Re: [CentOS] using /dev/hda system to build initrd for /dev/sda system

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 10:58 PM, Jerry Geis <[EMAIL PROTECTED]> wrote:
> What might I look at changing to ensure my initrd is made correctly.

Try copying /etc/modprobe.conf from the production machine to the
machine where you built your kernel and then run mkinitrd again.

You might also try to play with the --preload= parameter of mkinitrd.

See "man 8 mkinitrd" for more details.

HTH,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Zoneminder

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 9:30 PM, Thomas Dukes <[EMAIL PROTECTED]> wrote:
> Does any one have current rpms for Zoneminder-1.23.3?  I can't get the
> source to compile on 4.6.

FC9 has 1.22.3. It probably shouldn't be hard to extract the specfile,
edit it to use the 1.23.3 sources and try to rebuild it. It might
work.

ftp://fr2.rpmfind.net/linux/fedora/updates/9/SRPMS/zoneminder-1.22.3-14.fc9.src.rpm

HTH,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Chroot'ed SSH

2008-06-06 Thread Filipe Brandenburger
On Sat, Jun 7, 2008 at 12:18 AM, Eric Wood <[EMAIL PROTECTED]> wrote:
> Just the other week sshd 4.9 enabled chroot for the first time I think.
>  Fairly new stuff.  You'll have to roll your own rpm for CentOS as it will
> be unlikely that they roll it - probably not even for 5.2 either.

Yeah, I was considering rebuilding FC9 RPM of OpenSSH 5.0 which would
include the feature. However, I would rather avoid using an SSH server
other than the one provided by CentOS, since the whole point of
RHEL/CentOS is to have a certified platform, if you start replacing
packages you might break that.

> pam_chroot might get deprecated.

I was digging into the issue and I realised pam_chroot is actually
installed in CentOS 5 by default:

$ rpm -ql pam.x86_64 | grep chroot
/etc/security/chroot.conf
/lib64/security/pam_chroot.so
/usr/share/doc/pam-0.99.6.2/txts/README.pam_chroot

I googled around but I didn't find any howto's on how to enable it and
set it up. Is anyone using it successfully? Does it integrate
seamlessly with OpenSSH? How should I set it up?

Thanks!
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Chroot'ed SSH

2008-06-06 Thread Eric Wood

Filipe Brandenburger wrote:

Hi,

Is anyone chrooting users that connect through SSH?
  


Just the other week sshd 4.9 enabled chroot for the first time I think.  
Fairly new stuff.  You'll have to roll your own rpm for CentOS as it 
will be unlikely that they roll it - probably not even for 5.2 either.


* Added chroot(2) support for sshd(8), controlled by a new option
  "ChrootDirectory". Please refer to sshd_config(5) for details, and
  please use this feature carefully. (bz#177 bz#1352)

pam_chroot might get deprecated.


-eric
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Chroot'ed SSH

2008-06-06 Thread Filipe Brandenburger
Hi,

Is anyone chrooting users that connect through SSH?

I looked for it on Google and I basically saw several methods:
- OpenSSH 5 supports ChrootDirectory (FC9 apparently has RPMs that
probably could be rebuilt under CentOS 5)
- There seem to be several patches for OpenSSH 4.x to do the chroot,
the most popular seems to be http://chrootssh.sf.net/
- There appears to be a pam_chroot
- There are solutions based on setting the user's shell to a
script/binary that does the chroot

By quickly looking at yum list, it doesn't seem like neither RHEL nor
CentOS directly support any of those, at least I didn't find any RPMs
for any of those.

If anyone is doing it, I would like to know what were your experiences
and if you would recommend doing it or not.

I'm specially interested in anything that doesn't involve replacing
the OpenSSH that comes with CentOS, after all, that's what CentOS is
all about, if you start replacing the pieces, what's the point...

Thanks a lot!
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 10:09 PM, Jim Wildman <[EMAIL PROTECTED]> wrote:
> Better, google for "tiny centos" and build a new box with the minimum on it.

Hmmm, that looks exactly like what I'm looking for! I'm actually
trying to find someone who has already done the tough work and could
give me some tips on what to expect on that path. I'll see what Google
has to offer and if I find something useful I'll post it here.

Thanks!
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 7:54 PM, Luke S Crawford <[EMAIL PROTECTED]> wrote:
> Removing network tools does not make it harder to break into the box,
> however, it can make it harder to do something with it once you are in.

That's the idea.

> (also, [not] installing the programs just
> means that if your box get compromised, the hacker needs to install
> some new packages.  Not difficult, even without root-  the attacker
> can install to the compromised user homedir.)

Not if /home and /tmp and /var/tmp are mounted with noexec,nodev,nosuid,...

> It sounds like your boss doesn't know much about this.  you have 2
> choices...  You can do what he says (largely useless.)  or you can try to
> educate yourself (and your boss) on ways to actually make your systems more
> secure.

Actually his argument (with which I agree) is that no box is
uncompromisable. Once compromised, you want to limit what can be done
from that box to reach more critical and secure parts of your network.

Also, removing those tools certainly WON'T make the box LESS secure.

> First, turn off all daemons you don't need.  if it's not running, you
> don't need to worry if there is a security hole in it.

This is a worry for this box because it will need to be particularly
exposed to the world (that's inherent to its role).

> I think a good firewall is useful...
> apply security updates immediately
> make sure that PermitRootLogin is set to no in /etc/ssh/sshd_config
> Beyond here, look at selinux, look at mounting all user-accessible partitions
> (/tmp, /home/ and /var)  as noexec
> some people remove development tools, because many people transport exploit
> code as c source code to the box, compile it and then execute it.

Yes, I'm doing all of those, including SELinux, and I'm planning on
doing yet more (like chroot'ed SSH).

Thanks!
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Jim Wildman

On Fri, 6 Jun 2008, Filipe Brandenburger wrote:


Hi,

My boss asked me to harden a CentOS box by removing "hacker" tools,
such as nmap, tcpdump, nc (netcat), telnet, etc.

I would like to know which list of packages would you remove from a
base install. I would appreciate if someone could point me to a
"standard" way of doing this. I know there are procedures for
hardening a machine (I remember reading about Bastille Linux) but I
don't know how effective they are and if they include the removal of
such tools in their procedures.

Any advice would be very appreciated!

Thanks,
Filipe


Assuming from the question that a) the box is already installed and b)
the application for which it exists is installed via a well formed
rpm...

(Tell your boss the box or the app may go down unexpectedly while
you're doing this.  This will almost certainly happen if condition b) is
not met.  And the app may not come back up right when you reboot the box
or restart the app.  Definitely schedule a power cycle or two for after
you think you're done.  Maybe freshen up your resume too.  Probably
should mention to the boss that if the app has gone through any internal
certification process, you are probably going to invalidate it and he
needs to talk to the development/enduser folks to schedule a recert.)

rpm -qa | sort > rpm.lst

look at the list, anything you don't know what it is, rpm -qi.  Season
with a liberal dose of "man -k package;man "less /usr/share/doc/" If you think you probably don't need it

yum erase.  If it doesn't try to erase the application or
something else necessary (like ssh or the kernel), say yes.  Use yum not
rpm so you have a record in /var/log/yum.log of what you did.  Maybe
start a screen session with history or a typescript session.  Read
everything c.a.r.e.f.u.l.l.y and slowly.  Don't multitask.  If you're
really paranoid (twitch, twitch), run your application test suite after
each deletion (you do have a test suite, right???).

Better, google for "tiny centos" and build a new box with the minimum on
it.  Then get the well formed application rpm from the vendor (evil laughter), 
put it in a local repository and use yum to install it and it's

dependencies.

And do all the firewall, selinux, hosts.{allow,deny} and NSA stuff too.


Jim Wildman, CISSP, RHCE   [EMAIL PROTECTED] http://www.rossberry.com
"Society in every state is a blessing, but Government, even in its best
state, is a necessary evil; in its worst state, an intolerable one."
Thomas Paine
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] using /dev/hda system to build initrd for /dev/sda system

2008-06-06 Thread Jerry Geis
I think I have booting issues for my custom kernel on centos 4. the sda 
system cannot find the disk.


I used a qemu image to build a centos 4 MATH_EMULATION kernel.
This system has /dev/hda.

The system I am putting the vmlinuz and initrd files on is a /dev/sda 
system.

I dont think the initrd image is getting built correctly.

Does this make sense?
What might I look at changing to ensure my initrd is made correctly.

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Zoneminder

2008-06-06 Thread Thomas Dukes
Hello,

Does any one have current rpms for Zoneminder-1.23.3?  I can't get the
source to compile on 4.6.

I've looked, googled, etc., but can't find if anyone has made one.  Anyone
interested in making one?  Dag??

TIA

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread William L. Maltby
On Fri, 2008-06-06 at 12:50 -0700, MHR wrote:
> On Fri, Jun 6, 2008 at 12:12 PM, John R Pierce <[EMAIL PROTECTED]> wrote:
> >
> > TDK, Memorex, Imation, Verbatim, I don't believe ANY of those actually make
> > their own disks.   My TDK's have a media code of "CMC MAG. AM3", which is, I
> > believe, CMC Magnetics,

> Hmm - sounds like we need a corollary to Nero's InfoTool for Linux to
> get at that

Nope. Cdrtools/cdrecord can read all that stuff and tell you what you
want to know. CLI though.

> 
> > that said, I've burned 100s and 100s of the Costco 16X TDK "CMC MAG. AM3"
> > DVDs with very very few problems.   I've had several DVD burners, currently
> > mostly using a Pioneer DVR-112D (16x DL), previously I had a "Sony" that was
> > really a rebranded LiteOn, but after a couple years of heavy use, it started
> > getting too many burn errors, so I retired it.

I've always bought the store brands except for once (wanted "High Speed"
compatible CD). I burn 'em at full speed, test 'em carefully and can any
bad ones - very few to-date. The savings are great enough that if I have
to trash one or two, NP. Of course, if you've something more important
to do, it does cost a Little of your time and may not be worth the
savings.

> 

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Matt Shields
On Fri, Jun 6, 2008 at 7:54 PM, Luke S Crawford <[EMAIL PROTECTED]> wrote:
> "Filipe Brandenburger" <[EMAIL PROTECTED]> writes:
>> My boss asked me to harden a CentOS box by removing "hacker" tools,
>> such as nmap, tcpdump, nc (netcat), telnet, etc.
>
> Removing network tools does not make it harder to break into the box,
> however, it can make it harder to do something with it once you are in.
> removing those tools might help keep an infection from spreading, but it
> wont protect the box itself.  (also, just installing the programs just
> means that if your box get compromised, the hacker needs to install
> some new packages.  Not difficult, even without root-  the attacker
> can install to the compromised user homedir.)

But removing networking would :)

-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Luke S Crawford
"Filipe Brandenburger" <[EMAIL PROTECTED]> writes:
> My boss asked me to harden a CentOS box by removing "hacker" tools,
> such as nmap, tcpdump, nc (netcat), telnet, etc.

Removing network tools does not make it harder to break into the box, 
however, it can make it harder to do something with it once you are in.
removing those tools might help keep an infection from spreading, but it
wont protect the box itself.  (also, just installing the programs just 
means that if your box get compromised, the hacker needs to install 
some new packages.  Not difficult, even without root-  the attacker
can install to the compromised user homedir.)  

It sounds like your boss doesn't know much about this.  you have 2
choices...  You can do what he says (largely useless.)  or you can try to 
educate yourself (and your boss) on ways to actually make your systems more 
secure.

I would advise the latter course, personally, -  if the boss is a good 
boss, he will listen to his technical people.  

here are the basics: 

First, turn off all daemons you don't need.  if it's not running, you 
don't need to worry if there is a security hole in it.  

I think a good firewall is useful... it saves your ass if you
accidentally leave a daemon running that you don't need, or if
the new guy starts up a demon that you weren't running before, or if 
you need a daemon to be accessibly to the office but not the world.  use the 
centos iptables default setup-  make sure you can take the box offline,
then change the, default to 'reject' and then open things
up one service at a time until your system works again.  

third, subscribe to the announce list for your distro-  and check it 
every day.   apply security updates immediately (you can't just do this
with cron;  some require reboots)  

also, make sure that PermitRootLogin is set to no in /etc/ssh/sshd_config
-  all of the successful brute-force attacks I've seen have been against
the root user.  Brute-forcing other users is more difficult, as the
attacker (usually an automated process) needs to first obtain the 
username;  if you watch /var/log/secure you see a lot more attempts at root
than others.

if you use applications that are not provided by your distro's standard
distribution, subscribe to the mailing lists for those, as well.

the idea being that the majority of hacks are known exploits... if you
watch the mailing lists, you can at least solve the known problems 
soon after they become generally known.  

those are the minimum steps you need to take... it's thousands of times
better than nothing.these are the 'easy' steps that get you a lot
of security while minimally interfering with usability


going beyond here, you must recognize that in the optimal case, there
is a tradeoff between usability and security. this is the optimal
case;  sometimes you can make things less usable without increasing 
security.


Beyond here, look at selinux, look at mounting all user-accessible partitions
(/tmp, /home/ and /var)  as noexec and ensuring that nobody but root can
write anywhere else...-  it doesn't help if you get rooted, but it
makes things mildly more difficult for a local user to run a local root
exploit.  

some people remove development tools, because many people transport exploit
code as c source code to the box, compile it and then execute it.  

many other things can be done... but don't bother until you take down 
unnecessary demons, put up a firewall, subscribe to the announce lists
for your distro, and disable remote root login.  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Ruslan Sivak

Scott Silva wrote:

on 6-6-2008 4:28 PM Ruslan Sivak spake the following:

Dennis McLeod wrote:
They basically detect port 
scans and add a firewall rule to temporarily block that ip.  Does 
anyone know what tool that is?


Also disabling remote login as root should help.

Russ




Fail2ban, is what you are looking for, I think

http://www.fail2ban.org/wiki/index.php/Main_Page

Dennis


  


Sweet, actually this looks more like what I wanted, but rackspace 
said wasn't available.  This bans the ips if there are a lot of 
password failures.


There is also another tool which bans ips for port scans.  I think 
it's been discontinued, but perhaps there is another one out there?


Russ

I think that was portsentry.
http://sourceforge.net/projects/sentrytools/




Yep, that's it.  The keyword being was.  I believe I tried installing it 
in the past with no success.  Is there another project that took over, 
or is there a way to install this still?


Russ


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Scott Silva

on 6-6-2008 4:28 PM Ruslan Sivak spake the following:

Dennis McLeod wrote:
They basically detect port  
scans and add a firewall rule to temporarily block that ip.  Does 
anyone know what tool that is?


Also disabling remote login as root should help.

Russ




Fail2ban, is what you are looking for, I think

http://www.fail2ban.org/wiki/index.php/Main_Page

Dennis


  


Sweet, actually this looks more like what I wanted, but rackspace said 
wasn't available.  This bans the ips if there are a lot of password 
failures.


There is also another tool which bans ips for port scans.  I think it's 
been discontinued, but perhaps there is another one out there?


Russ

I think that was portsentry.
http://sourceforge.net/projects/sentrytools/


--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread John R Pierce



Have a search on google for NSA Hardening RHEL5, you will find a very
good document (pdf) which will help you start you're hardening.

  

http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=scg10.3.1.1
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Ruslan Sivak

Dennis McLeod wrote:
They basically detect port 
  
scans and add a firewall rule to temporarily block that ip.  
Does anyone know what tool that is?


Also disabling remote login as root should help.

Russ




Fail2ban, is what you are looking for, I think

http://www.fail2ban.org/wiki/index.php/Main_Page

Dennis


  


Sweet, actually this looks more like what I wanted, but rackspace said 
wasn't available.  This bans the ips if there are a lot of password 
failures.


There is also another tool which bans ips for port scans.  I think it's 
been discontinued, but perhaps there is another one out there?


Russ


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Scott Silva

on 6-6-2008 3:32 PM Vidar Normann spake the following:



On Sat, Jun 7, 2008 at 12:16 AM, Ruslan Sivak 
<[EMAIL PROTECTED] 
> wrote:


Scott Silva wrote:








The ones on their standard download page are not compatible
with Xen kernels according to the release notes.  The ones
to be used for Xen kernels on x64 is this one:
http://www.3ware.com/KB/article.aspx?id=15257

That only has a zip file, not an image file.

Russ

http://www.3ware.com/KB/article.aspx?id=15257 is the files that
go on a driver disk. I just dl'd it and opened it.
I know there is a way to use a driver disk from other media, but
I can't find it, and I'm sure someone on list will remember how.


 



Yes these are the files I was using.  It wouldn't let me install
with these files on a usb drive or a cdrom, but it worked fine when
I put them on a floppy.  I then did an upgrade install of CentOS,
and was able to boot into the system.
The only issue now seems to be that I still can't boot the xen
kernel with it.  I tried manually copying the 3w-9xxx.ko from
/lib/modules/2.6.18-53.el5/updates to
/lib/modules/2.6.18-53.1.21.el5xen/updates, but that didn't seem to
help.

Do I need to mkinitrd or something?


Maybe not 100% useful, but I had trouble installing CentOS on a machine 
with a 9690SA as recently as tonight - who has floppy
drives anymore? (Well, I did, but all my floppies were unusable, big 
shock..)


The trick was to use the method explained on this site to turn the files 
in the driver download from 3ware into an image:

http://www.openfusion.net/linux/network-driver-images

Upload it to somewhere accessible via the Internet or your local 
network. Then all I had to do was boot with the parameter:

linux dd=http://somewhere.com/filename

Good to know that dd supports http and ftp out of the box and not just 
local media.



I knew someone would remember how to use a driverdisk image over a network!

--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Dennis McLeod
They basically detect port 
> scans and add a firewall rule to temporarily block that ip.  
> Does anyone know what tool that is?
> 
> Also disabling remote login as root should help.
> 
> Russ


Fail2ban, is what you are looking for, I think

http://www.fail2ban.org/wiki/index.php/Main_Page

Dennis

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Erik Bussink

On Fri, 2008-06-06 at 19:03 -0400, Filipe Brandenburger wrote:
> Hi,
> 
> My boss asked me to harden a CentOS box by removing "hacker" tools,
> such as nmap, tcpdump, nc (netcat), telnet, etc.
> 
> I would like to know which list of packages would you remove from a
> base install. I would appreciate if someone could point me to a
> "standard" way of doing this. I know there are procedures for
> hardening a machine (I remember reading about Bastille Linux) but I
> don't know how effective they are and if they include the removal of
> such tools in their procedures.
> 
> Any advice would be very appreciated!

Filipe,

Have a search on google for NSA Hardening RHEL5, you will find a very
good document (pdf) which will help you start you're hardening.

Regards,
Erik

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Ruslan Sivak

Filipe Brandenburger wrote:

Hi,

My boss asked me to harden a CentOS box by removing "hacker" tools,
such as nmap, tcpdump, nc (netcat), telnet, etc.

I would like to know which list of packages would you remove from a
base install. I would appreciate if someone could point me to a
"standard" way of doing this. I know there are procedures for
hardening a machine (I remember reading about Bastille Linux) but I
don't know how effective they are and if they include the removal of
such tools in their procedures.

Any advice would be very appreciated!

Thanks,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
I don't think that removing these tools would make the box any more 
secure.  If a hacker is able to get into the system through exploiting a 
service, he can download the necessary tools or compile them himself. 

I suggest to start setting up the firewall to only have the necessary 
ports open (which is usually already done), moving anything you can to a 
non standard port (especially things like ssh), and disabling any 
unneeded services.  You would be surprised how many attacks a public 
server can get on standard ports like ssh.  People will run scripts that 
will just try to bruteforce a password, and can lead to DOS attacks, 
especially on slower servers.


There are also tools, such as the ones that rackspace installs, that 
stop port scans.  They basically detect port scans and add a firewall 
rule to temporarily block that ip.  Does anyone know what tool that is?


Also disabling remote login as root should help.

Russ


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread John R Pierce

Filipe Brandenburger wrote:

Hi,

My boss asked me to harden a CentOS box by removing "hacker" tools,
such as nmap, tcpdump, nc (netcat), telnet, etc.

I would like to know which list of packages would you remove from a
base install. I would appreciate if someone could point me to a
"standard" way of doing this. I know there are procedures for
hardening a machine (I remember reading about Bastille Linux) but I
don't know how effective they are and if they include the removal of
such tools in their procedures.
  


those are all client-side tools. if someone gains access to them, 
the box is already hacked.how exactly does that harden it?


most all of those (certainly, nmap, tcpdump and telnet) are useful 
diagnostic tools for troubleshooting network connectivity issues.





___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Hardening CentOS by removing "hacker" tools

2008-06-06 Thread Filipe Brandenburger
Hi,

My boss asked me to harden a CentOS box by removing "hacker" tools,
such as nmap, tcpdump, nc (netcat), telnet, etc.

I would like to know which list of packages would you remove from a
base install. I would appreciate if someone could point me to a
"standard" way of doing this. I know there are procedures for
hardening a machine (I remember reading about Bastille Linux) but I
don't know how effective they are and if they include the removal of
such tools in their procedures.

Any advice would be very appreciated!

Thanks,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: SELinux error message on CentOS 5: "multiple same specifications"

2008-06-06 Thread Filipe Brandenburger
Hi,

For the record, I found and fixed the problem.

I had some users with their home wrongly set on LDAP. One of them had
the home set to /usr/local/whatever and a /bin/sh shell, and another
had /colossus/users/herusername as home. The script "genhomedircon"
(which apparently is run by RPM every time) was generating those bogus
entries.

After fixing the LDAP entries and running "genhomedircon" the problem got away.

Thanks,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Mysqlnavigator ?????

2008-06-06 Thread Filipe Brandenburger
On Fri, Jun 6, 2008 at 5:00 PM, Manuel Enrique Chavez Manzano
<[EMAIL PROTECTED]> wrote:
> yes I have tried there, I have the packeage but when I tried to install
> it it asked for dependencies, and what I want is to install it by yum.

# yum localinstall xxx.rpm

This will try to pull the dependencies for you.

HTH,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Vidar Normann
On Sat, Jun 7, 2008 at 12:16 AM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:

> Scott Silva wrote:
>
>>
>>
 


>>>
>>> The ones on their standard download page are not compatible with Xen
>>> kernels according to the release notes.  The ones to be used for Xen kernels
>>> on x64 is this one: http://www.3ware.com/KB/article.aspx?id=15257
>>>
>>> That only has a zip file, not an image file.
>>>
>>> Russ
>>>
>> http://www.3ware.com/KB/article.aspx?id=15257 is the files that go on a
>> driver disk. I just dl'd it and opened it.
>> I know there is a way to use a driver disk from other media, but I can't
>> find it, and I'm sure someone on list will remember how.
>> 
>>
>>
>>
>
> Yes these are the files I was using.  It wouldn't let me install with these
> files on a usb drive or a cdrom, but it worked fine when I put them on a
> floppy.  I then did an upgrade install of CentOS, and was able to boot into
> the system.
> The only issue now seems to be that I still can't boot the xen kernel with
> it.  I tried manually copying the 3w-9xxx.ko from
> /lib/modules/2.6.18-53.el5/updates to
> /lib/modules/2.6.18-53.1.21.el5xen/updates, but that didn't seem to help.
>
> Do I need to mkinitrd or something?
>

Maybe not 100% useful, but I had trouble installing CentOS on a machine with
a 9690SA as recently as tonight - who has floppy
drives anymore? (Well, I did, but all my floppies were unusable, big
shock..)

The trick was to use the method explained on this site to turn the files in
the driver download from 3ware into an image:
http://www.openfusion.net/linux/network-driver-images

Upload it to somewhere accessible via the Internet or your local network.
Then all I had to do was boot with the parameter:
linux dd=http://somewhere.com/filename

Good to know that dd supports http and ftp out of the box and not just local
media.


Vidar
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Ruslan Sivak

Scott Silva wrote:




 



The ones on their standard download page are not compatible with Xen 
kernels according to the release notes.  The ones to be used for Xen 
kernels on x64 is this one: 
http://www.3ware.com/KB/article.aspx?id=15257


That only has a zip file, not an image file.

Russ
http://www.3ware.com/KB/article.aspx?id=15257 is the files that go on 
a driver disk. I just dl'd it and opened it.
I know there is a way to use a driver disk from other media, but I 
can't find it, and I'm sure someone on list will remember how.



  


Yes these are the files I was using.  It wouldn't let me install with 
these files on a usb drive or a cdrom, but it worked fine when I put 
them on a floppy.  I then did an upgrade install of CentOS, and was able 
to boot into the system. 

The only issue now seems to be that I still can't boot the xen kernel 
with it.  I tried manually copying the 3w-9xxx.ko from 
/lib/modules/2.6.18-53.el5/updates to 
/lib/modules/2.6.18-53.1.21.el5xen/updates, but that didn't seem to help.


Do I need to mkinitrd or something?

Russ
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Samba AD valid users issue

2008-06-06 Thread mslist

Thanks,

The issue dos not seem to be with the separator. It is 
with the @ as a leading char in the group name. But I will 
give it a try on Monday



Michel van Deventer michel at van.deventer.cx
Fri Jun 6 21:34:23 UTC 2008

Having a quick glance at the config I remember I had a 
sort of same
issue, set your winbind seperator character to something 
like '#' and do
the same in the valid users and groups and it should give 
you more
working stuff ;) The \ character is a line break which 
tells samba to
continue reading the config on the next line including 
spaces and

linebreaks...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba AD valid users issue

2008-06-06 Thread Michel van Deventer
Hi,

On Fri, 2008-06-06 at 17:26 -0400, [EMAIL PROTECTED] wrote:
> I have setup a new server centos 5.1 server as a storage 
> server with over 7TB of storage. The server has been 
> integrated into a large Active Directory network there are 
> 5 primary AD servers and a large number of local AD server 
> at each location (over 20). There are also over 15 trusted 
> domains hundreds of groups and thousands of users. It has 
> been quite a challenge to integrate the Linux server with 
> Samba into this incitement. I am now at a point where I 
> can change user and group ownership of filed and folders 
> at AD users and connect to the server with a windows 
> client.
> 
> There are also issues with Samba not starting on bootup 
> (yes the service is set to start at level 3 – system 
> starts non GUI). And it seems to take quite a while for 
> system to recognize domain users on startup.
> 
> The [TEST] share works with out issue.
> The [TEST-ENG] share is not working no matter what I do.
> 
> The issue that I am having is that most of the groups have 
> a [EMAIL PROTECTED] at the beginning.
> Ie: @DIV-Engineering
> This conflicts with the Samba “valid users = “ directive 
> in the smb.conf.
> 
>I have been able to change the group ownership to 
> [EMAIL PROTECTED] in the file-system without any issues.
> 
> 
> Is there any way to do this?
> 
> 
> [global]
>  workgroup = XXX
>  realm = XXX
>  server string = Samba Server Version %v
>  security = ADS
>  auth methods = guest, sam, winbind
>  obey pam restrictions = Yes
>  password server = nycbcc01.xxx.ad.xxx.net
> #   winbind separator = \\
> #   passdb backend = tdbsam
>  wins server = 192.20.76.98
>  ldap ssl = no
>  winbind use default domain = yes
>  idmap uid = 1-10
>  idmap gid = 1-10
>  winbind enum users = Yes
>  preferred master = no
>  encrypt passwords = yes
>  template homedir = /home/samba/%D/%U
>  cups options = raw
> 
> [homes]
>  comment = Home Directories
>  read only = No
>  browseable = No
> 
> [printers]
>  comment = All Printers
>  path = /var/spool/samba
>  printable = Yes
>  browseable = No
> 
> [TEST]
>  path = /home/samba/shares/TEST
>  valid users = @"XXX\Domain Users"
>  force group = "XXX\domain users"
>  read only = No
>  create mask = 0774
>  force create mode = 0775
>  directory mask = 0775
>  force directory mode = 0770
>  force directory security mode = 0770
> 
> [TEST-ENG]
>  path = /home/samba/shares/TEST
>  valid users = @"[EMAIL PROTECTED]"
>  force group = "[EMAIL PROTECTED]"
>  read only = No
>  create mask = 0774
>  force create mode = 0775
>  directory mask = 0775
>  force directory mode = 0770
>  force directory security mode = 0770
Having a quick glance at the config I remember I had a sort of same
issue, set your winbind seperator character to something like '#' and do
the same in the valid users and groups and it should give you more
working stuff ;) The \ character is a line break which tells samba to
continue reading the config on the next line including spaces and
linebreaks...


regards,

Michel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Samba AD valid users issue

2008-06-06 Thread mslist
I have setup a new server centos 5.1 server as a storage 
server with over 7TB of storage. The server has been 
integrated into a large Active Directory network there are 
5 primary AD servers and a large number of local AD server 
at each location (over 20). There are also over 15 trusted 
domains hundreds of groups and thousands of users. It has 
been quite a challenge to integrate the Linux server with 
Samba into this incitement. I am now at a point where I 
can change user and group ownership of filed and folders 
at AD users and connect to the server with a windows 
client.


There are also issues with Samba not starting on bootup 
(yes the service is set to start at level 3 – system 
starts non GUI). And it seems to take quite a while for 
system to recognize domain users on startup.


The [TEST] share works with out issue.
The [TEST-ENG] share is not working no matter what I do.

The issue that I am having is that most of the groups have 
a [EMAIL PROTECTED] at the beginning.

Ie: @DIV-Engineering
This conflicts with the Samba “valid users = “ directive 
in the smb.conf.


	 I have been able to change the group ownership to 
[EMAIL PROTECTED] in the file-system without any issues.



Is there any way to do this?


[global]
workgroup = XXX
realm = XXX
server string = Samba Server Version %v
security = ADS
auth methods = guest, sam, winbind
obey pam restrictions = Yes
password server = nycbcc01.xxx.ad.xxx.net
#   winbind separator = \\
#   passdb backend = tdbsam
wins server = 192.20.76.98
ldap ssl = no
winbind use default domain = yes
idmap uid = 1-10
idmap gid = 1-10
winbind enum users = Yes
preferred master = no
encrypt passwords = yes
template homedir = /home/samba/%D/%U
cups options = raw

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[TEST]
path = /home/samba/shares/TEST
valid users = @"XXX\Domain Users"
force group = "XXX\domain users"
read only = No
create mask = 0774
force create mode = 0775
directory mask = 0775
force directory mode = 0770
force directory security mode = 0770

[TEST-ENG]
path = /home/samba/shares/TEST
valid users = @"[EMAIL PROTECTED]"
force group = "[EMAIL PROTECTED]"
read only = No
create mask = 0774
force create mode = 0775
directory mask = 0775
force directory mode = 0770
force directory security mode = 0770
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Mysqlnavigator ?????

2008-06-06 Thread Manuel Enrique Chavez Manzano
yes I have tried there, I have the packeage but when I tried to install
it it asked for dependencies, and what I want is to install it by yum.




El jue, 05-06-2008 a las 22:56 -0400, Filipe Brandenburger escribió:
> 2008/6/5 Manuel Enrique Chavez Manzano <[EMAIL PROTECTED]>:
> > from wich repo can I download Mysqlnavigator??
> 
> Have you tried the RPM from Sourceforge?
> http://sourceforge.net/project/showfiles.php?group_id=21623&package_id=37304
> 
> HTH,
> Filipe
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
-- 
"Nuestra recompensa se encuentra en el esfuerzo y no en el resultado.
Un esfuerzo total es una victoria completa".
  Mahatma Gandhi
  wwWWww 
  [o][o]
 (\o/)-o00o(__)-o00o---(\o/)
 (/|\)Manuel Enrique Chávez Manzano(/|\)
   | [EMAIL PROTECTED] | 
   | [EMAIL PROTECTED]|
   |  GNU/LINUX User |
   |   #468073   |
 (\o/) Using CentOS 5.1(\o/)
 (/|\)---ooo--ooo--(/|\)



signature.asc
Description: Esta parte del mensaje está firmada	digitalmente
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: usb thumbdrive

2008-06-06 Thread Scott Silva

on 6-6-2008 12:33 PM Jerry Geis spake the following:

Hi all,


I am soo close. I have have made my custom kernel from a DIFFERENT machine,
I have hte USB booting, I have 3  partitions, 1-fat12, 2 - ext3, 3 is swap.
on booting it says:

VFS cannot open root device NULL please append root=

I tried root=/dev/sda2 and still nothing.

Is there something about building a kernel on one machine and then 
taking that

to another machine with different disk structure and it not booting???
What do you do in that case?

I think - hope - this is my last step to get past...

jerry
You have to make sure that your initrd made on the other machine has drivers 
for the usb storage loaded.


--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Scott Silva







The ones on their standard download page are not compatible with Xen 
kernels according to the release notes.  The ones to be used for Xen 
kernels on x64 is this one: http://www.3ware.com/KB/article.aspx?id=15257


That only has a zip file, not an image file.

Russ
http://www.3ware.com/KB/article.aspx?id=15257 is the files that go on a driver 
disk. I just dl'd it and opened it.
I know there is a way to use a driver disk from other media, but I can't find 
it, and I'm sure someone on list will remember how.

--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: usb thumbdrive

2008-06-06 Thread Paul Heinlein

On Fri, 6 Jun 2008, Jerry Geis wrote:

> I am soo close. I have have made my custom kernel from a DIFFERENT 
> machine, I have hte USB booting, I have 3 partitions, 1-fat12, 2 - 
> ext3, 3 is swap. on booting it says:

>
> VFS cannot open root device NULL please append root=
>
> I tried root=/dev/sda2 and still nothing.

Does your custom kernel (or its initrd) include the USB storage 
drivers necessary for reading your thumb drive?


Paul,

I started with the config from the old kernel but specifically which 
ones do I need to check and verify?


I don't have any Linux machines handy for getting an exact list, but 
the usb-storage module is certainly key. It depends, in turn, on the 
scsi_mod module.


--
Paul Heinlein <> [EMAIL PROTECTED] <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Scott Silva





The ones on their standard download page are not compatible with Xen 
kernels according to the release notes.  The ones to be used for Xen 
kernels on x64 is this one: http://www.3ware.com/KB/article.aspx?id=15257


That only has a zip file, not an image file.

Russ
Then you might just have to wait, or do a base install to a separate drive, 
install the driver, and migrate the whole thing to the raid.
Or just run the base OS off of the separate drive for the initial tests and 
keep the Domu images on the raid array. Either way, 5.2 will probably (maybe?) 
be out by the 3rd week of June.


--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: usb thumbdrive

2008-06-06 Thread Jerry Geis

Jerry Geis wrote:

On Fri, 6 Jun 2008, Jerry Geis wrote:

>/ I am soo close. I have have made my custom kernel from a DIFFERENT 
/>/ machine, I have hte USB booting, I have 3 partitions, 1-fat12, 2 - 
/>/ ext3, 3 is swap. on booting it says:

/>/
/>/ VFS cannot open root device NULL please append root=
/>/
/>/ I tried root=/dev/sda2 and still nothing.
/
Does your custom kernel (or its initrd) include the USB storage 
drivers necessary for reading your thumb drive?


  

Paul,

I started with the config from the old kernel but specifically which ones
do I need to check and verify?

Thanks,

Jerry

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] usb thumbdrive

2008-06-06 Thread Paul Heinlein

On Fri, 6 Jun 2008, Jerry Geis wrote:

I am soo close. I have have made my custom kernel from a DIFFERENT 
machine, I have hte USB booting, I have 3 partitions, 1-fat12, 2 - 
ext3, 3 is swap. on booting it says:


VFS cannot open root device NULL please append root=

I tried root=/dev/sda2 and still nothing.


Does your custom kernel (or its initrd) include the USB storage 
drivers necessary for reading your thumb drive?


--
Paul Heinlein <> [EMAIL PROTECTED] <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread MHR
On Fri, Jun 6, 2008 at 12:12 PM, John R Pierce <[EMAIL PROTECTED]> wrote:
>
> TDK, Memorex, Imation, Verbatim, I don't believe ANY of those actually make
> their own disks.   My TDK's have a media code of "CMC MAG. AM3", which is, I
> believe, CMC Magnetics, a middle grade disk, OK but not great.Note that
> there's some OTHER CMC disks which are apparently pure garbage.These
> "AM3" code disks can be found with Ricoh, , Memorex, Staples, and god knows
> how many other brands on the label.   And, a different label of TDK disk
> might be from a different pressing plant.
>

Hmm - sounds like we need a corollary to Nero's InfoTool for Linux to
get at that

> that said, I've burned 100s and 100s of the Costco 16X TDK "CMC MAG. AM3"
> DVDs with very very few problems.   I've had several DVD burners, currently
> mostly using a Pioneer DVR-112D (16x DL), previously I had a "Sony" that was
> really a rebranded LiteOn, but after a couple years of heavy use, it started
> getting too many burn errors, so I retired it.
>

I used to have a couple of Emprex burners - I forget who _really_ made
them - that were quite nice despite being a junk brand from Fry's.
The 4x burner was slow but reliable, and the 16x burner was fast and
could burn DVDs that read in DVD players and most other PC drives if
the discs were burned at 12x (not 16x).  Unfortuantely, both of them
are now history, having died long before my time.

I had a Hammer 18x drive that was really a Panasonic, but it didn't
have all the speeds, and it died long before my Emprex 16x, even
though it was about a year newer.

I now have a Pioneer 18x burner that's pretty decent (although I
haven't gotten it past 12x for DVDs and 40x for CDs), and a Samsung
(i.e., Toshiba-Samsung) 20x drive that, so far, hasn't burned one DVD
above 2.4x, or one that was any good in any drive, including itself.
(I need to get some tech support for that one - blecch!)

> I have noted that DVD video is best burned at 8X, which is a CLV mode (16X
> is a CAV mode), as the error rate goes up considerably on the last 20% or so
> of the disk when it actually hits the 16X speeds, too many of my 16X burned
> home videos have glitches near the end.. "16X" CAV burns actually
> average about 11X, so its really not that much slower to burn 8X overall.
>I've also found my computers are much less fussier about the disks than
> regular DVD players.
>

I agree 100%.

> Supposedly, disks by Taiyo Yuden are the best, these are often sold as
> "That's DVD"
>

Never heard of them - where do you find these?

HTH

mhr

PS: w.r.t. the original topic here, I pulled down a new LiveCD iso
image, and this one passed the md5sum.  I used K3B here at work to
burn two of them.  Both completed the burn but the verification
failed, so I mounted the iso file as a loop drive and compared all the
files - fine.  Booted from the CD - fine.  Looks okay to me.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] usb thumbdrive

2008-06-06 Thread Jerry Geis

Hi all,


I am soo close. I have have made my custom kernel from a DIFFERENT machine,
I have hte USB booting, I have 3  partitions, 1-fat12, 2 - ext3, 3 is swap.
on booting it says:

VFS cannot open root device NULL please append root=

I tried root=/dev/sda2 and still nothing.

Is there something about building a kernel on one machine and then 
taking that

to another machine with different disk structure and it not booting???
What do you do in that case?

I think - hope - this is my last step to get past...

jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread Anne Wilson
On Friday 06 June 2008 20:12:57 John R Pierce wrote:
> TDK, Memorex, Imation, Verbatim, I don't believe ANY of those actually
> make their own disks.

I understand that there are only two or three manufacturers and that 
the 'brands' may well buy from more than one of them.  I did quite a lot of 
reading about this at one time, and it seems that the output of some 
factories is less reliable than the output of other factories.  It all comes 
down to qa, and I suspect that's what the extra 10% pays for in Memorex's 
Professional range.

Anne


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-06 Thread Timothy Selivanow
On Thu, 2008-06-05 at 20:04 -0700, John R Pierce wrote:
> Filipe Brandenburger wrote:
> > On Thu, Jun 5, 2008 at 2:05 PM, Timothy Selivanow
> > <[EMAIL PROTECTED]> wrote:
> >   
> >> things like 'put' and 'get', etc.), the connection hangs.  If you wait a
> >> bit it returns with a "425 Failed to establish connection".  I've tried
> >> 
> >
> > Is the FTP client behind NAT? If it is then active FTP won't work,
> > since the client will request the server to connect to the internal
> > IP.
> >   
> 
> 
> its somewhat more complex than that.   many NAT boxes (home routers, 
> etc) recognize FTP on port 21, and monitor the PORT commands, and mangle 
> them automatically.  A linux masquerading server can do this too, with 
> the right ip_masq module.  if the FTP is running on a nonstandard 
> port other than 21, the automagic stuff won't work.   If the FTP 
> /server/ is behind NAT using a port forward, it also gets messy. 
> 
> there's a detailed discussion of these and other salient points here, 
> http://www.ncftp.com/ncftpd/doc/misc/ftp_and_firewalls.htmlit bears 
> reading carefully.

There's no NAT'ing occuring in my tests (all machines, including my
workstation are not using RFC1918 addresses, some of the core routing
infrastructure is, but it's all routable and not NAT'd).  There are
various routers and firewalls between my workstation and the hosts, but
all ACL's and firewall rule sets allow my traffic unimpeded to my
testing hosts and the customer's hosts.

The frustrating thing is, it happens on all of the CentOS 5 machines
I've tested on.


--Tim
  
< Invest in physics -- own a piece of Dirac! >
  
  \
   \   \
\ /\
( )
  .( o ).

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread John R Pierce



The CD-R media I usually buy are Imation or Verbatim. Never had a
problem. There are probably other brands equally good.
  

Memorex to a range that they call "Memorex Professional" - about 10% more
expensive than their basic range.  I've found that I can let K3B run
full-tilt on them, doing a fast burn and getting good results.  Prior to
finding them I always had to throttle back.



I'm somewhat fond of TDK, but their newer, high-speed (16x+) DVDs have
been pretty iffy for me - the old ones (4x), and their CDs, are rock
solid, and the newer Memorex and Sony discs have been fairly reliable
for me (but Costco only carries TDK - foo).
  




TDK, Memorex, Imation, Verbatim, I don't believe ANY of those actually 
make their own disks.   My TDK's have a media code of "CMC MAG. AM3", 
which is, I believe, CMC Magnetics, a middle grade disk, OK but not 
great.Note that there's some OTHER CMC disks which are apparently 
pure garbage.These "AM3" code disks can be found with Ricoh, , 
Memorex, Staples, and god knows how many other brands on the label.   
And, a different label of TDK disk might be from a different pressing plant.


that said, I've burned 100s and 100s of the Costco 16X TDK "CMC MAG. 
AM3" DVDs with very very few problems.   I've had several DVD burners, 
currently mostly using a Pioneer DVR-112D (16x DL), previously I had a 
"Sony" that was really a rebranded LiteOn, but after a couple years of 
heavy use, it started getting too many burn errors, so I retired it.


I have noted that DVD video is best burned at 8X, which is a CLV mode 
(16X is a CAV mode), as the error rate goes up considerably on the last 
20% or so of the disk when it actually hits the 16X speeds, too many of 
my 16X burned home videos have glitches near the end.. "16X" CAV 
burns actually average about 11X, so its really not that much slower to 
burn 8X overall.  I've also found my computers are much less fussier 
about the disks than regular DVD players.


Supposedly, disks by Taiyo Yuden are the best, these are often sold as 
"That's DVD"


These guys have extensive reasonably technical evaluations of burners 
and media, http://www.cdrinfo.com/Sections/Reviews/Home.aspx?CategoryId=1
they actually do error rate plots on every disk, and try different 
drives with many different media types. Reading too much of this can 
be depressing, when you realize just how marginal all this stuff 
actually is  :)




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Ruslan Sivak

Scott Silva wrote:

on 6-6-2008 10:48 AM Ruslan Sivak spake the following:

Victor Padro wrote:



On Fri, Jun 6, 2008 at 12:20 PM, Ruslan Sivak <[EMAIL PROTECTED] 
> wrote:


Jeff wrote:

On Fri, Jun 6, 2008 at 11:58 AM, Ruslan Sivak <[EMAIL PROTECTED]
> wrote:
Tim Verhoeven wrote:
  On Fri, Jun 6, 2008 at 6:51 PM, Ruslan 
Sivak

<[EMAIL PROTECTED] > wrote:

I successfully installed 
CentOS on 3ware 9650SE

controller.  Due to some
issues with compatibility with my motherboard, I
replaced it with a
9690SA.
Now the system won't boot (although interestingly
enough, it find the
boot
menu fine, just won't boot past a certain point in
the bootup phase.

I thought I would reinstall, but anaconda doesn't
find the raid array.
3ware does have drivers on their site, but I'm not
too sure how to get
them
on my system?

  That controller requires a 
newer version of the 3ware

driver. I'm
pretty sure the 5.2 will have that driver. So if you
can wait a bit
longer...

Regards,
Tim


For production use, I can, but 
currently we are testing

these servers, and I
would like to get them up and running.  Is there a way to
load a driver on
an already running system, or load it for anaconda?
 Something similar to F6
in windows?
 
Yes, anaconda supports the concept of a driver disk.



http://www.centos.org/docs/2/rhl-ig-as-x86-en-2.1/ch-driverdisk.html


And 3ware offers a disk image download for 9690SA/RHEL5.

Thank you.  I noticed that they said in the docs to 
install by

using linux dd.  3ware provides a zip file with the drivers, not a
disk image, AFAIK.  I burned the contents of the zip to a cd, but
anaconda fails to recognize it.  It keeps complaining about not
being able to find a fat or a ext3 filesystem on the driver disk.

I don't have a floppy drive, only a cdrom and a flash drive.  Do I
need to get a floppy drive in order for this to work?
Russ



___
CentOS mailing list
CentOS@centos.org 
http://lists.centos.org/mailman/listinfo/centos



Perhaps you can download RHEL 5.2 from Red Hat Network, if you are a 
customer there will be no problem but if you're not, maybe you can 
sign out for 30 day trial and then download the ISOs, burn it and 
test your box and share your results, it will be enough time for 
CentOS 5.2 to be available, so then you can be sure to run a 
production system.


https://www.redhat.com/wapps/sso/rhn/login.html?redirect=http%3A%2F%2Frhn.redhat.com%2Frhn%2Fsoftware%2Fchannel%2Fdownloads%2FDownload.do%3Fcid=6949 



I got almost the same issue with an Asus mainboard...that's my 2 cents.


Cya.

Victor.


It's probably a good idea for me to know how to do this from 
scratch.  Plus I want to see if there's a difference in performance 
between the stock driver and the 3ware driver. I'm going to try 
giving 3ware a call to see how to install this.  Their support is 
usually excellent.


Russ
I don't think their driver is better, as they regularly refresh their 
driver to the kernel maintainers. It is just that the newer cards take 
a bit of time to get to the disk images.
Another thing you might be able to do is install to a drive that is 
not on the raid card and install their driver and migrate to the array.


I just looked at their website, and they do have a driver disk image. 
If you don't have a floppy, you can usually do a network install and 
get the driver disk image also from the network.

It is in the install docs I believe.




The ones on their standard download page are not compatible with Xen 
kernels according to the release notes.  The ones to be used for Xen 
kernels on x64 is this one: http://www.3ware.com/KB/article.aspx?id=15257


That only has a zip file, not an image file.

Russ


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: 3Ware 9690SA

2008-06-06 Thread Scott Silva

on 6-6-2008 10:48 AM Ruslan Sivak spake the following:

Victor Padro wrote:



On Fri, Jun 6, 2008 at 12:20 PM, Ruslan Sivak 
<[EMAIL PROTECTED] 
> wrote:


Jeff wrote:

On Fri, Jun 6, 2008 at 11:58 AM, Ruslan Sivak 
<[EMAIL PROTECTED]

> wrote:

Tim Verhoeven wrote:
  
On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak
<[EMAIL PROTECTED] 
> wrote:



I successfully installed CentOS on 3ware 9650SE

controller.  Due to some
issues with compatibility with my motherboard, I
replaced it with a
9690SA.
Now the system won't boot (although interestingly
enough, it find the
boot
menu fine, just won't boot past a certain point in
the bootup phase.

I thought I would reinstall, but anaconda doesn't
find the raid array.
3ware does have drivers on their site, but I'm not
too sure how to get
them
on my system?

  
That controller requires a newer version of the 3ware

driver. I'm
pretty sure the 5.2 will have that driver. So if you
can wait a bit
longer...

Regards,
Tim



For production use, I can, but currently we are testing

these servers, and I
would like to get them up and running.  Is there a way to
load a driver on
an already running system, or load it for anaconda?
 Something similar to F6
in windows?
  


Yes, anaconda supports the concept of a driver disk.


http://www.centos.org/docs/2/rhl-ig-as-x86-en-2.1/ch-driverdisk.html


And 3ware offers a disk image download for 9690SA/RHEL5.


Thank you.  I noticed that they said in the docs to install by

using linux dd.  3ware provides a zip file with the drivers, not a
disk image, AFAIK.  I burned the contents of the zip to a cd, but
anaconda fails to recognize it.  It keeps complaining about not
being able to find a fat or a ext3 filesystem on the driver disk.

I don't have a floppy drive, only a cdrom and a flash drive.  Do I
need to get a floppy drive in order for this to work?
Russ



___
CentOS mailing list
CentOS@centos.org 


http://lists.centos.org/mailman/listinfo/centos



Perhaps you can download RHEL 5.2 from Red Hat Network, if you are a 
customer there will be no problem but if you're not, maybe you can 
sign out for 30 day trial and then download the ISOs, burn it and test 
your box and share your results, it will be enough time for CentOS 5.2 
to be available, so then you can be sure to run a production system.


https://www.redhat.com/wapps/sso/rhn/login.html?redirect=http%3A%2F%2Frhn.redhat.com%2Frhn%2Fsoftware%2Fchannel%2Fdownloads%2FDownload.do%3Fcid=6949 



I got almost the same issue with an Asus mainboard...that's my 2 cents.


Cya.

Victor.


It's probably a good idea for me to know how to do this from scratch.  
Plus I want to see if there's a difference in performance between the 
stock driver and the 3ware driver. I'm going to try giving 3ware a call 
to see how to install this.  Their support is usually excellent.


Russ
I don't think their driver is better, as they regularly refresh their driver 
to the kernel maintainers. It is just that the newer cards take a bit of time 
to get to the disk images.
Another thing you might be able to do is install to a drive that is not on the 
raid card and install their driver and migrate to the array.


I just looked at their website, and they do have a driver disk image. If you 
don't have a floppy, you can usually do a network install and get the driver 
disk image also from the network.

It is in the install docs I believe.

--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread MHR
On Fri, Jun 6, 2008 at 5:38 AM, Anne Wilson <[EMAIL PROTECTED]> wrote:
> On Friday 06 June 2008 13:20:02 Lanny Marcus wrote:
>> Drives that we have had good
>> luck with include: Samsung, SONY & LG. Other's probably work just as
>> well. We have other TEAC drives, but they are the last TEAC drives we
>> will purchase.
>>
> I would add Lite-On to the list.  I've had several, including a stand-alone
> DVD recorder, and been highly satisfied with them.
>

Actually, I said (and it's true) that the burner was a Pioneer DVD
+/-RW DL 18x, with which I have so far had pretty good luck.  It turns
out that the image was bad, which I missed

The reader is a Teac CD-540E CD drive, but the original iso image that
came down was no good.

>> The CD-R media I usually buy are Imation or Verbatim. Never had a
>> problem. There are probably other brands equally good.
>>
> Memorex to a range that they call "Memorex Professional" - about 10% more
> expensive than their basic range.  I've found that I can let K3B run
> full-tilt on them, doing a fast burn and getting good results.  Prior to
> finding them I always had to throttle back.
>

I'm somewhat fond of TDK, but their newer, high-speed (16x+) DVDs have
been pretty iffy for me - the old ones (4x), and their CDs, are rock
solid, and the newer Memorex and Sony discs have been fairly reliable
for me (but Costco only carries TDK - foo).

Thanks.

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: usb thumbdrive

2008-06-06 Thread Jerry Geis


Jerry Geis wrote:
>/ I have a bootable usb thumbdrive now...
/>/ three partions, msdos for syslinux booting, ext3 and swap.
/
I think it's a bad idea to put a swap partition on a flash drive...
or is that obsolete knowledge?
  

Its there by habit - and I hope I dont need it.
Just investigating a solution. I also hope its obsolete like you mention.

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] usb thumbdrive

2008-06-06 Thread Nicolas Thierry-Mieg



Jerry Geis wrote:

I have a bootable usb thumbdrive now...
three partions, msdos for syslinux booting, ext3 and swap.


I think it's a bad idea to put a swap partition on a flash drive...
or is that obsolete knowledge?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread John R Pierce

Steve Moccio wrote:

Yes, Thanks.

What I forgot to mention was that I need to run CentOS 4.5 and
not CentOS 4.6 if at all possible.
  


I suppose you could just

   # yum update kernel

this should bring in whatever it is that is needed to support the newer 
controller, without patching anything else.   
___

CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 3Ware 9690SA

2008-06-06 Thread Ruslan Sivak

Victor Padro wrote:



On Fri, Jun 6, 2008 at 12:20 PM, Ruslan Sivak <[EMAIL PROTECTED] 
> wrote:


Jeff wrote:

On Fri, Jun 6, 2008 at 11:58 AM, Ruslan Sivak <[EMAIL PROTECTED]
> wrote:
 


Tim Verhoeven wrote:
   


On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak
<[EMAIL PROTECTED] > wrote:

 


I successfully installed CentOS on 3ware 9650SE
controller.  Due to some
issues with compatibility with my motherboard, I
replaced it with a
9690SA.
Now the system won't boot (although interestingly
enough, it find the
boot
menu fine, just won't boot past a certain point in
the bootup phase.

I thought I would reinstall, but anaconda doesn't
find the raid array.
3ware does have drivers on their site, but I'm not
too sure how to get
them
on my system?

   


That controller requires a newer version of the 3ware
driver. I'm
pretty sure the 5.2 will have that driver. So if you
can wait a bit
longer...

Regards,
Tim


 


For production use, I can, but currently we are testing
these servers, and I
would like to get them up and running.  Is there a way to
load a driver on
an already running system, or load it for anaconda?
 Something similar to F6
in windows?
   



Yes, anaconda supports the concept of a driver disk.

http://www.centos.org/docs/2/rhl-ig-as-x86-en-2.1/ch-driverdisk.html

And 3ware offers a disk image download for 9690SA/RHEL5.

 


Thank you.  I noticed that they said in the docs to install by
using linux dd.  3ware provides a zip file with the drivers, not a
disk image, AFAIK.  I burned the contents of the zip to a cd, but
anaconda fails to recognize it.  It keeps complaining about not
being able to find a fat or a ext3 filesystem on the driver disk.

I don't have a floppy drive, only a cdrom and a flash drive.  Do I
need to get a floppy drive in order for this to work?
Russ



___
CentOS mailing list
CentOS@centos.org 
http://lists.centos.org/mailman/listinfo/centos



Perhaps you can download RHEL 5.2 from Red Hat Network, if you are a 
customer there will be no problem but if you're not, maybe you can 
sign out for 30 day trial and then download the ISOs, burn it and test 
your box and share your results, it will be enough time for CentOS 5.2 
to be available, so then you can be sure to run a production system.


https://www.redhat.com/wapps/sso/rhn/login.html?redirect=http%3A%2F%2Frhn.redhat.com%2Frhn%2Fsoftware%2Fchannel%2Fdownloads%2FDownload.do%3Fcid=6949

I got almost the same issue with an Asus mainboard...that's my 2 cents.


Cya.

Victor.


It's probably a good idea for me to know how to do this from scratch.  
Plus I want to see if there's a difference in performance between the 
stock driver and the 3ware driver. 
I'm going to try giving 3ware a call to see how to install this.  Their 
support is usually excellent.


Russ
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread John R Pierce

Steve Moccio wrote:

Yes, Thanks.

What I forgot to mention was that I need to run CentOS 4.5 and
not CentOS 4.6 if at all possible.
  


its just CentOS 4, with the 6th quarterly patch rollup, as others said, 
as soon as you yum update (or, on RHEL, up2date -u), you'll have the 
same thing.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 3Ware 9690SA

2008-06-06 Thread Victor Padro
On Fri, Jun 6, 2008 at 12:20 PM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:

> Jeff wrote:
>
>> On Fri, Jun 6, 2008 at 11:58 AM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:
>>
>>
>>> Tim Verhoeven wrote:
>>>
>>>
 On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:



> I successfully installed CentOS on 3ware 9650SE controller.  Due to
> some
> issues with compatibility with my motherboard, I replaced it with a
> 9690SA.
> Now the system won't boot (although interestingly enough, it find the
> boot
> menu fine, just won't boot past a certain point in the bootup phase.
>
> I thought I would reinstall, but anaconda doesn't find the raid array.
> 3ware does have drivers on their site, but I'm not too sure how to get
> them
> on my system?
>
>
>
 That controller requires a newer version of the 3ware driver. I'm
 pretty sure the 5.2 will have that driver. So if you can wait a bit
 longer...

 Regards,
 Tim




>>> For production use, I can, but currently we are testing these servers,
>>> and I
>>> would like to get them up and running.  Is there a way to load a driver
>>> on
>>> an already running system, or load it for anaconda?  Something similar to
>>> F6
>>> in windows?
>>>
>>>
>>
>> Yes, anaconda supports the concept of a driver disk.
>>
>> http://www.centos.org/docs/2/rhl-ig-as-x86-en-2.1/ch-driverdisk.html
>>
>> And 3ware offers a disk image download for 9690SA/RHEL5.
>>
>>
>>
> Thank you.  I noticed that they said in the docs to install by using linux
> dd.  3ware provides a zip file with the drivers, not a disk image, AFAIK.  I
> burned the contents of the zip to a cd, but anaconda fails to recognize it.
>  It keeps complaining about not being able to find a fat or a ext3
> filesystem on the driver disk.
>
> I don't have a floppy drive, only a cdrom and a flash drive.  Do I need to
> get a floppy drive in order for this to work?
> Russ
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


Perhaps you can download RHEL 5.2 from Red Hat Network, if you are a
customer there will be no problem but if you're not, maybe you can sign out
for 30 day trial and then download the ISOs, burn it and test your box and
share your results, it will be enough time for CentOS 5.2 to be available,
so then you can be sure to run a production system.

https://www.redhat.com/wapps/sso/rhn/login.html?redirect=http%3A%2F%2Frhn.redhat.com%2Frhn%2Fsoftware%2Fchannel%2Fdownloads%2FDownload.do%3Fcid=6949

I got almost the same issue with an Asus mainboard...that's my 2 cents.


Cya.

Victor.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread Scott Silva

on 6-6-2008 10:31 AM Steve Moccio spake the following:

Yes, Thanks.

What I forgot to mention was that I need to run CentOS 4.5 and
not CentOS 4.6 if at all possible.


As soon as it yum updates, it will be 4.6 anyway.


--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: Re: [CentOS] Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread Steve Moccio
Yes, Thanks.

What I forgot to mention was that I need to run CentOS 4.5 and
not CentOS 4.6 if at all possible.





 On Fri, 6 Jun 2008, nate ([EMAIL PROTECTED]) wrote:

Tim Verhoeven wrote:

> Well, if RHEL 4U6 is supported, then just use CentOS 4.6
instead of
> 4.5 and the install will work.

Yes this is the case..and if for some reason you need more
evidence:

[EMAIL PROTECTED] ~]# lspci -v | grep -i perc
Subsystem: Dell PERC 6/i Integrated RAID Controller
[EMAIL PROTECTED] ~]# cat /etc/redhat-release
CentOS release 4.6 (Final)
[EMAIL PROTECTED] ~]# dmidecode  | grep -i 1950
Product Name: PowerEdge 1950

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] usb thumbdrive

2008-06-06 Thread Jerry Geis

I have a bootable usb thumbdrive now...
three partions, msdos for syslinux booting, ext3 and swap.

How can I grab my QEMU installed centos 4 image and put it on the
ext3 /dev/sdc2 partition on my thumbdrive?



THanks,

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 3Ware 9690SA

2008-06-06 Thread Ruslan Sivak

Jeff wrote:

On Fri, Jun 6, 2008 at 11:58 AM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:
  

Tim Verhoeven wrote:


On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:

  

I successfully installed CentOS on 3ware 9650SE controller.  Due to some
issues with compatibility with my motherboard, I replaced it with a
9690SA.
Now the system won't boot (although interestingly enough, it find the
boot
menu fine, just won't boot past a certain point in the bootup phase.

I thought I would reinstall, but anaconda doesn't find the raid array.
3ware does have drivers on their site, but I'm not too sure how to get
them
on my system?



That controller requires a newer version of the 3ware driver. I'm
pretty sure the 5.2 will have that driver. So if you can wait a bit
longer...

Regards,
Tim


  

For production use, I can, but currently we are testing these servers, and I
would like to get them up and running.  Is there a way to load a driver on
an already running system, or load it for anaconda?  Something similar to F6
in windows?



Yes, anaconda supports the concept of a driver disk.

http://www.centos.org/docs/2/rhl-ig-as-x86-en-2.1/ch-driverdisk.html

And 3ware offers a disk image download for 9690SA/RHEL5.

  
Thank you.  I noticed that they said in the docs to install by using 
linux dd.  3ware provides a zip file with the drivers, not a disk image, 
AFAIK.  I burned the contents of the zip to a cd, but anaconda fails to 
recognize it.  It keeps complaining about not being able to find a fat 
or a ext3 filesystem on the driver disk.


I don't have a floppy drive, only a cdrom and a flash drive.  Do I need 
to get a floppy drive in order for this to work? 


Russ


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 3Ware 9690SA

2008-06-06 Thread Jeff
On Fri, Jun 6, 2008 at 11:58 AM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:
> Tim Verhoeven wrote:
>>
>> On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:
>>
>>>
>>> I successfully installed CentOS on 3ware 9650SE controller.  Due to some
>>> issues with compatibility with my motherboard, I replaced it with a
>>> 9690SA.
>>> Now the system won't boot (although interestingly enough, it find the
>>> boot
>>> menu fine, just won't boot past a certain point in the bootup phase.
>>>
>>> I thought I would reinstall, but anaconda doesn't find the raid array.
>>> 3ware does have drivers on their site, but I'm not too sure how to get
>>> them
>>> on my system?
>>>
>>
>> That controller requires a newer version of the 3ware driver. I'm
>> pretty sure the 5.2 will have that driver. So if you can wait a bit
>> longer...
>>
>> Regards,
>> Tim
>>
>>
>
> For production use, I can, but currently we are testing these servers, and I
> would like to get them up and running.  Is there a way to load a driver on
> an already running system, or load it for anaconda?  Something similar to F6
> in windows?

Yes, anaconda supports the concept of a driver disk.

http://www.centos.org/docs/2/rhl-ig-as-x86-en-2.1/ch-driverdisk.html

And 3ware offers a disk image download for 9690SA/RHEL5.

-- 
Jeff
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 3Ware 9690SA

2008-06-06 Thread Ruslan Sivak

Tim Verhoeven wrote:

On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:
  

I successfully installed CentOS on 3ware 9650SE controller.  Due to some
issues with compatibility with my motherboard, I replaced it with a 9690SA.
Now the system won't boot (although interestingly enough, it find the boot
menu fine, just won't boot past a certain point in the bootup phase.

I thought I would reinstall, but anaconda doesn't find the raid array.
3ware does have drivers on their site, but I'm not too sure how to get them
on my system?



That controller requires a newer version of the 3ware driver. I'm
pretty sure the 5.2 will have that driver. So if you can wait a bit
longer...

Regards,
Tim

  
For production use, I can, but currently we are testing these servers, 
and I would like to get them up and running.  Is there a way to load a 
driver on an already running system, or load it for anaconda?  Something 
similar to F6 in windows?


Or do I need to go to the console and install it manually?

Russ
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 3Ware 9690SA

2008-06-06 Thread Tim Verhoeven
On Fri, Jun 6, 2008 at 6:51 PM, Ruslan Sivak <[EMAIL PROTECTED]> wrote:
> I successfully installed CentOS on 3ware 9650SE controller.  Due to some
> issues with compatibility with my motherboard, I replaced it with a 9690SA.
> Now the system won't boot (although interestingly enough, it find the boot
> menu fine, just won't boot past a certain point in the bootup phase.
>
> I thought I would reinstall, but anaconda doesn't find the raid array.
> 3ware does have drivers on their site, but I'm not too sure how to get them
> on my system?

That controller requires a newer version of the 3ware driver. I'm
pretty sure the 5.2 will have that driver. So if you can wait a bit
longer...

Regards,
Tim

-- 
Tim Verhoeven - [EMAIL PROTECTED] - 0479 / 88 11 83

Hoping the problem magically goes away by ignoring it is the
"microsoft approach to programming" and should never be allowed.
(Linus Torvalds)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] 3Ware 9690SA

2008-06-06 Thread Ruslan Sivak
I successfully installed CentOS on 3ware 9650SE controller.  Due to some 
issues with compatibility with my motherboard, I replaced it with a 
9690SA. 

Now the system won't boot (although interestingly enough, it find the 
boot menu fine, just won't boot past a certain point in the bootup phase.


I thought I would reinstall, but anaconda doesn't find the raid array. 

3ware does have drivers on their site, but I'm not too sure how to get 
them on my system? 


Russ
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread Scott Silva

on 6-6-2008 8:43 AM Tim Verhoeven spake the following:

On Fri, Jun 6, 2008 at 5:41 PM, Stephen Moccio  
wrote:

We are currently running CentOS 4.5 on older Dell Systems. We are upgrading
to Dell PowerEdge 1950 with a PERC 6/i raid controller.



CentOS 4.5 installation does not see the PERC 6/i controller. Dell and  LSI
Logic only support RHEL 4U6 and higher and SuSe.


Well, if RHEL 4U6 is supported, then just use CentOS 4.6 instead of
4.5 and the install will work.

Regards,
Tim


Dope!
   _ ,___,-'",-=-.
   __,-- _ _,-'_)_  (""`'-._\ `.
_,'  __ |,' ,-' __)  ,- /. |
  ,'_,--'   | -'  _)/ `\
,','  ,'   ,-'_,`   :
,' ,-'   ,(,-(  :
 ,'   ,-' ,_;
/,-._/`---'/
   /()(. )   ,'
  / (  `.__, /\ /,
 :   ;-.___ /__\/|
 | ,'  `--.  -,\ |
 :/\.__/
  \  (__\|_
   \   ,`-, *   /   _|,\
\,'   `-. ,'_,-'\
   (_\,-','\")--,'-'   __\
\   /  // ,'|  ,--'  `-.
 `-.`-/ \'  |   _,' `.
`-._ /  `--'/ \
-hrr-  ,'   |  \
  / |   \
   ,-'  |   /
  / | -'


--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread nate
Tim Verhoeven wrote:

> Well, if RHEL 4U6 is supported, then just use CentOS 4.6 instead of
> 4.5 and the install will work.

Yes this is the case..and if for some reason you need more evidence:

[EMAIL PROTECTED] ~]# lspci -v | grep -i perc
Subsystem: Dell PERC 6/i Integrated RAID Controller
[EMAIL PROTECTED] ~]# cat /etc/redhat-release
CentOS release 4.6 (Final)
[EMAIL PROTECTED] ~]# dmidecode  | grep -i 1950
Product Name: PowerEdge 1950

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread Tim Verhoeven
On Fri, Jun 6, 2008 at 5:41 PM, Stephen Moccio <[EMAIL PROTECTED]> wrote:
> We are currently running CentOS 4.5 on older Dell Systems. We are upgrading
> to Dell PowerEdge 1950 with a PERC 6/i raid controller.
>
>
>
> CentOS 4.5 installation does not see the PERC 6/i controller. Dell and  LSI
> Logic only support RHEL 4U6 and higher and SuSe.

Well, if RHEL 4U6 is supported, then just use CentOS 4.6 instead of
4.5 and the install will work.

Regards,
Tim

-- 
Tim Verhoeven - [EMAIL PROTECTED] - 0479 / 88 11 83

Hoping the problem magically goes away by ignoring it is the
"microsoft approach to programming" and should never be allowed.
(Linus Torvalds)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Dell 1950 Perc 6/i with centos 4.5

2008-06-06 Thread Stephen Moccio
We are currently running CentOS 4.5 on older Dell Systems. We are upgrading
to Dell PowerEdge 1950 with a PERC 6/i raid controller.

 

CentOS 4.5 installation does not see the PERC 6/i controller. Dell and  LSI
Logic only support RHEL 4U6 and higher and SuSe.

 

I've tried building the boot images with the new driver for installation but
kickstart still doesn't see the raid controller. I've also used the
DRIVERDISK directive within kickstart but that didn't work either.

 

Has anyone else experienced this? Anyone have any suggestions on what I
might try next?

 

Appreciate any help.

 

Thanks,

 Steve Moccio

  uReach Technologies

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] INN with auth hook

2008-06-06 Thread David Hláčik
Hello,

i am looking for someone who is using INN news server with python_auth hook
.


Thanks!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: enter run level

2008-06-06 Thread Jerry Geis

Jerry Geis wrote:

I have a centos 4 x86_64 machine that has been working fine.
It has software RAID-1.

Now when it boots I get the GRUB screen, I get the very first
screen about loading Init then I get a prompt about:

Enter Run Level:

When I enter 3 nothing happens... This is obviously not a normal boot
situation.

First question: Why this prompt?
Second question: since it is software raid do I run e2fsck /dev/sda1 
then e2fsck /dev/sdb1?
I am booted presently into linux rescue mode. Seems like /dev/md0 is 
not know in linux rescue...


I presume the file system is messed up so I was wanting to run e2fsck. 
It is an ext3 system.


Thanks,

Jerry

He looks like the /etc/inittab file got HOSED. It had nothing in it. I 
re-created it from another machine and it is OK.


Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] enter run level

2008-06-06 Thread Jerry Geis

I have a centos 4 x86_64 machine that has been working fine.
It has software RAID-1.

Now when it boots I get the GRUB screen, I get the very first
screen about loading Init then I get a prompt about:

Enter Run Level:

When I enter 3 nothing happens... This is obviously not a normal boot
situation.

First question: Why this prompt?
Second question: since it is software raid do I run e2fsck /dev/sda1 
then e2fsck /dev/sdb1?
I am booted presently into linux rescue mode. Seems like /dev/md0 is not 
know in linux rescue...


I presume the file system is messed up so I was wanting to run e2fsck. 
It is an ext3 system.


Thanks,

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread Anne Wilson
On Friday 06 June 2008 13:20:02 Lanny Marcus wrote:
> Drives that we have had good
> luck with include: Samsung, SONY & LG. Other's probably work just as
> well. We have other TEAC drives, but they are the last TEAC drives we
> will purchase.
>
I would add Lite-On to the list.  I've had several, including a stand-alone 
DVD recorder, and been highly satisfied with them.

> The CD-R media I usually buy are Imation or Verbatim. Never had a
> problem. There are probably other brands equally good.
>
Memorex to a range that they call "Memorex Professional" - about 10% more 
expensive than their basic range.  I've found that I can let K3B run 
full-tilt on them, doing a fast burn and getting good results.  Prior to 
finding them I always had to throttle back.

> When I burned the Knoppix Live CDs, K3B burned them at a high speed as I
> recall, but, as has been suggested in prior responses, throttling back
> on the speed probably greatly increases the chance of getting a good
> burn. K3B checks the MD5 sum, as I recall, when it begins the process.

The only problem with K3B is that on some installations it ejects the disk 
after the burn, then fails to pull it in again for the verify, so that you 
have to manually run md5sum or sha1sum to check it.

Anne


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Live CD?

2008-06-06 Thread Lanny Marcus
On Tue, 2008-06-03 at 11:51 -0700, MHR wrote:
> I just used a Live CD for the first time today, in part to show what
> CentOS can do for a co-worker who is looking at using it at work and
> home, but I got the strangest result.


Mark: First, I believe that you should always TYS (Test Your Stuff). You
were very lucky the demo was for a colleague and not for your Manager or
his/her boss! Test what you do, as much as is possible, so others do not
catch your mistakes! TYS... There are reasons for V&V (Verification and
Validation), Design Walk Through, etc. The earlier mistakes are found,
the easier it is to fix them.

I have a Live CD for an earlier version of CentOS and we have one old
box (Firewall/Router backup) it will not run on. I believe that's
because of a video problem.

The Live CD's have a number of uses, which include: (a) Being able to
Rescue a box that has bad problems. They usually have many utilities on
them (b) That one can see if the regular Installation will fly on the
HW, before actually trying to install. (c) You can take a Live CD with
you to a store, if you are contemplating buying a box, and see if Linux
will run on it (d) I plan to take a Knoppix Live CD with me, when I
travel, so if I need to use a Public box, I can boot Knoppix, do
whatever I need to do, and not leave a footprint.

The Knoppix Live CD has been recommended here on this ML and is very
popular. In your case, the CentOS Live CD was a better choice, since
your colleague is interested in using CentOS (a great idea).

Seems like you have a TEAC burner. Someone here on this list, last year,
told me that he does not like them. I personally will not buy any more
TEAC drives, because recently, I learned they did not have Diagnostics
for my CD-RW drive. It went into the trash. Drives that we have had good
luck with include: Samsung, SONY & LG. Other's probably work just as
well. We have other TEAC drives, but they are the last TEAC drives we
will purchase.

The CD-R media I usually buy are Imation or Verbatim. Never had a
problem. There are probably other brands equally good.

When I burned the Knoppix Live CDs, K3B burned them at a high speed as I
recall, but, as has been suggested in prior responses, throttling back
on the speed probably greatly increases the chance of getting a good
burn. K3B checks the MD5 sum, as I recall, when it begins the process.
HTH, Lanny

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 40, Issue 3

2008-06-06 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
[EMAIL PROTECTED]

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]

You can reach the person managing the list at
[EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2008:0498 Moderate CentOS 3 i386 cups -  security update
  (Tru Huynh)
   2. CESA-2008:0498 Moderate CentOS 3 x86_64 cups -security
  update (Tru Huynh)
   3. CESA-2008:0516 Critical CentOS 3 i386 evolution - security
  update (Tru Huynh)
   4. CESA-2008:0516 Critical CentOS 3 x86_64 evolution - security
  update (Tru Huynh)


--

Message: 1
Date: Thu, 5 Jun 2008 15:56:45 +0200
From: Tru Huynh <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0498 Moderate CentOS 3 i386 cups
-   security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory CESA-2008:0498

cups security update for CentOS 3 i386:
https://rhn.redhat.com/errata/RHSA-2008-0498.html

The following updated file has been uploaded and is currently syncing to
the mirrors:

i386:
updates/i386/RPMS/cups-1.1.17-13.3.53.i386.rpm
updates/i386/RPMS/cups-devel-1.1.17-13.3.53.i386.rpm
updates/i386/RPMS/cups-libs-1.1.17-13.3.53.i386.rpm

source:
updates/SRPMS/cups-1.1.17-13.3.53.src.rpm

You may update your CentOS-3 i386 installations by running the command:

yum update cups

Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080605/c5f84769/attachment-0001.bin

--

Message: 2
Date: Thu, 5 Jun 2008 15:57:36 +0200
From: Tru Huynh <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0498 Moderate CentOS 3 x86_64
cups -  security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory CESA-2008:0498

cups security update for CentOS 3 x86_64:
https://rhn.redhat.com/errata/RHSA-2008-0498.html

The following updated file has been uploaded and is currently syncing to
the mirrors:

x86_64:
updates/x86_64/RPMS/cups-1.1.17-13.3.53.x86_64.rpm
updates/x86_64/RPMS/cups-devel-1.1.17-13.3.53.x86_64.rpm
updates/x86_64/RPMS/cups-libs-1.1.17-13.3.53.i386.rpm
updates/x86_64/RPMS/cups-libs-1.1.17-13.3.53.x86_64.rpm

source:
updates/SRPMS/cups-1.1.17-13.3.53.src.rpm

You may update your CentOS-3 x86_64 installations by running the command:

yum update cups

Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080605/5558ea03/attachment-0001.bin

--

Message: 3
Date: Thu, 5 Jun 2008 15:58:08 +0200
From: Tru Huynh <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0516 Critical CentOS 3 i386
evolution - security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory CESA-2008:0516

evolution security update for CentOS 3 i386:
https://rhn.redhat.com/errata/RHSA-2008-0516.html

The following updated file has been uploaded and is currently syncing to
the mirrors:

i386:
updates/i386/RPMS/evolution-1.4.5-22.el3.i386.rpm
updates/i386/RPMS/evolution-devel-1.4.5-22.el3.i386.rpm

source:
updates/SRPMS/evolution-1.4.5-22.el3.src.rpm

You may update your CentOS-3 i386 installations by running the command:

yum update evolution

Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080605/4408a66d/attachment-0001.bin

--

Message: 4
Date: Thu, 5 Jun 2008 15:58:36 +0200
From: Tru Huynh <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0516 Critical CentOS 3 x86_64
evolution   - security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]

Re: [CentOS] Re: kernels and irc

2008-06-06 Thread Michael Simpson
On 6/5/08, Ross S. W. Walker <[EMAIL PROTECTED]> wrote:
> Scott Silva wrote:
>
> > on 6-5-2008 8:30 AM James Bunnell spake the following:
> > >
> > > i do pay for rhel. i made the mistake of converting to centos. damage is
> > > done. on the next major upgrade, i will return to rhel and will not
> > > professionally recommend centos either privately,personally, or in the
> > > realm of a business. thanks for seeing my side of the issue and not
> > > jumping on the elite bandwagon. i am done.
> >
> > No wonder you were banned on #irc. I personally am more than happy to
> > wait. I came here from Whitebox linux, and it is even slower there. One
> > person is doing what the entire team is doing here. I also know that if
> > I am in that big of a hurry, I can down the src rpms and start
> > building... But I won't.
> >
> > Johnny, Karanbir, Russ, Seth, Dag, Jim, Donavan, and every one else on
> > the team that I most surely missed... You do a bang up job, and our
> > thanks go to your tireless and mostly unpaid contributions to this
> > project! If I have to wait a week or a month for a new release... so
> > be it. The security updates are what is most important, and those come
> > very quickly.
>
> I second that!
>

I totally agree

I am the sysadmin for a *very* small company which we operate in the
free time outside of our normal jobs as addiction medics. Our profit
levels are so low that we cannot justify a RH support contract
*because* CentOS exists.

Of all the *many* mailing-lists that i am on i find the CentOS (and
the linux-poweredge list from Dell) to be the most polite and
informative.

If i ever get to deploy my parachute and exit the NHS then i am really
looking forward to lurking on the irc chans as well (pesky NHS
firewall and aup).

Our production server will be installed into NHS Lothian's network
once 5.2 comes out and i am *more* than happy with the "It'll be done
when it's done" answer.

Thanks again for all the work that you guys do!

mike
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firewalled NFS

2008-06-06 Thread Tru Huynh
On Fri, Jun 06, 2008 at 08:54:05AM +0200, Jordi Prats wrote:
> of course...

please delete the unneeded lines when you reply as a courtesy 
to the other subscribers.

Thanks,

Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B


pgpjGfHGYHWuK.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] kernels and irc

2008-06-06 Thread Dag Wieers

On Thu, 5 Jun 2008, James Bunnell wrote:


On Thu, 2008-06-05 at 09:57 -0500, Johnny Hughes wrote:


James Bunnell wrote:

If this is a problem, I suggest that you find a paid for service
contract where you can be rude to the people with whom you interact.


i do pay for rhel. i made the mistake of converting to centos. damage is
done. on the next major upgrade, i will return to rhel and will not
professionally recommend centos either privately,personally, or in the
realm of a business.


Thanks. I personally would not want people moving from RHEL to CentOS if 
they are happy with RHEL. If your business depends on CentOS, you better 
make sure RHEL lives as well. Because without RHEL, there is no CentOS.


--
--   dag wieers,  [EMAIL PROTECTED],  http://dag.wieers.com/   --
[Any errors in spelling, tact or fact are transmission errors]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos