Re: [CentOS] Cacti/snmp question

[John Doe]

From: Whit Blauvelt 
> the PNP crew enhances their documentation with some working 
> examples, or I learn German

I was able to make some plugins without too much problems (even discovered perl 
in the process)...
http://nagiosplug.sourceforge.net/developer-guidelines.html#PLUGOUTPUT
Just copy/paste an existing plugin and adapt it.
The main thing to remember is the plugin returns on STDOUT:
SERVICE STATUS: Information text|'label1'=value[UOM];[warn];[crit];[min];[max] 
'label2'=value[UOM];[warn];[crit];[min];[max] ...

Examples:
$ check_memory 
MEMORY OK - RAM Used: 37% (1127MB/3041MB), SWAP Used: 0% 
(0MB/2932MB)|RAM=1127MB;2736;2888;0;3041 SWAP=0MB;2902;2932;0;2932
$ check_netstat
NETSTAT OK - [LOC] = 24/0/0/8, [LAN] = 15/0/1/44, [WAN] = 0/0/0/0  
(ES/SY/FW/TW)|LOC_ES=24;250;1000;0 LOC_SY=0;250;500;0 LOC_FW=0;150;300;0 
LOC_TW=8;1500;3000;0 LAN_ES=15;250;1000;0 LAN_SY=0;250;500;0 LAN_FW=1;150;300;0 
LAN_TW=44;1500;3000;0 WAN_ES=0;250;1000;0 WAN_SY=0;250;500;0 WAN_FW=0;150;300;0 
WAN_TW=0;1500;3000;0
etc...

Then PNP will "automaticaly" plot these values... but yes, if you have n 
values, you will get n graphs...

> someone writes a Nagios plugin that captures per-core CPU load

/proc/stat gives
cpuX
   


What I did for disk perfs by example is save the stats plus a timestamp in a 
file, then (new_stats-old_stats)/(new_ts-old_ts)...
But, in some tricky cases (like /proc/net/dev), watch out for value rollovers 
and "bumps".

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Whit Blauvelt]

On Wed, Jun 16, 2010 at 02:28:51AM -0700, John Doe wrote:

> I was able to make some plugins without too much problems (even discovered 
> perl in the process)...

Agreed, it's easy enough to write Nagios plugins. I've done that too. 

> Then PNP will "automaticaly" plot these values... but yes, if you have n 
> values, you will get n graphs...
> 
> > someone writes a Nagios plugin that captures per-core CPU load
> 
> /proc/stat gives
> cpuX
>  

There's a python script claimed to be able to turn that to percentage here:
http://ubuntuforums.org/showthread.php?t=148781 - so adapting that to a
Nagios plugin (which python's also fine for) could do it.

So PNP is just automagical? Aside from graphing each core separate, rather
than a combined graph, it would do what I'm looking for without much special
configuration? I got no sense of how to tie PNP in from its sparse docs.

In separate news, what I've learned is that Cacti _used to be able_ to do
per-core CPU graphing, but the latest versions aren't comptible with the
existing XML files for it - and no solution is on offer in their forum
thread on this.

Monin has nice out-of-the-box graphs on other stuff, but not CPU per-core
load.

Ganglia has per-core CPU graphing. There are RPMs in the Fedora repository,
but at least for x64 there are a bunch of unmet dependencies (for CentOS
anyhow). There are also older RPMs on Ganglia's own site. But the per-core
CPU stuff is more recent, so I'll be building it from the tar to test it.

Thanks,
Whit
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Les Mikesell]

Whit Blauvelt wrote:
> On Wed, Jun 16, 2010 at 02:28:51AM -0700, John Doe wrote:
> 
>> I was able to make some plugins without too much problems (even discovered 
>> perl in the process)...
> 
> Agreed, it's easy enough to write Nagios plugins. I've done that too. 
> 
>> Then PNP will "automaticaly" plot these values... but yes, if you have n 
>> values, you will get n graphs...
>>
>>> someone writes a Nagios plugin that captures per-core CPU load
>> /proc/stat gives
>> cpuX   
>>   
> 
> There's a python script claimed to be able to turn that to percentage here:
> http://ubuntuforums.org/showthread.php?t=148781 - so adapting that to a
> Nagios plugin (which python's also fine for) could do it.
> 
> So PNP is just automagical? Aside from graphing each core separate, rather
> than a combined graph, it would do what I'm looking for without much special
> configuration? I got no sense of how to tie PNP in from its sparse docs.
> 
> In separate news, what I've learned is that Cacti _used to be able_ to do
> per-core CPU graphing, but the latest versions aren't comptible with the
> existing XML files for it - and no solution is on offer in their forum
> thread on this.
> 
> Monin has nice out-of-the-box graphs on other stuff, but not CPU per-core
> load.
> 
> Ganglia has per-core CPU graphing. There are RPMs in the Fedora repository,
> but at least for x64 there are a bunch of unmet dependencies (for CentOS
> anyhow). There are also older RPMs on Ganglia's own site. But the per-core
> CPU stuff is more recent, so I'll be building it from the tar to test it.

If have firewalling to protect from security issues, why not just run an older 
version of cacti?

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Whit Blauvelt]

On Wed, Jun 16, 2010 at 08:01:26AM -0500, Les Mikesell wrote:

> If have firewalling to protect from security issues, why not just run an 
> older 
> version of cacti?

Sensible suggestion. One, it's not obvious where to find an older version.
Two, hours of attempting to get cacti to work have led me to be
underimpressed with the whole project. Three, we have good external
firewalling, and are a small enough shop not to worry about malicious
employees. But if an employee manages to get a virus on their Windows box
due to some new drive by zero day exploit, some viruses probe the LAN with
requests to check if known-vulerable web apps exist there (ahem, this has
happened to us, and I've seen the probes). While we could tighten internal
firewall rules more, bottom line is running known-insecure web apps on an
LAN isn't a brilliant idea, even if I did a few messages back indicate a
willingness to make that compromise.

Whit
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[John Doe]

From: Whit Blauvelt 
>> Then PNP will "automaticaly" plot these values... but 
>> yes, if you have n values, you will get n graphs...
> So PNP is just automagical?

Let me rephrase: once properly setup, it will 'automagicaly' plot any new 
data... ^_^
In fact, I had a look at my notes and they are a little longer and more complex 
than what I remembered...
See http://docs.pnp4nagios.org/pnp-0.6/modes
Choose your data collection mode and then follow the install pages...
Basicaly: tell nagios to dump perf data and tell the npcd daemon to work on 
it...
I went with "Bulk Mode with NPCD", but with the new version they have:
Bulk Mode with npcdmod: "This scenario includes npcdmod.o, an NEB-module.
This module reduces the configuration of the “Bulk Mode with NPCD” to a mere 
two lines in nagios.cfg"
So maybe it will be easier... never tried it.
And for your security problem, here we password protect (htaccess) our web 
applications directories (nagios, cacti...)...

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Les Mikesell]

On 6/16/2010 8:44 AM, Whit Blauvelt wrote:
> On Wed, Jun 16, 2010 at 08:01:26AM -0500, Les Mikesell wrote:
>
>> If have firewalling to protect from security issues, why not just run an 
>> older
>> version of cacti?
>
> Sensible suggestion. One, it's not obvious where to find an older version.

It's on sourceforge...  If you expand the 'all files' list you can go 
back to 0.5 here: http://sourceforge.net/projects/cacti/files/ and you 
should be able to grab any revision you want with a subversion client, 
or browse them here: http://svn.cacti.net/viewvc/.

If you want old Centos RPMs, try http://vault.centos.org.

> Two, hours of attempting to get cacti to work have led me to be
> underimpressed with the whole project.

That's odd because other than the usual php version issues I've always 
considered cacti to be the easiest of the graphing tools to get working 
- but I haven't tried the most recent versions.

> Three, we have good external
> firewalling, and are a small enough shop not to worry about malicious
> employees. But if an employee manages to get a virus on their Windows box
> due to some new drive by zero day exploit, some viruses probe the LAN with
> requests to check if known-vulerable web apps exist there (ahem, this has
> happened to us, and I've seen the probes). While we could tighten internal
> firewall rules more, bottom line is running known-insecure web apps on an5
> LAN isn't a brilliant idea, even if I did a few messages back indicate a
> willingness to make that compromise.

If you are willing to hack some ugly-looking xml files that specify the 
oids and time intervals you can probably make opennms work for you - and 
you might find its other features (thresholding, notifications, etc.) 
useful too.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Joseph L. Casale]

>> Two, hours of attempting to get cacti to work have led me to be
>> underimpressed with the whole project.
>
>That's odd because other than the usual php version issues I've always 
>considered cacti to be the easiest of the graphing tools to get working 
>- but I haven't tried the most recent versions.

Last I looked at Cacti, the hack to get some plugin support didn't work
for me and I didn't have the patience to waste time with it, dropped it.

Munin never had zooming graphs, and needed a cgi to prevent obscene load
in anything other than a trivial environment, dropped it.

I have Nagios and PNP and it works well. Since your first reco to me about
OpenNMS I have been intrigued, it looks like a very nice project and is very
active. Ironically I do almost all my Nagios monitoring via snmp and where
I can't normally use snmp, I create extends...

>If you are willing to hack some ugly-looking xml files that specify the 
>oids and time intervals you can probably make opennms work for you - and 
>you might find its other features (thresholding, notifications, etc.) 
>useful too.

Yeah, I also want to take the time to learn this package, it does look
very powerful.

Whit, if you are starting from scratch, I would second the reco to invest
the time in OpenNMS and just learn something solid from day one.

jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Baird, Josh]

There is always ZenOSS.  I would definitely take a look at ZenOSS.  Very
active, very powerful, nice interface, SMNP/SSH/WMI based monitoring,
etc.

jb

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
Behalf Of Joseph L. Casale
Sent: Wednesday, June 16, 2010 10:30 AM
To: 'CentOS mailing list'
Subject: Re: [CentOS] Cacti/snmp question

>> Two, hours of attempting to get cacti to work have led me to be
>> underimpressed with the whole project.
>
>That's odd because other than the usual php version issues I've always 
>considered cacti to be the easiest of the graphing tools to get working

>- but I haven't tried the most recent versions.

Last I looked at Cacti, the hack to get some plugin support didn't work
for me and I didn't have the patience to waste time with it, dropped it.

Munin never had zooming graphs, and needed a cgi to prevent obscene load
in anything other than a trivial environment, dropped it.

I have Nagios and PNP and it works well. Since your first reco to me
about
OpenNMS I have been intrigued, it looks like a very nice project and is
very
active. Ironically I do almost all my Nagios monitoring via snmp and
where
I can't normally use snmp, I create extends...

>If you are willing to hack some ugly-looking xml files that specify the

>oids and time intervals you can probably make opennms work for you -
and 
>you might find its other features (thresholding, notifications, etc.) 
>useful too.

Yeah, I also want to take the time to learn this package, it does look
very powerful.

Whit, if you are starting from scratch, I would second the reco to
invest
the time in OpenNMS and just learn something solid from day one.

jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cacti/snmp question

[Les Mikesell]

On 6/16/2010 10:30 AM, Joseph L. Casale wrote:
>>> Two, hours of attempting to get cacti to work have led me to be
>>> underimpressed with the whole project.
>>
>> That's odd because other than the usual php version issues I've always
>> considered cacti to be the easiest of the graphing tools to get working
>> - but I haven't tried the most recent versions.
>
> Last I looked at Cacti, the hack to get some plugin support didn't work
> for me and I didn't have the patience to waste time with it, dropped it.

Perhaps - I meant things that were available via snmp where it is 
basically a matter of adding the device name/ip and community string. 
One thing that is particularly nice about cacti is that there is a data 
export link associated with each graph if you want to do more detailed 
analysis of the samples with some other program.  Opennms has a way to 
get avg/min/max of values for a specified time span but it is cumbersome 
if you want fine-grained samples.

> I have Nagios and PNP and it works well. Since your first reco to me about
> OpenNMS I have been intrigued, it looks like a very nice project and is very
> active. Ironically I do almost all my Nagios monitoring via snmp and where
> I can't normally use snmp, I create extends...
>
>> If you are willing to hack some ugly-looking xml files that specify the
>> oids and time intervals you can probably make opennms work for you - and
>> you might find its other features (thresholding, notifications, etc.)
>> useful too.
>
> Yeah, I also want to take the time to learn this package, it does look
> very powerful.

It would probably be a good time to start since they just released the 
1.8 version.  It comes up basically working if you just give it IP 
ranges to discover so you don't have to learn much to get started.  You 
do need decent hardware if you expect to collect a lot of graph data though.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] cpuspeed settings??

[ken]

Hey, folks,

Sometimes my workstation bogs down... slows to a crawl.  Using gkrellm,
it's obvious the CPU is the laggard.  The top utility confirms: the load
average gets up over 4 at times.  But this occurs when cpu stepping pegs
the speed at 600MHz.  This processor is capable of 1.5GHz and when it's
allowed to run at that speed, the load average is under 2, which is fine.

So the question is: what's a good /etc/sysconfig/cpuspeed file?  This
workstation is a notebook and it can get hot.  Of course I'd rather type
on slow machine than a machine with a fried mainboard, so a report of a
high temperature should kick in the governor and lower the speed.

Currently my /etc/sysconfig/cpuspeed has no variables defined (it's been
this way at least since Apr 24) and I don't know what the number ranges
and other values for them might be.


Thanks.

-- 
Find research and analysis on US healthcare, health insurance,
and health policy at: 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] cpuspeed settings??

[Les Mikesell]

On 6/16/2010 1:47 PM, ken wrote:
> Hey, folks,
>
> Sometimes my workstation bogs down... slows to a crawl.  Using gkrellm,
> it's obvious the CPU is the laggard.  The top utility confirms: the load
> average gets up over 4 at times.  But this occurs when cpu stepping pegs
> the speed at 600MHz.  This processor is capable of 1.5GHz and when it's
> allowed to run at that speed, the load average is under 2, which is fine.
>
> So the question is: what's a good /etc/sysconfig/cpuspeed file?  This
> workstation is a notebook and it can get hot.  Of course I'd rather type
> on slow machine than a machine with a fried mainboard, so a report of a
> high temperature should kick in the governor and lower the speed.
>
> Currently my /etc/sysconfig/cpuspeed has no variables defined (it's been
> this way at least since Apr 24) and I don't know what the number ranges
> and other values for them might be.

Chances are that it is really your disk io that is the problem.  Linux 
likes to count iowait time as CPU time.  What do sar or vmstat say about 
your wait time?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] clustered file system of choice

[Boris Epstein]

Hi all,

I am just trying to consider my options for storing a large mass of
data (tens of terrabytes of files) and one idea is to build a
clustered FS of some kind. Has anybody had any experience with that?
Any recommendations?

Thanks in advance for any and all advice.

Boris.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustered file system of choice

[m . roth]

Boris wrote:
>
> I am just trying to consider my options for storing a large mass of
> data (tens of terrabytes of files) and one idea is to build a
> clustered FS of some kind. Has anybody had any experience with that?
> Any recommendations?

We've been looking at glusterfs here. It's under active development, has
some problems, but it does work, and is in use a number of places around
the world.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] cyrus-imapd, sendmail and delivering plus address formats

[James B. Byrne]

On Tue, June 15, 2010 15:43, Alexander Dalloz wrote:
> Am 15.06.2010 20:55, schrieb James B. Byrne:
>
> Are you tackling with that for over 1 year now?
>

Yes.  Actually, I have been dealing with this on and off for several
years.  I have never found an answer and other things come along
that require attention.  From time to time I get to return to it.

> And do you really intend to address a sub-sub-folder? How about
> starting to address to a direct subfolder of INBOX?

Eventually, yes, I wish to deliver to a sub-subfolder. At the moment
I cannot get plus formatted addressing to work at all.

>
>> I have gone to both the cyrus and the sendmail lists respecting
>> this issue. While there is a lot of information there following
>> any of it does not seem to lead me anywhere fruitful.
>
> Which Sendmail list? I just know of mail.comp.sendmail on usenet. On
> the cyrus-imapd mailing list I see no current posting.
>

None the less, a message from me is there and has no answer that I
can see.  Such was my previous experience as well.  The problem
might be because I posted through google groups.

However, what I meant by what I wrote is that I have gone through
the archives of both lists and retrieved and read message threads
which appeared to relate to my problem.  Without success.

> But to come to your request. Unfortunately you provide zero detail
> about your current Sendmail and Cyrus-IMAPd setup and their
> interaction. So many questions on my side.
>
> Pplease provide details about your current setup and we should be
> ableto nail it down. There is nothing special about the Sendmail
> and Cyrus-IMAPd shipped with CentOS.
>

What is it that you need to know?

# cat /etc/imapd.conf
admins: cyrus root
autocreatequota: 102400
autocreatequota_units: 1048576
autocreateinboxfolders:
delivery|Drafts|Intray|Sent|Spamyes|Spamno|Trash
autosubscribeinboxfolders:
delivery|Drafts|Intray|Sent|Spamyes|Spamno|Trash
configdirectory: /var/lib/imap
hashimapspool: 1
partition-default: /var/spool/imap
sasl_mech_list: PLAIN
sasl_pwcheck_method: saslauthd
sendmail: /usr/sbin/sendmail
sievedir: /var/lib/imap/sieve
tls_ca_file: /usr/share/ssl/certs/ca-bundle.crt
tls_cert_file: /usr/share/ssl/certs/inet07_hamilton_rsa_id.pub
tls_key_file: /usr/share/ssl/private/inet07_hamilton_rsa_id.key

/etc/mail/sendmail.mc

define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl
define(`confLOCAL_MAILER',`cyrusv2')dnl
MAILER(`cyrusv2')dnl
MAILER(procmail)dnl
MAILER(`local')dnl
MAILER(smtp)dnl


The host in question acts solely as a final delivery host and
accepts incoming smtp connections only from our mail hub.  Sendmail
runs in two instances under MailScanner. ClamAVd and SpamAssassin
are both installed and running on this host under MailScanner as
well.

The host handles multiple domains and virtusertable is enabled and
in use.

I am a digest subscriber which is the cause of the delay in my reply.

Sincerely,

-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustered file system of choice

[Boris Epstein]

On Wed, Jun 16, 2010 at 4:05 PM,   wrote:
> Boris wrote:
>>
>> I am just trying to consider my options for storing a large mass of
>> data (tens of terrabytes of files) and one idea is to build a
>> clustered FS of some kind. Has anybody had any experience with that?
>> Any recommendations?
>
> We've been looking at glusterfs here. It's under active development, has
> some problems, but it does work, and is in use a number of places around
> the world.
>
>      mark
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Thanks Mark,

Will surely check Glusterfs out. What's your thoughts on GPFS:
http://en.wikipedia.org/wiki/GPFS ?

Boris.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustered file system of choice

[Todd Denniston]

Boris Epstein wrote, On 06/16/2010 03:33 PM:
> Hi all,
> 
> I am just trying to consider my options for storing a large mass of
> data (tens of terrabytes of files) and one idea is to build a
> clustered FS of some kind. Has anybody had any experience with that?
> Any recommendations?
> 
> Thanks in advance for any and all advice.
> 
> Boris.

I have not used a cluster FS, but have seen some discussions of them over on 
the drbd list[1] , and
you did not mention what kind of backing devices you were going to have for the 
filesystem.
In the drbd documentation[2] they have some discussion of gfs and ocfs2 which 
may be of some help.

In short if you are considering DRBD as a backing device, definitely ask over 
on their mailing list
and I suspect that mailing list population has a higher percentage of folks who 
use cluster FSs.


[1] http://lists.linbit.com/mailman/listinfo/drbd-user
[2] http://www.drbd.org/docs/applications/
http://www.drbd.org/users-guide-emb/ch-gfs.html#s-gfs-primer
http://www.drbd.org/users-guide-emb/ch-ocfs2.html#s-ocfs2-primer
-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustered file system of choice

[m . roth]

Boris wrote:
> On Wed, Jun 16, 2010 at 4:05 PM,   wrote:
>> Boris wrote:
>>>
>>> I am just trying to consider my options for storing a large mass of
>>> data (tens of terrabytes of files) and one idea is to build a
>>> clustered FS of some kind. Has anybody had any experience with that?
>>> Any recommendations?
>>
>> We've been looking at glusterfs here. It's under active development, has
>> some problems, but it does work, and is in use a number of places around
>> the world.
>
> Will surely check Glusterfs out. What's your thoughts on GPFS:
> http://en.wikipedia.org/wiki/GPFS ?

No idea, never used it. Glusterfs is the first time I've ever needed to
look at a clustered f/s... but then, where I'm at now is the first place
I've ever worked with HPC clusters, as opposed to h/a clusters.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustered file system of choice

[Joseph L. Casale]

>I am just trying to consider my options for storing a large mass of
>data (tens of terrabytes of files) and one idea is to build a
>clustered FS of some kind. Has anybody had any experience with that?
>Any recommendations?

You haven't actually stated whether you want the backing devices distributed
or have the file system support more than one mount?

You likely don't need a cluster aware fs, if you need to access the data
in more than one place any of several file sharing methodologies will
work.

I suspect as your storage need is large, you need to distribute it across
more than one block device probably on several servers? DRBD is of no use
here.

Clarify what you're after...

jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Disabling services in CentOS 5.5

[Ski Dawg]

Hello all,

I have been doing some searching for information about disabling
services within a CentOS 5.5 install. I have found a few different
opinions, and wanted to ask for some feedback.

First off, the system is running a LAMP stack to serve a web
application. It will only be doing email to send occasional messages
out (sent via the application only). It will not be receiving email
for any users. It is an CentOS 5.5 (fully updated) install running
under VMware (esx, I believe). We are not sharing directories via nfs
or samba (either from or to this virtual machine).

>From my research, the services that I am thinking of turning off are:
nfs (already off)
nfslock
portmap
rpccgssd
rpcidmapd
rpcsvcgssd
apcid
apmd
mdmpd
mdmonitor

Is there any reason that I need to leave any of these services
running? Are there others that I should disable as well?

Any feedback about this would be greatly appreciated.
--
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
  -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Disabling services in CentOS 5.5

[m . roth]

> Hello all,
>
> I have been doing some searching for information about disabling
> services within a CentOS 5.5 install. I have found a few different
> opinions, and wanted to ask for some feedback.

No brainer.
>
> First off, the system is running a LAMP stack to serve a web
> application. It will only be doing email to send occasional messages
> out (sent via the application only). It will not be receiving email
> for any users. It is an CentOS 5.5 (fully updated) install running
> under VMware (esx, I believe). We are not sharing directories via nfs
> or samba (either from or to this virtual machine).
>
>>From my research, the services that I am thinking of turning off are:
> nfs (already off)

service nfs stop
chkconfig nfs off

Same for others.

Oh, and if you don't really need it, turn *off* avahi-daemon, and the same
for bluetooth, if you don't need it. Also, if you turn off the
avahi-daemon, close the port opened in iptables (edit
/etc/sysconfig/iptables and delete it, then restart iptables).

   mark "in a *server* room? hardwired?"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Disabling services in CentOS 5.5

[John R Pierce]

Ski Dawg wrote:
> >From my research, the services that I am thinking of turning off are:
> nfs (already off)
> nfslock
> portmap
> rpccgssd
> rpcidmapd
> rpcsvcgssd
>   

all safe to shut off if you're not serving NFS, NIS, etc.

> apci

power management.  I believe you need acpid for things like screen saver.  

> apmd

apmd isn't even installed on my servers, probably only used on legacy 
pre-ACPI hardware.

> mdmpd
>   

multipath device monitoring, would be required if you have multipath 
disk IO, or ethernet, I believe.

> mdmonitor
>   

should be running if you use mdraid or any other device mapper kind of 
storage.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] cpuspeed settings??

[ken]

On 06/16/2010 03:09 PM Les Mikesell wrote:
> On 6/16/2010 1:47 PM, ken wrote:
>> Hey, folks,
>>
>> Sometimes my workstation bogs down... slows to a crawl.  Using gkrellm,
>> it's obvious the CPU is the laggard.  The top utility confirms: the load
>> average gets up over 4 at times.  But this occurs when cpu stepping pegs
>> the speed at 600MHz.  This processor is capable of 1.5GHz and when it's
>> allowed to run at that speed, the load average is under 2, which is fine.
>>
>> So the question is: what's a good /etc/sysconfig/cpuspeed file?  This
>> workstation is a notebook and it can get hot.  Of course I'd rather type
>> on slow machine than a machine with a fried mainboard, so a report of a
>> high temperature should kick in the governor and lower the speed.
>>
>> Currently my /etc/sysconfig/cpuspeed has no variables defined (it's been
>> this way at least since Apr 24) and I don't know what the number ranges
>> and other values for them might be.
> 
> Chances are that it is really your disk io that is the problem.  Linux 
> likes to count iowait time as CPU time.  What do sar or vmstat say about 
> your wait time?
> 

# vmstat
procs ---memory-- ---swap-- -io --system--
-cpu--
 r  b   swpd   free   buff  cache   si   sobibo   in   cs us sy
id wa st
 1  0148 104328 156776 601100002689  525  118 87 12
 1  0  0

Sorry for the wrap.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Disabling services in CentOS 5.5

[Miguel Medalha]

The following NSA document provides very good information on the secure 
configuration of Red Hat Enterprise Linux 5/CentOS 5.x:

Guide to the Secure Configuration of Red Hat Enterprise Linux 5
http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf

It goes through almost all the services and gives you guidance on 
whether and how you should disable a service.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] cameras and CentOS

[Jobst Schmalenbach]

Hi

I want to put up a few cameras connected to a CentOS box.
I currently have a box with one camera and that works (USB),
I can take a pic (the script does that) and see that on a webpage.

However, I want to have a couple of cameras a little further 
away (more than 5 meters).

USB has a limit, I have tried that camera with a longer cable
and it does not work ... so I need to route that in a different
way. Are there equaly as cheap other moethods? Or can I use
USB<-adapter->network cable<-adapter->USB?

How can I get that to work?


Jobst


-- 
Student to Teacher: Sir, what's an oxymoron?  Teacher to Student: Microsoft 
security.

  | |0| |   Jobst Schmalenbach, jo...@barrett.com.au, General Manager
  | | |0|   Barrett Consulting Group P/L & The Meditation Room P/L
  |0|0|0|   +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] cameras and CentOS

[Götz Reinicke - IT-Koordinator]

Hi,

Am 17.06.10 08:22, schrieb Jobst Schmalenbach:
> Hi
> 
> I want to put up a few cameras connected to a CentOS box.
> I currently have a box with one camera and that works (USB),
> I can take a pic (the script does that) and see that on a webpage.
> 
> However, I want to have a couple of cameras a little further 
> away (more than 5 meters).
> 
> USB has a limit, I have tried that camera with a longer cable
> and it does not work ... so I need to route that in a different
> way. Are there equaly as cheap other moethods? Or can I use
> USB<-adapter->network cable<-adapter->USB?
> 
> How can I get that to work?

may be with that usb extender:

XTENDEX® USB-C5-LC - http://www.networktechinc.com/usbc5.html


Cheers - Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner

Geschäftsführer:
Prof. Thomas Schadt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] cameras and CentOS

[John R Pierce]

Jobst Schmalenbach wrote:
> Hi
>
> I want to put up a few cameras connected to a CentOS box.
> I currently have a box with one camera and that works (USB),
> I can take a pic (the script does that) and see that on a webpage.
>
> However, I want to have a couple of cameras a little further 
> away (more than 5 meters).
>
> USB has a limit, I have tried that camera with a longer cable
> and it does not work ... so I need to route that in a different
> way. Are there equaly as cheap other moethods? Or can I use
> USB<-adapter->network cable<-adapter->USB?
>
> How can I get that to work?
>   

micro systems running linux at each USB location, all connected with 
ethernet.

it doesn't take much.
http://www.globalscaletechnologies.com/p-31-guruplug-server-standard.aspx

or
http://www.mini-box.com/Alix-2B-Board-2-LAN-2-MINI-PCI_3

etc etc.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos