
is why I asked the question.

if they were to go to the proper front page of our site, and just
click through links, they would end up on a https://www.domainname.com
site, and the certificate would work. I think they are just wanting to
remove everything that could possibly be an error, even if it is only
a self-generated error.
-- 
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
   -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Les Mikesell]

On 5/19/2010 4:52 PM, Robert Heller wrote:
>
> Is there any *legitimate* reason why someone would want to *type*
> https://domainname.com in the location/address bar? There really should
> not be a reason to do that.

How else would you get there the first time?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Ski Dawg]

On Wed, May 19, 2010 at 4:43 PM, Les Mikesell  wrote:
> On 5/19/2010 4:52 PM, Robert Heller wrote:
>>
>> Is there any *legitimate* reason why someone would want to *type*
>> https://domainname.com in the location/address bar? There really should
>> not be a reason to do that.
>
> How else would you get there the first time?

By default, most of our site is not SSL encrypted, just when they
would go to specific areas, like shopping cart, etc, that we switch to
https. If they just follow the links on our site, and not manually
type in the incorrect one, it will take them to the
https://www.domainname.com/. part of the site and the SSL
certificate will work as expected.

The only time this error occurs is if the user were to manually type
in the location bar in their browser https://domainname.com.

After some of the replies to this thread, I checked back through the
access logs and this situation has only happened 2 times in the last
month.

I think that I am going to push at management that this is a non-issue
and not worth wasting any more time and see what they might say.
-- 
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
   -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] A Directory/Subdirectories Disappeared - whichlog file to look for this kind of information?

[Wang, Mary Y]

Thanks for those who responded my question.  I'll keep the information with in 
case I need them in the future.  
After discussing the logging with my system admins, we decided that we'll not 
turn them on (may be just the basic bash and csh history files) because they 
will possibility create lots of logs. I've not lost any more 
directory/subdirectories since that day I reported my problem.  So I'm happy 
for now.   

Mary


-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of 
JohnS
Sent: Tuesday, May 18, 2010 6:40 AM
To: CentOS mailing list
Subject: Re: [CentOS] A Directory/Subdirectories Disappeared - whichlog file to 
look for this kind of information?


On Fri, 2010-05-14 at 15:30 -0400, JohnS wrote:
> 
> > On Fri, May 14, 2010 at 11:36 AM, Wang, Mary Y  
> > wrote:
> > > Hi,
> > >
> > > A directory/subdirectories just disappeared on our dev box, and we don't 
> > > know what happened. Is there a log file that logs this kind of stuff 
> > > (such as who/date did a 'rmdir').  The /var/log directory has a lot of 
> > > files and I'm not sure where to start.
> ---
> Some greatfull wiki contributer may want to do a how to on this.
> Auditd:
> Look at tail /var/log/audit.log audit.log.1 ans so on.
> 
> To log every thing from one user:  This logs all sys calls except[1]
> 
> [r...@x X]# /sbin/auditctl -a entry,always -S all -F uid=500 where 
> uid=your_usr_id.  Root is "0" or should be.
> Also you can watch specific directories.  How to beyond this scope atm.
> See man auditctl.
> 
> Restart:
> [r...@x X]# /sbin/service auditd restart
> Stopping auditd:   [  OK  ]
> Starting auditd:   [  OK  ]
> 
> [r...@x X]# grep gedit /var/log/audit/audit.log.1
> 
> type=SYSCALL msg=audit(1273861358.952:59793): arch=4003 syscall=78 
> success=yes exit=0 a0=bfcb7498 a1=0 a2=8416a8 a3=8a66d70 items=0
> ppid=1 pid=16192 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 
> egid=500 sgid=500 fsgid=500 tty=(none) comm="gedit"
> exe="/usr/bin/gedit" 
> subj=user_u:system_r:unconfined_t:s0 key=(null)
> 
> [1].  Problem, I have a list of rules at work but im home today.  I 
> see a problem I think with either auditd or bash console.  I had this 
> previously configured for root to log all sys calls made.  I made a 
> file with touch, deleted the file and all that got logged was 
> /bin/bash and thats it.  Can anyone else confirm this?  Either Bash is 
> Spoofing Auditd or something else is happening.  Search string is,  
> grep rm /var/log/audit/audit.log
> 
> As so goes this don't really help her problem and really makes a 
> problem for me when I have to confirm to SAS 70 Type 2 Infrastructure.
> 
> John
---
Add on Appended:

dmesg | grep rm

audit(1273860293.659:144758): arch=4003 syscall=252 a0=0 a1=4 a2=0
a3=4c240278 items=0 ppid=3055 pid=3067 auid=500 uid=0 gid=0 euid=0 suid=0 
fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="rm" exe="/bin/rm"
subj=user_u:system_r:initrc_t:s0 key=(null)

In fact does have my rm command I used.  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Thomas Dukes]

 

> -Original Message-
> From: centos-boun...@centos.org 
> [mailto:centos-boun...@centos.org] On Behalf Of Kanwar Ranbir Sandhu
> Sent: Wednesday, May 19, 2010 2:17 PM
> To: centos@centos.org
> Subject: Re: [CentOS] Networking setup/help
> 
> On Wed, 2010-05-19 at 09:31 -0500, Les Mikesell wrote:
> > If you are starting from scratch and don't know your way around the 
> > linux system, why not use one of the 'appliance' style 
> distributions 
> > like ClearOS (fairly new) or SMEserver (older but still 
> works)?  These 
> > are based on CentOS code but have a simple web interface for 
> > configuration and will probably set up the firewalling/NAT 
> better than 
> > you would do by yourself.
> 
> ClearOS looks awesome.  Have you tried it?
> 
> Regards,
> 
> Ranbir

No, I haven't even heard of it. :-(

I've been with CentOS for a long time. Ran RedHat for a longtime, since
around 2.0, the went to Fedora, got tired of stuff not working, so I
switched to CentOS. 

I'm not an IT guy. I have a website that I use it for testing, etc. This is
only about the 3rd 'clean' install I've done since about 1997. I had 5.5
installed as an upgrade until I mucked up an app and tried to restore it
from backup and hosed everything. Now I'm trying to play catch up.

I now have my local network able to connect to the internet. Don't have DNS
setup yet or sendmail. I'm a little afraid to try to restore those files
from my backup as that's what got me in trouble.

I will say, everything is running a lot faster so maybe this wasn't so bad
after all.

Thanks,

Eddie

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Les Mikesell]

Kanwar Ranbir Sandhu wrote:
> On Wed, 2010-05-19 at 09:31 -0500, Les Mikesell wrote:
>> If you are starting from scratch and don't know your way around the 
>> linux system, why not use one of the 'appliance' style distributions 
>> like ClearOS (fairly new) or SMEserver (older but still works)?  These 
>> are based on CentOS code but have a simple web interface for 
>> configuration and will probably set up the firewalling/NAT better than 
>> you would do by yourself.
> 
> ClearOS looks awesome.  Have you tried it?
> 

I don't have a real use for it right now but I have one running under vmware to 
test and migrated some big imap mailboxes over from an old smeserver.  It seems 
to be very well done with a very responsive web interface for management.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Gordon Messmer]

On 05/19/2010 02:02 PM, Zack Colgan wrote:
> The problem you are running into is that SSL sessions are negotiated
> prior to the browser sending the virtual host name, so there is no
> opportunity to redirect the client to the www URL before it's too late.
>   Aside from purchasing a second SSL certificate for the plain domain
> name or getting a wildcard certificate to cover both

Unless your HTTPD supports SNI, a second certificate alone isn't going 
to do you any good.  AFAIK, under CentOS 5, there is only one solution 
to this problem: a certificate with multiple alt-names (or wildcard).

SNI should be a feature of RHEL 6.  I believe that it's been available 
in Fedora since release 11.

There is a configuration where a second cert will work, but you'd need 
an additional IP.  If you run "domainname.com" on one IP with a matching 
cert and "www.domainname.com" on a separate IP with its matching cert, 
users won't get errors.  Two certs will usually cost more than one cert 
with an alt-name, but less than throwing away your old cert to get a new 
cert with both names.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Created a custom/minimal CentOS 5.x install ISO

[Gordon Messmer]

On 05/19/2010 02:37 PM, Digimer wrote:


I've been googling for ways to do this, figuring it must be somewhat
straight forward, but my google-fu is weak it seems. Can someone point
me to a how-to or doc on rolling your own CentOS derivative ISO?


You can look around for documents on revisor.  I use the attached 
configuration files to generate installable trees.


revisor.conf belongs in /etc/revisor/.  revisor-c5-x86_64.conf belongs 
in /etc/revisor/conf.d/.


In the c5 file, you'll want to disable the "local" repository initially. 
 I use that section to avoid downloading packages that I already have 
when I want to refresh my tree.


I think you'll also need to remove the "reuse" line from revisor.conf 
initially.  I use the "revisor-reuseinstaller" to avoid rebuilding the 
installation images.  IIRC, the squash tools differ between Fedora 
(where I do these builds) and CentOS 5; it isn't possible to rebuild the 
anaconda images on Fedora.  If you run revisor on CentOS 5, the 
reuseinstaller package is optional.


Once you have revisor installed and the config files in place, you need 
a kickstart file that specifies what packages you want installed. 
Provide that to revisor and it will build the image using the packages 
specified in the kickstart file.


# revisor --yes --kickstart=/home/gordon/deploy/kickstart/centos5 
--model=c5-x86_64 --install-tree --cli
# Revisor base config file
# This file will be updated, so make sure to watch .rpmnew stuff

[revisor]
# Some revisor options to eliminate the need for CLI parameters,
# or save clicks in the GUI

# Types of Installation Media to build
media_installation_dvd=0
media_installation_cd=0
# Types of Live Media to build
media_live_optical=0
media_live_thumb=0

repos_enabledevelopment=0
repos_enabletesting=0
repos_enablesource=0
repos_enabledebuginfo=0

# These are more advanced options
dependency_resolve_allow_conflicts=0
mode_respin=0

##
## Models
##

[f13-i386]
description = Fedora 13 for i386
main = /etc/revisor/conf.d/revisor-f13-i386.conf
product_name = Fedora
product_path = Packages
iso_basename = Fedora
architecture = i386
version = rawhide
version_from = DEVEL
getsource = 0
reuse=/var/www/html/mirrors/fedora-13-i386/

[f13-x86_64]
description = Fedora 13 for x86_64
main = /etc/revisor/conf.d/revisor-f13-x86_64.conf
product_name = Fedora
product_path = Packages
architecture = x86_64
version = rawhide
version_from = DEVEL
getsource = 0
reuse=/var/www/html/mirrors/fedora-13-x86_64/

[f12-i386]
description = Fedora 12 for i386

# Point here to the yum configuration file
# Remember to use a yum configuration file with expanded
# $basearch and $releasever variables
main = /etc/revisor/conf.d/revisor-f12-i386.conf

# Installation Media specific settings
# Set the product name
product_name = Fedora

# Set the product path
product_path = Packages

# The base name for the ISO
iso_basename = Fedora

# The architecture to use for this model
architecture = i386

# The version number
version = 12

# The version number to use for kickstart compatibility and required package 
selection
# May differ from the product's version number.
version_from = F12

# Whether to include the creation of source media
# 0 = No
# 1 = Yes
getsource = 0
reuse=/var/www/html/mirrors/fedora-12-i386/

[f12-x86_64]
description = Fedora 12 for x86_64
main = /etc/revisor/conf.d/revisor-f12-x86_64.conf
product_name = Fedora
product_path = Packages
architecture = x86_64
version = 12
version_from = F12
getsource = 0
reuse=/var/www/html/mirrors/fedora-12-x86_64/

[f12-ppc]
description = Fedora 12 for PPC
main = /etc/revisor/conf.d/revisor-f12-ppc.conf
product_name = Fedora
product_path = Packages
architecture = ppc
version = 12
version_from = F12
getsource = 0

[f12-ppc64]
description = Fedora 12 for PPC64
main = /etc/revisor/conf.d/revisor-f12-ppc64.conf
product_name = Fedora
product_path = Packages
architecture = ppc64
version = 12
version_from = F12
getsource = 0

[rawhide-i386]
description = Rawhide for i386
main = /etc/revisor/conf.d/revisor-rawhide-i386.conf
product_name = Fedora
product_path = Packages
architecture = i386
version = rawhide
version_from = DEVEL
getsource = 0
repos_enabledevelopment=1
repos_enabletesting=0
repos_enablesource=0
repos_enabledebuginfo=0

[rawhide-x86_64]
description = Rawhide for x86_64
main = /etc/revisor/conf.d/revisor-rawhide-x86_64.conf
product_name = Fedora
product_path = Packages
architecture = x86_64
version = rawhide
version_from = DEVEL
getsource = 0
repos_enabledevelopment=1
repos_enabletesting=0
repos_enablesource=0
repos_enabledebuginfo=0

[rawhide-ppc]
description = Rawhide for PPC
main = /etc/revisor/conf.d/revisor-rawhide-ppc.conf
product_name = Fedora
product_path = Packages
architecture = ppc
version = rawhide
version_from = DEVEL
getsource = 0
repos_enabledevelopment=1
repos_enabletesting=0
repos_enablesource=0
repos_enabledebuginfo=0

[c5-i386]
description = CentOS 5 for i386
main = /etc/revisor/conf.d/revisor-c5-i386.conf
product

Re: [CentOS] Networking setup/help

[Thomas Dukes]

 

> -Original Message-
> From: centos-boun...@centos.org 
> [mailto:centos-boun...@centos.org] On Behalf Of Les Mikesell
> Sent: Wednesday, May 19, 2010 9:29 PM
> To: CentOS mailing list
> Subject: Re: [CentOS] Networking setup/help
> 
> Kanwar Ranbir Sandhu wrote:
> > On Wed, 2010-05-19 at 09:31 -0500, Les Mikesell wrote:
> >> If you are starting from scratch and don't know your way 
> around the 
> >> linux system, why not use one of the 'appliance' style 
> distributions 
> >> like ClearOS (fairly new) or SMEserver (older but still works)?  
> >> These are based on CentOS code but have a simple web interface for 
> >> configuration and will probably set up the firewalling/NAT better 
> >> than you would do by yourself.
> > 
> > ClearOS looks awesome.  Have you tried it?
> > 
> 
> I don't have a real use for it right now but I have one 
> running under vmware to test and migrated some big imap 
> mailboxes over from an old smeserver.  It seems to be very 
> well done with a very responsive web interface for management.
> 

I like CentOS. While it might not be for the average Joe (me), the folks
here are really helpful and knowlegeable. 

Did a really short stint with 'White Box' until that kinda fizzled.

I have no reason to leave CentOS.

Eddie

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] apache redirection

[Barry Brimer]

> I think that I am going to push at management that this is a non-issue
> and not worth wasting any more time and see what they might say.

I'd like to point out that the following sites don't work with 
https://domain.tld/

amazon.com
usbank.com
redhat.com
etrade.com

They all present certs for www.domain.tld.  If your management feels that 
your sites would benefit greatly from this type of configuration while the 
above sites don't feel it to be necessary, I recommend that they try the 
same test on similar large sites, and if applicable, competitor's sites.

The most compatible way to do this is to have domain.tld and 
www.domain.tld resolve to different IP addresses, and have 2 certs, one 
for each name on their respective IP addresses.  TLS SNI can solve this 
with a single IP address in Fedora 12+ and RHEL 6+ (the latter of which 
doesn't exist yet) although this requires browser support of TLS SNI. 
Simply put, MS IE 6 doesn't support it, which is deeply entrenched in 
corporations.  Firefox 2.0+ supports it as do other browsers.

As for the redirection, I would handle it with mod_rewrite as follows:


ServerName domain.tld
RewriteCond %{HTTP_HOST}   !^www\.domain\.tld$ [NC]
RewriteCond %{HTTP_HOST}   !^$
RewriteRule ^/(.*) https://www.domain.tld/$1 [L,R=301]


Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking setup/help

[Les Mikesell]

Thomas Dukes wrote:
>  
> 
>> -Original Message-
>> From: centos-boun...@centos.org 
>> [mailto:centos-boun...@centos.org] On Behalf Of Les Mikesell
>> Sent: Wednesday, May 19, 2010 9:29 PM
>> To: CentOS mailing list
>> Subject: Re: [CentOS] Networking setup/help
>>
>> Kanwar Ranbir Sandhu wrote:
>>> On Wed, 2010-05-19 at 09:31 -0500, Les Mikesell wrote:
 If you are starting from scratch and don't know your way 
>> around the 
 linux system, why not use one of the 'appliance' style 
>> distributions 
 like ClearOS (fairly new) or SMEserver (older but still works)?  
 These are based on CentOS code but have a simple web interface for 
 configuration and will probably set up the firewalling/NAT better 
 than you would do by yourself.
>>> ClearOS looks awesome.  Have you tried it?
>>>
>> I don't have a real use for it right now but I have one 
>> running under vmware to test and migrated some big imap 
>> mailboxes over from an old smeserver.  It seems to be very 
>> well done with a very responsive web interface for management.
>>
> 
> I like CentOS. While it might not be for the average Joe (me), the folks
> here are really helpful and knowlegeable. 
> 
> Did a really short stint with 'White Box' until that kinda fizzled.
> 
> I have no reason to leave CentOS.

ClearOS really is CentOS as far as most of the code goes.  It just comes with a 
simple web interface to mange setup of services that would otherwise be 
moderately hard to get right on your own (firewalling, cyrus email server, ldap 
user directory, dns, vpn, etc.).  You could easily turn it over to someone you 
wouldn't trust with the root password to a bare normal linux box.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Created a custom/minimal CentOS 5.x install ISO

[Kahlil Hodgson]

On 05/20/2010 11:40 AM, Gordon Messmer wrote:
> On 05/19/2010 02:37 PM, Digimer wrote:
>>
>> I've been googling for ways to do this, figuring it must be somewhat
>> straight forward, but my google-fu is weak it seems. Can someone point
>> me to a how-to or doc on rolling your own CentOS derivative ISO?
> 
> You can look around for documents on revisor.  I use the attached
> configuration files to generate installable trees.
...
> Once you have revisor installed and the config files in place, you need
> a kickstart file that specifies what packages you want installed.
> Provide that to revisor and it will build the image using the packages
> specified in the kickstart file.
> 
> # revisor --yes --kickstart=/home/gordon/deploy/kickstart/centos5
> --model=c5-x86_64 --install-tree --cli

Great stuff Gordon!  The graphical interface usually crashes on me but
the CLI seems to be pretty solid.

Digimer, some pointers to understanding the sprawl of configuration files.

1. --model=c5-x86_64  defines the section in revisor.conf that is used

2. That section defines

main = /etc/revisor/conf.d/revisor-c5-x86_64.conf

which is the yum configuration file.  Here you define the repositories
that are going to be sourced for the build.  These can be base repos,
updates, non-centos repos, local repos, local caches, whatever you want.
(Running createrepo on /var/yum/cache can be a starting point for
building snapshot installers for known 'good' systems).

3. --kickstart=/home/gordon/deploy/kickstart/centos5 is the kickstart
file which you use to (principally) define which packages 'must' be
present on the new install disk.  Dependency resolution is performed so
you will usually get more than you specify, and you will get the most
up-to-date packages depending on the repos you specified above.  There
are some options in revisor.conf to control this.

Keep in mind that you are effectively rolling your own distribution this
way and, depending on the quality of the rpms, the more you deviate, the
more likely you are to break things (as I have done a couple of times).

Happy Coaster Burning:-)

Kal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to create a printer that prints directly to a file?

[cornel panceac]

2010/5/20 Bryan Berry 

> cornel, that worked perfectly, thanks for the tip
>
> welcome :)

-- 
Among the maxims on Lord Naoshige's wall, there was this one: "Matters of
great concern should be treated lightly." Master Ittei commented, "Matters
of small concern should be treated seriously."
(Ghost Dog : The Way of The Samurai)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos