Re: [CentOS] installing centos 6 on an old bird

2012-07-12 Thread Tim Dunphy
>What if you symlink the shared nfs dir to /var/www/html/somedir and try
>the http protocol?  May help?

Already tried using http, and got the same result. I don't think,
therefore, that the method of install is the problem at all. I think there
may be some hardware compatibility problem with that (and possibly other)
component of SELinux.

>Rip all the RPM files from the DVD.  Then share that directory on NFS
>and install from that.  Leave out the problematic RPMs from the directory.

That's precisely what I was thinking of doing. Just haven't got the chance
to do that yet. I'll be busy the next few days hopefully next week I can
try again.


> # Turn off SELinux.
> selinux --disabled

Might want to try that in addition to ripping out the RPMs, tho I'm not
sure doing both would be necessary.


Maybe it's the CPU that's having a problem with SELinux under CentOS 6?

Socket Designation: CPU2
Type: Central Processor
Family: Xeon
Manufacturer: GenuineIntel
ID: 29 0F 00 00 FF FB EB BF
Signature: Type 0, Family 15, Model 2, Stepping 9
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Xeon(TM)
Voltage: 1.6 V
External Clock: Unknown
Max Speed: 3500 MHz

Dunno.. but thanks for the advice! I look forward to my next attempt to
this. I'd really rather not have to buy new hardware just to run centos 6.
There are several libraries and packages that I need from 6 that I don't
feel like futzing with on 5 (python and some of it's tools like
python-virt-inst) immediately come to mind.


Thanks for your input guys!
Tim


On Thu, Jul 12, 2012 at 1:55 AM, Mogens Kjaer  wrote:

> On 07/12/2012 07:23 AM, Keith Roberts wrote:
> > In your kickstart file add this line: (this is for 5.x - not
> > tested it on 6.x yet)
> >
> > # Turn off SELinux.
> > selinux --disabled
>
> All the CentOS machines I've installed have had
> selinux set to disabled this way.
>
> However, the packet selinux-policy-targeted get's installed anyway.
>
> Mogens
>
> --
> Mogens Kjaer, m...@lemo.dk
> http://www.lemo.dk
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
GPG me!!

gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Fwd: Bug 800181: NFSv4 on RHEL 6.3 over six times slower than 5.8

2012-07-12 Thread Colin Simpson
I have tried the async option and that reverts to being as fast as
previously.

So I guess the choice is use the less safe async and get file creation
being quick or live with the slow down until a potentially new protocol
extension appears to help with this.

Colin


On Wed, 2012-07-11 at 15:16 -0700, David C. Miller wrote:
>
> - Original Message -
> > On Wed, Jul 11, 2012 at 11:29 AM, Colin Simpson
> >  wrote:
> > >
> > > But think yourself lucky, BTRFS on Fedora 16 was much worse. This
> > > was
> > > the time it took me to untar a vlc tarball.
> > >
> > > F16 to RHEL5 - 0m 28.170s
> > > F16 to F16 ext4 -  4m 12.450s
> > > F16 to F16 btrfs - 14m 31.252s
> > >
> > > A quick test seems to say this is better in F17 (3m7.240s on BTRFS
> > > but
> > > still looks like we are hitting NFSv4 issues for this but btrfs
> > > itself
> > > is better).
> >
> > I wonder if the real issue is that NFSv4 waits for a directory change
> > to sync to disk but linux wants to flush the whole disk cache before
> > saying the sync is complete.
> >
> > --
> >   Les Mikesell
> >  lesmikes...@gmail.com
>
> I think you are right that it is the forcing of the sync operation for all 
> writes in NFSv4 that is making it slow. I just tested on a server and client 
> both running RHEL 6.3. I exported a directory that had an old tar.gz of open 
> office 3.0 distribution for Linux. 175MB. Exported with the default of sync 
> option took 26 seconds to extract from the client mount. Exported with the 
> async option and the extraction only took 4 seconds. Just to be clear on what 
> I tested with. This is over 1GbE. The NFS server has an Intel Core i3-2125 
> CPU @ 3.3GHz, 16GB ram, NFS export directory is from a 22 drive Linux RAID6 
> connected via a SAS 6Gb/sec HBA. The client is a Intel Core 2 duo E8400 @ 
> 3GHz, 4GB ram.
>
> Mark,
>
> Have you tried using async in your export options yet? Any difference?
>
> David.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos





This email and any files transmitted with it are confidential and are intended 
solely for the use of the individual or entity to whom they are addressed. If 
you are not the original recipient or the person responsible for delivering the 
email to the intended recipient, be advised that you have received this email 
in error, and that any use, dissemination, forwarding, printing, or copying of 
this email is strictly prohibited. If you received this email in error, please 
immediately notify the sender and delete the original.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] AMD Opteron 1218 wrong CPU metrics in 6.3

2012-07-12 Thread Vlad K.

Hello all,

since upgrade to 6.3 (and kernel 2.6.32-279.x) it looks like only one 
core of the AMD Dualcore Opteron 1218 is functional. Reverting to 
previous kernel shows everything working as expected.

I've filed a bug report here after failing to figure out if it is just a 
configuration problem:

http://bugs.centos.org/view.php?id=5821

I can't find anything on the net that would explain where the problem 
is. /proc/cpuinfo shows two cores, but top and /proc/stat show basically 
one core working:

- top shows cpu0 idle constantly at 0%, and sporadic 100%sy or 50%sy 
50%us, which can't be right
- /proc/stat shows cpu0 idle and iowat at 0
- Munin CPU graph shows 200% available but metrics go only up to 100%
- mpstat -P ALL shows proper %idle for both cores, but still core0 gets 
either 100%sy or 50%sy 50%us sporadically.


I've also got this in the logs, possibly due to BIOS, and I don't know 
if it is related, I've seen it with 6.2 too.

Jul 11 20:44:57 app1 kernel: [Firmware Bug]: powernow-k8: No compatible 
ACPI _PSS objects found.
Jul 11 20:44:57 app1 kernel: [Firmware Bug]: powernow-k8: Try again with 
latest BIOS.


Any ideas what the possible cause could be or what can I do to figure 
this out? It's a rented server so I don't have the ability to toy with 
the BIOS.


Thanks.

-- 

.oO V Oo.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS6.2: installation at specific kernel level

2012-07-12 Thread Cal Sawyer
Hi, all

I have a number of machines that are out of sync with one another by
virtue of having done a yum update after a base 6.2 install at different
times (all were previous CentOS 5.3)  Consequently, systems are a mix of
2.6.32-220.7.1, 2.6.32-220.13.1 or 2.6.32-220.17.1.

So 2 questions: 
   -  Is it possible to perform a yum update (or another other kind of
update), specifying installation of, say, kernel 2.6.32-220.17.1 along
with the packages that were relevant at the time when 2.6.32-220.17.1
was current?
   -  Is it possible to capture and save for future installations the
current kernel rev and associated packages as exist in the repos today
and install as a "frozen-in-time" distribution?

thanks!

- c sawyer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centos 6 on an old bird

2012-07-12 Thread Lamar Owen
On Thursday, July 12, 2012 05:49:50 AM Tim Dunphy wrote:
> > # Turn off SELinux.
> > selinux --disabled
> 
> Might want to try that in addition to ripping out the RPMs, tho I'm not
> sure doing both would be necessary.

> Maybe it's the CPU that's having a problem with SELinux under CentOS 6?

Tim,

I think SELinux is a red herring in this case; I'm running upstream RHEL Server 
6.3 32-bit with SELinux in enforcing mode on an older Supermicro system 
(motherboard P4DP6, has a DVD-ROM CD-RW drive in it) with the following CPU:

Handle 0x0004, DMI type 4, 35 bytes
Processor Information
Socket Designation: CPU1
Type: Central Processor
Family: Xeon
Manufacturer: GenuineIntel
ID: 27 0F 00 00 FF FB EB BF
Signature: Type 0, Family 15, Model 2, Stepping 7
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Xeon(TM)
Voltage: 1.6 V
External Clock: Unknown
Max Speed: 3000 MHz
Current Speed: 2800 MHz
Status: Populated, Enabled
Upgrade: Other
L1 Cache Handle: 0x000B
L2 Cache Handle: 0x000C
L3 Cache Handle: Not Provided
Serial Number: Not Specified
Asset Tag: Not Specified
Part Number: Not Specified

Have you tried using the minimal install iso?  It will fit on a CD.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centos 6 on an old bird

2012-07-12 Thread Lars Hecking

> I think SELinux is a red herring in this case; I'm running upstream RHEL 
> Server 6.3 32-bit with SELinux in enforcing mode on an older Supermicro 
> system (motherboard P4DP6, has a DVD-ROM CD-RW drive in it) with the 
> following CPU:
 
 The problem with the selinux rpms is that they need copious amounts of RAM
 during installation. From my experience, a minimum of 0.75 to 1GB.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] php-pear missing from 5.8 (i386) metadata?

2012-07-12 Thread Leonard den Ottolander
Hi,

# yum install php-pear

No package php-pear available.
Nothing to do

This is on CentOS 5.8 (i386). The package is available for both archs on
the two mirrors I checked. I also tried a
# yum clean headers
# yum clean metadata
# yum clean dbcache
to no avail. Am I missing something or is it the metadata?

Regards,
Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6.2: installation at specific kernel level

2012-07-12 Thread Scott Silva
on 7/12/2012 7:08 AM Cal Sawyer spake the following:
> Hi, all
> 
> I have a number of machines that are out of sync with one another by
> virtue of having done a yum update after a base 6.2 install at different
> times (all were previous CentOS 5.3)  Consequently, systems are a mix of
> 2.6.32-220.7.1, 2.6.32-220.13.1 or 2.6.32-220.17.1.
> 
> So 2 questions: 
>-  Is it possible to perform a yum update (or another other kind of
> update), specifying installation of, say, kernel 2.6.32-220.17.1 along
> with the packages that were relevant at the time when 2.6.32-220.17.1
> was current?
>-  Is it possible to capture and save for future installations the
> current kernel rev and associated packages as exist in the repos today
> and install as a "frozen-in-time" distribution?
> 
> thanks!
> 
> - c sawyer
> 
Why? Old kernels have flaws... That is why a new one was released...



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 89, Issue 4

2012-07-12 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2012:1068 Important CentOS 6 openjpeg Update (Johnny Hughes)
   2. CEBA-2012:1071  CentOS 5 openldap Update (Johnny Hughes)
   3. CEBA-2012:1067  CentOS 6 389-ds-base Update (Johnny Hughes)
   4. CEBA-2012:1070  CentOS 6 pulseaudio Update (Johnny Hughes)
   5. CEBA-2012:1069  CentOS 6 openswan Update (Johnny Hughes)


--

Message: 1
Date: Wed, 11 Jul 2012 20:43:18 +
From: Johnny Hughes 
Subject: [CentOS-announce] CESA-2012:1068 Important CentOS 6 openjpeg
Update
To: centos-annou...@centos.org
Message-ID: <20120711204318.ga3...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2012:1068 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-1068.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 


i386:
e2b205d8c434f1bf8435acf92067904c24d61cbb5524ed6a2ece33accbcb5237  
openjpeg-1.3-8.el6_3.i686.rpm
97a1c11ed9e15e427fa2daf9e100a814b5a4defb00a44b0b3b1933f122e8cdea  
openjpeg-devel-1.3-8.el6_3.i686.rpm
b835b2d36e9926fbe00597c5d0a70a52b9a7db0110107a4b0f8fe8d88eda137b  
openjpeg-libs-1.3-8.el6_3.i686.rpm

x86_64:
3ce0d45db49b0b7a466a62074df9f7e19af15cf545a5ce6cfd14f4f7f394dd0d  
openjpeg-1.3-8.el6_3.x86_64.rpm
97a1c11ed9e15e427fa2daf9e100a814b5a4defb00a44b0b3b1933f122e8cdea  
openjpeg-devel-1.3-8.el6_3.i686.rpm
0f668bbc392096771274f5965340e5bc71b97e920fbb67dc7e43d667971ee953  
openjpeg-devel-1.3-8.el6_3.x86_64.rpm
b835b2d36e9926fbe00597c5d0a70a52b9a7db0110107a4b0f8fe8d88eda137b  
openjpeg-libs-1.3-8.el6_3.i686.rpm
9cfb3b5dcbaf3fd331642caf37a9b347eb937609ae3c03c24928aaa0299aaa6e  
openjpeg-libs-1.3-8.el6_3.x86_64.rpm

Source:
76654f1ad60a5fb41d975232408ff113ef5eeeb9dcc06921ccbd15f374de928f  
openjpeg-1.3-8.el6_3.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Thu, 12 Jul 2012 11:29:10 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2012:1071  CentOS 5 openldap Update
To: centos-annou...@centos.org
Message-ID: <20120712112910.ga13...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2012:1071 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1071.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
73e406d166b3e593553ae90f42282960b53ae035e61343b69d396e7b02fb1ac5  
compat-openldap-2.3.43_2.2.29-25.el5_8.1.i386.rpm
9ccecf7c37dde0760b98404afe1c1d91a086ae5599b90ac3fb9c1dafbd35890e  
openldap-2.3.43-25.el5_8.1.i386.rpm
f254de5769ca4abc2d2d9622ba8ffce629265adcfb89b70a71c74edaf716ccd4  
openldap-clients-2.3.43-25.el5_8.1.i386.rpm
4d88e1cc5f48fa41c091424967bad0a2a94a122d6287ead09325a83505f7710d  
openldap-devel-2.3.43-25.el5_8.1.i386.rpm
c254764348770c69ebc8cf425d231993316e4bad5ee29336e2d91ea0e070818d  
openldap-servers-2.3.43-25.el5_8.1.i386.rpm
da0082050d566e23a7b1fd1b35a1e2dfb46a33f867cf77b7fb9eef16aaa8f676  
openldap-servers-overlays-2.3.43-25.el5_8.1.i386.rpm
22bec7276bd2db9a8620fd81e3468a19cd7497b9f5eb1bc563df8a4043bc6ed5  
openldap-servers-sql-2.3.43-25.el5_8.1.i386.rpm

x86_64:
73e406d166b3e593553ae90f42282960b53ae035e61343b69d396e7b02fb1ac5  
compat-openldap-2.3.43_2.2.29-25.el5_8.1.i386.rpm
0c575d515bd02f04aa4c2c1de8fa9cdc5ce774382b14dd7d6333bca6a2e0575c  
compat-openldap-2.3.43_2.2.29-25.el5_8.1.x86_64.rpm
9ccecf7c37dde0760b98404afe1c1d91a086ae5599b90ac3fb9c1dafbd35890e  
openldap-2.3.43-25.el5_8.1.i386.rpm
1c0f012f0801f51d767eb3667ee774621ed828f5e52768af307b80267e5df450  
openldap-2.3.43-25.el5_8.1.x86_64.rpm
8b85bee5ff62577205aa4771239611bf2eb85d9f138e2f9bd43ab2d991a50f21  
openldap-clients-2.3.43-25.el5_8.1.x86_64.rpm
4d88e1cc5f48fa41c091424967bad0a2a94a122d6287ead09325a83505f7710d  
openldap-devel-2.3.43-25.el5_8.1.i386.rpm
ae3d3a88c49f701743e3aee4c9cffb298861e5aba01e32a25c3a39cb1483e259  
openldap-devel-2.3.43-25.el5_8.1.x86_64.rpm
7dc2fa78749322889ee44b1f77dd8cf49dec5d42817d89803d1cf8b59850cb82  
openldap-servers-2.3.43-25.el5_8.1.x86_64.rpm
12bdf2376102b3a374d8293b719bc80909961f4fa20b64d48e158ec206ca5061  
openldap-servers-overlays-2.3.43-25.el5_8.1.x86_64.rpm
866eb54e5ed58d5f0fe82136d81eee2b522f2fdac422329d26277d4a1f5ab777  
openldap-servers-sql-2.3.43-25.el5_8.1.x86_64.rpm

Source:
26fa3b8d387c94d

Re: [CentOS] CentOS6.2: installation at specific kernel level

2012-07-12 Thread m . roth
Scott Silva wrote:
> on 7/12/2012 7:08 AM Cal Sawyer spake the following:
>> Hi, all
>>
>> I have a number of machines that are out of sync with one another by
>> virtue of having done a yum update after a base 6.2 install at different
>> times (all were previous CentOS 5.3)  Consequently, systems are a mix of
>> 2.6.32-220.7.1, 2.6.32-220.13.1 or 2.6.32-220.17.1.
>>
>> So 2 questions:
>>-  Is it possible to perform a yum update (or another other kind of
>> update), specifying installation of, say, kernel 2.6.32-220.17.1 along
>> with the packages that were relevant at the time when 2.6.32-220.17.1
>> was current?
>>-  Is it possible to capture and save for future installations the
>> current kernel rev and associated packages as exist in the repos today
>> and install as a "frozen-in-time" distribution?
>>
> Why? Old kernels have flaws... That is why a new one was released...

a) production reasons and version control; if something becomes a show
stopper that wasn't found before going live, you need to roll back,
*easily* and *fast* to one known to work; or, on the obverse, if a problem
is discovered, you need to be able to go back and find where it started,
and what it affected (and lawyers could be involved in the latter).

b) because no matter how well you test, you'll likely miss something

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6.2: installation at specific kernel level

2012-07-12 Thread Les Mikesell
On Thu, Jul 12, 2012 at 10:37 AM, Scott Silva  wrote:
> >>-  Is it possible to capture and save for future installations the
>> current kernel rev and associated packages as exist in the repos today
>> and install as a "frozen-in-time" distribution?
>>
>> thanks!
>>
>>
> Why? Old kernels have flaws... That is why a new one was released...

The new one will have flaws too.  Just ones you don't know about yet.
That's why there will be another one released again soon.  Sometimes
you want to let someone else find the flaws first.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6.2: installation at specific kernel level

2012-07-12 Thread Tom Brown
Yes

Look at either spacewalk and cloning of channels at a point in time or pulp. 

thanks

On 12 Jul 2012, at 15:08, Cal Sawyer  wrote:

> Hi, all
> 
> I have a number of machines that are out of sync with one another by
> virtue of having done a yum update after a base 6.2 install at different
> times (all were previous CentOS 5.3)  Consequently, systems are a mix of
> 2.6.32-220.7.1, 2.6.32-220.13.1 or 2.6.32-220.17.1.
> 
> So 2 questions: 
>   -  Is it possible to perform a yum update (or another other kind of
> update), specifying installation of, say, kernel 2.6.32-220.17.1 along
> with the packages that were relevant at the time when 2.6.32-220.17.1
> was current?
>   -  Is it possible to capture and save for future installations the
> current kernel rev and associated packages as exist in the repos today
> and install as a "frozen-in-time" distribution?
> 
> thanks!
> 
> - c sawyer
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ssh port forwarding

2012-07-12 Thread Ski Dawg
Hello Everyone,

I am having a problem with setting up port forwarding from one of our local
CentOS machines to an AWS EC2 instance. We are wanting to make mysql
connections over an ssh tunnel.

In this case, lets say that hostA is our local machine, and hostB is the
Amazon EC2 instance. I have tried several different variations (that I have
found from google searching), including:
from hostA: ssh -L 2:hostB:3306 user@hostB
from hostA: ssh -L 2:localhost:3306 user@hostB
from hostA: ssh -L 2:hostB:3306 user@localhost

No matter which variation I have tried, in every case, it will actually
create an ssh connection to the hostB, and log me into hostB, giving me its
prompt. If I try the port (2) for the localhost (hostA) in another
terminal window, it doesn't allow the connection. netstat also doesn't show
port 2 to be opened on the local machine (hostA).

I have turned on AllowTcpForwarding on both the remote machine and the
local machine.

I have also made sure that port 2 is opened on both machine firewalls
(including the EC2 security group).

What am I doing incorrectly or missing?
--
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
 -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread We Are Here
At 18:20 12/07/2012, you wrote:

Hi Doug,

>I am having a problem with setting up port forwarding from one of our local
>CentOS machines to an AWS EC2 instance. We are wanting to make mysql
>connections over an ssh tunnel.
>
>In this case, lets say that hostA is our local machine, and hostB is the
>Amazon EC2 instance. I have tried several different variations (that I have
>found from google searching), including:
>from hostA: ssh -L 2:hostB:3306 user@hostB
>from hostA: ssh -L 2:localhost:3306 user@hostB
>from hostA: ssh -L 2:hostB:3306 user@localhost
On HostA run the following within a screen session;

ssh user@hostB -L 2:127.0.0.1:3306

Hope this helps.

regards Tim
Tim D'Cruz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread Joseph Spenner


 From: Ski Dawg 
To: CentOS mailing list  
Sent: Thursday, July 12, 2012 10:20 AM
Subject: [CentOS] ssh port forwarding
 
We are wanting to make mysql connections over an ssh tunnel.

In this case, lets say that hostA is our local machine, and hostB is the
Amazon EC2 instance. I have tried several different variations (that I have
found from google searching), including:
from hostA: ssh -L 2:hostB:3306 user@hostB
from hostA: ssh -L 2:localhost:3306 user@hostB
from hostA: ssh -L 2:hostB:3306 user@localhost


--
Doug

==

Doug:
  Depending on how the mysql is bound on hostB, either variation 1 or 2 should 
work. Variation 3 doesn't look very useful, since it implies hostA can already 
access tcp/3306 on hostB.
  After you build the port forwards, and open another terminal on HostA, and do:

$ telnet localhost 2

What does it do?

Also, just to verify, if you're on hostB and do:

$ telnet localhost 3306

Does it 'connect' to a tcp port?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centos 6 on an old bird

2012-07-12 Thread Lamar Owen
On Thursday, July 12, 2012 11:16:23 AM Lars Hecking wrote:
> 
> > I think SELinux is a red herring in this case; I'm running upstream RHEL 
> > Server 6.3 32-bit with SELinux in enforcing mode on an older Supermicro 
> > system (motherboard P4DP6, has a DVD-ROM CD-RW drive in it) with the 
> > following CPU:
>  
>  The problem with the selinux rpms is that they need copious amounts of RAM
>  during installation. From my experience, a minimum of 0.75 to 1GB.

Tim didn't detail the amount of RAM he had (to the best of my recollection) but 
my machine of that same age has 4GB, so RAM wasn't an issue here, at least not 
for the selinux piece.

But that's a good data point, and really should be addressed as part of the 
system requirements for upstream actually, 1GB is the recommended minimum 
RAM on a 32 bit system by upstream.

Most of my 32-bit Xeons here have 1.5GB or more RAM, and most Xeons from that 
timeframe would have shipped with 1GB minimum (I don't think my lowest end 
Xeon, a Dell PE1600SC, was even available at the time with less than 1GB).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread Ski Dawg
On Thu, Jul 12, 2012 at 11:30 AM, We Are Here  wrote:

> At 18:20 12/07/2012, you wrote:
>
> Hi Doug,
>
> >I am having a problem with setting up port forwarding from one of our
> local
> >CentOS machines to an AWS EC2 instance. We are wanting to make mysql
> >connections over an ssh tunnel.
> >
> >In this case, lets say that hostA is our local machine, and hostB is the
> >Amazon EC2 instance. I have tried several different variations (that I
> have
> >found from google searching), including:
> >from hostA: ssh -L 2:hostB:3306 user@hostB
> >from hostA: ssh -L 2:localhost:3306 user@hostB
> >from hostA: ssh -L 2:hostB:3306 user@localhost
> On HostA run the following within a screen session;
>
> ssh user@hostB -L 2:127.0.0.1:3306


Thanks for the feedback Tim.

Using your string, I can now telnet to port 2 on localhost (hostA) and
I get the mysql connection string (from hostB), but it is not able to make
a mysql connection (using mysql -u user -p -h localhost --port=2 from
hostA), with a test user that I set up to allow connections from anywhere.
The error that I am getting is:
ERROR 2002 (HY000): Can't connect to local MySQL server through socket
'/var/lib/mysql/mysql.sock' (2)

I did test and the mysql test user that I created is able to connect from
hostB.

Why I can telnet to the port and get to mysql on hostB, but I can't create
the mysql connection to that port?

Also, when I do this, it still opens up an ssh session, logging me into the
remote machine, thus making it so I can't use this terminal.

The eventual goal is to do this in a script, that will open the connection,
use it for the duration of the script, and then close it when the script
finishes, but it looks like that won't work, since it is logging me into
the remote machine. I guess I could get around that by always leaving the
screen session going with the connection, but I would prefer only creating
the connection when I need it.

Any ideas how to do this without leaving the connection open all the time?
--
Doug

Registered Linux User #285548 (http://counter.li.org)

Never trust a computer you can't throw out a window.
 -- Steve Wozniak
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centos 6 on an old bird

2012-07-12 Thread Stephen Harris
On Thu, Jul 12, 2012 at 02:04:40PM -0400, Lamar Owen wrote:
> On Thursday, July 12, 2012 11:16:23 AM Lars Hecking wrote:
> >  The problem with the selinux rpms is that they need copious amounts of RAM
> >  during installation. From my experience, a minimum of 0.75 to 1GB.

> But that's a good data point, and really should be addressed as part of the 
> system requirements for upstream actually, 1GB is the recommended minimum 
> RAM on a 32 bit system by upstream.

Would a minimal kickstart file do?  This is mine, which I use to build
small VMS (4Gb disk, 512Mb RAM)

  install
  url --url http://repo/CentOS/DVD/CentOS-6
  text
  reboot

  lang en_US.UTF-8
  keyboard us

  network --onboot yes --device eth0 --bootproto dhcp --ipv6 auto

  rootpw  --iscrypted yeahyeahyeah
  authconfig --enableshadow --passalgo=sha512

  firewall --disabled
  selinux --disabled

  timezone --utc America/New_York

  zerombr yes
  clearpart --all --initlabel
  part /boot --fstype=ext4 --asprimary --size=100
  part swap --asprimary --size=512
  part / --fstype=ext4 --asprimary --grow --size=1
  bootloader --location=mbr --driveorder=vda --append=" crashkernel=auto quiet"

  repo --name="CentOS"  --baseurl=http://repo/CentOS/DVD/CentOS-6 --cost=100
  repo --name="Updates" --baseurl=http://repo/CentOS/updates/centos6/x86_64 
--cost=500

  %packages --nobase
  @core
  yum
  openssh-server
  openssh-clients
  ksh
  dos2unix
  ntp-perl
  logwatch
  wget
  acpid
  yum-plugin-priorities
  bind-utils
  -checkpolicy
  -policycoreutils
  -selinux-policy
  -selinux-policy-targeted
  -efibootmgr
  -kernel-firmware
  -aic94xx-firmware
  -atmel-firmware
  -b43-openfwwf
  -bfa-firmware
  -ipw2100-firmware
  -ipw2200-firmware
  -ivtv-firmware
  -iwl100-firmware
  -iwl1000-firmware
  -iwl3945-firmware
  -iwl4965-firmware
  -iwl5000-firmware
  -iwl5150-firmware
  -iwl6000-firmware
  -iwl6000g2a-firmware
  -iwl6000g2b-firmware
  -iwl6050-firmware
  -libertas-usb8388-firmware
  -netxen-firmware
  -ql2100-firmware
  -ql2200-firmware
  -ql23xx-firmware
  -ql2400-firmware
  -ql2500-firmware
  -rt61pci-firmware
  -rt73usb-firmware
  -xorg-x11-drv-ati-firmware
  -zd1211-firmware

  %post
  %end

-- 

rgds
Stephen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread m . roth
Ski Dawg wrote:
> On Thu, Jul 12, 2012 at 11:30 AM, We Are Here 
> wrote:
>> At 18:20 12/07/2012, you wrote:
>
>> >I am having a problem with setting up port forwarding from one of our
>> local CentOS machines to an AWS EC2 instance. We are wanting to make mysql
>> >connections over an ssh tunnel.
>> >
>> >In this case, lets say that hostA is our local machine, and hostB is
>> the Amazon EC2 instance. I have tried several different variations (that I
>> have found from google searching), including:
>> >from hostA: ssh -L 2:hostB:3306 user@hostB
>> >from hostA: ssh -L 2:localhost:3306 user@hostB
>> >from hostA: ssh -L 2:hostB:3306 user@localhost
>> On HostA run the following within a screen session;
>>
>> ssh user@hostB -L 2:127.0.0.1:3306
>
> Using your string, I can now telnet to port 2 on localhost (hostA) and
> I get the mysql connection string (from hostB), but it is not able to make
> a mysql connection (using mysql -u user -p -h localhost --port=2 from
> hostA), with a test user that I set up to allow connections from anywhere.
> The error that I am getting is:
> ERROR 2002 (HY000): Can't connect to local MySQL server through socket
> '/var/lib/mysql/mysql.sock' (2)
>
> I did test and the mysql test user that I created is able to connect from
> hostB.

Ah! What's your iptables look like? Is that opened to come in?

mark


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Help Installing Codeblocks on Centos 6.4

2012-07-12 Thread Patrick Kongawi
To whom this may concern

I have read the read me file provided by the OS.  I followed the
directions but I can not install Codeblocks from source code.  The
terminal tells me that the files are not in my home folder.  Whe I
check I see the folders.  I don't know what to do.

Thank you for your time.

Sincerley

Patrick Kongawi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help Installing Codeblocks on Centos 6.4

2012-07-12 Thread m . roth
Patrick Kongawi wrote:
> To whom this may concern
>
> I have read the read me file provided by the OS.  I followed the
> directions but I can not install Codeblocks from source code.  The
> terminal tells me that the files are not in my home folder.  Whe I
> check I see the folders.  I don't know what to do.
>
a) Should I assume you mean Code::Blocks? If so, thanks, I hadn't heard of
it.
 Do you know if it requires less than that monster of bloat, eclipse?
b) Are you trying to install it in userspace, or system? If the latter,
   are you doing this as root or sudo?
c) How comfortable are you in *Nix? Are you pointing to ./, or did you cd
   into the created directory, and then did you do ./configure, which I
   assume they use?
d) The terminal didn't tell you anything. The program you were running told
   you something. What was it, *exactly*, and *exactly* what was the
   command you were running?

   mark



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] php-pear missing from 5.8 (i386) metadata?

2012-07-12 Thread m . roth
Leonard den Ottolander wrote:
> Hi,
>
> # yum install php-pear
> 
> No package php-pear available.
> Nothing to do
>
> This is on CentOS 5.8 (i386). The package is available for both archs on
> the two mirrors I checked. I also tried a
> # yum clean headers
> # yum clean metadata
> # yum clean dbcache
> to no avail. Am I missing something or is it the metadata?

yum list \*pear\* | wc -l results in 111. Piping it through more...
perhaps you want php-pear.noarch?

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread Ski Dawg
On Thu, Jul 12, 2012 at 12:20 PM, Reindl Harald wrote:

>
>
> Am 12.07.2012 20:15, schrieb Ski Dawg:
> > Using your string, I can now telnet to port 2 on localhost (hostA)
> and
> > I get the mysql connection string (from hostB), but it is not able to
> make
> > a mysql connection (using mysql -u user -p -h localhost --port=2 from
> > hostA), with a test user that I set up to allow connections from
> anywhere.
> > The error that I am getting is:
> > ERROR 2002 (HY000): Can't connect to local MySQL server through socket
> > '/var/lib/mysql/mysql.sock' (2)
>
> learn mysql-basics!
>
> localhost is ALWAYS unix-socket
> the error message is really clear!
>
> use 127.0.0.1 if you want to use TCP which is what happens
> with port-forwarding!
>
>
Thanks. This worked. I have not ever run across this issue before, so I
didn't know that using localhost tied mysql to only a socket connection,
but now I do.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help Installing Codeblocks on Centos 6.4

2012-07-12 Thread Nux!
On 12.07.2012 19:32, Patrick Kongawi wrote:
> To whom this may concern
>
> I have read the read me file provided by the OS.  I followed the
> directions but I can not install Codeblocks from source code.  The
> terminal tells me that the files are not in my home folder.  Whe I
> check I see the folders.  I don't know what to do.
>
> Thank you for your time.
>
> Sincerley
>
> Patrick Kongawi
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

Hello, Codeblocks is in EPEL repo.

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] php-pear missing from 5.8 (i386) metadata?

2012-07-12 Thread Johnny Hughes
On 07/12/2012 10:32 AM, Leonard den Ottolander wrote:
> Hi,
>
> # yum install php-pear
> 
> No package php-pear available.
> Nothing to do
>
> This is on CentOS 5.8 (i386). The package is available for both archs on
> the two mirrors I checked. I also tried a
> # yum clean headers
> # yum clean metadata
> # yum clean dbcache
> to no avail. Am I missing something or is it the metadata?

[hughesjr@localhost ~]$ yum list php-pear



Available Packages
php-pear.noarch 
1:1.4.9-8.el5  base



http://mirror.centos.org/centos/5.8/os/i386/CentOS/php-pear-1.4.9-8.el5.noarch.rpm



Something is broken about your configuration.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] php-pear missing from 5.8 (i386) metadata?

2012-07-12 Thread Leonard den Ottolander
Hi Johnny,

On Thu, 2012-07-12 at 14:09 -0500, Johnny Hughes wrote:
> Something is broken about your configuration.

Hahaha! It's been a while since I set up this system. There's an
exclude=php-pear in my repo config that I'd totally forgotten about. I
put it in to avoid an update to that package possibly blowing away hand
added PEAR packages.

Just today I decided to upgrade from php to php53 and removed all php*
packages before proceeding. Checked everything including the data files
in /var/cache/yum, no mention of pear there either. What I did not check
was my repo config. Doh!

Thank you for putting me straight and sorry for the fuzz. At least I
learned that an exclude in the repo config not only filters the package
on yum execution, it completely filters it from the local cached
metadata which I grepped.

If you missed my previous post, thank you and the rest of the team very
much for yet another fine release!

Regards,
Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread We Are Here
At 19:15 12/07/2012, you wrote:

Hi Doug,

>Thanks for the feedback Tim.
Glad I could help.

>Using your string, I can now telnet to port 2 on localhost (hostA) and
>I get the mysql connection string (from hostB), but it is not able to make
>a mysql connection (using mysql -u user -p -h localhost --port=2 from
>hostA), with a test user that I set up to allow connections from anywhere.
>The error that I am getting is:
>ERROR 2002 (HY000): Can't connect to local MySQL server through socket
>'/var/lib/mysql/mysql.sock' (2)
>
>I did test and the mysql test user that I created is able to connect from
>hostB.
Because the mysql connection is via an ssh tunnel, you need to ensure 
on the MySQL server hostB
that is allows the mysql user access from 127.0.0.1 on hostB as that 
is effectively where the MySQL
server on hostB sees the connection coming from.

>Also, when I do this, it still opens up an ssh session, logging me into the
>remote machine, thus making it so I can't use this terminal.
Yes you need to run it is a screen session if you want it permanently 
connected.

>The eventual goal is to do this in a script, that will open the connection,
>use it for the duration of the script, and then close it when the script
>finishes, but it looks like that won't work, since it is logging me into
>the remote machine. I guess I could get around that by always leaving the
>screen session going with the connection, but I would prefer only creating
>the connection when I need it.
>
>Any ideas how to do this without leaving the connection open all the time?
I have used an expect script to do this in the past.  Which allows 
you to remotely log in to a server.
Downside is you need to store the password in plain text in the 
expect script.  So make sure only
root can read the script.  Or setup a lower privilege user to use 
sudo and do it that way.

regards Tim
Tim D'Cruz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread SilverTip257
Doug,

It's also possible to send ssh to the background and also skip remote
commands (perfect for tunneling).

Options for ssh command:
-f  .. background
-N . skip remote commands

** Personally I'd look for a more robust tunnel/VPN alternative. **
1) OpenSSH tun/tap devices - but this should really be used for a
'one-off' quick tunnel => requires root to establish, so it's not
ideal for every situation! (think roadwarriors, etc)
2) OpenVPN - SSL VPN - software/application based - simpler to set up
as a result
3) OpenSWAN - IPSec VPN - hooks into the kernel (netkey or klips)

---~~.~~---
Mike
//  SilverTip257  //


On Thu, Jul 12, 2012 at 4:15 PM, We Are Here  wrote:
> At 19:15 12/07/2012, you wrote:
>
> Hi Doug,
>
>>Thanks for the feedback Tim.
> Glad I could help.
>
>>Using your string, I can now telnet to port 2 on localhost (hostA) and
>>I get the mysql connection string (from hostB), but it is not able to make
>>a mysql connection (using mysql -u user -p -h localhost --port=2 from
>>hostA), with a test user that I set up to allow connections from anywhere.
>>The error that I am getting is:
>>ERROR 2002 (HY000): Can't connect to local MySQL server through socket
>>'/var/lib/mysql/mysql.sock' (2)
>>
>>I did test and the mysql test user that I created is able to connect from
>>hostB.
> Because the mysql connection is via an ssh tunnel, you need to ensure
> on the MySQL server hostB
> that is allows the mysql user access from 127.0.0.1 on hostB as that
> is effectively where the MySQL
> server on hostB sees the connection coming from.
>
>>Also, when I do this, it still opens up an ssh session, logging me into the
>>remote machine, thus making it so I can't use this terminal.
> Yes you need to run it is a screen session if you want it permanently
> connected.
>
>>The eventual goal is to do this in a script, that will open the connection,
>>use it for the duration of the script, and then close it when the script
>>finishes, but it looks like that won't work, since it is logging me into
>>the remote machine. I guess I could get around that by always leaving the
>>screen session going with the connection, but I would prefer only creating
>>the connection when I need it.
>>
>>Any ideas how to do this without leaving the connection open all the time?
> I have used an expect script to do this in the past.  Which allows
> you to remotely log in to a server.
> Downside is you need to store the password in plain text in the
> expect script.  So make sure only
> root can read the script.  Or setup a lower privilege user to use
> sudo and do it that way.
>
> regards Tim
> Tim D'Cruz
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh port forwarding

2012-07-12 Thread Chris Geldenhuis
On 07/13/2012 03:45 AM, SilverTip257 wrote:
> Doug,
>
> It's also possible to send ssh to the background and also skip remote
> commands (perfect for tunneling).
>
> Options for ssh command:
> -f  .. background
> -N . skip remote commands
>
> ** Personally I'd look for a more robust tunnel/VPN alternative. **
> 1) OpenSSH tun/tap devices - but this should really be used for a
> 'one-off' quick tunnel =>  requires root to establish, so it's not
> ideal for every situation! (think roadwarriors, etc)
> 2) OpenVPN - SSL VPN - software/application based - simpler to set up
> as a result
> 3) OpenSWAN - IPSec VPN - hooks into the kernel (netkey or klips)
>
> ---~~.~~---
> Mike
> //  SilverTip257  //
>
>
> On Thu, Jul 12, 2012 at 4:15 PM, We Are Here  wrote:
>> At 19:15 12/07/2012, you wrote:
>>
>> Hi Doug,
>>
>>> Thanks for the feedback Tim.
>> Glad I could help.
>>
>>> Using your string, I can now telnet to port 2 on localhost (hostA) and
>>> I get the mysql connection string (from hostB), but it is not able to make
>>> a mysql connection (using mysql -u user -p -h localhost --port=2 from
>>> hostA), with a test user that I set up to allow connections from anywhere.
>>> The error that I am getting is:
>>> ERROR 2002 (HY000): Can't connect to local MySQL server through socket
>>> '/var/lib/mysql/mysql.sock' (2)
>>>
>>> I did test and the mysql test user that I created is able to connect from
>>> hostB.
>> Because the mysql connection is via an ssh tunnel, you need to ensure
>> on the MySQL server hostB
>> that is allows the mysql user access from 127.0.0.1 on hostB as that
>> is effectively where the MySQL
>> server on hostB sees the connection coming from.
>>
>>> Also, when I do this, it still opens up an ssh session, logging me into the
>>> remote machine, thus making it so I can't use this terminal.
>> Yes you need to run it is a screen session if you want it permanently
>> connected.
>>
>>> The eventual goal is to do this in a script, that will open the connection,
>>> use it for the duration of the script, and then close it when the script
>>> finishes, but it looks like that won't work, since it is logging me into
>>> the remote machine. I guess I could get around that by always leaving the
>>> screen session going with the connection, but I would prefer only creating
>>> the connection when I need it.
>>>
>>> Any ideas how to do this without leaving the connection open all the time?
>> I have used an expect script to do this in the past.  Which allows
>> you to remotely log in to a server.
>> Downside is you need to store the password in plain text in the
>> expect script.  So make sure only
>> root can read the script.  Or setup a lower privilege user to use
>> sudo and do it that way.
>>
>> regards Tim
>> Tim D'Cruz
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
Hi,

You can also set up ssh access using keys so that you do not need to 
enter a password when connecting.

Regards

ChrisG
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos