[CentOS] gdm doesnt work.

2014-12-08 Thread dE

Hi!

I just installed GDM on centos 7. I'm starting it by # gdm.

However, all I see is a text cursor (as with the TTYs), nothing else.

X works well. Logs have no errors.

GDM logs are a copy of X logs.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] gdm doesnt work.

2014-12-08 Thread dE

On 12/08/14 22:02, m.r...@5-cent.us wrote:

dE wrote:

Hi!

I just installed GDM on centos 7. I'm starting it by # gdm.

However, all I see is a text cursor (as with the TTYs), nothing else.

X works well. Logs have no errors.

GDM logs are a copy of X logs.

Are you at runlevel 5?

   mark



I tried isolate graphical.target also.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] gdm doesnt work.

2014-12-08 Thread dE

On 12/08/14 22:24, David Both wrote:

Try this:

/etc/systemd/system/display-manager.service -> 
/usr/lib/systemd/system/kdm.service


Only in your case it would be gdm.service.


On 12/08/2014 11:49 AM, dE wrote:

On 12/08/14 22:02, m.r...@5-cent.us wrote:

dE wrote:

Hi!

I just installed GDM on centos 7. I'm starting it by # gdm.

However, all I see is a text cursor (as with the TTYs), nothing else.

X works well. Logs have no errors.

GDM logs are a copy of X logs.

Are you at runlevel 5?

   mark



I tried isolate graphical.target also.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

--


*
David P. Both, RHCE
Millennium Technology Consulting LLC
Raleigh, NC, USA
919-389-8678

db...@millennium-technology.com

www.millennium-technology.com
www.databook.bz - Home of the DataBook for Linux
DataBook is a Registered Trademark of David Both
*
This communication may be unlawfully collected and stored by the 
National
Security Agency (NSA) in secret. The parties to this email do not 
consent to the
retrieving or storing of this communication and any related metadata, 
as well as
printing, copying, re-transmitting, disseminating, or otherwise using 
it. If you

believe you have received this communication in error, please delete it
immediately.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Yeah, it's the same thing.

Ok, I found gdm.service (which I missed previously).

Starting it gives the same problem.

Actually I changed to graphical.target as the default and put 
display-manager.service in graphical.target.wants, and it's giving the 
same problem.


I think this's a bug.

It's a fresh CentOS install, X works, gdm does not.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Anaconda: inst.repo doesn't work.

2015-02-04 Thread dE
Although you can choose this in the installer, isnt the provided values 
supposed to be the default?


I tired the following

inst.repo=hd:/dev/sdb1:/repo

Result: /dev/sdb1 is not mounted.

inst.repo=nfs:[fc00::6009]:/home/auser/repo

Result: NFS is not mounted even the correct ip is set by passing ip= 
parameters.


Of course I tested the NFS share using CentOS itself.

Thanks for any assistance!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Traditional network interface naming scheme vs. persistent naming

2015-02-04 Thread dE

On 02/04/15 22:53, Niki Kovacs wrote:

Hi,

I'm currently experimenting with CentOS 7 in order to get a grasp of 
everything that's new.


After having read the FAQ entry on network interface names, I decided 
to revert to the tradictional interface naming scheme by adding the 
relevant kernel options to the bootloader. This went well, I have now 
two interfaces names 'eth0' and 'eth1' as expected.


In my office I have another server with two network interface cards, 
running Slackware64 14.1. On a stock Slackware installation, as soon 
as there is more than one NIC, the system creates a file 
/etc/udev/rules.d/70-persistent-net.rules, which looks like this:


 # PCI device 0x8086:/sys/devices/pci:00/:00:02.0/:02:00.0 
(e1000e)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="2c:27:d7:15:54:a1", ATTR{dev_id}=="0x0", 
ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"


# PCI device 0x8086:/sys/devices/pci:00/:00:04.0/:03:00.0 
(e1000e)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="00:22:64:8a:4c:c2", ATTR{dev_id}=="0x0", 
ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"


Usually I have a 50 % chance of getting the network interface right 
(well, according to Murphy, I have more like a 100 % chance of getting 
it wrong the first time :oD). In that case, I simple edit the 
70-persistent-net.rules file, permutate the "eth0" and "eth1" entries 
and then reboot.


How would I go about that under CentOS with traditional interface 
names? The 70-persistent-net.rules file doesn't exist. Do I have to 
create it from scratch?


Cheers,

Niki Kovacs


Those are udev rules (which's now integrated with systemd in CentOS 7).

You don't have to create a new one, but you have to find the one. I 
suggest reading up on the udev rules file.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Anaconda: inst.repo doesn't work.

2015-02-05 Thread dE

On 02/05/15 16:41, Karanbir Singh wrote:

On 02/04/2015 04:06 PM, dE wrote:

Although you can choose this in the installer, isnt the provided values
supposed to be the default?

I tired the following

inst.repo=hd:/dev/sdb1:/repo

Result: /dev/sdb1 is not mounted.

inst.repo=nfs:[fc00::6009]:/home/auser/repo

Result: NFS is not mounted even the correct ip is set by passing ip=
parameters.

Of course I tested the NFS share using CentOS itself.

Thanks for any assistance!

you dont need to include this repo in the installer, its already there
by default.




What do you mean? How does CentOS know that I want to add my personal 
repo over an NFS share in my home directory?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] firewalld default policy = allow = no affect.

2015-02-12 Thread dE

Hi!

I'm running CentOS 7.

Looking at the default policies of various zones, I've come to realize 
that only the drop zone has an affect, that's because this's the only 
one which drops unmatched packets.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Teaming on qemu.

2015-02-16 Thread dE

Hi!

For testing purposes, I'm trying to setup teaming on my VM which runs 
CentOS 7. I've 2 gigabit NICs emulated which are connected to a tun 
device on the host.


I can ping to the tun device on the host when directly using the 
interface (of course when teaming is disabled), when using the team 
interface, I can't.


The team link is made as such --
teamd -f /etc/teamd.conf

Contents of teamd.conf --

{
"device" : "team0",
"runner" : {
"name" : "roundrobin"
},
"ports" : {
"enp0s3" : {},
"enp0s4" : {}
}

}
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firewalld default policy = allow = no affect.

2015-02-16 Thread dE

On 02/13/15 23:27, Gordon Messmer wrote:

On 02/12/2015 08:14 PM, dE wrote:
Looking at the default policies of various zones, I've come to 
realize that only the drop zone has an affect, that's because this's 
the only one which drops unmatched packets. 


I'm not sure what you mean, but most firewall sets for iptables follow 
the same pattern.  First, allow packets which are part of an 
established connection, or related to an established connection (such 
as an FTP data connection).  Next, allow new connections by local 
policy.  Finally, drop or reject everything else.


The first and last parts are fairly standard.  Some tools will set the 
policy to DROP, where firewalld instead terminates the rule set with a 
DROP for invalid packets and REJECT for the rest.


If your point is that the INPUT table policy doesn't have an effect, 
that is by design.  A DROP policy is not required, and it means that 
if a local admin resets the rule set in order to reload it, there 
won't be a moment where the POLICY is DROP and there are no ACCEPT 
rules, leaving the system potentially inaccessible.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


But firewalld has no affect. All ports are open.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] The future of centos

2015-04-04 Thread dE

On 04/04/15 07:16, Always Learning wrote:

On Fri, 2015-04-03 at 21:30 -0400, Digimer wrote:



If you and others believe this to be the case, then form an
organization and fork CentOS. Or, do as CentOS did in the beginning
and recompile the RHEL binaries to be binary-compatible and create
your own OS.

It is the open-source way, and I am not being sarcastic.

Then call it ROSIE, Red Hat Operating System Intentionally .  I need
a suitable word beginning with 'E'  :-)

Well, now everyone knows the future of Centos.



If you guys have that much of a problem with CentOS/RedHat 
collaboration, why not just move on things like Debian, arch, Suse etc...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Ifconfig ipv6:permission denied.

2014-09-07 Thread dE

Hi!

I installed CentOS 7 today, it's a minimal install, so it didn't have 
ifconfig command. So I installed net-tools, however I can't add ipv6 
address to it.


# ifconfig enp0s3 add fc00::1002/124
SIOCSIFADDR: Permission denied.

Yes, I'm running as root.

CentOS is running in a Qemu instance with e1000 ethernet card.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] flash plugin for centos 7

2014-09-08 Thread dE

On 09/08/14 21:09, Gergely Buday wrote:

Hi,

firefox does not play h.264 videos on centos 7 so I need a flash
plugin. But I see packages only for centos 6.x. What can I do?

- Gergely
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Actually it does. You need to enable gstreamer support in FF (after 
installing the correct GST plugins).


Then set media.gstreamer.enabled to true.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Canon PIXMA mg5420 or HP Photo Smart 7520

2014-09-08 Thread dE

On 09/09/14 04:36, ken wrote:
In need of a new printer, having done a bit or research, and 
considering either the Canon PIXMA mg5420  or the HP Photo Smart 7520.


There are Linux drivers for the Photosmart which are supposed to 
handle both the printer and the scanner.  But in my research I haven't 
found (yet) anyone who's gotten the scanner to work with Linux on the 
Photosmart, let alone the sheet feeder for it. Allegedly there are 
instructions and requirements for using the fax on Linux.  But I'd 
like to hear from someone who has actually gotten all of this working 
on Linux (either debian or centos) and which version of which distro 
is needed.


The Canon PIXMA mg5420 doesn't have a fax or a sheet feeder for its 
scanner, but I'm guessing it's even dodgier to get just its 
single-sheet flatbed scanner and its printer working with Linux. So 
has anyone had success with that?


I've also read horror stories about the how often new ink cartridges 
are required, that basically you pay for the printer a second and 
third time buying cartridges (not to mention how often a print job is 
interrupted by a trip to buy new cartridges).  Any first-hand reports 
on that?


Whoever thought spending money would be so tough?

Thanks for your knowledge and experience.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


HP has official Linux support.

We have a clear winner.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-08 Thread dE

On 09/07/14 14:03, Eero Volotinen wrote:

2014-09-07 11:24 GMT+03:00 dE :


Hi!

I installed CentOS 7 today, it's a minimal install, so it didn't have
ifconfig command. So I installed net-tools, however I can't add ipv6
address to it.

# ifconfig enp0s3 add fc00::1002/124
SIOCSIFADDR: Permission denied.´


try disabling ipv6 autoconfiguration from sysctl.conf ?

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Yeah, I set sys.net.ipv6.conf.all.accept_ra to 0. However Linux did not 
do any auto reconfiguration. There were no ipv6 address on it.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-08 Thread dE

On 09/07/14 21:20, Jim Perrin wrote:


On 09/07/2014 03:24 AM, dE wrote:

Hi!

I installed CentOS 7 today, it's a minimal install, so it didn't have
ifconfig command. So I installed net-tools, however I can't add ipv6
address to it.

The cool kids are all using 'ip' these days since ifconfig is deprecated.


# ifconfig enp0s3 add fc00::1002/124
SIOCSIFADDR: Permission denied.

Yes, I'm running as root.


Is the device under NetworkManager control (this is the default)?





Yeah, thanks for the heads up. net-tools got no updates since 3 years 
and iproute2 looks incredibly complicated (cause it has support for 
advanced routing and traffic management).


NetworkManager is not installed in the minimal centOS install.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Canon PIXMA mg5420 or HP Photo Smart 7520

2014-09-08 Thread dE

On 09/09/14 10:03, Brian Bernard wrote:

I have the HP Deskjet 3512 and use the HPLIP 3.14.3 Linux drivers from HP.

The printing works quite well, though I haven't got the scanner to work,
yet.

Brian Bernard
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


It should work according to HP.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7: firewalld.service operation time out - systemctl firewalld issues

2014-09-10 Thread dE

On 09/09/14 20:47, Aled Parry wrote:

I'm having a few issues with firewalld on a CentOS 7 install, in
particular when using systemctl to start/check the status of the
daemon:

Checking the firewalld daemon status
~~
# systemctl status firewalld
firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled)
Active: failed (Result: timeout) since Tue 2014-09-09 07:57:06 EDT;
2min 41s ago
  Main PID: 20212

Sep 09 07:55:35 centos.template.30kft systemd[1]: Starting firewalld -
dynamic firewall daemon...
Sep 09 07:57:05 centos.template.30kft systemd[1]: firewalld.service
operation timed out. Terminating.
Sep 09 07:57:06 centos.template.30kft systemd[1]: Failed to start
firewalld - dynamic firewall daemon.
Sep 09 07:57:06 centos.template.30kft systemd[1]: Unit
firewalld.service entered failed state.
~~

journalctl information from last trying to start it
~~
Sep 09 07:55:35 centos.template.30kft systemd[1]: Starting firewalld -
dynamic firewall daemon...
-- Subject: Unit firewalld.service has begun with start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel


Do you have any DNS names in your firewall rules?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SELinux alert on Centos 7 yum update

2014-09-10 Thread dE

On 09/10/14 10:10, Frank Cox wrote:

yum update
...
Updating:
  VirtualBox-4.3x86_64  4.3.16_95972_el7-1 virtualbox   69 M
  flash-plugin  x86_64  11.2.202.406-release   adobe-linux-x86_64  6.9 M
  libcacard x86_64  10:1.5.3-60.el7_0.7.0.1updates 182 k
  qemu-guest-agent  x86_64  10:1.5.3-60.el7_0.7.0.1updates 247 k

While this update is running I get a SELinux Alert window, with this content:

ldconfig write N/A 12 Notify
ldconfig read N/A 13 Notify
ldconfig write N/A 14 Notify

The numbers in the fourth column keep changing.

What does this mean?  Is there a problem that I should be solving?



I bet this has to do with troubleshootd (is it there in CentOS? I'm not 
sure but in Fedora 19 it was there).


Contents of /var/log/audit/audit.log will be more interesting.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-10 Thread dE

On 09/11/14 07:51, Marcelo Ricardo Leitner wrote:

Em 07-09-2014 05:24, dE escreveu:

Hi!

I installed CentOS 7 today, it's a minimal install, so it didn't have
ifconfig command. So I installed net-tools, however I can't add ipv6
address to it.

# ifconfig enp0s3 add fc00::1002/124
SIOCSIFADDR: Permission denied.

Yes, I'm running as root.

CentOS is running in a Qemu instance with e1000 ethernet card.


Almost the same setup here (!minimal install, but everything else 
similar) works..


What's the current output of ifconfig for this interface? Does it list 
any ipv6 addresses on it?


And could you try the ip command as suggested by Jim? In your case, 
it's just: ip -6 addr add dev enp0s3 fc00::1002/124


Marcelo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Ifconfig lists all interfaces normally. There's enp0s3 and lo. Both are 
up, and no, they've no ipv6 addresses (cannot assign them even using ifcfg).


ifcfg enp0s3 add fc00::1002/124 results in
arping: Unknown host fc00:1002
Error: some host already uses address fc00:1002 on enp0s3.

You know the last error message sounds ridiculous. The virtual interface 
on the host has IP fc00::1001/124


Using ip, it also complains "RTNETLINK answer: Permission denied".

Since this's a fresh install, I think I should file a bug.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] heavy IO load when working with sparse files (centos 6.4)

2014-09-10 Thread dE

On 09/11/14 09:58, Dave Johansen wrote:

On Mon, Sep 2, 2013 at 12:40 PM, Ron E  wrote:


Dear List,

We have noticed a variety of reproducible conditions working with sparse
files on multiple servers under load with CentOS 6.4.

The short story is that processes that read / write sparse files with
large "holes" can generate an IO storm. Oddly, this only happens with holes
and not with the sections of the files that contain data.

We have seen extremely high IO load for example copying a 40 or 80gb
sparse file that only has a few gigs of data in it. Attempts to lower the
io priority and cpu priority of these processes do not make any measurable
difference. (ionice, nice) This has been observed with processes such as:

cp
rsync
sha1sum

The server does have to be under some load to reproduce the necessary
conditions. The cases we have seen involve servers running 10-30 guests
under kvm. Load is in acceptable norms when the processes are run, such as
load avg 5-15 on a 24 core (12 core with HT enabled) server. We also verify
before starting such a process that the spindle with the file we're working
on is not being unduly hammered by another process.

These servers have one hardware raid controller each (Dell H700 controller
with write cache enabled) and multiple raid arrays (separate sets of
physical spindles). Interestingly, the IO storm is not limited to the array
/ spindles where the sparse file resides but affects all IO on that server.

We have looked extensively and not found any account of a similar issue.
We have seen this on configurations that are 'plain vanilla' enough to
think that this is not something specific to our environment.

Wondering if anyone else has seen this and if any suggestions on gathering
more data / troubleshooting. We wonder if we've found either a raid
controller driver issue, an OS issue or some other such thing. What seems
to point in this direction is that even with ionice -c3 which should
prevent the process from using IO unless the storage is idle, an io storm
which appears to saturate the entire raid bus on a given server can occur.


Did you ever figure anything out from this? I've noticed a similar sort of
issue on some of our machines, so I was curious if you found the cause of
the issue or any way to improve the situation.

Thanks,
Dave
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Are you sure the HDD is not too busy seeking around (investigate via iotop)?

To confirm you may like to test this on a free disk (not under load, 
like an external USB disk).

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-15 Thread dE

On 09/11/14 13:54, James Hogarth wrote:

On 11 September 2014 05:30, dE  wrote:



ifcfg enp0s3 add fc00::1002/124 results in
arping: Unknown host fc00:1002
Error: some host already uses address fc00:1002 on enp0s3.

You know the last error message sounds ridiculous. The virtual interface
on the host has IP fc00::1001/124

Using ip, it also complains "RTNETLINK answer: Permission denied".

Since this's a fresh install, I think I should file a bug.



Um ifcfg doesn't handle ipv6 - just take a look at the shell script that
makes it up ...

This is highlighted by arping ... ipv6 does not use arp

I just built a minimal C7 instance to verify the behaviour...

systemctl status NetworkManager shows that it is running

ip addr add fc00::1001/124 dev eth0 adds the IP address to the interface

NetworkManager does not remove this from the interface
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Minimal CentOS does not have NetworkManager.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-15 Thread dE

On 09/15/14 23:34, James Hogarth wrote:

On 15 Sep 2014 18:12, "dE"  wrote:


Minimal CentOS does not have NetworkManager.


*blink*

I built a minimal (just the minimal package group) CentOS 7 to test this
just for you and I assure you NetworkManager was there. C6 did not have it
in minimal but C7 does.

Read the comps file if you want:

http://mirror.centos.org/centos/7/os/x86_64/repodata/2bc0054a9f0f4cd3d2806d983edbe3d0dfc484d9f275d12be79eb67a040ba942-c7-x86_64-comps.xml

@core is the only group in the grouplist for the minimal environment and
has NetworkManager in the default set.

If you do a minimal C7 install it includes NM unless you take steps not to
have it there such as a kickstart with -NetworkManager in %packages
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Yeah, I'll try this again.

Thanks for the help. Currently I'm working with CentOS 6.5
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] repoquery -f does not work well.

2014-09-15 Thread dE

Hi.

I've found inconstancy between output of repoquery and rpm. I was 
looking forward towards apache php 5.4 module which must provided by 
some package SCL (can someone tell me?).


rpm -qf /etc/httpd/modules/mod_proxy.so
httpd-2.2.15-29.el6.centos.x86_64
repoquery -qf /etc/httpd/modules/mod_proxy.so

so repoquery results in no output

yum list installed httpd
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * c6-media:
Installed Packages
httpd.x86_64 2.2.15-29.el6.centos @c6-media

repoquery -qa httpd
httpd-0:2.2.15-29.el6.centos.x86_64

No wonder libphp5.so results in no output.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-18 Thread dE

On 09/16/14 11:37, James Hogarth wrote:

On 16 Sep 2014 04:14, "dE"  wrote:

Yeah, I'll try this again.

Thanks for the help. Currently I'm working with CentOS 6.5


That's fairly important information to know due to the huge differences in
behaviour.

Your original post stated CentOS 7
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


No, I migrated to CentOS 6. This problem persists with CentOS 7.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-18 Thread dE

On 09/17/14 21:03, Marcelo Ricardo Leitner wrote:

Em 07-09-2014 05:24, dE escreveu:

Hi!

I installed CentOS 7 today, it's a minimal install, so it didn't have
ifconfig command. So I installed net-tools, however I can't add ipv6
address to it.

# ifconfig enp0s3 add fc00::1002/124
SIOCSIFADDR: Permission denied.

Yes, I'm running as root.

CentOS is running in a Qemu instance with e1000 ethernet card.


One more test. Please check sysctl -a | grep disable_ipv6   output
And if it's =1, set it to 0.

When NetworkManager is running, it may disable ipv6 on the interface 
if its not configured via NM...


Marcelo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Yes, that was it. Thanks!!

But this's the default? The installer should be checked for this.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] repoquery -f does not work well.

2014-09-18 Thread dE

On 09/16/14 19:19, Jonathan Billings wrote:

On Tue, Sep 16, 2014 at 10:16:37AM +0530, dE wrote:

Hi.

I've found inconstancy between output of repoquery and rpm. I was
looking forward towards apache php 5.4 module which must provided by
some package SCL (can someone tell me?).

rpm -qf /etc/httpd/modules/mod_proxy.so
httpd-2.2.15-29.el6.centos.x86_64
repoquery -qf /etc/httpd/modules/mod_proxy.so

so repoquery results in no output

yum list installed httpd
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
  * c6-media:
Installed Packages
httpd.x86_64 2.2.15-29.el6.centos @c6-media

repoquery -qa httpd
httpd-0:2.2.15-29.el6.centos.x86_64

No wonder libphp5.so results in no output.

The 'httpd' package actually contains the mod_proxy.so as
/usr/lib64/httpd/modules/mod_proxy.so.  Running
'repoquery -f /usr/lib64/httpd/modules/mod_proxy.so' will generate the
correct response.

RPM, on the other hand, has the benefit of having a local filesystem
with the actual files installed.

One of the first things that the 'rpm' command does is stat() the path
/etc/httpd/modules, discover it's a symlink, and then run the actual
path /usr/lib64/httpd/modules/mod_proxy.so through the RPM database.
The command is going to pass the 'real' location (as best it can find)
for any query with file paths.  'repoquery' doesn't have the benefit
of having the package installed, so it can't perform this local
lookup.  It has to rely only on what the package manifest lists.



Yeah, but that's the problem running repoquery -f 
/usr/lib64/httpd/modules/mod_proxy.so does not give any output.


rpm is actual package manage working under yum, so it job is to maintain 
the installed package, but I would expect repoquery (which's a part of 
yum and as the name suggests 'query the repository') to do the same for 
all added repositories, cause rpm is not responsible for that. And 
actually it does do that using the downloaded repodata (as you already 
know), but problem is it's no working all the time.


For e.g. it works here --

repoquery -f /etc/htt\*
htdig-web-4:3.2.0-0.10.b6.el6.x86_64
ipa-server-0:3.0.0-37.el6.x86_64
mod_revocator-0:1.0.3-10.el6.x86_64
php54-apc-panel-0:3.1.15-0.2.svn329724.el6.centos.alt.noarch
mod_dav_svn-0:1.6.11-9.el6_4.x86_64
mod_perl-0:2.0.4-10.el6.x86_64
php-0:5.3.3-26.el6.x86_64
mod_authz_ldap-0:0.26-16.el6.x86_64
mod_dnssd-0:0.6-2.el6.x86_64
mod_auth_pgsql-0:2.0.3-10.1.el6.x86_64
php54-php-0:5.4.16-7.el6.centos.alt.x86_64
php54-php-0:5.4.16-7.el6.centos.alt.1.x86_64
httpd-0:2.2.15-29.el6.centos.x86_64
webalizer-0:2.21_02-3.3.el6.x86_64
mod_wsgi-0:3.2-3.el6.x86_64
php54-php-0:5.4.16-16.el6.centos.alt.x86_64
mrtg-0:2.16.2-7.el6.x86_64
gitweb-0:1.7.1-3.el6_4.1.noarch
mod_auth_kerb-0:5.4-10.el6.x86_64
httpd-manual-0:2.2.15-29.el6.centos.noarch
php54-apc-panel-0:3.1.15-0.4.20130912.el6.centos.alt.noarch
squid-7:3.1.10-19.el6_4.x86_64
mod_nss-0:1.0.8-18.el6.x86_64
mod_auth_mysql-1:3.0.0-11.el6_0.1.x86_64
mod_ssl-1:2.2.15-29.el6.centos.x86_64
mailman-3:2.1.12-18.el6.x86_64


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] repoquery -f does not work well.

2014-09-18 Thread dE

On 09/16/14 21:38, Jim Perrin wrote:


On 09/15/2014 11:46 PM, dE wrote:

Hi.

I've found inconstancy between output of repoquery and rpm. I was
looking forward towards apache php 5.4 module which must provided by
some package SCL (can someone tell me?).

Software collections are provided in a different directory. querying for
/etc/whatever or /usr/whatever won't work, as scls live under /opt/rh

For 6, the package is httpd24.x86_64, php54-php.x86_64 etc are the scl
packages. To use them, you'd need to install the
centos-release-SCL.x86_64 which enables the repositories.





Yes, thanks for the info, I really didn't know that. It got installed as 
a symlink in /etc/httpd/modules


However repoquery should list non-SCL packages at least.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-21 Thread dE

On 09/18/14 22:27, James Hogarth wrote:

On 18 Sep 2014 09:07, "dE"  wrote:

On 09/17/14 21:03, Marcelo Ricardo Leitner wrote:

One more test. Please check sysctl -a | grep disable_ipv6   output
And if it's =1, set it to 0.

When NetworkManager is running, it may disable ipv6 on the interface if

its not configured via NM...

Yes, that was it. Thanks!!

But this's the default? The installer should be checked for this.


The default is not to disable ipv6 so something in your environment
actively did this.

This does, however, leave me somewhat confused as to how you claimed there
was a fc00::1001 address on there and you were adding the additional
address when you saw the refused message...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


I did not claim that, I said that's the host's address. I was not able 
to set the guest address.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ifconfig ipv6:permission denied.

2014-09-21 Thread dE

On 09/20/14 02:22, Marcelo Ricardo Leitner wrote:

On 18-09-2014 13:57, James Hogarth wrote:

On 18 Sep 2014 09:07, "dE"  wrote:


On 09/17/14 21:03, Marcelo Ricardo Leitner wrote:


One more test. Please check sysctl -a | grep disable_ipv6 output
And if it's =1, set it to 0.

When NetworkManager is running, it may disable ipv6 on the 
interface if

its not configured via NM...



Yes, that was it. Thanks!!

But this's the default? The installer should be checked for this.



The default is not to disable ipv6 so something in your environment
actively did this.


Well... NM needs to put the interface UP so it can reliably monitor 
the link state. But that was turning ipv6 addr auto-config on and was 
considered a security issue and thus NM started disabling ipv6 on such 
(non-configured via NM but monitored) interface to avoid the address 
auto-configuration from happening, yet causing this.


The fix (to be able to bring it up without ipv6 address autoconfig) 
needed kernel & NM patches and show be available on 7.0.z very soon.


This does, however, leave me somewhat confused as to how you claimed 
there

was a fc00::1001 address on there and you were adding the additional
address when you saw the refused message...


Such address was on the host, no?

Cheers,
Marcelo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Ok, NM IS installed. My bad, I didn't realize.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum updates not working

2014-09-21 Thread dE

On 09/20/14 00:24, Joseph Godino wrote:

On Fri, 2014-09-19 at 13:10 -0500, Les Mikesell wrote:

On Fri, Sep 19, 2014 at 1:06 PM, Joseph Godino  wrote:

I think my software updates are not working. I know a Firefox update was
announced yesterday but when I try sudo yum update I get a message
saying that no packages are marked for update. I tried sudo yum clean
all but I still get the same response.
Any suggestions?

A 'yum info firefox'  should show what is installed and what is
available in the repo if that is dfiferent.


It appears I have Firefox 28. I though the update was for Firefox 31.
The output of yum info firefox follows.

[jgodino@nebkheprure Desktop]$ yum info firefox
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
  * base: mirror.clarkson.edu
  * epel: fedora.mirror.nexicom.net
  * extras: mirror.raystedman.net
  * nux-dextop: mirror.li.nux.ro
  * updates: mirror.lug.udel.edu
Installed Packages
Name: firefox
Arch: x86_64
Version : 24.8.0
Release : 1.el7.centos
Size: 87 M
Repo: installed
 From repo   : updates
Summary : Mozilla Firefox Web browser
URL : http://www.mozilla.org/projects/firefox/
License : MPLv1.1 or GPLv2+ or LGPLv2+
Description : Mozilla Firefox is an open-source web browser, designed
for
 : standards compliance, performance and portability.

Available Packages
Name: firefox
Arch: i686
Version : 24.8.0
Release : 1.el7.centos
Size: 48 M
Repo: updates/7/x86_64
Summary : Mozilla Firefox Web browser
URL : http://www.mozilla.org/projects/firefox/
License : MPLv1.1 or GPLv2+ or LGPLv2+
Description : Mozilla Firefox is an open-source web browser, designed
for
 : standards compliance, performance and portability.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


The announcement was from Mozilla, not CentOS. CentOS 7 has been 
released, so there'll be no enhancement related updates which includes 
FF 31.


You need to use a different repository if you need the latest.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum updates not working

2014-09-21 Thread dE

On 09/21/14 23:26, Frank Cox wrote:

On Sun, 21 Sep 2014 20:52:08 +0530
dE wrote:


The announcement was from Mozilla, not CentOS. CentOS 7 has been
released, so there'll be no enhancement related updates which includes
FF 31.

This is the current firefox on Centos 7:

Name: firefox
Version : 31.1.0
Release : 6.el7.centos
Architecture: x86_64
Install Date: Fri 19 Sep 2014 08:44:08 PM CST
Group   : Applications/Internet
Size: 121275825
License : MPLv1.1 or GPLv2+ or LGPLv2+
Signature   : RSA/SHA256, Thu 18 Sep 2014 07:54:27 AM CST, Key ID 
24c6a8a7f4a80eb5
Source RPM  : firefox-31.1.0-6.el7.centos.src.rpm
Build Date  : Thu 18 Sep 2014 07:11:01 AM CST
Build Host  : worker1.bsys.centos.org
Relocations : (not relocatable)
Packager: CentOS BuildSystem <http://bugs.centos.org>
Vendor  : CentOS
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.



Output of

yum --showduplicates list firefox

Yes, even in CentOS 6, there seems a 31 version.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos command to monitor a process for exit

2008-01-12 Thread Daniel de Kok
On 1/10/08, Jerry Geis <[EMAIL PROTECTED]> wrote:
> Is there a command that will monitor a process for exiting (crash or
> normal exit) and
> then execute another command based on the said process no longer being
> active?

If you want something simple, the wait(1) command can block until some
process specified by its PID terminates.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mysql versions

2008-01-22 Thread Daniel de Kok
Hi Jure,

On 1/22/08, Jure Pečar <[EMAIL PROTECTED]> wrote:
> Any particular reason for that or it is just that no one has yet compiled & 
> packaged 5.0.5x for c5?

CentOS aims to be binary compatible with the distribution provided by
our upstream provider. They keep most software at the same version
during the support cycle, and backport fixes/security patches to that
particular version.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 5.1 DomU on Debian Etch Dom0

2008-01-22 Thread Daniel de Kok
Hi Simon,

On 1/21/08, Simon Jolle <[EMAIL PROTECTED]> wrote:
> I successfully installed a Centos 5.1 DomU on Debian Etch Dom0. I used
> the virtual file systems from Jailtime[0]
>
> How to this manual (without using Jailtime)? I wish to install from
> Scratch. Xen-tools/rpmstrap doesn't work for me.

The procedure outlined at
http://wiki.centos.org/HowTos/Xen/InstallingCentOSDomU should also
work under Debian, since it just relies on xentools and a CentOS
kernel and initrd image.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Why iptables are not working?

2008-01-23 Thread Daniel de Kok
On 1/23/08, Tolun ARDAHANLI <[EMAIL PROTECTED]> wrote:
> in our server we dont have "iptables" command! and i am trying to install it
> with that
>
> yum -y install iptables
>
> after this command it says that "...nothings to do". Do you have any
> suggestion for installing the iptables?

Then it's probably installed, which you can check with:
rpm -q iptables

Note that iptables is in /sbin. So, if you are changing to root, use
su with a dash (-) to make sure that the PATH variable is updated:

su -

If not, you'll have to specify the full path to the iptables command.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ReiserFS

2008-01-28 Thread Daniel de Kok
On 1/28/08, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Is their any gotcha when using ResiserFs as a file system?

Aside from not being supported by the CentOS kernels in base/updates,
I would recommend against it. No major distributor seems to put
development effort into reiserfs anymore and I have seen a lot of
people having major recovery problems with it (e.g. when the internaly
tree is badly damaged, reiserfs fsck may try to merge anything that
looks like a reiserfs filesystem, like filesystems in disk images).

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Send in your favorite CentOS slogan today

2008-03-01 Thread Daniel de Kok
On 3/1/08, Dag Wieers <[EMAIL PROTECTED]> wrote:
>  Feel free to visit our Slogans wiki page for a good laugh or rude
>  offenses and add your own slogan by sending them to this thread.

I took the liberty to add two slogans to the page:

* CentOS: No activation keys in the default install, in more than 4 years.
* CentOS: Only two typos in the default install, in more than 4 years.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] recommendation for Virtual Dedicated Server based on Centos

2008-03-03 Thread Daniel de Kok
On 3/3/08, Simon Jolle sjolle <[EMAIL PROTECTED]> wrote:
>  I am searching for a virtual server/rootserver. I prefer a Xen instance,
>  but also vservers are acceptable. Will be host a small Wiki - nothing
>  mission critical.
>
>  Here my criteria
[snip]

If you are in a more experimental mood, you may want to check out
Gandi Hosting (which is currently beta). The advantage: their
Xen-based hosting is very flexible. You an easily add/drop machines,
add/drop resources to existing machines, etc. The disadvangtage: since
it is still beta, it may freeze your cat or steal your milkshake.

http://www.gandi.net/hosting/

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Send in your favorite CentOS slogan today

2008-03-03 Thread Daniel de Kok
On 3/3/08, William L. Maltby <[EMAIL PROTECTED]> wrote:
> On Mon, 2008-03-03 at 10:36 -0600, Dan Carl wrote:
>  > Heard someone mention free beer, had to participate.
>  >
>  > CentOS, we find RedHat's bugs
>  >
>  > CentOS, the OS that makes sense.
>
>
> Consistently Excellent No-cost Terrific Open Source (CENTOS)

Can effectively nuke that Other System?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 2:31 AM, Johnny Hughes <[EMAIL PROTECTED]> wrote:
>  If you enter into a legally binding contract, then you waive your rights
>  as specified in the contract.

IANAL I don't think that is possible. According to the GPLv2:

"4. You may not copy, modify, *sublicense*, or distribute the Program
except as expressly provided under this License. *Any attempt
otherwise to copy, modify, sublicense or distribute the Program is
void, and will automatically terminate your rights under this License.*
[...]"

"6. Each time you redistribute the Program (or any work based on the
Program), the recipient automatically receives a license from the
original licensor to copy, distribute or modify the Program subject to
these terms and conditions.  *You may not impose any further
restrictions on the recipients' exercise of the rights granted herein*.
[...]"

(Emphasis added.)

The GPL is very explicit that no further restrictions can be imposed on
sources or binaries. So, I guess the Red Hat license as quoted by
Johnny would void their rights to distribute the affected GPL software.
As such, I can only conclude that the quoted Red Hat license applies to
some non-GPL packages.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 1:15 AM, Matt Shields <[EMAIL PROTECTED]> wrote:
> On Sat, Mar 22, 2008 at 7:09 PM, Stephen John Smoogen <[EMAIL PROTECTED]> 
> wrote:
>  >  The usual idea is that because its "Free" Software you can't restrict
>  >  it in anyway... and that the 'Freedom' trumps any other license or
>  >  agreement. And I will bet that if you have enough money, there will be
>  >  lawyers who will come up with ways to argue that is a valid
>  >  interpretation.. and will argue it over and over again as long as you
>  >  have money.
>
>  I find it funny how people love to complain because companies like
>  RedHat and SuSE/Novell have found a way to make a business out of a
>  free product.  There is nothing forcing you to use their distro.

That's fine. But I think no one here has problems with that. I think
the discussion
is rather how it is played by the rules of the GPL. That's a good and
fair question.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 9:17 AM, Stephen John Smoogen <[EMAIL PROTECTED]> wrote:
>  RMS and the FSF has said this is not a restriction on the software..
>  it is a restriction upon you for getting a compilation and update
>  service from Red Hat.

But once you have retrieved the compiled package through a
subscription, it is governed under the GPL, right? And the GPL does
not allow for such restrictions.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 12:58 PM, Johnny Hughes <[EMAIL PROTECTED]> wrote:
>
> Daniel de Kok wrote:
>  > On Sun, Mar 23, 2008 at 9:17 AM, Stephen John Smoogen <[EMAIL PROTECTED]> 
> wrote:
>  >>  RMS and the FSF has said this is not a restriction on the software..
>  >>  it is a restriction upon you for getting a compilation and update
>  >>  service from Red Hat.
>  >
>  > But once you have retrieved the compiled package through a
>  > subscription, it is governed under the GPL, right? And the GPL does
>  > not allow for such restrictions.
>  >
>
>  Not at all ...
>
>  You have signed an agreement as to how you will use the software ON YOUR
>  machines as long as you obtain software from RHN without paying Red Hat
>  for each installation.  There is NO RESTRICTION that you may not charge
>  for each copy of GPL software .. it is specifically allowed.

True, but the copy that you retrieved is governed by the GPL, which
gives users certain rights that can not be taken away by additional
contracts (which would void the rights to distribute the software).
The GPL is very explicit about this, and those licensing restrictions
are imposed by the author of the software, and as far as I understand
Red Hat can not modify the licensing terms of others with contracts.
They can only do that for some non-GPL licensed software, and their
own software/artwork.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 1:28 PM, Ignacio Vazquez-Abrams
<[EMAIL PROTECTED]> wrote:
>  I'm not talking about the spec file metadata, I'm talking about the
>  signature that's applied to the package itself.

A signature is just a special digest of the contents. I don't see how
that could be licensed differently.

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 1:57 PM, Ignacio Vazquez-Abrams
<[EMAIL PROTECTED]> wrote:
>
> On Sun, 2008-03-23 at 13:46 +0100, Daniel de Kok wrote:
>  > On Sun, Mar 23, 2008 at 1:28 PM, Ignacio Vazquez-Abrams
>  > <[EMAIL PROTECTED]> wrote:
>  > >  I'm not talking about the spec file metadata, I'm talking about the
>  > >  signature that's applied to the package itself.
>  >
>  > A signature is just a special digest of the contents. I don't see how
>  > that could be licensed differently.
>
>  And a painting of a landscape is just a special digest (or
>  interpretation, if you prefer) of a landscape. It falls under copyright
>  law, regardless of what laws the canvas or paint are required to follow.

That's a flawed analogy. Virtually, all jurisdictions require work to
be original to qualify for copyright. Painting a landscape requires
effort, and originality, mechanically making a digest with encryption
software doesn't.

Anyway, let's not continue with *this* slippery slope. The next guy
will proclaim that downloading software and recompressing it with
bzip2 constitutes a new work ;).

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL on The Pirate Bay, Mininova, etc

2008-03-23 Thread Daniel de Kok
On Sun, Mar 23, 2008 at 2:24 PM, Johnny Hughes <[EMAIL PROTECTED]> wrote:
>  But they are not taking away any rights, you may distribute (the GPL
>  portions) however you want.  You may use it however you want.  They are
>  just charging for each copy.

Yes. But we never disagreed on that. But if you retrieve a copy of
GPL'ed software from RHN, you are allowed to redistribute it according
the terms of the GPL.

>  You also brought up the redhat-logos rpm, with is NOT GPL.  That
>  particular RPM is required for system operation and they certainly can
>  charge for each copy of that rpm that is run.

True, as I have stated in my previous e-mail.

>  Of course, just using CentOS (or Scientific Linux, WBEL) will free you
>  up from that payment issue anyway :D

Yes :). Making RHEL piracy kinda pointless ;).

-- Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Xen Install

2008-03-29 Thread Daniel de Kok
On Sat, Mar 29, 2008 at 4:36 AM, John <[EMAIL PROTECTED]> wrote:
> http://wiki.centos.org/HowTos/Xen/InstallingCentOSDomU  In reading that
>  How To, will using the GUI Configuration Tools create all the files need
>  to run a "DomU". Will I have manual edit any configuration files?

Yes, you can use virt-manager to do this.

>  Next question is the machine has 256MBs of ram and Dom0 uses about
>  225MBs of it. Is that a bit much? VmWare Server does not use that much
>  ram. See #top BelowWith out running the Xen Kernel it has no where
>  near the ram usage as with the Xen one. Is that expected?

dom0 takes the memory it can use, but if you create a domU, Xen will
use "ballooning" to reduce the amount of memory allocated to dom0. You
can set the minimum of dom0 memory in /etc/xen/xend-config.sxp by
tweaking the dom0-min-mem option.

Be aware that the hypervisor also takes a chunk of memory, so you may
want to add more memory to get a useful setup.

Take care,
Daniel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [Rpm/Yum - Enabled Exception Qt]

2008-04-11 Thread Ederson de Moura
Hi all,

I am trying to install the packages of Qt/Trolltech by "yum", but the
Qt comes without the support of exceptions,
it possible enable that?

I do not want to compile the Qt manually!

Best regards, edm.

-- 
Ederson de Moura
"Your mind is like a parachute: it works better when open."
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] kmod-drbd-smp (2.6.9-55.0.2.EL) has unknown symbols (kmod-drbd not).

2007-08-03 Thread Daniel de Kok
On Fri, 2007-08-03 at 13:49 +0200, Martin Hamant wrote:
> Le Tue, 31 Jul 2007 14:16:54 +0200
> Martin Hamant <[EMAIL PROTECTED]> écrivait:
> 
> (snip)
> > I don't know how it's possible to improve this, maybe a yum plugin
> > which could detect any drbd modules and if it's matches with
> > any installed kernels... what do you think ?
> > 
> > Thanks to you :)
> > 
> 
> Hmm in other words, I can contribute if something started to improve the
> system ;)

I have written a plugin to carry over modules that are kabi compatible
if no new package was found to cover for the module for a new kernel.
The latest alpha version is available from:

http://people.centos.org/~daniel/code/yum/3.0/yum-kmodorphans/

Please don't use this for production machines! There are still some
glitches that need fixing, and the policy of what to handle still has to
be finalized.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Data corruption on external hard disk

2007-08-03 Thread Daniel de Kok
On Sat, 2007-08-04 at 07:09 +0200, Niki Kovacs wrote:
> [EMAIL PROTECTED]:/media/disk/Films] $ ls -l
> total 692996
> -rw-r- 1 678756852  34537972 148381783526817280 avr 28 01:01 Cinema
> drwxr-xr-x 3 kikinovak kikinovak   4096 mai  9 10:07 Anime
> drwxrwxrwx 4 kikinovak kikinovak   4096 mai 10 12:25 Series
> 
> Notice that the file size is something like petabytes :oD
> 
> Is there any way to repair this obviously corrupt data?

Looks like a broken inode (or incorrect directory entry). I'd make a
backup image of the disk first (if that works without serious errors)
with dd. After that, run a badblocks check, and a fsck.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS vs RedHat packages

2007-08-04 Thread Daniel de Kok
On Sat, 2007-08-04 at 16:31 -0400, Scott Ehrlich wrote:
> Another learning experience question - it is my understanding that CentOS 
> essentially IS RedHat but with any commercial connection removed.   That 
> being said, is there any difference in the included, or quality of 
> packages between the two distros?
> 
> I've got some basic issues with a critical server I'm about to set up, and 
> if I cannot get beyond said issues, I may opt to try CentOS.  Seeing that 
> CentOS is free (can't call RedHat for support), I'm wondering if I should 
> try and make the case for CentOS over RedHat.  Once the choice is made, it 
> may be next to impossible to revert to the other version (RH vs CentOS).

CentOS aims to be 100% binary compatible with the upstream product.
Additional or changed packages are included in the extras or plus
repositories. E.g. CentOS plus provides a modified kernel with more
options enabled, and extras the heartbeat clustering software.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS things to mod for VMware server

2007-08-06 Thread Daniel de Kok
On Mon, 2007-08-06 at 09:00 -0400, Brent L. Bates wrote:
>  I wouldn't use any other file system than XFS as it is the most reliable
> file system out there.  We've been using XFS on a x86 system for over a year
> now and haven't had any file system problems.  It has actually saved us on
> occasion.  From what I've read, people have only reported problems when they
> pile layer upon layer of stuff on their disks.  Logical volumes, NFS, etc.,
> etc..  We are using XFS on RAID drives, both RAID 1 and 0, and the only extra
> item we add is NFS.  Before our Linux boxes, we've used XFS on SGI's for
> probably over a decade of dependable and reliable service.

I agree that it is a good filesystem. But its reliability relies a bit
on the iron you have. XFS does lazy writes, this prevents some
fragmentation and unnecessary writes, but can cause a larger loss of
data when some hardware fails.

Also watch out with 4K stack kernels.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] "near native" performance with xen?

2007-08-06 Thread Daniel de Kok
On Mon, 2007-08-06 at 14:55 -0400, Johnn Tan wrote:
> Assigning all the VCPUs.

Having more than one vcpu currently emits non-fatal error messages, at
least with the C5 domU kernel. I didn't have time to look into that yet.
Though, it's probably useful for threaded applications if it works. Note
that you can always specify which CPUs can be used by a domU (seen from
the hypervisor), regardless of the number of vcpus. E.g.:

cpus="0-1"
vcpus=1

>  And as much RAM as you can get away with (maybe leaving the dom0 with 512MB).

The Xen hypervisor requires 64MB RAM. If you don't do much work in dom0
you can set the dom0 memory fairly low. I have seen people setting it to
64 MB RAM. But remember that this is the minimum, suppose that a system
has 1024 MB RAM, and only one 512MB domU guest. dom0 can use
approximately 1024 - 512 - 64 = 448MB RAM, even if dom0-min-mem is set
to 64.

> But are there others? Since I'm doing paravirtualization, I 
> assume I don't need to turn on VT in the BIOS?

No.

>  What about 32-bit v. 64-bit OS, for the dom0 and for the domU? (I'll be 
> using CentOS-5.) Anything else?

A 64-bit dom0 with 32-bit domUs isn't currently supported in CentOS 5,
but it it will in 5.1.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] "near native" performance with xen?

2007-08-07 Thread Daniel de Kok
On Mon, 2007-08-06 at 16:54 -0400, Johnn Tan wrote:
> What error messages are you seeing? On one of my machines, I 
> have four domU's (kernel 2.6.18-8.1.8.el5xen), each with 4 
> VCPUs. I don't see any errors in any of the domU's dmesg. 
> But /proc/cpuinfo shows they are each using all 4 CPUs.

Soft lockups on CPUs:
http://bugs.centos.org/view.php?id=2161

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] "near native" performance with xen?

2007-08-07 Thread Daniel de Kok
On Tue, 2007-08-07 at 17:54 -0400, Johnn Tan wrote:
> I'm thinking it's either the kernel version or, like the 
> user states, maybe it's something with HyperThreading.

Hyperthreading is off on the machines where this occurs. Since the
problem seems to occur handline timer interrupts, this could be a
hardware-specific problem.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Will this work? server+centOS5+100users?

2007-08-08 Thread Daniel de Kok
On Wed, 2007-08-08 at 05:57 -0500, Johnny Hughes wrote:
> I forgot to post docs for acl on centos5:
> 
> http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-acls.html

Let me shamelessly plug some more ACL documentation ;):
http://kajero.com/books/unixsystems/html/chap-filesystem.html#chap-filesystem-permissions-acl

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL5 and CentOS 5 root logins

2007-08-08 Thread Daniel de Kok
On Wed, 2007-08-08 at 06:58 -0400, Scott Ehrlich wrote:
> I found, under a 64-bit CentOS 5 workstation install, it is possible to 
> modify /etc/inittab and add a couple of lines to prevent root from logging 
> into the console.

/etc/securetty is the right place to configure this, see the
securetty(5) manual page and
http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-sec-network.html#s1-wstation-privileges

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] The CentOS-Plus kernel

2007-08-09 Thread Daniel de Kok
On Thu, 2007-08-09 at 10:34 -0400, Brent L. Bates wrote:
>  Is the CentOS-Plus kernel included in any of the CD or DVD ISO's?
>  Looking over the Web site, I couldn't tell.

No, it isn't, only base is.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] text installer used in Linux?

2007-08-09 Thread Daniel de Kok
On Thu, 2007-08-09 at 10:34 -0700, Rogelio Bastardo wrote:
> I'd like to create one upon first time boot for a CentOS-based virtual
> application I'm making.  So, after someone boots up, I'd like to have
> a little GUI thing ask them questions and then put those variables in
> a file (or maybe use something like sed to edit other network config
> files).

Seems like you are referring to something like "firstboot" (which is
what will show up on the first CentOS boot)?

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] xen in production servers

2007-10-11 Thread Daniel de Kok
On Thu, 2007-10-11 at 12:28 -0300, Roberto Pereyra wrote:
> Is virtualization (Xen) in CentOS stable for big developments ?
> 
> Somebody is using it for important servers ?

We use it for some (web) server isolation. I currently do manual updates
of Xen-related stuff, since there still is a bug that affects us
(#1999). I think there were some other problems with the network scripts
as well. But as far as I recall these problems will be fixed in 5.1.

Some machines also have problems with more than one vcpus in a domU (see
the recent discussion on the centos-virt list).

5.1 will have some useful improvements over 5.0 (e.g. support for
running i386 domUs with a x86_64 hypervisor/dom0).

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] question on CentOS 4.4 SCD -> CentOS 5?

2007-10-15 Thread Daniel de Kok
On Mon, 2007-10-15 at 12:01 -0700, Rogelio wrote:
> If possible, I'd like to do a minimal l CentOS 4.4 (the Single Server
> CD) installation and then mass upgrade everything to CentOS 5.
> 
> I googled and found this URL
> 
> http://wiki.centos.org/HowTos/MigrationGuide/ServerCD_4.4_to_5
> 
> Is this recommended?  Or will might I run into any problems?

If you plan to run CentOS 5, why not install it directly? If you want a
smaller installation medium, you can download the
os//images/boot.iso ISO image and do a minimal netinstall. You
could also use just the first CentOS 5 CD and do a minimal install
(disable all software groups).

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 5

2007-06-13 Thread Daniel de Kok
Hi,

On Tue, 2007-06-12 at 18:05 -0600, Craig Van Ham wrote:
> Why isn’t there a server ISO for Centos 5.0 

It's planned to go into QA testing soon.

-- Daniel


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Correct xen domains path

2007-06-18 Thread Daniel de Kok
On Mon, 2007-06-18 at 11:50 +0200, Jordi Espasa Clofent wrote:
> 1. According to 
> http://wiki.centos.org/HowTos/Xen/InstallingCentOSDomU?highlight=%28xen%29 
> it would be /srv/xen or even /var/lib/xen/images.
> 
> ¿What is the correct absolute path to put into the xen domains files?

Whatever you prefer, as long as the images have the correct security
context. Otherwise, SELinux will deny access to the images.

> 2. Moreover, if you want the domU(s) boot together dom0, you should put 
> the domains files (images) into /etc/xen/auto.
> 
> ¿A simple symlink will be enough in this case?

No, you shouldn't put the images there, but the (Xen) domain
configuration files of the domains you would like to start during the
boot process.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Correct xen domains path

2007-06-18 Thread Daniel de Kok
On Mon, 2007-06-18 at 11:07 -0400, Stephen Harris wrote:
> On Mon, Jun 18, 2007 at 11:05:24AM -0400, Rick Barnes wrote:
> > My preference was to use /srv/xen and then symlink /srv/xen/etc to 
> > /etc/xen and /srv/xen/images to /var/lib/xen/images
> 
> My preference is to disable SELinux totally and use /xen as a seperate
> mount point :-)

I keep repeating in a sheepish fashion: bad :p.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Correct xen domains path

2007-06-18 Thread Daniel de Kok
On Mon, 2007-06-18 at 12:03 -0400, Stephen Harris wrote:
> I've not heard a good reason to keep SELinux enabled, to be honest.
> For high sensitivity stuff, sure (much like using SEOS on Solaris for high
> sensitivity machines - eg those where third parties might have access).
> But as a general rule for all machines?  Why?

One of the major goals of SELinux is to restrict the impact of 0-day
vulnerabilities. If there is an ugly exploit for some network-facing
daemon, it is a good idea to restrict the potential damage as possible.
Besides that, due to the restrictions that SELinux imposes, it can also
catch a class of configuration errors that impact security.

Sure, it does not solve all security problems. But IMO it is a step
forward from running daemons with (nearly) the rights of a normal user.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Correct xen domains path

2007-06-18 Thread Daniel de Kok
On Mon, 2007-06-18 at 12:56 -0400, Stephen Harris wrote:
> The security rule of thumb here is that such machine _will_ be attacked,
> and so "security in depth" is the process to apply.

There are far more attack vectors than just through network facing
daemons. To name just one example, web browsers. Unfortunately, Firefox
is not yet protected by the targeted policy. Hopefully that will happen
one day.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Correct xen domains path

2007-06-18 Thread Daniel de Kok
On Mon, 2007-06-18 at 15:26 -0600, Stephen John Smoogen wrote:
> I am sorry, but while I believe that it was meant in jest...

Yes, it was a slight reference to a message from a few days ago.

> the core
> of the problem is that turning it off is the default answer from too
> many people who have no idea why an application isnt working.

Yes. There are many CentOS-oriented howtos out there that recommend
turning off SELinux as their first step, where it is unnecessary for
such configuration. It is better to teach people about security in such
articles, than to recommend turning off SELinux defacto.

I agree with you (Stephen Harris) that it is not always necessary to
have SELinux enabled. But there was a tendency on various lists that
started with the non-modular SELinux policy (which is admittedly, much
more of a pain to modify) to recommend users to turn of SELinux. I'd
like to see things happen the other way around, where people keep it
enabled, unless there is a good (informed) reason to so.

It was not my intention to imply that you haven't disabled SELinux for a
good reason. I reacted to your message, because it may give some people
bad ideas (like turning off SELinux when Xen doesn't work, because they
haven't set the correct context for images).

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 and Xen Windows domU

2007-06-18 Thread Daniel de Kok
On Mon, 2007-06-18 at 16:13 -0700, Fong Vang wrote:
> Has anyone been able to get a Xen Windows domU to install or work
> properly on CentOS 5?  I'm trying to do that now.  It's able to boot
> and start he installation (from ISO), but after partitioning the disk
> and copying a few files to the hard drive, it cannot boot into the
> graphical installer.

Could you describe what happens?


> on_reboot = 'preserve'

Are you sure you want this? Why not 'destroy' or 'restart'?

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MusicMatch Jukebox-like mp3 player...

2007-06-20 Thread Daniel de Kok
On Wed, 2007-06-20 at 10:17 -0400, David A. Woyciesjes wrote:
> Dexter Stowers wrote:
>  >  I use Rhythmbox 0.8.8 for my music. It saves in the .ogg
>  > format but it is a good ripper and player. I hope that this helps!
>  >
> 
>   Is this in one of the repos? I'm having a little trouble getting yum to 
> find it...

It's in (CentOS) (base). Maybe you have used an incorrect number of 'h's
in the name? (Hit me a couple of times :p).

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MusicMatch Jukebox-like mp3 player...

2007-06-20 Thread Daniel de Kok
On Wed, 2007-06-20 at 11:29 -0400, David A. Woyciesjes wrote:
>   Now to get the mp3 plugin for it...

RPMForge had all the plugins I needed.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MusicMatch Jukebox-like mp3 player...

2007-06-20 Thread Daniel de Kok
On Wed, 2007-06-20 at 17:39 +0200, Daniel de Kok wrote:
> On Wed, 2007-06-20 at 11:29 -0400, David A. Woyciesjes wrote:
> > Now to get the mp3 plugin for it...
> 
> RPMForge had all the plugins I needed.

I should have added that Rhythmbox uses gstreamer plugins, so have a
look at the gstreamer-plugins-* packages from RPMForge.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 LiveCD - When?

2007-06-20 Thread Daniel de Kok
On Wed, 2007-06-20 at 03:17 -0500, Mike McCarty wrote:
> Her hardware is not bleeding edge, it's four years old.
> But, when we plugged a USB mouse into her machine, it
> lost the keyboard. Windows recognizes both on that machine.

CentOS 4 works great with older hardware, and is supported with security
updates until 2012. There's a CentOS 4.4 live CD available through:

http://isoredirect.centos.org/centos/4.4/isos/i386/

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to build clamav SRPM and RPM with calmav tarbal - CentOS 5

2007-06-25 Thread Daniel de Kok
On Mon, 2007-06-25 at 09:16 -0400, Jim Perrin wrote:
> Rebuilding the code won't solve the problem. You'll have to modify the
> selinux rules so that these actions are allowed. For Centos5 and rhel5
> this is pretty easy.
> 
> 1. Enable selinux in permissive mode, and capture the selinux error
> messages. They'll likely be in /var/log/audit/audit.log or
> /var/log/messages
> 2. Run audit2allow -i selinux.log -M localpolicy
> 3. Next you load the module you just created with 'semodule -i localpolicy.pp'
> 
> Lather, rinse, repeat.

Actually, I don't think this is a very good idea (I know it is suggested
in upstream documentation). For instance, suppose that clamav is tagged
as, say 'bin_t', and executing clamav was rejected. The above will
usually add a allow rule for executing bin_t binaries for the context of
the caller. This obviously punches a big hole in a policy if it does not
allow such thing.

Make your own policy modules for local policy (you could create a start
with command (2)), but add and check rules and contexts manually.
audit2allow is a nice tool to see what was denied, but its output should
not be copied verbatim.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Troubles with CentOS5 and 3ware RAID controller

2007-06-26 Thread Luc de Louw
Folks,

Since approx. a half year I have run two servers with CentOS4, all was
running very stable.

Then I upgraded to CentOS5 (fresh install). The servers are running
quite unstable since the upgrade. The system is freezing after short uptime.

I suspect the driver for the 3ware controller, because I got such error
messages:

3w-: scsi0: Character ioctl (0x1f) timed out, resetting card.
3w-: scsi0: Character ioctl (0x1f) timed out, resetting card.
3w-: scsi0: Character ioctl (0x1f) timed out, resetting card.

(lots of repeats of this messages)

sd 0:0:0:0: rejecting I/O to offline device
sd 0:0:0:0: rejecting I/O to offline device
sd 0:0:0:0: rejecting I/O to offline device
EXT3-fs error (device sda6): ext3_find_entry: reading directory #2 offset 0
sd 0:0:0:0: rejecting I/O to offline device
sd 0:0:0:0: rejecting I/O to offline device
sd 0:0:0:0: rejecting I/O to offline device

After some time (few hours) the systems are completely freezing, no
display of errors on the console or logs

Here some relevant data of my system:

00:0a.0 RAID bus controller: 3ware Inc 7xxx/8xxx-series PATA/SATA-RAID
(rev 01)
Subsystem: 3ware Inc 7xxx/8xxx-series PATA/SATA-RAID
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
SERR- http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to add to EPEL wishlist?

2007-06-28 Thread Daniel de Kok
On Thu, 2007-06-28 at 03:46 -0700, Radu-Cristian FOTESCU wrote:
> Does anyone know how to submit wishes to the EPEL Wishlist here?
> http://fedoraproject.org/wiki/EPEL/WishList
> 
> It reads "Immutable Page".

Wrong list?

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] custom SELinux?

2007-07-02 Thread Daniel de Kok
On Mon, 2007-07-02 at 12:16 -0700, Florin Andrei wrote:
> So, I need to tell SELinux "hey, this stuff under 
> /home/foobar/spool/cyrus is just like /var/spool/cyrus, don't relabel it 
> to something else". How do I achieve that?

Add it to the local file contexts for your policy. The "semanage" tool
provides a handy interface to do this. The manual page has some useful
examples.

-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Problem 1: package resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch from @System requires pki-servlet-4.0-api, but none of the providers can be installed

2024-03-24 Thread Jelle de Jong

Dear CentOS members,

Does someone know how to resolve this package conflict, it is creating 
security issues with freeipa dependencies.


[root@freeipa01 ~]# yum update --refresh
CentOS Stream 8 - AppStream 

 102 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  18 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  55 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  15 kB/s | 
3.0 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

 367 kB/s | 
 28 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

  75 kB/s | 
 35 kB 00:00

Error:
 Problem 1: package 
resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch from @System 
requires pki-servlet-4.0-api, but none of the providers can be installed
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
@System
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from 
appstream
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
appstream
  - cannot install the best update candidate for package 
resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch
  - cannot install the best update candidate for package 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
 Problem 2: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
  - both package tomcat-el-3.0-api-1:9.0.62-30.el8.noarch from 
appstream and tomcat-lib-1:9.0.62-30.el8.noarch from appstream obsolete 
pki-servlet-engine <= 1:9.0.50
  - package tomcat-1:9.0.62-30.el8.noarch from appstream requires 
tomcat-lib = 1:9.0.62-30.el8, but none of the providers can be installed
  - package tomcat-jsp-2.3-api-1:9.0.62-30.el8.noarch from appstream 
requires tomcat-servlet-4.0-api = 1:9.0.62-30.el8, but none of the 
providers can be installed
  - package tomcat-lib-1:9.0.62-30.el8.noarch from appstream requires 
tomcat-servlet-4.0-api = 1:9.0.62-30.el8, but none of the providers can 
be installed
  - package tomcatjss-7.7.1-1.module_el8.6.0+1038+e795ee4b.noarch from 
@System requires pki-servlet-engine >= 1:9.0.7, but none of the 
providers can be installed
  - package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
@System requires pki-servlet-4.0-api = 
1:9.0.30-3.module_el8.5.0+854+e1c92b81, but none of the providers can be 
installed
  - package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
appstream requires pki-servlet-4.0-api = 
1:9.0.30-3.module_el8.5.0+854+e1c92b81, but none of the providers can be 
installed
  - package 
pki-servlet-engine-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from 
appstream requires pki-servlet-4.0-api = 
1:9.0.30-1.module_el8.4.0+595+e59c9af2, but none of the providers can be 
installed
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
@System
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from 
appstream
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
appstream
  - cannot install the best update candidate for package 
tomcatjss-7.7.1-1.module_el8.6.0+1038+e795ee4b.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' 
to use not only best candidate packages)

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Server hangs on CentOS 5.5

2011-03-09 Thread Leen de Braal
> m.r...@5-cent.us wrote:
>> Michael Eager wrote:
>
>>> House-built, Gigabyte MB, AMD Phenom II X6, 6Gb RAM.
>>
>> Any chance the problem's with the video card?
>
> Video is on the MB.  It doesn't seem likely that it's
> the video, since the system doesn't respond to network
> when it crashes.
>
> It could be anything.  That's why I'm looking for
> something that would give me a bit of a hint what
> to look at.  With an infrequent failure, it's not
> practical to replace components piecemeal.

While you open the case, check for the bulging capacitor problem.
Will have the effect you describe, freezing up the system so that even
bios routines don't work (your fans).
If that's the case, replace mainboard.

>
> --
> Michael Eager  ea...@eagercon.com
> 1960 Park Blvd., Palo Alto, CA 94306  650-325-8077
> _______
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
L. de Braal
BraHa Systems
NL - Terneuzen
T +31 115 649333
F +31 115 649444

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Server hangs on CentOS 5.5

2011-03-09 Thread Leen de Braal
> On Wed, Mar 9, 2011 at 10:24 AM, Leen de Braal  wrote:
>>> m.r...@5-cent.us wrote:
>>>> Michael Eager wrote:
>>>
>>>>> House-built, Gigabyte MB, AMD Phenom II X6, 6Gb RAM.
>>>>
>>>> Any chance the problem's with the video card?
>>>
>>> Video is on the MB.  It doesn't seem likely that it's
>>> the video, since the system doesn't respond to network
>>> when it crashes.
>>>
>>> It could be anything.  That's why I'm looking for
>>> something that would give me a bit of a hint what
>>> to look at.  With an infrequent failure, it's not
>>> practical to replace components piecemeal.
>>
>> While you open the case, check for the bulging capacitor problem.
>> Will have the effect you describe, freezing up the system so that even
>> bios routines don't work (your fans).
>> If that's the case, replace mainboard.
>>
>
>
> Or replace the CAPS if you're not afraid of a soldering iron :)

Very often resulting in a damaged board, because you damage the via's when
pulling the caps. But it is worth a try.

>
>
>
> --
> Kind Regards
> Rudi Ahlers
> SoftDux
>
> Website: http://www.SoftDux.com
> Technical Blog: http://Blog.SoftDux.com
> Office: 087 805 9573
> Cell: 082 554 7532
>


-- 
L. de Braal
BraHa Systems
NL - Terneuzen
T +31 115 649333
F +31 115 649444

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Server hangs on CentOS 5.5

2011-03-09 Thread Leen de Braal
>>sure, if your time is worthless.  you can easily burn a couple hours
>>recapping a motherboard, which typically exceeds the boards worth.
>
> Amen. It's not enough to replace the bulging caps - you need to replace
> all
> the caps of the same brand as the damaged ones. Otherwise you'll just be
> doing it again later.
>
> And after ordering the exact replacements, and soldering them in, you've
> been down for days/weeks, and you'll lucky if it hasn't been damaged in
> other ways from lack of filtered power.
>
> Recycle the motherboard (its hazardous waste) and buy a modern one.
>
> By the way - don't forget to check the caps inside the PSU.

Very true. Had one server two weeks ago with a broken PSU because of caps.
Only after moving it, it showed because it rebooted several times even
before completing POST, and then stopped completely.


>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
L. de Braal
BraHa Systems
NL - Terneuzen
T +31 115 649333
F +31 115 649444

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos under (vmware vs KVM)

2011-05-04 Thread Tom De Vylder
On 04 May 2011, at 12:04, Jim Wildman wrote:

> On Wed, 4 May 2011, carlopmart wrote:
> 
>> On 05/04/2011 10:58 AM, przemol...@poczta.fm wrote:
>>> Hello,
>>> 
>>> we are using several centos servers under Vmware. We are having more
>>> and more requests for server space for each business application (let assume
>>> that these business requests are for different type of services:
>>> databases, web apps, application servers etc.
>>> 
>>> I wonder which solution is better:
>>> 1. new CentOS under vmware (having several CentOS servers under Vmware)
>>> or
>>> 2. new CentOS under KVM under existing CentOS (having a few CentOS servers 
>>> with several KVMs in each)
>>> Each approach has some advantages and disadvantages.
>>> Can you share your thoughts about it ?
>>> 
>> 
>> What vmware version do you use: server, esxi?? What type of applications
>> do you run under these vms??
>> 
> 
> How mature is your organization? 
> How big will this get?

And what about High Availability (vMotion, HA, DRS, ...) features? 
Any of those in use in production yet? Would you need to have equivalents for 
those too?

Kind regards,
Tom De Vylder
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Centos7 and Vlan

2020-06-16 Thread Alfredo De Luca
Hi all.
I wonder if you can help me here.

I have centos7 with 1 network interface and on that IFwe have 2 vlan.
>From both vlan we'd like to reach the internet independently so basically
with 2 different gateways.

we tried with all the routes,rules etc but only on one vlan we are able to
ping 8.8.8.8 for instance.

Any suggestions/ideas?
Cheers


-- 
*/Alfredo*
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos7 and Vlan

2020-06-17 Thread Alfredo De Luca
Thanks guys. I ll go through all your recò and links tomorrow and let
you know.
I might post my configuration so you can have a look at it.
Cheers

/Alfredo

On Wed., 17 Jun. 2020, 3:34 am Gordon Messmer, 
wrote:

> On 6/16/20 1:56 AM, Alfredo De Luca wrote:
> > I have centos7 with 1 network interface and on that IFwe have 2 vlan.
> >  From both vlan we'd like to reach the internet independently so
> basically
> > with 2 different gateways.
>
>
> Look for documentation on "multi-homing":
>
> https://blogs.oracle.com/networking/advance-routing-for-multi-homed-hosts
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] yum versionlock vs priority

2021-03-25 Thread Stijn De Weirdt
hi all,

i could use some guidance in debugging an issue on centos 7.9 where
"suddenly" yum refuses to install a package. the package has multiple
version in 2 repos: highest version is in a repo with prio=5, the other
lower versions are in a repo without any priorities set.
we however require a specific version, so we use the versionlock plugin
to lock it.

repoquery --show-duplicates properly shows all versions.

however, yum refuses to install this locked version. it says it can find
the package (trying to install the package by name, and also by full
version).

when we remove the prio setting in this one repo it all works just fine.

the odd thing is: we discovered this after a reinstall of a single host
a few days ago, where we have a lot of other hosts with same setup
without issues. there seem to have no updates of yum or anything
related, so i'm a bit puzzled where this sudden change could come from.

obvioulsy, it will turn out something did change, but i have no idea how
to start finding the culprit. is there any documnetaiton that describes
the precedence between yum plugins? is versionlock plugin always
supposed to win over prio setting?

hints/tips welcome.

many thanks,

stijn
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] nftables not working (missing kernel modules?)

2021-10-12 Thread Kees de Jong
It seems like I'm missing some modules or something?

I can't seem to load the default /etc/nftables/main.nft on my CentOS 8
ISO. I get the following errors:

```
nft -f /etc/nftables/main.nft 
/etc/nftables/main.nft:21:6-22: Error: Could not process rule:
Operation not supported 
 set allowed_protocols { 
 ^ 
/etc/nftables/main.nft:21:6-22: Error: Could not process rule: No such
file or directory 
 set allowed_protocols { 
 ^ 
/etc/nftables/main.nft:27:6-23: Error: Could not process rule:
Operation not supported 
 set allowed_interfaces { 
 ^^ 
/etc/nftables/main.nft:27:6-23: Error: Could not process rule: No such
file or directory 
 set allowed_interfaces { 
 ^^ 
/etc/nftables/main.nft:33:6-23: Error: Could not process rule:
Operation not supported 
 set allowed_tcp_dports { 
 ^^ 
/etc/nftables/main.nft:33:6-23: Error: Could not process rule: No such
file or directory 
 set allowed_tcp_dports { 
 ^^ 
/etc/nftables/main.nft:40:3-37: Error: Could not process rule: No such
file or directory 
 ct state established,related accept 
 ^^^ 
/etc/nftables/main.nft:42:3-40: Error: Could not process rule: No such
file or directory 
 meta l4proto @allowed_protocols accept 
 ^^ 
/etc/nftables/main.nft:43:3-36: Error: Could not process rule: No such
file or directory 
 iifname @allowed_interfaces accept 
 ^^ 
/etc/nftables/main.nft:44:3-38: Error: Could not process rule: No such
file or directory 
 tcp dport @allowed_tcp_dports accept 
  
/etc/nftables/main.nft:53:3-41: Error: Could not process rule: No such
file or directory 
 reject with icmpx type port-unreachable 
 ^^^
```

After loading some modules, the errors are reduced to just one.

```
nf_defrag_ipv6
nf_defrag_ipv4
nft_ct
nf_conntrack
nf_tables_set
nf_tables
nfnetlink
```

What could I still be missing here? Is there a way to simply get full
support to do firewalling in these cases?

```
 nft -f /etc/nftables/main.nft 
/etc/nftables/main.nft:53:3-41: Error: Could not process rule: No such
file or directory
 reject with icmpx type port-unreachable
```


-- 
Kees de Jong | Supercomputing | https://www.surf.nl/en/about-surf
OpenPGP fingerprint: 0x0E45C98AB51428E6
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba sssd issues (again).

2022-12-16 Thread Jelle de Jong

Hello everybody,

Could someone give me an estimate on when the repositories are resolving 
the right dependencies for the freeipa pacakges in CentOS Stream release 8?


I have about +10 systems sending me alerts everyday that 
dnf-automatic.service is failing because of the freeipa dependency 
issues. Since freeipa is one of the security elements I would like to 
give people an estimate on when these issues are resolved?


How can I keep track of the work that is been done as well?

Is there a package tracker to be followed for this? URLs?

I asked this question on the centos-devel list weeks ago, but have not 
received any feedback. The issues is bothering me a lot as it is an 
security issue that stays unresolved.


Kind regards,

Jelle de Jong

On 11/30/22 13:06, Jelle de Jong wrote:

Hello everybody,

I attached the dnf conflict logs with conflicting pacakges.

  Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2()(64bit), but none of the providers can be installed
  Problem 2: package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers 
can be installed
  Problem 3: problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  Problem 4: problem with installed package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64


Kind regards,

Jelle


On 11/29/22 12:43, Jelle de Jong wrote:

Hello everybody,

1. I got many systems with failing dnf-makecache.service because some 
mirror/repo is tried once and fails.


Is there an option to make dnf more reliable, to try the mirror url a 
few times and check its availability?


man yum.conf does not

# cat /etc/yum.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

ExecStart=/usr/bin/dnf makecache --timer

2. I saw in the mailing list the messages about samba sssd dependency 
issues. I got lots of servers failing my dnf-automatic because of this 
when can I expect a resolution for this?


Kind regards,

Jelle[root@freeipa01 ~]# yum clean all
49 files removed
[root@freeipa01 ~]# yum update --refresh --skip-broken
CentOS Stream 8 - AppStream  17 MB/s |  26 MB 00:01
CentOS Stream 8 - BaseOS 17 MB/s |  26 MB 00:01
CentOS Stream 8 - Extras 52 kB/s |  18 kB 00:00
CentOS Stream 8 - Extras common packages1.9 kB/s | 5.2 kB 00:02
Extra Packages for Enterprise Linux 8 - x86_64   10 MB/s |  13 MB 00:01
Extra Packages for Enterprise Linux 8 - Next -  1.9 MB/s | 1.4 MB 00:00
Last metadata expiration check: 0:00:01 ago on Wed Nov 30 13:03:26 2022.
Error:
 Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libndr.so.2()(64bit), but none of the providers can be installed
  - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be 
installed
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.4-2.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.3-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.4-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-3.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-4.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-5.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-8.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.1-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.2-1.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.4-1.el8.x86_64
  - cannot install the best update candidate for package 
samba-client-libs-4.16.4-2.el8.x86_64
  - cannot install the best update candidate for package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
 Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers 
can be installed
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.13.3-3.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.14.4-4.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.14.5-0.el8.x86_64
  - cannot install both samba

[CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2022-12-25 Thread Jelle de Jong

Hello everybody,

A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is causing 
sssd.service systemctl failures all over my CentosOS machines.


What is the best way to report this issue and when can we expect an 
update from the sssd-common package for this regression bug?


I think sssd-common is part of the baseos repository and installed even 
when the configuration file is not installed.


If someone can also provide more details on this issue I would 
appreciate it.


Thank you all in advance,

Kind regards,

Jelle de Jong

# cat /var/log/dnf.log | grep sssd-common
2022-11-25T06:29:42+0100 DEBUG Upgraded: sssd-common-2.7.3-5.el8.x86_64
2022-11-25T06:29:42+0100 DDEBUG 
/var/cache/dnf/baseos-055ffcb2ec25a27f/packages/sssd-common-2.7.3-5.el8.x86_64.rpm 
removed

2022-11-26T06:08:38+0100 DEBUG Upgraded: sssd-common-2.7.3-5.0.1.el8.x86_64
2022-11-26T06:08:38+0100 DDEBUG 
/var/cache/dnf/baseos-055ffcb2ec25a27f/packages/sssd-common-2.7.3-5.0.1.el8.x86_64.rpm 
removed

2022-12-25T06:23:42+0100 DEBUG Upgraded: sssd-common-2.8.1-1.el8.x86_64
2022-12-25T06:23:43+0100 DDEBUG 
/var/cache/dnf/baseos-055ffcb2ec25a27f/packages/sssd-common-2.8.1-1.el8.x86_64.rpm 
removed


# cat /etc/os-release
NAME="CentOS Stream"
VERSION="8"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="8"
PLATFORM_ID="platform:el8"
PRETTY_NAME="CentOS Stream 8"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:8"
HOME_URL="https://centos.org/";
BUG_REPORT_URL="https://bugzilla.redhat.com/";
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux 8"
REDHAT_SUPPORT_PRODUCT_VERSION="CentOS Stream"

# cat /var/log/sssd/sssd.log
(2022-12-25  6:23:34): [sssd] [monitor_quit_signal] (0x3f7c0): Monitor 
received Terminated: terminating children

(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Returned with: 0
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[nss][302626]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child [nss] 
terminated with a signal
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[implicit_files][302625]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child 
[implicit_files] terminated with a signal
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error!

[sssd] [get_monitor_config] (0x0010): Failed to expand application domains
[sssd] [confdb_get_domains] (0x0020): No domains configured, fatal error!
[sssd] [get_monitor_config] (0x0010): No domains configured.
[sssd] [main] (0x0010): SSSD couldn't load the configuration database 
[1432158246]: No domain is enabled


# cat /var/log/sssd/sssd.log
(2022-12-25  6:23:34): [sssd] [monitor_quit_signal] (0x3f7c0): Monitor 
received Terminated: terminating children

(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Returned with: 0
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[nss][302626]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child [nss] 
terminated with a signal
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[implicit_files][302625]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child 
[implicit_files] terminated with a signal
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error!

[sssd] [get_monitor_config] (0x0010): Failed to expand application domains
[sssd] [confdb_get_domains] (0x0020): No domains configured, fatal error!
[sssd] [get_monitor_config] (0x0010): No domains configured.
[sssd] [main] (0x0010): SSSD couldn't load the configuration database 
[1432158246]: No domain is enabled


# systemctl status sssd
● sssd.service - System Security Services Daemon
   Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2022-12-25 06:23:35 
CET; 9h ago

 Main PID: 615303 (code=exited, status=4)
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2022-12-30 Thread Jelle de Jong

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is now 
reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries older 
than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd was 
failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the common 
libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
   Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
   Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
   ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
   └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
 Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output is 
incomplete or unavailable.

# ls -halt /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd 4.0K Dec  8 13:08 .
drwx--. 4 sssd sssd 4.0K Dec  8 13:08 ..
# ls -halZ /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 13:08 .
drwx--. 4 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 
13:08 ..

# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory

# journalctl -u sssd.service --lines 10
-- Logs begin at Mon 2022-12-26 22:15:31 UTC, end at Fri 2022-12-30 
11:05:26 UTC. --

-- No entries --

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-03 Thread Jelle de Jong

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is 
now reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries 
older than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd 
was failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the 
common libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
    Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
    Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
    ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
    └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
  Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output 
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your 
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to 
2.8.1-1 and it seems to be fine.



I did not do anything specific to the
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-03 Thread Jelle de Jong

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is 
now reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries 
older than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd 
was failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the 
common libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
    Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
    Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
    ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
    └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
  Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output 
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your 
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to 
2.8.1-1 and it seems to be fine.


I did not do anything specific to the configuration file. I tried to 
reinstall the new sssd-common pacakge, but it will not install the 
/etc/sssd/sssd.conf file. I can not remove the package because it will 
remove a lot of packages that I do need. I still think something is 
wrong with the new sssd packages..


[root@nginx01 ~]# rpm -qplc sssd-common-2.8.1-1.el8.x86_64.rpm
/etc/logrotate.d/sssd
/etc/pam.d/sssd-shadowutils
/etc/rwtab.d/sssd
/etc/sssd/sssd.conf

[root@nginx01 ~]# rpm -ivh --force sssd-common-2.8.1-1.el8.x86_64.rpm
Verifying...  # 
[100%]
Preparing...  # 
[100%]

Updating / installing...
   1:sssd-common-2.8.1-1.el8  # 
[100%]


[root@nginx01 ~]# ls -hal /etc/sssd/sssd.conf

Kind regards,

Jelle
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).

2023-01-09 Thread Jelle de Jong

Hello everybody,

What is the status of the freeipa/sssd and samba conflicts in the 
repositories?


I can not wrap my mind around that two big packages are not getting 
security updates anymore, because they are conflicting. I will go to 
FOSDEM in Belgium this year to figure out more, but I am considering 
moving my centos systems to rockylinux.


Kind regards,

Jelle de Jong

On 12/16/22 16:59, Jelle de Jong wrote:

Hello everybody,

Could someone give me an estimate on when the repositories are resolving 
the right dependencies for the freeipa pacakges in CentOS Stream release 8?


I have about +10 systems sending me alerts everyday that 
dnf-automatic.service is failing because of the freeipa dependency 
issues. Since freeipa is one of the security elements I would like to 
give people an estimate on when these issues are resolved?


How can I keep track of the work that is been done as well?

Is there a package tracker to be followed for this? URLs?

I asked this question on the centos-devel list weeks ago, but have not 
received any feedback. The issues is bothering me a lot as it is an 
security issue that stays unresolved.


Kind regards,

Jelle de Jong

On 11/30/22 13:06, Jelle de Jong wrote:

Hello everybody,

I attached the dnf conflict logs with conflicting pacakges.

  Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2()(64bit), but none of the providers can be installed
  Problem 2: package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers 
can be installed
  Problem 3: problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  Problem 4: problem with installed package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64


Kind regards,

Jelle


On 11/29/22 12:43, Jelle de Jong wrote:

Hello everybody,

1. I got many systems with failing dnf-makecache.service because some 
mirror/repo is tried once and fails.


Is there an option to make dnf more reliable, to try the mirror url a 
few times and check its availability?


man yum.conf does not

# cat /etc/yum.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

ExecStart=/usr/bin/dnf makecache --timer

2. I saw in the mailing list the messages about samba sssd dependency 
issues. I got lots of servers failing my dnf-automatic because of 
this when can I expect a resolution for this?


Kind regards,

Jelle


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-09 Thread Jelle de Jong

On 1/3/23 13:41, Simon Matter wrote:

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:

A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is
causing sssd.service systemctl failures all over my CentosOS
machines.

...

[sssd] [confdb_expand_app_domains] (0x0010): No domains configured,
fatal error!



Were you previously using sssd?  Or is the problem merely that it is
now reporting an error starting a service that you don't use?

Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf
exist?  If so, what are the contents of those files?

What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries
older than the package update?


I got a monitoring system for failing services and I sudenly started
getting dozens of notifications for all my CentOS systems that sssd
was failing. This is after the sssd package updates, causing this
regression. SSSD services where not really in use but some of the
common libraries are used.

# systemctl status sssd
● sssd.service - System Security Services Daemon
     Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled;
vendor preset: enabled)
     Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10
UTC; 6 days ago
Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s
ago
     ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
     └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
   Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to
2.8.1-1 and it seems to be fine.


I did not do anything specific to the configuration file. I tried to
reinstall the new sssd-common pacakge, but it will not install the
/etc/sssd/sssd.conf file. I can not remove the package because it will
remove a lot of packages that I do need. I still think something is
wrong with the new sssd packages..

[root@nginx01 ~]# rpm -qplc sssd-common-2.8.1-1.el8.x86_64.rpm
/etc/logrotate.d/sssd
/etc/pam.d/sssd-shadowutils
/etc/rwtab.d/sssd
/etc/sssd/sssd.conf


Most likely the file /etc/sssd/sssd.conf is a ghost file and therefore
it's not installed but only recognized as being part of the package.

Simon


I do not get this. There has nog been an /etc/sssd/sssd.conf on my 
system before as it only installed sssd-common due to dependencies for 
other libaries. I do not use the sssd service. The package gets an 
update and now my systemd status is failing on a lot of systems and I am 
being tolled I should get /etc/sssd/sssd.conf sorted?


Can you fix the sssd package by either not enabling the sssd systemd 
service or some other solution that does not make systemd status fail?


This is a regression and it is going to cause me a lot of time now to 
write ansible code for the disabling of the sssd service on all systems 
that have it installed due to dependencies but do not use it.


sssd.services failing regressions and dfn-automatic.serivces failing 
regressions due to freeipa/sssd/samba conflicts for months now.


Jelle




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-09 Thread Jelle de Jong



On 1/9/23 17:45, Simon Matter wrote:

On 1/3/23 13:41, Simon Matter wrote:

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:

A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is
causing sssd.service systemctl failures all over my CentosOS
machines.

...

[sssd] [confdb_expand_app_domains] (0x0010): No domains configured,
fatal error!



Were you previously using sssd?  Or is the problem merely that it is
now reporting an error starting a service that you don't use?

Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf
exist?  If so, what are the contents of those files?

What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries
older than the package update?


I got a monitoring system for failing services and I sudenly started
getting dozens of notifications for all my CentOS systems that sssd
was failing. This is after the sssd package updates, causing this
regression. SSSD services where not really in use but some of the
common libraries are used.

# systemctl status sssd
● sssd.service - System Security Services Daemon
      Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled;
vendor preset: enabled)
      Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10
UTC; 6 days ago
Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s
ago
      ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
      └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not
met
    Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to
2.8.1-1 and it seems to be fine.


I did not do anything specific to the configuration file. I tried to
reinstall the new sssd-common pacakge, but it will not install the
/etc/sssd/sssd.conf file. I can not remove the package because it will
remove a lot of packages that I do need. I still think something is
wrong with the new sssd packages..

[root@nginx01 ~]# rpm -qplc sssd-common-2.8.1-1.el8.x86_64.rpm
/etc/logrotate.d/sssd
/etc/pam.d/sssd-shadowutils
/etc/rwtab.d/sssd
/etc/sssd/sssd.conf


Most likely the file /etc/sssd/sssd.conf is a ghost file and therefore
it's not installed but only recognized as being part of the package.

Simon


I do not get this. There has nog been an /etc/sssd/sssd.conf on my
system before as it only installed sssd-common due to dependencies for
other libaries. I do not use the sssd service. The package gets an
update and now my systemd status is failing on a lot of systems and I am
being tolled I should get /etc/sssd/sssd.conf sorted?

Can you fix the sssd package by either not enabling the sssd systemd
service or some other solution that does not make systemd status fail?

This is a regression and it is going to cause me a lot of time now to
write ansible code for the disabling of the sssd service on all systems
that have it installed due to dependencies but do not use it.

sssd.services failing regressions and dfn-automatic.serivces failing
regressions due to freeipa/sssd/samba conflicts for months now.


Do you have a file /etc/sssd/sssd.conf? IIRC you said you don't have such
a file, which is fine.


no file is there.


Do you have any file in /etc/sssd/conf.d/? This directory should be empty
but it's possible that another package puts something there.


no files are there.

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-19 Thread Jelle de Jong

On 1/13/23 11:52, Leon Fauster via CentOS wrote:

Am 13.01.23 um 05:34 schrieb Orion Poplawski:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is 
now reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries 
older than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd 
was failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the 
common libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
    Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
    Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
    ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
    └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
  Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output 
is incomplete or unavailable.

# ls -halt /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd 4.0K Dec  8 13:08 .
drwx--. 4 sssd sssd 4.0K Dec  8 13:08 ..
# ls -halZ /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 
13:08 .
drwx--. 4 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 
13:08 ..

# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory

# journalctl -u sssd.service --lines 10
-- Logs begin at Mon 2022-12-26 22:15:31 UTC, end at Fri 2022-12-30 
11:05:26 UTC. --

-- No entries --

Kind regards,

Jelle de Jong


I don't quite understand where this:
    Main PID: 3953157 (code=exited, status=4)

came from.  As it seems like sssd was started at some point and 
failed. But that shouldn't have happened because:


Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
 ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
 └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met

It's telling you that because /etc/sssd/sssd.conf does not exist and 
/etc/sssd/sssd.conf.d is not empty, the service was not started 
because the conditions were not met.  This is as expected in your case.


If you don't want it to even check, just disable the service:

systemctl disable sssd.service




Before doing this; @OP: what's the output of:

# authselect current


]# authselect current
Profile ID: sssd
Enabled features: None

I wrote the following Ansible code to automate disabling the sssd 
service I still consider this a regression as it just started 
apearing on all the systems.


- name: get sssd service status
  ansible.builtin.systemd:
name: sssd.service
  register: sssd

- name: disable sssd.service service status
  ansible.builtin.systemd:
name: sssd.service
enabled: false
state: stopped
  when:
- sssd.status.ActiveState is defined
- sssd.status.ActiveState == "failed"

- name: systemctl reset-failed
  command: systemctl reset-failed
  args:
warn: false
  when:
- sssd.status.ActiveState is defined
- sssd.status.ActiveState == "failed"
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).

2023-01-19 Thread Jelle de Jong



On 1/9/23 19:06, Johnny Hughes wrote:

On 1/9/23 10:16, Jelle de Jong wrote:

Hello everybody,

What is the status of the freeipa/sssd and samba conflicts in the 
repositories?


I can not wrap my mind around that two big packages are not getting 
security updates anymore, because they are conflicting. I will go to 
FOSDEM in Belgium this year to figure out more, but I am considering 
moving my centos systems to rockylinux.


Kind regards,

Jelle de Jong

On 12/16/22 16:59, Jelle de Jong wrote:

Hello everybody,

Could someone give me an estimate on when the repositories are 
resolving the right dependencies for the freeipa pacakges in CentOS 
Stream release 8?


I have about +10 systems sending me alerts everyday that 
dnf-automatic.service is failing because of the freeipa dependency 
issues. Since freeipa is one of the security elements I would like to 
give people an estimate on when these issues are resolved?


How can I keep track of the work that is been done as well?

Is there a package tracker to be followed for this? URLs?

I asked this question on the centos-devel list weeks ago, but have 
not received any feedback. The issues is bothering me a lot as it is 
an security issue that stays unresolved.


Kind regards,

Jelle de Jong

On 11/30/22 13:06, Jelle de Jong wrote:

Hello everybody,

I attached the dnf conflict logs with conflicting pacakges.

  Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2()(64bit), but none of the providers can be 
installed
  Problem 2: package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the 
providers can be installed
  Problem 3: problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  Problem 4: problem with installed package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64


Kind regards,

Jelle


On 11/29/22 12:43, Jelle de Jong wrote:

Hello everybody,

1. I got many systems with failing dnf-makecache.service because 
some mirror/repo is tried once and fails.


Is there an option to make dnf more reliable, to try the mirror url 
a few times and check its availability?


man yum.conf does not

# cat /etc/yum.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

ExecStart=/usr/bin/dnf makecache --timer

2. I saw in the mailing list the messages about samba sssd 
dependency issues. I got lots of servers failing my dnf-automatic 
because of this when can I expect a resolution for this?




There should not be freeipa/sssd dependency issues in the latest release.


These are the freeipa/samba issue I am having all other packages are 
updated... and the server got rebooted as well. dnf-automatic is failing 
because of these conflicts.


● dnf-automatic.service loaded failed failed dnf automatic

[root@freeipa01 ~]# yum update --best --allowerasing --skip-broken --refresh
CentOS Stream 8 - AppStream 

  14 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  79 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  11 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  13 kB/s | 
3.0 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

  43 kB/s | 
 26 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

  69 kB/s | 
 32 kB 00:00

Error:
 Problem: cannot install the best update candidate for package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  - problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr-nbt.so.0()(64bit), but none of the providers can be 
installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the 
providers can be installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-passdb.so.0()(64bit), but none of the providers can be 
installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of 
the providers can be installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-util.so.0()(64bit), but none of the providers can be 
installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of

[CentOS] regression in libsmbclient-4.17.5-0.el8.x86_64 with nextcloud Kerberos smb intergration

2023-02-11 Thread Jelle de Jong

Hello everybody,

Just reporting a regression with libsmbclient 4.17.5, 
php-smbclient-1.0.6-1.el8.remi.8.1.x86_64 and nextcloud 25.0.3.2


I have not found the cause nor the solution, but for other users I am 
reporting a workaround here:


[root@nextcloud01 ~]# yum downgrade libsmbclient-4.17.2-2.el8.x86_64
[root@nextcloud01 ~]# systemctl restart php-fpm.service

Kind regards,

Jelle de Jong


 Error PHP Error: Undefined array key 1 at 
/var/www/html/nextcloud/apps/files_external/3rdparty/icewind/smb/src/Native/NativeFileInfo.php#46 
at lib/private/Log/ErrorHandler.php line 92   2023-02-11T16:09:01+01:00





 0. 
apps/files_external/3rdparty/icewind/smb/src/Native/NativeFileInfo.php 
line 46 

OC\Log\ErrorHandler::onError( 








) 




 1. 
apps/files_external/3rdparty/icewind/smb/src/Native/NativeFileInfo.php 
line 69 



Icewind\SMB\Native\NativeFileInfo->stat( 







) 




 2. 
apps/files_external/3rdparty/icewind/smb/src/Native/NativeShare.php line 
114 



Icewind\SMB\Native\NativeFileInfo->getSize( 







) 




 3. 
apps/files_external/lib/Lib/Storage/SMB.php line 191 




Icewind\SMB\Native\NativeShare->stat( 







) 




 4. 
apps/files_external/lib/Lib/Storage/SMB.php line 348 




OCA\Files_External\Lib\Storage\SMB->getFileInfo( 







) 




 5. 
lib/private/Files/Storage/Common.php line 462 




OCA\Files_External\Lib\Storage\SMB->stat( 







) 




 6. 
apps/files_external/lib/Lib/Storage/SMB.php line 729 



OC\Files\Storage\Common->test( 








) 




 7. 
apps/files_external/lib/MountConfig.php line 131 




OCA\Files_External\Lib\Storage\SMB->test( 







) 




 8. 
apps/files_external/lib/Controller/StoragesController.php line 288 




OCA\Files_External\MountConfig::getBackendStatus("*** sensitive 
parameters replaced ***") 

 9. 
apps/files_external/lib/Controller/UserGlobalStoragesController.php line 
126 



OCA\Files_External\Controller\StoragesController->updateStorageStatus("*** 
sensitive parameters replaced ***") 

10. 
lib/private/AppFramework/Http/Dispatcher.php line 225 




OCA\Files_External\Controller\UserGlobalStoragesController->show( 







) 




11. 
lib/private/AppFramework/Http/Dispatcher.php line 133 




OC\AppFramework\Http\Dispatcher->executeController( 







) 




12. lib/private/AppFramework/App.php 
line 172 




OC\AppFramework\Http\Dispatcher->dispatch( 







) 




13. lib/private/Route/Router.php line 
298 



OC\AppFramework\App::main( 








) 




14. lib/base.php line 1047 




OC\Route\Router->match( 








) 




15. index.php line 36 




OC::handleRequest( 








) 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] wget http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz --max-redirect=0 --no-hsts

2023-03-29 Thread Jelle de Jong

Hello everybody,

I am using pxelinux to install centos stream 9 systems but this stopped 
working a while ago with mirror.stream.centos.org because it started 
forcing HTTPS and pxelinux is HTTP only.


Could we please make the mirror.stream.centos.org HTTP available again 
please?


$ wget 
http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz 
 --max-redirect=0 --no-hsts
--2023-03-29 20:49:54-- 
http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz
Resolving mirror.stream.centos.org (mirror.stream.centos.org)... 
18.173.233.69, 18.173.233.28, 18.173.233.77, ...
Connecting to mirror.stream.centos.org 
(mirror.stream.centos.org)|18.173.233.69|:80... connected.

HTTP request sent, awaiting response... 301 Moved Permanently
Location: 
https://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz 
[following]

0 redirections exceeded.

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] wget http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz --max-redirect=0 --no-hsts

2023-03-30 Thread Jelle de Jong

On 3/30/23 07:11, Gordon Messmer wrote:

On 2023-03-29 11:52, Jelle de Jong wrote:
I am using pxelinux to install centos stream 9 systems but this 
stopped working a while ago with mirror.stream.centos.org because it 
started forcing HTTPS and pxelinux is HTTP only. 



I believe the recommended configuration is to have vmlinuz and 
initrd.img on the same tftp server you use for the PXE boot loader.


https://docs.fedoraproject.org/en-US/fedora/f36/install-guide/advanced/Network_based_Installations/


I use a lot of other distributions as well, and debian, ubuntu, all 
offer HTTP for their mirrors.


This way an update is directly used, I used to download the vmlinux if 
it gets out of date it gives weird errors when loading the kernels 
further in the process.


Thank you in advance for making the mirror.stream.centos.org work with 
HTTP again and letting users choose between HTTP and HTTPS.


Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] /bin/journalctl --flush hangs on CentOS Stream release 8

2023-03-30 Thread Jelle de Jong

Hello everybody,

Somehting is causing /bin/journalctl --flush to hang on some new and 
existing installations of on CentOS Stream release 8


# journalctl --disk-usage
Archived and active journals take up 8.0M in the file system.
# journalctl --verify
PASS: /run/log/journal/48651cee389b4600bf559fb29d1c2066/system.journal

# /usr/bin/journalctl --flush
^C

Do other users have this as well and is there a fix or update pending?

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Problem: cannot install the best update candidate for package pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch

2023-09-07 Thread Jelle de Jong

Hello everybody,

What might be going wrong here? Is there an upstream bug report? How to 
proceed?


# yum update --refresh
CentOS Stream 8 - AppStream 

  10 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  45 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  11 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  57 kB/s | 
3.0 kB 00:00
CentOS Stream 8 - PowerTools 

  19 kB/s | 
4.4 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

 113 kB/s | 
 32 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

 422 kB/s | 
 32 kB 00:00

Error:
 Problem: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
  - both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch from 
appstream and tomcat-lib-1:9.0.62-12.el8.noarch from appstream obsolete 
pki-servlet-engine
  - package tomcat-jsp-2.3-api-1:9.0.62-12.el8.noarch from appstream 
requires tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the 
providers can be installed
  - package tomcat-lib-1:9.0.62-12.el8.noarch from appstream requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can 
be installed
  - package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch from 
appstream is filtered out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' 
to use not only best candidate packages)


Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


  1   2   3   >