Re: [CentOS] Directory server import

2009-03-19 Thread Per Qvindesland
Hi

Thanks for replying.

I have been looking at this one, I have only 2 problems with it:

1. Generate Nis maps I believe that this should be the command nismap create
-i 1 -g " " -y auto.master  but i am unsure if this is correct for my
exercise since I need to generate for multiple ou, could someone please give
an example?

2. it says on the migration tool that I need to change the $NSHOME and
$serverId to make it compatible to the Netscape but do I have been looking
around I still can not find where these variabels are declared, does anyone
have a clue or some experience with these script?

Kind regards
Per Qvindesland


On 3/18/09 1:35 PM, "Steve Huff"  wrote:

> 
> On Mar 18, 2009, at 7:33 AM, Per Qvindesland wrote:
> 
>> Does anyone know if there is a simple way to import standard linux
>> users
>> into the directory server? I have found some but they don't seem to
>> be so
>> flexible since I have to import from several servers into different
>> ou's
> 
> 
> a good toolkit for doing this is here:
> 
> http://www.padl.com/OSS/MigrationTools.html
> 
> there's a config file which you modify to specify target LDAP server,
> base DN, and various other details for each import.  one good way to
> use them is the following:
> 
> 1. generate NIS maps (yes, i know, yuck) for the users you're importing.
> 2. run the PADL tools to generate a big LDIF of all the users.
> 3. import the generated LDIF.
> 
> -steve
> 
> -- 
> If this were played upon a stage now, I could condemn it as an
> improbable fiction. - Fabian, Twelfth Night, III,v
> 
> 
> 
> 
> ?
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread James Bensley
Shadies and Mentlemen;

I am trying to be green and put our backup servers to sleep during the
day and have them wake on LAN and fire back up at night for our
nightly backups as "sleep" is a sort of low power usage mode.

(At this point I would be curious to know the different levels of
sleep, what can I achieve? Does my server just drop into a low power
state, or can I stop the hard drives as well?)

I am wondering if it is achievable to script the process of putting a
server to sleep so I can cron tab its behind!

I would assume it would be possible but I don't know how, does anyone
have any idea?


-BEGIN GEEK CODE BLOCK-
  Version: 3.1
GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$ V-
PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+) h--(++) r++ z++
--END GEEK CODE BLOCK--
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox seg faults

2009-03-19 Thread A. Kirillov

> >> Hi, I have two very similar AMD based work stations running fully 
> >> current CentOS x86_64.
> >> Both have 4Gb of RAM, both have
> >>
> >> [rkam...@media ~]$ sudo rpm -qa |grep flash
> >> flash-plugin-10.0.22.87-release.i386
> >> [rkam...@media ~]$ sudo rpm -qa |grep fire
> >> firefox-3.0.6-1.el5.centos.i386
> >> 
> >
> > Try flash-plugin-9.0.124.0.
> > I couldn't make flash-plugin-10.0.22.87 work on my 64-bit box.
> >
> > # rpm -qa firefox flash-plugin
> > flash-plugin-9.0.124.0-release.i386
> > firefox-3.0.6-1.el5.centos.x86_64
> >
> >   
> two questions
> 1. where do I find
> flash-plugin-9.0.124.0

Good question. It doesn't seem to be in the adobe repos any more.

Try http://www.szivarvanynet.hu/download/linux/
flash-plugin-9.0.124.0-release.i386.rpm

The rpm there matches my local copy.

# md5sum /var/lib/yum/repo/x86_64/
flash-plugin-9.0.124.0-release.i386.rpm
fe8a084b6c9e83740e1e3353f19d04e1  
/var/lib/yum/repo/x86_64/flash-plugin-9.0.124.0-release.i386.rpm

> 2. how come you are running 64 bit firefox and 32 bit plugin???

Install nspluginwrapper for both archs and run
# mozilla-plugin-config --help


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Steve Huff


On Mar 19, 2009, at 7:13 AM, James Bensley wrote:


I would assume it would be possible but I don't know how, does anyone
have any idea?



http://www.lesswatts.org/projects/acpi/

-steve

--  
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v







smime.p7s
Description: S/MIME cryptographic signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Theo Band
James Bensley wrote:
> Shadies and Mentlemen;
>
> I am trying to be green and put our backup servers to sleep during the
> day and have them wake on LAN and fire back up at night for our
> nightly backups as "sleep" is a sort of low power usage mode.
>
> (At this point I would be curious to know the different levels of
> sleep, what can I achieve? Does my server just drop into a low power
> state, or can I stop the hard drives as well?)
>
> I am wondering if it is achievable to script the process of putting a
> server to sleep so I can cron tab its behind!
>
> I would assume it would be possible but I don't know how, does anyone
> have any idea?
>   
You are probably best of putting your backup server on an already
running server as a virtual machine. If you really have only one server
running on your lan then you could also consider the following approach.
I use the power-on-time BIOS feature most MB have. My server start
itself every night at 01:55. It is then up and running just before
02:00. At 02:00 I schedule a cron job to do the backup. At the end of
the backup, the script just powers off the machine. The only thing to
experiment with is the time it takes to start the machine. Sometimes the
startup takes longer if disks need to be checked (ext3, every so may
boots) and the cron might not trigger. Using anacron is perhaps the
safest option in this case, but I did not experiment with that.
I could not use wake up on LAN, since the mirror is on a remote location
were it is really the only server.

Theo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] 5.3 and ext4

2009-03-19 Thread Jerry Geis
Is 5.3 and ext4 going to be safe?
I have seen a couple reports of data loss using ext4?
Has this already been fixed?

What does the list recommend? ext3/ ext4?

Thought maybe today we would start seeing 5.3 showing up... Looking 
forward to it.

Jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 5.3 and ext4

2009-03-19 Thread Jim Perrin
On Thu, Mar 19, 2009 at 8:04 AM, Jerry Geis  wrote:
> Is 5.3 and ext4 going to be safe?

Define 'safe'

> I have seen a couple reports of data loss using ext4?

No. You've read reports about applications that had relied on a
feature/bug of ext3 eating data when using ext4.

> Has this already been fixed?

No.

> What does the list recommend? ext3/ ext4?

For what application type? I've been running ext4 in development with
apache and it's working okay, but it's also development. I haven't
tested it under any real sort of load. Just to see that it worked.



> Thought maybe today we would start seeing 5.3 showing up... Looking
> forward to it.




-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 5.3 and ext4

2009-03-19 Thread Peter Kjellstrom
On Thursday 19 March 2009, Jerry Geis wrote:
> Is 5.3 and ext4 going to be safe?
> I have seen a couple reports of data loss using ext4?
> Has this already been fixed?

Like Jim said, not ext4's fault.

> What does the list recommend? ext3/ ext4?

Ext4 (actually ext4dev) in 5.3 will be a preview and not meant for general 
use. So most people should probably stay with ext3.

/Peter

> Thought maybe today we would start seeing 5.3 showing up... Looking
> forward to it.


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Robert Heller
At Thu, 19 Mar 2009 12:54:41 +0100 CentOS mailing list  
wrote:

> 
> James Bensley wrote:
> > Shadies and Mentlemen;
> >
> > I am trying to be green and put our backup servers to sleep during the
> > day and have them wake on LAN and fire back up at night for our
> > nightly backups as "sleep" is a sort of low power usage mode.
> >
> > (At this point I would be curious to know the different levels of
> > sleep, what can I achieve? Does my server just drop into a low power
> > state, or can I stop the hard drives as well?)
> >
> > I am wondering if it is achievable to script the process of putting a
> > server to sleep so I can cron tab its behind!
> >
> > I would assume it would be possible but I don't know how, does anyone
> > have any idea?
> >   
> You are probably best of putting your backup server on an already
> running server as a virtual machine. If you really have only one server
> running on your lan then you could also consider the following approach.
> I use the power-on-time BIOS feature most MB have. My server start
> itself every night at 01:55. It is then up and running just before
> 02:00. At 02:00 I schedule a cron job to do the backup. At the end of
> the backup, the script just powers off the machine. The only thing to
> experiment with is the time it takes to start the machine. Sometimes the
> startup takes longer if disks need to be checked (ext3, every so may
> boots) and the cron might not trigger. Using anacron is perhaps the
> safest option in this case, but I did not experiment with that.
> I could not use wake up on LAN, since the mirror is on a remote location
> were it is really the only server.

You can also do a 'pull' backup -- the backup server runs the backup
job, not the 'active' server(s).  In this case, instead of cron jobs on
the active machines, you reference the backup script rc.local on the
backup server.

> 
> Theo
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
> 

-- 
Robert Heller -- 978-544-6933
Deepwoods Software-- Download the Model Railroad System
http://www.deepsoft.com/  -- Binaries for Linux and MS-Windows
hel...@deepsoft.com   -- http://www.deepsoft.com/ModelRailroadSystem/
 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Theo Band
Robert Heller wrote:
> At Thu, 19 Mar 2009 12:54:41 +0100 CentOS mailing list  
> wrote:
>
>   
>> James Bensley wrote:
>> 
>>> Shadies and Mentlemen;
>>>
>>> I am trying to be green and put our backup servers to sleep during the
>>> day and have them wake on LAN and fire back up at night for our
>>> nightly backups as "sleep" is a sort of low power usage mode.
>>>
>>> (At this point I would be curious to know the different levels of
>>> sleep, what can I achieve? Does my server just drop into a low power
>>> state, or can I stop the hard drives as well?)
>>>
>>> I am wondering if it is achievable to script the process of putting a
>>> server to sleep so I can cron tab its behind!
>>>
>>> I would assume it would be possible but I don't know how, does anyone
>>> have any idea?
>>>   
>>>   
>> You are probably best of putting your backup server on an already
>> running server as a virtual machine. If you really have only one server
>> running on your lan then you could also consider the following approach.
>> I use the power-on-time BIOS feature most MB have. My server start
>> itself every night at 01:55. It is then up and running just before
>> 02:00. At 02:00 I schedule a cron job to do the backup. At the end of
>> the backup, the script just powers off the machine. The only thing to
>> experiment with is the time it takes to start the machine. Sometimes the
>> startup takes longer if disks need to be checked (ext3, every so may
>> boots) and the cron might not trigger. Using anacron is perhaps the
>> safest option in this case, but I did not experiment with that.
>> I could not use wake up on LAN, since the mirror is on a remote location
>> were it is really the only server.
>> 
>
> You can also do a 'pull' backup -- the backup server runs the backup
> job, not the 'active' server(s).  In this case, instead of cron jobs on
> the active machines, you reference the backup script rc.local on the
> backup server.
>   
Yes that is what I indeed do. The initiative is taken by the backup
server, not by the server that needs to be backed up. In principle both
can be done if machines can talk to each other when up and running. In
my situation my backup server is behind a home nat router and cannot be
reached from the internet.
The rc.local is indeed also an option that does not need cron. In my
particular situation, the backup server is also used for normal use
during daytime so I don't want the backups to start always when the
machine is powered.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Hugh E Cruickshank
From: James Bensley Sent: March 19, 2009 04:13
> 
> I am trying to be green and put our backup servers to sleep during the
> day and have them wake on LAN and fire back up at night for our
> nightly backups as "sleep" is a sort of low power usage mode.

I can not comment on how to do what your asking but I can see one
potential problem. If your solution involves booting the backup server
and during the boot an error is detected in the filesystem check the
boot process will halt waiting for you to manually correct the problem.
Of course you can avoid the problem by making your backup scripts on
the primary server can implement a time limit on the wait for the
backup server and if the wait times out then skip the backup.

Someone out there more knowledgeable then I (and there are many) may
be able to suggest a way to alter the boot to avoid the filesystem
check (or the halt).

HTH

Regards, Hugh

-- 
Hugh E Cruickshank, Forward Software, www.forward-software.com 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] SELinux - different context on subdirectories

2009-03-19 Thread Marcus Moeller
Hi all,

I have created a directory /srv with the following SELinux context:

system_u:object_r:var_t

Now I want to create a subdirectory within /srv which should get a
different context.  So I tried to set e.g.:

semanage fcontext -a -t samba_share_t /srv/samba
/sbin/restorecon -v /srv/samba

but the context is always reset to:

system_u:object_r:var_t

What am I missing?

Best Regards
Marcus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Robert Heller
At Thu, 19 Mar 2009 14:07:33 +0100 CentOS mailing list  
wrote:

> 
> Robert Heller wrote:
> > At Thu, 19 Mar 2009 12:54:41 +0100 CentOS mailing list  
> > wrote:
> >
> >   
> >> James Bensley wrote:
> >> 
> >>> Shadies and Mentlemen;
> >>>
> >>> I am trying to be green and put our backup servers to sleep during the
> >>> day and have them wake on LAN and fire back up at night for our
> >>> nightly backups as "sleep" is a sort of low power usage mode.
> >>>
> >>> (At this point I would be curious to know the different levels of
> >>> sleep, what can I achieve? Does my server just drop into a low power
> >>> state, or can I stop the hard drives as well?)
> >>>
> >>> I am wondering if it is achievable to script the process of putting a
> >>> server to sleep so I can cron tab its behind!
> >>>
> >>> I would assume it would be possible but I don't know how, does anyone
> >>> have any idea?
> >>>   
> >>>   
> >> You are probably best of putting your backup server on an already
> >> running server as a virtual machine. If you really have only one server
> >> running on your lan then you could also consider the following approach.
> >> I use the power-on-time BIOS feature most MB have. My server start
> >> itself every night at 01:55. It is then up and running just before
> >> 02:00. At 02:00 I schedule a cron job to do the backup. At the end of
> >> the backup, the script just powers off the machine. The only thing to
> >> experiment with is the time it takes to start the machine. Sometimes the
> >> startup takes longer if disks need to be checked (ext3, every so may
> >> boots) and the cron might not trigger. Using anacron is perhaps the
> >> safest option in this case, but I did not experiment with that.
> >> I could not use wake up on LAN, since the mirror is on a remote location
> >> were it is really the only server.
> >> 
> >
> > You can also do a 'pull' backup -- the backup server runs the backup
> > job, not the 'active' server(s).  In this case, instead of cron jobs on
> > the active machines, you reference the backup script rc.local on the
> > backup server.
> >   
> Yes that is what I indeed do. The initiative is taken by the backup
> server, not by the server that needs to be backed up. In principle both
> can be done if machines can talk to each other when up and running. In
> my situation my backup server is behind a home nat router and cannot be
> reached from the internet.
> The rc.local is indeed also an option that does not need cron. In my
> particular situation, the backup server is also used for normal use
> during daytime so I don't want the backups to start always when the
> machine is powered.

One can always put a time check in the rc.local file (or the script it
starts).  Eg if time-of-day >= 2am and time-of-day < 2:30am then start
backup.  This allows for a slow boot up (eg slow fsck or something like
that). It is also possible for rc.local to start a backup daemon which
checks local system activity and might do a back at some other time if
the local load a really light and/or the time is some other 'dead of
night' period, such as at 3am or 4am, if it appears that the 2am backup
failed to start for some reason.  This also allows for a 'failsafe'
backup -- where you can arrange for the backup server to be fired up at
additional dead period times.

> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
>   
>   

-- 
Robert Heller -- 978-544-6933
Deepwoods Software-- Download the Model Railroad System
http://www.deepsoft.com/  -- Binaries for Linux and MS-Windows
hel...@deepsoft.com   -- http://www.deepsoft.com/ModelRailroadSystem/

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread Theo Band
Hugh E Cruickshank wrote:
> From: James Bensley Sent: March 19, 2009 04:13
>   
>> I am trying to be green and put our backup servers to sleep during the
>> day and have them wake on LAN and fire back up at night for our
>> nightly backups as "sleep" is a sort of low power usage mode.
>> 
>
> I can not comment on how to do what your asking but I can see one
> potential problem. If your solution involves booting the backup server
> and during the boot an error is detected in the filesystem check the
> boot process will halt waiting for you to manually correct the problem.
> Of course you can avoid the problem by making your backup scripts on
> the primary server can implement a time limit on the wait for the
> backup server and if the wait times out then skip the backup.
>
> Someone out there more knowledgeable then I (and there are many) may
> be able to suggest a way to alter the boot to avoid the filesystem
> check (or the halt).
>   
I would not disable the filesystem check at boot. Those checks are
needed. You can lower the frequency of checking using tune2fs (not
needed to check after a certain number of boots if you boot daily). I
think it is good practice to check your backup status on a regular basis
anyway. You would notice a problem with your backup server in this way.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Being Green, Time to make the servers sleep!

2009-03-19 Thread John Hinton
Theo Band wrote:
> Hugh E Cruickshank wrote:
>   
>> From: James Bensley Sent: March 19, 2009 04:13
>>   
>> 
>>> I am trying to be green and put our backup servers to sleep during the
>>> day and have them wake on LAN and fire back up at night for our
>>> nightly backups as "sleep" is a sort of low power usage mode.
>>> 
>>>   
>> I can not comment on how to do what your asking but I can see one
>> potential problem. If your solution involves booting the backup server
>> and during the boot an error is detected in the filesystem check the
>> boot process will halt waiting for you to manually correct the problem.
>> Of course you can avoid the problem by making your backup scripts on
>> the primary server can implement a time limit on the wait for the
>> backup server and if the wait times out then skip the backup.
>>
>> Someone out there more knowledgeable then I (and there are many) may
>> be able to suggest a way to alter the boot to avoid the filesystem
>> check (or the halt).
>>   
>> 
> I would not disable the filesystem check at boot. Those checks are
> needed. You can lower the frequency of checking using tune2fs (not
> needed to check after a certain number of boots if you boot daily). I
> think it is good practice to check your backup status on a regular basis
> anyway. You would notice a problem with your backup server in this way.
>   
I never figured out why the manufacturers thought that ATX was better 
than AT when it comes to Green? Yeah, off topic a bit, but an AT machine 
when turned off disconnects the power supply from the current. ATX, just 
powers down the computer, leaving the PS in a lowered power state, but 
apparently this can draw up to 60% of the working power needed. Funny to 
me that at the same time ATX came out, suddenly "Green" started showing 
on the bios screens. Yeah, it sleeps better during the day during 
non-use times until you get tired of waiting for it to wake up and turn 
all of that off, but it doesn't sleep nearly as well at night when 
everyone has quit for the day unless you put it on a switchable 
power strip. And I bet most people have no idea about the power 
consumption of an ATX machine and think it's using no power when the 
computer is not running.

Of course, this has nothing to do with full time servers. We are 
wasteful in so many ways. TVs... same deal, just so that when we turn 
them on they start up faster and on and on and on it goes. But it is 
good that you are trying to help with your backup server.

It would be interesting to put a wattmeter inline on the power cord to 
see how much current it's drawing running vs. in sleep state. I guess 
with an AT machine, one would have to use one of those old timers that 
switch on a plug something else that uses a bit of electricity, but 
I bet less than a power supply in sleep mode. Actually, one of those 
timers might be a good solution for you if you really want to be green.

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SELinux - different context on subdirectories

2009-03-19 Thread Ned Slider
Marcus Moeller wrote:
> Hi all,
> 
> I have created a directory /srv with the following SELinux context:
> 
> system_u:object_r:var_t
> 
> Now I want to create a subdirectory within /srv which should get a
> different context.  So I tried to set e.g.:
> 
> semanage fcontext -a -t samba_share_t /srv/samba
> /sbin/restorecon -v /srv/samba
> 
> but the context is always reset to:
> 
> system_u:object_r:var_t
> 
> What am I missing?
> 

Hi Marcus,

Try the following:

semanage fcontext -a -t samba_share_t "/srv/samba(/.*)?"


Ned

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SELinux - different context on subdirectories

2009-03-19 Thread Ned Slider
Ned Slider wrote:
> Marcus Moeller wrote:
>> Hi all,
>>
>> I have created a directory /srv with the following SELinux context:
>>
>> system_u:object_r:var_t
>>
>> Now I want to create a subdirectory within /srv which should get a
>> different context.  So I tried to set e.g.:
>>
>> semanage fcontext -a -t samba_share_t /srv/samba
>> /sbin/restorecon -v /srv/samba
>>
>> but the context is always reset to:
>>
>> system_u:object_r:var_t
>>
>> What am I missing?
>>
> 
> Hi Marcus,
> 
> Try the following:
> 
> semanage fcontext -a -t samba_share_t "/srv/samba(/.*)?"
> 
> 
> Ned
> 


You may also need to manually change the context first:

chcon -v --type=samba_share_t /srv/samba




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SELinux - different context on subdirectories

2009-03-19 Thread Marcus Moeller
Dear Ned.

>
> You may also need to manually change the context first:
>
> chcon -v --type=samba_share_t /srv/samba

chcon did the trick.

Thanks a lot
Marcus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SELinux - different context on subdirectories

2009-03-19 Thread Ned Slider
Marcus Moeller wrote:
> Dear Ned.
> 
>> You may also need to manually change the context first:
>>
>> chcon -v --type=samba_share_t /srv/samba
> 
> chcon did the trick.
> 
> Thanks a lot
> Marcus

semanage will make the changes persistent through a complete filesystem 
relabel (chcon will persist through a reboot, but not a relabel).

Cheers,

Ned


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox seg faults

2009-03-19 Thread Rob Kampen



A. Kirillov wrote:
Hi, I have two very similar AMD based work stations running fully 
current CentOS x86_64.

Both have 4Gb of RAM, both have

[rkam...@media ~]$ sudo rpm -qa |grep flash
flash-plugin-10.0.22.87-release.i386
[rkam...@media ~]$ sudo rpm -qa |grep fire
firefox-3.0.6-1.el5.centos.i386



Try flash-plugin-9.0.124.0.
I couldn't make flash-plugin-10.0.22.87 work on my 64-bit box.

# rpm -qa firefox flash-plugin
flash-plugin-9.0.124.0-release.i386
firefox-3.0.6-1.el5.centos.x86_64

  
  

two questions
1. where do I find
flash-plugin-9.0.124.0



Good question. It doesn't seem to be in the adobe repos any more.

Try http://www.szivarvanynet.hu/download/linux/
flash-plugin-9.0.124.0-release.i386.rpm

The rpm there matches my local copy.

# md5sum /var/lib/yum/repo/x86_64/
flash-plugin-9.0.124.0-release.i386.rpm
fe8a084b6c9e83740e1e3353f19d04e1  
/var/lib/yum/repo/x86_64/flash-plugin-9.0.124.0-release.i386.rpm

  

Well that download and install works great! - thanks.
Leaves me wondering why I can get the adobe supplied flash plugin 
working on one machine but not the other - not the kind of stuff to 
inspire confidence in ... adobe . firefox .. CentOS .???

2. how come you are running 64 bit firefox and 32 bit plugin???



Install nspluginwrapper for both archs and run
# mozilla-plugin-config --help


  
Not for me at this time, I deliberately run the 32 bit version of 
firefox as my reading online indicates all other options are less than 
perfect - YMMV.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
begin:vcard
fn:Rob Kampen
n:Kampen;Rob
email;internet:r...@kampensonline.net
tel;cell:407-341-3815
version:2.1
end:vcard

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread sumit agarwal
Hi,  i installed Cent Os 4.4 x64 (all packages )on my thinkpad .
  i have enough ram ie 2 gb and good processor Core 2 duo.2.5 ghz T9300
  evrey thing seems to be running very slow.
  any help would be welcome





thanx
Sumit
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread Peter Kjellstrom
On Thursday 19 March 2009, sumit agarwal wrote:
> Hi,  i installed Cent Os 4.4 x64 (all packages )on my thinkpad .
>   i have enough ram ie 2 gb and good processor Core 2 duo.2.5 ghz T9300
>   evrey thing seems to be running very slow.
>   any help would be welcome

How did you decide upon CentOS-4.4 for your laptop? At the very least install 
4.7 (or even better 5.2 or 5.3 (out soon)). If you install 4.4 your very 
first "yum update" will take you to 4.7 anyway.

/Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread sumit agarwal
HI Peter,

thx for the reply.
I will update  that soon on getting my network or wifi working.but can still
not reason why this should be so slow.



2009/3/19 Peter Kjellstrom 

> On Thursday 19 March 2009, sumit agarwal wrote:
> > Hi,  i installed Cent Os 4.4 x64 (all packages )on my thinkpad .
> >   i have enough ram ie 2 gb and good processor Core 2 duo.2.5 ghz
> T9300
> >   evrey thing seems to be running very slow.
> >   any help would be welcome
>
> How did you decide upon CentOS-4.4 for your laptop? At the very least
> install
> 4.7 (or even better 5.2 or 5.3 (out soon)). If you install 4.4 your very
> first "yum update" will take you to 4.7 anyway.
>
> /Peter
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>


-- 
Software Engineer,
Product Dev.
Lifetree Convergence Ltd,
Indiranagar,
Bangalore
Mob : +91 9900952046
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 49, Issue 8

2009-03-19 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2009:0358 Moderate CentOS 3 s390(x)  evolution - security
  update (Pasi Pirhonen)
   2. CESA-2009:0355 Moderate CentOS 4 s390(x)  evolution and
  evolution-data-server - security update (Pasi Pirhonen)
   3. CESA-2009:0354 Moderate CentOS 4 s390(x)
  evolution-data-server - security update (Pasi Pirhonen)


--

Message: 1
Date: Wed, 18 Mar 2009 22:47:31 +0200
From: Pasi Pirhonen 
Subject: [CentOS-announce] CESA-2009:0358 Moderate CentOS 3 s390(x)
evolution - security update
To: centos-annou...@centos.org
Message-ID: <20090318204730.gs23...@centos.fi>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2009:0358

https://rhn.redhat.com/errata/RHSA-2009-0358.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

s390:
updates/s390/RPMS/evolution-1.4.5-25.el3.s390.rpm
updates/s390/RPMS/evolution-devel-1.4.5-25.el3.s390.rpm

s390x:
updates/s390x/RPMS/evolution-1.4.5-25.el3.s390x.rpm
updates/s390x/RPMS/evolution-devel-1.4.5-25.el3.s390x.rpm


-- 
Pasi Pirhonen - u...@iki.fi - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20090318/ac45a467/attachment-0001.bin
 

--

Message: 2
Date: Wed, 18 Mar 2009 22:54:23 +0200
From: Pasi Pirhonen 
Subject: [CentOS-announce] CESA-2009:0355 Moderate CentOS 4 s390(x)
evolution and evolution-data-server - security update
To: centos-annou...@centos.org
Message-ID: <20090318205422.gt23...@centos.fi>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2009:0355

https://rhn.redhat.com/errata/RHSA-2009-0355.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

s390:
updates/s390/RPMS/evolution-2.0.2-41.el4_7.2.s390.rpm
updates/s390/RPMS/evolution-data-server-1.0.2-14.el4_7.1.s390.rpm
updates/s390/RPMS/evolution-data-server-devel-1.0.2-14.el4_7.1.s390.rpm
updates/s390/RPMS/evolution-devel-2.0.2-41.el4_7.2.s390.rpm

s390x:
updates/s390x/RPMS/evolution-2.0.2-41.el4_7.2.s390x.rpm
updates/s390x/RPMS/evolution-data-server-1.0.2-14.el4_7.1.s390x.rpm
updates/s390x/RPMS/evolution-data-server-devel-1.0.2-14.el4_7.1.s390x.rpm
updates/s390x/RPMS/evolution-devel-2.0.2-41.el4_7.2.s390x.rpm


-- 
Pasi Pirhonen - u...@iki.fi - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20090318/70065e3a/attachment-0001.bin
 

--

Message: 3
Date: Wed, 18 Mar 2009 22:55:41 +0200
From: Pasi Pirhonen 
Subject: [CentOS-announce] CESA-2009:0354 Moderate CentOS 4 s390(x)
evolution-data-server - security update
To: centos-annou...@centos.org
Message-ID: <20090318205541.gu23...@centos.fi>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2009:0354

https://rhn.redhat.com/errata/RHSA-2009-0354.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

s390:
updates/s390/RPMS/evolution28-evolution-data-server-1.8.0-37.el4_7.2.s390.rpm
updates/s390/RPMS/evolution28-evolution-data-server-devel-1.8.0-37.el4_7.2.s390.rpm

s390x:
updates/s390x/RPMS/evolution28-evolution-data-server-1.8.0-37.el4_7.2.s390x.rpm
updates/s390x/RPMS/evolution28-evolution-data-server-devel-1.8.0-37.el4_7.2.s390x.rpm


-- 
Pasi Pirhonen - u...@iki.fi - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20090318/b88e64dc/attachment-0001.bin
 

--

___
CentOS-announce mailing list
centos-annou...@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


End of CentOS-announce Digest, Vol 49, Issue 8

Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread Scott Silva
on 3-19-2009 9:12 AM sumit agarwal spake the following:
> Hi,
> �� � �i installed Cent Os 4.4 x64 (all packages )on my thinkpad .
> �� � �i have enough ram ie 2 gb and good processor Core 2 duo.2.5 ghz T9300
> �� � �evrey thing seems to be running very slow.
> �� � �any help would be welcome
> 
> 
> 

Does your thinkpad have a SATA drive?
Is the bios set to AHCI mode and not emulating PATA?


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: centos.org web site not responding

2009-03-19 Thread Lanny Marcus
On 3/16/09, Lanny Marcus  wrote:
> The web site for CentOS is not responding. I can ping it OK, but the
> web site is not responding to http requests from my browser. If the
> webmaster should happen to read this...

They (Layered Tech or Level3) fixed the problem the other day. I have
been checking, periodically, to see if I can get to centos.org and the
web pages have been loading fine. However, I just checked again and
now I have the same problem again: (a) I can ping centos.org OK, but
the ping times are higher than when it works OK (b) Firefox status
shows "Waiting for www.centos.org" after the DNS lookup

If the problem is on Level3, our route is on Level3, from Miami into Dallas.


 8  xe-8-0-0.edge2.Miami1.Level3.net (4.59.84.5)  94.386 ms  96.005 ms
 98.375 ms
 9  ae-31-51.ebr1.Miami1.Level3.net (4.69.138.94)  103.582 ms  103.800
ms  105.502 ms
10  ae-2.ebr1.Dallas1.Level3.net (4.69.140.133)  143.348 ms  143.496
ms  143.799 ms
11  ae-61-61.csw1.Dallas1.Level3.net (4.69.136.122)  150.643 ms * *
12  * * *
13  * DATABANK-HO.car2.Dallas1.Level3.net (4.71.170.2)  115.438 ms  119.708 ms
14  ae_cw_10g.databank.com (63.164.96.62)  122.067 ms
aw_cw_10g.databank.com (63.164.96.54)  127.471 ms
ae_cw_10g.databank.com (63.164.96.62)  126.691 ms
15  pod22c_ae.layeredtech.com (63.164.96.202)  130.134 ms
pod22a_aw.layeredtech.com (63.164.96.242)  132.261 ms  135.707 ms
16  162.194.232.72.static.reverse.ltdomains.com (72.232.194.162)
114.324 ms !X  117.706 ms !X  118.991 ms !X
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread sumit agarwal
hi  thinkpad has a SATA drive?
Is the bios set to AHCI mode and not emulating PATA?
how can i fix this?

2009/3/19 Scott Silva 

> on 3-19-2009 9:12 AM sumit agarwal spake the following:
> > Hi,
> > �� � �i installed Cent Os 4.4 x64 (all packages )on my thinkpad .
> > �� � �i have enough ram ie 2 gb and good processor Core 2 duo.2.5 ghz
> T9300
> > �� � �evrey thing seems to be running very slow.
> > �� � �any help would be welcome
> >
> >
> >
>
> Does your thinkpad have a SATA drive?
> Is the bios set to AHCI mode and not emulating PATA?
>
>
> --
> MailScanner is like deodorant...
> You hope everybody uses it, and
> you notice quickly if they don't
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>


-- 
Software Engineer,
Product Dev.
Lifetree Convergence Ltd,
Indiranagar,
Bangalore
Mob : +91 9900952046
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread Scott Silva
on 3-19-2009 11:22 AM sumit agarwal spake the following:
> hi 
>  thinkpad has a SATA drive?
> Is the bios set to AHCI mode and not emulating PATA?
> how can i fix this?
> 

Are there options in the bios as to how the hard drive is accessed?

Which thinkpad do you have?


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread sumit agarwal
i have R61 7742 -CTO i can set my bios to achi or compatible mode currently
its on compatibllity modei dont think achi mode is detected.




2009/3/19 Scott Silva 

> on 3-19-2009 11:22 AM sumit agarwal spake the following:
> > hi
> >  thinkpad has a SATA drive?
> > Is the bios set to AHCI mode and not emulating PATA?
> > how can i fix this?
> >
>
> Are there options in the bios as to how the hard drive is accessed?
>
> Which thinkpad do you have?
>
>
> --
> MailScanner is like deodorant...
> You hope everybody uses it, and
> you notice quickly if they don't
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>


-- 
Software Engineer,
Product Dev.
Lifetree Convergence Ltd,
Indiranagar,
Bangalore
Mob : +91 9900952046
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: centos.org web site not responding

2009-03-19 Thread Lanny Marcus
On Mon, Mar 16, 2009 at 12:29 PM, R P Herrold  wrote:
> On Mon, 16 Mar 2009, Lanny Marcus wrote:
>> The web site for CentOS is not responding. I can ping it OK, but the
>> web site is not responding to http requests from my browser. If the
>> webmaster should happen to read this...
>
> working fine here, and from two other test locations -- it
> might make more sense to use the IRC channel for time
> sensitive reports

Russ: Same problem with the centos.org web site again from my end. I
did go to IRC, as you suggested, and sent a message to #centos-web
several minutes ago. Didn't see anyone else there. I hope someone will
reopen the Trouble Ticket at Layered Tech.   Lanny
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread Victor Padro
2009/3/19 sumit agarwal 

> i have R61 7742 -CTO i can set my bios to achi or compatible mode currently
> its on compatibllity modei dont think achi mode is detected.
>
>
>
>
> 2009/3/19 Scott Silva 
>
>> on 3-19-2009 11:22 AM sumit agarwal spake the following:
>>
>> > hi
>> >  thinkpad has a SATA drive?
>> > Is the bios set to AHCI mode and not emulating PATA?
>> > how can i fix this?
>> >
>>
>> Are there options in the bios as to how the hard drive is accessed?
>>
>> Which thinkpad do you have?
>>
>>
>> --
>> MailScanner is like deodorant...
>> You hope everybody uses it, and
>> you notice quickly if they don't
>>
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>>
>
>
> --
> Software Engineer,
> Product Dev.
> Lifetree Convergence Ltd,
> Indiranagar,
> Bangalore
> Mob : +91 9900952046
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
Why don't you use CentOS 5.2?
What options do you have in the BIOS for HDDs?

-- 
"It is human nature to think wisely and act in an absurd fashion."

"Todo el desorden del mundo proviene de las profesiones mal o mediocremente
servidas"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cent OS 4.4 x64 slow

2009-03-19 Thread Scott Silva
on 3-19-2009 12:03 PM sumit agarwal spake the following:
> i have R61 7742 -CTO i can set my bios to achi or compatible mode
> currently its on compatibllity mode
> i dont think achi mode is detected.
> 
If you switch to ACHI, does the windows partition still work?

If yes, why not download the 5.2 live CD and test it before you commit to
another install.

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: centos.org web site not responding

2009-03-19 Thread Tru Huynh
On Thu, Mar 19, 2009 at 02:07:15PM -0500, Lanny Marcus wrote:
> Russ: Same problem with the centos.org web site again from my end. I
> did go to IRC, as you suggested, and sent a message to #centos-web
> several minutes ago. Didn't see anyone else there. I hope someone will
> reopen the Trouble Ticket at Layered Tech.   Lanny


From the traceroute you provided, the only sign of a potential problem appears
to be on Level3's network in Dallas. I should also clarify that we did not fix
the issue your user was experiencing a few days ago, as we were unable to
duplicate the problem.

I just ran a test from just-ping.com to your web server, and it looks very good
from over 30 locations worldwide.

Thank you,

Network Operations
Layered Technologies


Tru
-- 
Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B


pgpE9fU7yBZxL.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: centos.org web site not responding

2009-03-19 Thread Lanny Marcus
2009/3/19 Tru Huynh :
> On Thu, Mar 19, 2009 at 02:07:15PM -0500, Lanny Marcus wrote:
>> Russ: Same problem with the centos.org web site again from my end. I
>> did go to IRC, as you suggested, and sent a message to #centos-web
>> several minutes ago. Didn't see anyone else there. I hope someone will
>> reopen the Trouble Ticket at Layered Tech.   Lanny
>
> 
> From the traceroute you provided, the only sign of a potential problem appears
> to be on Level3's network in Dallas. I should also clarify that we did not fix
> the issue your user was experiencing a few days ago, as we were unable to
> duplicate the problem.

Tru: Thank you for reopening the trouble ticket at Layered Tech and
posting their reply! John Pierce found there was a problem, in Dallas,
when he did a lot of ping tests to centos.org  the  night of the 16th.
There is a problem and if it isn't within Layered Tech, it must be at
Level3 or where they connect. The other day, everyone else was able to
load the web site, when I couldn't, so there must be something about
our connection that makes the problem visible to me, but not to
others. Or, that it involves something on the Level3 route from Miami
to Dallas. However, John Pierce was also going in on Level3, from San
Jose to Dallas, and he discovered a problem.  I would assume, if I
assume, that Layered Tech is the one who can report the problem to
Level3. Possibly the problem is where Level3 does the interconnection
to Layered Tech? This is what John Pierce posted the night of the
16th:

"I did some more pinging later on from one of my servers in San Jose,
California, and saw some signs of route instability at layeredwhazza
where the next hop after what should have been the next-to-last one was
coming from various routers all going 'no route to destination' "

and John Stanley wrote on the 17th:

"But doing another trace to layeredtech
and ltdomains shows bad hops also from my end just like John Pierces
shows. But still I can access it by WWW."
>
> I just ran a test from just-ping.com to your web server, and it looks very 
> good
> from over 30 locations worldwide.

He's right  about that. I just pinged centos.org but the web pages are
not available to me, but are available to others on the list. Below is
a traceroute I just did. Notice hops 8 and 9 are not shown. Lanny

[la...@dell2400 ~]$ traceroute centos.org
traceroute to centos.org (72.232.194.162), 30 hops max, 40 byte packets
 1  ipcop233 (192.168.10.1)  0.516 ms  0.513 ms  0.513 ms
 2  192.168.1.1 (192.168.1.1)  1.397 ms  1.816 ms  1.592 ms
 3  dsl-emcali-190.1.248.1.emcali.net.co (190.1.248.1)  16.909 ms
19.273 ms  21.105 ms
 4  172.16.1.3 (172.16.1.3)  23.123 ms  14.492 ms *
 5  190.90.2.25 (190.90.2.25)  55.225 ms  60.168 ms  60.299 ms
 6  so-4-2-1-nmi-core01.nwnnetwork.net (63.245.40.149)  97.314 ms
99.549 ms  109.844 ms
 7  ge-1-1-0-nmi-core02.columbus-networks.com (63.245.5.0)  105.428 ms
 106.990 ms  109.280 ms
 8  * * *
 9  * * *
10  ae-2.ebr1.Dallas1.Level3.net (4.69.140.133)  118.310 ms  115.144
ms  117.366 ms
11  ae-61-61.csw1.Dallas1.Level3.net (4.69.136.122)  119.042 ms
ae-81-81.csw3.Dallas1.Level3.net (4.69.136.130)  120.057 ms
ae-71-71.csw2.Dallas1.Level3.net (4.69.136.126)  129.584 ms
12  * ae-42-99.car2.Dallas1.Level3.net (4.68.19.196)  120.725 ms  123.532 ms
13  DATABANK-HO.car2.Dallas1.Level3.net (4.71.170.2)  115.159 ms
115.091 ms  117.425 ms
14  aw_cw_10g.databank.com (63.164.96.54)  118.347 ms  116.937 ms  117.710 ms
15  pod22c_ae.layeredtech.com (63.164.96.202)  117.607 ms  117.466 ms
pod22a_aw.layeredtech.com (63.164.96.242)  115.099 ms
16  162.194.232.72.static.reverse.ltdomains.com (72.232.194.162)
118.377 ms !X  115.107 ms !X  117.395 ms !X
[la...@dell2400 ~]$
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ssh - alternate ports, and host verification

2009-03-19 Thread dnk
I have a centos box that will need to ssh into 2 other centos boxes  
(with keys). Now one of these boxes is a firewall, and another is a  
system behind the firewall. I have rules in my firewall to punch into  
the system behind the FW.

Now if i connect to the IP (sine the public one is shared), anytime i  
connect to the other system, I get the host verification failed error  
and have to remove the IP from the known_hosts file.

What is the best (secure) way to get around this? I know i can disable  
the check, but that is not my preferred way.

Thanks.

d




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh - alternate ports, and host verification

2009-03-19 Thread Jerry Franz
dnk wrote:
> I have a centos box that will need to ssh into 2 other centos boxes  
> (with keys). Now one of these boxes is a firewall, and another is a  
> system behind the firewall. I have rules in my firewall to punch into  
> the system behind the FW.
>
> Now if i connect to the IP (sine the public one is shared), anytime i  
> connect to the other system, I get the host verification failed error  
> and have to remove the IP from the known_hosts file.
>
> What is the best (secure) way to get around this? I know i can disable  
> the check, but that is not my preferred way.
>   
There are two ways to do it. The first way is to simply set the host 
keys to be the same on all the boxes (copy the contents of the 
/etc/ssh/*key* files from one box to all of the boxes). The other way is 
to setup separate ssh_config files for each destination with different 
known_host files and invoke ssh as 'ssh -F configfile1 host1', 'ssh -F 
configfile2 host2', etc.

-- 
Benjamin Franz
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh - alternate ports, and host verification

2009-03-19 Thread dnk

On 19-Mar-09, at 4:01 PM, Jerry Franz wrote:

> dnk wrote:
>> I have a centos box that will need to ssh into 2 other centos boxes
>> (with keys). Now one of these boxes is a firewall, and another is a
>> system behind the firewall. I have rules in my firewall to punch into
>> the system behind the FW.
>>
>> Now if i connect to the IP (sine the public one is shared), anytime i
>> connect to the other system, I get the host verification failed error
>> and have to remove the IP from the known_hosts file.
>>
>> What is the best (secure) way to get around this? I know i can  
>> disable
>> the check, but that is not my preferred way.
>>
> There are two ways to do it. The first way is to simply set the host
> keys to be the same on all the boxes (copy the contents of the
> /etc/ssh/*key* files from one box to all of the boxes). The other  
> way is
> to setup separate ssh_config files for each destination with different
> known_host files and invoke ssh as 'ssh -F configfile1 host1', 'ssh -F
> configfile2 host2', etc.
>


Ok, and the way I just figured out that also works is:

If there are several different fingerprints in known_hosts for the  
same host (IP), ssh will connect if at least one of them is correct.  
So what you can do is

# 1.) move your known_hosts file to a different filename
mv .ssh/known_hosts .ssh/known_hosts.old
# 2.) connect to computer #1, so its host key is written to the (now  
empty) known_hosts file
ssh y...@yourfirstmachine -p port1
# 3.) add the new host key fingerprint to the old known_hosts file
cat .ssh/known_hosts >>.ssh/known_hosts.old
# 4.) remove the new known_hosts file
rm .ssh/known_hosts
# Now you should repeat steps 2-4 for each computer in you nated network
# At the end, you simply move the old known_hosts file with the added  
keys back again
mv .ssh/known_hosts.old .ssh/known_hosts

Thanks!

d


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh - alternate ports, and host verification

2009-03-19 Thread russ
Are these on the same ip, but different ports?  I suggest setting up two 
different hostnames.  

Russ
--Original Message--
From: dnk
Sender: centos-boun...@centos.org
To: CentOS Mailing list
ReplyTo: CentOS Mailing list
Sent: Mar 19, 2009 6:53 PM
Subject: [CentOS] ssh - alternate ports, and host verification

I have a centos box that will need to ssh into 2 other centos boxes  
(with keys). Now one of these boxes is a firewall, and another is a  
system behind the firewall. I have rules in my firewall to punch into  
the system behind the FW.

Now if i connect to the IP (sine the public one is shared), anytime i  
connect to the other system, I get the host verification failed error  
and have to remove the IP from the known_hosts file.

What is the best (secure) way to get around this? I know i can disable  
the check, but that is not my preferred way.

Thanks.

d




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Sent from my Verizon Wireless BlackBerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Fwd: broken lame/mp3 output (was: Re: Problem with ecasound on CentOS 5.2, x86_64)

2009-03-19 Thread MHR
I posed a question about this a while back, and Kai found the problem
and sent this workaround:

> -- Forwarded message --
> From: Kai Vehmanen 
> Date: Thu, Mar 19, 2009 at 3:03 PM
> Subject: broken lame/mp3 output (was: Re: Problem with ecasound on CentOS 
> 5.2, x86_64)
> To: MHR 
> Cc: ecasound-l...@lists.sourceforge.net
>
> Hi,
>
> :
>
> Fortunately, a workaround is easy, just add:
>
> --cut--
> ext-cmd-mp3-output = lame -b %B -s %S -r --little-endian -S - %f
> --cut--
>
> ... to your ~/.ecasound/ecasoundrc and ta-daa it works.
>
This works nicely, so if anyone else was having this problem, here's the fix.

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh - alternate ports, and host verification

2009-03-19 Thread Dnk




On 19-Mar-09, at 4:07 PM, r...@vshift.com wrote:

> Are these on the same ip, but different ports?  I suggest setting up  
> two different hostnames.
>
> Russ
> --Original Message--
> From: dnk
> Sender: centos-boun...@centos.org
> To: CentOS Mailing list
> ReplyTo: CentOS Mailing list
> Sent: Mar 19, 2009 6:53 PM
> Subject: [CentOS] ssh - alternate ports, and host verification
>
> I have a centos box that will need to ssh into 2 other centos boxes
> (with keys). Now one of these boxes is a firewall, and another is a
> system behind the firewall. I have rules in my firewall to punch into
> the system behind the FW.
>
> Now if i connect to the IP (sine the public one is shared), anytime i
> connect to the other system, I get the host verification failed error
> and have to remove the IP from the known_hosts file.
>
> What is the best (secure) way to get around this? I know i can disable
> the check, but that is not my preferred way.
>
> Thanks.
>
> d
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
> Sent from my Verizon Wireless BlackBerry
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

Doh! Great idea.

D
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] pam_ldap and nss_ldap failover

2009-03-19 Thread Paul Heinlein
I'm (finally) getting around to putting a backup LDAP authentication 
server on my network. The backup uses syncrepl to grab the database, 
and to my eyes both LDAP servers answer read queries identically.

I'm testing the client side of this configuration on virtual CentOS 5 
i386 machine. /etc/ldap.conf reads

- %< -
base dc=DOMAIN,dc=com
timelimit 30
bind_timelimit 30
idle_timelimit 300
nss_initgroups_ignoreusers root,ldap,named,[... trimmed ...]
uri ldap://ldap1.DOMAIN.com ldap://ldap2.DOMAIN.com
ssl start_tls
tls_cacertdir /etc/openldap/cacerts
pam_password md5
- %< -

The client will bind to whichever server is listed first after the 
'uri' directive. In the config snippet, it's 'ldap1' -- but it works 
the other way too.

If the first-listed server goes away, the client never seems to try to 
find or bind to the second-listed server (where "never" == my 
patience limit of about an hour). Once the first-listed server goes 
away, all password authentication fails, though getent passwd and 
getent group still work (presumably because of nscd).

Has anyone else experienced this or, more importantly, figured out a 
way to get failover to work in a reasonable timeframe?

-- 
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] pam_ldap and nss_ldap failover

2009-03-19 Thread Jeff
On Thu, Mar 19, 2009 at 7:19 PM, Paul Heinlein  wrote:
> I'm (finally) getting around to putting a backup LDAP authentication
> server on my network. The backup uses syncrepl to grab the database,
> and to my eyes both LDAP servers answer read queries identically.
>
> I'm testing the client side of this configuration on virtual CentOS 5
> i386 machine. /etc/ldap.conf reads
>
> - %< -
> base dc=DOMAIN,dc=com
> timelimit 30
> bind_timelimit 30
> idle_timelimit 300
> nss_initgroups_ignoreusers root,ldap,named,[... trimmed ...]
> uri ldap://ldap1.DOMAIN.com ldap://ldap2.DOMAIN.com
> ssl start_tls
> tls_cacertdir /etc/openldap/cacerts
> pam_password md5
> - %< -
>
> The client will bind to whichever server is listed first after the
> 'uri' directive. In the config snippet, it's 'ldap1' -- but it works
> the other way too.
>
> If the first-listed server goes away, the client never seems to try to
> find or bind to the second-listed server (where "never" == my
> patience limit of about an hour). Once the first-listed server goes
> away, all password authentication fails, though getent passwd and
> getent group still work (presumably because of nscd).
>
> Has anyone else experienced this or, more importantly, figured out a
> way to get failover to work in a reasonable timeframe?

I recall that nss_ldap prior to CentOS 4.6 had trouble with this. We
are on 4.7 and use
the 'host' and 'port' options in our ldap.conf. It works as advertised.

host ldap1.example.com ldap2.example.com
port 389
...

As for the URI directive perhaps it works the same as it does in
Apache mod_auth_ldap
where you use the rather strange syntax of:

AuthLDAPURL "ldap://ldap1.example.com
ldap2.example.com/OU=example,DC=example,DC=com"

Note the space between hostnames.

The man pages are rather vague on the exact syntax for multiple hosts.

Good luck,

--
Jeff
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos