Re: [CentOS-virt] CentOS 7 AMI Building

2015-04-16 Thread Karanbir Singh
On 04/14/2015 12:48 PM, Jason Antman wrote: Hello, I'm new to this list, but I noticed a post from March 30th inquiring about the build scripts for the official CentOS7 AMIs. I'm also interested in this; I'm tasked with (unfortunately) spinning up some VMs in our corporate VMWare

Re: [CentOS-virt] Xen in a Box Proposal

2015-04-16 Thread Gautam Malu
Hi, Regarding my gsoc proposal (xen in a box), I have developed a set of scripts to create a custom CentOS ISO which delivers Xen 4.4 stack on CentOS 6.6 with libvirt and fully bridge network settings. I have used xen scripts for networking settings. Waiting for feedback. scripts:

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Johnny Hughes
On 04/16/2015 12:53 AM, Mike wrote: CentOS 7.1503 installed. Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be configured). The samba wiki Readme First page states, Some distributions like . . . Red Hat Enterprise Linux (and clones), ship BIND9 packages with disabled

Re: [CentOS] Related to the new laptop question: CentOS on a netbook?

2015-04-16 Thread Michael Horne
scratch that, I swapped the 2gb for 4gb. most people are amazed at the speed of it... I managed to convert a few people to linux on their netbook recently and they will never turn back. great way to rejuvenate old hardware. On 16/04/15 10:39, Michael Horne wrote: running a cheap Acer Aspire

[CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
Hi, Is there any nice way to get tlsv1.2 support to centos 5? upgrading os to 6 is not option available. -- Eero ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
How about using gnutls? Eero 16.4.2015 12.46 ip. Leon Fauster leonfaus...@googlemail.com kirjoitti: Am 16.04.2015 um 11:43 schrieb Eero Volotinen eero.voloti...@iki.fi: Is there any nice way to get tlsv1.2 support to centos 5? upgrading os to 6 is not option available. Unfortunately not.

Re: [CentOS] Where's the debuginfo?

2015-04-16 Thread Johnny Hughes
On 04/15/2015 10:45 PM, Lamar Owen wrote: On 04/03/2015 11:11 AM, Eric Millbrandt wrote: Specifically, I'm looking for kernel-debuginfo-3.10.0-229.1.2.el7.x86_64, but the latest debuginfo file is kernel-debuginfo-3.10.0-123.13.2.el7.x86_64.rpm, which isn't even the most recent release from

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Leon Fauster
Am 16.04.2015 um 11:43 schrieb Eero Volotinen eero.voloti...@iki.fi: Is there any nice way to get tlsv1.2 support to centos 5? upgrading os to 6 is not option available. Unfortunately not. -- LF ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] Related to the new laptop question: CentOS on a netbook?

2015-04-16 Thread Michael Horne
running a cheap Acer Aspire one 722, 2gb ram, dual core 1ghz, swapped the HDD for a SSD. it's running fedora 21 LXDE. it's fast, powerful enough for working on the move and boots / shuts down in about 10 seconds flat. I also had Centos7 on here before but Fedora has better support for

Re: [CentOS] Update to 1503 release problem

2015-04-16 Thread Dennis Jacobfeuerborn
On 16.04.2015 12:51, Alessandro Baggi wrote: From freedesktop.org: Q: I want to change a service file, but rpm keeps overwriting it in /usr/lib/systemd/system all the time, how should I handle this? A: The recommended way is to copy the service file from /usr/lib/systemd/system to

Re: [CentOS] Update to 1503 release problem

2015-04-16 Thread Alessandro Baggi
From freedesktop.org: Q: I want to change a service file, but rpm keeps overwriting it in /usr/lib/systemd/system all the time, how should I handle this? A: The recommended way is to copy the service file from /usr/lib/systemd/system to /etc/systemd/system and edit it there. The latter

Re: [CentOS] Update to 1503 release problem

2015-04-16 Thread Alessandro Baggi
Hi list, the update has modified /etc/systemd/system/multi-user.target.wants/postgresql.service pointing to /usr/lib/systemd/system/postgresql.service. I have edited postgres file to change PGDATA. How James says, I have edited postgresql.service manually. What is the correct way? Thanks in

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Dennis Jacobfeuerborn
On 16.04.2015 04:15, Les Mikesell wrote: On Wed, Apr 15, 2015 at 9:00 PM, John R Pierce pie...@hogranch.com wrote: On 4/15/2015 6:52 PM, Les Mikesell wrote: Mostly I'm interested in avoiding surprises and having code that isn't married to the weirdness of any particular version of any

Re: [CentOS] Modifying files of NFS

2015-04-16 Thread Dennis Jacobfeuerborn
On 16.04.2015 02:12, Steven Tardy wrote: I have an NFS storage system and want to run jpegoptim on several GB's of jpeg images and I'm wondering what the best approach is. Is it ok to run this operation on the Server itself while the clients have it mounted or will this lead to problems like

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
Hi Johnny, Thank you for your response. I thought to choose the sernet package because of the following stated in Samba Readme: Samba packages shipped in some distributions like e. g. Fedora, RHEL may not be able to be used as Samba AD DC, because the distribution relies on MIT Kerberos which

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Jim Perrin
On 04/16/2015 04:49 AM, Eero Volotinen wrote: How about using gnutls? Not in the version included with EL5 as I recall. You might want to give some serious thought to an upgrade plan. El5 goes EOL in 2017, so you've got a little over a year. Additionally, EL5 is already missing security

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Les Mikesell
On Thu, Apr 16, 2015 at 6:58 AM, Dennis Jacobfeuerborn denni...@conversis.de wrote: No, systemd actually remaps /tmp from apache - and apparently most other daemons - to private directories below /tmp with configs as shipped. The command line tool wrote the file to /tmp as expected. The

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Johnny Hughes
On 04/16/2015 06:33 AM, Mike wrote: Hi Johnny, Thank you for your response. I thought to choose the sernet package because of the following stated in Samba Readme: Samba packages shipped in some distributions like e. g. Fedora, RHEL may not be able to be used as Samba AD DC, because the

[CentOS] ClamAV reports a trojan

2015-04-16 Thread James B. Byrne
This morning I discovered this in my clamav report from one of our imap servers: /usr/share/nmap/scripts/irc-unrealircd-backdoor.nse: Unix.Trojan.MSShellcode-21 FOUND I have looked at this script and it appears to be part of the nmap distribution. It actually tests for irc backdoors. IRC is

Re: [CentOS] ClamAV reports a trojan

2015-04-16 Thread Les Mikesell
On Thu, Apr 16, 2015 at 10:01 AM, James B. Byrne byrn...@harte-lyne.ca wrote: This morning I discovered this in my clamav report from one of our imap servers: /usr/share/nmap/scripts/irc-unrealircd-backdoor.nse: Unix.Trojan.MSShellcode-21 FOUND I have looked at this script and it appears

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Les Mikesell
On Thu, Apr 16, 2015 at 9:25 AM, Matthew Miller mat...@mattdm.org wrote: On Thu, Apr 16, 2015 at 07:44:21AM -0500, Les Mikesell wrote: The issue here really isn't systemd or the PrivateTmp feature but the fact that some applications don't properly distinguish between temporary files and

Re: [CentOS] Laptop for CentOS

2015-04-16 Thread Chuck Campbell
On 4/15/2015 11:55 AM, Steve Clark wrote: Hello, Has anyone used the Dell M3800 (ubuntu) laptop to run CentOS 6.x? If so how did it work out? Also does anyone have a fairly new laptop they are running CentOS 6.x on, that they are happy about? I am in the market for a new laptop and it

Re: [CentOS] ClamAV reports a trojan

2015-04-16 Thread Valeri Galtsev
On Thu, April 16, 2015 10:09 am, Les Mikesell wrote: On Thu, Apr 16, 2015 at 10:01 AM, James B. Byrne byrn...@harte-lyne.ca wrote: This morning I discovered this in my clamav report from one of our imap servers: /usr/share/nmap/scripts/irc-unrealircd-backdoor.nse: Unix.Trojan.MSShellcode-21

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
On Thu, Apr 16, 2015 at 9:29 AM, Johnny Hughes joh...@centos.org wrote: On 04/16/2015 06:33 AM, Mike wrote: BUT .. If I was going to solve this problem, I would do so asking the sernet guys and I would rebuild the bind sources in CentOS with the proper configure switches so it would likely

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Matthew Miller
On Thu, Apr 16, 2015 at 07:44:21AM -0500, Les Mikesell wrote: The issue here really isn't systemd or the PrivateTmp feature but the fact that some applications don't properly distinguish between temporary files and data files. Maybe, but if an application wants a private directory for

Re: [CentOS] systemd private tmp dirs

2015-04-16 Thread Matthew Miller
On Wed, Apr 15, 2015 at 08:52:16PM -0500, Les Mikesell wrote: Mostly I'm interested in avoiding surprises and having code that isn't married to the weirdness of any particular version of any particular distribution. And I found this to be pretty surprising, given that I That's always

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Leon Fauster
Am 16.04.2015 um 11:46 schrieb Leon Fauster leonfaus...@googlemail.com: Am 16.04.2015 um 11:43 schrieb Eero Volotinen eero.voloti...@iki.fi: Is there any nice way to get tlsv1.2 support to centos 5? upgrading os to 6 is not option available. Unfortunately not.

Re: [CentOS] Where's the debuginfo?

2015-04-16 Thread Lamar Owen
On 04/16/2015 04:39 AM, Johnny Hughes wrote: On 04/15/2015 10:45 PM, Lamar Owen wrote: Updated kernel-debuginfo packages are now in the debuginfo.centos.org tree. Thanks to the CentOS team for that. For the record, the secure boot signing process makes the kernel build process on CentOS-7

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
well. this hack solution might work: http://www.tuxad.de/blog/archives/2014/11/19/openssl_updatesenhancements_for_rhel__centos_5/index.html -- Eero 2015-04-16 17:30 GMT+03:00 Leon Fauster leonfaus...@googlemail.com: Am 16.04.2015 um 11:46 schrieb Leon Fauster leonfaus...@googlemail.com: Am

Re: [CentOS] Laptop with CentOS only support

2015-04-16 Thread m . roth
ken wrote: Looking for my next linux laptop too, I'm loving this thread. A tangential yet very much related question: In the past when I've purchased a computer and put linux on it, I always had to keep Windows on it (dual-boot) in case there was a probable hardware problem and I had to

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread James Hogarth
On 16 Apr 2015 14:29, Johnny Hughes joh...@centos.org wrote: On 04/16/2015 06:33 AM, Mike wrote: Hi Johnny, Thank you for your response. I thought to choose the sernet package because of the following stated in Samba Readme: Samba packages shipped in some distributions like e. g.

[CentOS-announce] CEBA-2015:0817 CentOS 6 kdelibs BugFix Update

2015-04-16 Thread Johnny Hughes
CentOS Errata and Bugfix Advisory 2015:0817 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0817.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

Re: [CentOS] Laptop for CentOS

2015-04-16 Thread Steve Clark
On 04/15/2015 12:55 PM, Steve Clark wrote: Hello, Has anyone used the Dell M3800 (ubuntu) laptop to run CentOS 6.x? If so how did it work out? Also does anyone have a fairly new laptop they are running CentOS 6.x on, that they are happy about? I am in the market for a new laptop and it must

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-16 Thread Eero Volotinen
in fact: modgnutls provides easy way to get tlsv1.2 to rhel 5 -- Eero 2015-04-16 21:02 GMT+03:00 Eero Volotinen eero.voloti...@iki.fi: well. this hack solution might work: http://www.tuxad.de/blog/archives/2014/11/19/openssl_updatesenhancements_for_rhel__centos_5/index.html -- Eero

Re: [CentOS] Disable SSLv3 in sendmail in CentOS 5

2015-04-16 Thread Paul Heinlein
On Thu, 16 Apr 2015, Andrew Daviel wrote: RedHat released sendmail-8.13.8-10.el5_11.src.rpm which includes sendmail-8.13.8-ssl-opts.patch which adds support for disabling SSLv3 and SSLv2 in sendmail.cf But as far as I can see there is no support in sendmail.mc - I can't see how to compile

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-16 Thread Peter Lawler
On 17/04/15 12:31, Valeri Galtsev wrote: But being not native English speaker, I use it (not native English speaker) Figured as much, which is why I mentioned it ;) as an excuse for being unable to pronounce anything. Not as if most English speakers can pronounce many English words ...

[CentOS] Disable SSLv3 in sendmail in CentOS 5

2015-04-16 Thread Andrew Daviel
RedHat released sendmail-8.13.8-10.el5_11.src.rpm which includes sendmail-8.13.8-ssl-opts.patch which adds support for disabling SSLv3 and SSLv2 in sendmail.cf But as far as I can see there is no support in sendmail.mc - I can't see how to compile sendmail.mc to get the required line

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-16 Thread Valeri Galtsev
On Thu, April 16, 2015 8:59 pm, Peter Lawler wrote: [OT ALERT] On 17/04/15 02:28, Valeri Galtsev wrote: clamav is a scanner that is designed to detect viruses (virii I should use for plural as it is Latin word) I believe this 'rule' in English is misunderstood by many and as a general

[CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-16 Thread Peter Lawler
[OT ALERT] On 17/04/15 02:28, Valeri Galtsev wrote: clamav is a scanner that is designed to detect viruses (virii I should use for plural as it is Latin word) I believe this 'rule' in English is misunderstood by many and as a general rule of thumb... tl;dr: Words from Old English that came

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
On Thu, Apr 16, 2015 at 6:03 PM, James Hogarth james.hoga...@gmail.com wrote: This was required for kerberos secured updates prior to el7.1 and el6.6 ... The problem in the underlying kerberos libraries was resolved so that kerberos based updates worked with gss again and spnego doesn't need

Re: [CentOS] Laptop with CentOS only support

2015-04-16 Thread ken
Looking for my next linux laptop too, I'm loving this thread. A tangential yet very much related question: In the past when I've purchased a computer and put linux on it, I always had to keep Windows on it (dual-boot) in case there was a probable hardware problem and I had to walk through