date:20080316

> So from the CentOS box you can type something like:
> host -t mx domain.com
>
> and that works?
>
> How about this from the Windows box:
> c:\>nslookup
> > server YourCentOSName or IP
> > set type=mx
> > yourdomain.com
>
> That should work
>
> If that also works, then check the DNS server your windows box is using.
> It may have cached the DNS entry for domain.com (assuming the DNS server
> is NOT the CentOS box)
>
> You could also try an ipconfig /flushdns
>
> Shawn

Yeah, that is what I did. The windows box is using a different dns server, but 
as you wrote out, I switched it over in the nslookup command. Its appends the 
wkst's dns suffix on the query domain.com but not name.domain.com? Bizarre.

jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Bind Problem

> Ok, copied your file exactly as is with obvious name/ip changes and set
> perms correctly. It didn't makle any difference? I enabled logging and
> set it to debug and it shows nothing. I was doings this remotely from a
> windows box and using nslookup on the windows box, funny thing is using
> nslookup and set q=mx works on the local CentOS Bind server but from the
> windows client it doesn't?

So from the CentOS box you can type something like:
host -t mx domain.com

and that works?

How about this from the Windows box:
c:\>nslookup
> server YourCentOSName or IP
> set type=mx
> yourdomain.com

That should work

If that also works, then check the DNS server your windows box is using.  
It may have cached the DNS entry for domain.com (assuming the DNS server 
is NOT the CentOS box)

You could also try an ipconfig /flushdns

Shawn
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

RE: [CentOS] Bind Problem

> I enabled logging and set it to
> debug and it shows nothing. I was doings this remotely from a windows box and
> using nslookup on the windows box, funny thing is using nslookup and set q=mx
> works on the local CentOS Bind server but from the windows client it doesn't?
>
> Thanks!
> jlc


Sigh... I didn't enable enough logging, after I rectified that I saw the 
windows box was appending its domain suffix on the query which I don't why but 
it seems to work.

Thanks!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

RE: [CentOS] Bind Problem

> You should probably be using a FQDN for the MX record.
>
> Here's an example of a DNS record that works for me:
> ; Zone File for hosix.com
> $TTL 14400
> @   14440   IN  SOA ns1.hosix.com.  root.alder.hosix.com.   (
> 2005043003
> 14400
> 7200
> 360
> 86400
> )
>
> hosix.com.  14400   IN  NS  ns1.hosix.com.
> hosix.com.  14400   IN  NS  ns2.hosix.com.
>
> hosix.com.  14400   IN  A   207.58.168.98
>
> hosix.com.  14400   IN  MX  0   hosix.com.
>
> mail14400   IN  CNAME   hosix.com.
> www 14400   IN  CNAME   hosix.com.
> ftp 14400   IN  CNAME   hosix.com.
>
> The named log files are pretty good at showing why things aren't working.
>
> Shawn

Ok, copied your file exactly as is with obvious name/ip changes and set perms 
correctly. It didn't makle any difference? I enabled logging and set it to 
debug and it shows nothing. I was doings this remotely from a windows box and 
using nslookup on the windows box, funny thing is using nslookup and set q=mx 
works on the local CentOS Bind server but from the windows client it doesn't?

Thanks!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Bind Problem

On Sun, 2008-03-16 at 19:28 -0600, Joseph L. Casale wrote:
> I have a DNS server which is not returning mx queries for some reason? The 
> zone file is as follows:
> 
> $TTL 1H
> @   IN  SOA example.com.root.example.com. (
> 1   ; serial#
> 3H  ; refresh
> 1H  ; retry
> 1W  ; expire
> 1H ); minimum
> NS  ns1.example.com.
> MX  10 mail
> TXT "v=spf1 a mx include:isp.com -all"
> 
> example.com.A   aaa.bbb.ccc.ddd
> ns1 A   aaa.bbb.ccc.ddd
> mailA   aaa.bbb.ccc.ddd
> 
> The server is setup as with a caching only configuration with recursion 
> turned off.
> Anyone have any idea what could be wrong?

just guessing (because I am this dumb), you created as root and need to
change owner:group to named:named (the zone file). /var/log/messages
should tell you if that was the problem.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Bind Problem

On Sunday 16 March 2008, Joseph L. Casale wrote:
> I have a DNS server which is not returning mx queries for some reason?
> The zone file is as follows:
>
> $TTL 1H
> @   IN  SOA example.com.root.example.com. (
> 1   ; serial#
> 3H  ; refresh
> 1H  ; retry
> 1W  ; expire
> 1H ); minimum
> NS  ns1.example.com.
> MX  10 mail
> TXT "v=spf1 a mx include:isp.com -all"
>
> example.com.A   aaa.bbb.ccc.ddd
> ns1 A   aaa.bbb.ccc.ddd
> mailA   aaa.bbb.ccc.ddd
>
> The server is setup as with a caching only configuration with recursion
> turned off. Anyone have any idea what could be wrong?
>

You should probably be using a FQDN for the MX record.

Here's an example of a DNS record that works for me:
; Zone File for hosix.com
$TTL 14400
@   14440   IN  SOA ns1.hosix.com.  root.alder.hosix.com.   ( 
2005043003
14400
7200
360
86400
)

hosix.com.  14400   IN  NS  ns1.hosix.com.
hosix.com.  14400   IN  NS  ns2.hosix.com.

hosix.com.  14400   IN  A   207.58.168.98

hosix.com.  14400   IN  MX  0   hosix.com.

mail14400   IN  CNAME   hosix.com.
www 14400   IN  CNAME   hosix.com.
ftp 14400   IN  CNAME   hosix.com.

The named log files are pretty good at showing why things aren't working.

Shawn
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Bind Problem

I have a DNS server which is not returning mx queries for some reason? The zone 
file is as follows:

$TTL 1H
@   IN  SOA example.com.root.example.com. (
1   ; serial#
3H  ; refresh
1H  ; retry
1W  ; expire
1H ); minimum
NS  ns1.example.com.
MX  10 mail
TXT "v=spf1 a mx include:isp.com -all"

example.com.A   aaa.bbb.ccc.ddd
ns1 A   aaa.bbb.ccc.ddd
mailA   aaa.bbb.ccc.ddd

The server is setup as with a caching only configuration with recursion turned 
off.
Anyone have any idea what could be wrong?

Thanks!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

On Sun, 2008-03-16 at 19:12 -0500, Les Mikesell wrote:
> Craig White wrote:
> >
> >> I am using open source Alfresco( alfresco.com ), written in java, 
> >> which has own code for FTP, CIFS (running on tomcat apache and java). 
> >> I need to run tomcat5 as root in order to achieve that alfresco will 
> >> bind ftp cifs on privileged ports (21 , 135 ...).
> >>
> >> I am wondering, it is possible to allow user to bind on some 
> >> privilleged port. Like having whole alfresco running under user 
> >> alfresco and not root and able to bind on privileged ports?
> >>
> > the way thats conventionally done is by having a small SUID program 
> > (with the S bit set) which is invoked from the main program and opens 
> > the privileged socket, then hands it back to the unprivileged rest of 
> > the program. I have no idea how you'd do this with java short of using 
> > native code interfaces.
> >
> > that seems like a huge and very complex system, running that whole 
> > thing 
> > as root would be a nightmare from a security audit perspective.
>  Another approach that may or may not work with Alfresco is to configure 
>  the application to use high-numbered ports instead of the standard ones, 
>  then use iptables to redirect connections to the standard port numbers 
>  to the ones where the application runs.
> >>> 
> >>> you may recall that in December, I was faced with this very issue but on
> >>> the Fedora List...probably the wrong list since I'm actually using it on
> >>> a CentOS-5 system...
> >>>
> >>> https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html
> >>>
> >>> and I suggest that you may recall because you participated in the
> >>> thread.
> >>>
> >>> I was never able to figure out how to redirect those ports...though I
> >>> would change in a heartbeat if I could figure out how that is done.
> >>>
> >> I don't see my reply in that thread, but it should need an OUTPUT line 
> >> corresponding to each PREROUTING entry.  I have this working on a lot of 
> >> machines sending tcp port 80 to a server on 8080, so I know it works 
> >> with TCP.  Have you tried a simple case to see if you have the syntax 
> >> right?  There may be some quirks for udp or cifs.
> > 
> > you took 2 shots in it actually...
> > 
> > https://www.redhat.com/archives/fedora-list/2007-December/msg01231.html
> > 
> > https://www.redhat.com/archives/fedora-list/2007-December/msg01240.html
> > 
> > Yes, note that in your first link (I think it was the first link), your
> > suggestion was to add a rule for OUTPUT packets corresponding to
> > PREROUTING packets too.
> > 
> 
> Did you try it in a simpler case like port 80 to tomcat on 8080?

no, I run a regular web server on that port. I ended up just running
tomcat5 as root and it's working...I'm not revisiting the issue at the
moment, I have other fish to fry.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re[2]: [CentOS] what should I do?

2008-03-16 Thread Tanuwijaya

I see, I thought it would be impossible to do it.
Thanks for the help.


-- 
Best regards,

  -Tanuwijaya-

-
?Discovery consists of looking at the same thing as everyone else and thinking 
something different.?
? Roger von Oech.

Sunday, March 16, 2008, 1:34:14 PM, Shawn Everett wrote:
> On Saturday 15 March 2008, Sobari Tanuwijaya wrote:
>> Dear All,
>> a friend of mine who has a small office want to have a configuration
>> like this:
>> * around 3 people can have full access to internet
>> * around 1-2 people can just have email access (can send and receive
>>email to any address)
>> * the rest of the people in the company just can have internal email
>>(can send and receive email just to/from the peer - on the same
>> domain).

> I set up one client using a configuration of the first 2 points you 
> describe.

> I did it by installing Postfix and using MAC address filtering.  It works
> great.

> Shawn
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

- Original Message 
From: Karanbir Singh <[EMAIL PROTECTED]>
To: CentOS mailing list 
Sent: Sunday, March 16, 2008 7:57:00 PM
Subject: Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

Pam Astor wrote:
> [EMAIL PROTECTED] ~]# df -h
> FilesystemSize  Used Avail Use% Mounted on
> /dev/mapper/VolGroup00-LogVol00
>   901G  6.7G  848G   1% /
> /dev/sda1  99M   18M   76M  20% /boot
> tmpfs 1.9G 0  1.9G   0% /dev/shm

yup, its all 1 Volume, you are going to need to shrink the lv's - then
get your volgroup onto /dev/sda only. info on howto do that is in the
lvm howto. also, I'd recommend you download the centos-5.1/livecd and
actually do the work once booted from the livecd. shinking filesystems
requires you to have the filesystem unmounted, so doing it from the
livecd is the only way you are going to manage it here.

Dang, I was afraid you were going to say that :)  Oh well, guess I'm going to 
have fun the next day or two learning about linux file systems.

Thanks much!

-- 
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

2008-03-16 Thread Johnny Hughes


Karanbir Singh wrote:

William L. Maltby wrote:

On Sun, 2008-03-16 at 11:31 -0400, William L. Maltby wrote:



P.S. It's the xulrunner @ 57MB that looks like the killer. FF is only
11MB. Looks like things have sped up. 10MB done already in 11 minutes.

I'll keep an eye on it.



There is an early build for ff3 at : http://dev.centos.org/~z00dax/misc/
I was going to build and maintain it for centosplus, but since upstream
are looking at adding it into the main distro, I wont need to do that.

One thing worth noting about this rpm on my dev.centos.org site - it
wont hanck or interfere with anything else on the machine, it sets up a
parallel firefox3 entry, and runs parallel to the firefox already
included in the distro ( so you can have both installed )



I am using this one on my main workstation ... it seems to work fine.  I 
would not use in on dozens of machines in a production environments 
though as the beta's are NOT getting security updates, etc.




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user


Craig White wrote:


I am using open source Alfresco( alfresco.com ), written in java, 
which has own code for FTP, CIFS (running on tomcat apache and java). 
I need to run tomcat5 as root in order to achieve that alfresco will 
bind ftp cifs on privileged ports (21 , 135 ...).


I am wondering, it is possible to allow user to bind on some 
privilleged port. Like having whole alfresco running under user 
alfresco and not root and able to bind on privileged ports?


the way thats conventionally done is by having a small SUID program 
(with the S bit set) which is invoked from the main program and opens 
the privileged socket, then hands it back to the unprivileged rest of 
the program. I have no idea how you'd do this with java short of using 
native code interfaces.


that seems like a huge and very complex system, running that whole thing 
as root would be a nightmare from a security audit perspective.
Another approach that may or may not work with Alfresco is to configure 
the application to use high-numbered ports instead of the standard ones, 
then use iptables to redirect connections to the standard port numbers 
to the ones where the application runs.


you may recall that in December, I was faced with this very issue but on
the Fedora List...probably the wrong list since I'm actually using it on
a CentOS-5 system...

https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html

and I suggest that you may recall because you participated in the
thread.

I was never able to figure out how to redirect those ports...though I
would change in a heartbeat if I could figure out how that is done.

I don't see my reply in that thread, but it should need an OUTPUT line 
corresponding to each PREROUTING entry.  I have this working on a lot of 
machines sending tcp port 80 to a server on 8080, so I know it works 
with TCP.  Have you tried a simple case to see if you have the syntax 
right?  There may be some quirks for udp or cifs.


you took 2 shots in it actually...

https://www.redhat.com/archives/fedora-list/2007-December/msg01231.html

https://www.redhat.com/archives/fedora-list/2007-December/msg01240.html

Yes, note that in your first link (I think it was the first link), your
suggestion was to add a rule for OUTPUT packets corresponding to
PREROUTING packets too.



Did you try it in a simpler case like port 80 to tomcat on 8080?

--
  Les Mikesell
   [EMAIL PROTECTED]

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Should I update to DRBD 82?

2008-03-16 Thread Johnny Hughes


Amos Shapira wrote:

Hello,

This morning I noticed the following output from "yum update":

Installing:
 drbd82  x86_64 8.2.5-1.el5.centos  extras
209 k
 replacing  drbd.x86_64 8.0.11-1.el5.centos



It should also install the kmod-drbd82 rpm that you need ... you need to 
make sure you get the proper one (just like you already do for drbd-8).



As far as I'm aware DRBD works fine for me. Is there a way I can find out
about the new release and weather I should upgrade?


Basically, see the details here:

http://www.drbd.org/releases.html



I can't figure out the CentOS issue tracking system at bugs.centos.org but a
google site search came up with
http://bugs.centos.org/print_bug_page.php?bug_id=2657 (a DRBD 82 tracker bug
with empty reports), which makes me feel like this version of the package is
not 100% trusted.

So - should I upgrade it or not?


That is up to you :D .. but drbd82 (which is currently drbd-8.2.5) is a 
replacement for drbd-8.0.x for CentOS-5.


If you look at the drbd.org site, drbd-7 is really no longer getting any 
updates and is moving towards EOL in October 2008, and drbd-8.0.x is 
feature frozen and not getting any more features, though it will get 
security only updates from linbit.


All the updates are really happening in drbd-8.2.x and that is going to 
be the live version moving forward.  The drbd maintainers recommended 
that CentOS use dbdd-8.2.x, which is why we are moving to it.




Generally, I try to stick to the "standard" as much as I can, but the text
in http://wiki.centos.org/Repositories gives an impression that "if it's in
Extras, it's well tested".


drbd82 is an upgrade for CentOS-5 users who currently have drbd-8.  It 
obsoletes drbd-8.0.x series in extras and it has been tested, as has 
upgrades from drbd-8.0.x to drbd82.  All your config files from 8.0 
should work in 8.2 and the upgrade SHOULD BE completely seamless, just 
like moving from 8.0.10 to 8.0.11, etc.


For CentOS-4 users there is also a new drbd82 ... however, the update 
from drbd-0.7.x to drbd-8.2.5 is NOT seamless.  Because of this, the 
drbd82 does not obsolete drbd on CentOS-4, but instead it is a conflict 
for drbd ... meaning you can't have both installed at the same time. For 
 CentOS-4 users, you need to upgrade following this guide:


http://fghaas.wordpress.com/2007/10/03/step-by-step-upgrade-from-drbd-07-to-drbd-8/

I will maintain version 0.7.x in CentOS 4 extras as long as it builds 
and works until CentOS-4 EOL, and drbd-82 will also be an option in 
CentOS-4.


In CentOS-5, however, only drbd82 will be getting updates in the future 
and it is a replacement for drbd-8.0.x.


Thanks,
Johnny Hughes




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

Pam Astor wrote:
> [EMAIL PROTECTED] ~]# df -h
> FilesystemSize  Used Avail Use% Mounted on
> /dev/mapper/VolGroup00-LogVol00
>   901G  6.7G  848G   1% /
> /dev/sda1  99M   18M   76M  20% /boot
> tmpfs 1.9G 0  1.9G   0% /dev/shm

yup, its all 1 Volume, you are going to need to shrink the lv's - then
get your volgroup onto /dev/sda only. info on howto do that is in the
lvm howto. also, I'd recommend you download the centos-5.1/livecd and
actually do the work once booted from the livecd. shinking filesystems
requires you to have the filesystem unmounted, so doing it from the
livecd is the only way you are going to manage it here.

-- 
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

2008-03-16 Thread John R Pierce


Les Mikesell wrote:
Another approach that may or may not work with Alfresco is to 
configure the application to use high-numbered ports instead of the 
standard ones, then use iptables to redirect connections to the 
standard port numbers to the ones where the application runs.




I don't think thats possible with CIFS/SMB file sharing (which uses a 
pile of different protocols and encapsulations over both UDP and TCP 
packets, and many messages that contain service locator type information 
including port & ip), and its not very easy with FTP (which uses either 
passive or port based transfers and also sends port and address data 
embedded in PORT messages).

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] which open source wiki CMS?

On Sun, 2008-03-16 at 23:55 +0100, Simon Jolle sjolle wrote:
> Hi Centos Users
> 
> I am searching for an Open Source Wiki CMS based on PHP/MySQL. There are
> so much out there, thats why feel free to share you experience.
> 
> Please review your favorite Wiki software. Code quality, security,
> features and continuous, stable development.

there are hundreds and hundreds of CMS systems that meet your criteria
(PHP/MySQL)

http://www.cmsmatrix.org/

Which has much more authoritative comparisons

unless you are going to lay out more specific needs, there's little
point for people to toss ideas out.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Backup Question

On Sun, 2008-03-16 at 14:15 -0600, Joseph L. Casale wrote:
> We are migrating an LTO2 library off Veritas and NTBackup on a Windows
> Server to a Linux Server with either Bacula or Amanda. Originally, the
> Windows server used scripts to sync changes from various other Windows
> servers using Robocopy to a locally attached set of volumes, then ran
> the backup nightly (Full’s were always done).
> 
>  
> 
> I now had hoped to rsync the Samba shares to a local replica on the
> Linux Server and then start the backup every night after it finishes.
> Would this be the most efficient way to do this, or are there better
> tools for this? I need an additional replica of the data, so using the
> Windows Bacula client doesn’t help, and I must be able to only
> replicate the changes or I’ll miss my backup window based on the
> volume of data.

I think bacula has the ability to execute a script at start and thus you should 
be able to tell the Windows Server to execute the same robocopy script.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

On Sun, 2008-03-16 at 18:06 -0500, Les Mikesell wrote:
> Craig White wrote:
> > On Sun, 2008-03-16 at 15:33 -0500, Les Mikesell wrote:
> >> John R Pierce wrote:
> >>
>  I am using open source Alfresco( alfresco.com ), written in java, 
>  which has own code for FTP, CIFS (running on tomcat apache and java). 
>  I need to run tomcat5 as root in order to achieve that alfresco will 
>  bind ftp cifs on privileged ports (21 , 135 ...).
> 
>  I am wondering, it is possible to allow user to bind on some 
>  privilleged port. Like having whole alfresco running under user 
>  alfresco and not root and able to bind on privileged ports?
> 
> >>>
> >>> the way thats conventionally done is by having a small SUID program 
> >>> (with the S bit set) which is invoked from the main program and opens 
> >>> the privileged socket, then hands it back to the unprivileged rest of 
> >>> the program. I have no idea how you'd do this with java short of using 
> >>> native code interfaces.
> >>>
> >>> that seems like a huge and very complex system, running that whole thing 
> >>> as root would be a nightmare from a security audit perspective.
> >>
> >> Another approach that may or may not work with Alfresco is to configure 
> >> the application to use high-numbered ports instead of the standard ones, 
> >> then use iptables to redirect connections to the standard port numbers 
> >> to the ones where the application runs.
> > 
> > you may recall that in December, I was faced with this very issue but on
> > the Fedora List...probably the wrong list since I'm actually using it on
> > a CentOS-5 system...
> > 
> > https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html
> > 
> > and I suggest that you may recall because you participated in the
> > thread.
> > 
> > I was never able to figure out how to redirect those ports...though I
> > would change in a heartbeat if I could figure out how that is done.
> > 
> 
> I don't see my reply in that thread, but it should need an OUTPUT line 
> corresponding to each PREROUTING entry.  I have this working on a lot of 
> machines sending tcp port 80 to a server on 8080, so I know it works 
> with TCP.  Have you tried a simple case to see if you have the syntax 
> right?  There may be some quirks for udp or cifs.

you took 2 shots in it actually...

https://www.redhat.com/archives/fedora-list/2007-December/msg01231.html

https://www.redhat.com/archives/fedora-list/2007-December/msg01240.html

Yes, note that in your first link (I think it was the first link), your
suggestion was to add a rule for OUTPUT packets corresponding to
PREROUTING packets too.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] which open source wiki CMS?

2008-03-16 Thread Bill Campbell

On Sun, Mar 16, 2008, Simon Jolle sjolle wrote:
>Hi Centos Users
>
>I am searching for an Open Source Wiki CMS based on PHP/MySQL. There are
>so much out there, thats why feel free to share you experience.

I use Zope and Plone, a python based system.  I really don't like
PHP, but don't want to start a religions language war (I'll leave
that to others :-).

FWIW, I was a long-time perl hacker before learning python when
I started working extensively with Zope and Plone.  I have come
to prefer python for general use.

>Please review your favorite Wiki software. Code quality, security,
>features and continuous, stable development.

Zope and Plone have a very active developer community, and an
excellent reputation for security.

Plone is easy for novice users who want to put up static content
without lots of expertise in HTML and other technologies.  It is
extremely powerful for building sites, but has a rather steep
learning curve.

Plone is built on the Zope object database, zodb, and can easily
interface with postgres, mysql, oracle, M$-SQL, and any other
database supported with the python database tools.  It is also
easy to interface with it using xml-rpc without doing anything
special to enable an xml-rpc server.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676

Never blame a legislative body for not doing something.  When they do
nothing, that don't hurt anybody.  When they do something is when they
become dangerous. -- Will Rogers
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

On Sun, 2008-03-16 at 23:21 +0100, mouss wrote:
> Craig White wrote:
> > On Sun, 2008-03-16 at 15:33 -0500, Les Mikesell wrote:
> >   
> >> John R Pierce wrote:
> >>
> >> 
>  I am using open source Alfresco( alfresco.com ), written in java, 
>  which has own code for FTP, CIFS (running on tomcat apache and java). 
>  I need to run tomcat5 as root in order to achieve that alfresco will 
>  bind ftp cifs on privileged ports (21 , 135 ...).
> 
>  I am wondering, it is possible to allow user to bind on some 
>  privilleged port. Like having whole alfresco running under user 
>  alfresco and not root and able to bind on privileged ports?
> 
>  
> >>> the way thats conventionally done is by having a small SUID program 
> >>> (with the S bit set) which is invoked from the main program and opens 
> >>> the privileged socket, then hands it back to the unprivileged rest of 
> >>> the program. I have no idea how you'd do this with java short of using 
> >>> native code interfaces.
> >>>
> >>> that seems like a huge and very complex system, running that whole thing 
> >>> as root would be a nightmare from a security audit perspective.
> >>>   
> >> Another approach that may or may not work with Alfresco is to configure 
> >> the application to use high-numbered ports instead of the standard ones, 
> >> then use iptables to redirect connections to the standard port numbers 
> >> to the ones where the application runs.
> >> 
> > 
> > you may recall that in December, I was faced with this very issue but on
> > the Fedora List...probably the wrong list since I'm actually using it on
> > a CentOS-5 system...
> >
> > https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html
> >
> > and I suggest that you may recall because you participated in the
> > thread.
> >
> > I was never able to figure out how to redirect those ports...though I
> > would change in a heartbeat if I could figure out how that is done.
> >   
> 
> did you see:
> http://wiki.alfresco.com/wiki/File_Server_Configuration#Running_SMB.2FCIFS_from_a_normal_user_account
> 
> 
> In particular, the part that says:
> "
> For some reason the UDP forwarding does not seem to work, this affects 
> the NetBIOS name lookups. To get around the problem you can either add a 
> DNS entry matching the CIFS server name and/or add a static WINS 
> mapping, or add an entry to the clients LMHOSTS file.
> "
> 
> otherwise, would it be possible to run samba as a "proxy" on the server?

Alfresco creates a samba process from java and you have to have multiple
IP addresses and run samba restricted to one of them and java's samba
implementation on another. It's messy.

The issue of LMHOSTS or DNS didn't really matter since the probably
wasn't NetBIOS lookups. I could easily just use ip addresses but still
couldn't get replies.

I gave up on that struggle 3 months ago. In the end, this server isn't
exposed except to the internal LAN and I just ended up running tomcat as
root.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Backup Question

After a moment or two of digging:
http://www.bacula.org/en/dev-manual/Tips_Suggestions.html#19274

Run Before Job = ShellScriptShownBelow

Shawn


On Sunday 16 March 2008, Shawn Everett wrote:
> > I can't install cygwin or a daemon for that matter on the Windows
> > Server, but I could execute a scheduled job to run a Widows port of
> > rsync on the file server which I am not opposed to at all. My only
> > problem with that is how do I then trigger the Bacula server to begin
> > the dump to tape once the sync is complete?
>
> Use a batch file and schedule that. :)
>
> @echo off
> del /place/you/sync/to/done.txt
> robocopy/rsync files (whatever)
> echo > /place/you/sync/to/done.txt
>
> Schedule the batch file for say 11:00pm
>
> At some reasonable time schedule a bash script in Linux via cron:
>
> #!/bin/bash
> while test ! -e done.txt; do
>   sleep 1m
> done
> tar -czf /dev/tape /sync/path
>
> Simple. :)  The above script will wait until done.txt exists and then
> backs up the repository.  If you're really lucky Bacula has a post
> backup script that can be run.  I'm rather traditional and use tar. :)
>
> Shawn
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user


Craig White wrote:

On Sun, 2008-03-16 at 15:33 -0500, Les Mikesell wrote:

John R Pierce wrote:

I am using open source Alfresco( alfresco.com ), written in java, 
which has own code for FTP, CIFS (running on tomcat apache and java). 
I need to run tomcat5 as root in order to achieve that alfresco will 
bind ftp cifs on privileged ports (21 , 135 ...).


I am wondering, it is possible to allow user to bind on some 
privilleged port. Like having whole alfresco running under user 
alfresco and not root and able to bind on privileged ports?




the way thats conventionally done is by having a small SUID program 
(with the S bit set) which is invoked from the main program and opens 
the privileged socket, then hands it back to the unprivileged rest of 
the program. I have no idea how you'd do this with java short of using 
native code interfaces.


that seems like a huge and very complex system, running that whole thing 
as root would be a nightmare from a security audit perspective.


Another approach that may or may not work with Alfresco is to configure 
the application to use high-numbered ports instead of the standard ones, 
then use iptables to redirect connections to the standard port numbers 
to the ones where the application runs.


you may recall that in December, I was faced with this very issue but on
the Fedora List...probably the wrong list since I'm actually using it on
a CentOS-5 system...

https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html

and I suggest that you may recall because you participated in the
thread.

I was never able to figure out how to redirect those ports...though I
would change in a heartbeat if I could figure out how that is done.



I don't see my reply in that thread, but it should need an OUTPUT line 
corresponding to each PREROUTING entry.  I have this working on a lot of 
machines sending tcp port 80 to a server on 8080, so I know it works 
with TCP.  Have you tried a simple case to see if you have the syntax 
right?  There may be some quirks for udp or cifs.


--
  Les Mikesell
   [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Backup Question

> I can't install cygwin or a daemon for that matter on the Windows
> Server, but I could execute a scheduled job to run a Widows port of
> rsync on the file server which I am not opposed to at all. My only
> problem with that is how do I then trigger the Bacula server to begin
> the dump to tape once the sync is complete?

Use a batch file and schedule that. :)

@echo off
del /place/you/sync/to/done.txt
robocopy/rsync files (whatever)
echo > /place/you/sync/to/done.txt

Schedule the batch file for say 11:00pm

At some reasonable time schedule a bash script in Linux via cron:

#!/bin/bash
while test ! -e done.txt; do
sleep 1m
done
tar -czf /dev/tape /sync/path

Simple. :)  The above script will wait until done.txt exists and then backs 
up the repository.  If you're really lucky Bacula has a post backup script 
that can be run.  I'm rather traditional and use tar. :)

Shawn
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] which open source wiki CMS?

2008-03-16 Thread Simon Jolle sjolle

Hi Centos Users

I am searching for an Open Source Wiki CMS based on PHP/MySQL. There are
so much out there, thats why feel free to share you experience.

Please review your favorite Wiki software. Code quality, security,
features and continuous, stable development.

cheers
Simon
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

- Original Message 
From: Karanbir Singh <[EMAIL PROTECTED]>
To: CentOS mailing list 
Sent: Sunday, March 16, 2008 6:44:33 PM
Subject: Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

Pam Astor wrote:
> OK this is what I have when I run mount - does it appear that
> I have both drives on one volume?:
> 
> /dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw)
> 

what output to do you get from :
pvdisplay; vgdisplay; lvdisplay

[EMAIL PROTECTED] ~]# pvdisplay; vgdisplay; lvdisplay
  --- Physical volume ---
  PV Name   /dev/sdb1
  VG Name   VolGroup00
  PV Size   465.76 GB / not usable 9.50 MB
  Allocatable   yes (but full)
  PE Size (KByte)   32768
  Total PE  14904
  Free PE   0
  Allocated PE  14904
  PV UUID   IAmE1f-dCMo-c035-cSQQ-g9yE-6yOo-mfKhHv

  --- Physical volume ---
  PV Name   /dev/sda2
  VG Name   VolGroup00
  PV Size   465.66 GB / not usable 3.56 MB
  Allocatable   yes (but full)
  PE Size (KByte)   32768
  Total PE  14901
  Free PE   0
  Allocated PE  14901
  PV UUID   fi5A7U-dao0-ruuP-TSc0-LfFu-7yRL-iKnwGr

  --- Volume group ---
  VG Name   VolGroup00
  System ID
  Formatlvm2
  Metadata Areas2
  Metadata Sequence No  3
  VG Access read/write
  VG Status resizable
  MAX LV0
  Cur LV2
  Open LV   2
  Max PV0
  Cur PV2
  Act PV2
  VG Size   931.41 GB
  PE Size   32.00 MB
  Total PE  29805
  Alloc PE / Size   29805 / 931.41 GB
  Free  PE / Size   0 / 0
  VG UUID   pwO7bQ-0eRs-W8O4-b4uf-hYe6-JIm6-27p8wu

  --- Logical volume ---
  LV Name/dev/VolGroup00/LogVol00
  VG NameVolGroup00
  LV UUIDavhFcY-30N6-2BPz-A89X-Ai0V-v5B7-xxzhIe
  LV Write Accessread/write
  LV Status  available
  # open 1
  LV Size929.47 GB
  Current LE 29743
  Segments   2
  Allocation inherit
  Read ahead sectors 0
  Block device   253:0

  --- Logical volume ---
  LV Name/dev/VolGroup00/LogVol01
  VG NameVolGroup00
  LV UUIDZW2z5f-5x58-0vDI-ru5S-iZge-mVE6-yVp160
  LV Write Accessread/write
  LV Status  available
  # open 1
  LV Size1.94 GB
  Current LE 62
  Segments   1
  Allocation inherit
  Read ahead sectors 0
  Block device   253:1

And...

[EMAIL PROTECTED] ~]# df -h
FilesystemSize  Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
  901G  6.7G  848G   1% /
/dev/sda1  99M   18M   76M  20% /boot
tmpfs 1.9G 0  1.9G   0% /dev/shm
[EMAIL PROTECTED] ~]#








  

Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Backup Question


Joseph L. Casale wrote:

Rsync directly from the target would be more efficient. I've never been
able to make this work using cygwin sshd on the windows side to accept
the connection and run rsync, but that could be a bug that is fixed now.
  It will work using rsync in daemon mode on the windows side, or
initiating the connection from windows to a Linux target via ssh.

If you don't want the whole cygwin setup on your machines, there is a
minimal install for rsync here:
http://sourceforge.net/project/showfiles.php?group_id=34854


I can't install cygwin or a daemon for that matter on the Windows Server, but I 
could execute a scheduled job to run a Widows port of rsync on the file server 
which I am not opposed to at all. My only problem with that is how do I then 
trigger the Bacula server to begin the dump to tape once the sync is complete?


I think I missed the distinction, but I'd expect it to be best to do the 
initial copy from the system that actually holds the data, and rsync 
will know to copy only the changed parts. If you run it with the source 
on a network drive it will still have to read entire files over the 
network to find the changed blocks.



I need an additional replica of the data, so using the Windows Bacula client

doesn't help,

I thought bacula could be configured to keep both an on-line and tape copy.


Possible, but I wouldn't have time for it to dump all the data if it simply 
accessed the CIFS share to copy all the data.


Why wouldn't you run the agent on the machine holding the data?


and I must be able to only replicate the changes or I'll miss my backup

window based on the volume of data.

I use backuppc to keep an online and easily accessible history and
amanda for tapes that go offsite (and I hope to never have to recover
from the amanda tapes because it is much more difficult) and I just let
them run independently.  If your backup window is tight, you might have
to run both (or bacula) against your rsync-mirrored snapshot instead of
the actual target.  This works well for data files but you'll need some
extra contortions if you expect to do bare metal restores of the windows
targets.


Yea, bare metal is handled elsewhere, I just need file level protection. Not 
sure about Backuppc, it still doesn't help me trigger Bacula as soon as the 
sync is complete.


Does that have to be precisely timed?  I'd just allow for worst-case 
timing before letting the backup server's scheduler start.  Backuppc has 
a 'blackout window' for times you don't want backups running.  With 
amanda you schedule when the runs start.  Bacula probably has something 
similar.


--
  Les Mikesell
   [EMAIL PROTECTED]


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

Pam Astor wrote:
> OK this is what I have when I run mount - does it appear that
> I have both drives on one volume?:
> 
> /dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw)
> 

what output to do you get from :
pvdisplay; vgdisplay; lvdisplay

and what does 'df -h' say ? does it say you have the total capacity
mounted on / ?

-- 
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

> When I physically removed the drive and restarted the PC, centos would
> not boot up and went into a kernel panic.  I'm sure I'm supposed to
> somehow unmount the thing before I do this, and that's my question - how
> do I un-install the hard drive - software wise - so that on next boot
> up, centos don't go crazy looking for it?

If the machine panics at boot time, there is a good chance that you
installed with LVM and its got both the drives into one volume. You will
need to reinstall that second harddrive, then work out the process of
shrinking the filesystem down to only 1 drive, then remove the second
drive. The scope of this work might be too much for an email, so I can
best point you at the LVM HowTo. There are also some good lvm tips in
the CentOS5 docs ( http://www.centos.org/docs/5/ )

OK this is what I have when I run mount - does it appear that
I have both drives on one volume?:



/dev/mapper/VolGroup00-LogVol00 on /
type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts
(rw,gid=5,mode=620)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type
binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type
rpc_pipefs (rw)





  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 18:09 +, Karanbir Singh wrote:
> William L. Maltby wrote:
> > On Sun, 2008-03-16 at 11:31 -0400, William L. Maltby wrote:
> >> 
> > 
> > P.S. It's the xulrunner @ 57MB that looks like the killer. FF is only
> > 11MB. Looks like things have sped up. 10MB done already in 11 minutes.
> > 
> > I'll keep an eye on it.
> > 
> 
> There is an early build for ff3 at : http://dev.centos.org/~z00dax/misc/
> I was going to build and maintain it for centosplus, but since upstream
> are looking at adding it into the main distro, I wont need to do that.
> 
> One thing worth noting about this rpm on my dev.centos.org site - it
> wont hanck or interfere with anything else on the machine, it sets up a
> parallel firefox3 entry, and runs parallel to the firefox already
> included in the distro ( so you can have both installed )

It looks like Niki's also left things alone. It went into a 3.0 sub-
directory.

By the time I saw you post, I already had installed an updated Java and
Java Console plugin. I would have been glad to test that as well.

I'll try and catch it next time around.

> 

Thanks for all that all of you do.

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 17:07 +0100, Niki Kovacs wrote:
> William L. Maltby a écrit :
> 
> > 
> > It looks like it will take about 13 hours to download. I'm afraid I
> > would soak up your outgoing bandwidth. If I don't hear from you in an
> > hour or so, I'll kill it.
> > 
> I'm hosting this on a publicly available server, and sometimes, download 
> speeds are throttled. But 13 hours seems excessive to me. I'm using my 
> own repo to install various client machines in geographically distinct 
> places (France and Austria), and the average speed is about 40 kbps (it 
> can be much more, though). As for "sucking the bandwidth", don't bother, 
> it's not "my" server, it's public FTP and not my machine. Go ahead.

As I mentioned, things sped up considerably. I got 3 installed, after
removing the 2 that was on there (Karan, the 1.* from original install
is still there so I s/b OK when the new release comes out), got the
plugins done (esp. Java and its console for an app that is fairly
importatnt to me - means I don't have to do Winblows) and looks pretty
good.

It picked up my old user config stuff OK and worked well.

Only observed problem seem to be with a screen layout on a certain
website. Some "tabs" it presents are partially hidden and no amount of
+<-|+> will make them visible enough to read completely. I'll have
to browse in settings a bit and see if there is something there that
might cure that problem.

But it'll do what I can use it for.

I've got to say thanks.

I'll post more to this thread if I see any other adverse behavior.

Cable system acting up today - wasted some hour or so on the horn with
tech support.

> 
> Cheers,
> 
> Niki
> 

Again, thanks for the contribution.

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Should I update to DRBD 82?

2008-03-16 Thread Amos Shapira

Hello,

This morning I noticed the following output from "yum update":

Installing:
 drbd82  x86_64 8.2.5-1.el5.centos  extras
209 k
 replacing  drbd.x86_64 8.0.11-1.el5.centos

As far as I'm aware DRBD works fine for me. Is there a way I can find out
about the new release and weather I should upgrade?

I can't figure out the CentOS issue tracking system at bugs.centos.org but a
google site search came up with
http://bugs.centos.org/print_bug_page.php?bug_id=2657 (a DRBD 82 tracker bug
with empty reports), which makes me feel like this version of the package is
not 100% trusted.

So - should I upgrade it or not?

Generally, I try to stick to the "standard" as much as I can, but the text
in http://wiki.centos.org/Repositories gives an impression that "if it's in
Extras, it's well tested".

Thanks,

--Amos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

RE: [CentOS] Backup Question

> Rsync directly from the target would be more efficient. I've never been
> able to make this work using cygwin sshd on the windows side to accept
> the connection and run rsync, but that could be a bug that is fixed now.
>   It will work using rsync in daemon mode on the windows side, or
> initiating the connection from windows to a Linux target via ssh.
>
> If you don't want the whole cygwin setup on your machines, there is a
> minimal install for rsync here:
> http://sourceforge.net/project/showfiles.php?group_id=34854

I can't install cygwin or a daemon for that matter on the Windows Server, but I 
could execute a scheduled job to run a Widows port of rsync on the file server 
which I am not opposed to at all. My only problem with that is how do I then 
trigger the Bacula server to begin the dump to tape once the sync is complete?

> > I need an additional replica of the data, so using the Windows Bacula client
> doesn't help,
>
> I thought bacula could be configured to keep both an on-line and tape copy.

Possible, but I wouldn't have time for it to dump all the data if it simply 
accessed the CIFS share to copy all the data.

> > and I must be able to only replicate the changes or I'll miss my backup
> window based on the volume of data.
>
> I use backuppc to keep an online and easily accessible history and
> amanda for tapes that go offsite (and I hope to never have to recover
> from the amanda tapes because it is much more difficult) and I just let
> them run independently.  If your backup window is tight, you might have
> to run both (or bacula) against your rsync-mirrored snapshot instead of
> the actual target.  This works well for data files but you'll need some
> extra contortions if you expect to do bare metal restores of the windows
> targets.

Yea, bare metal is handled elsewhere, I just need file level protection. Not 
sure about Backuppc, it still doesn't help me trigger Bacula as soon as the 
sync is complete.

Thanks for the help!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

2008-03-16 Thread mouss

Craig White wrote:

On Sun, 2008-03-16 at 15:33 -0500, Les Mikesell wrote:

John R Pierce wrote:

I am using open source Alfresco( alfresco.com ), written in java,
which has own code for FTP, CIFS (running on tomcat apache and java).
I need to run tomcat5 as root in order to achieve that alfresco will
bind ftp cifs on privileged ports (21 , 135 ...).

I am wondering, it is possible to allow user to bind on some
privilleged port. Like having whole alfresco running under user
alfresco and not root and able to bind on privileged ports?

the way thats conventionally done is by having a small SUID program
(with the S bit set) which is invoked from the main program and opens
the privileged socket, then hands it back to the unprivileged rest of
the program. I have no idea how you'd do this with java short of using
native code interfaces.

that seems like a huge and very complex system, running that whole thing
as root would be a nightmare from a security audit perspective.

Another approach that may or may not work with Alfresco is to configure
the application to use high-numbered ports instead of the standard ones,
then use iptables to redirect connections to the standard port numbers
to the ones where the application runs.

you may recall that in December, I was faced with this very issue but on
the Fedora List...probably the wrong list since I'm actually using it on
a CentOS-5 system...

https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html

and I suggest that you may recall because you participated in the
thread.

I was never able to figure out how to redirect those ports...though I
would change in a heartbeat if I could figure out how that is done.

did you see:
http://wiki.alfresco.com/wiki/File_Server_Configuration#Running_SMB.2FCIFS_from_a_normal_user_account

In particular, the part that says:
"
For some reason the UDP forwarding does not seem to work, this affects
the NetBIOS name lookups. To get around the problem you can either add a
DNS entry matching the CIFS server name and/or add a static WINS
mapping, or add an entry to the clients LMHOSTS file.

otherwise, would it be possible to run samba as a "proxy" on the server?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

Pam Astor wrote:
> When I physically removed the drive and restarted the PC, centos would
> not boot up and went into a kernel panic.  I'm sure I'm supposed to
> somehow unmount the thing before I do this, and that's my question - how
> do I un-install the hard drive - software wise - so that on next boot
> up, centos don't go crazy looking for it?

If the machine panics at boot time, there is a good chance that you
installed with LVM and its got both the drives into one volume. You will
need to reinstall that second harddrive, then work out the process of
shrinking the filesystem down to only 1 drive, then remove the second
drive. The scope of this work might be too much for an email, so I can
best point you at the LVM HowTo. There are also some good lvm tips in
the CentOS5 docs ( http://www.centos.org/docs/5/ )

-- 
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

2008-03-16 Thread mouss


Pam Astor wrote:

Hi Guys,

I'm fairly new to Linux and I'm trying to un install a hard drive from my 
Centos 5.1 box running KDE.  When I built the PC, I installed two 500 gig 
maxtors in the tower, then I installed Centos.  Now I've decided that I want to 
remove the slave drive and use it as an external backup drive - I am mounting 
it into one of those external drive cases with a built in fan.

When I physically removed the drive and restarted the PC, centos would not boot 
up and went into a kernel panic.  I'm sure I'm supposed to somehow unmount the 
thing before I do this, and that's my question - how do I un-install the hard 
drive - software wise - so that on next boot up, centos don't go crazy looking 
for it?

  


run
# mount
this will show the mounted partitions. find the partitions that are on 
the second drive and unmount them:

# umount  /path/to/partition
if a service uses them, you'll see an error. you will need to fix the 
errors until you can unmount them.

then comment out these partitions in /etc/fstab.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

On Sun, 2008-03-16 at 15:33 -0500, Les Mikesell wrote:
> John R Pierce wrote:
> 
> >>
> >> I am using open source Alfresco( alfresco.com ), written in java, 
> >> which has own code for FTP, CIFS (running on tomcat apache and java). 
> >> I need to run tomcat5 as root in order to achieve that alfresco will 
> >> bind ftp cifs on privileged ports (21 , 135 ...).
> >>
> >> I am wondering, it is possible to allow user to bind on some 
> >> privilleged port. Like having whole alfresco running under user 
> >> alfresco and not root and able to bind on privileged ports?
> >>
> > 
> > 
> > the way thats conventionally done is by having a small SUID program 
> > (with the S bit set) which is invoked from the main program and opens 
> > the privileged socket, then hands it back to the unprivileged rest of 
> > the program. I have no idea how you'd do this with java short of using 
> > native code interfaces.
> > 
> > that seems like a huge and very complex system, running that whole thing 
> > as root would be a nightmare from a security audit perspective.
> 
> 
> Another approach that may or may not work with Alfresco is to configure 
> the application to use high-numbered ports instead of the standard ones, 
> then use iptables to redirect connections to the standard port numbers 
> to the ones where the application runs.

you may recall that in December, I was faced with this very issue but on
the Fedora List...probably the wrong list since I'm actually using it on
a CentOS-5 system...

https://www.redhat.com/archives/fedora-list/2007-December/msg01169.html

and I suggest that you may recall because you participated in the
thread.

I was never able to figure out how to redirect those ports...though I
would change in a heartbeat if I could figure out how that is done.

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Un Installing a hard drive in a Centos 5.1 box

Hi Guys,

I'm fairly new to Linux and I'm trying to un install a hard drive from my 
Centos 5.1 box running KDE.  When I built the PC, I installed two 500 gig 
maxtors in the tower, then I installed Centos.  Now I've decided that I want to 
remove the slave drive and use it as an external backup drive - I am mounting 
it into one of those external drive cases with a built in fan.

When I physically removed the drive and restarted the PC, centos would not boot 
up and went into a kernel panic.  I'm sure I'm supposed to somehow unmount the 
thing before I do this, and that's my question - how do I un-install the hard 
drive - software wise - so that on next boot up, centos don't go crazy looking 
for it?




  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Backup Question


Joseph L. Casale wrote:

We are migrating an LTO2 library off Veritas and NTBackup on a Windows Server 
to a Linux Server with either Bacula or Amanda. Originally, the Windows server 
used scripts to sync changes from various other Windows servers using Robocopy 
to a locally attached set of volumes, then ran the backup nightly (Full's were 
always done).


If this sync script runs on the target machine, you could simply change 
it to use cygwin rsync instead with the destination on a linux box.



I now had hoped to rsync the Samba shares to a local replica on the Linux 
Server and then start the backup every night after it finishes.
 Would this be the most efficient way to do this, or are there better 
tools for this?


Rsync directly from the target would be more efficient. I've never been 
able to make this work using cygwin sshd on the windows side to accept 
the connection and run rsync, but that could be a bug that is fixed now. 
 It will work using rsync in daemon mode on the windows side, or 
initiating the connection from windows to a Linux target via ssh.


If you don't want the whole cygwin setup on your machines, there is a 
minimal install for rsync here: 
http://sourceforge.net/project/showfiles.php?group_id=34854



I need an additional replica of the data, so using the Windows Bacula client 
doesn't help,


I thought bacula could be configured to keep both an on-line and tape copy.


and I must be able to only replicate the changes or I'll miss my backup window 
based on the volume of data.


I use backuppc to keep an online and easily accessible history and 
amanda for tapes that go offsite (and I hope to never have to recover 
from the amanda tapes because it is much more difficult) and I just let 
them run independently.  If your backup window is tight, you might have 
to run both (or bacula) against your rsync-mirrored snapshot instead of 
the actual target.  This works well for data files but you'll need some 
extra contortions if you expect to do bare metal restores of the windows 
targets.


--
  Les Mikesell
   [EMAIL PROTECTED]


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user


John R Pierce wrote:



I am using open source Alfresco( alfresco.com ), written in java, 
which has own code for FTP, CIFS (running on tomcat apache and java). 
I need to run tomcat5 as root in order to achieve that alfresco will 
bind ftp cifs on privileged ports (21 , 135 ...).


I am wondering, it is possible to allow user to bind on some 
privilleged port. Like having whole alfresco running under user 
alfresco and not root and able to bind on privileged ports?





the way thats conventionally done is by having a small SUID program 
(with the S bit set) which is invoked from the main program and opens 
the privileged socket, then hands it back to the unprivileged rest of 
the program. I have no idea how you'd do this with java short of using 
native code interfaces.


that seems like a huge and very complex system, running that whole thing 
as root would be a nightmare from a security audit perspective.



Another approach that may or may not work with Alfresco is to configure 
the application to use high-numbered ports instead of the standard ones, 
then use iptables to redirect connections to the standard port numbers 
to the ones where the application runs.


--
  Les Mikesell
   [EMAIL PROTECTED]

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] kvm_amd and centos 5.2

2008-03-16 Thread Jerry Geis


Will the kvm_amd kernel module be in CentOS 5.2?

Presently I run 2.6.24 on one machine so I get kvm_amd.
It would be great if it is included.

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Backup Question

We are migrating an LTO2 library off Veritas and NTBackup on a Windows Server 
to a Linux Server with either Bacula or Amanda. Originally, the Windows server 
used scripts to sync changes from various other Windows servers using Robocopy 
to a locally attached set of volumes, then ran the backup nightly (Full's were 
always done).

I now had hoped to rsync the Samba shares to a local replica on the Linux 
Server and then start the backup every night after it finishes. Would this be 
the most efficient way to do this, or are there better tools for this? I need 
an additional replica of the data, so using the Windows Bacula client doesn't 
help, and I must be able to only replicate the changes or I'll miss my backup 
window based on the volume of data.

Thanks for any suggestions,
jlc

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running network services as a non-root user

2008-03-16 Thread John R Pierce


David Hláčik wrote:


Hi,

I am using open source Alfresco( alfresco.com ), written in java, 
which has own code for FTP, CIFS (running on tomcat apache and java). 
I need to run tomcat5 as root in order to achieve that alfresco will 
bind ftp cifs on privileged ports (21 , 135 ...).


I am wondering, it is possible to allow user to bind on some 
privilleged port. Like having whole alfresco running under user 
alfresco and not root and able to bind on privileged ports?





the way thats conventionally done is by having a small SUID program 
(with the S bit set) which is invoked from the main program and opens 
the privileged socket, then hands it back to the unprivileged rest of 
the program. I have no idea how you'd do this with java short of using 
native code interfaces.


that seems like a huge and very complex system, running that whole thing 
as root would be a nightmare from a security audit perspective.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Gnash 0.8.2 rpm for CentOS 4?

2008-03-16 Thread Robert Arkiletian

On Sun, Mar 16, 2008 at 11:11 AM, Karanbir Singh <[EMAIL PROTECTED]> wrote:
>  This issue might be worth reporting upstream to gnash themselves, are
>  you really sure it needs glib2 >= 2.6 ?

The plugin wants 2.6 and the base package wants GLib 2.8. I got the
src from http://gstreamer.freedesktop.org/src/

$ tar -xjf gst-plugins-base-0.10.17.tar.bz2
$ cd gst-plugins-base-0.10.17
$ ./configure
...
checking whether gcc implements __PRETTY_FUNCTION__... yes
checking whether gcc implements __FUNCTION__... yes
checking whether gcc implements __func__... yes
checking for GLIB... Requested 'glib-2.0 >= 2.6' but version of GLib is 2.4.7
no
configure:
configure: error: This package requires GLib >= 2.6 to compile.

$ tar -xjf  tar -xjf gstreamer-0.10.17.tar.bz2
$ cd gstreamer-0.10.17
$ ./configure
...
checking for register_printf_function... yes
checking for dladdr in -ldl... yes
checking for inet_aton... yes
checking for GLIB... Requested 'glib-2.0 >= 2.8' but version of GLib is 2.4.7
no
configure:
configure: error: This package requires GLib >= 2.8 to compile.

Here is my version of GLib (which is called glib2)
It's packaged by you Karanbir. :)

$rpm -qi glib2
Name: glib2Relocations: (not relocatable)
Version : 2.4.7 Vendor: CentOS
Release : 1 Build Date: Mon 21 Feb
2005 08:34:01 PM PST
Install Date: Wed 27 Jul 2005 07:55:51 PM PDT  Build Host:
bhrama.build.karan.org
Group   : System Environment/Libraries   Source RPM: glib2-2.4.7-1.src.rpm
Size: 1718900  License: LGPL
Signature   : DSA/SHA1, Sat 26 Feb 2005 12:42:08 PM PST, Key ID a53d0bab443e1821
Packager: Karanbir Singh <[EMAIL PROTECTED]>
URL : http://www.gtk.org
Summary : A library of handy utility functions.
Description :
GLib is the low-level core library that forms the basis
for projects such as GTK+ and GNOME. It provides data structure
handling for C, portability wrappers, and interfaces for such runtime
functionality as an event loop, threads, dynamic loading, and anobject system.

This package provides version 2 of GLib.

-- 
Robert Arkiletian
Eric Hamber Secondary, Vancouver, Canada
Fl_TeacherTool http://www3.telus.net/public/robark/Fl_TeacherTool/
C++ GUI tutorial http://www3.telus.net/public/robark/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Running network services as a non-root user

2008-03-16 Thread David Hláčik

Hi,

 

I am using open source Alfresco( alfresco.com ), written in java, which has
own code for FTP, CIFS (running on tomcat apache and java). I need to run
tomcat5 as root in order to achieve that alfresco will bind ftp cifs on
privileged ports (21 , 135 .).

I am wondering, it is possible to allow user to bind on some privilleged
port. Like having whole alfresco running under user alfresco and not root
and able to bind on privileged ports?

CentOS 5.1

 

Thanks!

David

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Gnash 0.8.2 rpm for CentOS 4?

Robert Arkiletian wrote:
> Thanks for looking into it Dag.
> I tried compiling gstreamer 0.10 from source but it requires glib2 >= 2.6
> I don't think I can update glib2 without causing major damage. So I
> give up, I guess it's not possible to run the lastest Gnash on el4.

This issue might be worth reporting upstream to gnash themselves, are
you really sure it needs glib2 >= 2.6 ?

-- 
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

William L. Maltby wrote:
> On Sun, 2008-03-16 at 11:31 -0400, William L. Maltby wrote:
>> 
> 
> P.S. It's the xulrunner @ 57MB that looks like the killer. FF is only
> 11MB. Looks like things have sped up. 10MB done already in 11 minutes.
> 
> I'll keep an eye on it.
> 

There is an early build for ff3 at : http://dev.centos.org/~z00dax/misc/
I was going to build and maintain it for centosplus, but since upstream
are looking at adding it into the main distro, I wont need to do that.

One thing worth noting about this rpm on my dev.centos.org site - it
wont hanck or interfere with anything else on the machine, it sets up a
parallel firefox3 entry, and runs parallel to the firefox already
included in the distro ( so you can have both installed )

-- 
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Seamonkey rpms for CentOS?


Heiko Adams a écrit :

Hello,
does anyone know where to get seamonkey rpms for CentOS 5.1?


I have an RPM for Seamonkey 1.1.7 on my own repo. Add a stanza like this:

[kikinovak]
enabled=1
priority=1
name=CentOS-$releasever - kikinovak
baseurl=http://kikinovak.free.fr/centos/$releasever/kikinovak/$basearch
gpgcheck=0

Or you can simply download and rpm -ivh it:

http://kikinovak.free.fr/centos/5/kikinovak/i386/RPMS/seamonkey-1.1.7-1.i386.rpm

Enjoy!

Niki
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Seamonkey rpms for CentOS?

2008-03-16 Thread MHR

On Sun, Mar 16, 2008 at 9:27 AM, Heiko Adams <[EMAIL PROTECTED]> wrote:
> Hello,
> does anyone know where to get seamonkey rpms for CentOS 5.1?

Just use the standard Linux RPM from mozilla.org - there is no special
version released as part of (RHEL or) CentOS.

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Skype on CentOS 5 - my microphone settings are incorrect

2008-03-16 Thread Lanny Marcus

On Sunday, 16 March 2008, Niki Kovacs <[EMAIL PROTECTED]> wrote:> 

Niki: Thank you, for everything you wrote! Question: Last night, for
reasons completely unrelated to this problem with the microphone audio,
I downloaded the .iso for the Knoppix Live CD and I have that CD. Can I
troubleshoot this microphone audio settings problem, with one or more
utilities on the Knoppix Live CD? If so, which ones?

> One other thing. You mentioned several mixer apps, IIRC. I've seen some 
> Linux installs of the kitchen sink type, where people installed just 
> everything available on the DVD. Result: you get everything from GNOME, 
> KDE, XFCE, plus any other available window manager. As a result, you 
> also get several concurring sound systems: ALSA, OSS, Arts, and IIRC 
> there's something called 'esound'. It's a bit like folks installing LPR 
> and CUPS at the same time. When you have several pieces of software 
> attempting to talk to the same device, there will inevitably be conflicts.

My belief is that what you wrote is dead accurate, with regard to many things
and once I get the Sound working properly, I will try to get rid of what I know 
I am not using.

However, with regard to web browsers, as one example, I find that having both 
Firefox and
Konqueror is necessary at this time. Firefox, with the settings as liberal as I 
can make them, does not
work properly for me, when I access Gmail on the web. Konqueror, which Gmail 
shows is not fully supported
and does not allow access to all Gmail features on the web, works much better 
than Firefox there.

A former Supervisor and Colleague, who uses Ubuntu, has no problem using Gmail 
on the web, with a later version of Firefox.

OT: From what you and Dag wrote about Firefox 3, I will upgrade from CentOS 5 
to 5.2, when I can get the DVD!

> I've been a long-time Slackware user, and Slackware has one guiding 
> principle: KISS - Keep It Simple Stupid!

I respect anyone who uses Slackware and I believe strongly in the "KISS" idea.
> 
> On my CentOS desktop, I have *one* desktop environment: XFCE. One sound 
> system: ALSA. And one mixer app: alsamixer (I uninstalled xfce4-mixer).

I install both GNOME (which I use 95% of the time) and KDE when I do clean 
installs. Once, I had
GNOME corrupted, and I used KDE, temporarily, to keep going. KDE has many many 
more things than GNOME.
I always use K3b and there are some other KDE Applications and Utilities that I 
use occasionally.

> So what you could do to make things easier: establish which sound system 
> and sound mixer app you are using. And then get rid of the unused ones.

After I find the solution to the problem, I will try to do that!

It is my understanding and belief that Front Ends (GUI or Text based) that 
modify Linux Configuration files
may do so in different ways. If the file is simple, I modify with a Text 
editor. One experience I had, with
system-config-display (?) was that it said it was writing a new Xorg file, but, 
in fact, it did not. Someone else posted 
in this ML and Johnny or Jim said to use the command with -- rewrite or 
something I can't remember, as I write this.
One of the things about Webmin, is that supposedly one can use it to modify 
Configuration files, or do it manually with a
Text editor, without screwing things up.

I will keep working on this microphone audio problem and if I cannot solve it, 
then I will post in the alsa-user at lists.sourceforge.net
as Anne suggested yesterday, in 2 or 3 days!

Thanks again! Lanny

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Seamonkey rpms for CentOS?

2008-03-16 Thread Heiko Adams

Hello,
does anyone know where to get seamonkey rpms for CentOS 5.1?
-- 
Heiko Adams <[EMAIL PROTECTED]>


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3


William L. Maltby a écrit :



It looks like it will take about 13 hours to download. I'm afraid I
would soak up your outgoing bandwidth. If I don't hear from you in an
hour or so, I'll kill it.

I'm hosting this on a publicly available server, and sometimes, download 
speeds are throttled. But 13 hours seems excessive to me. I'm using my 
own repo to install various client machines in geographically distinct 
places (France and Austria), and the average speed is about 40 kbps (it 
can be much more, though). As for "sucking the bandwidth", don't bother, 
it's not "my" server, it's public FTP and not my machine. Go ahead.


Cheers,

Niki
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 11:31 -0400, William L. Maltby wrote:
> 

P.S. It's the xulrunner @ 57MB that looks like the killer. FF is only
11MB. Looks like things have sped up. 10MB done already in 11 minutes.

I'll keep an eye on it.

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 11:31 -0400, William L. Maltby wrote:
> On Sun, 2008-03-16 at 11:22 -0400, William L. Maltby wrote:
> > On Sun, 2008-03-16 at 08:06 -0700, Akemi Yagi wrote:
> > > On Sun, Mar 16, 2008 at 4:16 AM, William L. Maltby
> > > <[EMAIL PROTECTED]> wrote:
> > > >
> > > > On Sun, 2008-03-16 at 12:10 +0100, Niki Kovacs wrote:
> > > >  > William L. Maltby a écrit :
> > > >  > >

Kiki,

It looks like it will take about 13 hours to download. I'm afraid I
would soak up your outgoing bandwidth. If I don't hear from you in an
hour or so, I'll kill it.

I guess this reinforces Johnny's earlier comments in a thread about
torrents giving full speed download regardless. I could host a torrent
if I do get it all down, but start up would be slow as my upload speed
is not great either (appx. 60KB/second). But once it got going, if there
were a lot of participants, it would do well.

OTOH, with an estimated early May 5 upgrade release, it may not be worth
it?

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 11:22 -0400, William L. Maltby wrote:
> On Sun, 2008-03-16 at 08:06 -0700, Akemi Yagi wrote:
> > On Sun, Mar 16, 2008 at 4:16 AM, William L. Maltby
> > <[EMAIL PROTECTED]> wrote:
> > >
> > > On Sun, 2008-03-16 at 12:10 +0100, Niki Kovacs wrote:
> > >  > William L. Maltby a écrit :
> > >  > >
> > >  > > # cat /etc/yum.repos.d/kikinovak
> > 
> > Try adding a ".repo" to the file name.
> 
> LOL. That "otter" do it, with a couple more cups of coffee!

Yep. Coffee is brewing too!

> 

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 08:06 -0700, Akemi Yagi wrote:
> On Sun, Mar 16, 2008 at 4:16 AM, William L. Maltby
> <[EMAIL PROTECTED]> wrote:
> >
> > On Sun, 2008-03-16 at 12:10 +0100, Niki Kovacs wrote:
> >  > William L. Maltby a écrit :
> >  > >
> >  > > # cat /etc/yum.repos.d/kikinovak
> 
> Try adding a ".repo" to the file name.

LOL. That "otter" do it, with a couple more cups of coffee!

Sorry to have bothered.

> 

Thanks,
-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

2008-03-16 Thread Akemi Yagi

On Sun, Mar 16, 2008 at 4:16 AM, William L. Maltby
<[EMAIL PROTECTED]> wrote:
>
> On Sun, 2008-03-16 at 12:10 +0100, Niki Kovacs wrote:
>  > William L. Maltby a écrit :
>  > >
>  > > # cat /etc/yum.repos.d/kikinovak

Try adding a ".repo" to the file name.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clarifications

2008-03-16 Thread mouss


Sam Drinkard wrote:

Hello all,

   I've been trying to get spamassassin and clamav working, but got 
really confused when I realized there are various incarnations of the 
software.  Originally, I started out with just spamassassin, but 
learned there is also an SA-milter.  Can someone tell me which of the 
various spam fighting packages i.e., sa, sa-milter, clamav, 
clamave-milter, and so forth?  I ran into problems with one package 
with the system not being able to open a socket, so I just gave up.  I 
hope I'm not too vague here, but essentially, I just would like to 
know what the milter part does, and if that's the way to go, or the 
non-milter versions.
   I'm subscribed via digest, and if it's not too much trouble, I'd 
appreciate a cc direct to me.  Many thanks..



depending on your MTA (postfix, sendmail, ...) or your MDA (maildrop, 
procmail, ...), there are various ways to integrate spamassassin:


- a proxy. an example is amavisd-new (it calls SA internally, so you 
don't need to run spamd)
- a milter, if your MTA supports milters (sendmail and postfix do) and 
you are confortable with this.

- a program or script calls "spamc" and you have spamd running
- a program calls spamassassin (not recommended, except for testing and 
debugging)

- other





___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS 5.1 single (server) CD ??

2008-03-16 Thread Chas

Hi,
  Any chance of a CentOS 5.1 single server CD similiar to the one for 4.4?
That CD wa very useful for 90% of the instals that I've been doing and
whatever extras were needed were eaily added through Yum.


Chas.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] (no subject)

2008-03-16 Thread B.J. McClure

On Sun, 2008-03-16 at 08:38 -0500, B.J. McClure wrote:

> On Sun, 2008-03-16 at 18:41 +0530, Hari wrote: 
> 
> > Hey can anyone help in finding the display driver for my laptop sony Vaio.
> > The details are as follows,
> > 
> > Mobile Intel(r) 945GM xpress chipset family.
> > 
> > Do send me the procedure for installation since I am new to cent OS.
> > 
> > Thank You 
> > Hari ms
> 
> Follow this link and install repo for your architecture.  Then do

http://dag.wieers.com/rpm/FAQ.php#B

> yum install 915resolution
> 
> CentOS 5.0, Linux 2.6.18-53.1.14.el5 x86_64 08:36:26 up 1 day, 16:15,
> 0 users, load average: 0.13, 0.16, 0.09
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

CentOS 5.0, Linux 2.6.18-53.1.14.el5 x86_64 08:40:38 up 1 day, 16:19, 0
users, load average: 0.32, 0.15, 0.09
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] (no subject)

2008-03-16 Thread B.J. McClure

On Sun, 2008-03-16 at 18:41 +0530, Hari wrote:

> Hey can anyone help in finding the display driver for my laptop sony Vaio.
> The details are as follows,
> 
> Mobile Intel(r) 945GM xpress chipset family.
> 
> Do send me the procedure for installation since I am new to cent OS.
> 
> Thank You 
> Hari ms

Follow this link and install repo for your architecture.  Then do

yum install 915resolution

CentOS 5.0, Linux 2.6.18-53.1.14.el5 x86_64 08:36:26 up 1 day, 16:15, 0
users, load average: 0.13, 0.16, 0.09
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] (no subject)

2008-03-16 Thread Hari

Hey can anyone help in finding the display driver for my laptop sony Vaio.
The details are as follows,

Mobile Intel(r) 945GM xpress chipset family.

Do send me the procedure for installation since I am new to cent OS.

Thank You 
Hari ms

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] shell script question

2008-03-16 Thread Marcelo Roccasalva

On Thu, Mar 13, 2008 at 12:04 PM, Jerry Geis <[EMAIL PROTECTED]> wrote:
> hi all,
>
> If I have a shell script on 5.1 that has 2 commands in the script...
>
> command1
> command2
>
> and command1 runs until it is kill'ed by some other process. Sometimes
> command2 runs and sometimes it
> doesnt (this is what it seems like).
>
> How can I be ensured that command2 will always run after command1 is
> killed? The script is not killed
> just command1.

if command1;then true;fi
command2


-- 
Marcelo

"¿No será acaso que ésta vida moderna está teniendo más de moderna que
de vida?" (Mafalda)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS-announce Digest, Vol 37, Issue 6

2008-03-16 Thread centos-announce-request

Send CentOS-announce mailing list submissions to
[EMAIL PROTECTED]

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]

You can reach the person managing the list at
[EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2008:0167 Moderate CentOS 4 i386 kernel -security
  update (Johnny Hughes)
   2. CESA-2008:0167 Moderate CentOS 4 x86_64 kernel -  security
  update (Johnny Hughes)


--

Message: 1
Date: Sat, 15 Mar 2008 20:40:23 -0500
From: Johnny Hughes <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0167 Moderate CentOS 4 i386
kernel -security update
To: CentOS-Announce <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"

CentOS Errata and Security Advisory 2009:0167

https://rhn.redhat.com/errata/RHSA-2008-0167.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

i386:
kernel-2.6.9-67.0.7.EL.i586.rpm
kernel-2.6.9-67.0.7.EL.i686.rpm
kernel-devel-2.6.9-67.0.7.EL.i586.rpm
kernel-devel-2.6.9-67.0.7.EL.i686.rpm
kernel-doc-2.6.9-67.0.7.EL.noarch.rpm
kernel-hugemem-2.6.9-67.0.7.EL.i686.rpm
kernel-hugemem-devel-2.6.9-67.0.7.EL.i686.rpm
kernel-smp-2.6.9-67.0.7.EL.i586.rpm
kernel-smp-2.6.9-67.0.7.EL.i686.rpm
kernel-smp-devel-2.6.9-67.0.7.EL.i586.rpm
kernel-smp-devel-2.6.9-67.0.7.EL.i686.rpm
kernel-xenU-2.6.9-67.0.7.EL.i686.rpm
kernel-xenU-devel-2.6.9-67.0.7.EL.i686.rpm


src:
kernel-2.6.9-67.0.7.EL.src.rpm

-- next part --
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080315/551666d7/signature-0001.bin

--

Message: 2
Date: Sat, 15 Mar 2008 20:40:32 -0500
From: Johnny Hughes <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0167 Moderate CentOS 4 x86_64
kernel -security update
To: CentOS-Announce <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"

CentOS Errata and Security Advisory 2009:0167

https://rhn.redhat.com/errata/RHSA-2008-0167.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

x86_64:
kernel-2.6.9-67.0.7.EL.x86_64.rpm
kernel-devel-2.6.9-67.0.7.EL.x86_64.rpm
kernel-doc-2.6.9-67.0.7.EL.noarch.rpm
kernel-largesmp-2.6.9-67.0.7.EL.x86_64.rpm
kernel-largesmp-devel-2.6.9-67.0.7.EL.x86_64.rpm
kernel-smp-2.6.9-67.0.7.EL.x86_64.rpm
kernel-smp-devel-2.6.9-67.0.7.EL.x86_64.rpm
kernel-xenU-2.6.9-67.0.7.EL.x86_64.rpm
kernel-xenU-devel-2.6.9-67.0.7.EL.x86_64.rpm


src:
kernel-2.6.9-67.0.7.EL.src.rpm

-- next part --
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080315/a21ae4ea/signature-0001.bin

--

___
CentOS-announce mailing list
[EMAIL PROTECTED]
http://lists.centos.org/mailman/listinfo/centos-announce


End of CentOS-announce Digest, Vol 37, Issue 6
**
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 12:10 +0100, Niki Kovacs wrote:
> William L. Maltby a écrit :
> 
> > 
> > I tried to get and test this for you, and me. Can't access the repo.
> > 
> > # uname -a
> > Linux centos501.homegroannetworking 2.6.18-53.1.14.el5 #1 SMP Wed Mar 5
> > 11:36:49 EST 2008 i686 athlon i386 GNU/Linux
> > 
> > # cat /etc/yum.repos.d/kikinovak
> > [kikinovak]
> > enabled=0
> > priority=99
> > name=CentOS-$releasever - kikinovak
> > baseurl=http://kikinovak.free.fr/centos/$releasever/kikinovak/$basearch
> > #baseurl=http://kikinovak.free.fr/centos/5/kikinovak/i386/
> > gpgcheck=0
> > protect=0
> > 
> > Tried adding slash to the end of your original baseurl and added and
> > tried the commented hardcoded URL. NG.
> > 
> > # yum --enablerepo=kikinovak list
> > Loading "changelog" plugin
> > Loading "downloadonly" plugin
> > Loading "installonlyn" plugin
> > Loading "kernel-module" plugin
> > Loading "skip-broken" plugin
> > Loading "fedorakmod" plugin
> > Loading "repolist" plugin
> > Loading "fastestmirror" plugin
> > Loading "tsflags" plugin
> > Loading "allowdowngrade" plugin
> > Loading "priorities" plugin
> > 
> > 
> > Error getting repository data for kikinovak, repository not found
> > 
> > Any thoughts?
> 
> Yes. Replace 'enabled=0' by 'enabled=1' :oD

Need more coffee too? ;-) Above I had

yum --enablerepo=kikinovak list

That "otter" do it, no?

> 
> Cheers,
> 
> Niki
> 

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3


William L. Maltby a écrit :



I tried to get and test this for you, and me. Can't access the repo.

# uname -a
Linux centos501.homegroannetworking 2.6.18-53.1.14.el5 #1 SMP Wed Mar 5
11:36:49 EST 2008 i686 athlon i386 GNU/Linux

# cat /etc/yum.repos.d/kikinovak
[kikinovak]
enabled=0
priority=99
name=CentOS-$releasever - kikinovak
baseurl=http://kikinovak.free.fr/centos/$releasever/kikinovak/$basearch
#baseurl=http://kikinovak.free.fr/centos/5/kikinovak/i386/
gpgcheck=0
protect=0

Tried adding slash to the end of your original baseurl and added and
tried the commented hardcoded URL. NG.

# yum --enablerepo=kikinovak list
Loading "changelog" plugin
Loading "downloadonly" plugin
Loading "installonlyn" plugin
Loading "kernel-module" plugin
Loading "skip-broken" plugin
Loading "fedorakmod" plugin
Loading "repolist" plugin
Loading "fastestmirror" plugin
Loading "tsflags" plugin
Loading "allowdowngrade" plugin
Loading "priorities" plugin


Error getting repository data for kikinovak, repository not found

Any thoughts?


Yes. Replace 'enabled=0' by 'enabled=1' :oD

Cheers,

Niki
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3

On Sun, 2008-03-16 at 11:11 +0100, Niki Kovacs wrote:
> Niki Kovacs a écrit :
> >>
> > I gave it a go anyway, and the result is very convincing. 
> 
> I forgot: if anyone wants to try out Firefox 3.0beta without the hassle 
> of building/adapting it for CentOS, feel free to use the RPM from my 
> repo. To add it, create and edit /etc/yum.repos.d/kikinovak.repo:
> 
> --8<
> [kikinovak]
> enabled=1
> priority=set_your_priority_here
> name=CentOS-$releasever - kikinovak
> baseurl=http://kikinovak.free.fr/centos/$releasever/kikinovak/$basearch
> gpgcheck=0
> --8<
> 
> And I'm sorry, I only have i386 available, since there's no x86_64 
> architecture around.

I tried to get and test this for you, and me. Can't access the repo.

# uname -a
Linux centos501.homegroannetworking 2.6.18-53.1.14.el5 #1 SMP Wed Mar 5
11:36:49 EST 2008 i686 athlon i386 GNU/Linux

# cat /etc/yum.repos.d/kikinovak
[kikinovak]
enabled=0
priority=99
name=CentOS-$releasever - kikinovak
baseurl=http://kikinovak.free.fr/centos/$releasever/kikinovak/$basearch
#baseurl=http://kikinovak.free.fr/centos/5/kikinovak/i386/
gpgcheck=0
protect=0

Tried adding slash to the end of your original baseurl and added and
tried the commented hardcoded URL. NG.

# yum --enablerepo=kikinovak list
Loading "changelog" plugin
Loading "downloadonly" plugin
Loading "installonlyn" plugin
Loading "kernel-module" plugin
Loading "skip-broken" plugin
Loading "fedorakmod" plugin
Loading "repolist" plugin
Loading "fastestmirror" plugin
Loading "tsflags" plugin
Loading "allowdowngrade" plugin
Loading "priorities" plugin


Error getting repository data for kikinovak, repository not found

Any thoughts?

> 
> 
> Be careful about the priority. I have some stuff in that repo that 
> replaces [base] packages.
> 
> Cheers,
> 
> Niki
> 

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3


Niki Kovacs a écrit :


I gave it a go anyway, and the result is very convincing. 


I forgot: if anyone wants to try out Firefox 3.0beta without the hassle 
of building/adapting it for CentOS, feel free to use the RPM from my 
repo. To add it, create and edit /etc/yum.repos.d/kikinovak.repo:


--8<
[kikinovak]
enabled=1
priority=set_your_priority_here
name=CentOS-$releasever - kikinovak
baseurl=http://kikinovak.free.fr/centos/$releasever/kikinovak/$basearch
gpgcheck=0
--8<

And I'm sorry, I only have i386 available, since there's no x86_64 
architecture around.


Be careful about the priority. I have some stuff in that repo that 
replaces [base] packages.


Cheers,

Niki
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firefox 3


Johnny Hughes a écrit :


This implementation changes the way pango, cario, and a new thing called 
xul-runner interact with several gnome things ... it is also tied to a 
newer version of nss ... which requires other system components to be 
rebuilt.


I gave it a go anyway, and the result is very convincing. I grabbed an 
SRPM from FC8, and here's the results:


BuildRequires: hunspell(-devel), xulrunner(-devel), 
xulrunner-devel-unstable.


Requires: hunspell, xulrunner.

I'm using XFCE, not GNOME, so it didn't get more complicated than that.

The only thing I had to adjust was commenting every occurrence of 
Fedora's system-bookmarks package, which is both a build and install 
requirement, in firefox3.spec.


I have a personal checklist of unnerving bugs for Firefox 1.5.x, Firefox 
2.x, Seamonkey 1.1.x and Opera, which more or less forced me to install 
at least two web browsers (Seamonkey and Opera) to be able to use all my 
favourite web sites and web apps. Things like writing a very long page 
in a SPIP interface, launching a video on Youtube and immediately 
pressing the Back button, visiting the badly scripted site of the French 
employment agency, and so on.


Firefox 3.0beta passes all these tests without any single crash or other 
misbehaviour, so I just adopted it and got rid of the other browsers. 
Guess I'll install it on our production machines this week.


Funny thing: the development version isn't called Firefox, but 
Minefield, as a reminder of the "beta" quality of the software. The 
Firefox developers have a nice sense of humor. Check out what you see 
when you click on the "About" menu item:


http://www.kikinovak.net/images/minefield.png

Cheers,

Niki
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Skype on CentOS 5 - my microphone settings are incorrect