Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Jim Wildman
On Fri, 17 Sep 2010, Les Mikesell wrote:

> Has anyone ever standardized a way to do this that will work across more
> than a few platforms?  I've always thought there should be a way to at
> least make a subversion repository holding copies of all of /etc of all
> of your machines where similar hosts are branches from a master and
> current changes are always checked back in.  Then even if you don't use
> it to control and push changes you could at least easily view the
> changes over time on any host and the difference between any two hosts.

Russ just pointed me at this

etckeeper..

http://joey.kitenet.net/code/etckeeper/

among other things it includes a plugin for yum so 'yum install'
includes a commit..  Very nice touch..

--
Jim Wildman, CISSP, RHCE   j...@rossberry.com http://www.rossberry.com
"Society in every state is a blessing, but Government, even in its best
state, is a necessary evil; in its worst state, an intolerable one."
Thomas Paine
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Adobe's 64-bit flash for Linux Was: Re: looking for cool

2010-09-17 Thread Scott Robbins
On Fri, Sep 17, 2010 at 06:06:56PM -0400, R P Herrold wrote:
> On Fri, 17 Sep 2010, m.r...@5-cent.us wrote:
> 
> > Actually, my manager just laid something on me this morning: the new
> > release of Adobe's 64-bit flash for Linux. I suppose I need to get it from
> > Adobe, then find who's running 64 bit and not 32 bit
> 
> On 64 bit, the [manual] install was as simply as moving a 
> backstop copy of the old module to one side for testing, and 
> manually positioning the new .so at:
> 
>   /usr/lib64/mozilla/plugins
> 
> and restarting Firefox ... I've not packaged it up yet

Russ' method worked for me as well.  I should add, for opera users,
opera looks first in /usr/lib/opera/plugins, but I changed the order in
opera's menu (get to advanced and content) and all was good.


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Cordelia: Do you know what he's going to do to me when he
finds out I let his car get stolen? I mean, what are the chances that
a vampire has full insurance with a low deductible?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL 6 potential release date???

2010-09-17 Thread John R. Dennison
On Fri, Sep 17, 2010 at 04:19:21PM -0500, Les Mikesell wrote:
> 
> I thought that was the debian mantra.  And also the reason we don't use it.

Who is this "we" you speak of?  What I posted was the hard cold 
truth of the matter.  Redhat does not discuss release dates 
with the public, so "it will be released when it is ready and
not a second before" is as close as you are going to get from
anyone with regards to a release date.






John
-- 
The men the American public admire most extravagantly are the most daring
liars; the men they detest most violently are those who try to tell them
the truth.

-- H. L. Mencken (1880-1956), journalist, satirist, and freethinker, The
   Smart set, Volume 68 (with George Jean Nathan) p 49 (1922)


pgpAnv2NMbXry.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL 6 potential release date???

2010-09-17 Thread John R. Dennison
On Fri, Sep 17, 2010 at 04:14:19PM -0500, Tom Bishop wrote:
> Thanks and Yes and I agree and know that, but I was just wondering if they
> had a potential target date.I have read September and also October but
> was wondering if any of that was more than speculation

It's *all* speculation.  Redhat does not discuss release dates.

You can, perhaps, draw conclussions as to imminent release based
on bugzilla activity, but that is by no means a sure thing.




John


-- 
DMR: So fsck was originally called something else.
Q: What was it called?
DMR: Well, the second letter was different.

-- Dennis M. Ritchie, Usenix, June 18, 1998.


pgpi9xQ6qEkJW.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Transferring system to new drive

2010-09-17 Thread Les Mikesell
On 9/17/2010 4:52 PM, Timothy Murphy wrote:

 I was thinking of copying the old root partition with
 sudo cp -a -P /* /mnt/hd
>>
>>> I think the command rsync is a better approach for this task. It has
>>> much more features, for example, you can exclude certain files.
>>
>> Thanks for the suggestion.
>
> Thanks for all the responses.
>
> Further to my query,
> I'm wondering if one can safely copy partitions
> (in particular the root partition / )
> while the system is running.
>
> The reason that I ask is that I'm slightly afraid
> the machine will not re-boot into single-user mode
> with the present OS on the sick disk.

Theoretically you shouldn't, but I've never had a problem using rsync to 
copy running machines - the same should apply to tar/cp/cpio, etc.   A 
dd-style image copy would not be safe with the disk changing, though.

Be sure you exclude /proc, /sys, /dev.  And if you have trouble, you can 
boot the system install disk in rescue mode to recover.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Adobe's 64-bit flash for Linux Was: Re: looking for cool

2010-09-17 Thread R P Herrold
On Fri, 17 Sep 2010, m.r...@5-cent.us wrote:

> Actually, my manager just laid something on me this morning: the new
> release of Adobe's 64-bit flash for Linux. I suppose I need to get it from
> Adobe, then find who's running 64 bit and not 32 bit

On 64 bit, the [manual] install was as simply as moving a 
backstop copy of the old module to one side for testing, and 
manually positioning the new .so at:

/usr/lib64/mozilla/plugins

and restarting Firefox ... I've not packaged it up yet

-- Russ herrold

[herr...@centos-5 plugins]$ pwd ; ls -al ; uname -a
/usr/lib64/mozilla/plugins
total 19760
drwxr-xr-x 2 root root 4096 Sep 16 10:45 .
drwxr-xr-x 4 root root 4096 Sep  8 12:39 ..
-rw-r--r-- 1 root root 10601968 Sep 16 10:45 libflashplayer.so
-rwxr-xr-x 1 root root  9570952 Dec 30  2009 libflashplayer.so-OLD
Linux centos-5.first.lan 2.6.18-194.11.3.el5xen #1 SMP Mon Aug 
30 16:55:32 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux
[herr...@centos-5 plugins]$
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Howto enter a password to mount windows share in Places

2010-09-17 Thread Akemi Yagi
On Fri, Sep 17, 2010 at 2:48 PM, Denis  wrote:
> Akemi Yagi wrote:
>> On Thu, Sep 16, 2010 at 12:05 PM, Denis  wrote:

>> http://wiki.centos.org/TipsAndTricks/WindowsShares

> Thanks, I looked there. But I was looking for something that would
> easily disconnect and maybe do it automatically when the user was logged
> out. This will be used in a small lab setting where there will be an
> single login so I don't want to leave one person's account mounted for
> the next person to have be able to access. I guess I am looking for
> something that would function like NIS. I guess an option is to run NIS
> and then a person can have the some of this customized for the user.

That is exactly the same situation as mine. We are a small lab with a
single account shared by all members (mixed OS with Windows/Scientific
Linux/CentOS). On the Linux machines, Windows shares get auto-mounted
when user tries to access them and unmounted after certain inactivity.
I'm using the "3. Even-better method" on the wiki.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Howto enter a password to mount windows share in Places

2010-09-17 Thread Les Mikesell
On 9/17/2010 4:48 PM, Denis wrote:
> Akemi Yagi wrote:
>> On Thu, Sep 16, 2010 at 12:05 PM, Denis   wrote:
>>> Hi - using gnome I am trying to use Places ->   Connect to Server to mount
>>> a windows share. I can do:
>>>
>>> smbclient //disk.site.edu/uname$ -U uname%passwd
>>>
>>> but have not been able to transfer that infomation into the GUI that can
>>> mount the Windows Share, specifically can't figure out how to enter the
>>> password.
>>>
>>> I'm trying make things as simple as possible for windows students to use
>>> CentOS.
>>
>> Then this CentOS wiki is your friend:
>>
>> http://wiki.centos.org/TipsAndTricks/WindowsShares
>>

> Thanks, I looked there. But I was looking for something that would
> easily disconnect and maybe do it automatically when the user was logged
> out. This will be used in a small lab setting where there will be an
> single login so I don't want to leave one person's account mounted for
> the next person to have be able to access. I guess I am looking for
> something that would function like NIS. I guess an option is to run NIS
> and then a person can have the some of this customized for the user.

If you already have a windows server/domain with all the accounts you 
can do smb authentication against it instead of setting up nis.  Just 
run system-config-authentication and enable it, configuring the domain 
and controllers to use.   You still have to create matching accounts on 
the server but you don't have to manage separate passwords.  It doesn't 
quite solve your problem but it gives you a home directory where you can 
add things per user - and maybe there's a way to get the automounter to 
do it.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL 6 potential release date???

2010-09-17 Thread Mike Hanby
I thought it was the Id mantra :-)

I've been checking around and haven't heard anything other than speculation.

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of 
Les Mikesell
Sent: Friday, September 17, 2010 4:19 PM
To: centos@centos.org
Subject: Re: [CentOS] RHEL 6 potential release date???

On 9/17/2010 4:05 PM, John R. Dennison wrote:
> On Fri, Sep 17, 2010 at 03:16:59PM -0500, Tom Bishop wrote:
>> Benn playing with the beta's and have looked around for a potential release
>> date...Does anyone know what the likely date is??? Thanks
>
>   "When it is ready and not a second before."
>
>   I would suggest you ask upstream but they will tell you the
>   exact same thing.

I thought that was the debian mantra.  And also the reason we don't use it.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Transferring system to new drive

2010-09-17 Thread Timothy Murphy
Timothy Murphy wrote:

> Marcelo M. Garcia wrote:
> 
>>> I was thinking of copying the old root partition with
>>> sudo cp -a -P /* /mnt/hd
> 
>> I think the command rsync is a better approach for this task. It has
>> much more features, for example, you can exclude certain files.
> 
> Thanks for the suggestion.

Thanks for all the responses.

Further to my query,
I'm wondering if one can safely copy partitions
(in particular the root partition / )
while the system is running.

The reason that I ask is that I'm slightly afraid
the machine will not re-boot into single-user mode
with the present OS on the sick disk.



-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Was: Re: looking for cool, post-install things, is custom software

2010-09-17 Thread Les Mikesell
On 9/17/2010 4:32 PM, Keith Roberts wrote:
>
>>
>> Actually, my manager just laid something on me this morning: the new
>> release of Adobe's 64-bit flash for Linux. I suppose I need to get it from
>> Adobe, then find who's running 64 bit and not 32 bit
>
> Can you find that out via TCP/IP, or not ?

'ssh host uname -i' - but that might not be enough.  What is supposed to 
happen if you have a 64 bit machine but run a 32 bit browser?  It 
doesn't look like their yum setup autodetects but it should at least 
work for the 32 bit side.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Howto enter a password to mount windows share in Places

2010-09-17 Thread Denis
Akemi Yagi wrote:
> On Thu, Sep 16, 2010 at 12:05 PM, Denis  wrote:
>> Hi - using gnome I am trying to use Places ->  Connect to Server to mount
>> a windows share. I can do:
>>
>> smbclient //disk.site.edu/uname$ -U uname%passwd
>>
>> but have not been able to transfer that infomation into the GUI that can
>> mount the Windows Share, specifically can't figure out how to enter the
>> password.
>>
>> I'm trying make things as simple as possible for windows students to use
>> CentOS.
>
> Then this CentOS wiki is your friend:
>
> http://wiki.centos.org/TipsAndTricks/WindowsShares
>
> Akemi
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
Thanks, I looked there. But I was looking for something that would 
easily disconnect and maybe do it automatically when the user was logged 
out. This will be used in a small lab setting where there will be an 
single login so I don't want to leave one person's account mounted for 
the next person to have be able to access. I guess I am looking for 
something that would function like NIS. I guess an option is to run NIS 
and then a person can have the some of this customized for the user.

Denis Becker

-- 

Denis Becker
ITS - Engineering
MN State Univ., Mankato
Mankato Minnesota
ph: 507-389-5617
fx: 507-389-5002

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Bandwidth issues

2010-09-17 Thread Michel Bulgado
Hello this is the first time I write to the list.

I use in my company CentOS 5.5 on all servers, especially in the 
firewall, recently I have problems with bandwidth, since my internet 
connection is 512 Kbps and the same is saturated with torrents.

I need to limit the bandwidth consumption for torrents, giving highest 
priority to http traffic. leaving the torrents that are downloaded from 
a single IP address at a speed of 128 Kbps

I use iptables on the firewall.

Could tell me if it possible to limit such traffic with iptables and 
send me some examples?

Thanks

Michel
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Was: Re: looking for cool, post-install things, is custom software

2010-09-17 Thread Keith Roberts
On Fri, 17 Sep 2010, m.r...@5-cent.us wrote:

> To: CentOS mailing list 
> From: m.r...@5-cent.us
> Subject: [CentOS] Was: Re:  looking for cool, post-install things,
> is custom software
> 
> Les Mikesell wrote:
>> On 9/17/2010 3:30 PM, m.r...@5-cent.us wrote:
>>>
 All I'm saying is that it often turns out to be a whole lot more work
 than the initial 'configure, make, make install', so you either have to
 train the users to do their own copies in their own space so it will
> 
>> If you have different users needing these things on the same machine you
>> must at least have run into situations where someone needs one version
>> of a CPAN module or a new php/python/mysql version when at the same time
>> someone else is running something that won't work with it.
>>
>> You might have run into the CPAN issue if you installed something like
>> RT in the Centos 4 era.
>
> Actually, my manager just laid something on me this morning: the new
> release of Adobe's 64-bit flash for Linux. I suppose I need to get it from
> Adobe, then find who's running 64 bit and not 32 bit

Can you find that out via TCP/IP, or not ?

Keith
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?

2010-09-17 Thread James B. Byrne

On Fri, September 17, 2010 05:51, Robert P. J. Day wrote:

>
>   from this RHEL doc page:
>
> http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openssh-server-config.html
>
> the reader is advised to, for the sake of security, remove/disable
> vsftpd, ostensibly in favour of sftp/sftp-server.  really?
>
>   i can obviously see disallowing stuff like telnet and rsh and
> rlogin, that's a no-brainer.  but advising against vsftpd for the
> sake of security?  i'm not sure i see the logic in that.  thoughts?

It depends.  What this should say is that if you have no requirement
for anonymous ftp access on a particular host then disabling the
vsftpd service makes perfect sense and should be done.  It should
also say that plain text authenticated ftp access compromises any
user passwords employed thereon and for this reason ONLY ANONYMOUS
ftp access should ever be available if vsftpd is running.

That said, configuring vsftpd safely can sometimes be a challenge
even for anonymous access. This is particularity the case when
working with virtual hosts and ip-addrs.  Mainly because vsftpd logs
nothing if a session is not established for whatever reason, like an
expired certificate for example.

If you do not foresee any requirement for anonymous ftp access to a
host then removing the software is the sensible course of action.

For the most part sftp is a perfectly acceptable replacement for
ftp. From a user experience standpoint most will never notice the
change.  From the sysadmin pov the want of a working chroot jail for
sftp remains a bit problematic.

-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL 6 potential release date???

2010-09-17 Thread Les Mikesell
On 9/17/2010 4:05 PM, John R. Dennison wrote:
> On Fri, Sep 17, 2010 at 03:16:59PM -0500, Tom Bishop wrote:
>> Benn playing with the beta's and have looked around for a potential release
>> date...Does anyone know what the likely date is??? Thanks
>
>   "When it is ready and not a second before."
>
>   I would suggest you ask upstream but they will tell you the
>   exact same thing.

I thought that was the debian mantra.  And also the reason we don't use it.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 3:36 PM, R P Herrold wrote:
>
>> Agreed that it's good to know how - but 'there isn't any rpm' should
>> really mean there isn't any rpm at any well-maintained location, not
>> just in the base system or that you didn't bother to look.  Every time
>> you build something yourself you are taking on the job of maintaining it
>> forever and probably leaving people in a lurch when you leave and
>> someone else has to figure out what non-standard things you did.
>
> I think you overstate the matter with a strawman that lacks
> mutuality of obligation ...
>
> If a person (person X) is employed at site Y, and the folks
> responsible for that site Y are willing to pay person X
> forever to maintain content forever, perhaps there is a 'leave
> in the lurch' situation

I'm commenting in the context of a new sysadmin and what they should be 
taught.  My point is that just because there is a huge amount of free 
code available for downloading and the time it takes to run 'configure, 
make, make install' is trivial, it is not necessarily a good idea to do 
that every time anyone asks.

Maybe we should compare it to what happens when someone asks to have 
something new added to CentOS, and note that all of the same reasons for 
not doing that may (or admittedly may not) apply to doing it within a 
company.  It's just something a beginner should think about.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Was: Re: looking for cool, post-install things, is custom software

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 3:30 PM, m.r...@5-cent.us wrote:
>>
>>> All I'm saying is that it often turns out to be a whole lot more work
>>> than the initial 'configure, make, make install', so you either have to
>>> train the users to do their own copies in their own space so it will

> If you have different users needing these things on the same machine you
> must at least have run into situations where someone needs one version
> of a CPAN module or a new php/python/mysql version when at the same time
> someone else is running something that won't work with it.
>
> You might have run into the CPAN issue if you installed something like
> RT in the Centos 4 era.

Actually, my manager just laid something on me this morning: the new
release of Adobe's 64-bit flash for Linux. I suppose I need to get it from
Adobe, then find who's running 64 bit and not 32 bit

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL 6 potential release date???

2010-09-17 Thread Tom Bishop
Thanks and Yes and I agree and know that, but I was just wondering if they
had a potential target date.I have read September and also October but
was wondering if any of that was more than speculation

On Fri, Sep 17, 2010 at 4:05 PM, John R. Dennison  wrote:

> On Fri, Sep 17, 2010 at 03:16:59PM -0500, Tom Bishop wrote:
> > Benn playing with the beta's and have looked around for a potential
> release
> > date...Does anyone know what the likely date is??? Thanks
>
> "When it is ready and not a second before."
>
>I would suggest you ask upstream but they will tell you the
>exact same thing.
>
>
>
>
>John
> --
> "Since every individual is accountable ultimately to the self, the
> formation
> of that self demands our utmost care and attention."
>
> -- A Bene Gesserit teaching spoken by Miles Teg in "Chapterhouse: Dune"
>   by Frank Herbert
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 3:30 PM, m.r...@5-cent.us wrote:
>>
>>> All I'm saying is that it often turns out to be a whole lot more work
>>> than the initial 'configure, make, make install', so you either have to
>>> train the users to do their own copies in their own space so it will
>>> scale, or be very careful about how much of this you take on.  And I'm
>>> saying this from experience.  It's not much different from writing your
>>> own code where the initial cut is about 10% of the work of maintaining
>>> it - and if the upstream project goes away or takes a direction not
>>> compatible with your use, that's where you end up anyway.
>>
>> Having spent far more of my career as a software person, let me say that
>> what I've installed not from rpms or other packages has been nowhere
>> near as much work as writing it... esp. when you factor in creature
feep, er,
>> feature creep, and "oh, I meant this, not *that*"
>
> I think it is pretty hard to draw a line between code and custom
> configuration and what you have to do to keep them working as other
> things change.  For example I once ran smail with some custom tweaks to

My experience has been different. When I'm working as a developer, it's
*all* development. When I've installed some software for someone, it may
be a pita to install, but then I only once in a while have to go through
that again, and the next time, I know most of the things that need doing.
Not something to take up most of my week.

> If you have different users needing these things on the same machine you

Um, no. Our users, or teams, each have a number of servers:  dev, test and
prod.

> You might have run into the CPAN issue if you installed something like
> RT in the Centos 4 era.

Ugh. When I was with AT&T, 3-4 years ago, we looked at RT, and blew it off
for Mantis, which was *much* easier to work with.

Hmmm, or was there some other project management software I installed.
 It's been a few years, and I ain't there with notes.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 3:30 PM, m.r...@5-cent.us wrote:
>
>> All I'm saying is that it often turns out to be a whole lot more work
>> than the initial 'configure, make, make install', so you either have to
>> train the users to do their own copies in their own space so it will
>> scale, or be very careful about how much of this you take on.  And I'm
>> saying this from experience.  It's not much different from writing your
>> own code where the initial cut is about 10% of the work of maintaining
>> it - and if the upstream project goes away or takes a direction not
>> compatible with your use, that's where you end up anyway.
>
> Having spent far more of my career as a software person, let me say that
> what I've installed not from rpms or other packages has been nowhere near
> as much work as writing it... esp. when you factor in creature feep, er,
> feature creep, and "oh, I meant this, not *that*"

I think it is pretty hard to draw a line between code and custom 
configuration and what you have to do to keep them working as other 
things change.  For example I once ran smail with some custom tweaks to 
work with binary attachments from a proprietary (AT&T) PC mail program 
and uucp. And some glue between that, hylafax, and a custom print 
spooler.  They were, ummm, non-trivial to keep working over a period of 
several years, especially when smail sort of disappeared.  But that was 
back before there were packaged versions of much of anything and you 
couldn't even count on updates to compile.  The code that I controlled 
directly wasn't quite the same kind of problem.

If you have different users needing these things on the same machine you 
must at least have run into situations where someone needs one version 
of a CPAN module or a new php/python/mysql version when at the same time 
someone else is running something that won't work with it.

You might have run into the CPAN issue if you installed something like 
RT in the Centos 4 era.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL 6 potential release date???

2010-09-17 Thread John R. Dennison
On Fri, Sep 17, 2010 at 03:16:59PM -0500, Tom Bishop wrote:
> Benn playing with the beta's and have looked around for a potential release
> date...Does anyone know what the likely date is??? Thanks

"When it is ready and not a second before."

I would suggest you ask upstream but they will tell you the
exact same thing.




John
-- 
"Since every individual is accountable ultimately to the self, the formation
of that self demands our utmost care and attention."

-- A Bene Gesserit teaching spoken by Miles Teg in "Chapterhouse: Dune"
   by Frank Herbert


pgp9xFDinmeUm.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread R P Herrold
On Fri, 17 Sep 2010, Les Mikesell wrote:

> Agreed that it's good to know how - but 'there isn't any rpm' should
> really mean there isn't any rpm at any well-maintained location, not
> just in the base system or that you didn't bother to look.  Every time
> you build something yourself you are taking on the job of maintaining it
> forever and probably leaving people in a lurch when you leave and
> someone else has to figure out what non-standard things you did.

I think you overstate the matter with a strawman that lacks 
mutuality of obligation ...

If a person (person X) is employed at site Y, and the folks 
responsible for that site Y are willing to pay person X 
forever to maintain content forever, perhaps there is a 'leave 
in the lurch' situation

If site Y was willing to pay for documentation to be produced 
as to how the site was installed, and how it might thereafter 
be maintained going forward, it is no longer: 'non-standard'

But, if site Y was not willing to open their purse, it sure 
seems to me that one cannot fairly somehow hold person X 
accountable with the 'guilting' as to: 'leave in the lurch' 
for entropy and the absence of knowledge of site Y on how to 
address it without person X

Site Y gets the union of: what a commons community will freely 
offer, whatever deliverables one has paid for, and what one is 
then willing a subsequent maintainer to pay for when/if 
entropy happens

but this thread has wandered far, far afield

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Kwan Lowe
On Fri, Sep 17, 2010 at 3:52 PM, Paul Heinlein  wrote:
[snip]
> I've keyed configuration repositories to HOSTNAME before (and still do
> for very small installations), but over the long haul I've found
> the service-keyed repository more to my liking. In particular,
> cfengine makes it easy to work that way:
>
>   /etc/motd -> /r/systems/motd/motd.HOSTNAME
>   /etc/openldap/slapd.conf -> /r/services/openldap/slapd.conf.HOSTNAME


> One benefit of this method is that you can have a single file that
> works for a whole class of machines, e.g.,
>
>   /etc/syslog.conf -> /r/services/syslog/syslog.conf.client-linux
>
> where "client" becomes "server" for syslog servers and "linux"
> becomes "macosx" or "sunos" depending on the platform.
>
> As I said, however, a lot of that arrangement is a function of the way
> that cfengine works. I'd probably do it differently if I were using a
> different tool.

There is a benefit of a service centered view and may adopt it at some
point. I have used cfengine, and more recently, puppet and they do
lend themselves to that approach.  I am still looking to be able to
provision a system with minimal interaction *and* layer on an
identity.  However it's done though, I completely agree with your
original point that it needs be managed whether on 5 systems or 500.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 3:08 PM, m.r...@5-cent.us wrote:
>>
>>> Agreed that it's good to know how - but 'there isn't any rpm' should
>>> really mean there isn't any rpm at any well-maintained location, not
>>> just in the base system or that you didn't bother to look.  Every time
>>> you build something yourself you are taking on the job of maintaining
>>> it forever and probably leaving people in a lurch when you leave and
>>> someone else has to figure out what non-standard things you did.
>>
>> Um, no. Sometimes users want stuff that no one *has* built a package
>> for, and I'm certainly not going to. Perhaps you work in a more structured
>> environment, where all the servers are the same. Ain't the case in a lot
>> of places I've worked, and certainly not here (here being where I work
>> now, and who I ->may not<- imply that I speak for, contract regs,
>> federal regs...).
>>
>> And, of course, you'd *better* document what you did and how you did it,
>> and put that in a well-known location, such as the organization's
>> wiki
>
> All I'm saying is that it often turns out to be a whole lot more work
> than the initial 'configure, make, make install', so you either have to
> train the users to do their own copies in their own space so it will
> scale, or be very careful about how much of this you take on.  And I'm
> saying this from experience.  It's not much different from writing your
> own code where the initial cut is about 10% of the work of maintaining
> it - and if the upstream project goes away or takes a direction not
> compatible with your use, that's where you end up anyway.

Having spent far more of my career as a software person, let me say that
what I've installed not from rpms or other packages has been nowhere near
as much work as writing it... esp. when you factor in creature feep, er,
feature creep, and "oh, I meant this, not *that*"

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things t o do on a centos 5.5 system

2010-09-17 Thread Alan Hodgson
On September 17, 2010 01:14:42 pm Les Mikesell wrote:
> Is there any distribution (or even a VM image) that comes with LDAP
> working out of the box for local and samba authentication and ready to
> replicate to others?   I think ClearOS has it for a single install but
> the last I looked the replication wasn't working yet.

Would be nice. Man that was a pain to get working.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 3:08 PM, m.r...@5-cent.us wrote:
>
>> Agreed that it's good to know how - but 'there isn't any rpm' should
>> really mean there isn't any rpm at any well-maintained location, not
>> just in the base system or that you didn't bother to look.  Every time
>> you build something yourself you are taking on the job of maintaining it
>> forever and probably leaving people in a lurch when you leave and
>> someone else has to figure out what non-standard things you did.
>
> Um, no. Sometimes users want stuff that no one *has* built a package for,
> and I'm certainly not going to. Perhaps you work in a more structured
> environment, where all the servers are the same. Ain't the case in a lot
> of places I've worked, and certainly not here (here being where I work
> now, and who I ->may not<- imply that I speak for, contract regs, federal
> regs...).
>
> And, of course, you'd *better* document what you did and how you did it,
> and put that in a well-known location, such as the organization's wiki

All I'm saying is that it often turns out to be a whole lot more work 
than the initial 'configure, make, make install', so you either have to 
train the users to do their own copies in their own space so it will 
scale, or be very careful about how much of this you take on.  And I'm 
saying this from experience.  It's not much different from writing your 
own code where the initial cut is about 10% of the work of maintaining 
it - and if the upstream project goes away or takes a direction not 
compatible with your use, that's where you end up anyway.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] RHEL 6 potential release date???

2010-09-17 Thread Tom Bishop
Benn playing with the beta's and have looked around for a potential release
date...Does anyone know what the likely date is??? Thanks
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 3:01 PM, Scott Robbins wrote:
>
>>
>> And their utterly inadequate tools.
>
> LDAP's, or AD's?  Our Windows admin teaches mixed martial arts as a
> sideline, so I don't argue too much with him.  :)
>
> All kidding aside, to the OP, though it's not a cool thing--it's one of
> the crummy things in many cases--finding docs to supplement the often
> inadequate official documentation is pretty durn important.

Is there any distribution (or even a VM image) that comes with LDAP 
working out of the box for local and samba authentication and ready to 
replicate to others?   I think ClearOS has it for a single install but 
the last I looked the replication wasn't working yet.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Scott Robbins wrote:
> On Fri, Sep 17, 2010 at 03:34:58PM -0400, m.r...@5-cent.us wrote:
>> Scott Robbins wrote:
>

>> And their utterly inadequate tools.
>
> LDAP's, or AD's?  Our Windows admin teaches mixed martial arts as a
> sideline, so I don't argue too much with him.  :)

openLDAP.
>
> All kidding aside, to the OP, though it's not a cool thing--it's one of
> the crummy things in many cases--finding docs to supplement the often
> inadequate official documentation is pretty durn important.

Yup.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 2:15 PM, m.r...@5-cent.us wrote:
>>
 How to download, md5sum check, unpack, configure and
 compile a GPL *.tar.gz package.

 As SysAdmin that's something they will need to do sooner or
 later :)
>>>
>>> But it's much more important to know all the reasons *not* to do that
>>> except as a last resort.  Reasons that someone who has had to maintain
>>> and update such things for decades will know that won't occur to an
>>> inexperienced beginner.  You can summarize by saying "yum update is a
>>> lot easier".
>>
>> Excerpt when a user comes to you and asks you to install a package for
>> which there isn't any rpm... or, for that matter, when you're force to
>> use CPAN to install a module for which there's no .rpm, and then the build
>> fails, but works if you cd into /root/.cpan/BUILD/  and
>> make
>
> Agreed that it's good to know how - but 'there isn't any rpm' should
> really mean there isn't any rpm at any well-maintained location, not
> just in the base system or that you didn't bother to look.  Every time
> you build something yourself you are taking on the job of maintaining it
> forever and probably leaving people in a lurch when you leave and
> someone else has to figure out what non-standard things you did.

Um, no. Sometimes users want stuff that no one *has* built a package for,
and I'm certainly not going to. Perhaps you work in a more structured
environment, where all the servers are the same. Ain't the case in a lot
of places I've worked, and certainly not here (here being where I work
now, and who I ->may not<- imply that I speak for, contract regs, federal
regs...).

And, of course, you'd *better* document what you did and how you did it,
and put that in a well-known location, such as the organization's wiki

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Robert P. J. Day
On Fri, 17 Sep 2010, Les Mikesell wrote:

> Agreed that it's good to know how - but 'there isn't any rpm' should
> really mean there isn't any rpm at any well-maintained location, not
> just in the base system or that you didn't bother to look.  Every
> time you build something yourself you are taking on the job of
> maintaining it forever and probably leaving people in a lurch when
> you leave and someone else has to figure out what non-standard
> things you did.

  i agree with this.  i'm looking for extra goodies that don't involve
possibly violating corporate IT policy by downloading and building new
packages to be installed on mission-critical servers.  there are
certainly enough existing packages at trustworthy repos that i don't
need to go beyond that.

rday

-- 


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Larry Vaden
On Fri, Sep 17, 2010 at 2:39 AM, Robert P. J. Day  wrote:
>
>  logging utilities?  intrusion detection?  monitoring?  anything that
> leaps to mind that i can use to fill up a few more hours.  i'm already
> thinking of showing how to build and boot a new kernel.  other ideas?
> thanks.

Cacti, pmacct, pnrg ...

kind regards/ldv
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Scott Robbins
On Fri, Sep 17, 2010 at 03:34:58PM -0400, m.r...@5-cent.us wrote:
> Scott Robbins wrote:

> >
> > Heh--well, since I've written my own page on it, it's gotten better. RH
> > didn't help by making some undocumented changes, but once again, the
> > CentOS folks got it documented.
> 
> I did have some notes, but dunno if I ever emailed 'em to myself from my
> job in '06, but though it took me about a month, I managed to get it up,
> with the help of a dozen or so links, after wading through dozens of
> links, and lots of folks begging for help (and not getting any), and *way*
> outdated stuff
> >

That's basically what I did--wrote up my notes and put up the page that
I wished I'd had when first trying to wrap my head around it.  Like many
opensource things, it's not as hard as it seems, once you realize how
it's done. 


> > (Although the part about LDAP documentation is not trolling, I think
> > it's pretty much an accepted thing.  The Active Directory part was, of
> > course, a troll.)
> 
> And their utterly inadequate tools.

LDAP's, or AD's?  Our Windows admin teaches mixed martial arts as a
sideline, so I don't argue too much with him.  :)

All kidding aside, to the OP, though it's not a cool thing--it's one of
the crummy things in many cases--finding docs to supplement the often
inadequate official documentation is pretty durn important. 


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 2:15 PM, m.r...@5-cent.us wrote:
>
>>> How to download, md5sum check, unpack, configure and
>>> compile a GPL *.tar.gz package.
>>>
>>> As SysAdmin that's something they will need to do sooner or
>>> later :)
>>
>> But it's much more important to know all the reasons *not* to do that
>> except as a last resort.  Reasons that someone who has had to maintain
>> and update such things for decades will know that won't occur to an
>> inexperienced beginner.  You can summarize by saying "yum update is a
>> lot easier".
>
> Excerpt when a user comes to you and asks you to install a package for
> which there isn't any rpm... or, for that matter, when you're force to use
> CPAN to install a module for which there's no .rpm, and then the build
> fails, but works if you cd into /root/.cpan/BUILD/  and make

Agreed that it's good to know how - but 'there isn't any rpm' should 
really mean there isn't any rpm at any well-maintained location, not 
just in the base system or that you didn't bother to look.  Every time 
you build something yourself you are taking on the job of maintaining it 
forever and probably leaving people in a lurch when you leave and 
someone else has to figure out what non-standard things you did.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 2:12 PM, m.r...@5-cent.us wrote:
>
> You, on the other hand, remind me of Larry Wall, who popped into
> comp.lang.awk around '93 or '94, and rather than try to help someone solve
> his awk problem, tried to get him to rewrite it into perl

I'll take that as a compliment.  Larry has always been brilliant.  Note 
that I'm not against continuing to use anything that works - I just 
don't see the point in learning awk today since there are better and 
more completed alternatives today and think it is a bad idea to 
recommend to anyone.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Paul Heinlein
On Fri, 17 Sep 2010, Kwan Lowe wrote:

> My general method is to keep a CVS committed directory somewhere on
> the root filesystem with all configurations. Then I symlink the
> tracked files back to that repository.  For example:
>
>  /etc/hosts  --> /configs/HOSTNAME/etc/hosts
>  /etc/syslog.conf --> /configs/HOSTNAME/etc/syslog.conf
>
> Restoring a machine's "identity" is just a simple matter of checking 
> out that host's configuration directory then running a script to 
> create the symlink.s

I've keyed configuration repositories to HOSTNAME before (and still do 
for very small installations), but over the long haul I've found 
the service-keyed repository more to my liking. In particular, 
cfengine makes it easy to work that way:

   /etc/motd -> /r/systems/motd/motd.HOSTNAME
   /etc/openldap/slapd.conf -> /r/services/openldap/slapd.conf.HOSTNAME

One benefit of this method is that you can have a single file that 
works for a whole class of machines, e.g.,

   /etc/syslog.conf -> /r/services/syslog/syslog.conf.client-linux

where "client" becomes "server" for syslog servers and "linux" 
becomes "macosx" or "sunos" depending on the platform.

As I said, however, a lot of that arrangement is a function of the way 
that cfengine works. I'd probably do it differently if I were using a 
different tool.

-- 
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 2:07 PM, Scott Robbins wrote:
>
 Oh - and how to install and use freenx/NX for remote access.
>>>
>>> h ... good idea.  or i might just add in VNC and carry over the
>>> freenx to an additional course dealing with networking/remote
>>> admin/etc.  thanks.
>>
>> I'd guess that for most people starting with linux, freenx with NX running on
>> their existing windows/mac would be a much better fit.  Maybe vmwware player 
>> or
>> virtualbox too.
>>
>
> And then, you can give them one of the more important Linux lessons.
> Let them install FreeNX, go to the website and see the completely
> outdated docmentation.  Learning how horrible so much of the
> documentation is, is probably an important part of being a Linux
> administrator.  FreeNX, fortunately, has a CentOS wiki article, so let
> them google for it.
>
> Not even being sarcastic here.  Lack of good docoumentation is probably
> one of the biggest challenges facing the Linux user or
> administrator.

I sort-of agree, but having a working display is the one thing you need 
most in order to do anything else at all - and doing it via freenx often 
lets you park your session on a fast remote server instead of the slow 
inherited desktop you are likely to use for experimentation otherwise, 
so I'd make an exception and do some handholding here. It's in epel now 
so I'd get it from there via yum instead of the centos-testing version. 
  And then you can ssh in to the server with putty or whatever client 
you like to cat /etc/nxserver/client.id_dsa.key.  Copy/paste that into 
the key dialog in your local NX config, save it and you are ready to go 
faster than you can find the first page of incorrect details with 
google.  And if you have more than one person doing it, they can share 
the same box with user level logins and learn to coordinate their root 
changes.

-- 
   Les Mikesell
lesmike...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Keith Roberts
On Fri, 17 Sep 2010, Les Mikesell wrote:

> To: centos@centos.org
> From: Les Mikesell 
> Subject: Re: [CentOS] looking for cool,
> post-install things to do on a centos 5.5 system
> 
> On 9/17/2010 1:21 PM, Keith Roberts wrote:
>>
 How to download, md5sum check, unpack, configure and
 compile a GPL *.tar.gz package.

 As SysAdmin that's something they will need to do sooner or
 later :)
>>>
>>> But it's much more important to know all the reasons *not* to do that
>>> except as a last resort.  Reasons that someone who has had to maintain
>>> and update such things for decades will know that won't occur to an
>>> inexperienced beginner.  You can summarize by saying "yum update is a
>>> lot easier".
>>
>> Of course.
>>
>> But what if they want/need to install a package that is not
>> available in any of the repos? Maybe even just for
>> testing purposes?
>
> Yes, that's where the 'last resort' comes in...  But you are right, you
> should also know how to build things that live in /usr/local or under
> your home directory.  Sometimes there are special purpose needs for
> things that don't exist as rpms yet or you need concurrent access to
> different versions.  And I'm sure someone will add that you should also
> know how to build your own rpm if I don't mention it, but that can be
> non-trivial compared to just staying out of the way of the
> system-managed space.

That's almost getting into repository management. I've 
looked at this rpm guide:

http://www.rpm.org/max-rpm-snapshot/

I found this very helpfull in understanding how to use RPM, 
and it also goes into details about creating rpm packages.

Regards,

Keith

-
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Scott Robbins wrote:
> On Fri, Sep 17, 2010 at 03:18:23PM -0400, m.r...@5-cent.us wrote:
>> Scott Robbins wrote:

>> >> >> Oh - and how to install and use freenx/NX for remote access.
>
>> > And then, you can give them one of the more important Linux lessons.
>> > Let them install FreeNX, go to the website and see the completely
>> > outdated docmentation.  Learning how horrible so much of the
>> > documentation is, is probably an important part of being a Linux
>> > administrator.  FreeNX, fortunately, has a CentOS wiki article, so let
>> > them google for it.
>> >
>> > Not even being sarcastic here.  Lack of good docoumentation is
>> > probably one of the biggest challenges facing the Linux user or
administrator.
>>
>> Hey, you're being easy on them. Have them install and configure
>> openLDAP, and find the documentation
>
> Heh--well, since I've written my own page on it, it's gotten better. RH
> didn't help by making some undocumented changes, but once again, the
> CentOS folks got it documented.

I did have some notes, but dunno if I ever emailed 'em to myself from my
job in '06, but though it took me about a month, I managed to get it up,
with the help of a dozen or so links, after wading through dozens of
links, and lots of folks begging for help (and not getting any), and *way*
outdated stuff
>
> I suspect LDAP documentation is one reason Active Directory became so
> popular.  (Feed the troll, I'm hungry.)   :)

Dunno. It was up there already. But then, M$$$ would make sure of that.
>
> (Although the part about LDAP documentation is not trolling, I think
> it's pretty much an accepted thing.  The Active Directory part was, of
> course, a troll.)

And their utterly inadequate tools.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread John R Pierce
  On 09/17/10 12:12 PM, m.r...@5-cent.us wrote:
> You, on the other hand, remind me of Larry Wall, who popped into
> comp.lang.awk around '93 or '94, and rather than try to help someone solve
> his awk problem, tried to get him to rewrite it into perl
>
>

well, not all problems are nails, even if your only tool is a hammer.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Scott Robbins
On Fri, Sep 17, 2010 at 03:18:23PM -0400, m.r...@5-cent.us wrote:
> Scott Robbins wrote:


> >> >> Oh - and how to install and use freenx/NX for remote access.
> >> >
> >

> > And then, you can give them one of the more important Linux lessons.
> > Let them install FreeNX, go to the website and see the completely
> > outdated docmentation.  Learning how horrible so much of the
> > documentation is, is probably an important part of being a Linux
> > administrator.  FreeNX, fortunately, has a CentOS wiki article, so let
> > them google for it.
> >
> > Not even being sarcastic here.  Lack of good docoumentation is probably
> > one of the biggest challenges facing the Linux user or administrator.
> 
> Hey, you're being easy on them. Have them install and configure openLDAP,
> and find the documentation

Heh--well, since I've written my own page on it, it's gotten better. RH
didn't help by making some undocumented changes, but once again, the
CentOS folks got it documented.  

I suspect LDAP documentation is one reason Active Directory became so
popular.  (Feed the troll, I'm hungry.)   :)

(Although the part about LDAP documentation is not trolling, I think
it's pretty much an accepted thing.  The Active Directory part was, of
course, a troll.)  

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Scott Robbins wrote:
> On Fri, Sep 17, 2010 at 08:18:38AM -0500, Les Mikesell wrote:
>> On 9/17/10 7:51 AM, Robert P. J. Day wrote:
>> > On Fri, 17 Sep 2010, Les Mikesell wrote:
>> >
>> >> Oh - and how to install and use freenx/NX for remote access.
>> >
>> >h ... good idea.  or i might just add in VNC and carry over the
>> > freenx to an additional course dealing with networking/remote
>> > admin/etc.  thanks.
>>
>> I'd guess that for most people starting with linux, freenx with NX
>> running on their existing windows/mac would be a much better fit. 
Maybe vmwware
>> player or virtualbox too.
>
> And then, you can give them one of the more important Linux lessons.
> Let them install FreeNX, go to the website and see the completely
> outdated docmentation.  Learning how horrible so much of the
> documentation is, is probably an important part of being a Linux
> administrator.  FreeNX, fortunately, has a CentOS wiki article, so let
> them google for it.
>
> Not even being sarcastic here.  Lack of good docoumentation is probably
> one of the biggest challenges facing the Linux user or administrator.

Hey, you're being easy on them. Have them install and configure openLDAP,
and find the documentation

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 1:06 PM, Keith Roberts wrote:

>> How to download, md5sum check, unpack, configure and
>> compile a GPL *.tar.gz package.
>>
>> As SysAdmin that's something they will need to do sooner or
>> later :)
>
> But it's much more important to know all the reasons *not* to do that
> except as a last resort.  Reasons that someone who has had to maintain
> and update such things for decades will know that won't occur to an
> inexperienced beginner.  You can summarize by saying "yum update is a
> lot easier".

Excerpt when a user comes to you and asks you to install a package for
which there isn't any rpm... or, for that matter, when you're force to use
CPAN to install a module for which there's no .rpm, and then the build
fails, but works if you cd into /root/.cpan/BUILD/ and make

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 12:45 PM, m.r...@5-cent.us wrote:
>>
>>> I don't get it.  Why wouldn't you just talk to the db directly with
>>> perl's dbi/dbd, replacing both the awk and C parts?  I do that all the
>>> time.  Or was that before dbi - or the dbd you needed?
>>
>> Mike, you really aren't reading all of what I wrote. Perl itself wasn't
>> available in '91-'92.
>
> I think you are mistaken about that.  "Programming Perl", covering
> version 4 of perl was published in 1991.  Check the printing history if
> you have a newer copy.  Perl itself goes back to 1987 or so. I'm pretty
> sure I wrote things in version 1 downloaded through usenet.  Not sure
> when dbi/dbd came around but before that there were things like oraperl
> with specific database clients grafted in.

That may be, but it was *not* part of the standard installations, AFAIK. I
remember someone handed me some documentation around '92 or '93, and it
wasn't very clear. Meanwhile, awk was there and available and reliable.
>
> I'll grant the historical value of awk for the prior decade and for the
> conceptual introduction of hash arrays for scripting languages, though.

YES! I *adore* associative arrays.

You, on the other hand, remind me of Larry Wall, who popped into
comp.lang.awk around '93 or '94, and rather than try to help someone solve
his awk problem, tried to get him to rewrite it into perl

  mark "inappropriate venue, to say the least"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 10:52 AM, John Kennedy wrote:
>
> It's all about picking the right tool for the job. Python is good for
> some things, perl for others, awk for still different things...
> It is the beauty of Linux...

But there are things a beginner won't know when making this choice - 
like the limitations of what a language can do, availability of library 
support, cross-platform support, probability of future language changes 
that aren't backwards compatible, etc., etc., all of which turn out to 
be important in the long run as soon as you get past throw-away one liners.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Scott Robbins
On Fri, Sep 17, 2010 at 08:18:38AM -0500, Les Mikesell wrote:
> On 9/17/10 7:51 AM, Robert P. J. Day wrote:
> > On Fri, 17 Sep 2010, Les Mikesell wrote:
> >
> >> Oh - and how to install and use freenx/NX for remote access.
> >
> >h ... good idea.  or i might just add in VNC and carry over the
> > freenx to an additional course dealing with networking/remote
> > admin/etc.  thanks.
> 
> I'd guess that for most people starting with linux, freenx with NX running on 
> their existing windows/mac would be a much better fit.  Maybe vmwware player 
> or 
> virtualbox too.
> 

And then, you can give them one of the more important Linux lessons.
Let them install FreeNX, go to the website and see the completely
outdated docmentation.  Learning how horrible so much of the
documentation is, is probably an important part of being a Linux
administrator.  FreeNX, fortunately, has a CentOS wiki article, so let
them google for it. 

Not even being sarcastic here.  Lack of good docoumentation is probably
one of the biggest challenges facing the Linux user or
administrator.


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Kwan Lowe
On Fri, Sep 17, 2010 at 11:14 AM, Paul Heinlein  wrote:
> I know the OP asked for "cool" things to do, but I'll add my vote to
> those who suggested highlighting configuration management. I'm not
> sure how much puppet or cfengine you teach in a half-day, but I'm
> fairly confident you could cover:

Yes!  If there's anything I wish were taught to new system
administrators, it's that your configuration is your code.

>
>  1. considering configuration files to be code -- it needs to be in
>     a repository
>
>  2. setting up a Subversion or git repository and some possible ways
>     of laying out a configuration repository (per host, per service,
>     etc)
>
>  3. committing changes, recovering older configs when newer ones
>     introduce regressions
>

My general method is to keep a CVS committed directory somewhere on
the root filesystem with all configurations. Then I symlink the
tracked files back to that repository.  For example:

  /etc/hosts  --> /configs/HOSTNAME/etc/hosts
  /etc/syslog.conf --> /configs/HOSTNAME/etc/syslog.conf

Restoring a machine's "identity" is just a simple matter of checking
out that host's configuration directory then running a script to
create the symlink.s

> Personally, I like Subversion for configuration repositories because
> (imo) sysadmins usually like having an authoritative repo rather than
> a widely branched one -- but git is on the rise and is certainly worth
> considering.
>
>
> Other, slightly related, suggestions include setting up a
> documentation wiki and/or a ticketing system. Trac can do both, but
> there are plenty of worthwhile alternatives.
>
> --
> Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 1:21 PM, Keith Roberts wrote:
>
>>> How to download, md5sum check, unpack, configure and
>>> compile a GPL *.tar.gz package.
>>>
>>> As SysAdmin that's something they will need to do sooner or
>>> later :)
>>
>> But it's much more important to know all the reasons *not* to do that
>> except as a last resort.  Reasons that someone who has had to maintain
>> and update such things for decades will know that won't occur to an
>> inexperienced beginner.  You can summarize by saying "yum update is a
>> lot easier".
>
> Of course.
>
> But what if they want/need to install a package that is not
> available in any of the repos? Maybe even just for
> testing purposes?

Yes, that's where the 'last resort' comes in...  But you are right, you 
should also know how to build things that live in /usr/local or under 
your home directory.  Sometimes there are special purpose needs for 
things that don't exist as rpms yet or you need concurrent access to 
different versions.  And I'm sure someone will add that you should also 
know how to build your own rpm if I don't mention it, but that can be 
non-trivial compared to just staying out of the way of the 
system-managed space.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 10:14 AM, Paul Heinlein wrote:
> I know the OP asked for "cool" things to do, but I'll add my vote to
> those who suggested highlighting configuration management. I'm not
> sure how much puppet or cfengine you teach in a half-day, but I'm
> fairly confident you could cover:
>
>1. considering configuration files to be code -- it needs to be in
>   a repository
>
>2. setting up a Subversion or git repository and some possible ways
>   of laying out a configuration repository (per host, per service,
>   etc)
>
>3. committing changes, recovering older configs when newer ones
>   introduce regressions
>
> Personally, I like Subversion for configuration repositories because
> (imo) sysadmins usually like having an authoritative repo rather than
> a widely branched one -- but git is on the rise and is certainly worth
> considering.

Has anyone ever standardized a way to do this that will work across more 
than a few platforms?  I've always thought there should be a way to at 
least make a subversion repository holding copies of all of /etc of all 
of your machines where similar hosts are branches from a master and 
current changes are always checked back in.  Then even if you don't use 
it to control and push changes you could at least easily view the 
changes over time on any host and the difference between any two hosts.

-- 
   Les Mikesell
 lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Keith Roberts
On Fri, 17 Sep 2010, Les Mikesell wrote:

> To: centos@centos.org
> From: Les Mikesell 
> Subject: Re: [CentOS] looking for cool,
> post-install things to do on a centos 5.5 system
> 
> On 9/17/2010 1:06 PM, Keith Roberts wrote:
>>
   i've already added a section on EPEL, just so i can install things
 like git.  and i know there's an entire page at centos.org on extra
 repos.  any there that you *particularly* recommend?  i'll revisit
 that page later today but i'm thinking that, for the sake of this
 first-level admin course, EPEL might be sufficient for now.
>>>
>>> How to identify and work your way out of rpm conflicts.  (without using
>>> nodeps of course).
>>
>> How to download, md5sum check, unpack, configure and
>> compile a GPL *.tar.gz package.
>>
>> As SysAdmin that's something they will need to do sooner or
>> later :)
>
> But it's much more important to know all the reasons *not* to do that
> except as a last resort.  Reasons that someone who has had to maintain
> and update such things for decades will know that won't occur to an
> inexperienced beginner.  You can summarize by saying "yum update is a
> lot easier".

Of course.

But what if they want/need to install a package that is not 
available in any of the repos? Maybe even just for 
testing purposes?

Keith
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] multipath troubleshoot

2010-09-17 Thread Paras pradhan
Hi,
My storage admin just assigned a Lun (fibre) to my server. Then re scanned using

echo "1" > /sys/class/fc_host/host5/issue_lip

echo "1" > /sys/class/fc_host/host6/issue_lip

I can see the scsi device using dmesg

But mpath device are not created for this LUN


Pleas see below. The last 4 should be active and I think this is the problem

Kernel: 2.6.18-164.11.1.el5xen , EL 5.5
--

[r...@cvprd3 lvm]# multipathd -k
multipathd> show paths
hcildev dev_t  pri dm_st   chk_st   next_check
5:0:0:0 sdb 8:16   1   [active][ready]  XXX... 7/20
5:0:0:1 sdc 8:32   1   [active][ready]  XXX... 7/20
5:0:0:16384 sdd 8:48   1   [active][ready]  XXX... 7/20
5:0:0:16385 sde 8:64   1   [active][ready]  XXX... 7/20
5:0:0:32768 sdf 8:80   1   [active][ready]  XXX... 7/20
5:0:0:32769 sdg 8:96   1   [active][ready]  XXX... 7/20
5:0:0:49152 sdh 8:112  1   [active][ready]  XXX... 7/20
5:0:0:49153 sdi 8:128  1   [active][ready]  XXX... 7/20
5:0:0:2 sdj 8:144  1   [active][ready]  XXX... 7/20
5:0:0:16386 sdk 8:160  1   [active][ready]  XXX... 7/20
5:0:0:32770 sdl 8:176  1   [active][ready]  XXX... 7/20
5:0:0:49154 sdm 8:192  1   [active][ready]  XXX... 7/20
5:0:0:3 sdn 8:208  1   [active][ready]  XXX... 7/20
5:0:0:16387 sdo 8:224  1   [active][ready]  XXX... 7/20
5:0:0:32771 sdp 8:240  1   [active][ready]  XXX... 7/20
5:0:0:49155 sdq 65:0   1   [active][ready]  XXX... 7/20
5:0:0:4 sdr 65:16  1   [active][ready]  XXX... 7/20
5:0:0:16388 sds 65:32  1   [active][ready]  XXX... 7/20
5:0:0:32772 sdt 65:48  1   [active][ready]  XXX... 7/20
5:0:0:49156 sdu 65:64  1   [active][ready]  XXX... 7/20
5:0:0:5 sdv 65:80  0   [undef] [faulty] [orphan]
5:0:0:16389 sdw 65:96  0   [undef] [faulty] [orphan]
5:0:0:32773 sdx 65:112 0   [undef] [faulty] [orphan]
5:0:0:49157 sdy 65:128 0   [undef] [faulty] [orphan]
multipathd>

Thanks in Adv
Paras.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] can i run NFS *exclusively* off of v4?

2010-09-17 Thread Robert P. J. Day
On Fri, 17 Sep 2010, Robert P. J. Day wrote:

>
>   is it possible to set up NFS on centos 5.5 so that it uses *only*
> version 4?  i tried this not that long ago on fedora and was surprised
> to see a complaint when i tried to start the server and was told that
> i was missing required functionality of NFSv1, or something equally
> weird.  i'll check the /etc/init.d/nfs script, but i think what got me
> into trouble was trying to use the entire set of options:
>
>   "--no-nfs-version 1 --no-nfs-version 2 --no-nfs-version 3"
>
>   i'm going to try it again this afternoon on centos 5.5, but has
> anyone else tried this?  should it *theoretically* work?

  as an actual example of what i'm talking about, if you take a look
at /etc/sysconfig/nfs on centos 5.5, consider these lines:


# Define which protocol versions mountd
# will advertise. The values are "no" or "yes"
# with yes being the default
#MOUNTD_NFS_V1="no"
#MOUNTD_NFS_V2="no"
#MOUNTD_NFS_V3="no"


  theoretically, should i be able to uncomment all of those lines so
that mountd advertises only V4?  i would have thought so but, if i do
that:

# service nfs restart
Shutting down NFS mountd:  [FAILED]
Shutting down NFS daemon:  [  OK  ]
Shutting down NFS quotas:  [  OK  ]
Shutting down NFS services:[FAILED]
Starting NFS services: [  OK  ]
Starting NFS quotas:   [  OK  ]
Starting NFS daemon:   [  OK  ]
Starting NFS mountd: Usage: rpc.mountd [-F|--foreground] [-h|--help]
[-v|--version] [-d kind|--debug kind]
[-o num|--descriptors num] [-f
exports-file|--exports-file=file]
[-p|--port port] [-V version|--nfs-version version]
[-N version|--no-nfs-version version] [-n|--no-tcp]
[-H ha-callout-prog] [-s|--state-directory-path path]
[-t num|--num-threads=num]
   [FAILED]
#

  on the other hand, if i re-comment just the V1 line:

# service nfs restart
Shutting down NFS mountd:  [FAILED]
Shutting down NFS daemon:  [  OK  ]
Shutting down NFS quotas:  [  OK  ]
Shutting down NFS services:[FAILED]
Starting NFS services: [  OK  ]
Starting NFS quotas:   [  OK  ]
Starting NFS daemon:   [  OK  ]
Starting NFS mountd:   [  OK  ]
#

  now that's just silly, no?  i can start the mountd daemon as long as
i allow it to advertise NFSv1?

rday

-- 


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 12:58 PM, Robert P. J. Day wrote:
> On Fri, 17 Sep 2010, Jim Wildman wrote:
>
>> On Fri, 17 Sep 2010, Robert P. J. Day wrote:
>>
>>>   i've already added a section on EPEL, just so i can install
>>> things like git.  and i know there's an entire page at centos.org
>>> on extra repos.  any there that you *particularly* recommend?
>>> i'll revisit that page later today but i'm thinking that, for the
>>> sake of this first-level admin course, EPEL might be sufficient
>>> for now.
>>
>> How to identify and work your way out of rpm conflicts.  (without
>> using nodeps of course).
>
>i've already added some of that, using things like --replacepkgs and
> --replacefiles and so on.
>

I think a current moderately harmless example would be getting a 
non-ancient version of subversion and viewvc from rpmforge, then noting 
that a 'yum full update' with epel enabled will swap in a viewvc 
configured in an incompatible way.

-- 
   Les Mikesell
 lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 1:06 PM, Keith Roberts wrote:
>
>>>   i've already added a section on EPEL, just so i can install things
>>> like git.  and i know there's an entire page at centos.org on extra
>>> repos.  any there that you *particularly* recommend?  i'll revisit
>>> that page later today but i'm thinking that, for the sake of this
>>> first-level admin course, EPEL might be sufficient for now.
>>
>> How to identify and work your way out of rpm conflicts.  (without using
>> nodeps of course).
>
> How to download, md5sum check, unpack, configure and
> compile a GPL *.tar.gz package.
>
> As SysAdmin that's something they will need to do sooner or
> later :)

But it's much more important to know all the reasons *not* to do that 
except as a last resort.  Reasons that someone who has had to maintain 
and update such things for decades will know that won't occur to an 
inexperienced beginner.  You can summarize by saying "yum update is a 
lot easier".

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Eduardo Grosclaude
On Fri, Sep 17, 2010 at 3:09 PM, Les Mikesell  wrote:
> On 9/17/2010 12:45 PM, m.r...@5-cent.us wrote:
>>
>>> I don't get it.  Why wouldn't you just talk to the db directly with
>>> perl's dbi/dbd, replacing both the awk and C parts?  I do that all the
>>> time.  Or was that before dbi - or the dbd you needed?
>>
>> Mike, you really aren't reading all of what I wrote. Perl itself wasn't
>> available in '91-'92.
>
> I think you are mistaken about that.  "Programming Perl", covering
> version 4 of perl was published in 1991.  Check the printing history if
> you have a newer copy.  Perl itself goes back to 1987 or so. I'm pretty
> sure I wrote things in version 1 downloaded through usenet.  Not sure
> when dbi/dbd came around but before that there were things like oraperl
> with specific database clients grafted in.

I used Perl4 under DOS to write connective tissue for my business
systems in C back in '92. But then, awk under DOS did a lot of help
too.

-- 
Eduardo Grosclaude
Universidad Nacional del Comahue
Neuquen, Argentina
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 12:45 PM, m.r...@5-cent.us wrote:
>
>> I don't get it.  Why wouldn't you just talk to the db directly with
>> perl's dbi/dbd, replacing both the awk and C parts?  I do that all the
>> time.  Or was that before dbi - or the dbd you needed?
>
> Mike, you really aren't reading all of what I wrote. Perl itself wasn't
> available in '91-'92.

I think you are mistaken about that.  "Programming Perl", covering 
version 4 of perl was published in 1991.  Check the printing history if 
you have a newer copy.  Perl itself goes back to 1987 or so. I'm pretty 
sure I wrote things in version 1 downloaded through usenet.  Not sure 
when dbi/dbd came around but before that there were things like oraperl 
with specific database clients grafted in.

I'll grant the historical value of awk for the prior decade and for the 
conceptual introduction of hash arrays for scripting languages, though.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Keith Roberts
On Fri, 17 Sep 2010, Jim Wildman wrote:

> To: CentOS mailing list 
> From: Jim Wildman 
> Subject: Re: [CentOS] looking for cool,
> post-install things to do on a centos 5.5 system
> 
> On Fri, 17 Sep 2010, Robert P. J. Day wrote:
>
>>  i've already added a section on EPEL, just so i can install things
>> like git.  and i know there's an entire page at centos.org on extra
>> repos.  any there that you *particularly* recommend?  i'll revisit
>> that page later today but i'm thinking that, for the sake of this
>> first-level admin course, EPEL might be sufficient for now.
>
> How to identify and work your way out of rpm conflicts.  (without using
> nodeps of course).

How to download, md5sum check, unpack, configure and 
compile a GPL *.tar.gz package.

As SysAdmin that's something they will need to do sooner or 
later :)

Keith

-
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Robert P. J. Day
On Fri, 17 Sep 2010, Jim Wildman wrote:

> On Fri, 17 Sep 2010, Robert P. J. Day wrote:
>
> >  i've already added a section on EPEL, just so i can install
> > things like git.  and i know there's an entire page at centos.org
> > on extra repos.  any there that you *particularly* recommend?
> > i'll revisit that page later today but i'm thinking that, for the
> > sake of this first-level admin course, EPEL might be sufficient
> > for now.
>
> How to identify and work your way out of rpm conflicts.  (without
> using nodeps of course).

  i've already added some of that, using things like --replacepkgs and
--replacefiles and so on.

rday

--


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Jim Wildman
On Fri, 17 Sep 2010, m.r...@5-cent.us wrote:

> So, what's the longest awk scripts you've ever written, Mike? It works
> wonderfully well for what it was intended - and mostly, I use it for
> reports or data conversion.
>

Upwards of 1000 lines..back in the 90's.

--
Jim Wildman, CISSP, RHCE   j...@rossberry.com http://www.rossberry.com
"Society in every state is a blessing, but Government, even in its best
state, is a necessary evil; in its worst state, an intolerable one."
Thomas Paine
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Jim Wildman
On Fri, 17 Sep 2010, Robert P. J. Day wrote:

>  i've already added a section on EPEL, just so i can install things
> like git.  and i know there's an entire page at centos.org on extra
> repos.  any there that you *particularly* recommend?  i'll revisit
> that page later today but i'm thinking that, for the sake of this
> first-level admin course, EPEL might be sufficient for now.

How to identify and work your way out of rpm conflicts.  (without using
nodeps of course).

--
Jim Wildman, CISSP, RHCE   j...@rossberry.com http://www.rossberry.com
"Society in every state is a blessing, but Government, even in its best
state, is a necessary evil; in its worst state, an intolerable one."
Thomas Paine
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 10:47 AM, m.r...@5-cent.us wrote:
>>
>> Ah, no. I wrote 30 scripts around '91-'92 to take datafiles from 30
>> sources and reformat them, to feed to the C program I'd written with
>> embedded sql, in place of the d/b's sqlloader (*bleah*). Then, 11 years
>> ago, I wrote a validation program for data that was being loaded by
>> another program that I didn't want to change; the data had been exported
>> from ArcInfo, and had to go into our Oracle d/b.
>>
>> Really simple to do in awk - just so much of it, and no, perl would have
>> offered no improved/shorter way to do it,
>
> I don't get it.  Why wouldn't you just talk to the db directly with
> perl's dbi/dbd, replacing both the awk and C parts?  I do that all the
> time.  Or was that before dbi - or the dbd you needed?

Mike, you really aren't reading all of what I wrote. Perl itself wasn't
available in '91-'92. I'd already written the C program, and then the
hypothesis that our company would be able to tell all the sources of the
data what format to put it in was shown to be less realistic than the
typical tv commercial.

I don't know the state of dbd/dbi in '98 or '99, but I was *not* going to
touch the existing program that loaded the data, and I was trying to get
just very basic validation, which included feedback as to what was wrong
with each bad record (and let the rest be loaded).
>
>   and yes, I do know perl - in
>> '04, for example, I rewrote a call routing and billing system from perl
>> (written by my then-manager, who'd never studied programming, can you
>> say spaghetti?) into reasonable perl. Actually, I just wrote a scraper in
>> perl, using HTML::Parser.  Anyway, the point of that was to demonstrate
>> that I know both, and awk is better, IMO, for some jobs.
>
> That depends on how you define better.  I can see how it could save a
> microsecond of loading time on tiny jobs, but not how it can do anything
> functionally better.  Have you tried feeding one of your long scripts to
> a2p and timing some job with enough input to matter?  I'd expect perl to
> win anything where there is enough actual work to make up for the
> compile/tokenize pass.

Nope. And the one company no longer exists as such, it having been sold
over 10 years ago, and that project over for something like 15 years; the
other, I've no idea what they're doing these days with the City of
Chicago's 911 system for geodata loading, but I'd be surprised if they
weren't still using my system, money being tight, and the VAR I worked
with being cheaper than ever.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] can i run NFS *exclusively* off of v4?

2010-09-17 Thread Robert P. J. Day

  is it possible to set up NFS on centos 5.5 so that it uses *only*
version 4?  i tried this not that long ago on fedora and was surprised
to see a complaint when i tried to start the server and was told that
i was missing required functionality of NFSv1, or something equally
weird.  i'll check the /etc/init.d/nfs script, but i think what got me
into trouble was trying to use the entire set of options:

  "--no-nfs-version 1 --no-nfs-version 2 --no-nfs-version 3"

  i'm going to try it again this afternoon on centos 5.5, but has
anyone else tried this?  should it *theoretically* work?

rday

-- 


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 10:47 AM, m.r...@5-cent.us wrote:
>
> Ah, no. I wrote 30 scripts around '91-'92 to take datafiles from 30
> sources and reformat them, to feed to the C program I'd written with
> embedded sql, in place of the d/b's sqlloader (*bleah*). Then, 11 years
> ago, I wrote a validation program for data that was being loaded by
> another program that I didn't want to change; the data had been exported
> from ArcInfo, and had to go into our Oracle d/b.
>
> Really simple to do in awk - just so much of it, and no, perl would have
> offered no improved/shorter way to do it,

I don't get it.  Why wouldn't you just talk to the db directly with 
perl's dbi/dbd, replacing both the awk and C parts?  I do that all the 
time.  Or was that before dbi - or the dbd you needed?

  and yes, I do know perl - in
> '04, for example, I rewrote a call routing and billing system from perl
> (written by my then-manager, who'd never studied programming, can you say
> spaghetti?) into reasonable perl. Actually, I just wrote a scraper in
> perl, using HTML::Parser.  Anyway, the point of that was to demonstrate
> that I know both, and awk is better, IMO, for some jobs.

That depends on how you define better.  I can see how it could save a 
microsecond of loading time on tiny jobs, but not how it can do anything 
functionally better.  Have you tried feeding one of your long scripts to 
a2p and timing some job with enough input to matter?  I'd expect perl to 
win anything where there is enough actual work to make up for the 
compile/tokenize pass.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Keith Roberts
On Fri, 17 Sep 2010, Robert P. J. Day wrote:

> To: CentOS mailing list 
> From: Robert P. J. Day 
> Subject: Re: [CentOS] looking for cool,
> post-install things to do on a centos 5.5 system
> 
> On Fri, 17 Sep 2010, Les Mikesell wrote:
>
>> On 9/17/2010 8:24 AM, m.r...@5-cent.us wrote:
>>>
 Proper scripting abilities are perhaps beyond reach for a short
 course, but you could at least show off some one-liners or those
 short, stunningly useful examples to help them get the idea that
 they definitely should get their feet wet on it sooner or later.
>>>
>>> awk, awk! Perl's a day, minimum, by itself, but awk you can do in
>>> an hour or two, and have immediate results.
>>
>> But awk is a dead end that can't do a lot of things by itself.  And
>> learning how to embed awk into other scripts is even more
>> syntactically obscure than just using perl in the first place.
>> Besides, perl's '-c' check and debug facilities make it much more
>> usable to beginners than awk's propensity to find errors mid-run
>> (and worse, mid-some-other-script because you had to embed it).
>
>  i will probably throw in an hour or so of shell scripting, just
> enough to whet their appetites and make them want an actual course.
> :-)
>
> rday

What about something on using the find command and xargs?

Most shell commands can be piggy-backed on the find command.

And also as mentioned, how and where to find documentation?

pinfo is a nice man page and info page viewer, with Lynx 
like navigation. Much easier than trying to how to use the 
info command.

# pinfo find

1 Introduction
**

This manual shows how to find files that meet criteria you 
specify, and how to perform various actions on the files that you find. 
The principal programs that you use to perform these tasks are 
`find', `locate', and `xargs'.  Some of the examples in this manual 
use capabilities specific to the GNU versions of those programs.

HTH

Keith Roberts

-
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?

2010-09-17 Thread samuel machua
On Fri, 17 Sep 2010 07:08:23 -0700
cpol...@surewest.net wrote:

> Robert P. J. Day wrote:
> > On Fri, 17 Sep 2010, Michel van Deventer wrote:
> > 
> > > >
> > > >   (another in an ongoing list of things i just want to clarify
> > > > for the sake of future courses taught on centos.)
> > > >
> > > >   from this RHEL doc page:
> > > >
> > > > http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openssh-server-config.html
> > > >
> > > > the reader is advised to, for the sake of security,
> > > > remove/disable
> > > vsftpd, ostensibly in favour of sftp/sftp-server.  really?
> > > >
> > > >   i can obviously see disallowing stuff like telnet and rsh and
> > > > rlogin, that's a no-brainer.  but advising against vsftpd for
> > > > the sake
> > > of security?  i'm not sure i see the logic in that.  thoughts?
> > 
> > > As FTP is a clear-text protocol, I would surely advise against
> > > leaving it on :) I only run a vsftpd server on one of my machines
> > > for the customers comfort, but that will change in the near
> > > future !
> > >
> > > I can easily image scenarios where unencrypted traffic with
> > > usernames/passwords is disallowed.
> > 
> >   but you can configure vsftpd to have secure connection:
> > 
> > http://wiki.vpslink.com/Configuring_vsftpd_for_secure_connections_(TLS/SSL/SFTP)
> > 
> > would that not address that issue?  i'm not arguing against secure
> > communications, only that that manual page so cavalierly dismisses
> > vsftpd when it seems clear that you *can* configure vsftpd to be
> > secure.
> 
> Google for vsftpd + bugtraq. Be afraid.
> 

I used to have vsftpd laying around unused after I started using sftp
but I just went ahead and removed it. The less services I have running
the fewer points of entry are there, so if you can already do what ftp
does with ssh/sftp why open up ftp. Unless you are supporting some
legacy apps that do not support sftp.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iptables

2010-09-17 Thread Robert Spangler
On Thursday 16 September 2010 16:03, alexus wrote:

>  I'm trying to do some simple tcp port forwarding

The first thing you need to do is drop the RH-firewall BS and create a new 
firewall rule set setup for your needs.  If you don't know how to setup a 
firewall then I would suggest you get one of those GUI programs that can do 
this for you.

>  [r...@wcmisdlin02 ~]# curl --verbose http://10.52.208.221:80
>  * About to connect() to 10.52.208.221 port 80
>  *   Trying 10.52.208.221... Connection refused
>  * couldn't connect to host
>  * Closing connection #0
>  curl: (7) couldn't connect to host
>  [r...@wcmisdlin02 ~]#

Looks like this host doesn't accept port 80 connections.


-- 

Regards
Robert

Linux
The adventure of a life time.

Linux User #296285
Get Counted
http://counter.li.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 67, Issue 5

2010-09-17 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CEBA-2010:0695 CentOS 5 i386 python-dmidecode Update
  (Karanbir Singh)
   2. CEBA-2010:0695 CentOS 5 x86_64 python-dmidecode   Update
  (Karanbir Singh)
   3. CEBA-2010:0696 CentOS 5 i386  device-mapper-multipath Update
  (Karanbir Singh)
   4. CEBA-2010:0696 CentOS 5 x86_64device-mapper-multipath Update
  (Karanbir Singh)
   5. CESA-2010:0698 Critical CentOS 5 i386 samba3x Update
  (Karanbir Singh)
   6. CESA-2010:0698 Critical CentOS 5 x86_64 samba3x   Update
  (Karanbir Singh)
   7. CESA-2010:0697 Critical CentOS 5 i386 samba Update
  (Karanbir Singh)
   8. CESA-2010:0697 Critical CentOS 5 x86_64 samba Update
  (Karanbir Singh)


--

Message: 1
Date: Wed, 15 Sep 2010 22:03:23 +
From: Karanbir Singh 
Subject: [CentOS-announce] CEBA-2010:0695 CentOS 5 i386
python-dmidecodeUpdate
To: centos-annou...@centos.org
Message-ID: <20100915220323.ga1...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2010:0695 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0695.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
59d449bc485b27b7f825d67b793e5f0e  python-dmidecode-3.10.13-1.el5_5.1.i386.rpm

Source:
c64fadc96b9a50d83c1ad8a401451886  python-dmidecode-3.10.13-1.el5_5.1.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 2
Date: Wed, 15 Sep 2010 22:03:23 +
From: Karanbir Singh 
Subject: [CentOS-announce] CEBA-2010:0695 CentOS 5 x86_64
python-dmidecodeUpdate
To: centos-annou...@centos.org
Message-ID: <20100915220323.ga1...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2010:0695 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0695.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
856a846d2b27de0a5a74a055e100efcb  python-dmidecode-3.10.13-1.el5_5.1.x86_64.rpm

Source:
c64fadc96b9a50d83c1ad8a401451886  python-dmidecode-3.10.13-1.el5_5.1.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 3
Date: Wed, 15 Sep 2010 22:03:44 +
From: Karanbir Singh 
Subject: [CentOS-announce] CEBA-2010:0696 CentOS 5 i386
device-mapper-multipath Update
To: centos-annou...@centos.org
Message-ID: <20100915220344.ga1...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2010:0696 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0696.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
4aa482821c012d554a32ef5c8dbea36b  
device-mapper-multipath-0.4.7-34.el5_5.5.i386.rpm
318dbe2838a06577258dfb85d33f8e0b  kpartx-0.4.7-34.el5_5.5.i386.rpm

Source:
7a78c52e025f0264d701da4d0caa0ab6  
device-mapper-multipath-0.4.7-34.el5_5.5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 4
Date: Wed, 15 Sep 2010 22:03:45 +
From: Karanbir Singh 
Subject: [CentOS-announce] CEBA-2010:0696 CentOS 5 x86_64
device-mapper-multipath Update
To: centos-annou...@centos.org
Message-ID: <20100915220345.ga1...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2010:0696 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0696.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
183024be4611c71b5cef0c667f1404b3  
device-mapper-multipath-0.4.7-34.el5_5.5.x86_64.rpm
5658ce10f2a02dec4484109e35f5715c  kpartx-0.4.7-34.el5_5.5.x86_64.rpm

Source:
7a78c52e025f0264d701da4d0caa0ab6  
device-mapper-multipath-0.4.7-34.el5_5.5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 5
Date: Wed, 15 Sep 2010 22:42:24 +
From: Karanbir Singh 
Subject: [CentOS-announce] CESA-2010:0698 Critical CentOS 5 i386
samba3x Update
To: centos-annou...@centos.

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread John Kennedy
On Fri, Sep 17, 2010 at 11:47,  wrote:

> Ah, no. I wrote 30 scripts around '91-'92 to take datafiles from 30
> sources and reformat them, to feed to the C program I'd written with
> embedded sql, in place of the d/b's sqlloader (*bleah*). Then, 11 years
> ago, I wrote a validation program for data that was being loaded by
> another program that I didn't want to change; the data had been exported
> from ArcInfo, and had to go into our Oracle d/b.
>
> Really simple to do in awk - just so much of it, and no, perl would have
> offered no improved/shorter way to do it, and yes, I do know perl - in
> '04, for example, I rewrote a call routing and billing system from perl
> (written by my then-manager, who'd never studied programming, can you say
> spaghetti?) into reasonable perl. Actually, I just wrote a scraper in
> perl, using HTML::Parser.  Anyway, the point of that was to demonstrate
> that I know both, and awk is better, IMO, for some jobs.
>
> mark
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


It's all about picking the right tool for the job. Python is good for some
things, perl for others, awk for still different things...
It is the beauty of Linux...
John
-- 
 John Kennedy
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 10:12 AM, m.r...@5-cent.us wrote:
>> Les Mikesell wrote:
>>> On 9/17/2010 8:24 AM, m.r...@5-cent.us wrote:

> Proper scripting abilities are perhaps beyond reach for a short
> course, but you could at least show off some one-liners or those
> short, stunningly useful examples to help them get the idea that they
> definitely should get their feet wet on it sooner or later.

 awk, awk! Perl's a day, minimum, by itself, but awk you can do in an
 hour or two, and have immediate results.
>>>
>>> But awk is a dead end that can't do a lot of things by itself.  And
>>
>> So, what's the longest awk scripts you've ever written, Mike? It works
>> wonderfully well for what it was intended - and mostly, I use it for
>> reports or data conversion.
>
> Don't think I've ever written one from scratch, at least not since perl
> was around because it was too painful to debug.  I agree that it works
> fine when you copy someone else's already-debugged code.  I'm not
> recommending never using awk, I just don't see the point of learning to
> write it.
>
>>> learning how to embed awk into other scripts is even more syntactically
>>> obscure than just using perl in the first place.  Besides, perl's '-c'
>>> check and debug facilities make it much more usable to beginners than
>>> awk's propensity to find errors mid-run (and worse,
>>> mid-some-other-script because you had to embed it).
>>
>> Misuse of awk.
>>
>>   mark "why, yes, I *have* written 100 and 200 line awk scripts
>>   to do data converstion and data validation"
>
> But why, when very likely better versions of whatever you were doing
> have already been written and debugged as CPAN perl modules?  Would you
> do something like time parsing or format conversions in awk, or extract
> mime attachment from a mail message?  Those sound simple but aren't and
> in perl you only have to write a couple of lines yourself to do them.

Ah, no. I wrote 30 scripts around '91-'92 to take datafiles from 30
sources and reformat them, to feed to the C program I'd written with
embedded sql, in place of the d/b's sqlloader (*bleah*). Then, 11 years
ago, I wrote a validation program for data that was being loaded by
another program that I didn't want to change; the data had been exported
from ArcInfo, and had to go into our Oracle d/b.

Really simple to do in awk - just so much of it, and no, perl would have
offered no improved/shorter way to do it, and yes, I do know perl - in
'04, for example, I rewrote a call routing and billing system from perl
(written by my then-manager, who'd never studied programming, can you say
spaghetti?) into reasonable perl. Actually, I just wrote a scraper in
perl, using HTML::Parser.  Anyway, the point of that was to demonstrate
that I know both, and awk is better, IMO, for some jobs.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 10:12 AM, m.r...@5-cent.us wrote:
> Les Mikesell wrote:
>> On 9/17/2010 8:24 AM, m.r...@5-cent.us wrote:
>>>
 Proper scripting abilities are perhaps beyond reach for a short
 course, but you could at least show off some one-liners or those
 short, stunningly useful examples to help them get the idea that they
 definitely should get their feet wet on it sooner or later.
>>>
>>> awk, awk! Perl's a day, minimum, by itself, but awk you can do in an
>>> hour or two, and have immediate results.
>>
>> But awk is a dead end that can't do a lot of things by itself.  And
>
> So, what's the longest awk scripts you've ever written, Mike? It works
> wonderfully well for what it was intended - and mostly, I use it for
> reports or data conversion.

Don't think I've ever written one from scratch, at least not since perl 
was around because it was too painful to debug.  I agree that it works 
fine when you copy someone else's already-debugged code.  I'm not 
recommending never using awk, I just don't see the point of learning to 
write it.

>> learning how to embed awk into other scripts is even more syntactically
>> obscure than just using perl in the first place.  Besides, perl's '-c'
>> check and debug facilities make it much more usable to beginners than
>> awk's propensity to find errors mid-run (and worse,
>> mid-some-other-script because you had to embed it).
>
> Misuse of awk.
>
>   mark "why, yes, I *have* written 100 and 200 line awk scripts to
>  do data converstion and data validation"

But why, when very likely better versions of whatever you were doing 
have already been written and debugged as CPAN perl modules?  Would you 
do something like time parsing or format conversions in awk, or extract 
mime attachment from a mail message?  Those sound simple but aren't and 
in perl you only have to write a couple of lines yourself to do them.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 10:02 AM, Robert P. J. Day wrote:
>
 Proper scripting abilities are perhaps beyond reach for a short
 course, but you could at least show off some one-liners or those
 short, stunningly useful examples to help them get the idea that
 they definitely should get their feet wet on it sooner or later.
>>>
>>> awk, awk! Perl's a day, minimum, by itself, but awk you can do in
>>> an hour or two, and have immediate results.
>>
>> But awk is a dead end that can't do a lot of things by itself.  And
>> learning how to embed awk into other scripts is even more
>> syntactically obscure than just using perl in the first place.
>> Besides, perl's '-c' check and debug facilities make it much more
>> usable to beginners than awk's propensity to find errors mid-run
>> (and worse, mid-some-other-script because you had to embed it).
>
>i will probably throw in an hour or so of shell scripting, just
> enough to whet their appetites and make them want an actual course.
> :-)

Yes, at least get across the concept that anything they do on the 
command line can be saved in a file and run again - and any command that 
needs to be repeated with small differences can be easily wrapped in a 
'for' loop with a list of substitutions.  And if the course doesn't 
already cover it, point out the ability to ^r recall previous commands 
and repeat with simple edits.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Brunner, Brian T. wrote:
>> >   over the next several weeks, i'm teaching some courses in
>> > RHEL admin but (unsurprisingly) i'll be using centos 5.5.
>> > it's a decently-written, 3rd party course, all the generic,
>> > standard admin topics but it does leave me about a 1/2 day
>> > to throw in any cool stuff i want to add.
>> > so, any recommendations for neat things that people here
>> > have done
>
> For me: I'd want to have a closer look at things that *might* give
> advantages but DO bring troubles:
> SEL
> KVM
>
> And dangers such as
> DoS
> DDoS
> Zombie computers randomly port-scanning
> Internal user ignorance, apathy, malice, and mis-information about how
> to secure the campus network from the hostile world.
> A boss who does not understand what he wants, but he wants it real bad.

Which leads back to what I suggested - an overview of the architecture of
*Nix. I worked in a division of a telecom once that some of the 27 teams
had files *everywhere* (including /), and everyone had the root
password

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Paul Heinlein
I know the OP asked for "cool" things to do, but I'll add my vote to 
those who suggested highlighting configuration management. I'm not 
sure how much puppet or cfengine you teach in a half-day, but I'm 
fairly confident you could cover:

  1. considering configuration files to be code -- it needs to be in
 a repository

  2. setting up a Subversion or git repository and some possible ways
 of laying out a configuration repository (per host, per service,
 etc)

  3. committing changes, recovering older configs when newer ones
 introduce regressions

Personally, I like Subversion for configuration repositories because 
(imo) sysadmins usually like having an authoritative repo rather than 
a widely branched one -- but git is on the rise and is certainly worth 
considering.


Other, slightly related, suggestions include setting up a 
documentation wiki and/or a ticketing system. Trac can do both, but 
there are plenty of worthwhile alternatives.

-- 
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Les Mikesell wrote:
> On 9/17/2010 8:24 AM, m.r...@5-cent.us wrote:
>>
>>> Proper scripting abilities are perhaps beyond reach for a short
>>> course, but you could at least show off some one-liners or those
>>> short, stunningly useful examples to help them get the idea that they
>>> definitely should get their feet wet on it sooner or later.
>>
>> awk, awk! Perl's a day, minimum, by itself, but awk you can do in an
>> hour or two, and have immediate results.
>
> But awk is a dead end that can't do a lot of things by itself.  And

So, what's the longest awk scripts you've ever written, Mike? It works
wonderfully well for what it was intended - and mostly, I use it for
reports or data conversion.

> learning how to embed awk into other scripts is even more syntactically
> obscure than just using perl in the first place.  Besides, perl's '-c'
> check and debug facilities make it much more usable to beginners than
> awk's propensity to find errors mid-run (and worse,
> mid-some-other-script because you had to embed it).

Misuse of awk.

 mark "why, yes, I *have* written 100 and 200 line awk scripts to
do data converstion and data validation"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Brunner, Brian T.
> >   over the next several weeks, i'm teaching some courses in 
> > RHEL admin but (unsurprisingly) i'll be using centos 5.5.  
> > it's a decently-written, 3rd party course, all the generic, 
> > standard admin topics but it does leave me about a 1/2 day 
> > to throw in any cool stuff i want to add.
> > so, any recommendations for neat things that people here 
> > have done 

For me: I'd want to have a closer look at things that *might* give
advantages but DO bring troubles:
SEL
KVM

And dangers such as
DoS
DDoS
Zombie computers randomly port-scanning
Internal user ignorance, apathy, malice, and mis-information about how
to secure the campus network from the hostile world.
A boss who does not understand what he wants, but he wants it real bad.
***
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed. If you have received this email in error please
notify the system manager. This footnote also confirms that this
email message has been swept for the presence of computer viruses.
www.Hubbell.com - Hubbell Incorporated**

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?

2010-09-17 Thread Kwan Lowe
On Fri, Sep 17, 2010 at 5:51 AM, Robert P. J. Day  wrote:
>
>  (another in an ongoing list of things i just want to clarify for the
> sake of future courses taught on centos.)
>
>  from this RHEL doc page:
>
> http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openssh-server-config.html
>
> the reader is advised to, for the sake of security, remove/disable
> vsftpd, ostensibly in favour of sftp/sftp-server.  really?
>
>  i can obviously see disallowing stuff like telnet and rsh and
> rlogin, that's a no-brainer.  but advising against vsftpd for the sake
> of security?  i'm not sure i see the logic in that.  thoughts?

I agree with the point that the document is making. If you go to the
trouble to lock down an account, it doesn't make sense to allow that
same account to access the server via the ftp protocol.  However, I do
use vsftpd with specific IDs that do not have shell access. These
accounts are also generally not system accounts so even if a password
was sniffed, it would not allow shell access.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Robert P. J. Day
On Fri, 17 Sep 2010, Les Mikesell wrote:

> On 9/17/2010 8:24 AM, m.r...@5-cent.us wrote:
> >
> >> Proper scripting abilities are perhaps beyond reach for a short
> >> course, but you could at least show off some one-liners or those
> >> short, stunningly useful examples to help them get the idea that
> >> they definitely should get their feet wet on it sooner or later.
> >
> > awk, awk! Perl's a day, minimum, by itself, but awk you can do in
> > an hour or two, and have immediate results.
>
> But awk is a dead end that can't do a lot of things by itself.  And
> learning how to embed awk into other scripts is even more
> syntactically obscure than just using perl in the first place.
> Besides, perl's '-c' check and debug facilities make it much more
> usable to beginners than awk's propensity to find errors mid-run
> (and worse, mid-some-other-script because you had to embed it).

  i will probably throw in an hour or so of shell scripting, just
enough to whet their appetites and make them want an actual course.
:-)

rday

-- 


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 8:24 AM, m.r...@5-cent.us wrote:
>
>> Proper scripting abilities are perhaps beyond reach for a short
>> course, but you could at least show off some one-liners or those
>> short, stunningly useful examples to help them get the idea that they
>> definitely should get their feet wet on it sooner or later.
>
> awk, awk! Perl's a day, minimum, by itself, but awk you can do in an hour
> or two, and have immediate results.

But awk is a dead end that can't do a lot of things by itself.  And 
learning how to embed awk into other scripts is even more syntactically 
obscure than just using perl in the first place.  Besides, perl's '-c' 
check and debug facilities make it much more usable to beginners than 
awk's propensity to find errors mid-run (and worse, 
mid-some-other-script because you had to embed it).

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/2010 8:18 AM, Les Mikesell wrote:
>
>> h ... good idea.  or i might just add in VNC and carry over the
>> freenx to an additional course dealing with networking/remote
>> admin/etc.  thanks.
>
> I'd guess that for most people starting with linux, freenx with NX running on
> their existing windows/mac would be a much better fit.  Maybe vmwware player 
> or
> virtualbox too.


Oh, another thing - I've always thought that every course on unix-like 
systems should touch on what the fork() and open() system calls do, sort 
of like learning to count to 10 before memorizing math formulas. If you 
understand that every process except init is fork()ed from a running 
parent, that environment variables and open files are inherited (because 
the child/parent share the COW memory), and the security checks that 
happen in open(), you can pretty much deduce the rest of the system 
behavior (well, except for selinux...).

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?

2010-09-17 Thread cpolish
Robert P. J. Day wrote:
> On Fri, 17 Sep 2010, Michel van Deventer wrote:
> 
> > >
> > >   (another in an ongoing list of things i just want to clarify for the
> > > sake of future courses taught on centos.)
> > >
> > >   from this RHEL doc page:
> > >
> > > http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openssh-server-config.html
> > >
> > > the reader is advised to, for the sake of security, remove/disable
> > vsftpd, ostensibly in favour of sftp/sftp-server.  really?
> > >
> > >   i can obviously see disallowing stuff like telnet and rsh and
> > > rlogin, that's a no-brainer.  but advising against vsftpd for the sake
> > of security?  i'm not sure i see the logic in that.  thoughts?
> 
> > As FTP is a clear-text protocol, I would surely advise against
> > leaving it on :) I only run a vsftpd server on one of my machines
> > for the customers comfort, but that will change in the near future !
> >
> > I can easily image scenarios where unencrypted traffic with
> > usernames/passwords is disallowed.
> 
>   but you can configure vsftpd to have secure connection:
> 
> http://wiki.vpslink.com/Configuring_vsftpd_for_secure_connections_(TLS/SSL/SFTP)
> 
> would that not address that issue?  i'm not arguing against secure
> communications, only that that manual page so cavalierly dismisses
> vsftpd when it seems clear that you *can* configure vsftpd to be
> secure.

Google for vsftpd + bugtraq. Be afraid.

-- 
Charles Polisher

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Remove all packages from specific repository

2010-09-17 Thread Phil Schaffner
Morten P.D. Stevens wrote on 09/17/2010 09:55 AM:
> Hi Phil,
> 
> This command is great to list (and remove) all packages from EPEL repository.

You're welcome.  Guess you managed to ignore the extraneous Xoops code 
tags from the forum copy/paste. :-)

Phil
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] using NUT on centos 5

2010-09-17 Thread Pat and Lori Boyer
I have NUT configured on a few of my CentOS servers. I compiled and
installed from source (2.4.3), so all of my nut-related files sit under
/usr/local/ups. I am using a Liebert UPS. Here's how I have it working:

Connect a serial cable from your server to the UPS (if available; USB is an
option on some models, I think). The nut software can communicate with the
UPS via serial on a ttyS (mine is /dev/ttyS0). This server (directly
attached) must run upsd. Other servers that use the same UPS can communicate
with upsd running on the first server via upsmon. All servers must run
upsmon (this is what actually monitors the UPS).

Configure ups.conf with information about your UPS (mine is liebert). The
nut docs have a list of supported hardware and the drivers that you use for
them (I use the driver 'liebert'):

[liebert]
driver = liebert
port = /dev/ttyS0

At least one server attached to each UPS must run upsd. Here's my upsd.conf
(comments removed). Note that the second line uses the IP address of the LAN
interface on your server, so that other machines on the same subnet can
communicate with upsd:

LISTEN 127.0.0.1 3493
LISTEN 172.21.97.1 3493

You have to configure upsd.users to allow access to certain users (one for
each upsmon process that will communicate with upsd). This information will
be used to configure upsmon on the clients. For example, I have two servers
listed here: the local server (server1) and another server attached to the
same UPS (server2):

[server1-ups]
  password  = server1-ups-pass
  upsmon master
[server2-ups]
  password  = server2-ups-pass
  upsmon slave

Configure upsmon.conf on each client. Based on the example above, here's the
upsmon.conf for server1:

FINALDELAY 5
MONITOR lieb...@localhost 1 server1-ups server1-ups-pass master

... and the upsmon.conf for server2:

FINALDELAY 5
MONITOR lieb...@server1 1 server2-ups server2-ups-pass master

Once you have ups.conf, upsd.conf, upsd.users, and upsmon.conf configured,
you can test you connections like the following:

[r...@server1 ~]# /usr/local/ups/bin/upsc lieb...@localhost
device.mfr: Liebert
device.model: MultiLink
device.type: ups
driver.name: liebert
driver.parameter.pollinterval: 2
driver.parameter.port: /dev/ttyS0
driver.version: 2.4.3
driver.version.internal: 1.02
ups.mfr: Liebert
ups.model: MultiLink
ups.status: OL LB

[r...@server2 ~]# /usr/local/ups/bin/upsc lieb...@server1
device.mfr: Liebert
device.model: MultiLink
device.type: ups
driver.name: liebert
driver.parameter.pollinterval: 2
driver.parameter.port: /dev/ttyS0
driver.version: 2.4.3
driver.version.internal: 1.02
ups.mfr: Liebert
ups.model: MultiLink
ups.status: OL LB

Don't forget to add the nut software to your startup scripts and appropriate
runlevels. Hope this helps.

Pat Boyer


On Tue, Sep 14, 2010 at 11:18 AM, fred smith
wrote:

> Hi!
>
> Trying to set up NUT on Centos 5 to monitor a CyberPower 1500AVR UPS.
>
> There seem to be many documents, all of which seem to be not fully
> consistent
> with each other, and most of them aren't up to date.
>
> I'm guessing I should be using udev rather than hal, but I'm somewhat
> stumped on how to figure out what device it should be monitoring. there
> are a bunch of udev rules installed (in
> /lib/udev/rules.d/52-nut-usbups.rules)
> but it's not at all clear to me what, if anything, I'm supposed to do with
> them, or how I cause udev to see them there and do its thing.
>
> there's a document at
> http://fedoranews.org/contributors/kazutoshi_morioka/nut/
> but it doesn't show how to do it with a USB device, only serial.
>
> so I decided to move on and see if it could be made to work without
> that understanding, using whatever I could figure out using the INSTALL
> file that comes with NUT.
>
> And that isn't geting me anywhere, so far.
>
> If anyone out there has had success at setting up NUT on Centos 5 (or RHEL)
> and can offer any advice, I'd appreciate hearing from you.
>
> Thanks in advance!
>
> --
>  Fred Smith -- fre...@fcshome.stoneham.ma.us-
>  "For him who is able to keep you from falling and to present you before
> his
>glorious presence without fault and with great joy--
> to the only God our Savior be glory, majesty, power and authority,
>  through Jesus Christ our Lord, before all ages, now and forevermore!
> Amen."
> - Jude 1:24,25 (niv)
> -
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Remove all packages from specific repository

2010-09-17 Thread Morten P.D. Stevens
On Fri, Sep 17, 2010 at 3:19 PM, Phil Schaffner wrote:

> To see the packages from a
> particular Vendor, for example EPEL:[code]
> rpm -qa --qf "%{NAME} %{VENDOR} \n" | grep "Fedora Project" | cut -d ' '
> -f 1 | sort
> [/code]
> The result should be a list of EPEL packages.

Hi Phil,

This command is great to list (and remove) all packages from EPEL repository.

Thank you very much.

Best regards,

Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Scott McClanahan
On 09/17/2010 03:39 AM, Robert P. J. Day wrote:
>(note:  i asked this a few days ago but it *appears* that that post
> was tossed due to getting excessive bounces from my account.  so i'm
> posting it again, apologies if you're seeing it a second time.)
>
>over the next several weeks, i'm teaching some courses in RHEL admin
> but (unsurprisingly) i'll be using centos 5.5.  it's a
> decently-written, 3rd party course, all the generic, standard admin
> topics but it does leave me about a 1/2 day to throw in any cool stuff
> i want to add.
>
>so, any recommendations for neat things that people here have done
> in the way of what can be added to or configured on a centos server
> system?  the course covers all the standard topics -- installation,
> package management, service management, filesystem maintenance, that
> sort of thing.  so i'm looking for bonus, neat stuff that others here
> do as a matter of course when putting together a centos system.
>
>logging utilities?  intrusion detection?  monitoring?  anything that
> leaps to mind that i can use to fill up a few more hours.  i'm already
> thinking of showing how to build and boot a new kernel.  other ideas?
> thanks.
>
> rday
>
>

I've done quite a few things.  Recently, I just run puppet and let it do 
EVERYTHING for whatever a system might need.  But things I have done in 
the past are autodetect if the system is a vm and install vmware-tools, 
find the next ip address available in DNS for the particular subnet the 
newly installed system is in and dynamically update forward and reverse 
(including a helpful TXT record which fit a known convention), run yum 
update and reboot, and even create a qtree on netapp automatically.  
Just a quick few things.. I also do some stuff during pre installation 
like align the disk on proper boundaries and enable software raid 
according to the meta data associated with the system record in 
cobbler.  Cobbler is nice as a subscription means to dynamically alter 
kickstart configs so I can add 'raid=5' as meta data for instance the 
the vm will build itself with raid5 (if it can of course).  Same things 
applies to selinux, firewall, and other features that need to be enabled 
very early on and puppet just checks to make sure it's still true.

I've moved away from doing stuff in post install and instead let puppet 
handle pretty much everything.  API's are great for this.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread m . roth
Eduardo Grosclaude wrote:
> On Fri, Sep 17, 2010 at 4:39 AM, Robert P. J. Day 
> wrote:
>>  logging utilities?  intrusion detection?  monitoring?  anything that
>> leaps to mind that i can use to fill up a few more hours.  i'm already
>> thinking of showing how to build and boot a new kernel.  other ideas?
>> thanks.
>
> If your students are new to RHEL/CentOS admin, they will appreciate
> some education regarding what and how to search into docs and other
> information sources: the Guides, CentOS community resources such as
> Forum, Wiki or this mailing list.

I always push the second chapter of Frisch's Essential Systems
Administration (O'Reilly, of course) at folks. That's the chapter entitled
"The Unix Way", which gives a *really* good overview of the archetecture
of *Nix, what's where and why.
>
> Proper scripting abilities are perhaps beyond reach for a short
> course, but you could at least show off some one-liners or those
> short, stunningly useful examples to help them get the idea that they
> definitely should get their feet wet on it sooner or later.

awk, awk! Perl's a day, minimum, by itself, but awk you can do in an hour
or two, and have immediate results.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] selinux with samba

2010-09-17 Thread Phil Schaffner
Geert Batsleer wrote on 09/17/2010 09:14 AM:
> I'm having problems setting up a samba server with sellinux in centos 
> 5.6 (x64).
> 
> My samba config works flawlessly when selinux is disabled but fails to 
> access shares when selinux is  enabled. Wich command makes it possible 
> to run samba with selinux without disabling it, now I've done: "set 
> sebool -P smbd_disable_trans 1" but doesn't really solve my problem.

See the SELinux Wiki article, Section 7:

http://wiki.centos.org/HowTos/SELinux

Phil
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Remove all packages from specific repository

2010-09-17 Thread Phil Schaffner
Morten P.D. Stevens wrote on 09/17/2010 07:06 AM:
  > What's the best way to remove all amavisd-new packages (and it's 
dependencies) from EPEL repo and reinstall it from rpmforge repo?

To see what repos you have installed packages from:
[code]
rpm -qa --qf "%{VENDOR} \n" | sort | uniq
[/code]
The result should be a list of VENDOR tags.  To see the packages from a 
particular Vendor, for example EPEL:[code]
rpm -qa --qf "%{NAME} %{VENDOR} \n" | grep "Fedora Project" | cut -d ' ' 
-f 1 | sort
[/code]
The result should be a list of EPEL packages.

Remove all, or all related to the packages you want to remove, then 
disable EPEL, or set it to a lower priority than RPMforge. Enable 
RPMforge, and install the packages you want.

If the RPMforge packages are all later versions, then the prior removal 
should not be necessary. A simple "yum update" with the correct repo 
configuration should be sufficient.

Phil
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/10 7:51 AM, Robert P. J. Day wrote:
> On Fri, 17 Sep 2010, Les Mikesell wrote:
>
>> I'd consider the most valuable things to know about would be the
>> nature of an assortment of 3rd party yum repositories (i.e. EPEL
>> makes an effort not to overwrite core packages but probably won't
>> have everything you want), how to find and install their *-release
>> packages, how to use yum to search and install things from them, and
>> that most of them should left disabled in the yum configuration so
>> they don't affect things unless you explicitly enable them on the
>> command line for a search or specific package you want.
>
>i've already added a section on EPEL, just so i can install things
> like git.  and i know there's an entire page at centos.org on extra
> repos.  any there that you *particularly* recommend?  i'll revisit
> that page later today but i'm thinking that, for the sake of this
> first-level admin course, EPEL might be sufficient for now.

No, the important thing to know is that the repositories that have the current 
packages you want to install will also cause dependency issues if you enable 
them for general updates.  I use rpmforge for subversion and some other things, 
but I haven't really kept up with what is out there.

>> Oh - and how to install and use freenx/NX for remote access.
>
>h ... good idea.  or i might just add in VNC and carry over the
> freenx to an additional course dealing with networking/remote
> admin/etc.  thanks.

I'd guess that for most people starting with linux, freenx with NX running on 
their existing windows/mac would be a much better fit.  Maybe vmwware player or 
virtualbox too.

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Amazon AMI based on CentOS 5?

2010-09-17 Thread Mathieu Baudier
Hello,

Amazon has just released a custom Linux distribution (Amazon Linux
AMI) for use in their EC2 cloud:
http://aws.amazon.com/ec2/faqs/#What_is_the_Amazon_Linux_AMI

Out of curiosity, I googled a bit around it and read in various places
(e.g. [1] and [2]) that it is based on CentOS 5 (basically a stripped
down version) and should be compatible with most packages.

Do any of you have confirmation of this?
And more details/experience?
(I'm not a EC2 user, so I cannot check by myself...)

Thanks,

Mathieu

[1] 
http://www.cloudave.com/4872/open-source-and-cloud-computing-the-amazon-linux-ami-is-now-available/
[2] http://news.ycombinator.com/item?id=1693055
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] selinux with samba

2010-09-17 Thread Geert Batsleer
I'm having problems setting up a samba server with sellinux in centos 5.6
(x64).

My samba config works flawlessly when selinux is disabled but fails to
access shares when selinux is  enabled. Wich command makes it possible to
run samba with selinux without disabling it, now I've done: "set sebool -P
smbd_disable_trans 1" but doesn't really solve my problem.

Thanks in advance!

geert
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Eduardo Grosclaude
On Fri, Sep 17, 2010 at 4:39 AM, Robert P. J. Day  wrote:
>  logging utilities?  intrusion detection?  monitoring?  anything that
> leaps to mind that i can use to fill up a few more hours.  i'm already
> thinking of showing how to build and boot a new kernel.  other ideas?
> thanks.

If your students are new to RHEL/CentOS admin, they will appreciate
some education regarding what and how to search into docs and other
information sources: the Guides, CentOS community resources such as
Forum, Wiki or this mailing list.

Proper scripting abilities are perhaps beyond reach for a short
course, but you could at least show off some one-liners or those
short, stunningly useful examples to help them get the idea that they
definitely should get their feet wet on it sooner or later.

-- 
Eduardo Grosclaude
Universidad Nacional del Comahue
Neuquen, Argentina
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread andrew . hearn
On 17/09/10 08:39, Robert P. J. Day wrote:
>
>(note:  i asked this a few days ago but it *appears* that that post
> was tossed due to getting excessive bounces from my account.  so i'm
> posting it again, apologies if you're seeing it a second time.)
>
>over the next several weeks, i'm teaching some courses in RHEL admin
> but (unsurprisingly) i'll be using centos 5.5.  it's a
> decently-written, 3rd party course, all the generic, standard admin
> topics but it does leave me about a 1/2 day to throw in any cool stuff
> i want to add.
>
>so, any recommendations for neat things that people here have done
> in the way of what can be added to or configured on a centos server
> system?  the course covers all the standard topics -- installation,
> package management, service management, filesystem maintenance, that
> sort of thing.  so i'm looking for bonus, neat stuff that others here
> do as a matter of course when putting together a centos system.
>
>logging utilities?  intrusion detection?  monitoring?  anything that
> leaps to mind that i can use to fill up a few more hours.  i'm already
> thinking of showing how to build and boot a new kernel.  other ideas?
> thanks.


How about how to subscribe to the CentOS mailing list? ;-)

A.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Robert P. J. Day
On Fri, 17 Sep 2010, Les Mikesell wrote:

> I'd consider the most valuable things to know about would be the
> nature of an assortment of 3rd party yum repositories (i.e. EPEL
> makes an effort not to overwrite core packages but probably won't
> have everything you want), how to find and install their *-release
> packages, how to use yum to search and install things from them, and
> that most of them should left disabled in the yum configuration so
> they don't affect things unless you explicitly enable them on the
> command line for a search or specific package you want.

  i've already added a section on EPEL, just so i can install things
like git.  and i know there's an entire page at centos.org on extra
repos.  any there that you *particularly* recommend?  i'll revisit
that page later today but i'm thinking that, for the sake of this
first-level admin course, EPEL might be sufficient for now.

> Oh - and how to install and use freenx/NX for remote access.

  h ... good idea.  or i might just add in VNC and carry over the
freenx to an additional course dealing with networking/remote
admin/etc.  thanks.

rday

-- 


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Les Mikesell
On 9/17/10 2:39 AM, Robert P. J. Day wrote:
>
>(note:  i asked this a few days ago but it *appears* that that post
> was tossed due to getting excessive bounces from my account.  so i'm
> posting it again, apologies if you're seeing it a second time.)
>
>over the next several weeks, i'm teaching some courses in RHEL admin
> but (unsurprisingly) i'll be using centos 5.5.  it's a
> decently-written, 3rd party course, all the generic, standard admin
> topics but it does leave me about a 1/2 day to throw in any cool stuff
> i want to add.
>
>so, any recommendations for neat things that people here have done
> in the way of what can be added to or configured on a centos server
> system?  the course covers all the standard topics -- installation,
> package management, service management, filesystem maintenance, that
> sort of thing.  so i'm looking for bonus, neat stuff that others here
> do as a matter of course when putting together a centos system.
>
>logging utilities?  intrusion detection?  monitoring?  anything that
> leaps to mind that i can use to fill up a few more hours.  i'm already
> thinking of showing how to build and boot a new kernel.  other ideas?
> thanks.

I'd consider the most valuable things to know about would be the nature of an 
assortment of 3rd party yum repositories (i.e. EPEL makes an effort not to 
overwrite core packages but probably won't have everything you want), how to 
find and install their *-release packages, how to use yum to search and install 
things from them, and that most of them should left disabled in the yum 
configuration so they don't affect things unless you explicitly enable them on 
the command line for a search or specific package you want.

Oh - and how to install and use freenx/NX for remote access.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bandwidth limit per user or ip

2010-09-17 Thread Juergen Gotteswinter
take a look at

http://lartc.org/wondershaper/



On 09/17/2010 01:06 PM, Damas Ally wrote:
> Please,
> Forward to me some basic instructions on how to do or specify the policy. I
> mean which service or protocol should be assigned to my iptables and how?
> would i need to create some groups or use mac address of a user pc?
> thanks,
> rgds!
> Damas
>
> On Fri, Sep 17, 2010 at 1:49 PM, Juergen Gotteswinterwrote:
>
>> yes, iptables uid matching and tc will do this. but its kinda ugly to
>> setup.
>>
>> On 09/17/2010 12:42 PM, Damas Ally wrote:
>>> Greetings all,
>>> I would like to set the use of bandwidth in my network per user or ip
>>> address, is it possible using my linux box running Centos 5.1?
>>> regards,
>>> Damas
>>>
>>>
>>>
>>>
>>> ___
>>> CentOS mailing list
>>> CentOS@centos.org
>>> http://lists.centos.org/mailman/listinfo/centos
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Natxo Asenjo
On Fri, Sep 17, 2010 at 9:39 AM, Robert P. J. Day  wrote:
>
>
>  logging utilities?  intrusion detection?  monitoring?  anything that
> leaps to mind that i can use to fill up a few more hours.  i'm already
> thinking of showing how to build and boot a new kernel.  other ideas?
> thanks.

sysadmins should now really know about configuration management tools.
So show them how to bootstrap an infrastructure with kickstart and
cfengine (or puppet or chef or ...)

-- 
natxo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Robert P. J. Day
On Fri, 17 Sep 2010, Keith Roberts wrote:

> Adding Multimedia capabilities
>
> Using SQLite3 from the command line
>   Creating a Database
>   Creating and populating a table
>   Selecting, inserting, updating and deleting data in the
>   database
>
> Remote login sessions using ssh -X
>
> Intro to nmap, nessus and Metasploit
>
> Intro to Firefox plugins, eg Firebug
> How to find and install other usefull FF plugins.
>
> Obviously the list is endless really.

  not entirely.  keep in mind that this is an *admin* course for
RHEL/centos so any additional topics should be primarily
server-oriented.  that suggests that things like multimedia would have
little value.  heck, even graphical utilities might be irrelevant
since, as a server, the system might not even have X installed.

  so, yes, i realize this is still being a bit vague.  i'm just
interested in what others have found as being really, really useful in
the context of setting up a server.

rday

--


Robert P. J. Day   Waterloo, Ontario, CANADA

Top-notch, inexpensive online Linux/OSS/kernel courses
http://crashcourse.ca

Twitter:   http://twitter.com/rpjday
LinkedIn:   http://ca.linkedin.com/in/rpjday

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Remove all packages from specific repository

2010-09-17 Thread Morten P.D. Stevens
Hi CentOS Mailinglist,

we are using amavisd-new (with all dependencies) from Fedora/Redhat EPEL repo. 
Some packages from EPEL repo are very old. (amavisd-new, clamav, spamassassin)

What's the best way to remove all amavisd-new packages (and it's dependencies) 
from EPEL repo and reinstall it from rpmforge repo?

Thank you.

Best regards,

Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bandwidth limit per user or ip

2010-09-17 Thread Damas Ally
Please,
Forward to me some basic instructions on how to do or specify the policy. I
mean which service or protocol should be assigned to my iptables and how?
would i need to create some groups or use mac address of a user pc?
thanks,
rgds!
Damas

On Fri, Sep 17, 2010 at 1:49 PM, Juergen Gotteswinter wrote:

> yes, iptables uid matching and tc will do this. but its kinda ugly to
> setup.
>
> On 09/17/2010 12:42 PM, Damas Ally wrote:
> > Greetings all,
> > I would like to set the use of bandwidth in my network per user or ip
> > address, is it possible using my linux box running Centos 5.1?
> > regards,
> > Damas
> >
> >
> >
> >
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
"If opportunity doesn't knock, build a door".
  Says,
Makweba Sir
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  1   2   >