Re: [CentOS] Forward all traffic from public IP A to public IP B?

2008-11-22 Thread Amos Shapira
2008/11/4 Morten Sundstrøm [EMAIL PROTECTED]:
 No nothing will go back from B through A, traffic from B vil go directly to
 the quering host. Sort of like manipulate the header of every packet

Sounds like what LVS (Linux Virtual Server) ldirectord does in DR
setup - host A publishes virtual IP, receives packets from the
world, redirects them at the ethernet-level to host B (which is on the
same ethernet segment) which then generates IP packets with the
virtual IP as the source address and the initial client as the
destination - allowing host B to send the reply directly to the client
through its router without bothering the ldirectord.

Is this what you are trying to achieve?

--Amos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Forward all traffic from public IP A to public IP B?

2008-11-22 Thread John R Pierce

Amos Shapira wrote:

2008/11/4 Morten Sundstrøm [EMAIL PROTECTED]:
  

No nothing will go back from B through A, traffic from B vil go directly to
the quering host. Sort of like manipulate the header of every packet



Sounds like what LVS (Linux Virtual Server) ldirectord does in DR
setup - host A publishes virtual IP, receives packets from the
world, redirects them at the ethernet-level to host B (which is on the
same ethernet segment) which then generates IP packets with the
virtual IP as the source address and the initial client as the
destination - allowing host B to send the reply directly to the client
through its router without bothering the ldirectord.

Is this what you are trying to achieve?
  


um, about 3 weeks ago, when this discussion was active, the original 
poster stated that Servers A and B were... two different machines on 
different public networks.


I think that precludes a direct Ethernet connection.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] syslog remote computers

2008-11-22 Thread Dag Wieers

On Wed, 19 Nov 2008, Jim Perrin wrote:


On Wed, Nov 19, 2008 at 7:02 PM, Craig White [EMAIL PROTECTED] wrote:

Trying to figure out if there's a way to get syslog.conf to direct
remote logging from a wireless access point to log to a separate file
instead of the main syslog and can't figure out how that could be done
from man syslog.conf (or man 2/3 of syslog)

this clearly doesn't work

192.168.1.251.*   /var/log/WAP-2.log

which according to the man page, makes sense since this the IP address
is not a facility.

Is there a way to do this that I am missing?


The stock syslog package can't do this. You need rsyslog to make this
happen. You can set up various templates and filters based on the log
file information also. See
http://www.bofh-hunter.com/2007/12/31/centralized-logging-with-centos-and-rsyslog/
for a brief walkthrough on the basics.


In RPMforge we have backported rsyslog packages from RHEL5 to RHEL4. In 
this case version 2.0.0-11, but when RHEL5.3 is released (or security 
updates are released) I am commited to release them for RHEL4.


--
--   dag wieers,  [EMAIL PROTECTED],  http://dag.wieers.com/   --
[Any errors in spelling, tact or fact are transmission errors]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Location of 5.2 .iso without XEN

2008-11-22 Thread Vandaman
Ralph Angenendt wrote:

 Do not install Virtualization and you won't
 have xen. There are no 
 different ISOs for with xen and without
 xen.
 

This means that the OP did not even bother checking the responses
to his question.

http://lists.centos.org/pipermail/centos/2008-November/068124.html

even looking at the recent kernel updates one can see for themselves :-

x86_64:
kernel-2.6.18-92.1.17.el5.x86_64.rpm
kernel-debug-2.6.18-92.1.17.el5.x86_64.rpm
kernel-debug-devel-2.6.18-92.1.17.el5.x86_64.rpm
kernel-devel-2.6.18-92.1.17.el5.x86_64.rpm
kernel-doc-2.6.18-92.1.17.el5.noarch.rpm
kernel-headers-2.6.18-92.1.17.el5.x86_64.rpm
kernel-xen-2.6.18-92.1.17.el5.x86_64.rpm
kernel-xen-devel-2.6.18-92.1.17.el5.x86_64.rpm

Regards,
Vandaman.





___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Location of 5.2 .iso without XEN

2008-11-22 Thread Kai Schaetzl
Sam, please don't abandon threads you initiated yourself about the same 
topic, this is noob behavior. You should know better by now. You waste 
other people's time as they cannot know all content of all threads.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] howto transfer all configuration between 2 remote dedicated servers?

2008-11-22 Thread Dag Wieers

On Thu, 20 Nov 2008, Joe Barjo wrote:


But my real question is: How can I get a list of files in the whole
filesystem that were added or modified compared to all the files that come
from rpms?
Is there a script for doing such a thing?


You may be interested in a tool I wrote some time ago that makes a 
hardware and software snapshot of a system, including the latent 
configuration in memory (like routing information or firewall rules).


It creates the snapshots in single compressed text files periodically 
(hourly, daily, weekly, monthly from cron) that can be diffed. And it 
allows to send out diffs to one or more email-addresses if configured to 
do so.


It was written with multiple use cases in mind:

 - compare identical systems (eg. nodes in a cluster, or when migrating
   servers)

 - mail changes to a group of co-maintaining sysadmins (so configuration
   changes are communicated and if needed acted upon)

 - backing up a complete system's HW/SW configuration and making diffs
   with past configurations for troubleshooting problems

 - taking system configurations with you (as a consultant or support
   organisation it is nice to follow-up on system changes made
   by the customer)

The tool is called dconf. You can find it in RPMforge.

The tool is as good as its configuration. The default configuration 
already contains a lot for RHEL/CentOS, but it could use more people 
defining more tools/configuration file. And I am open for improving the 
tool beyond what it does now.


Feedback appreciated,
--
--   dag wieers,  [EMAIL PROTECTED],  http://dag.wieers.com/   --
[Any errors in spelling, tact or fact are transmission errors]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] howto transfer all configuration between 2 remote dedicated servers?

2008-11-22 Thread Les Mikesell

Dag Wieers wrote:



But my real question is: How can I get a list of files in the whole
filesystem that were added or modified compared to all the files that 
come

from rpms?
Is there a script for doing such a thing?


You may be interested in a tool I wrote some time ago that makes a 
hardware and software snapshot of a system, including the latent 
configuration in memory (like routing information or firewall rules).


It creates the snapshots in single compressed text files periodically 
(hourly, daily, weekly, monthly from cron) that can be diffed. And it 
allows to send out diffs to one or more email-addresses if configured to 
do so.


It was written with multiple use cases in mind:

 - compare identical systems (eg. nodes in a cluster, or when migrating
   servers)

 - mail changes to a group of co-maintaining sysadmins (so configuration
   changes are communicated and if needed acted upon)

 - backing up a complete system's HW/SW configuration and making diffs
   with past configurations for troubleshooting problems

 - taking system configurations with you (as a consultant or support
   organisation it is nice to follow-up on system changes made
   by the customer)

The tool is called dconf. You can find it in RPMforge.

The tool is as good as its configuration. The default configuration 
already contains a lot for RHEL/CentOS, but it could use more people 
defining more tools/configuration file. And I am open for improving the 
tool beyond what it does now.


Feedback appreciated,


What I've always wanted is a tool that would manage a group of machine 
configurations as branches in subversion so the tool itself wouldn't 
need any diffing capability and could be wrapped by viewvc for web 
browsing, mesh nicely with router and other text base config management, 
etc.   By 'configurations', on RPM based machines, I'd want the package 
list exported in a form that yum or kickstart could use to re-create the 
set (and I suppose to get this right you also have to build a local 
repository containing all of them because rpm/yum  are too dumb to know 
where they came from, given multiple repositories), and copies of all 
the files in /etc/ and other optional places that are not exactly as 
installed from an RPM.


Is such a thing feasible, and if you can get that far, can it become a 
'configuration factory' where you'd copy the starting config close to 
what you want to a new branch, edit a few files for the needed changes 
to produce a new machine, commit them, and then have a tool build that 
machine or a disk image of it?   What I'm after is something that will 
let me make on-the-fly changes to any running machine, but pull those 
changes back to a central management tool in a way that makes it easy to 
see differences across time or between similar machines, and to use the 
current setup of any machine as the starting point for a new one.


Most of the tools I've seen so far involve their own abstractions to 
describe configurations and require them to be made at the central 
management tool.  That's not what I want.  I want to do configurations 
using the native setup on one or more machines whether or not the 
management tool has an abstraction for it and have a way to use that 
going forward and to track differences without any intermediate 
abstractions.  I suppose in a way the version control's branch/rev/tag 
mechanism becomes an abstraction for the whole machine state at a point 
in time.


--
  Les Mikesell
[EMAIL PROTECTED]


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] kbs-CentOS-Testing gnucash: status for CentOS 5?

2008-11-22 Thread William L. Maltby
I decided I would like to try GnuCash on my 5.x desktop system. I did an
available list and got this

   gnucash.i3862.2.4-1.el5.kb kbs-CentOS-Testi
   gnucash-docs.noarch 2.2.0-2.el5.kb kbs-CentOS-Testi

Did a

   yum --enablerepo=kbs-CentOS-Testing install gnucash\*

That produced

   Package gnucash-docs-2.2.0-2.el5.kb.noarch.rpm is not signed

I figured I had forgot to install the gpg key, so I did that. Well, now
I have to instances of that key. When I try to remove one copy,

   # rpm -e gpg-pubkey-3e13cf5b-422eea1c
   error: gpg-pubkey-3e13cf5b-422eea1c specifies multiple packages

I tried removing the /var/lib/rpm/__* and rebuild, but no help. Still
have two instances of the key. Any way to clean that without a remove and
reinstall of all the keys?

Anyway, a search of the archives has an entry indicating that gnucash
was available for CentOS 4.x, but nada about 5. Am I too early on this?

Anyhoo, figuring that docs could be addressed later, I then foolishly
(need more coffee?) did

   yum --enablerepo=kbs-CentOS-Testing install --exclude=gnucash-docs \
   gnucash

which, of course produced

   Error: Missing Dependency: gnucash-docs = 2.2.0 is needed by package
   gnucash-2.2.4-1.el5.kb.i386 (kbs-CentOS-Testing)

Undaunted, I figured to download via yum and force installation with
nodeps (hmm, yum --downloadonly didn't work. Nothing in the docs about
that though. Did 

   yumdownloader --enablerepo=kbs-CentOS-Testing gnucash-docs

and that worked)

Then

   rpm --install --nodeps gnucash-docs-2.2.0-2.el5.kb.noarch.rpm 

worked, but gave

   I/O error : Attempt to load network entity
  http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd
   I/O error : Attempt to load network entity
  http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd
   I/O error : Attempt to load network entity
  http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd

The docs were installed though AFAICT. ISTR seeing stuff similar to this
with other packages in the dim past. Don't recall any solutions though.

I wonder if there's a way to suppress that activity. I don't
particularly care for packages that require on-line references for local
and potentially sensitive work. I'm thinking there might be a
configuration file I could modify because I see some similar files
already on the system. I'll pursue that later if I get gnucash
installed.

Back to the primary task, did

   yum --enablerepo=kbs-CentOS-Testing install gnucash

That produced

   Package gwenhywfar-2.6.2-2.el5.kb.i386.rpm is not signed

At that point I felt maybe I was a bit premature as I had already
confirmed that I had the gpg key installed.

Any words of wisdom for me? If I don't need to worry about the signing
issues, I guess I could download and install all with --nodeps. Good/bad
idea? Anything I might do to help the process along? I've not done any
rpm work, so it might take awhile if there is anything too technical.

I'm going to fire up my 4.x and see if it works there. I can muddle
through there, with a small amount of inconvenience. But that might be
worth it.

Before I forget, thanks to you and all the crew for the hard work that
benefits us all.

TIA
-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Location of 5.2 .iso without XEN

2008-11-22 Thread Lanny Marcus
On Sat, Nov 22, 2008 at 11:58 AM, Sam Drinkard [EMAIL PROTECTED] wrote:
snip
 unexpected, I have to ask questions.  I'm amazed that I missed the
 virtualization when I did the install.. I'm going to blow it all away and
 start fresh, mainly because I didn't like the default partitioning on the
 drives.  I'm in uncharted waters for me with the raid array, and trying to
 figure out what is what.

Sam: As I recall, when you do the installation, it asks you if you
want to select the packages now or later. Select now and I think
Virtualization is at or near the end of the lists of different groups
of packages. Seems like xen is depreciated (?) and/or there are other
virtualization methods that are easier to work with? You may want to
scan the list archives for things about xen. Also, Download the
documentation, from the CentOS web site and from Upstream (they may
have more manuals available for download) regarding setting up RAID
and check out the CentOS Wiki.GL  73, Lanny
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] syslog remote computers

2008-11-22 Thread Ricardo Carrillo
mmm I'm not sure if I understood, but when you want to register any
log to remote host you must to do as follow:

mail.* @10.0.1.1

The example above is for register any mail logs into mail to remote
host with 10.0.1.1 ip address.


2008/11/22 Dag Wieers [EMAIL PROTECTED]:
 On Wed, 19 Nov 2008, Jim Perrin wrote:

 On Wed, Nov 19, 2008 at 7:02 PM, Craig White [EMAIL PROTECTED]
 wrote:

 Trying to figure out if there's a way to get syslog.conf to direct
 remote logging from a wireless access point to log to a separate file
 instead of the main syslog and can't figure out how that could be done
 from man syslog.conf (or man 2/3 of syslog)

 this clearly doesn't work

 192.168.1.251.*   /var/log/WAP-2.log

 which according to the man page, makes sense since this the IP address
 is not a facility.

 Is there a way to do this that I am missing?

 The stock syslog package can't do this. You need rsyslog to make this
 happen. You can set up various templates and filters based on the log
 file information also. See

 http://www.bofh-hunter.com/2007/12/31/centralized-logging-with-centos-and-rsyslog/
 for a brief walkthrough on the basics.

 In RPMforge we have backported rsyslog packages from RHEL5 to RHEL4. In this
 case version 2.0.0-11, but when RHEL5.3 is released (or security updates are
 released) I am commited to release them for RHEL4.

 --
 --   dag wieers,  [EMAIL PROTECTED],  http://dag.wieers.com/   --
 [Any errors in spelling, tact or fact are transmission errors]
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos




-- 

:: L.I. Ricardo D. Carrillo Sánchez
:: Security Specialist
:: Universidad Nacional Autonoma de Mexico::
:: Ciudad Universitaria  ,
D.F. Mex
:: e-mail prim.: davxoc at gmai dot com
:: e-mail secu.: davxoc at hotmail dot com
:
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] rsyslog-postgresql for CentOS5

2008-11-22 Thread Adam Tauno Williams
Is the postgreSQL backend/connector for rsyslog being packaged by
anyone?  I've looked around and only found rsyslog  rsyslog-mysql.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Location of 5.2 .iso without XEN

2008-11-22 Thread Sam Drinkard



Lanny Marcus wrote:

On Sat, Nov 22, 2008 at 11:58 AM, Sam Drinkard [EMAIL PROTECTED] wrote:
snip
  

unexpected, I have to ask questions.  I'm amazed that I missed the
virtualization when I did the install.. I'm going to blow it all away and
start fresh, mainly because I didn't like the default partitioning on the
drives.  I'm in uncharted waters for me with the raid array, and trying to
figure out what is what.



Sam: As I recall, when you do the installation, it asks you if you
want to select the packages now or later. Select now and I think
Virtualization is at or near the end of the lists of different groups
of packages. Seems like xen is depreciated (?) and/or there are other
virtualization methods that are easier to work with? You may want to
scan the list archives for things about xen. Also, Download the
documentation, from the CentOS web site and from Upstream (they may
have more manuals available for download) regarding setting up RAID
and check out the CentOS Wiki.GL  73, Lanny
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  

Hi Lanny,

I was very particular when doing this install, and I did see the 
virtualization box.  I suppose I assumed it was something else when I 
did the first install.  I've now got a good install afaik at this point, 
so I'll start off by updating the basic system. I know there is a heap 
of stuff that has changed since 4.7, and I just gotta play catch up.  
I'm not one to jump on the latest and greatest...  xen is like a foreign 
language to me.. don't want it or need it.  Will peruse the archives and 
see what else I've got to get updated on..


73,

Sam

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] kbs-CentOS-Testing gnucash: status for CentOS 5?

2008-11-22 Thread William L. Maltby

On Sat, 2008-11-22 at 15:17 -0500, R P Herrold wrote:
 On Sat, 22 Nov 2008, William L. Maltby wrote:
 
  I figured I had forgot to install the gpg key, so I did that. Well, now
  I have to instances of that key. When I try to remove one copy,
 
# rpm -e gpg-pubkey-3e13cf5b-422eea1c
error: gpg-pubkey-3e13cf5b-422eea1c specifies multiple packages
 
 add the --allmatches  option to the rpm -e

Thanks! In the rpm man page I had searched for ignore and error and
a few other things I could think of to try and get around it. *sigh* I
guess someday I'll have to actually read the _whole_thing_ so that my
(used-to-be?) excellent memory for the generalities can save me.

 
 and it will work as you wish to elide that key
 
 -- Russ herrold
 snip sig stuff

BTW, in case KB is looking, the install on 4.x went just fine and I'm
now reading the tutorial (the _whole_thing_  8=O  )

Thanks again, Russ

-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Location of 5.2 .iso without XEN

2008-11-22 Thread Lanny Marcus
On Sat, Nov 22, 2008 at 3:35 PM, Sam Drinkard [EMAIL PROTECTED] wrote:
 Lanny Marcus wrote:
 On Sat, Nov 22, 2008 at 11:58 AM, Sam Drinkard [EMAIL PROTECTED] wrote:
 snip
 unexpected, I have to ask questions.  I'm amazed that I missed the
 virtualization when I did the install.. I'm going to blow it all away and
 start fresh, mainly because I didn't like the default partitioning on the
 drives.  I'm in uncharted waters for me with the raid array, and trying
 to
 figure out what is what.
snip
 I was very particular when doing this install, and I did see the
 virtualization box.  I suppose I assumed it was something else when I did
 the first install.  I've now got a good install afaik at this point, so I'll
 start off by updating the basic system. I know there is a heap of stuff that
 has changed since 4.7, and I just gotta play catch up.  I'm not one to jump
 on the latest and greatest...  xen is like a foreign language to me.. don't
 want it or need it.  Will peruse the archives and see what else I've got to
 get updated on..

Sounds good. After I clicked send, I reread your post and realized
that you didn't want xen (which, I believe, is depreciated). VMWare
Server seems to be very popular here. A good idea to install only what
you need, but, it's usually safer installing on Linux than installing
something on M$ Windoze, which can really screw up the box. BTW, check
the Services that are running on your box and turn off anything you
don't need running. I'm always puzzled by services upstream has
started, many of them, I don't want or need.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] syslog remote computers

2008-11-22 Thread Jim Perrin
On Sat, Nov 22, 2008 at 2:14 PM, Ricardo Carrillo [EMAIL PROTECTED] wrote:
 mmm I'm not sure if I understood, but when you want to register any
 log to remote host you must to do as follow:

 mail.* @10.0.1.1

 The example above is for register any mail logs into mail to remote
 host with 10.0.1.1 ip address

Correct, however as I read the OP's query, he wants them in separate
files. This is something that the default syslog just can't cope with.
With rsyslog, I can create /var/log/hosts/host-a/mail.log,
/var/log/hosts/host-b/mail.log, OR you can do
/var/log/host-A-mail.log, host-B-mail.log etc.

There are several methods with rsyslog to create logging templates, as
well as regex filters and operations that can be performed. It allows
for much greater flexibility when it comes to providing a central
logging facility.




-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos