Re: [CentOS] Install question

[Barry Brimer]

My questions are several.

1) The build hardware is only a single processor with 768MB of memory (also a 
P3) what if anything will I need to do to enable the second processor?  (I'll 
make provisions for a larger swap space at build time)


I believe in CentOS 5, due to the popularity of hyperthreaded and dual 
core cpus, the base kernel is smp-enabled.  Someone please correct me if 
I'm wrong


2) The build hardware won't have a second  disk usable for RAID, is it 
possible to build the RAID as degraded during the install?  Or am I better 
off building it as a non RAID system and transfer everything to a RAID disk 
later?


I would do the latter.  I've not tried building a raid, degrading it and 
then using it only to add another disk later, although in theory it could 
be done, I believe.


3) The system bios will allow me to boot off the network, can I do an install 
from that boot?  there is no CD/DVD reader in the box, nor is there a floppy 
drive.  USB (flash?) may possible, but it is USB1.0 (1.1?) and quite slow and 
I'm not 100% positive the BIOS will support booting from a USB device.


Yes.  Check out cobbler 

Any other caveats to be aware of?  My experience with linux has been several 
Fedora (core) releases some Redhad releases prior to that, and many many many 
years ago slackware (when the install was a stack of diskettes!)


Nope.  I think you'll be fine.

Welcome to CentOS!

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Wondering about CentOS 5.1 functionality

[Barry Brimer]

- - Broadcom Wireless Adapter - 1390 Wlan (bcm43xx)


Works in CentOS 5.1 ... requires firmware.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Wondering about CentOS 5.1 functionality

[Barry Brimer]

Barry Brimer wrote:

- - Broadcom Wireless Adapter - 1390 Wlan (bcm43xx)


Works in CentOS 5.1 ... requires firmware.
___


sweet... is there a tool available on the DVD to extract said firmware?
I know there was on the OpenSUSE DVD.


I don't believe CentOS provides bcm43xx-fwcutter.  It is available from 
many sources.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How do I blank or overwrite DVD-RW disks in CentOS 5?

[Barry Brimer]

I'm trying to use DVD-RW ("minus RW") disks in my LG GSA-4040B
drive.  I can write a new disk just fine, but can't find any way to
blank or re-use a disk.  When I run xcdroast and click on the "Blank
CD/DVD+-RW" button, I get "Error while blanking."  Here is last part
of the dialog:

   Using generic SCSI-3/mmc DVD-R(W) driver (mmc_mdvd)
   Driver flags   : SWABAUDIO BURNFREE
   Supported modes: PACKET SAO
   Drive buf size : 1245184 = 1216 KB
   Drive DMA Speed: 11772 kB/s 66x CD 8x DVD
   cdrecord.prodvd: Success. set streaming: scsi sendcmd: no error
   CDB:  B6 00 00 00 00 00 00 00 00 00 1C 00
   status: 0x2 (CHECK CONDITION)
   Sense Bytes: F0 00 05 00 00 00 00 10 B6 00 00 0D 21 00 00 00
   Sense Key: 0x5 Illegal Request, Segmant 0
   Sense Code: 0x21 Qual 0x00 (logical block address out of range) Fru 0x0
   Sense flags: Blk 0 (valid)
   cmd finished after 0.004 s timeout 40s
   Current Secsize: 2048
   cdrecord.prodvd: Cannot set speed/dummy.
   ATIP start of lead in:  -150 (00:00/00)

I've had similar lack of success trying to blank or overwrite using
cdrecord or growisofs.  The disks I'm using are Sony 2X DVD-RW 4.7GB,
which _should_ be compatible with the drive AFAICT.  The drive is
happy to write to a new disk.


One possibility is:

$ cdrecord blank=help
Blanking options:
all blank the entire disk
discblank the entire disk
diskblank the entire disk
fastminimally blank the entire disk (PMA, TOC, pregap)
minimal minimally blank the entire disk (PMA, TOC, pregap)
track   blank a track
unreserve   unreserve a track
trtail  blank a track tail
unclose unclose last session
session blank last session

According to man cdrecord:

-format
Format a CD-RW/DVD-RW/DVD+RW disc.  Formatting is currently only 
implemented for DVD+RW media.  A maiden DVD+RW media needs to be formatted 
before you may write to it.  However, as cdrecord autodetects the need for 
formatting in this case and auto formats the medium before it starts 
writing, the -format option is only needed if you like to forcibly 
reformat a DVD+RW medium.


Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] max mount count incovenient

[Barry Brimer]

Quoting Linux Man <[EMAIL PROTECTED]>:

> Hello group
> I added a new partition in fstab, and works without a problem.
> I used mkfs.ext3 to create the partition.
> My problem is that every 26 boots, the system tells that the partition
> have no been checked since 26 systems boots, ant start to check my new
> partition. This is a lot of time consuming, and always is in a bad
> time.
> There some way to do the check in a controlled time? i.e. do it the
> check before 26 system boot, when the time is no problem.
> Thanks a lot
> Best regards

I believe "tune2fs -c <# of times mounted before count> " should do it. 
See man tune2fs for more details.

Hope this helps,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Error logs where?

[Barry Brimer]

> does any one know where the error log for the server would be in what dir?

Most logs are in /var/log.  Some specific logs might have further subdirectories
such as /var/log/httpd.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Nic order detection

[Barry Brimer]

MatsK wrote:

Les Mikesell wrote:
I have a number of machines that have 4 NICs, two of which are actually in 
use, running Centos 5.  When they are rebooted, they seem to change the 
eth interface names, assigning them in different orders.  I'm a little 
fuzzy on the details because they are at a remote location and I can't 
access them easily - especially after the network breaks.  Shouldn't:

alias eth0 bnx2
alias eth1 bnx2
alias eth2 e1000
alias eth3 e1000
in /etc/modprobe.conf always make the intel cards eth2 and 3?


Noop, this is done with ifcfg-ethX where X is the if number.

Create a /etc/sysconfig/network/ifcfg-eth0 that look like this example:

DEVICE=eth0
HWADDR=00:01:23:45:67:89
ONBOOT=yes
TYPE=Ethernet
NETMASK=255.255.255.0
IPADDR=192.168.1.154
GATEWAY=192.168.1.1

and then create ifcfg-eth1, ifcfg-eth2, ifcfg-eth3

then do a "service network restart" to activate the settings.


I do have the ifcfg-ethX files for the 2 interfaces that are currently 
active, but since the machines were built by image copies of a master disk, 
they do not have HWADDR address entries.  A person on-site with access to the 
console adjusted them if they didn't come up right the first time, but they 
seem to shift around on each reboot.  Will adding the HWADDR entry nail them 
down even if it doesn't match the nic type specified in modprobe.conf?  Can 
someone point me to the code where this happens?  Until recently the machines 
were running centos 3.x and this seems to be a difference in behavior.


In my experience, adding the HWADDR line to your ifcfg-ethX files will tie 
the network interface to the right card, regardless of modprobe.conf 
entries.  I usually remove HWADDR lines when anaconda provides them at 
install time because if I replace a nic (which obviously has a different 
MAC address) without updating the HWADDR line, the interface fails to 
start.  In cases where modprobe.conf is unable to order the interfaces as 
I want it to, I add HWADDR lines.  Works every time.


Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] md5 passwords?

[Barry Brimer]

On a C4.4 system, I want to add md5 passwords for the grub boot menu to 
prevent users from making selections other than the default boot options.


I also want to add md5 passwords when attempting single user mode boots (may 
be answered by first request).


The same for C5 systems.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP 5.2.5 when ?

[Barry Brimer]

Even an exteremely brief search of the archives of this list would turn up 
tons of similar questions, and the same answer every time -- Red Hat 
backports security fixes to the stable version of packages in their 
Enterprise distro.  That's why, e.g., for it's entire 5 year supported life, 
RHEL5 will be based on kernel 2.6.18.  However the base kernel will be 
heavily patched for security, driver upgrades, and new hardware support. 
They treat all packages (including PHP) similarly.


Red Hat now supports RHEL for 7 years after the release of each version.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Capturing Packets -- Ethereal

[Barry Brimer]

Quoting Al Sparks <[EMAIL PROTECTED]>:

> This may be off topic, but I think my ethereal question might be simple
> enough.
>
> I am presently compiling ethereal on a CentOS platform to check it out.
>
> But the packets I want to monitor are actually on a different CentOS
> platform, and I'd rather not install Ethereal on it, if for no other reason I
> don't have X-Windows installed on that platform.
>
> My question is, can I monitor/write packets to a file on the more remote
> machine, and then analyze the packets on another machine using my ethereal
> SW?
>
> Can I sniff the packets on the remote w/o a full install of ethereal?
>=== Al

The new name for ethereal is wireshark.  You can use tshark (text-based version
of wireshark) or tcpdump to sniff the network and save the packet capture data
in libpcap format which you can then transfer to your machine with wireshark on
it.  Also, you could install wireshark on the remote system and export the
wireshark session to your CentOS machine with an X server in real time.

Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] port mapping

[Barry Brimer]

Dear All,
If I want to do a port mapping in Centos, what tools should I look for?
Where can I get the information about how to set it up (how to, manuals)?


Could you be more specific with your question?  What kind of "port 
mapping" are you talking about?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] port mapping

[Barry Brimer]

On Sun, 20 Jan 2008, Sobari Tanuwijaya wrote:


Here is what I want to do:
I installed a database server on centos, it has a private IP,
the database server run on a certain port (for e.g. port )

From other place connected to the internet I try to do some kind of sync
to the database server, so I think I have to set the port mapper in the 
gateway to pass the access to port  to the centos server.




Barry Brimer wrote:

Dear All,
If I want to do a port mapping in Centos, what tools should I look for?
Where can I get the information about how to set it up (how to, manuals)?


Could you be more specific with your question?  What kind of "port mapping" 
are you talking about?


So you're trying to determine what you need to do to forward connections 
from your system to port  on the remote system via your gateway it 
seems.  What is your gateway running?  Is it running CentOS?



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] port mapping

[Barry Brimer]

On Mon, 21 Jan 2008, Sobari Tanuwijaya wrote:


Yes.

I plan to use centos as the OS on the gateway server.


Barry Brimer wrote:



On Sun, 20 Jan 2008, Sobari Tanuwijaya wrote:


Here is what I want to do:
I installed a database server on centos, it has a private IP,
the database server run on a certain port (for e.g. port )

From other place connected to the internet I try to do some kind of sync
to the database server, so I think I have to set the port mapper in the 
gateway to pass the access to port  to the centos server.



So you're trying to determine what you need to do to forward connections 
from your system to port  on the remote system via your gateway it 
seems.  What is your gateway running?  Is it running CentOS?


I would use something like:

iptables -t nat -I PREROUTING -d  -p tcp 
--dport  -j DNAT --to 


If you are not already masquerading traffic out, this should handle that.
"iptables -t nat -A POSTROUTING -s  -j MASQUERADE"


Once you see that work, you can do a "service iptables save" to save the 
configuration and "chkconfig iptables on" to make sure it starts on boot.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Changing from text bootup to graphical one

[Barry Brimer]

Quoting Anne Wilson <[EMAIL PROTECTED]>:

> When I installed CentOS it was with an old monitor, and it turned out that I
> could not get system-config-display to set it up correctly.  I bought a new
> monitor and now all is well, except...
>
> It still boots to a text login, and I have to startx.  What do I need to edit
> to change this?  Thanks
>
> Anne

Change the initdefault value from 3 to 5 in /etc/inittab

At your next reboot, you will start in X.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Re: Worth upgrading desktop to 5.1?

[Barry Brimer]

Quoting Sean Carolan <[EMAIL PROTECTED]>:

> > So, yes there are deeply compelling reasons to upgrade. If you want to
> > have patches for several kernel buffer exploits, as well as many other
> > security and functionality patches, you need to do one thing;
> >
> > yum upgrade, and answer yes.
> >
> > Or even easier;
> > yum -y upgrade.
>
> When I have some time to re-compile VMWare server modules, my graphics
> driver,
> vpn client and wifi driver I may consider updating.  If in the meantime a
> pack
> of ninjas breaks in and owns my box with a local buffer overrun exploit,
> well,
> you can't say I wasn't warned.

It may not work for all things, but have you looked at dkms?


Dag/rpmforge has packages as well.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Resizing a fat filesystem on a USB partition

[Barry Brimer]

AFAIK, there is no way to "resize" any FAT partition.  You have to
delete both partitions and then create a new one.


I thought the CD installer came with a utility to resize FAT partitions 
(albeit in MS DOS)?  And this isn't possible in CentOS it self?  :-/


Have you looked at the gparted LiveCD?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking issue (after latest 5.1 update?)

[Barry Brimer]

On Sat, 2 Feb 2008, Bart Schaefer wrote:


I'm not *entirely* sure but this began happening at about the time I
installed the latest kernel updates for CentOS 5.1
(kernel-2.6.18-53.1.6.el5.i686.rpm from January 24).  Shortly before
that I changed the encryption on my wireless router and switched from
ndiswrapper back to the standard bcm43xx driver, but I'm pretty sure
the network was OK before that update for the simple reason that I was
able to download the update itself.




What do you see in dmesg?  Does the last bcm43xx message show that you are 
associated or not?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Networking issue (after latest 5.1 update?)

[Barry Brimer]

On Sat, 2 Feb 2008, Bart Schaefer wrote:


On Feb 2, 2008 12:12 PM, Barry Brimer <[EMAIL PROTECTED]> wrote:

What do you see in dmesg?  Does the last bcm43xx message show that you are
associated or not?


Well, clearly I'm associated as I can ping the router and also ping
addresses on the far side of the router.  However, dmesg output from
bringing up the interface is appended below.


I realize that you were associated.  The question was more geared towards 
whether you were associated once and it stayed that way, or whether you 
were associated and disassociated several times.  I found it more 
difficult to stay connected to wireless networks that had multiple access 
points with the bcm43xx driver and less with a network with one access 
point.  I also have had my fair share of "SoftMAC: Authentication response 
received from  but no queue item exists." as well.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Enterprise-class monitoring system for CentOS and Win2k3 server

[Barry Brimer]

Quoting Sean Carolan <[EMAIL PROTECTED]>:

> Can anyone recommend an enterprise-class monitoring system for both
> Linux and Windows servers?  Here are my requirements:
>
> SNMP trap collection, ability to import custom MIBs
> isup/isdown monitoring of ports and daemons
> Server health monitors (CPU, Disk, Memory, etc)
> SLA reporting with nice graphs
> Pager/Email/SMS alerts with groups, filters and escalations
> Built-in MTBF and MTTR reporting
> Robust parent-child relationships between monitors or probes.  For
> example, the system must be smart enough to know that if 25 URLs have
> gone down all at once, that they belong to an apache process that has
> died.  I don't want 25 alerts, I want *one* alert telling me that the
> parent apache daemon is down.
> Ability to easily create dashboards from various monitors.  We want
> this so we can see all components of a website in one place, eg,
> apache URL, database server, disk storage, etc.
> Attractive, easy to use GUI.  We don't want a homebrew project with
> ugly graphs and a web 1.0 GUI.
>
> So far the products I have looked at are:
> NimBUS
> SolarWinds IP Monitor
> WhatsUPGold
> GroundWork Open Source
> Nagios
>
> And none of them have met all my requirements.  Any suggestions?

Zabbix http://www.zabbix.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Command line tool to test bandwidth between 2 servers

[Barry Brimer]

Quoting Dan Carl <[EMAIL PROTECTED]>:

> What's the best way to do this?
>
> Daily, jpg images are added to an inhouse server.
> Everynight I want to backup these images to a server offsite, via rsync.
> What I want is to determine what to set the bwlimit to.
> I also want to estimate how many MB's of images I can move nightly.
> Thanks
> Dan

iperf  .. also available from rpmforge



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Changing ext3 Partition Size

[Barry Brimer]

Quoting Scott Moseman <[EMAIL PROTECTED]>:

> I have an ext3 partition from our SAN.  The size was increased.
> I am attempting to re-size this specific ext3 partition, obviously.
>
> I unmount the partition, run fdisk, change the cyls, and save...
>
> WARNING: Re-reading the partition table failed with error 22: Invalid
> argument.
> The kernel still uses the old table.
> The new table will be used at the next reboot.
>
> And that is the message that I receive after I attempt the save.
> I did attempt a reboot to see if it did anything, but it did not help.

What version of CentOS?

If you have already resized the partition, you then need to extend the
filesystem.

For CentOS 4, use ext2online, for CentOS 5, use resize2fs.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] resolv.conf question

[Barry Brimer]

Hello,

I have a centos 4.6 system acting as a router for my local network.  I
obtain my eth0 IP address automatically via DHCP from my ISP, sc.rr.com.  If
I add 127.0.0.1 to resolv.conf, it won't save it.  I tried adding this to my
dhclient.conf

lease {
   option domain-name-servers 127.0.0.1;
}

The above is the only entry in the file.

Don't know it caused it but my system locked up 3 times since adding this.
Deleted the file and its fine.

Any help would be appreciated.


You could modify your /etc/resolv.conf to your desired settings, 
including your ISP's DNS servers and your own localhost DNS server and 
then add "PEERDNS=no" to your ifcfg-eth0 file.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Apache RPM's

[Barry Brimer]

I love CentOS, but I am seriously regretting selecting Centos 4.4 for my
production hosting servers. The current situation with CentOS 4.4 and being
stuck at Apache 2.0.52 is a huge problem because of the new requirements for
the Credit Card industry PCI scan. Apache 2.0.52 does not pass PCI
compliance scans. which means no ecommerce on any of these servers - MAJOR
ISSUE. So my question to the community is: when are new Apache RPM's going
to be released or at minimum a backported version that plugs these security
holes so we can pass PCI scans. Apache 2.0.52 has some major issues that
need to be dealt with?

Help us out here. I know I am not the only one in this situation. every
hosting company that uses Ensim Pro X is just where I am.
Any insight or better yet a solution to this would be great.


Are you actually using CentOS 4.4 or are you using a fully updated version 
of CentOS 4.6?  If you are fully updated, or simply download the latest 
CentOS 4 httpd package and run "rpm -q --changelog httpd | less" for an 
installed package or "rpm -qp --changelog /path/to/httpd/package | less" 
for a downloaded, but not yet installed package, you can see all of the 
changes, complete with which CVE issues have been addressed in each 
package build.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Kernel update for Centos 4

[Barry Brimer]

Hi,

I've noticed that we already have an updated kernel for the Centos 5.  Any
idea of when the same thing will happen for Centos 4 386 ?


If you're referring to a new kernel to handle the vmsplice vulnerability, 
it is not needed, as this vulnerability does not affect CentOS 4 (or 
below) kernels.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network configuration question

[Barry Brimer]

I have an older laptop here, a Fujitsu Siemens Amilo D, that I'd like to
use as a simple build box. It's physically installed next to my desktop
PC. It doesn't have a wireless card, so I vaguely thought: is it somehow
possible to connect this laptop with an Ethernet cable to my desktop
PC's unused Ethernet card, and then connect it to the internet? In that
case, I wonder if I have to bridge the desktop PC's network interfaces
(wlan0 and eth0). That said, I don't even know if the driver for wlan0
(rt61) allows any bridging. Or maybe simply configure a different
subnet, but then, what would the network configuration look like on the
laptop and on the desktop PC?

Any suggestions for that?


I have not done bridging on CentOS .. but if you want to route to your 
laptop you can do the following:


1.  Enable IP forwarding by changing "net.ipv4.ip_forward = 0" to 
"net.ipv4.ip_forward = 1" in /etc/sysctl.conf and running "sysctl -p".


2.  Put an IP address in an unused private network on the routing 
machine's ethernet card.


3.  If you want to have a separate routed network, you will need to add a 
static route on your internet router that sends traffic to the wireless 
card on your existing network for the wired network segment.  If you want 
to have a network that is masqueraded behind this machine, you do not need 
the static route, but you will need to add a an iptables rule that says 
"iptables -t nat -A POSTROUTING -s  
-j MASQUERADE" .. and then run service iptables save to save the changes. 
This is similar to what you would do if you were setting up a Linux 
machine to handle your internet connection.


4.  You will need to statically configure your laptop client on this 
private network to use the ethernet card of your routing machine as its 
default gateway or set up DHCP which instucts it to do the same.


Barry

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] C5 64-bit on Dell not seeing 1 GB link

[Barry Brimer]

I've got a Dell Precision Workstation 490 with 64-bit Centos 5, fully 
updated, with an on-board Broadcom 57xx gigabit Ethernet controller, updated 
BIOS, 1 GB switch, and /var/log/messages and dmesg both claim the link is 100 
Mb, not 1 GB.


I tried setting eth0 to mtu 9000 but got an error in going so.

What do I need to do to have the card see 1 gb?


I would run "ethtool eth0" and look at the output.  What does ethtool 
think your card is running at?  I would also run "ethtool -s eth0 autoneg 
on" which should set the card in autonegotiation mode .. which should set 
your card to 1 Gb.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to Disable PAM in Centos 5.1

[Barry Brimer]

Try this:

1.  Copy /etc/pam.d to /etc/pam.d.save
2.  Delete all files in /etc/pam.d
3.  Create vi /etc/pam.d/other with the following contents:

===
authsufficientpam_permit.so
account sufficientpam_permit.so
passwordsufficientpam_permit.so
session sufficientpam_permit.so
===

4.  Attempt to log in
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to Disable PAM in Centos 5.1

[Barry Brimer]

Quoting vincenzo romero <[EMAIL PROTECTED]>:

> this is great - however one question in Step 3:
>
> i vi what file?
>
> vi /etc/pam.d/  ??
>
> or did you mean for me to create a file:  /etc/pam.conf file and add
> the contents you mention below?
>
>  authsufficientpam_permit.so
> >  account sufficientpam_permit.so
> >  passwordsufficientpam_permit.so
> >  session sufficient    pam_permit.so
>
> On Fri, Feb 22, 2008 at 9:45 AM, Barry Brimer <[EMAIL PROTECTED]> wrote:
> > Try this:
> >
> >  1.  Copy /etc/pam.d to /etc/pam.d.save
> >  2.  Delete all files in /etc/pam.d
> >  3.  Create vi /etc/pam.d/other with the following contents:
> >
> >  ===
> >  authsufficientpam_permit.so
> >  account sufficientpam_permit.so
> >  passwordsufficientpam_permit.so
> >  session sufficientpam_permit.so
> >  ===
> >
> >  4.  Attempt to log in

Sorry.  Step 3 involves creating a file literally named "/etc/pam.d/other" with
the contents listed above.  The  lines are not part of the file, but to
indicate the beginning and ending of the file in this email.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] popular open source forum software?

[Barry Brimer]

Quoting Robinson Tiemuqinke <[EMAIL PROTECTED]>:

> Hi,
>
>  I plan to setup an forum for my friend and his
> friends shortly. But before I setup, I would like to
> know what are the popular open source forum
> software/packages to look at..
>
> Please advise. Thanks.
>
> --Robinson

www.phpbb.com
www.simplemachines.org
www.phorum.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SAMBA is driving me crazy

[Barry Brimer]

i have CentOS-5.1 with samba-3.0.25b-0.el5.4
and i took this workin well smb.conf from slackware12
( commands to be done befor this ):
# useradd  wbc -c /home/wbc -g users# smbpasswd -a wbc# mkdir /export# chmod 
u+rwx,g+rx,o+rx /export# chown wbc.users /export
the conf file:[global]workgroup = WORKGROUPnetbios name = sanshirosecurity = 
share
[share]comment = Datapath = /exportforce user = wbcforce group =  usersread 
only = noguest ok = Yes
___
and it never worked
and i tried to edit the original smb.conf like this:
[global]
workgroup = WORKGROUPserver string = storagenetbios name = sanshirointerfaces = 
lo eth2hosts allow = 127. 10.0.0.
# logs split per machine   log file = /var/log/samba/%m.log# max 50KB per 
log file, then rotate   max log size = 50
security = share
# A publicly accessible directory, but read only, except for people in# the 
"users" group   [public]   comment = Data   path = /samba/Data/
#owened by wbc.users   public = yes   writable = yes   read only = no   
printable = no   write list = users_
NOW my issue that whenever i try to copy something to the share folder i get "access 
denied" make sure
OR sometimes when i modifie it a little  i get things copied but with 0kB sized.
i'v been trying for 2 weeks . i couldnt know whats missing.
THANX for any help .



This is very difficult to read.  The only thing that looks strange to me 
is that you are using "write list = users" and not "write list = @users". 
Have you tried that?


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

RE: [CentOS] SAMBA is driving me crazy

[Barry Brimer]

ok i tried to make it "write list = @users"
i still get "access denied or make sure that the

disk is not full or

write protected"

k
Is SELinux enabled?  type "getenforce" to see if SELinux is enabled.  If 
you want to disable SELinux temporarily to see if that solves your 
problem, type "setenforce 0".

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] smokeping on CentOS questions

[Barry Brimer]

I'm having some problems getting CentOS to serve up my Smokeping pages (
http://oss.oetiker.ch/smokeping/)
However, I'm having problems getting the pages to serve up correctly.

Here is a quick run down of what I've done.

(1) wget and untar to /usr/local/smokeping
(2) chown -R root:root /usr/local/smokeping
(3) modifying to the following files to reflect my environment

(not sure if all my steps here were good)

/usr/local/smokeping/bin/smokeping
/usr/local/smokepoing/htdocs/smokeping.cfg

(4) ln -s /usr/local/smokeping/htdocs /var/www/html/smokeping

When I go to "www.mybox.com/smokeping", all I get is a list of files, not
the webpage I would expect to get.

What might I be doing wrong?


If you are getting a list of files, I have to wonder if you have a 
DirectoryIndex set .. and if so .. what the filenames are in 
DirectoryIndex.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to uninstall

[Barry Brimer]

hello guys

i have centos5.1, and my subject is :

when i install a package without the rpm tool cause its not rpm package like 
configure , make , make install

how can i uninstall it later ?


Try using checkinstall 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Recommended software for mail greylist?

[Barry Brimer]

I want to use grey list in mail server, currently, i use postgrey to
implement it.

Any other recommended software?


sqlgrey
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Send in your favorite CentOS slogan today

[Barry Brimer]

CentOS: So good that Oracle made it their own.

CentOS: Growing the value of Enterprise Linux.

CentOS: You think you can do any better?  Prove it!

CentOS: What Red Hat should have done since Day 1.

CentOS: Taking free to the next level.

CentOS: Red Hat without rules.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Getting JRE working in Firefox

[Barry Brimer]

I have installed both:

jdk-6u5-linux-i586-rpm.bin
jre-6u5-linux-i586-rpm.bin


But no Java plugin in Firefox.


You need to symlink the plugin into the plugins directory.  Copying won't 
work.


Try this:

ln -s /usr/java/jre1.6.0_05/plugin/i386/ns7/libjavaplugin_oji.so 
/usr/lib/mozilla/plugins/


This is a one line command regardless of how it comes across in email.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Samba Fstab and Automount

[Barry Brimer]

/etc/fstab:

//machine_name/SAN /mnt/SAN cifs defaults 0 0

[EMAIL PROTECTED] SAN]# mount -a
Password:
mount error 13 = Permission denied

Problem is there is no password to the smb server. Why am I getting a
password prompt when the share has full RW access and all access is
granted on the share? Note, though the share is fully visable and
accessable and writeable by just browsing the network.


Try replacing "defaults" with "guest"




Ok, now next up is automount. The Samba share will not auto mount on
client either.
-
/etc/auto.master

/mnt/SAN /etc/auto.SAN
--
/etc/auto.SAN

machine_name -fstype=cifs,rw ://machine_name/SAN/
---
Anyone see anything wrong with the configuration? I also read the How To
on the Wiki and no luck on doing the auto.smb.top and auto.smb.sub
configuration? Any ideas what maybe going on? Thanks in advance for any
help on this.

Also this is posted in the Networking and Harware Forum on the
centos.org Forums and No answer.
--
~/john


I suspect you need to pass the guest option to autofs as well.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Samba Fstab and Automount

[Barry Brimer]

On Fri, 2008-03-21 at 09:30 -0500, Barry Brimer wrote:

/etc/fstab:

//machine_name/SAN /mnt/SAN cifs defaults 0 0

[EMAIL PROTECTED] SAN]# mount -a
Password:
mount error 13 = Permission denied

Problem is there is no password to the smb server. Why am I getting a
password prompt when the share has full RW access and all access is
granted on the share? Note, though the share is fully visable and
accessable and writeable by just browsing the network.


Try replacing "defaults" with "guest"


Will not work:   mount -a
 mount error 13 = Permission denied


Any chance that the other machines that are "just browsing" to it and it 
is working are passing their domain credentials which is validating access 
to this share?


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Health Monitoring

[Barry Brimer]

Hey,

I am looking for healt monitoring software for my centos5.1 box.  Nothing
crazy (like nagios), just something that records memory/cpu usage every min
to 5 mins.
I added some vmware stuff and was looking to see when if swap gets used and
cpu spikes.


How about sar?  It is part of the sysstat rpm.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] backup to disk

[Barry Brimer]

On Sat, 29 Mar 2008, Ray Leventhal wrote:


Hi,

I'm looking for common practices for backing up user data to disk.  My user 
data is all in /home.  I'm also interested in what folks are doing for things 
backing up os and configs.


Any pointers on setting up rsync, cpio, etc would be appreciated.  Pointers 
to good how-to's especially welcome.


Currently we're using Arkeia Network Backup (commercial product with which I 
am in no way affiliated), and it's great, but with disk space so cheap, I'd 
love to be able to take my current non-raid setup and find a way to get up 
and running quickly in the case of some failures.


Have you looked at rsnapshot  ??
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CA files (SSL): where?

[Barry Brimer]

Quoting Sergio Belkin <[EMAIL PROTECTED]>:

> Hi,
>
> I don't remeber in what packages are the CA files for SSL. I need it
> for use it in linux clients that will use a Wireless connection wit
> WPA2 Enterprise.
>
> Thanks in advance!!

The ca-bundle.crt is in the openssl rpm
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CA files (SSL): where?

[Barry Brimer]

Quoting Sergio Belkin <[EMAIL PROTECTED]>:

> 2008/4/3, Barry Brimer <[EMAIL PROTECTED]>:
> > Quoting Sergio Belkin <[EMAIL PROTECTED]>:
> >
> >  > Hi,
> >  >
> >  > I don't remeber in what packages are the CA files for SSL. I need it
> >  > for use it in linux clients that will use a Wireless connection wit
> >  > WPA2 Enterprise.
> >  >
> >  > Thanks in advance!!
> >
> >
> > The ca-bundle.crt is in the openssl rpm
> >  ___
> >  CentOS mailing list
> >  CentOS@centos.org
> >  http://lists.centos.org/mailman/listinfo/centos
> >
>
> thanks Barry,
> But I am talking about about of the CA files (something similar as in
> MMC -Microsoft Management Console - sorry for the ugly comparison, but
> I need to explain in some way :) )

If you're referring to a centralized certificate store, I don't believe one
exists .. but most applications that ship with RHEL 5 will default to looking
in /etc/pki/tls/certs for their certs.  This is also the location ca-bundle.crt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

RE: [CentOS] Apache Authorization Access Control - location of htpasswd in Centos 5.1?

[Barry Brimer]

On Sun, 6 Apr 2008, Pam Astor wrote:




I tried creating a password file by executing htpasswd -c /passwd/passwords> > famsite but apparently htpasswd is not in my path, I'm 
getting the "cannot> > create file /passwd/passwords famsite" error.> >> >> >> > Anyone know where the 
default location of htpasswd is on a centos 5.1> > install? Or how to generate a password file on a centos 5.1 install?> > > 
There's a utility called 'which' you can use to discover the location> of certain apps you want to learn about.

Thanks!  Ok I ran /usr/bin/htpasswd -c /passwd/passwords famsite as root, and 
still got
the cannot create file error.


Does the /passwd directory exist?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

RE: [CentOS] Apache Authorization Access Control - location ofhtpasswd in Centos 5.1?

[Barry Brimer]

On Sun, 6 Apr 2008, Pam Astor wrote:





I tried creating a password file by executing htpasswd -c /passwd/passwords> > famsite but apparently htpasswd is not in my path, I'm getting the 
"cannot> > create file /passwd/passwords famsite" error.> >> >> >> > Anyone know where the default location of htpasswd 
is on a centos 5.1> > install? Or how to generate a password file on a centos 5.1 install?> > > There's a utility called 'which' you can use to 
discover the location> of certain apps you want to learn about.> > Thanks! Ok I ran /usr/bin/htpasswd -c /passwd/passwords famsite as root, and still 
got> > the cannot create file error.> > Does the /passwd directory exist? It does now.  It did not when I first ran the command, however I just 
created the directory /passwd/passwordsand re ran the command as root, and still no luck.


PS, I think there are some permission requirements for the directory and file 
as well.  I think they have to be owned by 'apache'.

The dirs were owned by root, so I just chown'ed to apache, re ran the command
/usr/bin/htpasswd -c /passwd/passwords famsite, still no luck.


Just for the sake of simplicity, please create your htpasswd file in the 
tmp directory and copy it elsewhere.  Any user can write in /tmp .. 
although if you are using the root user this should not be an issue.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server Shut Down!!!!

[Barry Brimer]

I have a serious problem on one of my servers running CentOS 5!!!



The problem started this way,



I wanted to store some data under /home and I got an error message
saying it is in the read only mode



So I rebooted the machine,



Then I see this serious error messages at boot time (I am unable to
boot)



Here is the Error Message!!!



*** Error occurred during the file system check.

*** Dropping you to shell; the system will reboot

*** when you leave the shell

Give root password for maintenance

(or type control D to continue):

Bash: dircolors: command not found

Bash: /usr/bin/id: No such file or directory

Bash: [:=: unary operator expected

(Repair filesystem)1 #


I would boot off CD1 or the Install DVD and boot into rescue mode, and 
check /var/log/messages for any hard drive errors.  If there are hard 
drive errors, I would copy the data off, and then use e2fsck against the 
partition(s) in question.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos as a desktop, advisable?

[Barry Brimer]

I would like to deploy centos on hundreds of client PC (a new setup).
Presently, several distros has attract me due to their focus on the desktop,
however they only have few months lifetime before a new version released.

Is it advisable using centos on client? what about support for new
hardware and several office productivity software like openoffice, did centos
always update to the latest version?

Previously i was using RH9 on several hundreds clients and love it, however
the update was horrible since it is unsupported, hence I can not install it
on the new hardware (ie. sata)


I have used CentOS 4 as a desktop OS since the day it was released.  I 
have never had any problems with it.  In fact, my parents use it as well, 
with minimal help from me.  CentOS rebuilds source RPMS from RH.  RH has a 
7 year support cycle.  Thus, a CentOS release will be supported for the 
same period of time.  CentOS also has a CentOS plus repository that 
contains some newer releases of particular software that is not included 
in RHEL.


You may be interested in using cobbler and 
koan  to help manage the build .. or rebuild 
of your lab.


HTH,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS - HP

[Barry Brimer]

Quoting Tom Brown <[EMAIL PROTECTED]>:

> Hi
>
> Does anyone have experience of running CentOS on HP hardware, both rack
> mount kit and blades? How are things like hardware monitoring etc?
> We may be moving from Dell to HP and i get on really well with OMSA and
> Nagios etc so ideally would like to monitor using similar tools rather
> than some central 'enterprise' dashboard etc.
>
> Any real world experience?

I have CentOS as well as RHEL on many HP servers, although none of them are
blades.  I do not use Nagios, but I just saw a plugin for nagios that monitors
HP's hpasm today ..


I have not been able to get disk threshold reporting to work in current versions
of hpasm but besides that, no complaints.  I have RHEL 2.1/3/4 and CentOS 4
running on HP hardware with no issues.

HTH,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] command for dhcp client

[Barry Brimer]

Is there a command that says DONT use the ifcfg-eth0 setting(s)
that basically have a static address and start the network in DHCP.

I dont want to disturb the static settings in ifcfg-eth0 or re-enter them
once my DHCP setting is done...

I just want to temporarily run with DHCP (I'm on different network than the 
static setup).


dhclient eth0
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Kernel

[Barry Brimer]

my server is in remote location, and I don't see any grub screen, so I was 
wondering
if there is an option that I can specify the kernel that Linux to be booted 
at the reboot time,

some thing like shutdown -g0 -i6 which_kernel-options


This is handled by your bootloader, which is grub.  In your /etc/grub.conf 
file, there is a line that says "default=x" where x is the number of the 
section from the top of the file, starting with 0.  You can also use the 
"fallback=x" statement to boot a different kernel in case the default 
kernel is unable to boot.


If you really want to be able to specify which kernel will be booted on 
the next boot (and only the next boot) you can install the lilo boot 
loader and use "lilo -R " and the next time the system is 
booted, it will use that kernel, but all other times it will use the 
default kernel.  If you are not familiar with lilo, I strongly recommend 
that you install it on a machine locally and use it there until you are 
comfortable with it before deploying it to a machine at a remote data 
center.


Hope this helps,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] "Site down for maintenance" - How is this accomplished?

[Barry Brimer]

On Fri, 24 Aug 2007, Matt Arnilo S. Baluyos (Mailing Lists) wrote:


Hello everyone,

Although we use CentOS primarily on our servers, this query is
actually more of a general networking question than something specific
to CentOS.

In the next week or so, we shall be migrating our in-house servers to
a data center. While we're doing that, we'd like to show a "Site down
for maintenance" message while the servers that hosts our websites (we
have around 15 sites hosted btw), are down.

So, how is this accomplished? While I can probably hack something on
our name servers, I'm sure there are people on this list that have
been doing this and could give some recommendations as to the best
practices for this type of task.


I would have DNS for all domains point to a web server that has the 
following php page: 
= 



Maintenance

 
Maintenance


The server that hosts  is currently 
undergoing maintenance.   will return to full 
service as soon as possible.



 
= 
I would also add to your httpd.conf file: 
= 
RewriteEngine on

RewriteRule !^/index\.php$ /index.php [NC,L]
RewriteRule !^/index\.php$ - [F] 
= 
This makes it so that anyone who connects to any URL on any of your 
websites will be told that the server they are connecting to is under 
maintenance.


When you have the new server up and running, change DNS.  Alternately you 
could place this on a server in the new location, but change the 
routing/NATing to temporarily deliver the addresses to the server hosting 
this page.  If you are using SSL certificates, you will need to have them 
as well and create different virtualhosts, although they can all have the 
same DocumentRoot and web page.


Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] "Site down for maintenance" - How is this accomplished?

[Barry Brimer]

On Fri, 24 Aug 2007, Matt Shields wrote:


Depending on the traffic level and the amount of hardware, I would
recommend against what you just said.  Especially if your current
environment is multiple servers that are load balanced.  You don't
want to have to replicate the environment just to have a construction
page.

Instead of setting up Apache with PHP, just setup a really basic
server with lighttpd and a single static page with really minimum
graphics.  It will serve pages and the one or two graphics a lot
faster and a single server can usually handle the load.

-matt

On 8/24/07, Barry Brimer <[EMAIL PROTECTED]> wrote:



On Fri, 24 Aug 2007, Matt Arnilo S. Baluyos (Mailing Lists) wrote:


Hello everyone,

Although we use CentOS primarily on our servers, this query is
actually more of a general networking question than something specific
to CentOS.

In the next week or so, we shall be migrating our in-house servers to
a data center. While we're doing that, we'd like to show a "Site down
for maintenance" message while the servers that hosts our websites (we
have around 15 sites hosted btw), are down.

So, how is this accomplished? While I can probably hack something on
our name servers, I'm sure there are people on this list that have
been doing this and could give some recommendations as to the best
practices for this type of task.


I would have DNS for all domains point to a web server that has the
following php page:
=


Maintenance


Maintenance

The server that hosts  is currently
undergoing maintenance.   will return to full
service as soon as possible.



=
I would also add to your httpd.conf file:
=
RewriteEngine on
RewriteRule !^/index\.php$ /index.php [NC,L]
RewriteRule !^/index\.php$ - [F]
=
This makes it so that anyone who connects to any URL on any of your
websites will be told that the server they are connecting to is under
maintenance.

When you have the new server up and running, change DNS.  Alternately you
could place this on a server in the new location, but change the
routing/NATing to temporarily deliver the addresses to the server hosting
this page.  If you are using SSL certificates, you will need to have them
as well and create different virtualhosts, although they can all have the
same DocumentRoot and web page.

Hope this helps.

Barry


My page does not use any graphics.  The reason I used PHP and not a static 
page was that I wanted the user to know that the site and url they had 
connected to was valid, and that they had not reached the page by mistake, 
or mis-typed the address.  If you are that worried about loading a page 
faster, and you think lighttpd is the way to go, I am all for it, but I 
don't think it is necessary.  For added performance, you could put the 
page on a ram disk, but I really think the return will be minimal.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] HP DL140 Help Required

[Barry Brimer]

I checked;

less /var/log/dmesg

it says BIOS Corrupt.

ACPI-0584: *** Warning: Type override - [DEB_] had invalid type (Integer)
for Scope operator, changed to (Scope)


I would run HP SmartStart Diagnostics.  If you are not running the most 
current version of your system firmware, you might consider upgrading to 
the most recent firmware.


HTH,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Restrict User on Sending Mail

[Barry Brimer]

On Fri, 7 Sep 2007, Jun Salen wrote:


I search from google on how to restrict user from
sending mail and I did trial and errors for three days
already but to no success. What I want to do is to
restrict some user in sending mail while some
unrestricted user will send mail to internet and
intranet. I am able to restrict outside address (i.e.
gmail, yahoo) to not send mail on restricted users but
the vice versa I can not do.



It sounds like this might work for you.



Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] imap webmail client needed

[Barry Brimer]

Hi list,

I´m searching a webmail imap client including a calendar and a todo list
(last is not necessary) for 2 or 3 users. I have tried zimbra but it´s too
oversized for my claim.
Do someone have a hint?
Thanks.


I prefer Horde, which is available in the CentOS Extras repository.  The 
horde website is horde.org


Barry___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Performance of CentOS as a NAT gateway

[Barry Brimer]

On Sat, 8 Sep 2007, Bart Schaefer wrote:


We have a single 3GHz P4 box w/2GB RAM running CentOS 3.8, acting as a
gateway, which serves multiple IP address, having one virtual
interface for each IP, e.g., eth0:1, eth0:2, etc.  These
interfaces/IPs are on the public internet.  Each of these IP addresses
is the NAT address for a different small LAN.  All of these LANs are
connected through a single Linksys 100Mb switch, to eth1 on the
gateway.  Thus, in case it's not obvious from that description,
traffic from LAN X travels through through the switch to eth1 on the
gateway, where iptables translates it to the IP address of eth0:X and
thence out to the net.

The gateway is totally idle except for handling these NATs; no other
processes except the usual OS bookkeeping.  All NIC and switch
hardware involved is 100Mb.

This all works, but we're experiencing network congestion somewhere.
The LANs appear to become saturated when only about 10Mb of total
traffic is passing through the public IPs.  That is, we seem to be
losing almost 90% of our capacity somewhere in the translation.

Before we attempt to sweep this under the rug by using Gb
NICs/switches for the LANs, we'd like to understand what's going on.
I can't find any recent statistics for Linux NAT performance, but the
older stuff I can find (e.g. 50k packets/sec for a P3-450Mhz) seems to
indicate that the gateway should easily be up to the task of handling
the NAT traffic.  Am I wrong about this?  Is there any way to diagnose
whether the NAT is the bottleneck?  Would we benefit from upgrading to
a newer CentOS (2.6 kernel as opposed to 2.4)?  Or is it more likely
to be the switch, in which case what would be a recommended
replacement for the Linksys?


Have you checked speed and duplex settings?  If you want to make sure that 
your CentOS 3 is not the bottleneck, there are CentOS 4 and CentOS 5 Live 
CDs you could test.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Performance of CentOS as a NAT gateway

[Barry Brimer]

All NICs on all machines involved report exactly the same:

 negotiated 100baseTx-FD flow-control, link ok

We've also checked ifconfig on all interfaces, and no errors, dropped
packets, overruns, nor collisions have been recorded.


Great!  Is your upstream device also able to talk at 100 Mb/s?

You might also try running some point to point bandwidth tests with iperf 
 to try and isolate which 
machine(s) are having issues.  ntop  and iptraf 
(included in CentOS)  can also be useful to monitor bandwidth/throughput 
as well.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Performance of CentOS as a NAT gateway

[Barry Brimer]

The other side is a high-end Cisco router managed by our ISP.  Its
their router statistics that tell us we're peaking at just over 10Mb/s
coming out of the gateway box.  That was where we first assumed the
problem must be, so we've been working with them on this problem for
some while now and have pretty definitely eliminated their equipment
as the bottleneck.


What is the speed of the link between you and the ISP?

Do they have other customer sites that are set up the same way as yours 
that get significantly better performance?




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Performance of CentOS as a NAT gateway

[Barry Brimer]

LAN-to-gateway traffic (e.g., a test FTP of a large file from the
gateway to a machine on one of the LANs) begins to degrade as the
LAN-to-internet traffic increases.  That's not surprising, but it
degrades disproportionately, i.e. when the FTP begins to show
intermittent stalls, the total traffic visible at the router on the
internet side of the gateway is only in the just-over-10Mb/s range.

Once we get to this point, no matter how many more LAN-to-internet
connections become active, the router on the internet side never sees
much over 10Mb/s of traffic.  We're not losing data or having an
unusual number of connection timeouts; each connection just slows
down.  We figured on some slowdown for NAT, but not 80%+.

LAN-to-LAN traffic that doesn't involve the gateway behaves more like
we'd expect, but I'm not sure that eliminates the switch as the
culprit.


Maybe it is time for some kernel networking tuning.

This will definetly require more memory, but should speed things up.  This 
is on a CentOS 4 machine .. I don't have a CentOS 3 machine to test on.


Add the following lines to /etc/sysctl.conf

net.core.rmem_default = 67108864
net.core.wmem_default = 67108864
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.ipv4.tcp_mem = 4096 67108864 67108864
net.ipv4.tcp_rmem = 4096 67108864 67108864
net.ipv4.tcp_wmem = 4096 67108864 67108864
net.ipv4.ip_local_port_range = 32768 65535
net.ipv4.tcp_max_syn_backlog = 8192

After adding these lines, run "sysctl -p"

Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Boot problem with CENTOS 5

[Barry Brimer]

Thanks.

What is the best recovery disk out there?


For an all purpose recovery disk, I use Knoppix.  To fix grub/booting 
problems, I use Super Grub Disk.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question on alias IPs using ifcfg-eth0:x

[Barry Brimer]

I apparently have my alias files all ifcfg-eth0:0 - ifcfg-eth0:7 show
> DEVICE=eth0:0.  Is this right?  It seems odd to me and while it does
> seem odd, the alias IPs are being appropriately responded to, answering
> pings and nameserver requests.

/etc/sysconfig/network-scripts/ifcfg-eth0:0 = DEVICE=eth0:0
/etc/sysconfig/network-scripts/ifcfg-eth0:1 = DEVICE=eth0:1

...


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question on alias IPs using ifcfg-eth0:x

[Barry Brimer]

Quoting Ray Leventhal <[EMAIL PROTECTED]>:

> Barry Brimer wrote:
> > I apparently have my alias files all ifcfg-eth0:0 - ifcfg-eth0:7 show
> >
> >> DEVICE=eth0:0.  Is this right?  It seems odd to me and while it does
> >> seem odd, the alias IPs are being appropriately responded to, answering
> >> pings and nameserver requests.
> >>
> >
> > /etc/sysconfig/network-scripts/ifcfg-eth0:0 = DEVICE=eth0:0
> > /etc/sysconfig/network-scripts/ifcfg-eth0:1 = DEVICE=eth0:1
> >
> >

> My question now is, how can the box be responding to all those IPs with
> the ifcfg-eth0:x files clearly not what they should be?

The network init scripts do not actually use /sbin/ifconfig, they really use
/sbin/ip from the iproute package.  I suspect if you run "ip addr list" you
will see all of your IP addresses under "eth0".

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS5 Network Problems

[Barry Brimer]

When you say network drop is fine does that mean from the switch to your
computer?  Have you tried a different port on your switch?


I've used my laptop on the same network drop...
I've changed from port A to B in this cube and I've tried A and B in
the cube next to me... all four ports produce the same result with the
system but work fine with my laptop.


What if you boot with a CentOS 5 LiveCD, CentOS 4 LiveCD, or Knoppix on 
your system?


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] File retrieval from outside hangs, internally is okay, only Centos5 affected

[Barry Brimer]

I have a really weird problem with some of my servers, namely all the
ones running Centos5

When I try to download a file from the server to a machine outside our
Cisco 6500 router/firewall, the download hangs about half the times
(15 out of 40) when less than half a megabyte into the transfer
(varied from 76 kb to 496 kb).

One server has a portchannel (Cisco speak for ethernet bundle), others
do not, some use e1000, some use broadcom, I've tried httpd and scp
transfers, I've tried from three different clients,

Here's the really annoying part: the problem only occurs when
downloading from outside the firewall, not when transferring files
internally in the serverroom! And the switch is the firewall is a
modular chassis, so the data comes over the same backplane regardless.

And there's 42 files in /proc/net/sys/ipv4 which differ between EL4
and Centos5, so I'm a little lost here


I don't know if this would help, but I remember reading a post about a 
problem with tcp window scaling.  To disable tcp window scaling add the 
line


net.ipv4.tcp_window_scaling = 0

to /etc/sysctl.conf and then run sysctl -p to activate your change.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Local mirroring of the CentOS repos

[Barry Brimer]

On Thu, 11 Oct 2007, Lorenzo Quatrini wrote:


Kai Schaetzl ha scritto:

Lorenzo wrote on Thu, 11 Oct 2007 09:38:21 +0200:


Have you tried mrepo?


How would this help? The main problem is to get rid of the "old" updates. 
Kai


Back in the old days, I used to use autoupdate .. and I believe that it 
would update the rpms you had and not keep the old ones.  Autoupdate is 
available at .  Check 
this out and let us know if this works for you.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] udp question

[Barry Brimer]

I use linux as GiGE router and have 6 NIC on it
Those days the NIC interrupt takes around 100% CPU but the system is 4G memroy 
and 8 CPU. I can't see any error packet in this NIC interface too

After I block the udp, the %CPU drops. but the UDP only takes around 8M in 
general

We use UDP traffic for voice.

Do you have any suggestion ?  increase the kernel parameter?


Add the following lines to /etc/sysctl.conf

net.core.rmem_default = 67108864
net.core.wmem_default = 67108864
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.ipv4.tcp_mem = 4096 67108864 67108864
net.ipv4.tcp_rmem = 4096 67108864 67108864
net.ipv4.tcp_wmem = 4096 67108864 67108864
net.ipv4.ip_local_port_range = 32768 65535
net.ipv4.tcp_max_syn_backlog = 8192

After adding these lines, run "sysctl -p"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Increasing shared memory?

[Barry Brimer]

On Fri, 12 Oct 2007, Christian Nygaard wrote:


I have a machine with fairly much memory 16GB and I get
shmget failed: error 28 (No space left on device). It seems
that I may be out of shared memory, how do I increase that?


I could be completely off, but I would start with typing 'man proc' and 
then searching for 'shm'.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] zebra-0.95 rpm

[Barry Brimer]

I want to run zebra on CentOS 4.5 box acting as a firewall and router. I
'd rather like to user RPM. So I am lokking for a proper RPM.

I now googled. But I could not find any for EL4 for CentOS 4.

YOUR IDEAS?


Use Quagga .. it is a fork of Zebra and comes with CentOS.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Lan Kernel Problem

[Barry Brimer]

Quoting Linux Man <[EMAIL PROTECTED]>:

> I'm building a Linux box to act as Proxy/Router/Firewall.
> I'm using CentOS 4.5, with an "old" motherboard (Asus A8V-X), and two
> Ethernet NIC, based on a realtek chip, that's widely supported under
> 2.4 and later kernel (the cards were functioning excellent in another
> PC whit Fedora Core 1).
> CentOS detects the on board LAN, but not the other two, in fact,
> knoppix 5.0.1 doesn't detect too (kernel 2.6.17), but, Knoppix 5.1.1
> (kernel 2.6.19) detects all three cards.
> Do you have any idea why this behavior?
> Centos 5.0 detects all three too, but I don't now why, my firewall
> script (ipv4) doesn't work with this release.

By any chance does your firewall use '-m owner --cmd-owner' in it?

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] group descriptors corrupted on ext3 filesystem

[Barry Brimer]

I am unable to mount an ext3 filesystem on RHEL AS 2.1.  This is not the 
boot or root filesystem.


When I try to mount the file system, I get the following error:

mount: wrong fs type, bad option, bad superblock on /dev/sdj1,
   or too many mounted file systems

When I try to run e2fsck -vvfy /dev/sdj1 I get the following error:

Group descriptors look bad... trying backup blocks...
Segmentation fault

When I try running e2fsck -b 294912 -vvfy /dev/sdj1 (providing backup 
superblock location ..which I tried several of) I get the following error:


Segmentation fault

In dmesg, after trying to mount the filesystem, I get the following 
error:


EXT3-fs: group descriptors corrupted !
EXT3-fs error (device sd(8,145)): ext3_check_descriptors: Block bitmap for 
group 128 not in group (block 523)!


Any ideas?

Thanks,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Bandwidth optimisation

[Barry Brimer]

On Mon, 5 Nov 2007, Ioannis Vranos wrote:


OS: CentOS 5.0 x86.

Hi, I am using CentOS 5.0 at home, ADSL ~16 Mbps/~1 Mbps Internet connection 
and my ping time to my ISP is 160-170 msec.


When downloading something with Firefox, I am getting download speeds of 
about 100-180 KB/sec (for example when downloading SP2 of XP from MS server).


Are the CentOS networking settings OK for this kind of latency, or do I have 
to change some settings?


I am using this on my CentOS 4 machine.  I would expect it to work on a 
CentOS 5 machine as well.


Add the following to /etc/sysctl.conf

net.core.rmem_default = 67108864
net.core.wmem_default = 67108864
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.ipv4.tcp_mem = 4096 67108864 67108864
net.ipv4.tcp_rmem = 4096 67108864 67108864
net.ipv4.tcp_wmem = 4096 67108864 67108864

Run sysctl -p

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Tomcat 6 and native lib

[Barry Brimer]

On Sat, 10 Nov 2007, [UTF-8] Frank Büttner wrote:


Hello,
have somebody get the Tomcat 6 native lib to build?
When I try to run ./configure --with-arp=/usr/bin/apr-1-config
under /opt/apache-tomcat-6.0.14/bin/tomcat-native-1.1.10-src/jni/native
I only get the error:
configure: error: cannot find install-sh or install.sh in build ./build


I believe tcnative is looking for the apr source .. and although it might 
be just a typo - your command line says --with-arp and it should be 
--with-apr.


Barry___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Open Source CPanel equivalent for CentOS?

[Barry Brimer]

Hi,

I was wondering if anyone knew of a solid, reliable Open Source equivalent
of Cpanel/Plesk that I can run on my CentOS boxes.  I've done some searching
around and find a bunch of them which seem to have stopped or stalled
development, but I am figuring that there has got to be a strong market /
demand for something out there.

Is anyone using something secure, solid and complete?  I don't need
something for users to sign up themselves online, but would like something
to give them abilities to administer their own domains.  I am more than
happy to move my entire existing mail  server and accounts to something new
if I can give my users this ability.


Webmin/Virtualmin/Usermin 
Emu 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to know when files have finished FTPing?

[Barry Brimer]

If you use proftpd it will upload the file under .in.filename and once the 
transfer has completed, the file is renamed to filename

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS5 and ipw2200

[Barry Brimer]

I tried to use DHCP, but the card didn't get assigned to any IP address. So I
used the manual configuration which seemed to work fine during startup. But
unfortunately not network connection could be made. So no ICMP ping packets
where reaching the destination.


I have had a similar experience.  After your interface starts, check to 
see if dhclient is running.  It seems that for some reason, even though I 
have BOOTPROTO=dhcp in the interface configuration file, it doesn't get an 
address, but if I run dhclient eth1 it gets an address immediately.  I 
differ in the fact that I am using encryption, and am getting my feet wet 
with wpa_supplicant .. which could be part of my issue, as encryption 
would have to be finished setting up before I could use that link to get 
an address.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Dell Wireless WLAN Card Utility - mini-pci wireless card 1390

[Barry Brimer]

Is there any way I can find a driver and/or get the above wireless card
working in CentOS 5 on my Dell laptop (Inspiron 1501). I've installed
ipw2200 from RPMForge, but it now appears that this won't work because
the card is not an Intel PRO/Wireless card. Dell seem to support only MS
Windows Vista now so I don't think there's much chance of getting a
driver from them - so am I on a fruitless 'crusade' in trying to get
wifi in CentOS 5 in this case? Any helpful advice much appreciated
please?


I have a Dell laptop that I believe has the same card.  The CentOS 5 
kernel did not appear to support it, but the RHEL 5.1 (and subsequently 
upon its release) the CentOS 5.1 kernel does support it.  You will need to 
drop the firmware into /lib/firmware .. I believe this is a bcm43xx card.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Dell Wireless WLAN Card Utility - mini-pci wireless card 1390

[Barry Brimer]

Quoting Andrew Allen <[EMAIL PROTECTED]>:

> On Sun, 2007-11-18 at 19:41 -0600, Barry Brimer wrote:
>
> > I have a Dell laptop that I believe has the same card.  The CentOS 5
> > kernel did not appear to support it, but the RHEL 5.1 (and subsequently
> > upon its release) the CentOS 5.1 kernel does support it.  You will need to
> > drop the firmware into /lib/firmware .. I believe this is a bcm43xx card.
> >
> > Barry
>
> Thanks Barry,
> In view of what you say about CentOS 5.1 supporting this card, I think
> I'm going to wait until it's released - hope that won't be too long. Any
> other possible solutions (eg like using ndiswrapper) look far too
> complicated for a linux newbie like me!  I hope that I'll be able to
> update the kernel without having to do a complete re-install. In the
> meantime I'm just going to have to use MS Windows XP (I have dual-boot
> on this laptop) for any wireless networking.

I was using ndiswrapper for this card until RHEL 5.1's kernel picked it up.  I
noticed that it now found an 'eth1' interface that didn't exist before. 
ndiswrapper does work, but has somewhat occasional crashes most likely due to
RHEL's 4k stack size that is not really compatible with ndiswrapper.  I agree,
you should wait until the CentOS 5.1 kernel comes out because assuming you and
I have the same card, all you need is the firmware .. and it will work without
further issue.

Barry


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] script to take cd iso's and create dvd iso

[Barry Brimer]

Quoting Tom Brown <[EMAIL PROTECTED]>:

> Hi
>
> I used to have a script that would take a dir of cd iso's and then stick
> them together and create a DVD iso. I seem to remember downloading it
> from a link posted in here. I have searched but cant find it, i dont
> suppose anyone knows of such a thing?

Is this what you're looking for?

http://isoredirect.centos.org/centos/build/mkdvdiso.sh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] reasons for using CentOS in business environments

[Barry Brimer]

On Wed, 28 Nov 2007, js wrote:


Rogelio wrote:

My apologies if this question has been previously answered, but could
anyone here provide me with resources that I might use to help build a
case for exclusively using CentOS in an enterprise environment?
(Approximately 200 servers)

Long story short, I've used a little of everything out there
(Gentoo/Debian/*BSD/Slackware) and have a fairly good overall strategy
of how they all work (all of them have lived on my laptop at one time
or another over the last 10 years or so), but I'm now looking for
solid business reasons that I can present to the CxO types of a
company to show them that CentOS is probably where they'd like to
look.

Reasons thus far I've come up with include:

--free *and* "fully" (at least, in my experience) compatible with RHEL
--fairly stable (I don't have problems unless I start mixing repos)
--yum packages (almost as cool as Debian! Ok, I'm biased...or maybe I
don't know how to properly use yum?)

Any other suggestions / tips I might add to my list would be greatly
appreciated!


I have a simple rule that determines is I use RHEL or CentOS in my work 
environment.  Does the software running on this machine require RHEL in 
order to have vendor support.  An extension of that rule is whether nor 
not Red Hat would support the specific use of this server in my 
environment.


As an example, I have a server that is used to accept HTTPS PUTs.  I am 
using a module called mod_put.  This is the machine's only goal in life. 
If I were to call Red Hat for support, the first thing they would ask is 
if I have any 3rd party modules.  Since I do, they would ask me to remove 
it in order to continue troubleshooting.  Removing or disabling this 
functionality would lose its intended functionality.  Therefore this 
machine runs CentOS.


Hope this helps.
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] what's the equivalent to sendmail's Timeout.queuewarn in POSTFIX

[Barry Brimer]

I am ruunig postfix and MailScanner as a Mailgw  on Centos 4.5.  I want to
know what is default  warntime  in Postfix?

I.e -  *what's the equivalent to sendmail's Timeout.queuewarn in POSTFIX ?
.

ANY IDEAS? ***


I think it is delay_warning_time .. so to work like sendmail which sends a 
warning after 4 hours of failed delivery would be:


delay_warning_time=4

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How to delete mails in the mailq in ONE DAY -- POSTFIX

[Barry Brimer]

On Fri, 30 Nov 2007, Indunil Jayasooriya wrote:


I am runnig posfix on Centos 4.4 as a Mailgateway. It only accepts mails for
domains and then forwards mails to Lotus domino Server.

All clients sends outgoing mails to that Lotus domino Server. Then , That
Lotus Domino Server sends mails to Postfix mailgateway. This postfix
mailgateway sends mails to all the destinations. But, This Postfix
mailgateway has about 150 messages in the mailq. Some are unwanted mails. I
think they keep trying until 5 days old. I want decrease it to ONE DAY.



In Sendmail, this can be done by editing sendmail.mc  as below.


(`confTO_QUEUERETURN', `5d')dnl

changing above line to below line

(`confTO_QUEUERETURN', `1d')dnl


How Can I do it in Postfix?


It should be one of these:

bounce_queue_lifetime = 1d
maximal_queue_lifetime = 1d
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Dell Wireless WLAN Card Utility - mini-pci wireless card 1390

[Barry Brimer]

Quoting Andrew Allen <[EMAIL PROTECTED]>:

> On Mon, 2007-11-19 at 15:52 -0600, Barry Brimer wrote:
> > Quoting Andrew Allen <[EMAIL PROTECTED]>:
> >
> > > On Sun, 2007-11-18 at 19:41 -0600, Barry Brimer wrote:
> > >
> > > > I have a Dell laptop that I believe has the same card.  The CentOS 5
> > > > kernel did not appear to support it, but the RHEL 5.1 (and subsequently
> > > > upon its release) the CentOS 5.1 kernel does support it.  You will need
> to
> > > > drop the firmware into /lib/firmware .. I believe this is a bcm43xx
> card.
> > > >
> > > > Barry
> > >
> > > Thanks Barry,
> > > In view of what you say about CentOS 5.1 supporting this card, I think
> > > I'm going to wait until it's released - hope that won't be too long. Any
> > > other possible solutions (eg like using ndiswrapper) look far too
> > > complicated for a linux newbie like me!  I hope that I'll be able to
> > > update the kernel without having to do a complete re-install. In the
> > > meantime I'm just going to have to use MS Windows XP (I have dual-boot
> > > on this laptop) for any wireless networking.
> >
> > I was using ndiswrapper for this card until RHEL 5.1's kernel picked it up.
>  I
> > noticed that it now found an 'eth1' interface that didn't exist before.
> > ndiswrapper does work, but has somewhat occasional crashes most likely due
> to
> > RHEL's 4k stack size that is not really compatible with ndiswrapper.  I
> agree,
> > you should wait until the CentOS 5.1 kernel comes out because assuming you
> and
> > I have the same card, all you need is the firmware .. and it will work
> without
> > further issue.
> >
> > Barry
> >
> >
> I've now upgraded the kernel to CentOS 2.6.18-8.1.15.e15, so assume my
> OS is now effectively CentOS 5.1. However, I'm afraid I'm still at a bit
> of a loss as to how it supports my Dell laptop wireless card (bcm43xx
> card?), as it's still not listed in the list of supported adapters in
> Network Config. Can anybody please suggest where I go from here?
>
> Thanks,
> Andy

You are still on the CentOS 5 kernel, not the CentOS 5.1 kernel.  The base RHEL
5 kernel is kernel-2.6.18-53.el5 and the most recent is
kernel-2.6.18-53.1.4.el5.  I don't believe CentOS 5.1 is out yet, but I've not
checked today.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Looking for Insights

[Barry Brimer]

Strangely, all files added via Samba after Monday are gone. This is limited
to only one device: md3.  Everything else is fine.

Checking the two drives/partitions that make up md3 show none of the
missing files.

Any brilliant thoughts as to where those files might have gone would be
appreciated.  The files lost are not critical so there are no major
problems but it's a puzzle I can't quite figure out.


Is there any information available in the samba log files?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Dell Wireless WLAN Card Utility - mini-pci wireless card 1390

[Barry Brimer]

Thanks Barry,
Some recent CentOS-list emails have implied that if CentOS 5 is fully
updated, it will be (effectively) CentOS 5.1, but this is clearly not
the case! I've looked again at the Release Notes at
http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.1 and see that
CentOS 5.1 isn't relesed yet. So I'll have to be patient and wait - I
hope that'll be rewarded when I find it does support my wireless card!


When CentOS 5.1 is released and you run yum update, all of the newer 
packages that comprise CentOS 5.1 will be downloaded and installed, which 
will upgrade you to CentOS 5.1.  At which time, when you boot with the 
CentOS 5.1 kernel, you should see an 'eth1' device which will be your 
wireless nic.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Obtuse-smtpd and Postfix

[Barry Brimer]

I would like to switch to CENTOS Postfix from sendmail. My current
sendmail, in combination with

the very old obtuse-smtpd, allows me:



1.   To control who of the internal users can send mail and
to which domain or accounts


This can be accomplished with smtpd_restrictions_classes


2.   To control who of the internal users can receive mail and from
which domain or accounts


Ditto.


3.   To obtain a copy of all sent mails


This can be accomplished using always_bcc


4.   To obtain a copy of all received mails


Ditto.



Obtuse-smtpd is very easy to configure and very effective. It takes
control of all smtp activities over Port

25 and, after filtering and checking, passes the safe mails to sendmail
for final delivery. Obtuse can, also,

check for addressability, through DNS, of the mail sender and other
useful features.


Postfix has extensive capabilities for this as well.


Can Postfix do all this ?


Yes.



Or, at least:

Can Postfix work in combination with obtuse-smtpd ? (at the end, obtuse
just calls


Good question.  I've never heard of obtuse-smtpd, so I can't tell you, but 
Postfix generally acts like sendmail on the outside, but completely 
different on the inside.



sendmail for the real mail delivery; it only receives mail in port 25
and checks what it

receives with its rules, allowing or rejecting at the end)


Postfix does that as well.

Check out Ralf Hildebrandt's postfix resources at 
.  Ralf is also the co-author of an 
excellent Postfix book.  You should particularly read the 3 pages about 
restriction classes.


Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How can I set NIC duplex before installation?

[Barry Brimer]

> My question is, how can I tell anaconda to set the NIC interface options
> such as speed and duplex? I have another server to install which has 2 x
> gigabit NICs and 2 x 100MB NIC's. My concern is that anaconda will again
> use wrong NIC parameters, and the installation will again be very slow.
> Surely it is possible to set the NIC options?

On the boot line, use the following to set your first ethernet interface to use
100Mb/s full-duplex ethernet:

eth0_ethtool="autoneg=off speed=100 duplex=full"

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS5 on Dell Latitude D620, Docking Station & Dual Monitors???

[Barry Brimer]

Quoting Matt Shields <[EMAIL PROTECTED]>:

> I've got a Dell Latitude D620, dell docking station and a Dell 2007WFP
> (20" widescreen lcd).  With XP I had the laptop screen and the lcd
> working as dual screens.  But for the life of me I cannot get CentOS5
> to work with dual screens.  Anyone have this working?  I would greatly
> appreciate any assistance.

I have a similar setup with RHEL 5 desktop .. with the nvidia card and I had to
use the nvidia driver to make it work.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to convert 7 cd iso images into one dvd image?

[Barry Brimer]

> Or how does one generate the dvd iso given a list of rpm files?
> (Assuming I had a list of all of the needed rpm files).
>
> It would be nice if one had something like "make centos_5.2_dvd_iso" :-)

Check out this link .. it provides all the information on how to do this. 
I've not tried this with anything more recent than RHEL 3 .. and the 
example is with RHEL 4 .. so it may or may not work, but it is headed in 
the right direction.



Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network bandwidth tools.

[Barry Brimer]

> Hi All,
>
> I am wondering what tools are available in CentOS 5.5 that would allow me to 
> measure incoming and outgoing network speeds? My new website seems to be 
> getting a lot more traffic that I had anticipated off the bat and I would 
> like to measure resource usage to ensure it is keeping up.

Take a look at ntop .. there are packages available from rpmforge.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] iproute2 custom tables and rules the CentOS way...

[Barry Brimer]

Quoting Ray Van Dolson :

> Hi all;
>
> I have a custom iproute2 table and a few rules to go along with it
> (CentOS 5) -- I have added the table to /etc/iproute2/rt_tables.
>
> if-up and friends doesn't seem to handle this real gracefully.  How are
> those of you out there doing something similar managing this
> customization?
>
> I don't really want to muck with /etc/init.d/network or the if-up
> scripts to avoid breaking upgrades.  rc.local my best bet?

I have a file named /etc/sysconfig/network-scripts/rule-eth0 which contains my
rules for eth0 and a file named /etc/sysconfig/network-scripts/route-eth0 which
are read by /etc/sysconfig/network-scripts/ifdown-routes and
/etc/sysconfig/network-scripts/ifup-routes.

The contents of my /etc/sysconfig/network-scripts/rule-eth0 is:
from 10.X.X.X/24 table testtable

The contents of my /etc/sysconfig/network-scripts/route-eth0 is:
default via 10.X.X.1 table testtable
10.X.X.0/24 dev eth0 table testtable
127.0.0.0/8 dev lo table testtable

For completeness, I have the following in /etc/iproute2/rt_tables:
100 testtable

There is no modification of /etc/init.d/network or any of the
/etc/sysconfig/network-scripts/if* files.

Hope this helps.

Barry

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Recommendation for a Linux alternative to Centos - ATH9K disaster

[Barry Brimer]

Quoting Always Learning :

>
> On Tue, 2011-01-25 at 13:12 -0500, Robert Heller wrote:
>
> > At Tue, 25 Jan 2011 17:49:39 + CentOS mailing list 
> wrote:
>
> > > Anyone any idea what kernel version Centos 6 will have ?

My RHEL 6 machine (fully updated) has kernel 2.6.32-71.14.1.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Air Conditioning - ON!

[Barry Brimer]

> I am not a man of many words.. and i am usually very quiet on this
> list.  But would just like to say that i appreciate all the CentOS team
> members immensely.   I sincerely thank you all for the time you put in
> to what i consider the best free Linux distro available.

+1000
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Air Conditioning - ON!

[Barry Brimer]

On Mon, 21 Feb 2011, Ian Murray wrote:

> Plus, rename to something that doesn't suggest enterprise grade.

How does the time between upstream release and downstream release have any 
effect on whether or not something is considered "enterprise grade"?

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] opened OpenSSL port

[Barry Brimer]

> Main question: is it safe, to open a port for an openssl server?

You might consider stunnel.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to control sftp's user file folder

[Barry Brimer]

> > and, worse, since the control channel is encrypted, this can't be done
> > via a port monitor that sniffs and modifies 'port' commands, so this
> > causes problems at BOTH ends of a NAT
>
> Could it be that the iptables ftp conntrack and nat modules does not
> work with ftps because of this ?

It is possible to instruct the FTPS client to keep the control channel in the
clear so that firewalls that need to adjust to the ports being used can listen
in on the conversation.  The FTPS server has to agree to allow this to happen.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to control sftp's user file folder

[Barry Brimer]

> On 03/01/11 6:38 PM, Barry Brimer wrote:
>> It is possible to instruct the FTPS client to keep the control channel in the
>> clear so that firewalls that need to adjust to the ports being used can 
>> listen
>> in on the conversation.  The FTPS server has to agree to allow this to 
>> happen.
>
> aren't username/passwords sent in the clear then too?   if so, whats the
> point of using ftps ?

No, they are not.  On the FTPS server you can require TLS encryption of 
everything, auth, data, control channel, nothing, or combinations of them. 
In this case you would require auth+data which would mean that your 
control channel is in the clear, but the username/password exchange and 
the data would be protected.  You could also use an SSL client certificate 
as authentication and negate the need for the password to be sent 
altogether.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [CentOS-announce] CentOS 4 i386 and x86_64 release of CentOS-4.9

[Barry Brimer]

Quoting Johnny Hughes :

> The CentOS development team is pleased to announce the release of CentOS
> 4.9 for i386 and x86_64.

Outstanding!  Thanks CentOS team for all your hard work!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] keepalived+LVS

[Barry Brimer]

> hello,
>  all!
> if i want to use lvs function of keepalived , i must install ipvsadm ?
> tks!

I haven't used keepalived with lvs in ages, but I believe it works 
directly with the kernel, and therefore does not strictly require 
ipvsadm.  Please note that ipvsadm is a userspace tool for 
manipulating/querying ipvs entries and is very useful.  I've never used 
lvs on any machine where I didn't also install ipvsadm.

Hope this helps,
Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 3.5 kernel panic on boot

[Barry Brimer]

> Yes, I know 3.5 is old.  However in this case it's required for a legacy
> app.
>
> a fresh install get's me:
>
> kmod:  failed to exec /sbin/modprobe -s -k block-major-104, errno = 2
>
> followed by:
>
> VFS:  Cannot open root device "cciss/c0d0p2" or 68:02
>
> The system is an HP DL380 G4.  any thought on what could cause this?

Does your installed system have the cciss device entries that are needed?
Is the cciss driver reflected in your /etc/modprobe.conf, and was it there 
when the initrd was built?

If you're missing your /dev/cciss entries locating and running mkdev.cciss 
should create them.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] cents 5.6 ..... futur

[Barry Brimer]

> Will it be the same from 5.6 to 6.0 or a full install will be better.

Full installs are always recommended between major versions.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Zoom....

[Barry Brimer]

  Updated CentOS 7 the other day. Updated zoom last night. Ancient (15 yr 
old) USB camera, Logitech QuickCam Express.


  If I run LD_PRELOAD=/usr/lib64/libv4l/v4l2convert.so cheese, I get video. 
Zoom, with or without the LD_PRELOAD - no video. I've tried stracing zoom, 
and created a file /etc/ld.so.preload, with the contents of 
/usr/lib64/libv4l/v4l2convert.so, and in strace, I see it loading it, but 
still no video.


I assume you're using the Zoom Linux client since you updated Zoom. 
Thinking out loud .. I wonder what would happen if you:


Booted a CentOS 7.6 kernel keeping all else the same

Booted from a variety of CentOS / Fedora Live CD images to see what 
kernels do / don't work if it's even kernel related


Try using Zoom via Chrome which can do pretty much everything natively 
without Zoom extension


Try using Zoom via Chrome with Zoom extension

Try using Zoom via Firefox with Zoom extension (Zoom with Firefox without 
Zoom extension is very limited)


Hope this helps.

Barry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos