Re: [CentOS] read only sftp access

[David Hrbáč]

Andrei F napsal(a):
> Hi,
> 
> I'm trying to setup read-only SFTP repo. The directory that I'm planning to
> make available via sftp needs to have only read-only access. My issue is
> that this specific directory is already available for read & write access
> but under different credentials. When I try to login via my read-only
> account, openssh spits out an error about incorrect permissions. Any idea
> how can I share the same directory via sftp under two different usernames
> under the same filesystem permissions?
> 

Hi,
you want ACLs.
David Hrbáč
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[John R Pierce]

nate wrote:
> Tait Clarridge wrote:
>
>   
>> Steve: What module does your Dell Perc use? I don't have access to my
>> server to check.
>> 
>
> megaraid_sas is what my PERC 5i and 6i use
>   

I'm pretty sure the PERC 5i/6i are more than just the 1068E SAS chip, 
although they very well could include that.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[nate]

Tait Clarridge wrote:

> Steve: What module does your Dell Perc use? I don't have access to my
> server to check.

megaraid_sas is what my PERC 5i and 6i use

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Tait Clarridge]

On Fri, 2009-11-27 at 22:10 -0500, Billy Huddleston wrote:
> I just read the user manual on it.. It says the following...
> 
> IT Mode (Initiator and Target Mode)
> This is a Non-RAID mode. To use this mode, be sure to fl ash an IT
> mode firmware to the EEPROM and to install an IT Mode driver to the
> system OS. 
> 
> So, I'm confused, what point is a RAID controller that doesn't support
> RAID ? 
> 
> Thanks, Billy

Probably for compliance, might as well give it a try if you can... 

The Perc 4i/5i stuff that Steve was talking about is definitely
supported as I have a server that uses this. They may be exposed and use
different drivers than the straight LSI SAS 1068E.

Steve: What module does your Dell Perc use? I don't have access to my
server to check.



signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

I just read the user manual on it.. It says the following...

IT Mode (Initiator and Target Mode)
This is a Non-RAID mode. To use this mode, be sure to fl ash an IT mode 
firmware to the EEPROM and to install an IT Mode driver to the system OS.


So, I'm confused, what point is a RAID controller that doesn't support 
RAID ?


Thanks, Billy

Tait Clarridge wrote:

On Fri, 2009-11-27 at 21:18 -0500, Billy Huddleston wrote:
  

JBOD a bust. It doesn't see any hard drives that way either. Anyone
have any other ideas?



Ask Supermicro for the IT mode of your firmware if it exists. They are
usually really good at answering support questions if you email them,
I've normally heard back from them within 24 hours.

You can also ask supermicro for a driver disk (if you did not get one)
to use during the install if you pass "linux dd" to the command line
while booting the CD/DVD.
  



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Tait Clarridge]

On Fri, 2009-11-27 at 21:18 -0500, Billy Huddleston wrote:
> JBOD a bust. It doesn't see any hard drives that way either. Anyone
> have any other ideas?

Ask Supermicro for the IT mode of your firmware if it exists. They are
usually really good at answering support questions if you email them,
I've normally heard back from them within 24 hours.

You can also ask supermicro for a driver disk (if you did not get one)
to use during the install if you pass "linux dd" to the command line
while booting the CD/DVD.


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

JBOD a bust. It doesn't see any hard drives that way either. Anyone have 
any other ideas?



Billy Huddleston wrote:
Hmm.. I can't do RAID 5 because that would require the iButton68 (per 
http://www.supermicro.com/products/system/1U/6015/SYS-6015V-M3.cfm)


However, this has me completely stumped. I'll try JBOD and see what 
that does.


Thanks, Billy

Steve Thompson wrote:

On Fri, 27 Nov 2009, Tait Clarridge wrote:

  

Steve, did you configure RAID in the BIOS or use JBOD and create a SW
raid in CentOS? I noticed from a previous post that you said it was
working, the info may help Billy.



I've done it both ways (RAID-5, RAID-6 and JBOD). BTW, the LSI 1068E in my 
case were in Dell Perc 6/i controllers.


Steve

Steve Thompson E-mail:  smt AT vgersoft DOT com
Voyager Software LLC   Web: http://www DOT vgersoft DOT com
39 Smugglers Path  VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,300 miles per second: it's not just a good idea, it's the law"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

  



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

Hmm.. I can't do RAID 5 because that would require the iButton68 (per 
http://www.supermicro.com/products/system/1U/6015/SYS-6015V-M3.cfm)


However, this has me completely stumped. I'll try JBOD and see what that 
does.


Thanks, Billy

Steve Thompson wrote:

On Fri, 27 Nov 2009, Tait Clarridge wrote:

  

Steve, did you configure RAID in the BIOS or use JBOD and create a SW
raid in CentOS? I noticed from a previous post that you said it was
working, the info may help Billy.



I've done it both ways (RAID-5, RAID-6 and JBOD). BTW, the LSI 1068E in my 
case were in Dell Perc 6/i controllers.


Steve

Steve Thompson E-mail:  smt AT vgersoft DOT com
Voyager Software LLC   Web: http://www DOT vgersoft DOT com
39 Smugglers Path  VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,300 miles per second: it's not just a good idea, it's the law"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 19:24 -0500, Tait Clarridge wrote:
> I sent a message about using unetbootin to get regular CD and DVDs
> bootable off of USB without much work needed...

That's my plan for tomorrow.

>  if you didnt want to try and round up an external DVD drive to use.

And I'll look into that next week if I really have to.
-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Ross Walker]

On Nov 27, 2009, at 6:19 PM, John R Pierce  wrote:

> Steve Thompson wrote:
>> I have a bunch of machines with the LSI 1068E chip, and they _do_  
>> work
>> fine with the default drivers, for both 5.3 and 5.4
>
>
> I'm curious...   that chip [1] claims RAID 0/1/10/10e support and
> implies its hardware raid. Is the integrated RAID support in fact
> true raid, such that they present a single SCSI unit per logical  
> volume,
> or is it some form of fake raid which requires driver intervention to
> make it play?  If it is hardware raid, does the chip/hardware
> transparently handle rebuilds?  hot sparing?or does it rely on  
> BIOS
> and drivers to implement these features?

Most LSI cards are true RAID.

> I'd certainly be concerned about the lack of raid cache memory with a
> battery back option, and would tend to want to use them as JBOD and  
> use
> the operating system native mdraid instead ...

If there is no write-back cache then there is no problem and RAID10 is  
the best when there is no write-back cache.

It may be that the array wasn't defined properly or was offlined.

-Rosa
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Steve Thompson]

On Fri, 27 Nov 2009, Tait Clarridge wrote:

> Steve, did you configure RAID in the BIOS or use JBOD and create a SW
> raid in CentOS? I noticed from a previous post that you said it was
> working, the info may help Billy.

I've done it both ways (RAID-5, RAID-6 and JBOD). BTW, the LSI 1068E in my 
case were in Dell Perc 6/i controllers.

Steve

Steve Thompson E-mail:  smt AT vgersoft DOT com
Voyager Software LLC   Web: http://www DOT vgersoft DOT com
39 Smugglers Path  VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,300 miles per second: it's not just a good idea, it's the law"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Tait Clarridge]

On Fri, 2009-11-27 at 18:57 -0500, Steve Thompson wrote:
> On Fri, 27 Nov 2009, Billy Huddleston wrote:
> 
> > Great, which driver did you use and where can I get it... and was this for 
> > a 
> > 32bit or 64bit CentOS install?
> 
> It was 64-bit; I just used the regular CentOS installation CD's; no 
> special drivers at all.
> 
> Steve

Steve, did you configure RAID in the BIOS or use JBOD and create a SW
raid in CentOS? I noticed from a previous post that you said it was
working, the info may help Billy.


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Tait Clarridge]

On Fri, 2009-11-27 at 17:43 -0600, Frank Cox wrote:
> On Fri, 2009-11-27 at 15:06 -0800, MHR wrote:
> > Again, I'm no expert here, but if you can get a livecd image written
> > on a USB flash drive to boot, you should be able to get a netinstall
> > cd image to boot just as well, from a USB drive.  That "should" do the
> > trick (if it will boot at all).
> 
> I think that's the next thing I'm going to try.  The netinstall would be
> handier than the livecd, if I can make it work.
> 
> I was going for the Centos livecd simply because that's what I did to
> get Fedora on it and I figured I could just do the same thing again.
> Apparently not.

I sent a message about using unetbootin to get regular CD and DVDs
bootable off of USB without much work needed... if you didnt want to try
and round up an external DVD drive to use.



signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Steve Thompson]

On Fri, 27 Nov 2009, Billy Huddleston wrote:

> Great, which driver did you use and where can I get it... and was this for a 
> 32bit or 64bit CentOS install?

It was 64-bit; I just used the regular CentOS installation CD's; no 
special drivers at all.

Steve

Steve Thompson E-mail:  smt AT vgersoft DOT com
Voyager Software LLC   Web: http://www DOT vgersoft DOT com
39 Smugglers Path  VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,300 miles per second: it's not just a good idea, it's the law"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 15:06 -0800, MHR wrote:
> Again, I'm no expert here, but if you can get a livecd image written
> on a USB flash drive to boot, you should be able to get a netinstall
> cd image to boot just as well, from a USB drive.  That "should" do the
> trick (if it will boot at all).

I think that's the next thing I'm going to try.  The netinstall would be
handier than the livecd, if I can make it work.

I was going for the Centos livecd simply because that's what I did to
get Fedora on it and I figured I could just do the same thing again.
Apparently not.
-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 15:08 -0800, MHR wrote:
> This doesn't sound right.  You should be able to boot and run from the
> livecd image, whether on an actual CD or on a USB drive, but AFAIK
> livecd images *run*, they don't *install*.

When I boot the Centos livecd I get the white screen that was mentioned
earlier in this thread.

When I installed Fedora on my Acer Aspire One I booted the Fedora livecd
off of a flash drive and clicked on the "install to hard drive" icon
that was on the livecd's desktop.  I had planned to do the same thing
with Centos but can't because I get that white screen almost instantly
when I boot the livecd.  (I don't even get to see the initial grub
screen.)
-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

That's correct. I've not tried it JBOD as of yet.

Tait Clarridge wrote:

On Fri, 2009-11-27 at 18:11 -0500, Billy Huddleston wrote:
  

Yes, their is a RAID 10 volume setup in the controller BIOS.



A previous response suggested using JBOD mode. But maybe someone has
installed CentOS with the 1068E controller using a RAID mode.

If I understand the problem correctly, the CentOS installer is unable to
see your RAID volume?
  



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[John R Pierce]

Steve Thompson wrote:
> I have a bunch of machines with the LSI 1068E chip, and they _do_ work 
> fine with the default drivers, for both 5.3 and 5.4


I'm curious...   that chip [1] claims RAID 0/1/10/10e support and 
implies its hardware raid. Is the integrated RAID support in fact 
true raid, such that they present a single SCSI unit per logical volume, 
or is it some form of fake raid which requires driver intervention to 
make it play?  If it is hardware raid, does the chip/hardware 
transparently handle rebuilds?  hot sparing?or does it rely on BIOS 
and drivers to implement these features?

I'd certainly be concerned about the lack of raid cache memory with a 
battery back option, and would tend to want to use them as JBOD and use 
the operating system native mdraid instead ...




[1] 
http://www.lsi.com/storage_home/products_home/standard_product_ics/sas_ics/lsisas1068e/index.html


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Tait Clarridge]

On Fri, 2009-11-27 at 18:11 -0500, Billy Huddleston wrote:
> Yes, their is a RAID 10 volume setup in the controller BIOS.

A previous response suggested using JBOD mode. But maybe someone has
installed CentOS with the 1068E controller using a RAID mode.

If I understand the problem correctly, the CentOS installer is unable to
see your RAID volume?


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

Great, which driver did you use and where can I get it... and was this 
for a 32bit or 64bit CentOS install?


Thanks, Billy

Steve Thompson wrote:

On Fri, 27 Nov 2009, John R Pierce wrote:

  

I'm not familiar with that exact LSI chip, but most every LSI Logic
Fusion-MPT controller I've seen yet has worked just fine with the
default RHEL drivers.



I have a bunch of machines with the LSI 1068E chip, and they _do_ work 
fine with the default drivers, for both 5.3 and 5.4.


Steve

Steve Thompson E-mail:  smt AT vgersoft DOT com
Voyager Software LLC   Web: http://www DOT vgersoft DOT com
39 Smugglers Path  VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,300 miles per second: it's not just a good idea, it's the law"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Tait Clarridge]

> Again, experts, please correct me if I'm off-base here.  I'm not
> familiar with Fedora images, though I imagine that they operate the
> same general way as RH/CentOS images since they all share the same
> base code.

Not considering myself an expert, but the Fedora Live CD has an option
to install to the hard drive after booting it on a USB key.



signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

Yes, their is a RAID 10 volume setup in the controller BIOS.

Tait Clarridge wrote:

On Fri, 2009-11-27 at 17:35 -0500, Billy Huddleston wrote:
  
I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E 
controller.  I've googled all over the place and found a few different 
drivers for RHEL5 for it.. and tried a few of them.. Some will load, 
some complain that this isn't the correct version.. non of them work 
when it comes to showing Hard Drivers in the partition manager. The 
machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated.


Thanks, Billy




Have you setup any RAID volumes the controller BIOS/utility?
  



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Steve Thompson]

On Fri, 27 Nov 2009, John R Pierce wrote:

> I'm not familiar with that exact LSI chip, but most every LSI Logic
> Fusion-MPT controller I've seen yet has worked just fine with the
> default RHEL drivers.

I have a bunch of machines with the LSI 1068E chip, and they _do_ work 
fine with the default drivers, for both 5.3 and 5.4.

Steve

Steve Thompson E-mail:  smt AT vgersoft DOT com
Voyager Software LLC   Web: http://www DOT vgersoft DOT com
39 Smugglers Path  VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,300 miles per second: it's not just a good idea, it's the law"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[MHR]

On Fri, Nov 27, 2009 at 1:35 PM, Frank Cox  wrote:
>
> On Fri, 2009-11-27 at 11:36 -0800, Agile Aspect wrote:
>> I borrowed a USB DVD to do the install of CentOS 5.3 on the Acer One.
>> Unfortunately I don't know anything about livecd images.
>
> I'm starting to think I might have to do the same thing.  I managed to
> install Fedora on the Acer Aspire One from a livecd that I put on my usb
> flash drive and it "just worked", but this isn't and I'm doing the same
> thing now that I did before with Fedora.

This doesn't sound right.  You should be able to boot and run from the
livecd image, whether on an actual CD or on a USB drive, but AFAIK
livecd images *run*, they don't *install*.

Again, experts, please correct me if I'm off-base here.  I'm not
familiar with Fedora images, though I imagine that they operate the
same general way as RH/CentOS images since they all share the same
base code.

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[MHR]

On Fri, Nov 27, 2009 at 1:18 PM, Frank Cox  wrote:
>
>
> My Acer Aspire One has an internal hard drive and that's it.
>
> When I installed Fedora on it, I put a Fedora livecd on a usb flashdrive
> (the same one I'm trying to use for this job, in fact) and it just
> worked.
>

Well, yeah, that's what it's supposed to do.  When you boot from a
"livecd" image, that's all you're doing - booting from that image.  It
doesn't install anything.

> If I could get a netinstall or something going on this, that would suit
> me too.  But again, I have no external drives for it.

Again, I'm no expert here, but if you can get a livecd image written
on a USB flash drive to boot, you should be able to get a netinstall
cd image to boot just as well, from a USB drive.  That "should" do the
trick (if it will boot at all).

Someone, please, correct me if I'm wrong

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[John R Pierce]

Billy Huddleston wrote:
> I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E 
> controller.  I've googled all over the place and found a few different 
> drivers for RHEL5 for it.. and tried a few of them.. Some will load, 
> some complain that this isn't the correct version.. non of them work 
> when it comes to showing Hard Drivers in the partition manager. The 
> machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated.
>   

I'm not familiar with that exact LSI chip, but most every LSI Logic 
Fusion-MPT controller I've seen yet has worked just fine with the 
default RHEL drivers.

have you configured the drives in the BIOS of the SAS ?I believe you 
have to set them to be JBOD for everything to be happy, the raid modes 
on those LSI chips is generaly fake-raid with some hardware assist.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Tait Clarridge]

On Fri, 2009-11-27 at 17:35 -0500, Billy Huddleston wrote:
> I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E 
> controller.  I've googled all over the place and found a few different 
> drivers for RHEL5 for it.. and tried a few of them.. Some will load, 
> some complain that this isn't the correct version.. non of them work 
> when it comes to showing Hard Drivers in the partition manager. The 
> machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated.
> 
> Thanks, Billy
> 

Have you setup any RAID volumes the controller BIOS/utility?


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Tait Clarridge]

On Fri, 2009-11-27 at 15:18 -0600, Frank Cox wrote:
> On Fri, 2009-11-27 at 14:49 -0500, Tait Clarridge wrote:
> 
> > How did you create the Live USB?
> 
> http://fedoraproject.org/wiki/FedoraLiveCD/USBHowTo
> 
> I went through the "How to partition" and "How to format" sections,then
> the "Command Line Method - Linux only" subsection titled 
> "Run livecd-iso-to-disk script".
> > 
> > You may want to try using either a DVD install image or NetInstall
> > image
> > after backing up your netbooks drive.
> 
> My Acer Aspire One has an internal hard drive and that's it.

I know, so does my EEEpc. But I used Unetbootin (a package that is
available in Fedora (yum install unetbootin).

It allows you to create a Live USB using any CD or DVD image. So for
example, I could use unetbootin to get the CentOS 5.4 netinstall CD on
my USB key without having to anything but selecting the iso and USB
drive I want.

You will need to run it with root privileges though. But basically put
in the USB stick, fire up unetbootin and go from there.


Once you reboot onto the USB key just select the first option in the
unetbootin menu and it should launch the netinstall CD. You will
probably have to plug it into a wired network as well, I have never had
a netinstall disk working with wireless, especially in CentOS.


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.

[Billy Huddleston]

I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E 
controller.  I've googled all over the place and found a few different 
drivers for RHEL5 for it.. and tried a few of them.. Some will load, 
some complain that this isn't the correct version.. non of them work 
when it comes to showing Hard Drivers in the partition manager. The 
machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated.

Thanks, Billy

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPTABLES and Hi-Risk blocking

[John R. Dennison]

On Fri, Nov 27, 2009 at 01:52:31PM -0800, nate wrote:
> 
> As others have mentioned using a proxy would work..

Proxy would be the best as it offers a lot of additional
features such as logging ability to see how much time
people are wasting at work.  Squid setup as a transparent
proxy negates having to do any client-side setup and can
not be easily bypassed by clueful end-users.

> Other ways would be using iptables to block access to those
> domain's name servers so the names do not resolve at all(they could
> still access via IP..)

Not as easy as one would think; most sites in this day
and age are still going to require proper Host: headers
be sent I would think.

Blocking by server ip addresses or even authoratative DNS
servers for the domains you wish blocked are not ideal as
you have *no* control over these resources.  web server
or geoip redirectors / load balancers may change public
ip spaces and DNS servers are subject to similar.

> Also hosting the domains on your internal name server and pointing
> them to some internal address so that they can't be resolved as
> well could work.

I've done this in the past with great success; point them to
a "You've Been Busted Going To This Website" type page; access
logs can be processed to see who is trying to waste company
time with this solution also.  The only real problem with this
is ensuring that /etc/hosts or \Windows\system32\drivers\etc\hosts
(and whatever Macs use) resolution is properly locked down so that
clueful users can not resolve locally thus bypassing your DNS server.

> Often times client side antivirus/spyware programs can be configured
> to block things on the client side as well.

While this indeed can be done, and I've seen it used to good
effect it just adds to workloads if you ever change to another
AV solution down the road; the local DNS server is set and
forget.




John
-- 
It is not bigotry to be certain we are right; but it is bigotry to be unable
to imagine how we might possibly have gone wrong.
 -- G. K. Chesterton


pgpnZ5vJPpvxi.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPTABLES and Hi-Risk blocking

[Tim Nelson]

- "nate"  wrote:
> James B. Byrne wrote:
> 
> > Without debating the merits of such claims, how would one proceed
> to
> > block internal network access to specific domain names using
> CentOS?
> 
> Also hosting the domains on your internal name server and pointing
> them to some internal address so that they can't be resolved as
> well could work.
> 

I've used this many times where implementing a Squid proxy just wasn't an 
option. We ran an internal DNS server that was authoritative for any domains we 
didn't want users to access. Then, we use iptables to route all DNS traffic to 
that DNS server. Those domains would resolve, but to a specific IP that was 
configured to hand out a nastygram page saying "Blocked by the filter" etc...

Even when it isn't required at a particular installation, it's certainly fun to 
play with this at the office. :-)

Tim Nelson
Systems/Network Support
Rockbochs Inc.
(218)727-4332 x105
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] read only sftp access

[nate]

Andrei F wrote:
> Hi,
>
> I'm trying to setup read-only SFTP repo. The directory that I'm planning to
> make available via sftp needs to have only read-only access. My issue is
> that this specific directory is already available for read & write access
> but under different credentials. When I try to login via my read-only
> account, openssh spits out an error about incorrect permissions. Any idea
> how can I share the same directory via sftp under two different usernames
> under the same filesystem permissions?

Just make sure both the directory and the files in the directory
are not writable by "other" and make sure the account you want read
only access to is not the owner and is not in the group that owns
the files or directories and you'll be set.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPTABLES and Hi-Risk blocking

[nate]

James B. Byrne wrote:

> Without debating the merits of such claims, how would one proceed to
> block internal network access to specific domain names using CentOS?

As others have mentioned using a proxy would work..

Other ways would be using iptables to block access to those
domain's name servers so the names do not resolve at all(they could
still access via IP..)

Also hosting the domains on your internal name server and pointing
them to some internal address so that they can't be resolved as
well could work.

Often times client side antivirus/spyware programs can be configured
to block things on the client side as well.

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 11:36 -0800, Agile Aspect wrote:
> I borrowed a USB DVD to do the install of CentOS 5.3 on the Acer One.
> Unfortunately I don't know anything about livecd images.

I'm starting to think I might have to do the same thing.  I managed to
install Fedora on the Acer Aspire One from a livecd that I put on my usb
flash drive and it "just worked", but this isn't and I'm doing the same
thing now that I did before with Fedora.
-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 14:49 -0500, Tait Clarridge wrote:

> How did you create the Live USB?

http://fedoraproject.org/wiki/FedoraLiveCD/USBHowTo

I went through the "How to partition" and "How to format" sections,then
the "Command Line Method - Linux only" subsection titled 
"Run livecd-iso-to-disk script".
> 
> You may want to try using either a DVD install image or NetInstall
> image
> after backing up your netbooks drive.

My Acer Aspire One has an internal hard drive and that's it.

When I installed Fedora on it, I put a Fedora livecd on a usb flashdrive
(the same one I'm trying to use for this job, in fact) and it just
worked.

If I could get a netinstall or something going on this, that would suit
me too.  But again, I have no external drives for it.
-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Docx format ?

[MHR]

On Fri, Nov 27, 2009 at 5:37 AM, Sorin Srbu  wrote:
>
> So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS
> and OOO teams!

 Thanks for the laugh, Sorin!

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP updates

[Ian Forde]

On Fri, 2009-11-27 at 08:34 -0500, Bob McConnell wrote:
> Michael Kress wrote:
> > Craig White wrote:
> >> and if enough people actually convinced the developers that
> >> 5.2.9-2.el5.centos were feasible, then they would probably move it into
> >> the 'Extras' repository.
> > 
> > ... here's one trying to 'convince'! ;-)
> > I'm using that package from c5-testing since a month or so and I
> > encountered no problems.
> > Regards
> > Michael
> 
> I'll go one further. We run commercial web sites on CentOS 5.3 which 
> must also be PCI compliant. Because of the security issues, the auditors 
> have been complaining for two months that we don't have PHP 5.2.11 
> installed yet, putting our PCI certification in jeopardy. When 5.2.12 is 
> released, probably next month, we will have 30 days to get it installed.
> 
> We are trying to figure out how to handle this issue short of having to 
> compile PHP ourselves. That would violate the agreement we have with the 
> hosting service.

Bob - there are many of us that are in that situation, but it's actually
quite an easy requirement to satisfy.

Let's start with Upstream...

Because Upstream certifies/qualifies their fixes against known
vulnerabilities, you shouldn't get dinged on version number checking as
long as you're using up to date backported fix packages from Upstream.

Now... As long as CentOS has the same backported fixes to respond to the
same CVE vulnerabilities, you should be okay.  Just tell your auditors
to research "backports".

Check out the first 2 paragraphs of:
http://twiki.cpanel.net/twiki/bin/view/AllDocumentation/PCIComplianceInfo/ScanningSoftware

Also, search the mailing list archives... you'll find more information.
For proof of CVE fixes, do a:

rpm -q --changelog php |grep -i cve

As long as you've resolved outstanding known vulnerabilities, you should
be able to get exceptions/exemption granted for version numbers.

Of course, IANAL, and this does not constitute legal advise, but it's a
path that you can pursue for a speedier resolution of this issue rather
than go through the pain of finding php 5.2.10 rpms and qualifying them
yourself.

Remember - If it weren't for fixes from Upstream/CentOS, neither
Upstream nor CentOS would be able to be tested for compliancy without
MAJOR source-code hoops, which would defeat the purpose of using these
OSes in eCommerce in the first place! ;)

-I

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] read only sftp access

[Andrei F]

Hi,

I'm trying to setup read-only SFTP repo. The directory that I'm planning to
make available via sftp needs to have only read-only access. My issue is
that this specific directory is already available for read & write access
but under different credentials. When I try to login via my read-only
account, openssh spits out an error about incorrect permissions. Any idea
how can I share the same directory via sftp under two different usernames
under the same filesystem permissions?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Tait Clarridge]

On Fri, 2009-11-27 at 10:07 -0600, Frank Cox wrote:
> On Fri, 2009-11-27 at 10:54 -0500, Tait Clarridge wrote:
> > If you want wireless, Fedora is probably the easiest of the two.
> 
> It's my understanding that Centos now includes support for the wireless
> networking in the Acer Aspire One.
> 
> >  Any
> > specific reasons why you want CentOS on a netbook? More specifically
> > why
> > you want enterprise Linux on your netbook?
> 
> It's my last computer with Fedora on it.  Everything else now runs
> Centos.  So I figure that it it will work with Centos (which it
> apparently will) then I would like to have it match the rest of my
> stuff.

Alright. I can understand continuity. I personally keep CentOS for
servers and Fedora for desktops and laptops.

How did you create the Live USB?

You may want to try using either a DVD install image or NetInstall image
after backing up your netbooks drive.

I use uNetbootin to create USB images of DVDs & CDs for use in my
Epc. 



signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Agile Aspect]

I borrowed a USB DVD to do the install of CentOS 5.3 on the Acer One.
Unfortunately I don't know anything about livecd images.

On Thu, Nov 26, 2009 at 9:01 PM, Frank Cox  wrote:
> I currently have my Acer Aspire One netbook set up with Fedora 11.  I
> would like to change it over to Centos 5.4 if I can.
>
> I downloaded the Centos 5.4 i386 livecd image and made a bootable USB
> flash drive out of it.  Unfortunately, when I boot off of that flash
> drive, Grub (I guess) immediately turns the screen entirely white.  If I
> hit a key I can faintly see the outline of "Press tab to change options"
> or words to that effect.  (It's very faint and hard to read against the
> white background.)  That bit of text rapidly scrolls off of the top of
> the screen, so I assume that the rest of the boot-up messages are being
> printed.
>
> Hitting Ctrl-Alt-anyFkey does nothing for a while, then every keystroke
> beeps.  I can't get to a text terminal and I never see anything other
> than a completely white screen.
>
> Am I doing something wrong?  Fedora 11 works fine on this machine, and I
> installed that from a livecd.
>
> --
> MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
  Enjoy global warming while it lasts.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP updates

[John R Pierce]

Bob McConnell wrote:
> I'll go one further. We run commercial web sites on CentOS 5.3 which 
> must also be PCI compliant. Because of the security issues, the auditors 
> have been complaining for two months that we don't have PHP 5.2.11 
> installed yet, putting our PCI certification in jeopardy. When 5.2.12 is 
> released, probably next month, we will have 30 days to get it installed.
>   

If thats their requirement, then perhaps RHEL and its derivatives aren't 
the right platform for this.  Or, you shouldn't be using PHP at all.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPTABLES and Hi-Risk blocking

[Ryan Lynch]

On Fri, Nov 27, 2009 at 12:32, Eero Volotinen  wrote:
>
>>
>> Without debating the merits of such claims, how would one proceed to
>> block internal network access to specific domain names using CentOS?
>
> Using transparent proxy server is best way to block this kind of
> services. You can use squid package to setup transparent proxy server.


I agree with the parent poster. Squid (or any other advanced proxy
server) is probably the best way to deal with this. But for the sake
of argument--say, in case you can't use a proxy for some reason,
IPTables has some *limited* application, here.

IPTables will accept a DNS host/domain name in place of an IP address
in an 'iptables' command. But the rule it creates doesn't actually use
the DNS name--it just performs a lookup when you add the rule, and
then adds a rule for whatever IP address it found.

If Facebook only operated a single web server, and if the DNS hostname
'www.facebook.com' always resolved to that particular IP address, this
would work OK. You could either specifiy 'www.facebook.com' in your
IPTables blocking rule, or look up the IP address manually and specify
it directly in your rule.

The unfortunate reality is that FB operates dozens (maybe hundreds) of
web servers, and any given browser's HTTP request to
'www.facebook.com' might be answered by any one of those web servers.
And they don't use a straightforward, static DNS mechanism. The
'facebook.com' DNS servers will respond differently depending on where
the request originates and (I presume) on the current load status of
their global web server pool. So, under normal conditions, clients
will usually be directed to the closest (lowest-latency) web server.
And if your closest web server's load rises high enough, you be
instead directed to a further-away, less busy server.

I just took a few samples from a collection of servers I operate that
are scattered throughout the continental US, over the course of
several minutes. I see very little stability in the DNS responses, but
it appears that the pool is pretty small.

You could write a short script that runs from 'cron' every few minutes
and performs a DNS lookup for 'www.facebook.com', and adds the result
to a running list of FB IP addresses, and then adds another IPTables
blocking rule anytime it finds a new IP. This is similar to how some
popular anti-SSH-dictionary-attack-bot scripts operate. It's not
perfect, but it would be pretty effective, and it doesn't require much
effort.

Honestly, though, you're probably better off using Squid. If I had the
option, that's what I would do.

Good luck.

-Ryan
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Autofs cannot bind LDAP server

[Eric B.]

Hi,

I'm using Autofs and LDAP for mounting my home directories via nfs.  In 
general, everything seems to work fine.  However, I have one small problem. 
If I reboot my server using autofs while my LDAP server is down, I get the 
following error message in my logs:

 automount[3358]: bind_ldap_anonymous: lookup(ldap): Unable to bind to the 
LDAP server: (default), error Can't contact LDAP server

which is understandable, since my ldap server is temporarily down.

My problem, however, is that once my ldap server is back up, autofs never 
seems to retry to connect to it, so all my /home mounts fail.  Basically, it 
means I have to make sure that my LDAP server is never down while another 
server is rebooting.

I figure there must be something in the configuration file that would allow 
me to tweak this to indicate to autofs to recheck the ldap server 
periodically to see if it has come back up, but can't seem to find anything.

My /etc/sysconfic/autofs file is pretty plain:
# TIMEOUT - set the default mount timeout (default 600).
#
TIMEOUT=300

# LOGGING - set default log level "none", "verbose" or "debug"
#
LOGGING="verbose"

# Other common LDAP nameing
#
MAP_OBJECT_CLASS="automountMap"
ENTRY_OBJECT_CLASS="automount"
MAP_ATTRIBUTE="ou"
ENTRY_ATTRIBUTE="cn"
VALUE_ATTRIBUTE="automountInformation"


Is there anything I can do to force autofs to check to see if my LDAP server 
is back online?

Thanks,

Eric



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPTABLES and Hi-Risk blocking

[Eero Volotinen]

> 
> Without debating the merits of such claims, how would one proceed to
> block internal network access to specific domain names using CentOS?

Using transparent proxy server is best way to block this kind of 
services. You can use squid package to setup transparent proxy server.

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] IPTABLES and Hi-Risk blocking

[James B. Byrne]

We are considering whether or not to block internal access to social
networking and private entertainment web sites.  This not a policy
decision as of yet, just an exploratory exercise.

Our gateways run CentOS-5.4 and use iptables to enforce firewall
rules.  The information that we wish to determine is whether or not
it is feasible to block sites such as facebook, youtube, twitter,
etc. using iptables.  Is there a superior method?  Does there exist
already a generally accepted utility or method for accomplishing
this?

At the present time we only block outgoing traffic for a handful of
internal hosts that should never have any reason to generate traffic
destined outside the lan.  But, now we are advised by some
authorities that facebook and similar sites are considered security
risks to hosts that are used to access them.

Without debating the merits of such claims, how would one proceed to
block internal network access to specific domain names using CentOS?

Sincerely,

-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Eero Volotinen]

Frank Cox wrote:
> On Fri, 2009-11-27 at 10:54 -0500, Tait Clarridge wrote:
>> If you want wireless, Fedora is probably the easiest of the two.
> 
> It's my understanding that Centos now includes support for the wireless
> networking in the Acer Aspire One.
> 
>>  Any
>> specific reasons why you want CentOS on a netbook? More specifically
>> why
>> you want enterprise Linux on your netbook?
> 
> It's my last computer with Fedora on it.  Everything else now runs
> Centos.  So I figure that it it will work with Centos (which it
> apparently will) then I would like to have it match the rest of my
> stuff.

This is a bit offtopic, but latest UBuntu netbook remix runs nicely on 
Acer Aspire One.

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 10:54 -0500, Tait Clarridge wrote:
> If you want wireless, Fedora is probably the easiest of the two.

It's my understanding that Centos now includes support for the wireless
networking in the Acer Aspire One.

>  Any
> specific reasons why you want CentOS on a netbook? More specifically
> why
> you want enterprise Linux on your netbook?

It's my last computer with Fedora on it.  Everything else now runs
Centos.  So I figure that it it will work with Centos (which it
apparently will) then I would like to have it match the rest of my
stuff.
-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Tait Clarridge]

On Fri, 2009-11-27 at 09:41 -0600, Frank Cox wrote:
> On Fri, 2009-11-27 at 03:51 -0700, Craig White wrote:
> 
> > did you create that USB disk using Fedora or CentOS?
> 
> I created it using Centos 5.4.
> > 
> > does this relate?
> > https://fedoraproject.org/wiki/Fedora_11_Beta_release_notes#Live_Image_issues
> 
> The screenshot looks exactly like what I see.  Which is interesting
> considering that neither the image or the system it was created on has
> anything to do with Fedora 11.
> 
> > I can't think of any reason I would put CentOS on my Aspire One...I've
> > got it working well with F12 now
> 
> I seem to have a choice between reinstalling Fedora on it (because I
> can't get it to update to Fedora 12) or installing Centos on it.  Since
> they both involve a scratch install, I might as well install Centos on
> it so it will match my desktop machine.
> 

I know this is a CentOS list, but personally I would go for Fedora 12.
They have done some optimizations for netbooks and you will have get a
lot more functionality due to the drivers included with Fedora 12 vs
CentOS 5 (based on Fedora Core 6).

If you want wireless, Fedora is probably the easiest of the two. Any
specific reasons why you want CentOS on a netbook? More specifically why
you want enterprise Linux on your netbook?



signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Frank Cox]

On Fri, 2009-11-27 at 03:51 -0700, Craig White wrote:

> did you create that USB disk using Fedora or CentOS?

I created it using Centos 5.4.
> 
> does this relate?
> https://fedoraproject.org/wiki/Fedora_11_Beta_release_notes#Live_Image_issues

The screenshot looks exactly like what I see.  Which is interesting
considering that neither the image or the system it was created on has
anything to do with Fedora 11.

> I can't think of any reason I would put CentOS on my Aspire One...I've
> got it working well with F12 now

I seem to have a choice between reinstalling Fedora on it (because I
can't get it to update to Fedora 12) or installing Centos on it.  Since
they both involve a scratch install, I might as well install Centos on
it so it will match my desktop machine.

-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Xen 3.4.1/3.4.2 and newer libvirt for Centos 5.4

[Joseph L. Casale]

>Is ther any repo wher I find xen 3.4.1 or 3.4.2  and newer libvirt for
>Centos 5.4 i386.

http://www.gitco.de/repo/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP updates

[Rob Kampen]

Michael Kress wrote:

Craig White wrote:
  

and if enough people actually convinced the developers that
5.2.9-2.el5.centos were feasible, then they would probably move it into
the 'Extras' repository.



... here's one trying to 'convince'! ;-)
I'm using that package from c5-testing since a month or so and I
encountered no problems.
Regards
Michael

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
I also updated to php-5.2.9 from the c5-testing repo - it was installed 
just fine and everything is still working (my own php site, cms made 
simple v1.6.6, gallery v2) so I am happy to see this move to extras. 
Thanks guys.
<>___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP updates

[Karanbir Singh]

On 11/27/2009 01:34 PM, Bob McConnell wrote:
> We are trying to figure out how to handle this issue short of having to
> compile PHP ourselves. That would violate the agreement we have with the
> hosting service.

The whole PCI DSS issue is fairly important to many people at the 
moment, and wht does not help is the general brain-dead'ness shown by 
many of the so-called-experts doing the scans / checks.

Having said that, I *do* realise its a big deal and (a) we as a group of 
people should be able to address is, since its something that impacts so 
many and (b) most likely have the resources to do whatever is needed for 
(a). So if you want to extend your 'we' to be 'we, the centos community' 
- you have my attention and I know almost everyone else around here as well.

How about putting some ideas together on what needs to be done as a 
whole, on the wiki - even if one idea might be to better educate the 
people running these scans. Maybe even go one step further: setup the 
wiki page, bring some people together who have $clue >0 and have a bit 
of time, a few hours per week is plenty. And lets start thrashing out 
the possible solution paths for the hundreds of people in the 'problem 
area'.

I'd be happy to work with such a group of people. And I've read the PCI 
spec requirements.

Disclaimer: I dont have any use for or the requirement to meet any pci 
standards, but I am slightly concerned that too many people are trying 
too hard to work on this in silo's where its clear that having a central 
resource pool would be both a clear win and a massive saving on 
individual resources.

-- 
Karanbir Singh
London, UK| http://www.karan.org/ | twitter.com/kbsingh
ICQ: 2522219  | Yahoo IM: z00dax  | Gtalk: z00dax
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Best way to secure apache web root

[Peter Peltonen]

Hi,

On Fri, Nov 27, 2009 at 12:46 PM, Stephen Nelson-Smith
 wrote:
> I have a site running drupal.  The apache user therefore needs to be
> able to write certain files (CSS files for example).
>
> I also have a directory under my web root which is a SAN mount, to
> which apache must be able to write.
>
> What is the most secure way to implement this?
>
> I am thinking:
>
> chown -R root:apache /var/www/html
> chmod -R 0750 /var/www/html
> chown apache:apache for where need to write
>
> Is there a better way?

What is usually a good approach is to setup specific directories where
Apache can write (like "files" or "images") and then disable PHP/other
code execution from that directory. So if someone is able to hack your
web app and upload something (malicious code) into that directory, it
won't get executed.

To put it briefly: keep your executable code and upload directories separate.

Cheers,
Peter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Docx format ?

[Sorin Srbu]

>-Original Message-
>From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
>Of Sorin Srbu
>Sent: Friday, November 27, 2009 9:22 AM
>To: 'CentOS mailing list'
>Subject: Re: [CentOS] Docx format ?
>
>>> What about Powerpoint presentations, ie .pptx-files? Do they look anywhere
>>> near the original look when opened in MS Office?
>>>
>>No clue - haven't run into one of those yet.
>>
>Anyway, I'll continue to look into OOO and pptx.

Downloaded and installed OOO3.1 on a CentOS 5.4 i386 I had here. After some 
initial foul ups on my part (had OOO2 already installed, and had to first 
uninstall the older one and then do a forced manual rpm-install of OOO3.1), 
this is what I've found.

I got a pptx-file from my boss with pictures and formatting and whatnot. It 
opened fine in CentOS. Some formatting was plain lost, but the pictures were 
all there, as far as I can tell. Some graphics, like arrows and such did not 
get through and looked like something from the 80s block graphics era.

Some text got printed over other parts of the text, however I've a inkling 
this might be due to the screen size maybe?

I also opened the same pptx with OOO3.1 on my WinXP-machine, and got a blank 
white screen, in slide show-mode.

So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS 
and OOO teams!
-- 
/Sorin


smime.p7s
Description: S/MIME cryptographic signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP updates

[Bob McConnell]

Michael Kress wrote:
> Craig White wrote:
>> and if enough people actually convinced the developers that
>> 5.2.9-2.el5.centos were feasible, then they would probably move it into
>> the 'Extras' repository.
> 
> ... here's one trying to 'convince'! ;-)
> I'm using that package from c5-testing since a month or so and I
> encountered no problems.
> Regards
> Michael

I'll go one further. We run commercial web sites on CentOS 5.3 which 
must also be PCI compliant. Because of the security issues, the auditors 
have been complaining for two months that we don't have PHP 5.2.11 
installed yet, putting our PCI certification in jeopardy. When 5.2.12 is 
released, probably next month, we will have 30 days to get it installed.

We are trying to figure out how to handle this issue short of having to 
compile PHP ourselves. That would violate the agreement we have with the 
hosting service.

Bob McConnell
N2SPP
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Best way to secure apache web root

[Stephen Nelson-Smith]

Hi,

>> What is the most secure way to implement this?
>>
>> I am thinking:
>>
>> chown -R root:apache /var/www/html
>> chmod -R 0750 /var/www/html
>> chown apache:apache for where need to write
>
> Yes, use acl and selinux.

Could you expand?  Have you an example you could point me at?  I'm
happy to read any relevant documentation, but having a map helps.

S.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Best way to secure apache web root

[Eero Volotinen]

Stephen Nelson-Smith wrote:
> I have a site running drupal.  The apache user therefore needs to be
> able to write certain files (CSS files for example).
> 
> I also have a directory under my web root which is a SAN mount, to
> which apache must be able to write.
> 
> What is the most secure way to implement this?
> 
> I am thinking:
> 
> chown -R root:apache /var/www/html
> chmod -R 0750 /var/www/html
> chown apache:apache for where need to write

Yes, use acl and selinux.

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP updates

[Michael Kress]

Craig White wrote:
> and if enough people actually convinced the developers that
> 5.2.9-2.el5.centos were feasible, then they would probably move it into
> the 'Extras' repository.

... here's one trying to 'convince'! ;-)
I'm using that package from c5-testing since a month or so and I
encountered no problems.
Regards
Michael

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [OT] - Estrutura de armazenamento de uma grande quantidade de arquivos

[Fábio Jr.]

Desculpem, participo das duas, e me enganei no email.

Sorry for this, I participate on both lists, and send for the wrong
email address.

[]s

-- 
Fábio da Silva Júnior - fjuniorli...@gmail.com
- http://fabioojunior.wordpress.com -



Luciano Rocha escreveu:

  On Fri, Nov 27, 2009 at 09:42:54AM -0200, "Fábio Jr." wrote:
  
  
Olá pessoal,

  
  
Posts para esta lista devem ser feitos em Inglês.

Posts to this list must be done in English.

Cumprimentos,
Luciano Rocha

  




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [OT] - Estrutura de armazenamento de uma grande quantidade de arquivos

[Luciano Rocha]

On Fri, Nov 27, 2009 at 09:42:54AM -0200, "Fábio Jr." wrote:
> Olá pessoal,

Posts para esta lista devem ser feitos em Inglês.

Posts to this list must be done in English.

Cumprimentos,
Luciano Rocha

-- 
lfr
0/0


pgpA2uWZ0v118.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] [OT] - Estrutura de armazenamento de uma grande quantidade de arquivos

[Fábio Jr.]

Olá pessoal,

Desculpem o off-topic, mas não sabia onde postar minha dúvida. Se alguém 
tiver uma sugestão de lista para postar essa dúvida eu agradeço.

O sistema do qual administro os servidores, possui uma funcionalidade 
que é exibição de imagens cadastradas pelos usuários. Estas imagens são 
armazenadas atualmente em um único diretório, e são gravadas com um 
número (ex.:123456.jpg), em um storage rodando centOS.(até q não é tão 
off-topic assim).

O problema é que a quantidade de imagens já passa de 4 milhões de 
arquivos. Cada imagem antes de ser armazenada, é tratada, e salva em 3 
tamanhos diferentes. Ou seja, existem 3 cópias de cada arquivos (4 
milhões / 3).

Espaço em disco não é problema, já que estas imagens são pequenas. O 
problema maior é a quantidade mesmo, e a organização. A medida que o 
numero de arquivos aumenta, fica pior para o SO buscar essa foto. Pra 
piorar a situação, os servidores de aplicação montam via nfs este 
storage para buscar os arquivos.

Finalmente, o que venho pedir a lista seriam sugestões de como melhorar 
a indexação/organização destes arquivos. Já pensei em utilizar 
armazenamento distribuído (SAN, cloud, GlusterFS), organização por 
pastas com AliasMatch do apache para recuperá-las depois e armazenamento 
em banco de dados.

Qualquer sugestão é bem vinda.

Obrigado.

[]s

-- 
Fábio da Silva Júnior - fjuniorli...@gmail.com
- http://fabioojunior.wordpress.com -

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Xen 3.4.1/3.4.2 and newer libvirt for Centos 5.4

[f...@ll]

Hi,

Is ther any repo wher I find xen 3.4.1 or 3.4.2  and newer libvirt for 
Centos 5.4 i386.

f...@ll

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Amavisd and ClamAV

[Tony Molloy]

On Friday 27 November 2009 09:49:54 John Doe wrote:
> From: Tony Molloy 
>
> > Things work OK with the exception of clamav. When I start  clamav I get
> > the following error.
> > [r...@newgoext ~]# service clamd.amavisd start
> > Starting clamd.amavisd: ERROR: Missing argument for option at line 2
> > ERROR: Can't open/parse the config file /etc/clamd.avisd.conf
> >[FAILED]
> > As this is a test server I'v set selinux to permissive so it doesn't look
> > like a selinux problem.
>
> So, did you check the file /etc/clamd.d/amavisd.conf ?
>
> JD
>

Yep. It was a parse error in the installed file not an open error.

cat /etc/clamd.avisd.conf

# Use system logger.
#LogSyslog

# Specify the type of syslog messages - please refer to 'man syslog'
# for facility names.
LogFacility LOG_MAIL

# This option allows you to save a process identifier of the listening
# daemon (main thread).
PidFile /var/run/amavisd/clamd.pid

# Remove stale socket after unclean shutdown.
# Default: disabled
#FixStaleSocket

# Run as a selected user (clamd must be started by root).
User amavis

# Path to a local socket file the daemon will listen on.
LocalSocket /var/spool/amavisd/clamd.sock


When I commented out LogSyslog and FixStaleSocket it started ok.

Thanks for stating the obvious sometimes that's the hardest thing to see ;-)

Tony


>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos



-- 

Dept. of Comp. Sci.
University of Limerick.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[Craig White]

On Thu, 2009-11-26 at 23:01 -0600, Frank Cox wrote:
> I currently have my Acer Aspire One netbook set up with Fedora 11.  I
> would like to change it over to Centos 5.4 if I can.
> 
> I downloaded the Centos 5.4 i386 livecd image and made a bootable USB
> flash drive out of it.  Unfortunately, when I boot off of that flash
> drive, Grub (I guess) immediately turns the screen entirely white.  If I
> hit a key I can faintly see the outline of "Press tab to change options"
> or words to that effect.  (It's very faint and hard to read against the
> white background.)  That bit of text rapidly scrolls off of the top of
> the screen, so I assume that the rest of the boot-up messages are being
> printed.
> 
> Hitting Ctrl-Alt-anyFkey does nothing for a while, then every keystroke
> beeps.  I can't get to a text terminal and I never see anything other
> than a completely white screen.
> 
> Am I doing something wrong?  Fedora 11 works fine on this machine, and I
> installed that from a livecd.

did you create that USB disk using Fedora or CentOS?

does this relate?
https://fedoraproject.org/wiki/Fedora_11_Beta_release_notes#Live_Image_issues

Your description of the problem reminded me exactly of the problem I had
when I tried to do the same thing to install F11 Beta

I can't think of any reason I would put CentOS on my Aspire One...I've
got it working well with F12 now

Craig



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Res: my mail is refusing messages

[Nelson Gonzaga]

Robert,
its works fine!!!

tks,




De: Robert 
Para: CentOS mailing list 
Enviadas: Quinta-feira, 19 de Novembro de 2009 15:19:21
Assunto: Re: [CentOS] my mail is refusing messages



Eero Volotinen wrote:
> Nelson Gonzaga wrote:
>  
>> Hi there,
>> I trying to send e-mail using this:
>>
>> mail -s "maillog" ngonz...@yahoo.com  < 
>> /var/log/maillog
>>
>> but sendmail refused and I don't know why, see my maillog:
>>
>> Nov 19 14:31:33 servertdoc sendmail[11258]: nAJGVXXi011258: from=root, 
>> size=353085, class=0, nrcpts=1, 
>> msgid=<200911191631.najgvxxi011...@servertdoc.toshiba.fmg>, 
>> relay=r...@localhost
>>
>> Nov 19 14:31:33 servertdoc sendmail[11258]: nAJGVXXi011258: 
>> to=ngonz...@yahoo.com, ctladdr=root (0/0), delay=00:00:00, 
>> xdelay=00:00:00, mailer=relay, pri=383085, relay=[127.0.0.1] 
>> [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
>>
>> There is some wrong setup, what can be?
>>
>
> Yes, you need to setup smarthost correctly and start sendmail ..
>  
I recently solved this one using a small program named "email", 
available at http://www.cleancode.org/projects/email

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



  

Veja quais são os assuntos do momento no Yahoo! +Buscados
http://br.maisbuscados.yahoo.com___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Best way to secure apache web root

[Stephen Nelson-Smith]

I have a site running drupal.  The apache user therefore needs to be
able to write certain files (CSS files for example).

I also have a directory under my web root which is a SAN mount, to
which apache must be able to write.

What is the most secure way to implement this?

I am thinking:

chown -R root:apache /var/www/html
chmod -R 0750 /var/www/html
chown apache:apache for where need to write

Is there a better way?

S.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 5.4 on Acer Aspire One

[MHR]

On Thu, Nov 26, 2009 at 9:01 PM, Frank Cox  wrote:
> I currently have my Acer Aspire One netbook set up with Fedora 11.  I
> would like to change it over to Centos 5.4 if I can.
>
> I downloaded the Centos 5.4 i386 livecd image and made a bootable USB
> flash drive out of it.  Unfortunately, when I boot off of that flash
> drive, Grub (I guess) immediately turns the screen entirely white.  If I
> hit a key I can faintly see the outline of "Press tab to change options"
> or words to that effect.  (It's very faint and hard to read against the
> white background.)  That bit of text rapidly scrolls off of the top of
> the screen, so I assume that the rest of the boot-up messages are being
> printed.
>
> Hitting Ctrl-Alt-anyFkey does nothing for a while, then every keystroke
> beeps.  I can't get to a text terminal and I never see anything other
> than a completely white screen.
>
> Am I doing something wrong?  Fedora 11 works fine on this machine, and I
> installed that from a livecd.
>

I'm not an expert on this, but IIRC, the CentOS live CD is not for
installation at all, just for running CentOS live on a machine to see
if it will work with said machine as if it were actually installed
with the stock release drivers.  To install, you should use the CentOS
installation CD set or DVD.

Also, IIRC, Fedora 11 is at least 3 (or 5) generations of Fedora ahead
of the base Red Hat for CentOS 5.  Fedora 10 is supposed to be the
base system for RH 6.

What you might try is backing up everything on your hard drive,
install CentOS (reformatting the drive and all), and then locating any
drivers you need that might be missing.  This works better for older
laptops since the CentOS (Red Hat) 5 drivers are not necessarily the
L&G you might need for a new machine, like a netbook.

Personally, I would not bother putting an OS on a netbook that didn't
come with it, but I also would not get a netbook at all - they are
simply too small for me (vision issues, I like bigger screens, need
larger fonts, etc.).

I bought an Everex refurb laptop on ebay recently, for mucho cheap,
that, although it is not the hottest, fastest bugger around, has a
15.6" widescreen that is crystal clear, CentOS runs it just as well as
the Ubuntu that came on it, and the only problem I have with it now is
that the mike and phones plugs don't work., and those are under
warranty

Just my $0.02 or $0.03

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 5 and DRPM

[Janez Kosmrlj]

OK I figgured out the client part. But unfortunately this was the easy part.
I still can't figure out, what i'm doing wrong on the server.
I tried installing deltarpm package from epel and the newest createrepo
package from atrpms (deltarpm from here won't install because it is build
against a newer rpm package and I don't like to change the rpm package on my
system).
But when i run:* createrepo --database  --deltas  -s sha --oldpackagedirs
/dir /dir* i get some obscure python errors, that I can't figure out.

I tried the same commandon on an fedora 11 machine wiht the default fedora
packages installed and it works without problems. As far as i can see the
versions of createrepo on fedora and centos (the atrpms package) are the
same. the only different part is the python version, but that shouldn't be
the problem, since I looked at the .spec file from createrepo and it only
requires python 2.1 and centos has 2.4.

Does someone have a newer createrepo rpm package, that works on centos?

BR

On Thu, Nov 26, 2009 at 6:38 AM, Janez Kosmrlj
wrote:

> Do you have some manual or howto you used to do it? Like i said, there is
> wery litle info on the web, how to do it.
>
>
>
> On Wed, Nov 25, 2009 at 3:06 PM, Farkas Levente wrote:
>
>> On 11/25/2009 01:00 PM, Janez Kosmrlj wrote:
>> > Has anybody successfully implemented DRPMs on centos 5.x?
>> > I searched the net and I found a few indications that it is possible,
>> > but there is very little info how to do it.
>> >
>> > Just to be clear. With DRPMs i mean deltaRPMs. And with implementation i
>> > mean What yum plugins are necessary and what has to be done on the yum
>> > repository to make it work.
>>
>> yes i do. yum-presto and deltarpm are easy but you've to build a custom
>> createrepo packages.
>>
>> --
>>  Levente   "Si vis pacem para bellum!"
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Amavisd and ClamAV

[John Doe]

From: Tony Molloy 
> Things work OK with the exception of clamav. When I start  clamav I get the 
> following error.
> [r...@newgoext ~]# service clamd.amavisd start
> Starting clamd.amavisd: ERROR: Missing argument for option at line 2
> ERROR: Can't open/parse the config file /etc/clamd.d/amavisd.conf
>[FAILED]
> As this is a test server I'v set selinux to permissive so it doesn't look 
> like 
> a selinux problem.

So, did you check the file /etc/clamd.d/amavisd.conf ?

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Amavisd and ClamAV

[Tony Molloy]

Hi,

I want to move my mail server from sendmail to postfix over christmas. I've 
got a test server running with the following:

postfix dovecot postgrey amavisd-new clamav spamassassin

I've followed the howto's on the wiki  with the 
exception that I installed amavisd-new and clamav from the EPEL repo rather 
than rpmforge.

Things work OK with the exception of clamav. When I start  clamav I get the 
following error.

[r...@newgoext ~]# service clamd.amavisd start
Starting clamd.amavisd: ERROR: Missing argument for option at line 2
ERROR: Can't open/parse the config file /etc/clamd.d/amavisd.conf
   [FAILED]

As this is a test server I'v set selinux to permissive so it doesn't look like 
a selinux problem.

Thanks,

Tony

--

Dept. of Comp. Sci.
University of Limerick.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] OT: Using route metrics under dhcpd.conf

[carlopmart]

Hi all,

  Somebody knows how can I assign metric to a static router under dhcpd.conf?

Many thanks...
-- 
CL Martinez
carlopmart {at} gmail {d0t} com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Docx format ?

[Sorin Srbu]

>-Original Message-
>From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
Behalf
>Of mark
>Sent: Thursday, November 26, 2009 5:44 PM
>To: CentOS mailing list
>Subject: Re: [CentOS] Docx format ?
>
>>> Open Office 3 will do it.
>>> Yep, as well as .xlsx
>>
>> What about Powerpoint presentations, ie .pptx-files? Do they look
anywhere
>> near the original look when opened in MS Office?
>>
>No clue - haven't run into one of those yet.
>
>> I'm looking into setting up a public computer in our seminar room,
running
>> CentOS on an old door-stopper I had handy; a P3/500 with barely 500MB
RAM.
>>
>Barely, he says. "Barely"
>
>   mark, remembering the hot new ->30MB<- h/d his bosses gave him
>   in '89 as a holiday present

Actually, I had to swap the disks to a newer machine, the obsolete Dell I
had intended for this had a problem with the BIOS or something, so that
whenever it rebooted it went into some kind of standby and I had to first
turn it off completely and then turn it on again. So much for being
environmentally aware and friendly to the nature by reusing old hardware...
/8-}

Anyway, I'll continue to look into OOO and pptx.
-- 
/Sorin


smime.p7s
Description: S/MIME cryptographic signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos