[CentOS-docs] Nice work Alain

2009-02-09 Thread Ned Slider
Hey Alain,

Nice work on the updated admonitions here:

http://wiki.centos.org/HowTos/Wiki/Editing

IMHO they look great, and a nice improvement on the previous set.

Thanks for the hard work making our wiki pages look great!

Ned
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-virt] Alternate console method for Windows 2003 server

2009-02-09 Thread Christopher G. Stach II

- James Roman james_ro...@ssaihq.com wrote:

 Christopher G. Stach II wrote:
  - James Roman james_ro...@ssaihq.com wrote:
 

  I have a DomU running Windows 2003 server that occasionally blue
  screens 
  (or at least I assume it does). Obviously, when it does, I lose the
 
  ability to open a VNC console. Is there some method for sending the
 
  windows console to another location that can be viewed if the
 system
  dies?
  
 
  Just read the Windows event log and/or crash dump.
 

 I'm getting nothing in the windows event log at all. Just a gap from
 the 
 time it dies until the time the DomU is destroyed and restarted.
 That's 
 the reason I want console access.

http://www.google.com/search?q=windows+2003+crash+memory+dump

-- 
Christopher G. Stach II


___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Alternate console method for Windows 2003 server

2009-02-09 Thread Bruno Steven
Hey

Try use rdesktop -0 IP of server windows 2003

Rdesktop -0 call console windows server session .



On Fri, Feb 6, 2009 at 1:13 PM, James Roman james_ro...@ssaihq.com wrote:

 I have a DomU running Windows 2003 server that occasionally blue screens
 (or at least I assume it does). Obviously, when it does, I lose the
 ability to open a VNC console. Is there some method for sending the
 windows console to another location that can be viewed if the system dies?

 Centos 5.2
 2.6.18-92.1.6.el5xen kernel



 --

 James D. Roman
 Sr. Network Administrator
 Science Systems and Application, Inc.
 Phone: 301-867-2101

 ___
 CentOS-virt mailing list
 CentOS-virt@centos.org
 http://lists.centos.org/mailman/listinfo/centos-virt




-- 
Bruno Steven - Administrador de sistemas.
LPIC-1 - LPI ID: lpi000119659 / Code: p2e4wz47e4
https://www.lpi.org/caf/Xamman/certification

MCP-Windows 2003 - TranscriptID: 793804 / Access Code: 080089100
https://mcp.microsoft.com/authenticate/validatemcp.aspx
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Alternate console method for Windows 2003 server

2009-02-09 Thread James Roman
Bruno Steven wrote:
 Hey

 Try use rdesktop -0 IP of server windows 2003

 Rdesktop -0 call console windows server session .

I'll give it a try. What happens if the connection is lost to the 
device. Does the window just close or would it continue to display the 
last screen page sent?

-- 

James D. Roman
Sr. Network Administrator
Science Systems and Application, Inc.
Phone: 301-867-2101

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Alternate console method for Windows 2003 server

2009-02-09 Thread Kai Schaetzl
James Roman wrote on Sun, 08 Feb 2009 22:13:50 -0500:

 I'm getting nothing in the windows event log at all. Just a gap from the 
 time it dies until the time the DomU is destroyed and restarted.

Then it's likely *not* a bluescreen, but rather something in Xen. Unless 
the Windows system is instructed to not crash dump, not even mini-dump or 
has no or almost no pagefile configured.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-es] OT Instalación de un centro de ll amadas con Vicidial

2009-02-09 Thread Mario Ganga
Muchas Gracias por el aporte.

Atte.

Mario Ganga Castro.

2009/2/8 Yamal Pineda lama...@gmail.com


 **
 Está a disposición un manual de instalación de Vicidial - AstGUIclient que
 es un
 software GPL para la gestión de centros de llamadas (call centres y
 contact centers), por si alguna vez requieren implementar uno o
 conocen de alguien que lo requiera.

 Vicidial - AstGUIclient es uno de los mejores software que existen para
 este propósito, pero dado su grado de dificultad para instalarlo y por
 ende poco soporte, generalmente no se tiene en cuenta.  Este manual
 pretende terminar con esta brecha y facilitar el acceso a tan
 excelente aplicación.
 http://yamalpineda.blogspot.com/

 **
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es

___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS-es] gestor de incidencias

2009-02-09 Thread Ramón Cervantes
Hola,

 

Necesito implementar una aplicación para atención, por mail, de quejas,
dudas, etc de mis usuarios.

 

He visto el soft OTRS y voy a instalarlo para probarlo. Me gustaria tener
más alternativas, ¿conocen alguna otra aplicación que gestione estos
asuntos?

 

gracias

 




Ramón Cervantes

Consultor

Móvil  657 86 35 46

 mailto:rcervan...@sinergium-sgh.com rcervan...@sinergium-sgh.com

 http://www.sinergium-sgh.com/ www.sinergium-sgh.com

  


 

 

P Antes de imprimir este mensaje, por favor, compruebe que es verdaderamente
necesario. 
El Medio Ambiente es cosa de todos. 
Please consider the environment before printing this e-mail.

 

 

 

 

 

 

 

 

 

image001.jpg___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] gestor de incidencias

2009-02-09 Thread carlos restrepo
Evalua tambienvtiger.


Saludos.


Carlos R!

El 9 de febrero de 2009 11:16, Yoinier Hernandez Nieves 
administra...@ltu.jovenclub.cu escribió:

 Puedes usar GLPI, y hasta si deseas integrarlo con OSC Inventory.

 Yoinier.

 El lun, 09-02-2009 a las 17:14 +0100, Ramón Cervantes escribió:
  Hola,
 
 
 
  Necesito implementar una aplicación para atención, por mail, de
  quejas, dudas, etc de mis usuarios.
 
 
 
  He visto el soft OTRS y voy a instalarlo para probarlo. Me gustaria
  tener más alternativas, ¿conocen alguna otra aplicación que gestione
  estos asuntos?
 
 
 
  gracias
 
 
 
  Ramón Cervantes
 
  Consultor
 
  Móvil  657 86 35 46
 
  rcervan...@sinergium-sgh.com
 
  www.sinergium-sgh.com
 
 
 
 
 
 
 
 
 
  P Antes de imprimir este mensaje, por favor, compruebe que es
  verdaderamente necesario.
  El Medio Ambiente es cosa de todos.
  Please consider the environment before printing this e-mail.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es

 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es




-- 
Carlos Restrepo M.
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] gestor de incidencias

2009-02-09 Thread Victor Ramirez
puedes usar tambien osticket esta en php es muy sencillo y funciona bien.

www.osticket.com
Saludos
2009/2/9 O. T. Suarez otsua...@gmail.com

 Hola:
  Necesito implementar una aplicación para atención, por mail, de quejas,
  dudas, etc de mis usuarios.
  He visto el soft OTRS y voy a instalarlo para probarlo. Me gustaria tener
  más alternativas, ¿conocen alguna otra aplicación que gestione estos
  asuntos?
 Existen unas cuentas variantes, siendo el otrs y el rt lo mas
 conocidos. Esta phptickets tambien, el egroupware tiene soporte
 tambien para incidencias.
 para hacer la lista corta:
 http://en.wikipedia.org/wiki/Comparison_of_ticket-tracking_systems
 Saludos
 Osvaldo
  ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es

___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS-es] openfire para centos

2009-02-09 Thread Juan Manuel R.
Saludos :

Conocen un tutorial para instalar openfire para centos 5.2 ( antes wildfire , 
jabber ) .


De antemano muchas gracias 


Atte ,

Juan Manuel R



  
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread John


 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of Marcus Moeller
 Sent: Monday, February 09, 2009 2:59 AM
 To: CentOS mailing list
 Subject: Re: [CentOS] iptables: forwarding on internal device
 
 Good Morning,
 
 iptables -L -v now shows:
 
 0 0 ACCEPT all  --  eth0   eth0anywhere
 anywherestate NEW,RELATED,ESTABLISHED
 
 But the packages are still dropped:
 
 Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
 SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
 ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0
 
 Could it be that I have to enable something in proc to allow
 forwarding on an internal device?
 
 Best Regards
 Marcus

Yes that would be correct Marcus echo it into /proc or in /etc/sysctl.conf
would be
# Controls IP packet forwarding
net.ipv4.ip_forward = 1

JohnStanley

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS promotion

2009-02-09 Thread Michel Daggelinckx
I've been to FOSDEM this weekend and noticed the small number of CentOS
people at the booth.

The Ubuntu people work with Local Community Teams to support and promote
the distro.

I think it would be beneficial for CentOS to setup a similar structure.
At the moment it's mostly sysadmins who introduce/sneak CentOS into
businesses.
Local Community Teams can setup a booth at computer fairs and other
events. This way the general public (small businesses, non-profit
organisations, schools, ) are exposed to CentOS.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Regd: Clarification on Linux Upgrade

2009-02-09 Thread John Doe

 These questions are all answered by reading the archive of this mailing list.
My question is upgrade from CD/DVD without yum

http://www.google.fr/search?q=centos+install+upgrade
First answer...

Look for Download Instructions
and for Upgrade Options and process recommendations

JD


  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Marcus Moeller
Hi again,

 Yes that would be correct Marcus echo it into /proc or in /etc/sysctl.conf
 would be
 # Controls IP packet forwarding
 net.ipv4.ip_forward = 1

This is what I have done already. sysctl -p gives me:

net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 4294967295
kernel.shmall = 268435456

The strange thing is that it seems to be blocked by netfilter. I am
using exactly the same rules on a Slackware Box without any problems.

Best Regards
Marcus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] real SATA RAID

2009-02-09 Thread Hal Martin
As many people have stated in this thread, 3ware and Areca make some
good hardware RAID solutions.

Software RAID using mdadm works too, quite well, I might add. I was one
of those people who stayed away from software RAID in linux, thinking it
was too complicated and difficult, I was wrong. It's dead easy to do,
and expanding your disks can be done on the fly (if you have a SATA
controller that supports hotplugging as many these days do.) Perhaps the
best thing about software RAID, in my opinion, is that it's light enough
on the machine that a PIII server can be reading/writing to the array at
10MB/s.

Now you might say, 10MB/s, who cares? That's small stuff. But, when
that's the load the network infrastructure at this location was designed
to handle, you don't need anything higher performance.

Just my two cents.
-Hal

Christopher Chan wrote:
 Paolo Supino wrote:
   
 Hi 

   Last week I had a lengthy thread in which someone indicated the my SIL 
 card is a FRAID (don't know if F stands for the F word or Fake, though 
 it doesn't really matter). I want to replace the controller with a 
 controller that Linux will see the RAID1 group as a single HD and not 
 multiple HDs as it happens with the SIL controller. Recommendations anyone? 

 

 Adaptec RAID 2405, 3ware, Areca


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

   

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Agile Aspect
Marcus Moeller wrote:
 Good Morning,

 iptables -L -v now shows:

 0 0 ACCEPT all  --  eth0   eth0anywhere
 anywherestate NEW,RELATED,ESTABLISHED

 But the packages are still dropped:

 Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
 SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
 ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0

   
My guess is will ACCEPT packets but since you haven't defined
a FORWARD or an OUPUT chain it drops them.

-- 
Article. VI. Clause 3 of the constitution of the United States states: 

The Senators and Representatives before mentioned, and the Members of 
the several State Legislatures, and all executive and judicial Officers, 
both of the United States and of the several States, shall be bound by 
Oath or Affirmation, to support this Constitution; but no religious Test 
shall ever be required as a Qualification to any Office or public Trust 
under the United States. 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Problems with mysql multi-master after update.

2009-02-09 Thread Alessandro Ren

 Hello,

after I updated from mysql-5.0.22 CentOS 5.0 to mysqld-5.0.45 in CentOS 
5.2, mysql looses master-slave sync after one node reboots.
 I've noticed that the slave doest not respect the informantion on 
master.info, instead, it tries to read the informantion from the master 
server file inc-index.index.
 Let me give a example, the master is alredy on incremental.06  
and the slave in synced, the master.info in the slave server is showing 
is is reading de incremental.06, but in the master inc-index.index 
all 6 files are listed, from 1 to 6. The file 1 to 5 were already 
deleted in a cleaning process as thay were alread synced with the slave. 
After the reboot, the slave tries to find the file incremental.01 on 
the master and this causes the problem.
 In 5.0.22 this would not happen, this does not happen as I have 
servers running this version and after the reboot, it starts syncing on 
the right incremental.
 Any idea?

 Tks.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Marcus Moeller
Hi,

 iptables -L -v now shows:

 0 0 ACCEPT all  --  eth0   eth0anywhere
 anywherestate NEW,RELATED,ESTABLISHED

 But the packages are still dropped:

 Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
 SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
 ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0


 My guess is will ACCEPT packets but since you haven't defined
 a FORWARD or an OUPUT chain it drops them.

As mentioned, I have added a rule like:

/sbin/iptables -A FORWARD -i eth0 -o eth0 -m state --state
NEW,RELATED,ESTABLISHED -j ACCEPT

to forward packages on the internal device.

Best Regards
Marcus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] What is the System Event Log?

2009-02-09 Thread Peter Kjellstrom
On Monday 09 February 2009, Timothy Murphy wrote:
 My Dell PowerEdge T105 running Centos-5.2
 has started crashing fairly often (3 times in the last 2 hours).
 The message on the screen tells me to look at the System Event Log.
 Is this just /var/log/messages ?

No, the SEL is maintained on the BMC/IPMI-controller. In Linux you can 
(assuming you have /etc/init.d/ipmi running) view it with:
 ipmitool sel list

You will need OpenIPMI and OpenIPMI-tools (from base) for the above to work.

/Peter

 I didn't see anything helpful there.
 As far as I could see, the last messages before the crash
 were about samba, which is running on the machine.
 Has anyone had such problems with Samba?
 I've stopped the smb service to see if this improves matters.

 I'm running a standard updated system.
 I looked at smartctl but this did not suggest
 that there was anything wrong with the 2 SATA disks.

 Incidentally, wouldn't it be a good idea for /var/log/messages*
 to start a new file when booting?


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Jake
Good morning:

We're about to start moving our public DNS to in-house managed
servers. My first thought was Linux + BIND and we're done. Someone
in another business unit's IT dept. has suggested tinydns be used.
From what I could find, it looks like this software hasn't really had
any community drive behind it in a while. The latest RPMs on rpmforge
are for red hat 6 and red hat 7. I very much dislike the idea of
compiling my own because of all the overhead associated with making
sure the system stays up-to-date and so on so this really puts me off
already. Does anyone have an opinion on this software? It seems to
have some strong virtues but maybe not enough to justify using it over
BIND just because any Linux admin we hire could be expected to know
BIND.

Thanks for your time,

-- 
Jake Paulus
jakepau...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Rainer Duffner
Jake schrieb:
 Good morning:

 We're about to start moving our public DNS to in-house managed
 servers. My first thought was Linux + BIND and we're done. Someone
 in another business unit's IT dept. has suggested tinydns be used.
 From what I could find, it looks like this software hasn't really had
 any community drive behind it in a while. The latest RPMs on rpmforge
 are for red hat 6 and red hat 7. I very much dislike the idea of
 compiling my own because of all the overhead associated with making
 sure the system stays up-to-date and so on so this really puts me off
 already. Does anyone have an opinion on this software? It seems to
 have some strong virtues but maybe not enough to justify using it over
 BIND just because any Linux admin we hire could be expected to know
 BIND.

 Thanks for your time,

   


djbdns is OK - if you have some frontend that prepares the data-files
for it.
Otherwise, don't bother.
Well, the same is true in some way for BIND - if you have more than a
dozen or so zones with frequent updates, you'll swear, too. Just
different swear-words ;-)

How many zones do you manage, BTW?

Also, if you need IPV6 etc - djbdns is not really predestined for this



Rainer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Kai Schaetzl
Marcus Moeller wrote on Mon, 9 Feb 2009 14:23:02 +0100:

Google for that as a string

 iptables -A FORWARD -i eth0 -o eth0

and you will see quite a few hits, also in German. For instance
http://www.linuxforen.de/forums/showthread.php?t=81200

It seems you are either doing something wrong or testing in the wrong way. 
(I'm not very familiar with forwarding rules.)

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread centos
On Mon, 9 Feb 2009 10:22:42 -0500
Jake jakepau...@gmail.com wrote:

 From what I could find, it looks like this software hasn't really
 had
 any community drive behind it in a while. The latest RPMs on
 rpmforge are for red hat 6 and red hat 7. I very much dislike the
 idea of compiling my own because of all the overhead associated
 with making sure the system stays up-to-date and so on so this
 really puts me off already. Does anyone have an opinion on this

1. DJBDNS does not need to be maintained: IT'S PERFECT. Bugless, no
security hole... and does NOT support IPv6.
2. It's  great, works like a rock.
3. Everything you need to know, including winning the loto, is at:
http://www.lifewithdjbdns.com/
with all the explanations and the installation is toward the end of
the page.

-- 
Thanks
http://www.911networks.com
When the network has to work
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Ray Van Dolson
On Mon, Feb 09, 2009 at 07:58:38AM -0800, cen...@911networks.com wrote:
 On Mon, 9 Feb 2009 10:22:42 -0500
 Jake jakepau...@gmail.com wrote:
 
  From what I could find, it looks like this software hasn't really
  had
  any community drive behind it in a while. The latest RPMs on
  rpmforge are for red hat 6 and red hat 7. I very much dislike the
  idea of compiling my own because of all the overhead associated
  with making sure the system stays up-to-date and so on so this
  really puts me off already. Does anyone have an opinion on this
 
 1. DJBDNS does not need to be maintained: IT'S PERFECT. Bugless, no
 security hole... and does NOT support IPv6.
 2. It's  great, works like a rock.
 3. Everything you need to know, including winning the loto, is at:
 http://www.lifewithdjbdns.com/
 with all the explanations and the installation is toward the end of
 the page.

Wasn't it released to public domain along with qmail?  Surprised
someone hasn't packaged this up for Fedora/EPEL yet if so.

Maybe there was some hesitancy based on questions around its public
domain status?

I'm more familiar with BIND, but used djbdns at a previous job and it
worked very well.

Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Rainer Duffner
Ray Van Dolson schrieb:
 On Mon, Feb 09, 2009 at 07:58:38AM -0800, cen...@911networks.com wrote:
   


The problem is that it is not very modular.

You must decided on which features (=patches) you want to incorporate
and then build the RPM accordingly.

We use tinydns+dnscache almost exclusively (it's not good if you need to
play 2ndary for a true BIND) and are very happy with it.



Rainer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Les Mikesell
cen...@911networks.com wrote:
 
 From what I could find, it looks like this software hasn't really
 had
 any community drive behind it in a while. The latest RPMs on
 rpmforge are for red hat 6 and red hat 7. I very much dislike the
 idea of compiling my own because of all the overhead associated
 with making sure the system stays up-to-date and so on so this
 really puts me off already. Does anyone have an opinion on this
 
 1. DJBDNS does not need to be maintained: IT'S PERFECT. Bugless, no
 security hole... and does NOT support IPv6.
 2. It's  great, works like a rock.

I've heard that story before about other djb code (qmail).  Turned out 
to be horribly wrong and never fixed, so I'll never trust anything with 
those initials attached again.

 3. Everything you need to know, including winning the loto, is at:
 http://www.lifewithdjbdns.com/
 with all the explanations and the installation is toward the end of
 the page.

I'd advice planning out a strategy to migrate your zones back to bind if 
you do go this route.  Tinydns does some implicit magic that, if you 
use, will make someone's life difficult later when they try to figure 
out how to rebuild bind zone files to do the same thing.

-- 
   Les Mikesell
 lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Michael Peterson
Hello,

The system you are trying to forward with has at least two nics on 
different networks?
However you are trying to forward between aliases on one nic that is 
located on your internal network?
And the other nic connects to a DMZ or gateway network?
This system is not a decicated routing/forwarding system but runs other 
services for network clients/servers that connect to it?

Michael


Marcus Moeller wrote:
 Hi,

   
 iptables -L -v now shows:

 0 0 ACCEPT all  --  eth0   eth0anywhere
 anywherestate NEW,RELATED,ESTABLISHED

 But the packages are still dropped:

 Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
 SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
 ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0


   
 My guess is will ACCEPT packets but since you haven't defined
 a FORWARD or an OUPUT chain it drops them.
 

 As mentioned, I have added a rule like:

 /sbin/iptables -A FORWARD -i eth0 -o eth0 -m state --state
 NEW,RELATED,ESTABLISHED -j ACCEPT

 to forward packages on the internal device.

 Best Regards
 Marcus
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
   

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS promotion

2009-02-09 Thread Fabian Arrotin
Michel Daggelinckx wrote:
 I've been to FOSDEM this weekend and noticed the small number of CentOS
 people at the booth.
 
 The Ubuntu people work with Local Community Teams to support and promote
 the distro.
 
 I think it would be beneficial for CentOS to setup a similar structure.
 At the moment it's mostly sysadmins who introduce/sneak CentOS into
 businesses.
 Local Community Teams can setup a booth at computer fairs and other
 events. This way the general public (small businesses, non-profit
 organisations, schools, ) are exposed to CentOS.
 


Hi Michel,

Thanks for the suggestion. It's true that we weren't enough, especially 
if you compared with the boot next to ours : Fedora had more than 40 
ambassadors this year ;-)
And the fact that we had CentOS talks in a devroom not in front of our 
booth didn't help :(

If you have ideas, they are welcome but maybe such discussion can be 
held in the appropriate list (aka centos-promo on lists.centos.org). Or 
even better : join the CentOS promo SIG ! ;-)
Thanks


PS : Fosdem pictures are now online and presentations are available on 
the Fosdem2009 wiki page
-- 
--
Fabian Arrotin
  idea=`grep -i clue /dev/brain` ; test -z $idea  echo sorry, init 
6 in progress || sh ./answer.sh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Bill Campbell
On Mon, Feb 09, 2009, Rainer Duffner wrote:
Ray Van Dolson schrieb:
 On Mon, Feb 09, 2009 at 07:58:38AM -0800, cen...@911networks.com wrote:
   


The problem is that it is not very modular.

You must decided on which features (=patches) you want to incorporate
and then build the RPM accordingly.

We use tinydns+dnscache almost exclusively (it's not good if you need to
play 2ndary for a true BIND) and are very happy with it.

We have been using djbdns for years with excellent results, and
user very few non-standard patches (mainly a hack to dnscache to
allow it to respond to the world on one of our servers that we
allowed customers to use in the mid '90s, and can't change).

We are secondaries for a few hundred BIND domains, and have no
problems with that using djb tcpclient axfr-get to pull the data
from these under control of a cron job.

We are also provide secondary DNS for many of our customer's
sites which run djbdns, and they simply use rsync to copy their
zone files to our primary server.

We use the rbldns daemon extensively to handle DNSRBLs.

The data formats for djbdns are quite simple, particularly 
compared to the ugly kludge of BIND.  Setting up forward and
reverse DNS for a host for which one is authoritative for the
in-addr address requires a single line, at a minimum:

=fqdn:ipaddress:

The startup times are essentially zero, as are updates to remote
servers using rsync to copy the tinydns and rbldns data files to
our secondary servers.

The version we run on all our Linux systems has been hacked into
SRPMS for the OpenPKG portable package management system, and we
run it on various Linux distributions, FreeBSD, and OS X.

I don't remember exactly when we started using djbdns, but it was
at least 8 years ago.  Other than a simple hack I did years ago
to have dnscache ignore CVS and RCS directories, it has been dead
solid with zero problems.

Bill
-- 
INTERNET:   b...@celestial.com  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
Voice:  (206) 236-1676  Mercer Island, WA 98040-0820
Fax:(206) 232-9186

Those who cast the vote decide nothing.
Those who count the vote decide everything. (Joseph Stalin)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS promotion

2009-02-09 Thread David Hrbáč
Fabian Arrotin napsal(a):
 
 PS : Fosdem pictures are now online and presentations are available on 
 the Fosdem2009 wiki page

Fabian,
I see only redirect page on http://wiki.fosdem.org/
Regards,
David Hrbáč
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS-announce Digest, Vol 48, Issue 4

2009-02-09 Thread Scott Silva


I am just curious, but why does the announce digest show up on the general
list and not the announce list?



-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS promotion

2009-02-09 Thread Fabian Arrotin
David Hrbáč wrote:
 Fabian Arrotin napsal(a):
 PS : Fosdem pictures are now online and presentations are available on 
 the Fosdem2009 wiki page
 
 Fabian,
 I see only redirect page on http://wiki.fosdem.org/
 Regards,
 David Hrbáč

David, i was speaking about *our* wiki, not the Fosdem one ;-)
http://wiki.centos.org/Events/Fosdem2009

-- 
--
Fabian Arrotin
  idea=`grep -i clue /dev/brain` ; test -z $idea  echo sorry, init 
6 in progress || sh ./answer.sh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpmforge

2009-02-09 Thread Scott Silva
snip
 
 I didn't mean to stir up a ruckus
 Thanks for the help

Ruckus stirs itself on most mailing lists!

Overworked sysadmins just need to go get a cup of coffee and count to 10
before they hit reply, or at least before they hit send.

I know that dealing with dwindling IT budgets and angry managers, not to
mention clueless (l)users gets to all of us sooner or later.

PS... Half of the cup is gone before I hit send!  :-D






-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Jake
Thank you very much for all of your feedback. It really sounds like i
got two general replies:

eh, I wouldn't use it (a minority) and We do some complicated stuff
to make it meet our needs and we love it. (majority)

For us, ease of management is really key to having success with our
technical staff. I think we'll likely stick with BIND.

-Jake



On Mon, Feb 9, 2009 at 1:02 PM, Bill Campbell cen...@celestial.com wrote:
 On Mon, Feb 09, 2009, Rainer Duffner wrote:
Ray Van Dolson schrieb:
 On Mon, Feb 09, 2009 at 07:58:38AM -0800, cen...@911networks.com wrote:



The problem is that it is not very modular.

You must decided on which features (=patches) you want to incorporate
and then build the RPM accordingly.

We use tinydns+dnscache almost exclusively (it's not good if you need to
play 2ndary for a true BIND) and are very happy with it.

 We have been using djbdns for years with excellent results, and
 user very few non-standard patches (mainly a hack to dnscache to
 allow it to respond to the world on one of our servers that we
 allowed customers to use in the mid '90s, and can't change).

 We are secondaries for a few hundred BIND domains, and have no
 problems with that using djb tcpclient axfr-get to pull the data
 from these under control of a cron job.

 We are also provide secondary DNS for many of our customer's
 sites which run djbdns, and they simply use rsync to copy their
 zone files to our primary server.

 We use the rbldns daemon extensively to handle DNSRBLs.

 The data formats for djbdns are quite simple, particularly
 compared to the ugly kludge of BIND.  Setting up forward and
 reverse DNS for a host for which one is authoritative for the
 in-addr address requires a single line, at a minimum:

 =fqdn:ipaddress:

 The startup times are essentially zero, as are updates to remote
 servers using rsync to copy the tinydns and rbldns data files to
 our secondary servers.

 The version we run on all our Linux systems has been hacked into
 SRPMS for the OpenPKG portable package management system, and we
 run it on various Linux distributions, FreeBSD, and OS X.

 I don't remember exactly when we started using djbdns, but it was
 at least 8 years ago.  Other than a simple hack I did years ago
 to have dnscache ignore CVS and RCS directories, it has been dead
 solid with zero problems.

 Bill
 --
 INTERNET:   b...@celestial.com  Bill Campbell; Celestial Software LLC
 URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
 Voice:  (206) 236-1676  Mercer Island, WA 98040-0820
 Fax:(206) 232-9186

 Those who cast the vote decide nothing.
 Those who count the vote decide everything. (Joseph Stalin)
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos




-- 
Jake Paulus
jakepau...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Ray Van Dolson
On Mon, Feb 09, 2009 at 03:07:30PM -0500, Jake wrote:
 Thank you very much for all of your feedback. It really sounds like i
 got two general replies:
 
 eh, I wouldn't use it (a minority) and We do some complicated stuff
 to make it meet our needs and we love it. (majority)
 
 For us, ease of management is really key to having success with our
 technical staff. I think we'll likely stick with BIND.
 
 -Jake

Yep.  Honestly, both work well.  Use whatever you have more expertise
or experience in.

Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Marcus Moeller
Dear Michael,

 The system you are trying to forward with has at least two nics on
 different networks?
 However you are trying to forward between aliases on one nic that is
 located on your internal network?
 And the other nic connects to a DMZ or gateway network?
 This system is not a decicated routing/forwarding system but runs other
 services for network clients/servers that connect to it?

Yes, that's true. We are routing between two internal networks on that
box (migrating to core switch, soon).

But that's not the problem. I just wonder why the packages are dropped
(as it worked correctly on the Slackware box, before - using the same
ruleset)

Btw. it seems that 'service iptables save' fits to activate all other
rulesets. And  it is NOT necessary to define input and output rules
for forwarding on an internal device.

Best Regards
Marcus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS promotion

2009-02-09 Thread David Hrbáč
Fabian Arrotin napsal(a):
 David, i was speaking about *our* wiki, not the Fosdem one ;-)
 http://wiki.centos.org/Events/Fosdem2009

Well :o) that's ... something completely different. :o)
Thanks,
David
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables: forwarding on internal device

2009-02-09 Thread Agile Aspect
Marcus Moeller wrote:
 Hi,

   
 iptables -L -v now shows:

 0 0 ACCEPT all  --  eth0   eth0anywhere
 anywherestate NEW,RELATED,ESTABLISHED

 But the packages are still dropped:

 Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
 SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
 ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0


   
 My guess is will ACCEPT packets but since you haven't defined
 a FORWARD or an OUPUT chain it drops them.
 

 As mentioned, I have added a rule like:

 /sbin/iptables -A FORWARD -i eth0 -o eth0 -m state --state
 NEW,RELATED,ESTABLISHED -j ACCEPT

 to forward packages on the internal device.
   

It's not what you say that counts, it's what

iptables -L -v

says - and it's not there.

Good luck.

-- 
Article. VI. Clause 3 of the constitution of the United States states: 

The Senators and Representatives before mentioned, and the Members of 
the several State Legislatures, and all executive and judicial Officers, 
both of the United States and of the several States, shall be bound by 
Oath or Affirmation, to support this Constitution; but no religious Test 
shall ever be required as a Qualification to any Office or public Trust 
under the United States. 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] SquirrelMail Prefs Deleted

2009-02-09 Thread John Hinton
FYI. I just had all of the squirrelmail prefs for all the users on one 
of my servers disappear. I have never had anything like this happen ever 
before. I'm in the process of finding the needle in the haystack of logs 
to try to get a handle on this. I'm sending this to the list as a heads 
up. Seems like Squirrelmail is not doing so good here over the last few 
months.

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SquirrelMail Prefs Deleted

2009-02-09 Thread Marko A. Jennings
On Mon, February 9, 2009 5:14 pm, John Hinton wrote:
 FYI. I just had all of the squirrelmail prefs for all the users on one
 of my servers disappear. I have never had anything like this happen ever
 before.

I have seen this couple of times several years ago (more than 3) with an
older version of SquirrelMail, but not since then.  Which version are you
running?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SquirrelMail Prefs Deleted

2009-02-09 Thread John Hinton
Marko A. Jennings wrote:
 On Mon, February 9, 2009 5:14 pm, John Hinton wrote:
   
 FYI. I just had all of the squirrelmail prefs for all the users on one
 of my servers disappear. I have never had anything like this happen ever
 before.
 

 I have seen this couple of times several years ago (more than 3) with an
 older version of SquirrelMail, but not since then.  Which version are you
 running?
   
This is the latest CentOS 4.X SquirrelMail update release. Standard 
install during the server build, so it's absolutely stock.

Looks like I found a user accessing it during the time the prefs all 
disappeared. It was a legit user. Directory change time is only in day 
minute... so I can't get down to the second it changed.

We don't have a lot of users using it, but for those that do

Thanks,
John Hinton


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
   

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SquirrelMail Prefs Deleted

2009-02-09 Thread John Hinton

John Hinton wrote:
 Marko A. Jennings wrote:
   
 On Mon, February 9, 2009 5:14 pm, John Hinton wrote:
   
 
 FYI. I just had all of the squirrelmail prefs for all the users on one
 of my servers disappear. I have never had anything like this happen ever
 before.
 
   
 I have seen this couple of times several years ago (more than 3) with an
 older version of SquirrelMail, but not since then.  Which version are you
 running?
   
 
 This is the latest CentOS 4.X SquirrelMail update release. Standard 
 install during the server build, so it's absolutely stock.

 Looks like I found a user accessing it during the time the prefs all 
 disappeared. It was a legit user. Directory change time is only in day 
 minute... so I can't get down to the second it changed.

 We don't have a lot of users using it, but for those that do

 Thanks,
 John Hinton
   
OK, this was a php injection via another program. SM has had so many 
weirdnesses lately and as it was the first to show a problem... I laid 
blame in the wrong place. Meanwhile... off to clean house. :(

John Hinton

   
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
   
 

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
   

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Christopher Chan
Jake wrote:
 Good morning:
 
 We're about to start moving our public DNS to in-house managed
 servers. My first thought was Linux + BIND and we're done. Someone
 in another business unit's IT dept. has suggested tinydns be used.
From what I could find, it looks like this software hasn't really had
 any community drive behind it in a while. The latest RPMs on rpmforge
 are for red hat 6 and red hat 7. I very much dislike the idea of
 compiling my own because of all the overhead associated with making
 sure the system stays up-to-date and so on so this really puts me off
 already. Does anyone have an opinion on this software? It seems to
 have some strong virtues but maybe not enough to justify using it over
 BIND just because any Linux admin we hire could be expected to know
 BIND.

tinydns supports large zone/record updates on the fly...in comparison 
with bind which will stop answering while it is loading up zones. The 
caveat however is that you need GOOD disk i/o if you have a lot of 
records because tinydns achieves that due to use a cdb database whereas 
BIND will stick them all in memory. So if you are constantly updating 
zones, I would suggest tinydns as the entire process can be automated 
and the source for the cdb database stored in a nice sql database with a 
nice frontend, script plugin/api for whatever you imagine.

If you don't have very dynamic stuff and you do not need to constantly 
rebuild zones, BIND should be better I suppose especially if you are in 
an environment where a lot of zones share the same data (ns, mx,...) 
thanks to INCLUDE.

As for making sure the system stays up-to-date, you do not have to worry 
about djbdns and daemontools...they are pretty much set in stone now 
excpet for maybe some patches that you might want (it's public domain so 
just roll your own if you do need them patches). All you have to worry 
about is installing on new systems. It is literally compile once and 
forget. Zero overhead.

Oh, may I point out that there are no security issues with djbdns 
whereas BIND has a history of problems even until recently. 'slaves' can 
be updated with by rsyncing the cdb database over so there is no room 
for human error with respects to dns server configuration whether it is 
leaving recursive on or whatever.

Interesting that any Linux admin you can hire will know BIND. I find 
that not to be the case over here in Hong Kong. I guess there is a 
reason why Linux is not very popular over here notwithstanding the lack 
of people who know Linux.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tinydns/djbdns opinion poll

2009-02-09 Thread Gregory P. Ennis
On Mon, 2009-02-09 at 15:07 -0500, Jake wrote:
 Thank you very much for all of your feedback. It really sounds like i
 got two general replies:
 
 eh, I wouldn't use it (a minority) and We do some complicated stuff
 to make it meet our needs and we love it. (majority)
 
 For us, ease of management is really key to having success with our
 technical staff. I think we'll likely stick with BIND.
 
 -Jake
 
 
 

Jake,

We are a small company and started using BIND 3 years ago so that we
could control local access within the network with local zones for 3
remote sites.  Everything on the network works better with your own DNS
service.  Most of my sendmail problems were immediately solved as well
as others. A local DNS is great and BIND was easy for us to use.

Good Luck!!

Greg
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] real SATA RAID

2009-02-09 Thread Christopher Chan
/me puts on salamander suit.

Hal Martin wrote:
 As many people have stated in this thread, 3ware and Areca make some
 good hardware RAID solutions.

I don't know about Areca but 3ware certainly. I have never come across 
issues with any 3ware boards hardware-wise. I suppose you have an 
opinion about Adaptec 2405 and its other new lines of real hardware cards?

 
 Software RAID using mdadm works too, quite well, I might add. I was one
 of those people who stayed away from software RAID in linux, thinking it
 was too complicated and difficult, I was wrong. It's dead easy to do,
 and expanding your disks can be done on the fly (if you have a SATA
 controller that supports hotplugging as many these days do.) Perhaps the
 best thing about software RAID, in my opinion, is that it's light enough
 on the machine that a PIII server can be reading/writing to the array at
 10MB/s.

The guy asked for real hardware raid card suggestions. You can preach 
all you like about software raid, there are cases where hardware raid 
cards with sufficient resources will offer better value.

 
 Now you might say, 10MB/s, who cares? That's small stuff. But, when
 that's the load the network infrastructure at this location was designed
 to handle, you don't need anything higher performance.

I don't know about you but where I work, one of the first infrastructure 
issues I dealt with was upgrading from Fast Ethernet to Gigabit. The 
teachers all appreciate their logins running faster, the loading of 
their multi-megabyte powerpoints being faster, their on-disk gallery of 
school trip pictures loading faster, etc. In this age of files being 
megabytes in size even hundreds, a ten megabyte/sec network does not fly 
anymore.

BTW, I use raidz so as I do not need to hit anything over 100MB yet and 
2 TB storage is sufficient for the moment. Good luck trying to get a 
controller card that has 8 ports or more without even a fakeraid bios. I 
am so happy that there are many motherboards that come with 4 SATA ports 
and work under Linux. But find one that also has a PCIe 4x slot is a 
pain in the neck.

 
 Just my two cents.
 -Hal
 
 Christopher Chan wrote:
 Paolo Supino wrote:
   
 Hi 

   Last week I had a lengthy thread in which someone indicated the my SIL 
 card is a FRAID (don't know if F stands for the F word or Fake, though 
 it doesn't really matter). I want to replace the controller with a 
 controller that Linux will see the RAID1 group as a single HD and not 
 multiple HDs as it happens with the SIL controller. Recommendations anyone? 

 
 Adaptec RAID 2405, 3ware, Areca


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

   
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] process accounting - track PIDs

2009-02-09 Thread nate
Hello --

I've done some searching but haven't come up with much
yet, I was wondering if there was a way to track PID
creation and what command was assigned to a PID?

I am trying to track down a locking issue with NFS/NLM where
the client PID that initiates the unlock request is not
the same PID that initiates the lock request. Even with
running ps auxww in a while true loop I cannot seem
to capture the PID it comes/goes too fast. I can see the
PID right after the one specified, but not the one I
want.

I tried a couple things I found for the audit system:
auditctl -a entry,always -S fork -S vfork -S clone
auditctl -a entry,always -S brk -F 'a0=0'
auditctl -a task,always
auditctl -a exit,always

And none of them were able to detect the PID that was created.

Another way to approach this is perhaps NLM debugging
on the linux client side but I haven't had any luck
tracking down useful debugging info on the client side.

I saw one post mentioning a kernel patch is needed and it
may make it into RHEL 5.3, though this is 4.4, so maybe it
is not possible.

any ideas?

thanks

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpmforge

2009-02-09 Thread David . Mackintosh
On Mon, Feb 09, 2009 at 10:50:37AM -0800, Scott Silva wrote:
  I didn't mean to stir up a ruckus
 
 Ruckus stirs itself on most mailing lists!
 
 Overworked sysadmins just need to go get a cup of coffee and count to 10
 before they hit reply, or at least before they hit send.

cen...@centos -- now 35% less bitter!

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpaj9h3lA6dd.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SquirrelMail Prefs Deleted

2009-02-09 Thread Sahil Tandon
On Mon, 09 Feb 2009, John Hinton wrote:

 FYI. I just had all of the squirrelmail prefs for all the users on one 
 of my servers disappear. I have never had anything like this happen ever 
 before. I'm in the process of finding the needle in the haystack of logs 
 to try to get a handle on this. I'm sending this to the list as a heads 
 up. Seems like Squirrelmail is not doing so good here over the last few 
 months.

Please provide evidence before implicating SquirrelMail. 

-- 
Sahil Tandon sa...@tandon.net
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Scripting Oddity

2009-02-09 Thread David G. Miller
I've been playing around with qemu and wanted to make the guest OS 
instance visible on my network.  This meant getting bridging and tun/tap 
working.  After getting things working by pasting command from the 
CentOS wiki article plus adding a few enhancements, I decided to capture 
the process in a shell script that would be suitable for a user in the 
sudoers file to fire off.  Not sure why (which is why I'm posting this) 
but I couldn't get the same result from the shell script as I got from 
pasting commands onto the command line or using the shell history.

After a lot of very tedious debugging, I finally got the script to work 
by adding a couple of short sleeps at selected locations.  The script 
now looks like:

cat upBridge.sh
#!/bin/bash
#
# Script for setting up a bridge accessible by a qemu VM.
#
# First, make sure we're starting with a clean slate.
/usr/bin/sudo /sbin/rmmod bridge
/usr/bin/sudo /sbin/rmmod tun
/usr/bin/sudo /sbin/service network restart
#
# Grab the IP address of the given interface so we can restore it later.
#
oldIP=`/sbin/ifconfig $1 | /bin/grep 'inet addr' | /usr/bin/awk -F \: 
'{print substr($2,0,index($2,  )) ; }'`
echo $1 currently has IP address $oldIP
#
# Create the bridge.
#
/usr/bin/sudo /usr/sbin/brctl addbr br0
/usr/bin/sudo /sbin/ifconfig $1 0.0.0.0

sleep 2

/usr/bin/sudo /usr/sbin/brctl addif br0 $1
#
# Stop any dhclient still running.
#
/usr/bin/sudo /usr/bin/killall dhclient
#
# Get and IP address and routing information for the bridge
#
/usr/bin/sudo /sbin/dhclient br0
#
# Make sure the tun module is loaded, assign it to our user and bring it up.
#
/usr/bin/sudo /sbin/modprobe tun
echo Did tun load?
lsmod | grep tun
/usr/bin/sudo /usr/sbin/tunctl -b -u $USER

sleep 2

/usr/bin/sudo /sbin/ifconfig tap0 up
#
# Connect the bridge and the tap.
#
/usr/bin/sudo /usr/sbin/brctl addif br0 tap0
/usr/bin/sudo /bin/chown $USER:users /dev/net/tun
/usr/bin/sudo /sbin/iptables -I RH-Firewall-1-INPUT -i br0 -j ACCEPT
#
# restore the IP address of our normal interface.
#
/usr/bin/sudo /sbin/ifconfig $1 $oldIP

So, my question is, why do I need to have a short sleep in these two 
locations in my script? 

Without a sleep after the ifconfig eth0 0.0.0.0, eth0 retains its 
original IP address instead of having no address.  The qemu guest VM 
still functions correctly but the host system loses connectivity.  
Likewise, without a sleep after the tunctl command, the device 
/dev/net/tun isn't present when the next command executes.  With the 
sleeps the script executes as expected and sets up the bridge.  Without 
the sleeps the script fails.

Oh yeah.  There's another script called downBridge.sh that undoes the 
bridge if anyone is interested.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SquirrelMail Prefs Deleted

2009-02-09 Thread John Hinton
Sahil Tandon wrote:
 On Mon, 09 Feb 2009, John Hinton wrote:

   
 FYI. I just had all of the squirrelmail prefs for all the users on one 
 of my servers disappear. I have never had anything like this happen ever 
 before. I'm in the process of finding the needle in the haystack of logs 
 to try to get a handle on this. I'm sending this to the list as a heads 
 up. Seems like Squirrelmail is not doing so good here over the last few 
 months.
 

 Please provide evidence before implicating SquirrelMail. 

   
Right. Sorry. The thing is I looked in the prefs directory and it was 
totally empty. I forgot that these files were all owned by apache. The 
real trouble was a header injection through a cms. Really nasty of them 
to bother with dumping SM prefs. That the worst damage I've found so far 
after getting stuff cleaned up or sort of cleaned up. Unfortunately, 
since I do the standard SM install, the prefs are in the user 
directories which are backed up and I hadn't thought to backup SM prefs. 
Fortunately, we don't have a lot of users that rely on SM.

I made a bad immediate call. It was done in case others wanted to backup 
the prefs in case it was actually SM.

Now to figure out a best way to create new prefs files for the scads of 
users on this server. :(

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Scripting Oddity

2009-02-09 Thread Stephen Harris
On Mon, Feb 09, 2009 at 08:22:02PM -0700, David G. Miller wrote:
 I've been playing around with qemu and wanted to make the guest OS 
 instance visible on my network.  This meant getting bridging and tun/tap 
 working.  After getting things working by pasting command from the 

[snippage]

I do it differently for my UML instances, but I don't see why this shouldn't
work with qemu as well.

Firstly I have a simple boot script that creates the bridge and binds the real
interface (eth1 in my case) to the bridge.

  #!/bin/sh
  
  # BRIDGE   Create br0 with just eth1 bound
  #
  # chkconfig: 2345 09 91
  # description: Activates br0

  case $1 in
start) touch /var/lock/subsys/BRIDGE

   /sbin/ifconfig eth1 0.0.0.0 promisc up

   /usr/sbin/brctl addbr br0
   /usr/sbin/brctl stp br0 off
   /usr/sbin/brctl setfd br0 1
   /usr/sbin/brctl sethello br0 1
   /usr/sbin/brctl addif br0 eth1
   ;;
stop)
  # Do nothing
  rm -f /var/lock/subsys/BRIDGE
  ;;
status)
  echo $Configured devices:
  /usr/sbin/brctl show
  ;;
restart|reload)
  # No nothing
  ;;
*)
  echo $Usage: $0 {start|stop|restart|reload|status}
  exit 1
  esac

  exit 0

Then in my /etc/sysconfig/network-scripts area, I have br0 with the IP
address I want.  In my case, it's static

  % cat /etc/sysconfig/network-scripts/ifcfg-br0
  DEVICE=br0
  ONBOOT=yes
  BOOTPROTO=static
  BROADCAST=10.0.0.255
  IPADDR=10.0.0.136
  NETMASK=255.255.255.0
  NETWORK=10.0.0.0
  TYPE=Ethernet

So what this means is that at bootup time the system will come up with
br0 connected to the network and everything runs as normal.  Basically, at
this stage you can treat your machine as if 'br0' is the network device.

Now adding a new tap device to the bridge would be as simple as
  int=`tunctl -b -t $TAPNAME`
  ifconfig $int 0.0.0.0 promisc up
  brctl addif br0 $int

Now the new tap device is connected to the external network and the other
side of the tap (the guest) can get an external IP address (eg via dhcp,
or static) as normal.

On the host, only br0 shows as an IP address.  The physical device (eth1)
and added taps don't have an address when viewed with ifconfig.

-- 

rgds
Stephen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] clustering and load balancing Apache

2009-02-09 Thread Anto Marky
Hi,
I am new to clustering and loadbalancing in apache, What is best way of
doing it? How do I do the clustering and what tools do I need to use? Do I
have those tools, I use CentOS , Do i have any tools in CenOs which comes
default in it? And how do I do apache load balancing? should I rely on
apache forums or mailing list or is there any way or tool I can use in
CentOS? Can any throw some vague Idea on how to do it so that I start
reading documents before I do it?



Thanks and regards
Marky
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] clustering and load balancing Apache

2009-02-09 Thread Fajar Priyanto
On Tue, Feb 10, 2009 at 2:57 PM, Anto Marky markycen...@gmail.com wrote:
 Hi,
 I am new to clustering and loadbalancing in apache, What is best way of
 doing it? How do I do the clustering and what tools do I need to use? Do I
 have those tools, I use CentOS , Do i have any tools in CenOs which comes
 default in it? And how do I do apache load balancing? should I rely on
 apache forums or mailing list or is there any way or tool I can use in
 CentOS? Can any throw some vague Idea on how to do it so that I start
 reading documents before I do it?

This is a good start to give you some overview:
http://www.ibm.com/developerworks/linux/library/l-linux-ha/index.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] clustering and load balancing Apache

2009-02-09 Thread David Hrbáč
Fajar Priyanto napsal(a):
 
 This is a good start to give you some overview:
 http://www.ibm.com/developerworks/linux/library/l-linux-ha/index.html

Then, you can go here:
http://code.google.com/p/ath/
David Hrbáč
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] clustering and load balancing Apache

2009-02-09 Thread Anto Marky
Hi,

Thanks for the link.

On Tue, Feb 10, 2009 at 12:35 PM, Fajar Priyanto fajar...@arinet.orgwrote:

 On Tue, Feb 10, 2009 at 2:57 PM, Anto Marky markycen...@gmail.com wrote:
  Hi,
  I am new to clustering and loadbalancing in apache, What is best way of
  doing it? How do I do the clustering and what tools do I need to use? Do
 I
  have those tools, I use CentOS , Do i have any tools in CenOs which comes
  default in it? And how do I do apache load balancing? should I rely on
  apache forums or mailing list or is there any way or tool I can use in
  CentOS? Can any throw some vague Idea on how to do it so that I start
  reading documents before I do it?

 This is a good start to give you some overview:
 http://www.ibm.com/developerworks/linux/library/l-linux-ha/index.html
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] clustering and load balancing Apache

2009-02-09 Thread Anto Marky
Hi,

Thanks for the link.

On Tue, Feb 10, 2009 at 12:50 PM, David Hrbáč hrbac.c...@seznam.cz wrote:

 Fajar Priyanto napsal(a):
 
  This is a good start to give you some overview:
  http://www.ibm.com/developerworks/linux/library/l-linux-ha/index.html

 Then, you can go here:
 http://code.google.com/p/ath/
 David Hrbáč
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] clustering and load balancing Apache

2009-02-09 Thread Victor Padro
On Tue, Feb 10, 2009 at 1:21 AM, Anto Marky markycen...@gmail.com wrote:

 Hi,

 Thanks for the link.


 On Tue, Feb 10, 2009 at 12:35 PM, Fajar Priyanto fajar...@arinet.orgwrote:

 On Tue, Feb 10, 2009 at 2:57 PM, Anto Marky markycen...@gmail.com
 wrote:
  Hi,
  I am new to clustering and loadbalancing in apache, What is best way of
  doing it? How do I do the clustering and what tools do I need to use? Do
 I
  have those tools, I use CentOS , Do i have any tools in CenOs which
 comes
  default in it? And how do I do apache load balancing? should I rely on
  apache forums or mailing list or is there any way or tool I can use in
  CentOS? Can any throw some vague Idea on how to do it so that I start
  reading documents before I do it?

 This is a good start to give you some overview:
 http://www.ibm.com/developerworks/linux/library/l-linux-ha/index.html
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


You should find good start up info here:
http://howtoforge.com/howtos/high-availability

Cheers,

-- 
It is human nature to think wisely and act in an absurd fashion.

Todo el desorden del mundo proviene de las profesiones mal o mediocremente
servidas
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos