Re: [CentOS] the mirrors are still not updated

[Sorin Srbu]

>-Original Message-
>From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
>Of fakessh
>Sent: Friday, April 29, 2011 8:17 AM
>To: centos@centos.org
>Subject: [CentOS] the mirrors are still not updated
>
>
>hello centos network
>
>ads on the list centos-annonces  Thursday
>
>the mirrors are still not updated
>even the main deposit
>
>No it has never been so long
>
>someone has an explanation can be

I don't get it. Was there a question here? Updated with what? Fakessh, please
elaborate. Thanks.

-- 
/Sorin


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Mattias Geniar]

> 
> I use the following to prevent hanging at startup with LDAP.
> 
> nss_initgroups_ignoreusers root,ldap,bacula,named
> timelimit 30
> bind_timelimit 30
> bind_policy soft
> 
> This is because some daemons start prior to the start of OpenLDAP
> service.
> 
> Obviously adding haldaemon, dbus, radvd, tomcat, etc. or other 'users'
> for daemons that launch prior to your LDAP server application is
useful
> but those users would have to be listed in /etc/passwd|group to
> significantly benefit.
> 
> Craig

Hi Craig,

The problem I have with listing those ignoreusers, is you need to know
in advance which services are on the system, and that's not always the
case. Or if a user installs a new daemon, he'll break his start-up of
the server should he ever be unable to connect to the LDAP systems.

Perhaps I'm asking too much, but could anyone try the following config
(in a VM or so, with networking disabled)? This is the one that is
causing boots to hang indefinitely, even though there are "bind_policy
soft" parameters involved.

/etc/ldap.conf
===
ldap_version 3
base ou=people,o=company
uri ldaps://srv.domain.be/ ldaps://srv2.domain.be/
scope sub
timelimit 5
bind_timelimit 5
bind_policy soft
idle_timelimit 15
timeout 5

# If the LDAP server is unavailable during boot, don't retry too often
# or the system will hang on the System Message Bus service
bind_timeout 2
#nss_reconnect_tries 2
#nss_reconnect_sleeptime 1
#nss_reconnect_maxsleeptime 3
#nss_reconnect_maxconntries 2

referrals no

ssl start_tls
ssl on
tls_checkpeer yes
tls_cacertdir /etc/openldap/cacerts

pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_min_uid 5000
pam_max_uid 6000
#pam_groupdn cn= company -shared,ou=groups,o=company
pam_groupdn cn= company -managed,ou=groups,o=company
pam_member_attribute memberUid
pam_password md5

nss_base_passwd ou=people,o= company
nss_base_shadow ou=people,o= company
nss_base_group ou=groups,o= company

#debug 255
#logdir /tmp/
===

Or if anyone else can spot an obvious "Dude, why the f#!? did you put in
those lines"-error, please inform me. :-)

Thanks everyone for your interest and comments!

Kind regards,
Mattias
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Multiple IP Addresses for a bridge

[Emmanuel Noobadmin]

Is it possible to assign multiple IP addresses to a bridge the same
way ethernet devices can?

The purpose is to accept incoming traffic for multiple public IP.
1 Physical NIC
-> br0 (accepts incoming traffic for x.x.x.2 to x.x.x.5)

Then 3 different virtual interfaces are connected to this bridge
1. eth0 (x.x.x.2)
2. eth1 (x.x.x.3)
3. eth2 (x.x.x.4)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] libvirt security update CVE-2011-1146

[Riccardo Veraldi]

Hello,
I ask here if CentOS has a xml oval repository. This is the reason of my 
question:


Actually I have an automatic system to check CVE vulnerabilities report 
against RedHat OVAL resources, for example:
https://www.redhat.com/security/data/oval/com.redhat.rhsa-2011.xml   for 
2011 CVEs and RHSAs related OVALS


My problem is that while the mechanism works flawlessly regarding 
Scientific Linux, with CentOS I have false positives reports
because the patch level numbers for some rpms is somewhat different from 
the one written in the official RedHat OVALS.


I make an example to explain myself better:

Consider CVE-2011-0020 which corresponds to RHSA-2011:0180-1 security 
advisory and it regards a pango vulnerability.


RedHat calls the updated rpm which addresses the vulnerability as 
pango-1.14.9-8.el5_6.2


CentOS calls it as pango-1.14.9-8.el5.centos.2

so we have:

pango-1.14.9-8.el5_6.2  in the RedHat OVALS while CentOS has 
pango-1.14.9-8.el5.centos.2 and I think they both addresses the 
CVE-2011-0020 vulnerability
but since the naming is different I have a report that my pango RPM on 
CentOS is vulnerable, while on SL with same rpm I have no false 
positives and everything is ok.


So i ask if CentOS has it's own OVAL xml files because I cannot use i na 
realiable way the RedHat OVALS with CentOS for my porpouses.


thank you very much

Rick



On 4/28/11 4:17 PM, Johnny Hughes wrote:

On 04/28/2011 07:47 AM, Riccardo Veraldi wrote:

Hello,
I have seen that package libvirt-0.8.2-15.el5_6.3 on CentOS 5.6 which
addresses CVE-2011-1146
  vulnerability
is not yet available while for example it is on Scientific Linux.
Is there any particular reason why the above rpm update is still not
available on mirrors ?


This was pushed, it just had a .el5 instead of .el5_6 dist tag, so it
looks older than the other update.  Corrected and repushed.

Thanks,
Johnny Hughes



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Lucian]

On Fri, Apr 29, 2011 at 10:08 AM, Emmanuel Noobadmin
 wrote:
> Is it possible to assign multiple IP addresses to a bridge the same
> way ethernet devices can?

Yes, I think you can even define whole ranges of addresses.

>
> The purpose is to accept incoming traffic for multiple public IP.
> 1 Physical NIC
> -> br0 (accepts incoming traffic for x.x.x.2 to x.x.x.5)
>
> Then 3 different virtual interfaces are connected to this bridge
> 1. eth0 (x.x.x.2)
> 2. eth1 (x.x.x.3)
> 3. eth2 (x.x.x.4)

Something seems out of order with the above; may I ask what exactly
you are trying to achieve?
Unless I read it all wrong you want (i.e.) x.x.x.2 on br0 and also on
eth0? This cannot work.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Emmanuel Noobadmin]

On 4/29/11, Lucian  wrote:
> Something seems out of order with the above; may I ask what exactly
> you are trying to achieve?
> Unless I read it all wrong you want (i.e.) x.x.x.2 on br0 and also on
> eth0? This cannot work.

Well, I have a physical connected to the ISP modem/router which
assigned the connection a block of 8 IPs

So I already have eth0 bridged to br0 using the IP x.x.x.2

Now I'm trying to figure out why a virtual guest with an eth0 device
assigned wth IP x.x.x.3 can't connect anywhere.

Looking at the Rx Tx of the vnet0 device that was generated, it seems
that the vnet0 is getting traffic but not sending them on.

So I'm wondering if it's because the bridge isn't assigned the x.x.x.3
IP hence ignoring the packets for/from x.x.x.3

And which then led me to try to assign more than 1 IP address. But
using options such as IPADDR_START and IPADDR_END in ifcfg-br0 doesn't
appear to work.

Neither did creating another bridge device ifcfg-br1 with the IP x.x.x.3 worked.

So I'm starting to wonder if it was possible in the first place.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Lucian]

On Fri, Apr 29, 2011 at 11:51 AM, Emmanuel Noobadmin
 wrote:
> On 4/29/11, Lucian  wrote:
>> Something seems out of order with the above; may I ask what exactly
>> you are trying to achieve?
>> Unless I read it all wrong you want (i.e.) x.x.x.2 on br0 and also on
>> eth0? This cannot work.
>
> Well, I have a physical connected to the ISP modem/router which
> assigned the connection a block of 8 IPs
>
> So I already have eth0 bridged to br0 using the IP x.x.x.2
>
> Now I'm trying to figure out why a virtual guest with an eth0 device
> assigned wth IP x.x.x.3 can't connect anywhere.

So .2 works as main IP and .3 does not?
Is your ISP doing any MAC address filtering? You may need to use a
routed bridge then..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Ljubomir Ljubojevic]

Lucian wrote:
> On Fri, Apr 29, 2011 at 11:51 AM, Emmanuel Noobadmin
>  wrote:
>> On 4/29/11, Lucian  wrote:
>>> Something seems out of order with the above; may I ask what exactly
>>> you are trying to achieve?
>>> Unless I read it all wrong you want (i.e.) x.x.x.2 on br0 and also on
>>> eth0? This cannot work.
>> Well, I have a physical connected to the ISP modem/router which
>> assigned the connection a block of 8 IPs
>>
>> So I already have eth0 bridged to br0 using the IP x.x.x.2
>>
>> Now I'm trying to figure out why a virtual guest with an eth0 device
>> assigned wth IP x.x.x.3 can't connect anywhere.
> 
> So .2 works as main IP and .3 does not?
> Is your ISP doing any MAC address filtering? You may need to use a
> routed bridge then..


Correct way of doing bridging is to create a bridge br0 and add *all* 
IP's  on the bridge itself (br:0, br:1, ).

I am not sure, but it *might* allow you to add IP's on the *first* 
bonded device, but I am not sure about all of the later bonded devices.

Test somewhere first, and make sure you do "service network restart" 
each time.

Ljubomir
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Benjamin Hackl]

On Fri, 29 Apr 2011 18:51:50 +0800
Emmanuel Noobadmin  wrote:

> On 4/29/11, Lucian  wrote:
> > Something seems out of order with the above; may I ask what exactly
> > you are trying to achieve?
> > Unless I read it all wrong you want (i.e.) x.x.x.2 on br0 and also
> > on eth0? This cannot work.
> 
> Well, I have a physical connected to the ISP modem/router which
> assigned the connection a block of 8 IPs

You don't need a bridge unless you want to do firewalling or some
routing or network modification at the bridge.

Just assign IP1 to eth0, IP2 to eth0:1, IP3 to eth0:2 and so on.

/etc/sysconfig/network-scripts/ifcfg-eth0:1
DEVICE=eth0:1
BOOTPROTO=none
TYPE=Ethernet
IPADDR=1.2.3.4
NETMASK=5.6.7.8
ONPARENT=yes

Should do the work.


Brgds
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Kai Schaetzl]

Benjamin Hackl wrote on Fri, 29 Apr 2011 13:51:13 +0200:

> Just assign IP1 to eth0, IP2 to eth0:1, IP3 to eth0:2 and so on.

and if you really need a bridge you attach those to the bridge: br0, 
br0:1, br0:2 etc. eth0 ist the *physical* interface for the bridge.

Kai


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Richard Mollel]

--- On Wed, 4/27/11, Les Mikesell  wrote:

> From: Les Mikesell 
> Subject: Re: [CentOS] Setting up a GUI remote access
> To: centos@centos.org
> Date: Wednesday, April 27, 2011, 1:59 PM
> On 4/27/2011 12:43 PM, Todd Cary
> wrote:
> > On 4/26/2011 9:25 AM, Todd Cary wrote:
> >> Currently I have VNC running on my Windows desktop
> with Samba
> >> providing access to my Linux server.  Since
> Linux is more
> >> reliable than Windows, I would like to be able to
> access my Linux
> >> (Centos 5.5) via my Windows notebook - hopefully
> via VNC or some
> >> similar application and then access the Windows
> desktop (if it is
> >> not locked up :-) ) with Samba.
> >>
> >> What is the best VNC like application to install
> or use on the
> >> Linux server?
> >>
> >> Todd
> >>
> > WOW!  A few choices.  in checking the ssh
> configuration file, I
> > am setup using password authentication - not the best
> choice.  If
> > I change that to NO, is it easy to change my ssh
> client?  One
> > client I use is SSH Tectia.
> 
> Clients normally try key-based authentication first if they
> have the 
> private side of the identity key.
> 
> > Of course, this will require a
> > change in FreeNX.
> 
> The NX client uses passwordless key authentication to
> connect as the nx 
> user first, then uses that encrypted channel to do
> password-based 
> authentication as the actual user.  So you at least
> have to permit 
> passwords over the loopback (127.0.0.x) interface.
> 
> -- 
>    Les Mikesell
>     lesmikes...@gmail.com
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 

I just tried FreeNX on server (centos), and NX Client from Nomachine. Setup was 
not bad, though too many sources of info. Settled on centos wiki doc to get me 
going.
However, once I got logged in (using gnome), there are some very normal 
applications that I am unable to launch, and they work flawlessly with Xming 
(or the commercial Xwin32). For example, I am unable to launch a gui for our 
backup program, netvault, gui is "nvgui". It simply flashes, and dies out. That 
was on day one.
I suspended the session, and tried to re-attach this morning. It worked, great. 
However, it seems to have a big issue with backing store. I have killed all 
sessions, reconnected, same issue. If I "shake" a window, it leaves its traces 
all over, and there is nothing I can do about it but kill the session again and 
retry. Any ideas?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Todd Cary]

On 4/29/2011 7:10 AM, Richard Mollel wrote:
>
> --- On Wed, 4/27/11, Les Mikesell  wrote:
>
>> From: Les Mikesell
>> Subject: Re: [CentOS] Setting up a GUI remote access
>> To: centos@centos.org
>> Date: Wednesday, April 27, 2011, 1:59 PM
>> On 4/27/2011 12:43 PM, Todd Cary
>> wrote:
>>> On 4/26/2011 9:25 AM, Todd Cary wrote:
 Currently I have VNC running on my Windows desktop
>> with Samba
 providing access to my Linux server.  Since
>> Linux is more
 reliable than Windows, I would like to be able to
>> access my Linux
 (Centos 5.5) via my Windows notebook - hopefully
>> via VNC or some
 similar application and then access the Windows
>> desktop (if it is
 not locked up :-) ) with Samba.

 What is the best VNC like application to install
>> or use on the
 Linux server?

 Todd

>>> WOW!  A few choices.  in checking the ssh
>> configuration file, I
>>> am setup using password authentication - not the best
>> choice.  If
>>> I change that to NO, is it easy to change my ssh
>> client?  One
>>> client I use is SSH Tectia.
>> Clients normally try key-based authentication first if they
>> have the
>> private side of the identity key.
>>
>>> Of course, this will require a
>>> change in FreeNX.
>> The NX client uses passwordless key authentication to
>> connect as the nx
>> user first, then uses that encrypted channel to do
>> password-based
>> authentication as the actual user.  So you at least
>> have to permit
>> passwords over the loopback (127.0.0.x) interface.
>>
>> -- 
>> Les Mikesell
>>  lesmikes...@gmail.com
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
> I just tried FreeNX on server (centos), and NX Client from Nomachine. Setup 
> was not bad, though too many sources of info. Settled on centos wiki doc to 
> get me going.
> However, once I got logged in (using gnome), there are some very normal 
> applications that I am unable to launch, and they work flawlessly with Xming 
> (or the commercial Xwin32). For example, I am unable to launch a gui for our 
> backup program, netvault, gui is "nvgui". It simply flashes, and dies out. 
> That was on day one.
> I suspended the session, and tried to re-attach this morning. It worked, 
> great. However, it seems to have a big issue with backing store. I have 
> killed all sessions, reconnected, same issue. If I "shake" a window, it 
> leaves its traces all over, and there is nothing I can do about it but kill 
> the session again and retry. Any ideas?
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

I have FreeNX on my server now and NX Client from Nomachine on my 
XP desktop.  However my ssh is configured for PW access; not Key 
access.  My ssh clients work - that is I have access to the 
server.  However I cannot gain access via the Nomachine client.

My plan was to get FreeNX working with the password security 
first, and after that change the Nomachine client and the other 
ssh clients to Key access.  But I am stuck at the moment - not 
sure how to trouble shoot my inability to get access.

Todd

-- 
Ariste Software
Petaluma, CA 94952

http://www.aristesoftware.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Les Mikesell]

On 4/29/2011 9:10 AM, Richard Mollel wrote:
>
> I just tried FreeNX on server (centos), and NX Client from Nomachine. Setup 
> was not bad, though too many sources of info. Settled on centos wiki doc to 
> get me going.

You shouldn't have to do anything but:
yum install freenx
and then get the contents of /etc/nxserver/client.id_dsa.key into the 
client config.  (You can xfer the file and import it, but I usually just 
ssh in, cat the file to the screen and copy/paste the text between windows).

> However, once I got logged in (using gnome), there are some very normal 
> applications that I am unable to launch, and they work flawlessly with Xming 
> (or the commercial Xwin32). For example, I am unable to launch a gui for our 
> backup program, netvault, gui is "nvgui". It simply flashes, and dies out. 
> That was on day one.

That has to do with font handling, but I've forgotten the details. 
There are old/new ways of doing X fonts and NX only does it the new way 
by default.  You can fix it by using a font server or installing all the 
old style fonts, or something like that.  I didn't need to run any old 
programs badly enough to deal with it.

> I suspended the session, and tried to re-attach this morning. It worked, 
> great. However, it seems to have a big issue with backing store. I have 
> killed all sessions, reconnected, same issue. If I "shake" a window, it 
> leaves its traces all over, and there is nothing I can do about it but kill 
> the session again and retry. Any ideas?

That must have something to do with your client platform video drivers. 
  I think it is mostly cygwin X code or equivalent under the covers 
handling the display.  I see it sometimes on a dual-headed windows 
client but only  if I open the window on one monitor, then drag it to 
the other. Other than that, the LAN performance I see is pretty much a 
match for the local console for everything short of live video and still 
pretty good after the initial redraw when I pick up the session 
remotely.  Can you try it from some other computer?  You might also play 
with the client config option related to caching (that slider from Modem 
to LAN speed and the cache sizes in the advanced tab).  If you client 
doesn't have much ram or has a slow disk it might help to tune those down.

By the way, if you run the client from a Mac or Linux, you get the 
option to resize the window after it opens.  The windows client will 
snap to the available size (or what you specify in the client) as it 
opens, which doesn't have to match the previous session size, but won't 
change on the fly.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Les Mikesell]

On 4/29/2011 9:41 AM, Todd Cary wrote:
>
> I have FreeNX on my server now and NX Client from Nomachine on my
> XP desktop.  However my ssh is configured for PW access; not Key
> access.  My ssh clients work - that is I have access to the
> server.  However I cannot gain access via the Nomachine client.

First, why would you disable key authentication?  Or is it just failing 
because you don't have the right key?  Unlike the commercial NoMachine 
server, freenx generates a unique keypair so after the server install 
you have to get the contents of /etc/nxserver/client.id_dsa.key into the 
NX client key config.  You can either transfer the file and use the 
import button or get the text on the screen so you can paste it into the 
window and save it.

> My plan was to get FreeNX working with the password security
> first, and after that change the Nomachine client and the other
> ssh clients to Key access.  But I am stuck at the moment - not
> sure how to trouble shoot my inability to get access.

NX is designed to connect as the restricted nx user with passwordless 
key authentication, then use that encrypted channel to pass the real 
user credentials.  It might be possible to change that but it won't be 
easy.  If you have a real reason for disabling key authentication on the 
server in question, perhaps you could use some other computer on the LAN 
to host your desktop session, then use ssh x-forwarding to run what you 
need on the more restricted servers in windows on that desktop.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Todd Cary]

On 4/29/2011 8:21 AM, Les Mikesell wrote:

First, why would you disable key authentication?  Or is it just failing
because you don't have the right key?
When I read the wiki (http://wiki.centos.org/HowTos/FreeNX), it 
states


Note: If you have disallowed ssh password authentication (which 
is advised but not mandatory), you need to follow the 
instructions here. Otherwise you can skip this section.


I checked the ssh configuration file and ssh password 
authentication is enabled.  My Centos 5.5 is an Out of the Box 
installation, so this setting was not done by me - at least not 
directly.  So my thinking was/is that I could just skip the rest 
of that part of the setup.


Confused

Todd

--
Ariste Software
Petaluma, CA 94952

http://www.aristesoftware.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS-announce Digest, Vol 74, Issue 10

[centos-announce-request]

Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2011:0472  CentOS 5 i386 nss Update (Johnny Hughes)
   2. CESA-2011:0472  CentOS 5 x86_64 nss Update (Johnny Hughes)
   3. CESA-2011:0471  CentOS 5 i386 firefox Update (Johnny Hughes)
   4. CESA-2011:0471  CentOS 5 x86_64 firefox Update (Johnny Hughes)
   5. CESA-2011:0474 CentOS 5 i386 thunderbird Update (Johnny Hughes)
   6. CESA-2011:0474 CentOS 5 x86_64 thunderbird Update (Johnny Hughes)


--

Message: 1
Date: Fri, 29 Apr 2011 15:47:13 +
From: Johnny Hughes 
Subject: [CentOS-announce] CESA-2011:0472  CentOS 5 i386 nss Update
To: centos-annou...@centos.org
Message-ID: <20110429154713.ga29...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:0472 

Upstream details at : http://rhn.redhat.com/errata/RHSA-2011-0472.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
b05b16f3996e844e5b06fe1d2cf7629a  nss-3.12.8-4.el5_6.i386.rpm
397818c8180758df4a5974859e0acb2f  nss-devel-3.12.8-4.el5_6.i386.rpm
fae1a8d2407b01d52dea6874633137c7  nss-pkcs11-devel-3.12.8-4.el5_6.i386.rpm
fa0520b26710c0681669464177df2daa  nss-tools-3.12.8-4.el5_6.i386.rpm

Source:
3b4e2d350b167b16ffa81513e2f2e725  nss-3.12.8-4.el5_6.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Fri, 29 Apr 2011 15:47:13 +
From: Johnny Hughes 
Subject: [CentOS-announce] CESA-2011:0472  CentOS 5 x86_64 nss Update
To: centos-annou...@centos.org
Message-ID: <20110429154713.ga29...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:0472 

Upstream details at : http://rhn.redhat.com/errata/RHSA-2011-0472.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
0caebe2fef578220c38fa4815baa4ab8  nss-3.12.8-4.el5_6.i386.rpm
9edd6c52d77a52c7f3bde39a7b2a2bf5  nss-3.12.8-4.el5_6.x86_64.rpm
ecced99093ad9766a15c505aadfe5534  nss-devel-3.12.8-4.el5_6.i386.rpm
737fbc0d7c53389196d3e3bd2c18  nss-devel-3.12.8-4.el5_6.x86_64.rpm
3a3bc1e319a6bdd71b75128886b61033  nss-pkcs11-devel-3.12.8-4.el5_6.i386.rpm
8ee27f484d88c9f8a1c9fa9fbbb0b562  nss-pkcs11-devel-3.12.8-4.el5_6.x86_64.rpm
b737f1e9d52cd605292f607993ddd8f3  nss-tools-3.12.8-4.el5_6.x86_64.rpm

Source:
3b4e2d350b167b16ffa81513e2f2e725  nss-3.12.8-4.el5_6.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 3
Date: Fri, 29 Apr 2011 15:48:25 +
From: Johnny Hughes 
Subject: [CentOS-announce] CESA-2011:0471  CentOS 5 i386 firefox
Update
To: centos-annou...@centos.org
Message-ID: <20110429154825.ga29...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:0471 

Upstream details at : http://rhn.redhat.com/errata/RHSA-2011-0471.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
2882a8e5b0aed38aceea08ffd7a35cef  firefox-3.6.17-1.el5.centos.i386.rpm
99d3f3989d9ffc38b1b4389383952d70  xulrunner-1.9.2.17-3.el5.i386.rpm
736b9ab95a07271e575371c82f6906c9  xulrunner-devel-1.9.2.17-3.el5.i386.rpm

Source:
0ac4e22b49e707702196946395d25575  firefox-3.6.17-1.el5.centos.src.rpm
fd106ef267356d0ef211e9cc1ef1f3b7  xulrunner-1.9.2.17-3.el5.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 4
Date: Fri, 29 Apr 2011 15:48:26 +
From: Johnny Hughes 
Subject: [CentOS-announce] CESA-2011:0471  CentOS 5 x86_64 firefox
Update
To: centos-annou...@centos.org
Message-ID: <20110429154826.ga29...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:0471 

Upstream details at : http://rhn.redhat.com/errata/RHSA-2011-0471.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
99da79cd96ecbed895ac47be441d4153  firefox-3.6.17-1.el5.centos.i386.rpm
e7c93352b002eaf92bcbd4bb2b696960  firefox-3.6.17-1.el5.centos.x86_64.rpm
c18bde5fade8170cf58e898252b17144  xulrunner-1.9.2.17-3.el5.i386.rpm
60eaa5364982c8645f1a5b3ec590964c  xulrunner-1

Re: [CentOS] libvirt security update CVE-2011-1146

[Johnny Hughes]

On 04/29/2011 04:53 AM, Riccardo Veraldi wrote:
> Hello,
> I ask here if CentOS has a xml oval repository. This is the reason of my
> question:
> 
> Actually I have an automatic system to check CVE vulnerabilities report
> against RedHat OVAL resources, for example:
> https://www.redhat.com/security/data/oval/com.redhat.rhsa-2011.xml   for
> 2011 CVEs and RHSAs related OVALS
> 
> My problem is that while the mechanism works flawlessly regarding
> Scientific Linux, with CentOS I have false positives reports
> because the patch level numbers for some rpms is somewhat different from
> the one written in the official RedHat OVALS.
> 
> I make an example to explain myself better:
> 
> Consider CVE-2011-0020 which corresponds to RHSA-2011:0180-1 security
> advisory and it regards a pango vulnerability.
> 
> RedHat calls the updated rpm which addresses the vulnerability as
> pango-1.14.9-8.el5_6.2
> 
> CentOS calls it as pango-1.14.9-8.el5.centos.2
> 
> so we have:
> 
> pango-1.14.9-8.el5_6.2  in the RedHat OVALS while CentOS has
> pango-1.14.9-8.el5.centos.2 and I think they both addresses the
> CVE-2011-0020 vulnerability
> but since the naming is different I have a report that my pango RPM on
> CentOS is vulnerable, while on SL with same rpm I have no false
> positives and everything is ok.
> 
> So i ask if CentOS has it's own OVAL xml files because I cannot use i na
> realiable way the RedHat OVALS with CentOS for my porpouses.
> 

No, we don't have that .. and we can't "screen scrape" the Red Hat
content and make our own.

While the Red Hat source files are Open Source (Usually GPL, but also
other licenses) and we can rebuild their SRPMS ... their "Customer
Portals" are NOT open source.  In fact, here is the terms for using
their "Customer Portals":

http://www.redhat.com/legal/legal_statement.html

"Red Hat either owns the intellectual property rights in the HTML, text,
images audio, video, software or other content that is made available on
this website, or has obtained the permission of the owner of the
intellectual property to make it available on this website. Red Hat
strictly prohibits the redistribution or copying of any part of this
website or content on this website without written permission from Red
Hat. Red Hat authorizes you to display on your computer, download and
print pages from this website provided: (a) the copyright notice appears
on all such printouts, (b) the information will not be altered, (c) the
content is only used for personal, educational and non-commercial use,
and (d) you do not redistribute or copy the information to any other
media."

Also this one:

https://access.redhat.com/site/help/terms_conditions.html

Use of Content.

Red Hat grants you a personal, non-assignable license to use Red Hat
Content for your own internal use while you are a Red Hat Customer (as
defined in Section 2 above). Distributing any portion of Red Hat Content
to a third party, using any Red Hat Content for the benefit of a third
party or using Red Hat Content in connection with software other than
Red Hat Software under an active Red Hat subscription are all
prohibited. Red Hat authorizes you to display on your computer,
download, play and print the Red Hat Content provided: (a) the copyright
notice is not removed, (b) Red Hat Content is not be altered, (c) Red
Hat Content is used only for your personal, educational and
non-commercial use in support of your active valid subscriptions to Red
Hat products and services and in accordance with your Customer
Agreement, (d) you do not further redistribute or copy Red Hat Content
and (e) you comply with any Additional Terms. In the event of a
conflict, inconsistency or difference between this Section 6 and the
terms of a License or Customer Agreement, the License or Customer
Agreement will control (for example, for Red Hat Content licensed under
a Creative Commons License, you will have the rights set forth in the
applicable Creative Commons License). If you exceed your authorized use
of Red Hat Content (for example, if you use Red Hat Content in support
of Software for which you do not have an active valid subscription), you
may be required under your Customer Agreement to purchase additional
subscriptions to Red Hat products. In addition, your right to continue
to access Red Hat Content from a Red Hat Portal is subject to your
continued compliance with these Terms of Use, your Customer Agreement
and the Additional Terms.

=

What this means is that we can NOT screen scrape, download, or otherwise
use content from the Red Hat website as a "Template" to then modify can
generate modified copies of that content ... BECAUSE ... content is NOT
software and the Red Hat content is NOT open source.

This is also why we do not duplicate the whole content from security
advisories.  We can point you at it, we can not grab it and modify it
and then republish it.  The centOS Project takes copyright and
intel

[CentOS] I have RHel6. How does that turn into Centos 6?

[Paul Johnson]

The bickering here about Centos 6 has made me wonder what is actually
legally necessary to re-distribute the RPM files that come with RHel6.

I am not starting a flame ware, I hope.  I'm just curious about what
is minimally necessary go from RHel6 to another distribution. I
suppose we could discuss "Paul Linux 6" instead of Centos, if that
makes you feel more comfortable. (and not too OT)

Suppose I dump out all of the SRPM packages and do a global find and
search to change the characters "RedHat" to "Paul".  What else would I
have to do?

Which of the RPM files in RH6 have "proprietary" software in them?
Those cannot be re-distributed as is? I figure there must be
something, because I installed the test version of SL6 back in January
and it locked up in disk recognition, whereas RH6 did not. So the Rhel
6 folks know some secrets stuff.

So, obviously, to create Centos 6, oops, Paul Linux 6,  I have to
isolate the non-GPL software and then replace it with something
workable.

After that, what am I legally required to do?  As far as all of the
other RPM packages are concerned, couldn't they be redistributed
exactly as they are, without any modification at all? In Centos-devel,
it appears to me most of the discussion is about "re-branding", going
through the packages and changing "RedHat" to "Centos" and swapping
out icons.

Is that legally necessary?  In my memory, there was a Linux distro
called Mandrake and it was exactly the same as RH for i386, except
they re-compiled with gcc options for i686.  I recall that in many of
the RPM packages in Mandrake, they did not bother to replace "RedHat"
with some other name.


PJ
-- 
Paul E. Johnson
Professor, Political Science
1541 Lilac Lane, Room 504
University of Kansas
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Akemi Yagi]

On Fri, Apr 29, 2011 at 8:57 AM, Todd Cary  wrote:
>
>
> On 4/29/2011 8:21 AM, Les Mikesell wrote:
>
> First, why would you disable key authentication?  Or is it just failing
> because you don't have the right key?
>
> When I read the wiki (http://wiki.centos.org/HowTos/FreeNX), it states
>
> Note: If you have disallowed ssh password authentication (which is advised
> but not mandatory), you need to follow the instructions here. Otherwise you
> can skip this section.
>
> I checked the ssh configuration file and ssh password authentication is
> enabled.  My Centos 5.5 is an Out of the Box installation, so this setting
> was not done by me - at least not directly.  So my thinking was/is that I
> could just skip the rest of that part of the setup.

Yes, password authentication is enabled by default. So, you can skip
Section 2 to do the setup. That would eliminate 'potential
misconfiguration' related to the steps in that Section.

Once you confirm your NX setup is working, you can then disable
password authentication if you wish (recommended) and go through the
required steps.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[R - elists]

call redhat legal and/or please take this up with your own "paul" legal
counsel

this is not the place

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Johnny Hughes]

On 04/29/2011 11:17 AM, Paul Johnson wrote:
> The bickering here about Centos 6 has made me wonder what is actually
> legally necessary to re-distribute the RPM files that come with RHel6.
> 
> I am not starting a flame ware, I hope.  I'm just curious about what
> is minimally necessary go from RHel6 to another distribution. I
> suppose we could discuss "Paul Linux 6" instead of Centos, if that
> makes you feel more comfortable. (and not too OT)
> 
> Suppose I dump out all of the SRPM packages and do a global find and
> search to change the characters "RedHat" to "Paul".  What else would I
> have to do?
> 
> Which of the RPM files in RH6 have "proprietary" software in them?
> Those cannot be re-distributed as is? I figure there must be
> something, because I installed the test version of SL6 back in January
> and it locked up in disk recognition, whereas RH6 did not. So the Rhel
> 6 folks know some secrets stuff.
> 
> So, obviously, to create Centos 6, oops, Paul Linux 6,  I have to
> isolate the non-GPL software and then replace it with something
> workable.
> 
> After that, what am I legally required to do?  As far as all of the
> other RPM packages are concerned, couldn't they be redistributed
> exactly as they are, without any modification at all? In Centos-devel,
> it appears to me most of the discussion is about "re-branding", going
> through the packages and changing "RedHat" to "Centos" and swapping
> out icons.
> 
> Is that legally necessary?  In my memory, there was a Linux distro
> called Mandrake and it was exactly the same as RH for i386, except
> they re-compiled with gcc options for i686.  I recall that in many of
> the RPM packages in Mandrake, they did not bother to replace "RedHat"
> with some other name.

This is not the PAUL Linux mailing list.  It is the CentOS mailing list.

The CentOS project will not redistribute files signed by Red Hat, and we
will not sign files that we do not create.  Simple as that.

You also must make a "good faith effort" to not distribute any branding
that makes your version of Linux tell people that it is Red Hat Linux or
Red Hat Enterprise Linux.

That "good faith effort" is required for all packages (GPL or not).

And yes, it is legally necessary make that good faith effort not to
infringe upon someone else's trademarks.

This is specifically called out here:
http://www.redhat.com/about/companyprofile/trademark/

This PDF file tells you in great detail what you need to do:

http://www.redhat.com/f/pdf/corp/RH-3573_284204_TM_Gd.pdf







signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Todd Rinaldo]

On Apr 29, 2011, at 11:43 AM, Johnny Hughes wrote:

> On 04/29/2011 11:17 AM, Paul Johnson wrote:
>> The bickering here about Centos 6 has made me wonder what is actually
>> legally necessary to re-distribute the RPM files that come with RHel6.
>> 
>> I am not starting a flame ware, I hope.  I'm just curious about what
>> is minimally necessary go from RHel6 to another distribution. I
>> suppose we could discuss "Paul Linux 6" instead of Centos, if that
>> makes you feel more comfortable. (and not too OT)
>> 
>> Suppose I dump out all of the SRPM packages and do a global find and
>> search to change the characters "RedHat" to "Paul".  What else would I
>> have to do?
>> 
>> Which of the RPM files in RH6 have "proprietary" software in them?
>> Those cannot be re-distributed as is? I figure there must be
>> something, because I installed the test version of SL6 back in January
>> and it locked up in disk recognition, whereas RH6 did not. So the Rhel
>> 6 folks know some secrets stuff.
>> 
>> So, obviously, to create Centos 6, oops, Paul Linux 6,  I have to
>> isolate the non-GPL software and then replace it with something
>> workable.
>> 
>> After that, what am I legally required to do?  As far as all of the
>> other RPM packages are concerned, couldn't they be redistributed
>> exactly as they are, without any modification at all? In Centos-devel,
>> it appears to me most of the discussion is about "re-branding", going
>> through the packages and changing "RedHat" to "Centos" and swapping
>> out icons.
>> 
>> Is that legally necessary?  In my memory, there was a Linux distro
>> called Mandrake and it was exactly the same as RH for i386, except
>> they re-compiled with gcc options for i686.  I recall that in many of
>> the RPM packages in Mandrake, they did not bother to replace "RedHat"
>> with some other name.
> 
> This is not the PAUL Linux mailing list.  It is the CentOS mailing list.
> 
> The CentOS project will not redistribute files signed by Red Hat, and we
> will not sign files that we do not create.  Simple as that.
> 
> You also must make a "good faith effort" to not distribute any branding
> that makes your version of Linux tell people that it is Red Hat Linux or
> Red Hat Enterprise Linux.

I've always been surprised that CentOS ships /etc/redhat-release given the 
above paragraph.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Digimer]

On 04/29/2011 01:26 PM, Todd Rinaldo wrote:
> I've always been surprised that CentOS ships /etc/redhat-release given
> the above paragraph.

Probably a programmatic requirement, if I was the betting type.

-- 
Digimer
E-Mail: digi...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[John R Pierce]

On 04/29/11 10:26 AM, Todd Rinaldo wrote:
>
> I've always been surprised that CentOS ships /etc/redhat-release given 
> the above paragraph.

I've always been annoyed that file isn't /etc/release like many other 
unix systems.   or at least symlinked as such.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 5.6 - Samba server + Windows error 233

[Guy Boisvert]

Le 2011-04-27 13:44, Ryan Wagoner a écrit :
> On Wed, Apr 27, 2011 at 10:53 AM, Guy Boisvert
>   wrote:
>> Hi!
>>
>>  I have upgraded my servers yesterday to CentOS 5.6 via yum update.
>> Everything went smoothly except that i have client workstations not part of
>> the domain that are not able to access the samba server anymore.  The samba
>> server is part of the domain.  We recently added Windows 2008 R2 DC.
>> Everything was working smoothly until the CentOS update.
> If I remember correctly with a Windows 2008 DC you need to use the
> samba3x packages.
>
> Ryan

Thanks Ryan.

I will try it next weekend and report back to the list.

If there is a Samba3X, this is oubiously for something.

I was forced to change our DCs to Winblows 2008 and it turned into a big 
mess here (Samba freaking, DNS instability, Exchange 2010 doing its best 
to force us upgrading to Outlook 2010, etc etc etc)!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Les Mikesell]

On 4/29/2011 11:17 AM, Paul Johnson wrote:
>
> Which of the RPM files in RH6 have "proprietary" software in them?
> Those cannot be re-distributed as is? I figure there must be
> something, because I installed the test version of SL6 back in January
> and it locked up in disk recognition, whereas RH6 did not. So the Rhel
> 6 folks know some secrets stuff.

I don't think that's a reasonable conclusion.  There's a reason one is 
called a 'test' version, after all.  Things often work better after 
fixing the things found in tests...

> Is that legally necessary?  In my memory, there was a Linux distro
> called Mandrake and it was exactly the same as RH for i386, except
> they re-compiled with gcc options for i686.  I recall that in many of
> the RPM packages in Mandrake, they did not bother to replace "RedHat"
> with some other name.

If you are remembering from long ago, it was probably before Red Hat 
decided to restrict redistribution (remember, the thing that helped them 
build the community that generated the most of the content they ship and 
found/fixed lots of bugs...).

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[John Hinton]

On 4/29/2011 1:46 PM, Digimer wrote:
> On 04/29/2011 01:26 PM, Todd Rinaldo wrote:
>> I've always been surprised that CentOS ships /etc/redhat-release given
>> the above paragraph.
> Probably a programmatic requirement, if I was the betting type.
>
I could easily be confused as it has been so long now... I think 
Whitebox actually changed that to whitebox-release and maybe CentOS did 
the save very early on. But, many applications look for that file and if 
they see redhat-release, know their stuff can run on your system and you 
are off to the races. I suppose the final answer was it wasn't an 
infringement and solved a lot of other problems. Seems I had to edit 
this file or name to get something to run on a server like 4 or 5 years 
ago?

Am I required to remember everything I did from that long back? LOL 
There might be some stuff in the archives though... back in the early 
ver. 3 days.

-- 
John Hinton
877-777-1407 ext 502
http://www.ew3d.com
Comprehensive Online Solutions

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Devin Reade]

--On Thursday, April 28, 2011 10:53:52 AM -0400 Scott Robbins
 wrote:

> On Thu, Apr 28, 2011 at 04:21:58PM +0200, Mattias Geniar wrote:

>> I've tracked this down to the following known bug in Redhat, but
>> it dates back to early 2010.
>> https://bugzilla.redhat.com/show_bug.cgi?id=182464#c46
> 
> Yes, the bug is actually older than that

*sigh*

Yes, I've been tripping up on this one, on and off, since 2006 in FC5.

AFAIK, nobody ever looked into my strace comment of
, although
 (four years
later) seems related. Probably moot now anyway as nobody is interested
in fixing it since sssd will cure all ills and bring world peace.
(Insert sarcasm/skepticism as appropriate.)

Be aware that "bind_policy soft" may have some undesirable consequences,
depending on your environment.  For example, if you have a mail server
that does user lookup based on ldap and your ldap server goes away
(before or after the mail server boots), then while your ldap server
is offline you can get mail bouncing permanently with "no such user"
rather than temporarily with "system not available" -type messages.

Mitigation strategies that I've done in the past include:
  1. never using 'bind_policy soft'
  2. having at least one replica LDAP server (which is a good idea anyway)
  3. putting LDAP on a machines which themselves are not LDAP clients,
 thus ensuring that although clients may get blocked on boot that the
 LDAP server itself does not

In recent CentOS 5 versions, I've had much better luck avoiding (3) 
as long as, using system-config-authentication, one enables
"Local authorization is sufficient for local users" under the
Options tab.

And for the record, despite this particularly annoying bug, I'm still
a strong advocate of using LDAP for user and group provisioning.

Devin

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[NOYK]

Given the difficulty of getting Centos 6 released - maybe this is not the
correct group to ask. Just saying. ;)

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Paul Johnson
Sent: Friday, April 29, 2011 12:17 PM
To: CentOS mailing list
Subject: [CentOS] I have RHel6. How does that turn into Centos 6?

The bickering here about Centos 6 has made me wonder what is actually
legally necessary to re-distribute the RPM files that come with RHel6.

I am not starting a flame ware, I hope.  I'm just curious about what is
minimally necessary go from RHel6 to another distribution. I suppose we
could discuss "Paul Linux 6" instead of Centos, if that makes you feel more
comfortable. (and not too OT)

Suppose I dump out all of the SRPM packages and do a global find and search
to change the characters "RedHat" to "Paul".  What else would I have to do?

Which of the RPM files in RH6 have "proprietary" software in them?
Those cannot be re-distributed as is? I figure there must be something,
because I installed the test version of SL6 back in January and it locked up
in disk recognition, whereas RH6 did not. So the Rhel
6 folks know some secrets stuff.

So, obviously, to create Centos 6, oops, Paul Linux 6,  I have to isolate
the non-GPL software and then replace it with something workable.

After that, what am I legally required to do?  As far as all of the other
RPM packages are concerned, couldn't they be redistributed exactly as they
are, without any modification at all? In Centos-devel, it appears to me most
of the discussion is about "re-branding", going through the packages and
changing "RedHat" to "Centos" and swapping out icons.

Is that legally necessary?  In my memory, there was a Linux distro called
Mandrake and it was exactly the same as RH for i386, except they re-compiled
with gcc options for i686.  I recall that in many of the RPM packages in
Mandrake, they did not bother to replace "RedHat"
with some other name.


PJ
--
Paul E. Johnson
Professor, Political Science
1541 Lilac Lane, Room 504
University of Kansas
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Eric Viseur]

On top of that, it just seems logical granted the RHEL binary compatibility
thing.  It's used by many apps to detect the distro you're using, so...

2011/4/29 John Hinton 

> On 4/29/2011 1:46 PM, Digimer wrote:
> > On 04/29/2011 01:26 PM, Todd Rinaldo wrote:
> >> I've always been surprised that CentOS ships /etc/redhat-release given
> >> the above paragraph.
> > Probably a programmatic requirement, if I was the betting type.
> >
> I could easily be confused as it has been so long now... I think
> Whitebox actually changed that to whitebox-release and maybe CentOS did
> the save very early on. But, many applications look for that file and if
> they see redhat-release, know their stuff can run on your system and you
> are off to the races. I suppose the final answer was it wasn't an
> infringement and solved a lot of other problems. Seems I had to edit
> this file or name to get something to run on a server like 4 or 5 years
> ago?
>
> Am I required to remember everything I did from that long back? LOL
> There might be some stuff in the archives though... back in the early
> ver. 3 days.
>
> --
> John Hinton
> 877-777-1407 ext 502
> http://www.ew3d.com
> Comprehensive Online Solutions
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[m . roth]

John Hinton wrote:
> On 4/29/2011 1:46 PM, Digimer wrote:
>> On 04/29/2011 01:26 PM, Todd Rinaldo wrote:
>>> I've always been surprised that CentOS ships /etc/redhat-release given
>>> the above paragraph.
>> Probably a programmatic requirement, if I was the betting type.
>>
> I could easily be confused as it has been so long now... I think
> Whitebox actually changed that to whitebox-release and maybe CentOS did
> the save very early on. But, many applications look for that file and if
> they see redhat-release, know their stuff can run on your system and you
> are off to the races. I suppose the final answer was it wasn't an
> infringement and solved a lot of other problems. Seems I had to edit
> this file or name to get something to run on a server like 4 or 5 years
> ago?
>
> Am I required to remember everything I did from that long back? LOL
> There might be some stuff in the archives though... back in the early
> ver. 3 days.

Actually, it annoys me - it *should* be LSB release, not redhat, I always
thought.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Les Mikesell]

On 4/29/2011 10:57 AM, Todd Cary wrote:

>> First, why would you disable key authentication?  Or is it just failing
>> because you don't have the right key?
> When I read the wiki (http://wiki.centos.org/HowTos/FreeNX), it states
>
> Note: If you have disallowed ssh password authentication (which is
> advised but not mandatory), you need to follow the instructions here.
> Otherwise you can skip this section.
>
> I checked the ssh configuration file and ssh password authentication is
> enabled. My Centos 5.5 is an Out of the Box installation, so this
> setting was not done by me - at least not directly. So my thinking
> was/is that I could just skip the rest of that part of the setup.
>
> Confused

Enabling password authentication (the default) does not disable key 
authentication (also enabled by default).  The client offers the key if 
it has one.  If it doesn't, or if the the key fails, a later step 
prompts for a password.

A quick check for basic key authentication would be to cd to 
/etc/nxserver and:
ssh -i client.id_dsa.key nx@localhost
You'll get the usual host key warning the first time but after 
responding 'yes' you should get a 'HELLO NXSERVER' prompt.  Type 'exit' 
to disconnect.  If that works, the NX client should too once the key is 
installed correctly.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Les Mikesell]

On 4/29/2011 2:01 PM, m.r...@5-cent.us wrote:
>
>>
>> Am I required to remember everything I did from that long back? LOL
>> There might be some stuff in the archives though... back in the early
>> ver. 3 days.
>
> Actually, it annoys me - it *should* be LSB release, not redhat, I always
> thought.

Well, if LSB actually meant you could run something unchanged across 
distributions.  I've never had much hope for that.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Brunner, Brian T.]

centos-boun...@centos.org wrote:
> Given the difficulty of getting Centos 6 released - maybe
> this is not the
> correct group to ask. Just saying. ;)

Actually, telling us just how hard and complex and detail-burdened it
would be to kick off "BlueSox", a homolog to CentOS rebuilding of
"RedHat", might calm down some of the anxiety we've endured this year.
I've come to understand that "hard" is not a matter of innovation, it's
a matter of enduring 
1: highly boring build-inspect-tweak-repeat cycles 
2: repeated for a large number of packages. 
3: Being so careful with the fine details that businesses world-wide
trust your statement "It's Done".

Russ Harrold commented on this as a 'nose-to-the-grindstone' labor; I
can't comment on how much nose is required.


Insert spiffy .sig here:
Life is complex: it has both real and imaginary parts.

//me
***
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed. If you have received this email in error please
notify the system manager. This footnote also confirms that this
email message has been swept for the presence of computer viruses.
www.Hubbell.com - Hubbell Incorporated**

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Les Mikesell]

On 4/29/2011 2:16 PM, Brunner, Brian T. wrote:
>
> 3: Being so careful with the fine details that businesses world-wide
> trust your statement "It's Done".

Part of the "must-be-perfect" requirement for release seems to be 
imposed by the package name/version compatibility with upstream. 
There's no way to fix a build mistake and make yum update it.  I wonder 
if this could have been relaxed with a tweak to yum so it could 
recognize repository and 'rebuild' tags such that (a) it wouldn't 
replace a package with one from a different repo without a config or 
command line override and (b) within a repo it would understand 
increasing rebuild numbers as newer updates.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Lamar Owen]

[This reply isn't directed at John; his message just makes a good place to 
reply]

On Friday, April 29, 2011 02:50:27 PM John Hinton wrote:
> Am I required to remember everything I did from that long back? LOL 
> There might be some stuff in the archives though... back in the early 
> ver. 3 days.

For the archives (not directed to John, but to the thread in general), go look 
at the archives of Red Hat's taroon-list and taroon-beta-list lists.  Also 
educational is looking at nahant-list and nahant-beta-list, and 
rhelv5-beta-list and rhelv5-list, and finally rhelv6-beta-list and rhelv6-list, 
all available at the http://www.redhat.com/mailman/listinfo Mailman interface.

And, of course, to get some real background into the whole Fedora/RHL split, 
read through shrike-list, at the same url

And then go to http://www.uibk.ac.at/zid/systeme/linux/rhel-rebuild-l.html and 
read a while in those archives.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Johnny Hughes]

On 04/29/2011 12:26 PM, Todd Rinaldo wrote:
> 
> On Apr 29, 2011, at 11:43 AM, Johnny Hughes wrote:
> 
>> On 04/29/2011 11:17 AM, Paul Johnson wrote:
>>> The bickering here about Centos 6 has made me wonder what is actually
>>> legally necessary to re-distribute the RPM files that come with RHel6.
>>>
>>> I am not starting a flame ware, I hope.  I'm just curious about what
>>> is minimally necessary go from RHel6 to another distribution. I
>>> suppose we could discuss "Paul Linux 6" instead of Centos, if that
>>> makes you feel more comfortable. (and not too OT)
>>>
>>> Suppose I dump out all of the SRPM packages and do a global find and
>>> search to change the characters "RedHat" to "Paul".  What else would I
>>> have to do?
>>>
>>> Which of the RPM files in RH6 have "proprietary" software in them?
>>> Those cannot be re-distributed as is? I figure there must be
>>> something, because I installed the test version of SL6 back in January
>>> and it locked up in disk recognition, whereas RH6 did not. So the Rhel
>>> 6 folks know some secrets stuff.
>>>
>>> So, obviously, to create Centos 6, oops, Paul Linux 6,  I have to
>>> isolate the non-GPL software and then replace it with something
>>> workable.
>>>
>>> After that, what am I legally required to do?  As far as all of the
>>> other RPM packages are concerned, couldn't they be redistributed
>>> exactly as they are, without any modification at all? In Centos-devel,
>>> it appears to me most of the discussion is about "re-branding", going
>>> through the packages and changing "RedHat" to "Centos" and swapping
>>> out icons.
>>>
>>> Is that legally necessary?  In my memory, there was a Linux distro
>>> called Mandrake and it was exactly the same as RH for i386, except
>>> they re-compiled with gcc options for i686.  I recall that in many of
>>> the RPM packages in Mandrake, they did not bother to replace "RedHat"
>>> with some other name.
>>
>> This is not the PAUL Linux mailing list.  It is the CentOS mailing list.
>>
>> The CentOS project will not redistribute files signed by Red Hat, and we
>> will not sign files that we do not create.  Simple as that.
>>
>> You also must make a "good faith effort" to not distribute any branding
>> that makes your version of Linux tell people that it is Red Hat Linux or
>> Red Hat Enterprise Linux.
> 
> I've always been surprised that CentOS ships /etc/redhat-release given
> the above paragraph.

redhat-release is hard coded into several of the files.

For the record, redhat (in lower case, and use for things like
redhat-release, redhat-config-network, etc. is not the trade mark and is
something they decided to name their packages.  "Red Hat" is the
trademark.  You will notice that in EL6, the directory on the ISOs is
Packages and not RedHat ... and things are named system-config-network
and not redhat-config-network (that started in centos4).

The critical part is that you take away things that say "This is Red Hat
Enterprise Linux".  But you do not want to take away "credit for work"
where it is attributed.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/29/11, Emmanuel Noobadmin  wrote:
> Only problem is... networking still isn't working although brctl show
> on the host shows that a vnet0 had been created and attached to the
> bridge. Any pointers would be appreciated!


Just to close off on this issue for the benefit of any future clueless
newbies like me, networking wasn't working due to one missing element
in the .xml

 was the missing ingredient.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Paul Johnson]

>
> That "good faith effort" is required for all packages (GPL or not).
>
> And yes, it is legally necessary make that good faith effort not to
> infringe upon someone else's trademarks.
>
> This is specifically called out here:
> http://www.redhat.com/about/companyprofile/trademark/
>

I've just read that document and it seems to say that you could take
all of the RPMs exactly as they are built by RedHat and include them
on a disk, and you can label the disk "Centos 6", and you are
completely within the guidelines.


PJ

-- 
Paul E. Johnson
Professor, Political Science
1541 Lilac Lane, Room 504
University of Kansas
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple IP Addresses for a bridge

[Emmanuel Noobadmin]

On 4/29/11, Lucian  wrote
> So .2 works as main IP and .3 does not?
> Is your ISP doing any MAC address filtering? You may need to use a
> routed bridge then..

It turns out that I was barking up the wrong tree and chasing red herrings.

The virtualized guest definition was off by one item so its networking
was never really working properly. Once that was fixed, the .2 and .3
became pingable and the guests could connect to .1

Once I finish installing a base CentOS on the guest, I'll be able to
confirm if the guest could actually connect to the external world.

if they are accessible via the Internet, then it means it wasn't
necessary to add any IP to a bridge.

Nevertheless, thanks to everybody who responded.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Lamar Owen]

On Friday, April 29, 2011 03:49:47 PM Paul Johnson wrote:
> I've just read that document and it seems to say that you could take
> all of the RPMs exactly as they are built by RedHat and include them
> on a disk, and you can label the disk "Centos 6", and you are
> completely within the guidelines.

Read http://www.centos.org/modules/news/article.php?storyid=66
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Johnny Hughes]

On 04/29/2011 02:49 PM, Paul Johnson wrote:
>>
>> That "good faith effort" is required for all packages (GPL or not).
>>
>> And yes, it is legally necessary make that good faith effort not to
>> infringe upon someone else's trademarks.
>>
>> This is specifically called out here:
>> http://www.redhat.com/about/companyprofile/trademark/
>>
> 
> I've just read that document and it seems to say that you could take
> all of the RPMs exactly as they are built by RedHat and include them
> on a disk, and you can label the disk "Centos 6", and you are
> completely within the guidelines.

Except for 2 SRPMS files you COULD do that.  These 2 you can not do that
with:

redhat-logos
anaconda

Specifically from the PDF file:
You must modify the files identified as REDHAT-LOGOS and ANACONDA-IMAGES
so as to remove all use of images containing the “Red Hat” trademark or
Red Hat’s Shadowman logo. Note that mere deletion of these files may
corrupt the software.

However, as I said, you also have to make a good faith effort to not
infringe ... and there are many other things that are infringing.

And not only that ... as I stated before, the CentOS project will not
distribute files we did not generate (because the files have to be
signed).  We are not going to generate sign files made by someone else
or publish files signed by someone else.

Then there is also the case of the "compilation" and the files that
would need to be changed because you had to change the two files above.

But, legally, yes, someone COULD distribute some of the RH files.

But if someone tells you that FILEA has infringing content, then you
have to remove it.  As I said, Red Hat has made a good faith effort to
put all the images in those 2 SRPMS, but they are not all in there.
There are many other places where things need to be changed to be within
the spirit of the requirement.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] RHEL 6.1 beta

[Kenneth Porter]

Some interesting developments coming:



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Les Mikesell]

On 4/29/2011 3:08 PM, Johnny Hughes wrote:
>
> But, legally, yes, someone COULD distribute some of the RH files.

I thought these days you couldn't get the binaries in the first place 
without also getting a support contract where the terms you agree to say 
you can only install on the licensed machine.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] I have RHel6. How does that turn into Centos 6?

[Johnny Hughes]

On 04/29/2011 03:16 PM, Les Mikesell wrote:
> On 4/29/2011 3:08 PM, Johnny Hughes wrote:
>>
>> But, legally, yes, someone COULD distribute some of the RH files.
> 
> I thought these days you couldn't get the binaries in the first place 
> without also getting a support contract where the terms you agree to say 
> you can only install on the licensed machine.
> 
Installing and distributing are 2 different things.

NOW ... people USING those distributed files would have issues.

If you have ANY upstream licensed products, you would not be able to use
any files that were made by upstream and signed by them (regardless of
who distributed them to you) and still meet your agreement.

You can, of course, use CentOS and not have that problem.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] qemu-kvm update from 0.12.5 to 0.14 on centos 5.6

[Jerry Geis]

Hi all

I just update the package above. on 0.12 my qemu window opened on my X 
server as a window.
Now it starting in a VNC session.

How do I get it back to opening in a window on the X screen as the default?

Thanks,

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Setting up a GUI remote access

[Rajagopal Swaminathan]

Greetings,

Just followw Akemi. :)

Regarw,

Rajagopal

On 4/30/11, Les Mikesell  wrote:
> On 4/29/2011 10:57 AM, Todd Cary wrote:
>
>>> First, why would you disable key authentication?  Or is it just failing
>>> because you don't have the right key?
>> When I read the wiki (http://wiki.centos.org/HowTos/FreeNX), it states
>>
>> Note: If you have disallowed ssh password authentication (which is
>> advised but not mandatory), you need to follow the instructions here.
>> Otherwise you can skip this section.
>>
>> I checked the ssh configuration file and ssh password authentication is
>> enabled. My Centos 5.5 is an Out of the Box installation, so this
>> setting was not done by me - at least not directly. So my thinking
>> was/is that I could just skip the rest of that part of the setup.
>>
>> Confused
>
> Enabling password authentication (the default) does not disable key
> authentication (also enabled by default).  The client offers the key if
> it has one.  If it doesn't, or if the the key fails, a later step
> prompts for a password.
>
> A quick check for basic key authentication would be to cd to
> /etc/nxserver and:
> ssh -i client.id_dsa.key nx@localhost
> You'll get the usual host key warning the first time but after
> responding 'yes' you should get a 'HELLO NXSERVER' prompt.  Type 'exit'
> to disconnect.  If that works, the NX client should too once the key is
> installed correctly.
>
> --
>Les Mikesell
> lesmikes...@gmail.com
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
Regards,

Rajagopal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] qemu-kvm update from 0.12.5 to 0.14 on centos 5.6

[Rajagopal Swaminathan]

Plz rfr to othr lis
t


On 4/30/11, Jerry Geis  wrote:
> Hi all
>
> I just update the package above. on 0.12 my qemu window opened on my X
> server as a window.
> Now it starting in a VNC session.
>
> How do I get it back to opening in a window on the X screen as the default?
>
> Thanks,
>
> Jerry
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
Regards,

Rajagopal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] how to access lvm inside lvm

[Peter Peltonen]

I have a centos 5.6 server that has xen domUs installed on their on
logical volumes. These logical volumes contain their own volume groups
and again their own logical volumes. I want to access the domU logical
volumes and tried this:

[root@kr ~]# fdisk -l /dev/VolGroup00/LogVol02

Disk /dev/VolGroup00/LogVol02: 274.8 GB, 274877906944 bytes
255 heads, 63 sectors/track, 33418 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Device Boot  Start End  Blocks   Id  System
/dev/VolGroup00/LogVol02p1   *   1  13  104391   83  Linux
/dev/VolGroup00/LogVol02p2  14   16709   134110620
8e  Linux LVM

[root@kr ~]# kpartx -a /dev/VolGroup00/LogVol02
[root@kr ~]# ls -l /dev/mapper/
total 0
crw--- 1 root root  10, 62 Apr 26 02:19 control
brw-rw 1 root disk 253, 12 Apr 30 00:45 LogVol02p1
brw-rw 1 root disk 253, 13 Apr 30 00:45 LogVol02p2

But when I try make the domU volumegroup accessible I run into problems:

[root@kr ~]# vgscan
  Reading all physical volumes.  This may take a while...
  WARNING: Duplicate VG name VolGroup00: Existing
hxNFYw-c1Z6-DB99-SiiK-yRas-eXiI-1w27Z0 (created here) takes precedence
over KmwQTQ-jT19-lvvu-H6d0-i4T3-s5Jw-JHnx0M
  WARNING: Duplicate VG name VolGroup00: Existing
hxNFYw-c1Z6-DB99-SiiK-yRas-eXiI-1w27Z0 (created here) takes precedence
over KmwQTQ-jT19-lvvu-H6d0-i4T3-s5Jw-JHnx0M
  Found volume group "VolGroup00" using metadata type lvm2
  Found volume group "VolGroup00" using metadata type lvm2

How can I now vgchange to the domU volume group as vgchange does not
take the UUID as an argument, just the volume group name...?

Regards,
Peter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to access lvm inside lvm

[Ross Walker]

On Apr 29, 2011, at 6:05 PM, Peter Peltonen  wrote:

> I have a centos 5.6 server that has xen domUs installed on their on
> logical volumes. These logical volumes contain their own volume groups
> and again their own logical volumes. I want to access the domU logical
> volumes and tried this:
> 
> [root@kr ~]# fdisk -l /dev/VolGroup00/LogVol02
> 
> Disk /dev/VolGroup00/LogVol02: 274.8 GB, 274877906944 bytes
> 255 heads, 63 sectors/track, 33418 cylinders
> Units = cylinders of 16065 * 512 = 8225280 bytes
> 
>Device Boot  Start End  Blocks   Id  System
> /dev/VolGroup00/LogVol02p1   *   1  13  104391   83  Linux
> /dev/VolGroup00/LogVol02p2  14   16709   134110620
> 8e  Linux LVM
> 
> [root@kr ~]# kpartx -a /dev/VolGroup00/LogVol02
> [root@kr ~]# ls -l /dev/mapper/
> total 0
> crw--- 1 root root  10, 62 Apr 26 02:19 control
> brw-rw 1 root disk 253, 12 Apr 30 00:45 LogVol02p1
> brw-rw 1 root disk 253, 13 Apr 30 00:45 LogVol02p2
> 
> But when I try make the domU volumegroup accessible I run into problems:
> 
> [root@kr ~]# vgscan
>  Reading all physical volumes.  This may take a while...
>  WARNING: Duplicate VG name VolGroup00: Existing
> hxNFYw-c1Z6-DB99-SiiK-yRas-eXiI-1w27Z0 (created here) takes precedence
> over KmwQTQ-jT19-lvvu-H6d0-i4T3-s5Jw-JHnx0M
>  WARNING: Duplicate VG name VolGroup00: Existing
> hxNFYw-c1Z6-DB99-SiiK-yRas-eXiI-1w27Z0 (created here) takes precedence
> over KmwQTQ-jT19-lvvu-H6d0-i4T3-s5Jw-JHnx0M
>  Found volume group "VolGroup00" using metadata type lvm2
>  Found volume group "VolGroup00" using metadata type lvm2
> 
> How can I now vgchange to the domU volume group as vgchange does not
> take the UUID as an argument, just the volume group name...?

That's why I use hostnames instead of generic volume group names.

You could vgrename the volume, but the domU won't boot afterwards unless you 
rename it back and I don't know if it will let you if the vg name already 
exists.

LVM should really use the UUID if the vg name collides or allow it to be 
imported under a different name temporarily.

You could rename your system vg and of course change fstab to match and remake 
the initrd, then you would be able to load one domU vg at a time.

-Ross

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to access lvm inside lvm

[John R Pierce]

On 04/29/11 3:05 PM, Peter Peltonen wrote:
> I have a centos 5.6 server that has xen domUs installed on their on
> logical volumes. These logical volumes contain their own volume groups
> and again their own logical volumes. I want to
> ...


ugh, and double ugh.   this violates the KISS 'keep it super simple' 
principle, and I can only see the extra layers of complexity leading to 
more frustration.

I would instead run LVM only on dom0, and have your domU's creating file 
systems directly on the virtual devices mapped to said LVs.   if you 
need to grow a file system, you resize the LV from dom0, and then growfs 
in the domU


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] mod_ssl?

[Les Mikesell]

I just noticed that the mod_ssl package was missing on a 5.x machine 
that I thought was approximately like several other that have it - and 
don't remember doing anything different.  Is there some yum group that 
would install httpd without including it?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] mod_ssl?

[R P Herrold]

On Fri, 29 Apr 2011, Les Mikesell wrote:

> I just noticed that the mod_ssl package was missing on a 5.x machine
> that I thought was approximately like several other that have it - and
> don't remember doing anything different.  Is there some yum group that
> would install httpd without including it?

The httpd, by itself, does not have a Requires that pulls in 
mod_ssl all times


[herrold@centos-5 ~]$ rpm -q -R mod_ssl
/bin/cat
/bin/sh
config(mod_ssl) = 1:2.2.15-1orc.1
httpd
httpd = 0:2.2.15-1orc.1
httpd-mmn = 20051115
libc.so.6()(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.3.4)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libcrypto.so.6()(64bit)
libdistcache.so.1()(64bit)
libdl.so.2()(64bit)
libnal.so.1()(64bit)
libnsl.so.1()(64bit)
libpthread.so.0()(64bit)
libssl.so.6()(64bit)
libz.so.1()(64bit)
openssl >= 0.9.7f-4
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rtld(GNU_HASH)

[herrold@centos-5 ~]$ rpm -q -R httpd
/bin/bash
/bin/sh
/bin/sh
/bin/sh
/bin/sh
/bin/sh
/etc/mime.types
/usr/sbin/useradd
apr-util-ldap
chkconfig
config(httpd) = 2.2.15-1orc.1
httpd-tools = 2.2.15-1orc.1
initscripts >= 8.36
libapr-1.so.0()(64bit)
libaprutil-1.so.0()(64bit)
libc.so.6()(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.3)(64bit)
libc.so.6(GLIBC_2.3.4)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libcrypt.so.1()(64bit)
libdb-4.3.so()(64bit)
libdl.so.2()(64bit)
libexpat.so.0()(64bit)
liblber-2.3.so.0()(64bit)
libldap-2.3.so.0()(64bit)
libm.so.6()(64bit)
libpcre.so.0()(64bit)
libpthread.so.0()(64bit)
libpthread.so.0(GLIBC_2.2.5)(64bit)
libselinux.so.1()(64bit)
libz.so.1()(64bit)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(VersionedDependencies) <= 3.0.3-1
rtld(GNU_HASH)
system-logos >= 7.92.1-1
[herrold@centos-5 ~]$

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Switching to php53

[Dave Cross]

I have a Centos 5.6 server which is using the default php packages.
These currently contain PHP 5.1.6.

My main use of PHP on the server is to support an installation of
WordPress. I currently had WP 3.1.2 installed, but the WP developers
have announced that from WP 3.2 they will only support PHP 5. and
greater.

So I investigated and found that the Centos repo contains a series of
php53 packages. I tried to install php53 using yum but got the
following error:

  Resolving Dependencies
  --> Running transaction check
  ---> Package php53.x86_64 0:5.3.3-1.el5_6.1 set to be updated
  --> Processing Dependency: php53-cli = 5.3.3-1.el5_6.1 for package: php53
  --> Processing Dependency: php53-common = 5.3.3-1.el5_6.1 for package: php53
  --> Running transaction check
  ---> Package php53-cli.x86_64 0:5.3.3-1.el5_6.1 set to be updated
  ---> Package php53-common.x86_64 0:5.3.3-1.el5_6.1 set to be updated
  --> Processing Conflict: php53-common conflicts php-common
  --> Finished Dependency Resolution
  php53-common-5.3.3-1.el5_6.1.x86_64 from updates has depsolving problems
--> php53-common conflicts with php-common
  Error: php53-common conflicts with php-common
   You could try using --skip-broken to work around the problem
   You could try running: package-cleanup --problems
  package-cleanup --dupes
  rpm -Va --nofiles --nodigest

I would have thought that the new php53-common package would have
obsoleted php-common rather than conflicting with it.

Is there a clean way to replace php with php53? Or should I just wait
and hope that Centos 6 is released before WP 3.2 :)

Thanks,

Dave...

-- 
Dave Cross :: d...@dave.org.uk
http://dave.org.uk/
@davorg
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Switching to php53

[Eero Volotinen]

2011/4/30 Dave Cross :
> I have a Centos 5.6 server which is using the default php packages.
> These currently contain PHP 5.1.6.
>
> My main use of PHP on the server is to support an installation of
> WordPress. I currently had WP 3.1.2 installed, but the WP developers
> have announced that from WP 3.2 they will only support PHP 5. and
> greater.
>
> So I investigated and found that the Centos repo contains a series of
> php53 packages. I tried to install php53 using yum but got the
> following error:
>
>  Resolving Dependencies
>  --> Running transaction check
>  ---> Package php53.x86_64 0:5.3.3-1.el5_6.1 set to be updated
>  --> Processing Dependency: php53-cli = 5.3.3-1.el5_6.1 for package: php53
>  --> Processing Dependency: php53-common = 5.3.3-1.el5_6.1 for package: php53
>  --> Running transaction check
>  ---> Package php53-cli.x86_64 0:5.3.3-1.el5_6.1 set to be updated
>  ---> Package php53-common.x86_64 0:5.3.3-1.el5_6.1 set to be updated
>  --> Processing Conflict: php53-common conflicts php-common
>  --> Finished Dependency Resolution
>  php53-common-5.3.3-1.el5_6.1.x86_64 from updates has depsolving problems
>    --> php53-common conflicts with php-common
>  Error: php53-common conflicts with php-common
>   You could try using --skip-broken to work around the problem
>   You could try running: package-cleanup --problems
>                          package-cleanup --dupes
>                          rpm -Va --nofiles --nodigest
>
> I would have thought that the new php53-common package would have
> obsoleted php-common rather than conflicting with it.
>
> Is there a clean way to replace php with php53? Or should I just wait
> and hope that Centos 6 is released before WP 3.2 :)

just remove php and php-common

yum remove php php-common

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos