Re: [CentOS-docs] EdHeron/DomU_LVM_NTFS_resize
From: Fabian Arrotin, Monday, February 08, 2010 12:52 PM Ed Heron wrote: Please, if anybody has time, take a look at http://wiki.centos.org/EdHeron/DomU_LVM_NTFS_resize Contructive criticism welcome. Well, why using ntfsprog when the Windows guest can resize the FS itself with diskpart ? (of course, if it's not on the system/boot disk) ... I've always only used lvextend and then used that in the VM itself (for Windows guests, that is) Thanks. I didn't realize that was supported. I'll check it out. -- Fabian Arrotin test -e /dev/human/brain || ( echo 1 /proc/sys/kernel/sysrq ; echo c /proc/sysrq-trigger ) ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
[CentOS-announce] CESA-2010:0088 Important CentOS 5 x86_64 kvm Update
CentOS Errata and Security Advisory 2010:0088 Important
Upstream details at : http://rhn.redhat.com/errata/RHSA-2010-0088.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( md5sum Filename )
x86_64:
79704ae0e59d7ca2c76c96e087fe94b7 kmod-kvm-83-105.el5_4.22.x86_64.rpm
1e848a0873b1d28fe87945202e8ea483 kvm-83-105.el5_4.22.x86_64.rpm
be5796fe492fcb764c5ffd0b662298ba kvm-qemu-img-83-105.el5_4.22.x86_64.rpm
ca27435ea4a07209579fc9518901a2c7 kvm-tools-83-105.el5_4.22.x86_64.rpm
Source:
f5b9b0b74caf41a66786f047cb2e17e8 kvm-83-105.el5_4.22.src.rpm
--
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net
___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2010:0094 Critical CentOS 4 i386 HelixPlayer - security update
CentOS Errata and Security Advisory CESA-2010:0094 HelixPlayer security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0094.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/HelixPlayer-1.0.6-1.el4_8.1.i386.rpm source: updates/SRPMS/HelixPlayer-1.0.6-1.el4_8.1.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update HelixPlayer Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B pgp4UlWU6PJOd.pgp Description: PGP signature ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2010:0094 Critical CentOS 4 x86_64 HelixPlayer - security update
CentOS Errata and Security Advisory CESA-2010:0094 HelixPlayer security update for CentOS 4 x86_64: https://rhn.redhat.com/errata/RHSA-2010-0094.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/HelixPlayer-1.0.6-1.el4_8.1.i386.rpm source: updates/SRPMS/HelixPlayer-1.0.6-1.el4_8.1.src.rpm You may update your CentOS-4 x86_64 installations by running the command: yum update HelixPlayer Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B pgp6HUsgqiWjG.pgp Description: PGP signature ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
Re: [CentOS-virt] Can I use direct attached storage as a shared filesystem in Xen
I want to make the 10 terabytes raid an xfs filesystem and then share the drive with all 4 of the vm's. 3 of the servers will be samba servers and one will be my Lotus notes server. I want to make the filesystem /data and then each one of the servers will use specific sub directories. I have it set up as block devices now but I want the flexibility of having the whole 10 terabytes available to all 4 servers. On Tue, Feb 9, 2010 at 1:28 AM, Christopher G. Stach II c...@ldsys.netwrote: - Adam Adamou adam0...@gmail.com wrote: either nfs or ocfs2. nfs is the easiest route. ocfs2 will give you a clustered filesystem. Except NFS doesn't follow normal filesystem semantics and you can end up with corrupt data without knowing it, and it, along with CIFS, will give you a free shitload of network overhead to go along with your possibly corrupt data. OCFS2 or GFS are the only practical choices if you want it to behave like a typical filesystem and not have to worry about catering to it or rewriting software and/or reeducating developers, and OCFS2 is extremely easy to set up. The original question didn't specify much about the requirements, though. A single shared filesystem? Read-write or read-only? No filesystem at all? Without that information, I would at first recommend not sharing. It can be a lot of trouble, it's usually not required, and it severely complicates life when things fail. Well, there is always XenFS... :/ -- Christopher G. Stach II http://ldsys.net/~cgs/ http://ldsys.net/%7Ecgs/ ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-virt] Can I use direct attached storage as a shared filesystem in Xen
So how do I go about doing this? My servers are already set up as 4 virtual machines on xen. Each one of them have a block device setup for the data. Can I remove those block devices and then set up the GFS or do I have to start all over again? On Tue, Feb 9, 2010 at 10:13 AM, Rich rhd...@gmail.com wrote: I want to make the 10 terabytes raid an xfs filesystem and then share the drive with all 4 of the vm's. 3 of the servers will be samba servers and one will be my Lotus notes server. I want to make the filesystem /data and then each one of the servers will use specific sub directories. I have it set up as block devices now but I want the flexibility of having the whole 10 terabytes available to all 4 servers. On Tue, Feb 9, 2010 at 1:28 AM, Christopher G. Stach II c...@ldsys.netwrote: - Adam Adamou adam0...@gmail.com wrote: either nfs or ocfs2. nfs is the easiest route. ocfs2 will give you a clustered filesystem. Except NFS doesn't follow normal filesystem semantics and you can end up with corrupt data without knowing it, and it, along with CIFS, will give you a free shitload of network overhead to go along with your possibly corrupt data. OCFS2 or GFS are the only practical choices if you want it to behave like a typical filesystem and not have to worry about catering to it or rewriting software and/or reeducating developers, and OCFS2 is extremely easy to set up. The original question didn't specify much about the requirements, though. A single shared filesystem? Read-write or read-only? No filesystem at all? Without that information, I would at first recommend not sharing. It can be a lot of trouble, it's usually not required, and it severely complicates life when things fail. Well, there is always XenFS... :/ -- Christopher G. Stach II http://ldsys.net/~cgs/ http://ldsys.net/%7Ecgs/ ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-virt] Can I use direct attached storage as a shared filesystem in Xen
I am doing rsync now. What is the difference between ocf2 and gfs? On Tue, Feb 9, 2010 at 1:28 PM, Adam Adamou adam0...@gmail.com wrote: Keep it simple. ocfs2 - very easy to configure clustered filesystem and drbd for replication or rsync them nightly(depending how much data you can afford to lose). Something to keep in mind for drbd - You must have backups! - Your second server will be replicating what you have on your primary. For example, you accidentally remove some files and it gets synced to the backup you get screwed. my .02 -Adam On Tue, Feb 9, 2010 at 12:46 PM, Christopher G. Stach II c...@ldsys.net wrote: - Rich rhd...@gmail.com wrote: I think the better question is this. How can I make my 2 physical servers that are identical into the best clustered solution sharing the storage between the 2. Do you want the storage to be redundant between the two like RAID 1 or just all of it accessible to any guest on either machine like a JBOD? For either, you can use a suitable mix of drbd, iSCSI, GNBD, LVM, heartbeat, keepalived, and a clustered filesystem. If you do the latter, remember that this squares your risk. If you want a simple A/B failover setup where the second physical host is idle until the first physical host fails, you can just use drbd and heartbeat or RHCS. They all use xfs. I want to keep the guests the same on each server. I will start with the backup server. I will go on each vm and delete this FS and block device. I then want make that whole 10 terabyte raid into one gfs and then re-attach it back to each guest. Is that possible or do I have to start all over again? If it can be done I then will sync the date from the mainserver to this backup server and then switch them and do the same to the mainserver. That sounds about right. You need to make your backups (!), destroy the data on of your servers by creating the new clustered filesystem, copy the data from the other server, and then share it with your reconfigured guests. So, basically what you said. I have one more question which is another whole thread. I am using rsync to sync the 2 physical boxes now. Is there a better way to do this? drbd, but rsync does a pretty good job in a lot of use cases. I wouldn't say that it fits this one, though. -- Christopher G. Stach II http://ldsys.net/~cgs/ http://ldsys.net/%7Ecgs/ ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
[CentOS-es] Instalar HP LaserJet p1006
Buenas... Para todos aquellos que tuvieron que luchar con HPLIP para poder instalar una impresora HP Laserjet modelo p1006 o 1020 y estas tras un proxxy, aca va una ayuda. En primer instancia ir a http://hplipopensource.com/hplip-web/install/manual/distros/centos.html y seguir todos los pasos... En segunda instancia ir al sitio http://www.linuxprinting.org/download/printdriver/auxfiles/HP/plugins/ y descargar el archivo correspondiente que en este caso es hplip-3.9.12-plugin.run y hplip-3.9.12-plugin.run.asc Una ves descargado tenes que ejecutarlo como root # sh nombre_del_archivo desde el path donde lo hayas descargado. Reinicia el equipo teniendo la impresora conectada y prendida y listo. Espero que sirva de ayuda ¡Obtén la mejor experiencia en la web! Descarga gratis el nuevo Internet Explorer 8. http://downloads.yahoo.com/ieak8/?l=e1___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Respaldar uns servidor web con SSH y SCP
hola amigos No esta entre los temas que estan tratando, pero necsito ayuda tengo problemas con mi correo hay correos que me llegan otros no, ya me ha ocasionado varios problemas. Con que lineas de comnados puedo revisa que sucede mi Servidor de correos es Centos 5 att. Elsa Date: Mon, 8 Feb 2010 16:17:00 -0400 From: bortol...@gmail.com To: centos-es@centos.org Subject: Re: [CentOS-es] Respaldar uns servidor web con SSH y SCP tu solución es utilizar rsync con autenticación llave privada/pública. http://es.wikipedia.org/wiki/Rsync http://www.vicente-navarro.com/blog/2008/01/13/backups-con-rsync/ http://www.vicente-navarro.com/blog/2008/01/13/autentificacion-trasparente-por-clave-publicaprivada-con-openssh/ 2010/2/8 Walvis AM walvi...@gmail.com Hola amigos, necesito nuestra ayuda nuevamente Necesito saber que comando debo usar para respaldar un servidor Web usando SSH y SCP? me ayudan con la línea de comandos y una explicación para pode entender. gracias salu2 -- Ing. Walvis Acosta Dpto. Técnico IQ-Tech Telef: (02) 2594943 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Saludos, Carlos Bortolini Acurumo Cel +591 766-69617 Email: bortol...@gmail.com Santa Cruz - Bolivia _ Explore the seven wonders of the world http://search.msn.com/results.aspx?q=7+wonders+worldmkt=en-USform=QBRE___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS-es] Problema con SAMBA-LDAP
Hola... estoy tratando de montar mi PDC sobre Centos 5.3, segui paso a paso el tutorial http://www.alcancelibre.org/staticpages/index.php/SAMBALDAP-CENTOS5 muy bueno por cierto... todo va bien hasta que ejecute la linea que dice: smbldap-populate -a Administrator Me da el siguiente error... [r...@domain] smbldap-tools]# smbldap-populate -a Administrator Populating LDAP directory for domain LTGRUP (S-1-5-21-622827858-1637640660-94223602) (using builtin directory structure) erreur LDAP: Can't contact master ldap server for writing (IO::Socket::INET: connect: Conexión rehusada) at /usr/sbin//smbldap_tools.pm line 322. Espero que alguien pueda ayudarme, Saludos.___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Respaldar uns servidor web con SSH y SCP
On 02/08/2010 03:00 PM, Walvis AM wrote: Hola amigos, necesito nuestra ayuda nuevamente Necesito saber que comando debo usar para respaldar un servidor Web usando SSH y SCP? me ayudan con la línea de comandos y una explicación para pode entender. te conectas al servidor a respaldar via ssh: ssh 192.168.1.1 de ahi pones en una sola linea: tar zcf - /etc /var/www /home|ssh 192.168.1.2 cat -/home/respaldo.tar.gz Esto respaldará /etc /var/www y /home del servidor hacia otro servidor (192.168.1.2) se llaman respaldos al vuelo saludos epe gracias salu2 ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] hola
Quizas te pueda ser útil: http://www.centos.org/docs/5/ http://www.redhat.com/docs/manuals/enterprise/#RHEL5 2010/2/6 Enrique Bormey enri...@dpe.mtz.rimed.cu estoy buscando un manual de administración de red con centos si disponen de alguno envienlo a esta dirección ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es -- Saludos, Carlos Bortolini Acurumo Cel +591 766-69617 Email: bortol...@gmail.com Santa Cruz - Bolivia ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS] Best way to backup virtual machines from Citrix XenServer.
On Mon, Feb 08, 2010 at 12:07:30PM -0800, nate wrote: Simon Billis wrote: Good quality storage (which usually comes at a price) will provide the functionality that is needed to backup the VM's either as a complete VM image or files from the VM filesystem. Entry level storage from suppliers such as Equallogic/Dell comes with this functionality and it is possible to have the storage up and attached to servers within 10 mins from un-boxing it (but do allow a little longer to understand it ;-) .) Suggest reading this interesting piece 3 years of equallogic before thinking about using it's snapshot stuff - http://www.tuxyturvy.com/blog/index.php?/archives/61-Three-Years-of-Equallogic.html Of course not all snapshot solutions are created equal, equallogic's appears to be especially poor in this regard. I think that blog post gives too negative view of the EQL snapshots. They work very well for many use cases. Having a lot of random small writes all over the volume seems to cause a lot of wasted disk space though. -- Pasi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] xentop batch mode
On Tue, Feb 09, 2010 at 04:06:37AM +0200, Nux wrote: Hi guys, First of all, sorry to send this one here on the centos ml. I know it's kind of off-topic, but the xen-users list seems a dead end, I was hoping some of you guys are experienced in this. I have a problem with a xen 3.4.2 on Centos 5 x86_64 installation, I need to see the total/used/available memory of dom0 when using xentop, however in batch mode it doesn't seem to work. If I use the normal mode of xentop I get all that info nicely, however in batch mode it looks like this: http://bayimg.com/mAkNEAace A friend of mine told me that the memory info I need gets displayed on Centos 5 stock xen versions when running xentop in batch mode. Anyone can tell me what is going on? What am I missing? Is there any other way I can obtain that info? The xen is installed from gitco.de/repo/, should it matter. The kernel is 2.6.18-164. For me the output from batch-mode and non-batch-mode is the same, using stock centos5 xen. Why do you need to know that information? You can get the Xen hypervisor memory stats from xm info, and you should always dedicate a fixed amount of memory for dom0 anyway (disable dom0 ballooning). http://wiki.xensource.com/xenwiki/XenBestPractices -- Pasi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Best way to backup virtual machines from Citrix XenServer.
Pasi Kärkkäinen sent a missive on 2010-02-09: On Mon, Feb 08, 2010 at 12:07:30PM -0800, nate wrote: Simon Billis wrote: Good quality storage (which usually comes at a price) will provide the functionality that is needed to backup the VM's either as a complete VM image or files from the VM filesystem. Entry level storage from suppliers such as Equallogic/Dell comes with this functionality and it is possible to have the storage up and attached to servers within 10 mins from un-boxing it (but do allow a little longer to understand it ;-) .) Suggest reading this interesting piece 3 years of equallogic before thinking about using it's snapshot stuff - http://www.tuxyturvy.com/blog/index.php?/archives/61-Three-Years-of- Eq uallogic.html Of course not all snapshot solutions are created equal, equallogic's appears to be especially poor in this regard. I think that blog post gives too negative view of the EQL snapshots. They work very well for many use cases. Having a lot of random small writes all over the volume seems to cause a lot of wasted disk space though. I agree - I'm not suggesting that the EQL box is the best thing since sliced bread, but it does what it says on the tin. There are better/different arrays and array controllers out there (3par, BlueArc, Pillar, EMC, Hitachi etc., etc., etc.,) and depending on your needs and budget both now and in the future and it would be wise to select the one that provides the best fit for you and your business. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Best way to backup virtual machines fromCitrix XenServer.
If the goal is to backup the VMs rather than the Citrix XenServer Dom0, I find that exporting each VM to a shared disk (NFS, iSCSI, whatever) is the easiest solution. If you need zero-downtime, then make a snapshot of the VM and then export it. I did this specifically for the purpose of disaster recovery. Recovering individual files or datasets from within a VM is also possible but is slightly more of a hassle. I have some scripts that do this that I'm willing to share. BTW... Centos and Citrix XenServer are different enough that these kinds of questions should probably be asked on the XenSource mailing list or the Citrix forums. You can get potentially misleading advice otherwise. -geoff - Geoff Galitz Blankenheim NRW, Germany http://www.galitz.org/ http://german-way.com/blog/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Asus Xonar DX PCIe sound card?
Can anyone here report success or failure at making the Asus Xonar DX PCI-express sound card work under CentOS 4? Or failing that, 5? Google only turned up people using it on Ubunt or SuSE... I need to specify the addition of audio outputs to a HP DL360 system, and don't want to buy stuff that will be a pain to get working. :-) Or can anyone recommend any other simple sound cards for PCI-express that have been trouble-free under CentOS 4 or 5? Cheers Tony -- Tony Mountifield Work: t...@softins.co.uk - http://www.softins.co.uk Play: t...@mountifield.org - http://tony.mountifield.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] strange disk error
Hi everyone . Recently I had a strange error on one of my servers ,running Centos 5.4 64bit FAILED kernel: status = 1, message = 00, host = 0, driver = 08 kernel: 6sd: Current: sense key: Illegal Request kernel: Add. Sense: Logical block address out of range *Should i be worried sick about it or is it normal??* *There are 2 sas hdd connected into raid 1 to Adaptec AIC-9410W SAS controller. I can't get any information about my drives health (no S.M.A.R.T there) and to get information about raid quality i must restart system and enter raid bios- which is not very good option And maybe someone knows how to get health information om my raid\hdd from Centos ? P.S. error happened about 20 times for the last 2 days and I am worried Best wishes, Alexey Galishnikov * __ Information from ESET Smart Security, version of virus signature database 4850 (20100209) __ The message was checked by ESET Smart Security. http://www.esetnod32.ru ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] strange disk error
Алексей wrote: Hi everyone . Recently I had a strange error on one of my servers ,running Centos 5.4 64bit FAILED kernel: status = 1, message = 00, host = 0, driver = 08 kernel: 6sd: Current: sense key: Illegal Request kernel: Add. Sense: Logical block address out of range *Should i be worried sick about it or is it normal??* *There are 2 sas hdd connected into raid 1 to Adaptec AIC-9410W SAS controller. I can't get any information about my drives health (no S.M.A.R.T there) and to get information about raid quality i must restart system and enter raid bios- which is not very good option And maybe someone knows how to get health information om my raid\hdd from Centos ? P.S. error happened about 20 times for the last 2 days and I am worried Does 'dmesg' give a better description? I frequently see messages like that associated with empty CD/DVD drives - not sure what tries to access them. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] strange disk error
On Feb 9, 2010, at 7:55 AM, Алексей m...@algalish.ru wrote: Hi everyone . Recently I had a strange error on one of my servers ,running Centos 5.4 64bit FAILED kernel: status = 1, message = 00, host = 0, driver = 08 kernel: 6sd: Current: sense key: Illegal Request kernel: Add. Sense: Logical block address out of range *Should i be worried sick about it or is it normal??* *There are 2 sas hdd connected into raid 1 to Adaptec AIC-9410W SAS controller. I can't get any information about my drives health (no S.M.A.R.T there) and to get information about raid quality i must restart system and enter raid bios- which is not very good option And maybe someone knows how to get health information om my raid \hdd from Centos ? P.S. error happened about 20 times for the last 2 days and I am worried The illegal request error means something on the system tried to issue a SCSI command that isn't supported on the controller. Probably smartmon. Try excluding those drives from smartmon and see if Adaptec has a Linux monitoring tool for that card. -Ross ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Using (was: Announcing) Gluster Storage Platform
On Wed, Dec 16, 2009 at 6:13 PM, Les Mikesell lesmikes...@gmail.com wrote: Chan Chung Hang Christopher wrote: Alan McKay wrote: On Tue, Dec 15, 2009 at 7:48 PM, Christopher Chan christopher.c...@bradbury.edu.hk wrote: A cluster filesystem OK, but you've just given me a circular definition. When you do not need/want a cluster file system and again ... Okay, a cluster/distributed file system that does not have its own on disk format. It makes use of whatever existing filesystem there is for actual storage and allows you to replicate files/load balance requests to files to 'storage servers' of any supported platform. At the same time, user level processes on 'clients' access the system as if it was an actual file system. This enables one to have Linux clients that run say samba to export the files to Windows clients but the actual files are kept on OpenSolaris servers on zfs. Should the Linux clients all go down, the Windows clients could still access the files on the OpenSolaris servers via samba. I'm having trouble finding any real information about how (and how well) this works and I'd like to know if it would be suitable for a backuppc storage archive which generates millions of hardlinks. Does it deal with hardlinks spanning backend storage servers transparently? And can it replicate efficiently enough to have remote copies? -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Has anyone implemented, or used GlusterFS yet? What is your viewpoint on it? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
I looked over an most of which I have already done, the last piece that I am trying to address is how to do authentication with Apache against active directory, mod_auth_pam is one way but I have not had any luck getting it to compile with the latest ApacheThanks On Mon, Feb 8, 2010 at 6:49 PM, Arvind P R iin...@gmail.com wrote: I had written a blog quite some time back on this. There might be some glitches in it, but will give you some clue. The blog is blog.Palalinha.Com i am sitting at the airport with my mobile so cant find you the correct thread in the blog. Let me know if it helps. On 2/8/10, Tom Bishop bisho...@gmail.com wrote: Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about mod_auth_pam but that seems pretty dead so I was just wondering what folks were using and whats the easiest to setup. Any pointers to any how to's would be appreciated...Thanks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
I've had decent luck with LDAP authentication for Apache. AD does not support anonymous LDAP searches so you have to have a user account that has the ability to search AD. Here's a modified sample config (.htaccess or httpd.conf) that includes security group membership checks. This would require that a user login with their Windows domain username and password and that the user be a member of the AD security group 'managers': AuthType basic AuthName Windows Domain Credentials - Managers Only AuthzLDAPMethod ldap AuthzLDAPServer dc1.example.com AuthzLDAPBindDN CN=username,CN=Users,DC=example,DC=com AuthzLDAPBindPassword superSecretPassword AuthzLDAPUserBase CN=Users,DC=example,DC=com AuthzLDAPUserKey sAMAccountName AuthzLDAPUserScopesubtree AuthzLDAPGroupBaseCN=Users,DC=example,DC=com AuthzLDAPGroupKey cn AuthzLDAPGroupScope subtree AuthzLDAPMemberKeymember AuthzLDAPSetGroupAuth ldapdn require group managers On Tue, Feb 9, 2010 at 11:35 AM, Tom Bishop bisho...@gmail.com wrote: I looked over an most of which I have already done, the last piece that I am trying to address is how to do authentication with Apache against active directory, mod_auth_pam is one way but I have not had any luck getting it to compile with the latest ApacheThanks On Mon, Feb 8, 2010 at 6:49 PM, Arvind P R iin...@gmail.com wrote: I had written a blog quite some time back on this. There might be some glitches in it, but will give you some clue. The blog is blog.Palalinha.Com i am sitting at the airport with my mobile so cant find you the correct thread in the blog. Let me know if it helps. On 2/8/10, Tom Bishop bisho...@gmail.com wrote: Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about mod_auth_pam but that seems pretty dead so I was just wondering what folks were using and whats the easiest to setup. Any pointers to any how to's would be appreciated...Thanks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] disk I/O problems with LSI Logic RAID controller
we're having a weird disk I/O problem on a 5.4 server connected to an external SAS storage with an LSI logic megaraid sas 1078. The server is used as a samba file server. Every time we try to copy some large file to the storage-based file system, the disk utilization see-saws up to 100% to several seconds of inactivity, to climb up again to 100% and so forth. Here are a snip from the iostat -kx 1: Device: rrqm/s wrqm/s r/s w/srkB/swkB/s avgrq-sz avgqu-sz await svctm %util sdb1 0.00 133811.00 0.00 1889.00 0.00 513660.00 543.84 126.24 65.00 0.47 89.40 sdb1 0.00 138.61 0.00 109.90 0.00 29845.54 543.14 2.54 54.32 0.37 4.06 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 134680.00 0.00 1920.00 0.00 526524.00 548.46 126.06 64.57 0.47 90.00 sdb1 0.00 142.00 0.00 74.00 0.00 20740.00 560.54 1.25 45.14 0.47 3.50 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 1.00 0.00 4.00 0.00 8.00 0.01 14.00 14.00 1.40 sdb1 0.00 116129.00 1.00 1576.00 4.00 434816.00 551.45 125.47 75.38 0.57 90.30 sdb1 0.00 17301.98 0.00 412.87 0.00 106506.93 515.93 24.59 75.40 0.48 19.80 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 It happens when I copy a file over the net using samba or when copying/creating a local file It looks like the disk tries to get more than it can handle, then it chokes with data and stales for a few seconds until some buffer empties and it's able to get a bit more data again. It happens in two identical servers, so I'd discard faulty hardware as the cause and look into a miscofiguration issue. Are there any guidelines/docs for heavy I/O tuning? are there any issues with this raid controller? any help will be apreciated Fer ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. On Tue, Feb 9, 2010 at 10:57 AM, Pat and Lori Boyer pbo...@gmail.comwrote: I've had decent luck with LDAP authentication for Apache. AD does not support anonymous LDAP searches so you have to have a user account that has the ability to search AD. Here's a modified sample config (.htaccess or httpd.conf) that includes security group membership checks. This would require that a user login with their Windows domain username and password and that the user be a member of the AD security group 'managers': AuthType basic AuthName Windows Domain Credentials - Managers Only AuthzLDAPMethod ldap AuthzLDAPServer dc1.example.com AuthzLDAPBindDN CN=username,CN=Users,DC=example,DC=com AuthzLDAPBindPassword superSecretPassword AuthzLDAPUserBase CN=Users,DC=example,DC=com AuthzLDAPUserKey sAMAccountName AuthzLDAPUserScopesubtree AuthzLDAPGroupBaseCN=Users,DC=example,DC=com AuthzLDAPGroupKey cn AuthzLDAPGroupScope subtree AuthzLDAPMemberKeymember AuthzLDAPSetGroupAuth ldapdn require group managers On Tue, Feb 9, 2010 at 11:35 AM, Tom Bishop bisho...@gmail.com wrote: I looked over an most of which I have already done, the last piece that I am trying to address is how to do authentication with Apache against active directory, mod_auth_pam is one way but I have not had any luck getting it to compile with the latest ApacheThanks On Mon, Feb 8, 2010 at 6:49 PM, Arvind P R iin...@gmail.com wrote: I had written a blog quite some time back on this. There might be some glitches in it, but will give you some clue. The blog is blog.Palalinha.Com i am sitting at the airport with my mobile so cant find you the correct thread in the blog. Let me know if it helps. On 2/8/10, Tom Bishop bisho...@gmail.com wrote: Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about mod_auth_pam but that seems pretty dead so I was just wondering what folks were using and whats the easiest to setup. Any pointers to any how to's would be appreciated...Thanks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] disk I/O problems with LSI Logic RAID controller
Fernando Gleiser wrote: we're having a weird disk I/O problem on a 5.4 server connected to an external SAS storage with an LSI logic megaraid sas 1078. Not sure I know what the issue is but telling us how many disks, what the RPM of the disks are, and what level of RAID would probably help. It sounds like perhaps you have a bunch of 7200RPM disks in a RAID setup where the data:parity ratio may be way out of whack(e.g. high number of data disks to parity disks), which will result in very poor write performance. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. I guess you think insecure would be better? If I understand your need, you want to make AD insecure, so please enable anonymous binds so you don't need a user/pass to make the query:) Or program your own auth backend that binds with the intended creds asking for auth:) Oh, and do this w/o tls/ssl because you want it insecure:) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
Point taken and I do understand, in reality I would rather have nothing to do with MS which is insecure from the start, ever try to firewall an SBS 2003 install, good luck, they recommend turning it off, go figurelol On Tue, Feb 9, 2010 at 12:08 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. I guess you think insecure would be better? If I understand your need, you want to make AD insecure, so please enable anonymous binds so you don't need a user/pass to make the query:) Or program your own auth backend that binds with the intended creds asking for auth:) Oh, and do this w/o tls/ssl because you want it insecure:) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2)
On Sun, Feb 7, 2010 at 8:29 PM, Christopher Chan christopher.c...@bradbury.edu.hk wrote: Take my advice: yum erase samba == uber happiness Get ldap working, no interop issues with the old samba version in rhel and newer ms servers. Plus you will be using something forward compatible that a txt edit could likely fix in the event something drastic changed in the schema and search filters for example had to change. +1 We've been using nss_ldap against AD for years. It's never a problem. Version 3.4.5 of Samba did end up resolving the issue I was having and now AD users can login to the box. I am however interested in going the LDAP route mainly for the forward compatability reason stated by Jeff. Is there anything special I need to do on the DC for the LDAP authentication to work? Do we lose kerberos security if one switches from samba + winbind to ldap? No, but you'll have to generate UIDs and GIDs for all AD users and groups That is the one thing that has stopped me from using AD LDAP for user/group management. You could use winbind to create a NIS map (sans passwords) and have Linux/Mac clients authenticate with NIS+Kerberos. That RID map feature of samba is great. -Ross ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2)
That RID map feature of samba is great. Forgot about that, AFAIK, you can do that w/ SFU pam mods. I have two Samba servers left that I want to get rid of:) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] xentop batch mode
On Tue, Feb 9, 2010 at 8:50 AM, Pasi Kärkkäinen pa...@iki.fi wrote: On Tue, Feb 09, 2010 at 04:06:37AM +0200, Nux wrote: Hi guys, First of all, sorry to send this one here on the centos ml. I know it's kind of off-topic, but the xen-users list seems a dead end, I was hoping some of you guys are experienced in this. I have a problem with a xen 3.4.2 on Centos 5 x86_64 installation, I need to see the total/used/available memory of dom0 when using xentop, however in batch mode it doesn't seem to work. If I use the normal mode of xentop I get all that info nicely, however in batch mode it looks like this: http://bayimg.com/mAkNEAace A friend of mine told me that the memory info I need gets displayed on Centos 5 stock xen versions when running xentop in batch mode. Anyone can tell me what is going on? What am I missing? Is there any other way I can obtain that info? The xen is installed from gitco.de/repo/, should it matter. The kernel is 2.6.18-164. For me the output from batch-mode and non-batch-mode is the same, using stock centos5 xen. Why do you need to know that information? You can get the Xen hypervisor memory stats from xm info, and you should always dedicate a fixed amount of memory for dom0 anyway (disable dom0 ballooning). http://wiki.xensource.com/xenwiki/XenBestPractices -- Pasi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Dooh, thanks for the xm info thing. I was too dumb last night to actually think of that. Also I completely agree with disabling dom0 ballooning and it's how I run all my servers. Thanks again, Lucian ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lightscribe
Arun Khan wrote: On Sun, Feb 7, 2010 at 5:35 AM, Robertkerp...@sbcglobal.net wrote: I just bought an HP DVD Writer 1040r (as identified by k3b), an external USB-connected CD/DVD burner. The drive gets assigned /dev/scd0. I can burn CDs and DVDs, read from CDs and DVDs, boot from DVDs (and, I assume, CDs) but have been unable to use the lightscribe software to label a disk. I have lightscribe-1.18.11.1-0 and lightscribeApplications-1.18.6.1-0 installed, can run the GUI at /opt/lightscribe/Applications/SimpleLabeler/SimpleLabeler which promptly and stubbornly tells me --no lightscribe drives found--. This IS a lightscribe drive, according to the specs, the box and the logo on the tray. I do not have any lightscribe capable DVD writer. I am presuming you have lightscribe capable media in the drive as well. If so, it might be worthwhile to contact the software vendor. IIRC, LaCie had published rpm package for lightscribe but I suspect it worked with their own branded hardware. -- Arun Khan Yes, I have tried DVD media that is peddled as being lightscribe capable and just minutes ago, opened a 20-pack of CD+R that are supposedly also lightscribe capable. I have tried both the LaCie 4L s/w and lightscribeApplications-1.18.6.1-0 and get nowhere with either of them. I do have the driver, lightscribe-1.18.11.1-0 installed. After leaving the original question, I plugged the drive into a WinXP-only laptop, Installed the bundled s/w and the same DVD was recognized -- but only after quite a while. So, I'm about to conclude that the media is flaky, the Linux s/w is impatient at best, broken at worst. Whatever... I didn't throw away my CD marker. Thanks for the reply ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
On Tue, 2010-02-09 at 18:08 +, Joseph L. Casale wrote: This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. I guess you think insecure would be better? If I understand your need, you want to make AD insecure, so please enable anonymous binds so you don't need a user/pass to make the query:) Or program your own auth backend that binds with the intended creds asking for auth:) Oh, and do this w/o tls/ssl because you want it insecure:) seems to me that permitting an anonymous bind to LDAP is inherently more secure than requiring a user/password combination so I don't think that your explanation is exactly true. In Microsoft's view, the only systems querying LDAP would be systems automatically passing the authentication. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] best parallel / cluster SSH
I mean if you go from supplying perl and some perl-scripted functionality, you either have to drop the functionality or some engineer has to rewrite the code in a different language - something that usually isn't cheap. I've never tried perl2c - if such a thing exists it probably embeds most of perl as a library. The few things we needed we rewrote in BASH - it was pretty easy (I did most of it) -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] disk I/O problems with LSI Logic RAID controller
- Original Message From: nate cen...@linuxpowered.net Not sure I know what the issue is but telling us how many disks, what the RPM of the disks are, and what level of RAID would probably help. It sounds like perhaps you have a bunch of 7200RPM disks in a RAID setup where the data:parity ratio may be way out of whack(e.g. high number of data disks to parity disks), which will result in very poor write performance. yes, ita bunch of 12 7k2 RPM disks organized as 1 hot spare, 2 parity disks, 9 data disks in a RAID 5 configuration. is 9/2 a high ratio? Thanks for your help Fer ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
seems to me that permitting an anonymous bind to LDAP is inherently more secure than requiring a user/password combination so I don't think that your explanation is exactly true. There are ways to create accounts just for this with reduced privileges. Research technet... In Microsoft's view, the only systems querying LDAP would be systems automatically passing the authentication. Wow, someone actually hacking on MS for expecting us to do things secure? What will they expect next:) If they didn't and by default allowed anon binds, someone would surely say Microsoft sucks, they don't expect us to do this securely, blah blah. The topic is mute, lets save the list the despair of rehashing the severely hashed. From the point of view of some, MS will always suck. Changing the minds of that type of person isn't my interest, I was merely pointing out some facts surrounding the implementation of the topic at hand. Sorry for disagreeing with you:) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] disk I/O problems with LSI Logic RAID controller
Fernando Gleiser wrote: yes, ita bunch of 12 7k2 RPM disks organized as 1 hot spare, 2 parity disks, 9 data disks in a RAID 5 configuration. is 9/2 a high ratio? Perhaps RAID 6, as I've never heard of RAID 5 with two parity (two parity is dual parity which is RAID 6). RAID 6 performance can vary dramatically between controllers, if it were me unless you get any other responses shortly I would test other RAID configurations and see how the performance compares RAID 1+0 RAID 5+0 (striped RAID 5 arrays, in your case perhaps 3+1 * 4 w/no hot spares? at least for testing) RAID 5+0 (5+1 * 2) RAID 1+0 should be first though, even if you don't end up using it in the end, it's good to get a baseline with the fastest configuration. I would expect the RAID card to support RAID 50, but not all do, if it doesn't one option may be to perform striping using LVM at the OS level. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] disk I/O problems with LSI Logic RAID controller
nate wrote: Perhaps RAID 6, as I've never heard of RAID 5 with two parity (two parity is dual parity which is RAID 6). Forgot to mention my own personal preference on my high end SAN at least is for RAID 5 with a 3:1 parity ratio, or a max of 5:1 or 6:1, really never higher than that unless activity is very low. The RAID controllers on my array are the fastest in the industry, and despite that, in the near future I am migrating to a parity ratio of 2:1 to get (even)better performance, that brings me to within about 3-4% of RAID 1+0 performance for typical workloads. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2)
On Tue, Feb 9, 2010 at 3:23 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: That RID map feature of samba is great. Forgot about that, AFAIK, you can do that w/ SFU pam mods. I have two Samba servers left that I want to get rid of:) You can do it with SFU, but SFU doesn't create UID/GIDs for existing users, you have to do those manually. Then there is the whole issue of maintaining those IDs over a long period of time. Also with RID mapping I can map different domains into different ID ranges. 10 - 19 first domain 20 - 29 second domain And so on. You know you don't need the full Samba install to setup a winbind-NIS server, just the Samba client will do. Then have your Linux boxes using NIS+Kerberos and only 1-2 boxes needs have a smb.conf and winbind running. NIS is only as secure as the network it runs on. If it bumps against public networks (unsecure wifi so on) use 802.11 authentication. -Ross ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] disk I/O problems with LSI Logic RAID controller
On Tue, Feb 9, 2010 at 4:33 PM, Fernando Gleiser ferglei...@yahoo.com wrote: - Original Message From: nate cen...@linuxpowered.net Not sure I know what the issue is but telling us how many disks, what the RPM of the disks are, and what level of RAID would probably help. It sounds like perhaps you have a bunch of 7200RPM disks in a RAID setup where the data:parity ratio may be way out of whack(e.g. high number of data disks to parity disks), which will result in very poor write performance. yes, ita bunch of 12 7k2 RPM disks organized as 1 hot spare, 2 parity disks, 9 data disks in a RAID 5 configuration. is 9/2 a high ratio? A bit. Your RAID array is configured for a read-mostly configuration. Here is a simple rule, given you have a HW RAID controller with write-back cache, assume each write will span the whole stripe width (controller tries to cache full stripe writes), if that is the case then the write IOPS will be equal to the IOPS of your slowest disk within the set as the next write can't go until the first write has finished. Of course with RAID5/RAID6 the write performance can be much, much worse if the write is short of the whole stripe width as it will then have to read the remaining stripe set (in order to caclulate parity), then write the whole stripe set out. It sounds like your data is sequential though so this shouldn't happen much, maybe the first or last stripes, so using the above simple rule is a good guide. For software RAID5/RAID6 that doesn't have a write-cache to cache the stripe-width, make sure the file system knows the stripe width and hope it does the write thing :) -Ross ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2)
From: centos-boun...@centos.org [centos-boun...@centos.org] On Behalf Of Ross Walker [rswwal...@gmail.com] Sent: Tuesday, February 09, 2010 4:08 PM To: CentOS mailing list Subject: Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2) On Tue, Feb 9, 2010 at 3:23 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: That RID map feature of samba is great. Forgot about that, AFAIK, you can do that w/ SFU pam mods. I have two Samba servers left that I want to get rid of:) You can do it with SFU, but SFU doesn't create UID/GIDs for existing users, you have to do those manually. Then there is the whole issue of maintaining those IDs over a long period of time. Also with RID mapping I can map different domains into different ID ranges. 10 - 19 first domain 20 - 29 second domain And so on. You know you don't need the full Samba install to setup a winbind-NIS server, just the Samba client will do. Then have your Linux boxes using NIS+Kerberos and only 1-2 boxes needs have a smb.conf and winbind running. NIS is only as secure as the network it runs on. If it bumps against public networks (unsecure wifi so on) use 802.11 authentication. -Ross ___ For anybody wanting to know how to go the LDAP Route I found an interesting article in the linux.com archives http://www.linux.com/archive/feed/40983 Thanks again guys for your input. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
If you are using AD for JUST authentication and not user information,
you can use the PAM Kerberos stuff. We've been using it for a couple of
years from both CentOS/RHEL 4 and 5 systems with good results. It was
actually pretty easy to do (once we figured out which type of chicken
bones to burn).
You can use authconfig to turn it all on:
authconfig --enablekrb5 --krb5realm {AD domain name} \
--enbablekrb5kdcdns --enablekrb5realmdns --update
This will use DNS to locate the domain controller and KDC for the domain
given the AD domain name. You can manually specify the KDC and admin
servers too, see the authconfig man page for specific details.
If you want something perhaps more polished, you could look into the
Likewise products, which handle the whole shooting match pretty well
(http://www.likewise.com/products/likewise_open/). I've played with the
Open (free) version and it worked just fine, the Enterprise has more
features but I haven't played with it.
As always, YMMV.
--
Jay Leafey - Memphis, TN
jay.lea...@mindless.com
smime.p7s
Description: S/MIME Cryptographic Signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
I just need something for apache auth. I have winbind working just
fine for the other stuff...Thanks
On 2/9/10, Jay Leafey jay.lea...@mindless.com wrote:
If you are using AD for JUST authentication and not user information,
you can use the PAM Kerberos stuff. We've been using it for a couple of
years from both CentOS/RHEL 4 and 5 systems with good results. It was
actually pretty easy to do (once we figured out which type of chicken
bones to burn).
You can use authconfig to turn it all on:
authconfig --enablekrb5 --krb5realm {AD domain name} \
--enbablekrb5kdcdns --enablekrb5realmdns --update
This will use DNS to locate the domain controller and KDC for the domain
given the AD domain name. You can manually specify the KDC and admin
servers too, see the authconfig man page for specific details.
If you want something perhaps more polished, you could look into the
Likewise products, which handle the whole shooting match pretty well
(http://www.likewise.com/products/likewise_open/). I've played with the
Open (free) version and it worked just fine, the Enterprise has more
features but I haven't played with it.
As always, YMMV.
--
Jay Leafey - Memphis, TN
jay.lea...@mindless.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Lightscribe
On Tue, Feb 9, 2010 at 1:19 PM, Robert kerp...@sbcglobal.net wrote: Yes, I have tried DVD media that is peddled as being lightscribe capable and just minutes ago, opened a 20-pack of CD+R that are supposedly also lightscribe capable. I have tried both the LaCie 4L s/w and lightscribeApplications-1.18.6.1-0 and get nowhere with either of them. I do have the driver, lightscribe-1.18.11.1-0 installed. After leaving the original question, I plugged the drive into a WinXP-only laptop, Installed the bundled s/w and the same DVD was recognized -- but only after quite a while. So, I'm about to conclude that the media is flaky, the Linux s/w is impatient at best, broken at worst. Whatever... I didn't throw away my CD marker. I'd check with HP - they're pretty good about Linux support for their printers, so you might have some luck for this, too. I'm kind of surprised at this, too, though - lightscribe is no longer a new technology, and I would think by now that RH would include it, or have drivers for it, in the more recent releases (4 maybe, 5 for sure). Also, check some of the linux forums on the subject - you might find something else that works. I was looking for this a couple of years ago, but I never saw the value of lightscribe over labels, which can be printed on inkjet or lasers, in full colr, and stomped onto most CDs/DVDs with little or no trouble. (I've had to glue some down, but they work just fine.) HTH mhr ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2)
On Feb 9, 2010, at 6:27 PM, Dan Burkland dburk...@nmdp.org wrote: From: centos-boun...@centos.org [centos-boun...@centos.org] On Behalf Of Ross Walker [rswwal...@gmail.com] Sent: Tuesday, February 09, 2010 4:08 PM To: CentOS mailing list Subject: Re: [CentOS] CentOS 5.4 x86_64 authenticating against AD (Server 2008r2) On Tue, Feb 9, 2010 at 3:23 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: That RID map feature of samba is great. Forgot about that, AFAIK, you can do that w/ SFU pam mods. I have two Samba servers left that I want to get rid of:) You can do it with SFU, but SFU doesn't create UID/GIDs for existing users, you have to do those manually. Then there is the whole issue of maintaining those IDs over a long period of time. Also with RID mapping I can map different domains into different ID ranges. 10 - 19 first domain 20 - 29 second domain And so on. You know you don't need the full Samba install to setup a winbind-NIS server, just the Samba client will do. Then have your Linux boxes using NIS+Kerberos and only 1-2 boxes needs have a smb.conf and winbind running. NIS is only as secure as the network it runs on. If it bumps against public networks (unsecure wifi so on) use 802.11 authentication. -Ross ___ For anybody wanting to know how to go the LDAP Route I found an interesting article in the linux.com archives http://www.linux.com/archive/feed/40983 Thanks again guys for your input. If it works for you great. If you have hundreds or thousands of users and hundreds of groups, well good luck. It is extremely hard to automate assigning these uids/ gids and making sure they don't collide with each other or other unix systems and doing it by hand is a torture reserved for the ninth circle of hell. If only nss_ldap had a SID-UID/GID mapping like samba has. -Ross ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
On Tue, 2010-02-09 at 21:29 +, Joseph L. Casale wrote: seems to me that permitting an anonymous bind to LDAP is inherently more secure than requiring a user/password combination so I don't think that your explanation is exactly true. There are ways to create accounts just for this with reduced privileges. Research technet... In Microsoft's view, the only systems querying LDAP would be systems automatically passing the authentication. Wow, someone actually hacking on MS for expecting us to do things secure? What will they expect next:) If they didn't and by default allowed anon binds, someone would surely say Microsoft sucks, they don't expect us to do this securely, blah blah. The topic is mute, lets save the list the despair of rehashing the severely hashed. From the point of view of some, MS will always suck. Changing the minds of that type of person isn't my interest, I was merely pointing out some facts surrounding the implementation of the topic at hand. Sorry for disagreeing with you:) I just disagree with your parsing and conclusions. I did not hack on MS for expecting us to do things securely nor did I say that preventing anonymous binds made it more secure. I think I actually said the opposite. anonymous binds are just that - anonymous binds and there could easily be ACL's that govern what you can access without a user/password but I think Microsoft is after overall simplicity. The topic would necessarily be 'moot' and not 'mute' and I was uncomfortable with the notion that you were chiding the OP for thinking that an anonymous bind was less secure - in most instances, it is a more secure option... especially for his usage. If he could bind anonymously, he could bind, let the user supply the account/password, authenticate and thus no account information would be necessary in the config files so it speaks directly to the OP's desires. Better security. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] what causes CUPS to dis-enable a printer?
In our computer lab, there are 6 Centos 5.4 workstations. There is an HP printer with jet direct card. It often works. But sometimes users come and get me saying the printer is broken, but it is actually working fine for *most* of the workstations. On the troubled system, I run system-config-printer and I check the printer in question (under properties) and I see the printer has been disabled. I mean, the box by the word Enabled is empty. After I manually (use lprm) remove the print jobs, and set the printer to Enabled, then the print queue will start working again. I've checked the files in /var/log/cups and there's nothing evident. error_log has nothing. We have had the problem during the year (that others have reported in this list). When trying to print some pdf files from Evince, the symptom of the problem is that the pdf files don't print. They seem to clog the printer. When that happens, I have seen the Enabled box come unchecked in the printer configurator. However, the most recent problems are not associated with the use of Evince. I would really appreciate some tips about how to bugshoot this problem. pj ps. The Cups server is running on the system in question, lpq shows lots of print jobs waiting. -- Paul E. Johnson Professor, Political Science 1541 Lilac Lane, Room 504 University of Kansas ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] R package on centos 5.1
Hi I want to install R package on centos 5.1, however I am not able to install it . Can anyone please tell me how can I install R on centos 5.1? Thank you Hersh Your Mail works best with the New Yahoo Optimized IE8. Get it NOW! http://downloads.yahoo.com/in/internetexplorer/___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] R package on centos 5.1
hersh parikh hershparik...@yahoo.com wrote: I want to install R package on centos 5.1, however I am not able to install it I'm running it here on Centos 5.4. What problem are you having? Error messages? Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] what causes CUPS to dis-enable a printer?
Greetings, On Wed, Feb 10, 2010 at 10:07 AM, Paul Johnson pauljoh...@gmail.com wrote: But sometimes users come and get me saying the printer is broken, but it is actually working fine for *most* of the workstations. On the troubled system, I run system-config-printer and I check the printer in question (under properties) and I see the printer has been disabled. I mean, the box by the word Enabled is empty. I would strongly suggest using the web interface localhost:631 instead of system-config-printer. Regards, Rajagopal ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
On Mon, Feb 8, 2010 at 8:18 AM, Tom Bishop bisho...@gmail.com wrote: Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about mod_auth_pam but that seems pretty dead so I was just wondering what folks were using and whats the easiest to setup. Any pointers to any how to's would be appreciated...Thanks. This works for me PerlModule Authen::Simple::Apache PerlModule Authen::Simple::ActiveDirectory PerlSetVar AuthenSimpleActiveDirectory_host mydc.inside.net PerlSetVar AuthenSimpleActiveDirectory_principal mydomain Directory /var/www/whatever PerlAuthenHandler Authen::Simple::ActiveDirectory AuthType Basic AuthName Sekret Playce require valid-user /Directory -- Stephen Carville ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] R package on centos 5.1
Greetings, On Wed, Feb 10, 2010 at 10:58 AM, hersh parikh hershparik...@yahoo.com wrote: Hi I want to install R package on centos 5.1, however I am not able to install it . Can anyone please tell me how can I install R on centos 5.1? I am able to install it after enabling epel and rpmforge repo: yum install R Yes it is a capital letter R. I have earlier installed it on Centos 5.0 (circa 2005-6). What is the messages if any? Regards, Rajagopal ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] R package on centos 5.1
Greetings, On Wed, Feb 10, 2010 at 10:58 AM, hersh parikh hershparik...@yahoo.com wrote: I want to install R package on centos 5.1, however I am not able to install it . Can anyone please tell me how can I install R on centos 5.1? yum -y install R Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirrors.hns.net.in * base: mirrors.hns.net.in * epel: ftp.kddilabs.jp * extras: mirrors.hns.net.in * rpmforge: fr2.rpmfind.net * updates: mirrors.hns.net.in addons | 951 B 00:00 andrewfarley | 951 B 00:00 base | 2.1 kB 00:00 epel | 3.4 kB 00:00 extras | 1.1 kB 00:00 rpmforge | 1.1 kB 00:00 updates | 1.9 kB 00:00 Setting up Install Process Resolving Dependencies -- Running transaction check --- Package R.i386 0:2.10.0-2.el5 set to be updated -- Processing Dependency: R-devel = 2.10.0-2.el5 for package: R -- Processing Dependency: libRmath-devel = 2.10.0-2.el5 for package: R -- Running transaction check --- Package R-devel.i386 0:2.10.0-2.el5 set to be updated -- Processing Dependency: R-core = 2.10.0-2.el5 for package: R-devel -- Processing Dependency: tcl-devel for package: R-devel -- Processing Dependency: bzip2-devel for package: R-devel -- Processing Dependency: libX11-devel for package: R-devel -- Processing Dependency: gcc-gfortran for package: R-devel -- Processing Dependency: tk-devel for package: R-devel -- Processing Dependency: pcre-devel for package: R-devel -- Processing Dependency: tetex-latex for package: R-devel --- Package libRmath-devel.i386 0:2.10.0-2.el5 set to be updated -- Processing Dependency: libRmath = 2.10.0-2.el5 for package: libRmath-devel -- Running transaction check --- Package R-core.i386 0:2.10.0-2.el5 set to be updated -- Processing Dependency: xdg-utils for package: R-core -- Processing Dependency: perl(File::Copy::Recursive) for package: R-core --- Package bzip2-devel.i386 0:1.0.3-4.el5_2 set to be updated --- Package gcc-gfortran.i386 0:4.1.2-46.el5_4.2 set to be updated --- Package libRmath.i386 0:2.10.0-2.el5 set to be updated --- Package libX11-devel.i386 0:1.0.3-11.el5 set to be updated -- Processing Dependency: xorg-x11-proto-devel = 7.1-2 for package: libX11-devel -- Processing Dependency: libXau-devel for package: libX11-devel -- Processing Dependency: libXdmcp-devel for package: libX11-devel --- Package pcre-devel.i386 0:6.6-2.el5_1.7 set to be updated --- Package tcl-devel.i386 0:8.4.13-4.el5 set to be updated --- Package tetex-latex.i386 0:3.0-33.8.el5 set to be updated -- Processing Dependency: tetex-dvips = 3.0 for package: tetex-latex -- Processing Dependency: tetex = 3.0 for package: tetex-latex --- Package tk-devel.i386 0:8.4.13-5.el5_1.1 set to be updated -- Running transaction check --- Package libXau-devel.i386 0:1.0.1-3.1 set to be updated --- Package libXdmcp-devel.i386 0:1.0.1-2.1 set to be updated --- Package perl-File-Copy-Recursive.noarch 0:0.38-1.el5.rf set to be updated --- Package tetex.i386 0:3.0-33.8.el5 set to be updated -- Processing Dependency: tetex-fonts = 3.0 for package: tetex --- Package tetex-dvips.i386 0:3.0-33.8.el5 set to be updated --- Package xdg-utils.noarch 0:1.0.2-4.el5 set to be updated --- Package xorg-x11-proto-devel.i386 0:7.1-13.el5 set to be updated -- Processing Dependency: mesa-libGL-devel for package: xorg-x11-proto-devel -- Running transaction check --- Package mesa-libGL-devel.i386 0:6.5.1-7.7.el5 set to be updated --- Package tetex-fonts.i386 0:3.0-33.8.el5 set to be updated -- Finished Dependency Resolution Dependencies Resolved Package Arch VersionRepository Size Installing: R i386 2.10.0-2.el5 epel 14 k Installing for dependencies: R-core i386 2.10.0-2.el5 epel 31 M R-devel i386 2.10.0-2.el5 epel 87 k bzip2-devel i386 1.0.3-4.el5_2 base 38 k gcc-gfortrani386 4.1.2-46.el5_4.2 updates 3.1 M libRmathi386 2.10.0-2.el5 epel 93 k libRmath-devel i386 2.10.0-2.el5 epel120 k libX11-develi386 1.0.3-11.el5 base661 k libXau-develi386 1.0.1-3.1 base 11 k libXdmcp-devel i386 1.0.1-2.1 base7.5 k
Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?
On Tue, 2010-02-09 at 14:21 -0700, Craig White wrote: On Tue, 2010-02-09 at 18:08 +, Joseph L. Casale wrote: This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. I guess you think insecure would be better? If I understand your need, you want to make AD insecure, so please enable anonymous binds so you don't need a user/pass to make the query:) Or program your own auth backend that binds with the intended creds asking for auth:) Oh, and do this w/o tls/ssl because you want it insecure:) seems to me that permitting an anonymous bind to LDAP is inherently more secure than requiring a user/password combination so I don't think that your explanation is exactly true. In Microsoft's view, the only systems querying LDAP would be systems automatically passing the authentication. Craig Yes it is true, you have to have that for it to work correctly. John ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] what causes CUPS to dis-enable a printer?
On Tue, Feb 9, 2010 at 11:37 PM, Paul Johnson pauljoh...@gmail.com wrote: In our computer lab, there are 6 Centos 5.4 workstations. There is an HP printer with jet direct card. It often works. But sometimes users come and get me saying the printer is broken, but it is actually working fine for *most* of the workstations. On the troubled system, I run system-config-printer and I check the printer in question (under properties) and I see the printer has been disabled. I mean, the box by the word Enabled is empty. After I manually (use lprm) remove the print jobs, and set the printer to Enabled, then the print queue will start working again. There is a cups timeout value that might help. Cups will disable a printer if it doesn't respond after a certain amount of time. If you add a Timeout value to cupsd.conf you can either disable or set the timeout higher. If that doesn't work, you may need to change the loglevel to debug and watch until it fails. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
