Re: [CentOS] passwd problem with new vps

2011-09-27 Thread M. Fioretti
On Wed, Sep 28, 2011 16:06:23 PM +1000, Christopher Hawker wrote:
> When you login to your vps, are you authenticating the connection via
> password or certificate?

password

thanks,
Marco
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] passwd problem with new vps

2011-09-27 Thread Christopher Hawker
When you login to your vps, are you authenticating the connection via
password or certificate?

On 9/28/11, Marco Fioretti  wrote:
> greetings,
>
> I am setting up Centos 6 i686 remotely, on a new VPS.
>
> A problem I have is that I cannot set password for new users. I have
> created one with
>
> useradd -m new_user
>
> but when I type
>
> passwd new_user
>
> this is the result:
>
> [root@vps ~]# passwd new_user
> Changing password for user new_user
> New password:
> Retype new password:
> passwd: Authentication token manipulation error
> [root@vps ~]# tail /var/log/secure
>
> Sep 27 17:30:30 vps passwd: pam_cracklib(passwd:chauthtok):
> pam_get_authtok_verify returned error: Failed preliminary check by password
> service
>
> but I have no clue what the check I've failed is, or if it's a console
> problem (locales, weird control characters) or maybe a selinux thing?
>
> For the record, if I enter a weak password on purpose, e.g. "amok",
> everything works, meaning that I get an explanation like "password
> refused because it's too short", or something like that. But when I
> try longer passwords, with or without non alphanumeric characters, I
> get this error.
>
> what else should I check, or fix?
>
> TIA,
> Marco
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
 If you have any questions, please do not hesitate to call me on +61 478 241
896.

Regards,
Christopher Hawker
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread Christopher Hawker
Alex,

I believe that there is a bug with what you are trying to do and your
english. I would suggest submitting a bug report, but unfortunately I
don't believe that even CentOS' best coders and engineers can write a
patch for that.

Regards,
Christopher Hawker

On 9/28/11, Jim Perrin  wrote:
> On Tue, Sep 27, 2011 at 1:22 PM, John R Pierce  wrote:
>
>
>> that is an archive of a 4 year old message that was sent to the many
>> thousands of subscribers of this mail list and is permanently archived
>> on dozens or even 100s of servers around the world that maintain mail
>> list archives.   you can't 'unsend' email
>>
>
>
>
> Hey some people (in this case me) just like digging up the past (like this
> -> http://lists.centos.org/pipermail/centos/2006-March/020140.html )
>
>
>
> --
> During times of universal deceit, telling the truth becomes a revolutionary
> act.
> George Orwell
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
 If you have any questions, please do not hesitate to call me on +61 478 241
896.

Regards,
Christopher Hawker
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread 唐建伟
no, i removed the commands you mentioned, but it still doesn't work.

Best Regards
Tang Jianwei

On Tue, Sep 27, 2011 at 6:01 PM, Минтаиров Михаил wrote:

> I can't remember a reason, but at one moment I stop to use  "openvpn
> --mktun --dev [dev name]" command. May be it's becouse openvpn create tap0
> by it self. So try to comment this lines:
>
>  for t in $tap; do
> openvpn --mktun --dev $t
>  done
>
> then restart a network, after then start openvpn and after it start bridge
> script
>
>
> > openvpn configure file
> >
> > *port 1194
> > proto udp
> > dev tap0
> > ca ca.crt
> > cert VPN_Server.crt
> > key VPN_Server.key  # This file should be kept secret
> > dh dh1024.pem
> > server-bridge 192.168.119.1 255.255.255.0 192.168.119.221 192.168.119.225
> > keepalive 10 120
> > comp-lzo
> > user nobody
> > group nobody
> > persist-key
> > persist-tun
> > status openvpn-status.log
> > log-append  /var/log/openvpn.log
> > verb 3
> > mute 20
> > *
> >
> > the script for bring up the bridge
> > *# Define Bridge Interface
> > br="br0"
> >
> > # Define list of TAP interfaces to be bridged,
> > # for example tap="tap0 tap1 tap2".
> > tap="tap0"
> >
> > # Define physical ethernet interface to be bridged
> > # with TAP interface(s) above.
> > eth="eth1"
> > eth_ip="192.168.119.1"
> > eth_netmask="255.255.255.0"
> > eth_broadcast="192.168.119.255"
> >
> > for t in $tap; do
> > openvpn --mktun --dev $t
> > done
> >
> > brctl addbr $br
> > brctl addif $br $eth
> >
> > for t in $tap; do
> > brctl addif $br $t
> > done
> >
> > for t in $tap; do
> > ifconfig $t 0.0.0.0 promisc up
> > done
> >
> > ifconfig $eth 0.0.0.0 promisc up
> >
> > ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast*
> >
> > On Tue, Sep 27, 2011 at 5:20 PM, Минтаиров Михаил  >wrote:
> >
> >>  Hm... It's very hard to guess without config files. Can you post your
> >>  server and client openvpn configs... and also can your show  a br0
> creation
> >>  commands?
> >>
> >>  27.09.2011, 12:01, "唐建伟" :
> >>>  Hi
> >>>
> >>>  no, i don't think so. anyway, i can and only can the vpn server from
> the
> >>>  remote hosts.
> >>>
> >>>  Best Regards
> >>>  Tang Jianwei
> >>>
> >>>  On Tue, Sep 27, 2011 at 3:59 PM, Минтаиров Михаил <
> mikxal...@yandex.ru
> >>> wrote:
>    So, something stop packets from remote hosts. May be firewall on
> remote
>    PC...? and can you run tcpdump on same remote host, to check that
> it's
> >>  tap0
>    device.
> 
>    27.09.2011, 11:06, "唐建伟" :
> >   Hi
> >
> >   the routing table in the remote hosts are OK. "tcpdump -n -i
> [device
>    name]"
> >   cannot capture any packages from remote. no mater br0 nor tap0.
> >
> >   Best Regards
> >   Tang Jianwei
> >
> >   On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил <
> >>  mikxal...@yandex.ru
> >  wrote:
> >>27.09.2011, 09:52, "唐建伟" :
> >>>Hi all,
> >>>
> >>>I just intalled openvpn + bridge in CentOS 6, but i get strange
>    problems:
> >>>the remote PCs cannot get the local PCs'  MACs and also, the
> local
> >>  PCs
> >>>cannot get the remote PCs' MACs
> >>>
> >>>but when i run "brctl showmacs br0"  it will list all the MACs
> and
>    also "
> >>>brctl show" will show that all the correct adapters are in br0
> >>>
> >>>SELinux disabled
> >>>
> >>>any ideas?
> >>First of all you should check routing table of remote hosts. If
> everything
> >>is correct, try to monitor br0, and other devises(ethX) by
> "tcpdump
> >>  -n
>    -i
> >>[device name]".
> >>___
> >>CentOS mailing list
> >>CentOS@centos.org
> >>http://lists.centos.org/mailman/listinfo/centos
> >   --
> >   Tang Jianwei
> >   System Administrator
> >   ___
> >   CentOS mailing list
> >   CentOS@centos.org
> >   http://lists.centos.org/mailman/listinfo/centos
>    ___
>    CentOS mailing list
>    CentOS@centos.org
>    http://lists.centos.org/mailman/listinfo/centos
> >>>  --
> >>>  Tang Jianwei
> >>>  System Administrator
> >>>  ___
> >>>  CentOS mailing list
> >>>  CentOS@centos.org
> >>>  http://lists.centos.org/mailman/listinfo/centos
> >>  ___
> >>  CentOS mailing list
> >>  CentOS@centos.org
> >>  http://lists.centos.org/mailman/listinfo/centos
> > --
> > Tang Jianwei
> > System Administrator
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Tang Jianwei

[CentOS] udev-devel or libudev-devel on CentOS 5.6

2011-09-27 Thread Kaushal Shriyan
Hi,

Is there libudev-devel or udev-devel package available on CentOS 5.6 ?

[root@~]# yum search udev-devel
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: centos.aol.in
 * extras: centos.aol.in
 * updates: centos.aol.in
base

   | 1.1 kB 00:00
extras

   | 2.1 kB 00:00
updates

   | 1.9 kB 00:00
Warning: No matches found for: udev-devel
No Matches found
[root@~]# yum search libudev-devel
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: centos.aol.in
 * extras: centos.aol.in
 * updates: centos.aol.in
Warning: No matches found for: libudev-devel
No Matches found
[root@~]#

Regards

Kaushal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6 [not really -- SOLVED]

2011-09-27 Thread Nataraj
On 09/27/2011 12:10 PM, Alfred von Campe wrote:
> On Sep 27, 2011, at 14:02, Les Mikesell wrote:
>
>> The usual reason for a delay is that you have more than one nameserver
>> specified in resolv.conf and the first one tried is down or
>> unreachable so you time out and retry.
> Bingo!  Thanks Les.  All systems use DHCP which updates the resolv.conf
> file, and for some reason the CentOS6 systems had their two entries in
> a different order then the CentOS5 systems.  Well, now that I checked all
> systems, it's not a CentOS6 vs. CentOS5 issue, but rather just "luck"
> of the draw, and my small sample size led me to believe that it was a
> CentOS6 issue.  One of our two main internal servers appears to be
> having some issues.  I'll have to follow up with CIS to figure out what
> is going on.
>
> Alfred
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

There are also ways to statically override the dns servers returned by dhcp.

I have not set this up under CentOS 6.  Currently in my
/etc/dhclient.conf  (or wherever the dhclient.conf file is in CentOS 6) 
I have an entry that looks like this:

interface "eth2" {
prepend domain-name-servers 127.0.0.1;
}


which forces my own list of domain servers to be prepended to the ones
dynamically returned by the dhcp server on the network attached to
eth2.  IT would of course be a good idea for your dhcp servers to return
the ip address of working dns servers, but this could be used if you
have reason to want to choose your own servers.

Alternatively, you can specify

supercede domain-name-servers a.b.c.d, a.b.x.y;

to completely replace the servers returned via dhcp.




Nataraj

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread Les Mikesell
  On 09/27/2011 04:25 PM, m.r...@5-cent.us wrote:
>   Then there's 3,1,3 that comes with CentOS 6, and no matter what I do,
> clicking on a link WILL NOT open it in a browser window or tab, 100% of
> the time, I have to copy the link, and paste it in.
>
>

That sounded so strange that I installed thunderbird on a very, very 
stock centos6 VM, pointed it to my gmail account via imap which it 
mostly already know how to do, and re-read this thread so I could click 
the link with the mutt info - and it opened it in firefox.   So it's 
something you've done to your own system...

-- 
   Les Mikesell
 lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread m . roth
Todd wrote:
>
>>> I setup Fetchmail and wanted to use Mutt to read e-mail. I used to use
>>> Pine and I just am sick of GUI e-mail clients these days. Bloat,
>>> complication and unreliable. Pine was my first ever e-mail client. I
>>> prefer to use POP still as I want may mail on my machine at all times.

I agree. I'm on the verge of going back to mutt. T'bird has *real*
problems. I'm running the version that comes with CentOS 5.6 (yeah, yeah,
I need to do an update to 5.7) at home, and my hosting provider is under a
DDoS attack, and I couldn't send out email. So I contacted them, and they
gave me a private fixed IP address for outbound SMTP. Worked when I did
it, but the next day, it would *not* send email; it kept trying the normal
SMTP server, even when I set the private IP as default. I had to delete
the normal one before it ever tried the IP.

Then there's 3,1,3 that comes with CentOS 6, and no matter what I do,
clicking on a link WILL NOT open it in a browser window or tab, 100% of
the time, I have to copy the link, and paste it in.

 mark "maybe I'll put a GUI around mutt"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread Todd
Hi Scott,


>> I setup Fetchmail and wanted to use Mutt to read e-mail. I used to use
>> Pine and I just am sick of GUI e-mail clients these days. Bloat,
>> complication and unreliable. Pine was my first ever e-mail client. I
>> prefer to use POP still as I want may mail on my machine at all times.

> http://home.roadrunner.com/~computertaijutsu/mutt.html

Thanks, I am using 1.5.21.

>>Further looking at the picture shows that the jpg links back to page
>> about mutt setup, including applying the sidebar patch.
>>http://linsec.ca/Using_mutt_on_OS_X#Applying_the_sidebar_patch

Yup that is what I am using as a reference for parts. I will review
this more. It starts to get overly complicated and I wanted to make
sure the basics worked before I went further.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread Scott Robbins
On Tue, Sep 27, 2011 at 04:17:18PM -0400, Scott Robbins wrote:
> On Tue, Sep 27, 2011 at 12:32:44PM -0700, Todd wrote:
> > Hi All,
> > 
> > 
> > Can anyone help me get setup? Also, can anyone point me how to make
> > mutt look like this: http://linsec.ca/File:Muttscreen.jpg interms of
> > the columns? IIRC there use to be a patch but that was so long ago I
> > dont know if it even applies anymore.
> 
> Hrrm, that's probably the sidebar patch.  Doubt it's included as default
> in an rpm, though.  I'd have to do some digging.

Further looking at the picture shows that the jpg links back to page
about mutt setup, including applying the sidebar patch.  

http://linsec.ca/Using_mutt_on_OS_X#Applying_the_sidebar_patch

I think you'll just have to google something like
mutt--sidebar-patch.

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Anya: I swear, I am just trying to find my necklace. 
Willow: Well, did you try looking inside the sofa in hell?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread Scott Robbins
On Tue, Sep 27, 2011 at 12:32:44PM -0700, Todd wrote:
> Hi All,
> 
> 
> Can anyone help me get setup? Also, can anyone point me how to make
> mutt look like this: http://linsec.ca/File:Muttscreen.jpg interms of
> the columns? IIRC there use to be a patch but that was so long ago I
> dont know if it even applies anymore.

Hrrm, that's probably the sidebar patch.  Doubt it's included as default
in an rpm, though.  I'd have to do some digging.

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread Scott Robbins
On Tue, Sep 27, 2011 at 12:32:44PM -0700, Todd wrote:
> Hi All,
> 
> I setup Fetchmail and wanted to use Mutt to read e-mail. I used to use
> Pine and I just am sick of GUI e-mail clients these days. Bloat,
> complication and unreliable. Pine was my first ever e-mail client. I
> prefer to use POP still as I want may mail on my machine at all times.

I much prefer getmail.

At any rate, you should probably set some sort of inbox in mutt. 

I have my own page on mutt, that some folks find useful.

http://home.roadrunner.com/~computertaijutsu/mutt.html

Note that it's basically for mutt 1.5, and I think CentOS may still use
mutt 1.4 (Though KB Singh had a 1.5 rpm, IIRC--in my case, I wound up
building from source.)


Not sure how fetchmail works these days--with getmail, I hand it off to
maildrop to do the sorting, but it also offers the option of just
putting everything into /var/spool/mail or elsewhere.

Regardless, mutt usually offers to create a $HOME/Mail directory, but
will also look in /var/spool/mail.  Hit c as in change directory, and it
will move around various places. 

There is, if you're more comfortable with Pine, alpine, which I believe
is pretty much the same thing.   (Based entirely on hearsay, haven't
used pine for years. )



-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT] Fetchmail and Mutt help

2011-09-27 Thread Todd
Hi All,

I setup Fetchmail and wanted to use Mutt to read e-mail. I used to use
Pine and I just am sick of GUI e-mail clients these days. Bloat,
complication and unreliable. Pine was my first ever e-mail client. I
prefer to use POP still as I want may mail on my machine at all times.

I can go into mutt and execute: 'fetchmail -v' and watch it bring down
my e-mail.

But in mutt i dont see anything. I dont see an inbox. no messages. nada.

I set my mail to /Users/jtsm/.mail and if I go to that location I dont
see anything there.

Can anyone help me get setup? Also, can anyone point me how to make
mutt look like this: http://linsec.ca/File:Muttscreen.jpg interms of
the columns? IIRC there use to be a patch but that was so long ago I
dont know if it even applies anymore.

I am reading the Wiki, but who knew Mutt was so extensive...

-Todd
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6 [not really -- SOLVED]

2011-09-27 Thread Alfred von Campe
On Sep 27, 2011, at 14:02, Les Mikesell wrote:

> The usual reason for a delay is that you have more than one nameserver
> specified in resolv.conf and the first one tried is down or
> unreachable so you time out and retry.

Bingo!  Thanks Les.  All systems use DHCP which updates the resolv.conf
file, and for some reason the CentOS6 systems had their two entries in
a different order then the CentOS5 systems.  Well, now that I checked all
systems, it's not a CentOS6 vs. CentOS5 issue, but rather just "luck"
of the draw, and my small sample size led me to believe that it was a
CentOS6 issue.  One of our two main internal servers appears to be
having some issues.  I'll have to follow up with CIS to figure out what
is going on.

Alfred

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread Jim Perrin
On Tue, Sep 27, 2011 at 1:22 PM, John R Pierce  wrote:


> that is an archive of a 4 year old message that was sent to the many
> thousands of subscribers of this mail list and is permanently archived
> on dozens or even 100s of servers around the world that maintain mail
> list archives.   you can't 'unsend' email
>



Hey some people (in this case me) just like digging up the past (like this
-> http://lists.centos.org/pipermail/centos/2006-March/020140.html )



-- 
During times of universal deceit, telling the truth becomes a revolutionary
act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread m . roth
m.r...@5-cent.us wrote:
> Digimer wrote:
>> On 09/27/2011 11:01 AM, Alex Bajan wrote:
>>>
>>> Please remove the formation about RAQport it is incorrect
>>>
>>> http://lists.centos.org/pipermail/centos/2007-September/043643.html
>>>
>> Beyond the whole "Streisand effect"[1], you've provided no evidence that
>> these posts are wrong. Despite that, you've not put forward any cause to
>> have jurisdiction to request the removal, either.
> 
> Furthermore, that's four years old. I haven't bothered to go there, but
> what assurance would anyone have that it was *not* correct four years ago?
>
> Or is this intended as a prequel to a takedown notice, in which case
> #insert FLAME_ON.h

And, following up my own post, which "formation" were you referring to, a
military formation? A rock formation? We don't have enough INformation

  mark "so, did he pass 6th grade English?"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread m . roth
Digimer wrote:
> On 09/27/2011 11:01 AM, Alex Bajan wrote:
>>
>> Please remove the formation about RAQport it is incorrect
>>
>> http://lists.centos.org/pipermail/centos/2007-September/043643.html
>>
> Beyond the whole "Streisand effect"[1], you've provided no evidence that
> these posts are wrong. Despite that, you've not put forward any cause to
> have jurisdiction to request the removal, either.

Furthermore, that's four years old. I haven't bothered to go there, but
what assurance would anyone have that it was *not* correct four years ago?

Or is this intended as a prequel to a takedown notice, in which case
#insert FLAME_ON.h

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Odd issue with C6 and NIS

2011-09-27 Thread Jim Perrin
On Tue, Sep 27, 2011 at 1:55 PM, James A. Peltier  wrote:

> I seem to have this very odd issue with CentOS 6 WRT NIS.  I have taken the
> package selection that I used with CentOS 5 and basically plopped it into my
> C6 kickstart file (see below).  On C5 this works just fine and I'm able to
> log in with NIS credentials just fine.  However, it looks like on C6 if you
> use a package selection like this, you also need to specify the yp-tools
> package as part of the kickstart *even though* you specify an authentication
> method of NIS in the kickstart.  Seems like a bug to me?!?
>

Current versions of fedora do this as well, in addition to f15 having a
buggy startup script for yp*. I agree with you that if you specify auth, the
tools for it should be there. That said, NIS needs to die. Quickly.

-- 
During times of universal deceit, telling the truth becomes a revolutionary
act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Odd issue with C6 and NIS

2011-09-27 Thread James A. Peltier
I seem to have this very odd issue with CentOS 6 WRT NIS.  I have taken the 
package selection that I used with CentOS 5 and basically plopped it into my C6 
kickstart file (see below).  On C5 this works just fine and I'm able to log in 
with NIS credentials just fine.  However, it looks like on C6 if you use a 
package selection like this, you also need to specify the yp-tools package as 
part of the kickstart *even though* you specify an authentication method of NIS 
in the kickstart.  Seems like a bug to me?!?



auth  --useshadow  --enablemd5  --enablenis --nisdomain test --nisserver 
yp.example.com

%packages
@core
augeas
autofs
dstat
nfs-utils
ntp
openssh
openssh-clients
openssh-server
portreserve
puppet
redhat-lsb
rsh-server
sendmail
sendmail-cf
sudo
sysstat
tcp_wrappers
wget
xinetd
yum-utils
%end


-- 
James A. Peltier
IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.sfu.ca/itservices
  http://blogs.sfu.ca/people/jpeltier
I will do the best I can with the talent I have

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS-6 by PXEboot?

2011-09-27 Thread Timothy Murphy
Timothy Murphy wrote:

> Has anyone succeeded in installing CentOS-6.0 by PXEboot.

I haven't succeeded in installing CentOS-6 on my HP MicroServer
by PXEboot yet, despite several tries.
It hangs during "waiting for hardware to initialize".

Is there any way of finding out which particular piece of hardware
is causing the problem?

I've tried adding noapic and acpi=off to the kernel line
but these didn't help.

-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread Jim Perrin
On Tue, Sep 27, 2011 at 1:01 PM, Alex Bajan  wrote:

>
> Please remove the formation about RAQport it is incorrect
>
>
1. Prove it.
2. You already asked yesterday
http://lists.centos.org/pipermail/centos/2011-September/118186.html (see how
useful the list archive is for when you need to reference something!)
3. It's a historical account of the list. While I am not a lawyer, I see
nothing in there inflammatory, derogatory, or otherwise requiring action.
It's simply a 4 year old account from 1 user. You're doing more harm to your
brand by dredging up the past than this original post ever did.


-- 
During times of universal deceit, telling the truth becomes a revolutionary
act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread John R Pierce
On 09/27/11 11:01 AM, Alex Bajan wrote:
> Please remove the formation about RAQport it is incorrect
>
>
> http://lists.centos.org/pipermail/centos/2007-September/043643.html


you _must_ be kidding.


that is an archive of a 4 year old message that was sent to the many 
thousands of subscribers of this mail list and is permanently archived 
on dozens or even 100s of servers around the world that maintain mail 
list archives.   you can't 'unsend' email.



-- 
john r pierceN 37, W 122
santa cruz ca mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread Digimer
On 09/27/2011 11:01 AM, Alex Bajan wrote:
> 
> Please remove the formation about RAQport it is incorrect
> 
> 
> http://lists.centos.org/pipermail/centos/2007-September/043643.html
> 
> Alex Lech Bajan
> Principal
> RAQport Inc.
> 2004 North Monroe Street
> Arlington Virginia 22207
> 703-528-0114 voice
> 703-652-0993 voice 2
> 800-695-6200 toll free
> sa...@raqport.com
> http://raqport.com

Beyond the whole "Streisand effect"[1], you've provided no evidence that
these posts are wrong. Despite that, you've not put forward any cause to
have jurisdiction to request the removal, either.

It will ultimately be up to the admins of this list to decide what to
remove from the archives, but I must say, you've not made a compelling
argument. Perhaps it's an entirely reasonable warning from a couple of
unhappy, improperly served former customers.

1. http://en.wikipedia.org/wiki/Streisand_effect

-- 
Digimer
E-Mail:  digi...@alteeve.com
Freenode handle: digimer
Papers and Projects: http://alteeve.com
Node Assassin:   http://nodeassassin.org
"At what point did we forget that the Space Shuttle was, essentially,
a program that strapped human beings to an explosion and tried to stab
through the sky with fire and math?"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Les Mikesell
On Tue, Sep 27, 2011 at 1:02 PM, Alfred von Campe  wrote:
>
>> Why do you think dnscache won't help?  Caching is not restricted to your 
>> local
>> domain.
>
> I guess I forgot to mention that only the first query is slow.  If you repeat
> the query, the response is fast, so it's already being cached somewhere.  I
> always assumed that's how DNS worked.  So in order to test this "slowness", I
> have to keep thinking of domains to look up.

DNS servers normally do cache, but clients don't.  Are you running
named locally on each machine and pointing resolv.conf to localhost?
It wouldn't make much sense for a central DNS server to act
differently depending on whether a c5 or c6 client was first to ask
for a name lookup.

-- 
  Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Les Mikesell
On Tue, Sep 27, 2011 at 12:28 PM, Alfred von Campe  wrote:
> On Sep 27, 2011, at 11:29, John Hodrien wrote:
>
>> You probably want to do an strace -f host blah rather than a basic strace, or
>> I think you'll lose what's going on.
>
> Good point.  Using -f doesn't show a 3+ second gap, but I still have no idea
> why it's slow (3-5 seconds) compared to CentOS5, or why using ltrace causes
> host or nslookup to crash.  Can anybody else get ltrace to work with host?

The usual reason for a delay is that you have more than one nameserver
specified in resolv.conf and the first one tried is down or
unreachable so you time out and retry.  Try "dig @namserver hostname"
with each of the nameserver addresses to see if they are working or
just slow.

-- 
  Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Alfred von Campe
On Sep 27, 2011, at 13:53, Frank Cox wrote:

> Why do you think dnscache won't help?  Caching is not restricted to your local
> domain.

I guess I forgot to mention that only the first query is slow.  If you repeat
the query, the response is fast, so it's already being cached somewhere.  I
always assumed that's how DNS worked.  So in order to test this "slowness", I
have to keep thinking of domains to look up.

Alfred

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Please remove the formation about RAQport it is incorrect

2011-09-27 Thread Alex Bajan

Please remove the formation about RAQport it is incorrect


http://lists.centos.org/pipermail/centos/2007-September/043643.html

Alex Lech Bajan
Principal
RAQport Inc.
2004 North Monroe Street
Arlington Virginia 22207
703-528-0114 voice
703-652-0993 voice 2
800-695-6200 toll free
sa...@raqport.com
http://raqport.com




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Frank Cox
On Tue, 27 Sep 2011 13:28:19 -0400
Alfred von Campe wrote:

> > Have you considered installing dnsmasq on those machines?
> 
> No, this is in a corporate environment, and the queries that are slow are
> for names outside of our domain (i.e., the Internet), so I don't think it
> would help.

Why do you think dnscache won't help?  Caching is not restricted to your local
domain.

-- 
MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com
www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] KVM update

2011-09-27 Thread Johan Martinez
I am planning to update KVM packages kvm and kvm-qemu-img on a system. Do I
need to shutdown running VMs before updating these packages? Does it require
any services restart after the update? Any idea?

thanks
jM
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Alfred von Campe
On Sep 27, 2011, at 11:29, John Hodrien wrote:

> You probably want to do an strace -f host blah rather than a basic strace, or
> I think you'll lose what's going on.

Good point.  Using -f doesn't show a 3+ second gap, but I still have no idea
why it's slow (3-5 seconds) compared to CentOS5, or why using ltrace causes
host or nslookup to crash.  Can anybody else get ltrace to work with host?

> Are you running either sssd or nscd on your box?

Yes, I am running nscd, but I didn't think it cached DNS queries.

> I've done nothing special, and DNS seems fast enough.

And I have done nothing different than what I do in CentOS5, yet it is much
slower (by at least an order of magnitude).

On Sep 27, 2011, at 13:05, Frank Cox wrote:

> Have you considered installing dnsmasq on those machines?

No, this is in a corporate environment, and the queries that are slow are
for names outside of our domain (i.e., the Internet), so I don't think it
would help.

Any other ideas on how to diagnose the root cause?

Alfred

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Frank Cox
On Tue, 27 Sep 2011 11:04:42 -0400
Alfred von Campe wrote:

> Most of my desktops are still running CentOS5, but I have installed CentOS6
> on a few of them.  The users on those desktops are reporting that DNS lookups
> are slow, and from my brief tests, that does appear to be the case. 

Have you considered installing dnsmasq on those machines?

-- 
MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com
www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] problem in cr: nfs-utils-lib-1.1.5-3.el6.x86_64

2011-09-27 Thread Louis Lagendijk
On Tue, 2011-09-27 at 09:49 -0700, Paul Heinlein wrote:
> I ran yum update on a CentOS 6.0 machine against the CR repository 
> and noticed that the nfs-utils-lib update broke my rcp.idmap settings:
> 
> rpc.idmapd: libnfsidmap: processing 'Method' list
> rpc.idmapd: libnfsidmap: Unable to get init function: 
> /usr/lib64/libnfsidmap/umich_ldap.so: undefined symbol: 
> libnfsidmap_plugin_init
> rpc.idmapd: libnfsidmap: requested translation method, 'umich_ldap', is not 
> available
> rpc.idmapd: Unable to create name to user id mappings.
> 
> The /usr/lib64/libnfsidmap/umich_ldap.so library included with the 
> 1.1.5-3.el6 update is noticably smaller than the one included in the 
> standard 6.0 package, v. 1.1.5-1.el6.
> 
> The rpm checks out correctly via gpg and an rpm2cpio->cpio pipe. 
> Running ldd against the updated library shows the expected links.
> 
> But the library appears to not work. Anyone else seen this?
> 
not this, but in my case rpcsvcgssd can no longer understand the krb5
from my Fedora WS. Sources are unfortunately no available yet, or I
would have a look to see what is wrong. 
 Sep 27 12:38:22 nest rpc.svcgssd[9212]: ERROR: failed serializing krb5
context for kernel
Sep 27 12:38:22 nest rpc.svcgssd[9212]: WARNING: handle_nullreq:
serialize_context_for_kernel failed
Sep 27 12:38:22 nest rpc.svcgssd[9212]: ERROR: GSS-API: error in
gss_export_lucid_sec_context(): GSS_S_NO_CONTEXT (No context has been
established) - (0x7f6e)

Louis

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] problem in cr: nfs-utils-lib-1.1.5-3.el6.x86_64

2011-09-27 Thread Paul Heinlein
I ran yum update on a CentOS 6.0 machine against the CR repository 
and noticed that the nfs-utils-lib update broke my rcp.idmap settings:

rpc.idmapd: libnfsidmap: processing 'Method' list
rpc.idmapd: libnfsidmap: Unable to get init function: 
/usr/lib64/libnfsidmap/umich_ldap.so: undefined symbol: libnfsidmap_plugin_init
rpc.idmapd: libnfsidmap: requested translation method, 'umich_ldap', is not 
available
rpc.idmapd: Unable to create name to user id mappings.

The /usr/lib64/libnfsidmap/umich_ldap.so library included with the 
1.1.5-3.el6 update is noticably smaller than the one included in the 
standard 6.0 package, v. 1.1.5-1.el6.

The rpm checks out correctly via gpg and an rpm2cpio->cpio pipe. 
Running ldd against the updated library shows the expected links.

But the library appears to not work. Anyone else seen this?

-- 
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] passwd problem with new vps

2011-09-27 Thread Marco Fioretti
greetings,

I am setting up Centos 6 i686 remotely, on a new VPS.

A problem I have is that I cannot set password for new users. I have
created one with

useradd -m new_user

but when I type 

passwd new_user

this is the result:

[root@vps ~]# passwd new_user
Changing password for user new_user
New password: 
Retype new password: 
passwd: Authentication token manipulation error
[root@vps ~]# tail /var/log/secure

Sep 27 17:30:30 vps passwd: pam_cracklib(passwd:chauthtok): 
pam_get_authtok_verify returned error: Failed preliminary check by password 
service

but I have no clue what the check I've failed is, or if it's a console
problem (locales, weird control characters) or maybe a selinux thing?

For the record, if I enter a weak password on purpose, e.g. "amok",
everything works, meaning that I get an explanation like "password
refused because it's too short", or something like that. But when I
try longer passwords, with or without non alphanumeric characters, I
get this error.

what else should I check, or fix?

TIA,
Marco
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is there a way to make the kernel see a new ethernet device without rebooting?

2011-09-27 Thread John Hodrien
On Tue, 27 Sep 2011, Jon Detert wrote:

> I wonder if it has to do with the type of NIC.  In my case, vmware says it's 
> of
> type 'flexible', and the CentOS o.s uses the 'pcnet32' driver for it.

Right.  When I add an e1000 NIC in vSphere to the VM, I immediately see a
message in dmesg.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is there a way to make the kernel see a new ethernet device without rebooting?

2011-09-27 Thread Jon Detert
- Original Message -
> From: "John Hodrien" 
> To: "CentOS mailing list" 
> Sent: Tuesday, September 27, 2011 9:08:09 AM
> Subject: Re: [CentOS] is there a way to make the kernel see a new ethernet 
> device without rebooting?
> 
> On Tue, 27 Sep 2011, Jon Detert wrote:
> 
> > I have a VMWare ESX server with virtual machines running CentOS.  I
> > want to
> > add an ethernet interface to one of the CentOS virtual machines.
> >  VMWare
> > allowed me to add a virtual NIC to the CentOS virtual machine while
> > it was
> > running.  However, the CentOS o.s. cannot see the new NIC.  Is
> > there a
> > command I can run to make the kernel aware of the new ethernet
> > device?  I
> > don't want to reboot the CentOS o.s. if I don't have to
> 
> Adding a NIC to VMWare with a CentOS 6 guest (e1000) works just fine
> here.  I


Adding the NIC in VMWare works fine for me too.  It's just that the guest
(CentOS) o.s. doesn't see the new NIC unless/until I reboot it.


> don't remember there being any problems with CentOS 5.
> 
> Does dmesg show evidence of the new device being attached?


No.

I wonder if it has to do with the type of NIC.  In my case, vmware says it's of
type 'flexible', and the CentOS o.s uses the 'pcnet32' driver for it.

- JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 79, Issue 9

2011-09-27 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CEBA-2011:1337  CentOS 5 x86_64 cman Update (Johnny Hughes)
   2. CEBA-2011:1337  CentOS 5 i386 cman Update (Johnny Hughes)
   3. CentOS-6.0 Continuous Release i386 and x86_64 (Karanbir Singh)


--

Message: 1
Date: Mon, 26 Sep 2011 17:43:06 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2011:1337  CentOS 5 x86_64 cman Update
To: centos-annou...@centos.org
Message-ID: <20110926174306.ga32...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:1337 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1337.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
ceecb32e1cece8b76f41b4fef1a17bb7  cman-2.0.115-85.el5_7.2.x86_64.rpm
eadb7e2a5f3b4080658dbdc9ce938821  cman-devel-2.0.115-85.el5_7.2.i386.rpm
1b65896b6559581b4cf9eddf02024178  cman-devel-2.0.115-85.el5_7.2.x86_64.rpm

Source:
1dff1a8ef073b3e86d097062ca990ed4  cman-2.0.115-85.el5_7.2.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Mon, 26 Sep 2011 17:43:06 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2011:1337  CentOS 5 i386 cman Update
To: centos-annou...@centos.org
Message-ID: <20110926174306.ga32...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:1337 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1337.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
c9b1ca0296e01026caf441c8be9e44e0  cman-2.0.115-85.el5_7.2.i386.rpm
eadb7e2a5f3b4080658dbdc9ce938821  cman-devel-2.0.115-85.el5_7.2.i386.rpm

Source:
1dff1a8ef073b3e86d097062ca990ed4  cman-2.0.115-85.el5_7.2.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 3
Date: Tue, 27 Sep 2011 01:03:59 +
From: Karanbir Singh 
Subject: [CentOS-announce] CentOS-6.0 Continuous Release i386 and
x86_64
To: centos-annou...@centos.org
Message-ID: <20110927010359.ga23...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


The CentOS-6.0 Continuous Release ( CR ) repository is now available on
mirror.centos.org. This repository contains rpms to be included in the
next CentOS-6.x release ( 6.1 ). Because these include security and bugfix
updates, we strongly recommend everyone using CentOS-6 install and
update their system using this repository.

-
Download and Install:

The centos-release-cr-6.x rpms are available in the Extras repository. You
can either run: 'yum install centos-release-cr', and follow yum's prompt or
download the rpms directly, install them using rpm and then use yum to run
the system updates.

i386:
http://mirror.centos.org/centos/6/extras/i386/RPMS/centos-release-cr-6-0.el6.centos.i686.rpm
( sha256: 9fc78d2d79abeb1513f0851d075a2860f5039fc8db3fb0db4c660252fffda894 )

x86_64:
http://mirror.centos.org/centos/6/extras/x86_64/RPMS/centos-release-cr-6-0.el6.centos.x86_64.rpm
( sha256: bd55e1505caae2f78c306290d235b7f54833fcad5a9f1942b3cb54e28f7bfe73 )

Notes:

- All rpms in the CR repo are signed with the main distro key.

- While the existing CR repo has most of the updates, we aim to have
  completed all updates in the next 2 to 3 days time.

- All updates released since 6.0, will be added to the 6.0/cr/ repository.
  This includes bugfix and enhancement updates released as a part of 6.1

- Once 6.1 is released, the 6.0/cr/ repositories will be removed ( they
  will not be available on vault.centos.org )

- Once 6.1 is released, the migration from 6.0 to 6.1 will remain seemless
  for people running with the CR repository. There will be no manual
  work needed on the machine.

- Baseurl for the CR repo is set to only use centos.org internal
  machines, this is to reduce the amount of time we need to spend in
  seeding and then managing external mirrors.

- All contents in the CR repo will be announced into a separate
  announcement list; once 6.1 is released the announcements will be
  re-sent to the centos-announce list.

- Additional notes are available at : 
http://wiki.centos.org/AdditionalResources/Repositories/CR

Comments and feedback are always welco

Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread m . roth
John Doe wrote:
> From: Les Mikesell 
>
>> Both sides have to negotiate.  The usual lingering problem is that
>> someone configured the switch not to.
>
>
> All other Windows/linux PCs do work fine at 1000Mbps on the same switch...
> The other PCs using this Realtek too are Windows.
> I will test another cable from another wall plug just in case...

Seriously, on a switch, individual ports can be, and are, configurable.
I've had to call my network people to have it fixed from 100Mb to autoneg
for individual machines.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] data recovery

2011-09-27 Thread Lamar Owen
On Monday, September 26, 2011 11:18:06 AM Paras pradhan wrote:
> On Mon, Sep 26, 2011 at 5:53 AM, Lamar Owen  wrote:
> > May I ask what sort of SAN?  
> Its a Hitachi OpenV fibre channel SAN (4Gbps HBA). My storage admin
> checked if this LUN can be accessible by others and he found no other
> hosts have access to it.

Ok.

> > I've seen some odd LUN reshuffling before, 
...
> reshuffling here means automatically changing disk's geometry as I am
> having an issue? It would be interesting to know if this can happen.

No, reshuffling as in a host gained access to LUNs in a 'phantom' manner that 
it should not have had access to.  No longer a problem, and hasn't been for a 
great while.  It was an odd interaction, but I forget the details.

If another host were put onto the FC with the exact same WWN onto the fabric it 
might be possible to see this sort of thing, too, but the WWN's are all 
supposed to be unique.

> Here are some new additional info :
...
> So my question is: if the LUN has been re partitioned for ex: say to
> install windows , why am i seeing our data in these newly created
> partitions? Is it possible to see data in a reapportioned drive?

Yes, it is.  If the recovery tool can look at the raw device it can grab stuff 
that isn't in any partition, and you can look at that data.  Standard 
forensics.  Repartitioning erases nothing except the partition table.

Now, in the specific case of GPT, it is further possible to have a GPT and an 
MBR at the same time, and while the 'shadow' MBR is supposed to match the GPT's 
partitioning it doesn't have to.

If you read through the LVM2 documentation and source code you may be able to 
find the signature used to mark a partition as being LVM; once you do that you 
should be able to find the start of the partition, and re-write the partition 
table(s).  I use the plural there since with GPT you can have the GPT and the 
MBR coexisting; ideally you'd want to wipe the GPT out, but in reality you may 
not want to.  

But, being that you really don't want to write anything to this volume, you 
really should set up an offset, read-only, loop device; that is, find the 
starting sector of the partition (preferably an image of the LUN, and not the 
actual LUN; can the Hitachi array do LUN replication (EMC's SANcopy or Snapview 
or MirrorView being the rough equivalents)?).  Then, once you find the starting 
position of the LVM physical volume:

START_OFFSET_BYTE='actual starting sector number * sector size, zero origin'
DEVLUN='LUN device, probably /dev/sde in your case'
losetup -o $START_OFFSET_BYTE --read-only /dev/loop0 $DEVLUN

Then see if you can get LVM to see this physical volume (by default loop 
devices are included in the scan, but you may want to verify they're not 
filtered in /etc/lvm/lvm.conf):
pvscan 
vgscan
lvscan

You may be able to mount (-o ro of course) the LV at that point (I'm going 
through the LVM business because you mentioned VG names in your post).

Hope that helps.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread John Doe
From: Les Mikesell 

> Both sides have to negotiate.  The usual lingering problem is that
> someone configured the switch not to.


All other Windows/linux PCs do work fine at 1000Mbps on the same switch...
The other PCs using this Realtek too are Windows.
I will test another cable from another wall plug just in case...

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] data recovery

2011-09-27 Thread Lamar Owen
On Monday, September 26, 2011 06:41:16 PM Ross Walker wrote:
> Might it be possible you ran KVM on the host and accidentally set the guest 
> disk to /dev/sda?

/dev/sde is the OP's LUN device.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread John Hodrien
On Tue, 27 Sep 2011, Alfred von Campe wrote:

> Most of my desktops are still running CentOS5, but I have installed CentOS6
> on a few of them.  The users on those desktops are reporting that DNS
> lookups are slow, and from my brief tests, that does appear to be the case.
> After some googling, I found a suggestion to disable IPv6, but that didn't
> help.  So I tried to figure out where the delay occurs using strace and
> ltrace, but that didn't help much.  When running ltrace, the process I'm
> trying to trace (host, nslookup) just dies.  And the output of strace does
> show a 3+ second delay, but I can't figure out what it's telling me:
>
> The CentOS5 systems on the same network with the same /etc/resolv.conf file
> do not have these delays.  Has anyone else seen this or have some
> suggestions as to how to debug this?

You probably want to do an strace -f host blah rather than a basic strace, or
I think you'll lose what's going on.

Are you running either sssd or nscd on your box?

I've done nothing special, and DNS seems fast enough.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread m . roth
Les Mikesell wrote:
> On Tue, Sep 27, 2011 at 9:27 AM, John Doe  wrote:
>> From: Brian Mathis 
>>
>>> If your first reaction is to disable auto-negotioation, please
>>> update your ways.  We are a decade into the 21st century, after all.
>>
>> Sure, I can update my ways.
>> I do want to live into the 21st century!  ^_^
>> But that does not solve this annoying auto-negotiation bug...
>
> Both sides have to negotiate.  The usual lingering problem is that
> someone configured the switch not to.

That's my thinking, which was why I suggested plugging another system with
a gigabit NIC into that port.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread Les Mikesell
On Tue, Sep 27, 2011 at 9:27 AM, John Doe  wrote:
> From: Brian Mathis 
>
>> If your first reaction is to disable auto-negotioation, please
>> update your ways.  We are a decade into the 21st century, after all.
>
> Sure, I can update my ways.
> I do want to live into the 21st century!  ^_^
> But that does not solve this annoying auto-negotiation bug...

Both sides have to negotiate.  The usual lingering problem is that
someone configured the switch not to.

-- 
  Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread Alfred von Campe
Most of my desktops are still running CentOS5, but I have installed CentOS6 on 
a few of them.  The users on those desktops are reporting that DNS lookups are 
slow, and from my brief tests, that does appear to be the case.  After some 
googling, I found a suggestion to disable IPv6, but that didn't help.  So I 
tried to figure out where the delay occurs using strace and ltrace, but that 
didn't help much.  When running ltrace, the process I'm trying to trace (host, 
nslookup) just dies.  And the output of strace does show a 3+ second delay, but 
I can't figure out what it's telling me:

10:46:25.317517 futex(0xd1ba94, FUTEX_WAKE_PRIVATE, 2147483647) = 0
10:46:25.317586 open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = 6
10:46:25.317635 fstat64(6, {st_mode=S_IFREG|0644, st_size=99158720, ...}) = 0
10:46:25.317702 mmap2(NULL, 2097152, PROT_READ, MAP_PRIVATE, 6, 0) = 0xb569d000
10:46:25.317754 mmap2(NULL, 1171456, PROT_READ, MAP_PRIVATE, 6, 0x19c) = 
0xb557f000
10:46:25.317792 mmap2(NULL, 4096, PROT_READ, MAP_PRIVATE, 6, 0x1084) = 
0xb557e000
10:46:25.317827 close(6)= 0
10:46:25.317904 futex(0xb76a5050, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0xb76a504c, 
{FUTEX_OP_SET, 0, FUTEX_OP_CMP_GT,
10:46:25.317990 futex(0xb76a5018, FUTEX_WAKE_PRIVATE, 1) = 1
10:46:25.318037 rt_sigaction(SIGHUP, {0x141390, ~[RTMIN RT_1], 0}, NULL, 8) = 0
10:46:25.318145 rt_sigsuspend([])   = ? ERESTARTNOHAND (To be restarted)
10:46:28.510794 --- SIGTERM (Terminated) @ 0 (0) ---
10:46:28.510842 sigreturn() = ? (mask now [HUP INT TERM])
10:46:28.510926 futex(0xb76a5050, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0xb76a504c, 
{FUTEX_OP_SET, 0, FUTEX_OP_CMP_GT,
10:46:28.511015 futex(0xb76a5018, FUTEX_WAKE_PRIVATE, 1) = 1
10:46:28.511070 futex(0xb76a5050, FUTEX_CMP_REQUEUE_PRIVATE, 1, 2147483647, 
0xb76a5018, 18) = 1
10:46:28.511144 futex(0xb76a5018, FUTEX_WAKE_PRIVATE, 1) = 1
10:46:28.511256 futex(0xb769fbd8, FUTEX_WAIT, 2371, NULL) = -1 EAGAIN (Resource 
temporarily unavailable)
10:46:28.511316 brk(0x920a000)  = 0x920a000

The CentOS5 systems on the same network with the same /etc/resolv.conf file do 
not have these delays.  Has anyone else seen this or have some suggestions as 
to how to debug this?

Alfred

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread John Doe
From: Brian Mathis 

> If your first reaction is to disable auto-negotioation, please 
> update your ways.  We are a decade into the 21st century, after all.

Sure, I can update my ways.
I do want to live into the 21st century!  ^_^
But that does not solve this annoying auto-negotiation bug...

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread m . roth
John Doe wrote:
> From: "m.r...@5-cent.us" 
>
>> I was working on a similar problem (turned out to be our network
>> switch),
>> but *did* find that order of the ethtool command is significant: you
>> *MUST* have autoneg off as the first parameter; that is, try
>> # ethtool -s eth0  autoneg off speed 1000 duplex full advertise 0x020
>
> Tried that but I still get autoneg on... and 100Mbps.
> In fact, the only way to have autoneg really off seems to not include
> "speed 1000"...
> But if I do not put "speed 1000", nothing changes.
> And as soon as I put "speed 1000", autoneg is back on... even with
> "autoneg off" in front...

Dumb question: have you tried plugging any other system with a 1Gb NIC
into that port on the switch?

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is there a way to make the kernel see a new ethernet device without rebooting?

2011-09-27 Thread John Hodrien
On Tue, 27 Sep 2011, Jon Detert wrote:

> I have a VMWare ESX server with virtual machines running CentOS.  I want to
> add an ethernet interface to one of the CentOS virtual machines.  VMWare
> allowed me to add a virtual NIC to the CentOS virtual machine while it was
> running.  However, the CentOS o.s. cannot see the new NIC.  Is there a
> command I can run to make the kernel aware of the new ethernet device?  I
> don't want to reboot the CentOS o.s. if I don't have to

Adding a NIC to VMWare with a CentOS 6 guest (e1000) works just fine here.  I
don't remember there being any problems with CentOS 5.

Does dmesg show evidence of the new device being attached?

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread Brian Mathis
On Tue, Sep 27, 2011 at 9:47 AM,   wrote:
> John Doe wrote:
>> From: Muhammad Panji 
>>
>>> I have an onboard Realtek RTL8111/8168B NIC. from lspci -vv :
>>> 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
>>> RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02)
>>> It is detected, but why the speed is always 100Mbps, already change
> 
>> I tried:
>> # ethtool -s eth0 speed 1000 duplex full autoneg off advertise 0x020
>> but auto-negotiation stays on and I only get 100Mbps...
>>
>> I tried:
>> # ethtool -s eth0 duplex full autoneg off advertise 0x020
>> auto-negotiation is off but nothing change...
>
> I was working on a similar problem (turned out to be our network switch),
> but *did* find that order of the ethtool command is significant: you
> *MUST* have autoneg off as the first parameter; that is, try
> # ethtool -s eth0  autoneg off speed 1000 duplex full advertise 0x020
>
>      mark


Auto-negotiation is a required part of the 1000Gb protocol.  You
cannot turn it off.

In the olden days there were a few problems with it, and some people's
reaction to every problem was to turn it off (and many made it the
default setting).  Some still repeat the mantra as if it is gospel,
but they are relics of a bygone era.  If your first reaction is to
disable auto-negotioation, please update your ways.  We are a decade
into the 21st century, after all.


-☙ Brian Mathis ❧-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread John Doe
From: "m.r...@5-cent.us" 

> I was working on a similar problem (turned out to be our network switch),
> but *did* find that order of the ethtool command is significant: you
> *MUST* have autoneg off as the first parameter; that is, try
> # ethtool -s eth0  autoneg off speed 1000 duplex full advertise 0x020

Tried that but I still get autoneg on... and 100Mbps.
In fact, the only way to have autoneg really off seems to not include "speed 
1000"...
But if I do not put "speed 1000", nothing changes.
And as soon as I put "speed 1000", autoneg is back on... even with "autoneg 
off" in front...

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread m . roth
John Doe wrote:
> From: Muhammad Panji 
>
>> I have an onboard Realtek RTL8111/8168B NIC. from lspci -vv :
>> 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
>> RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02)
>> It is detected, but why the speed is always 100Mbps, already change

> I tried:
> # ethtool -s eth0 speed 1000 duplex full autoneg off advertise 0x020
> but auto-negotiation stays on and I only get 100Mbps...
>
> I tried:
> # ethtool -s eth0 duplex full autoneg off advertise 0x020
> auto-negotiation is off but nothing change...

I was working on a similar problem (turned out to be our network switch),
but *did* find that order of the ethtool command is significant: you
*MUST* have autoneg off as the first parameter; that is, try
# ethtool -s eth0  autoneg off speed 1000 duplex full advertise 0x020

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread John Doe
From: Muhammad Panji 

> I have an onboard Realtek RTL8111/8168B NIC. from lspci -vv :
> 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
> RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02)
> It is detected, but why the speed is always 100Mbps, already change
> cable but still no luck. I use ethtool and from the output it seems
> that system know that this NIC support gigabit speed :
> have change the driver r8169 with r8168 and follow the guide on CentOS
> wiki http://wiki.centos.org/AdditionalResources/HardwareList/RealTekRTL8111b
> but still it only get 100Mbps speed.

Same controller here... and I always get downgraded to 100Mbps...
I am using kmod-r8168-8.025.00-1
I have other PCs connected to the same switch and they are in 1000Mbps...

# ethtool eth0
Settings for eth0:
    Supported ports: [ TP ]
    Supported link modes:   10baseT/Half 10baseT/Full 
    100baseT/Half 100baseT/Full 
    1000baseT/Full 
    Supports auto-negotiation: Yes
    Advertised link modes:  10baseT/Half 10baseT/Full 
    100baseT/Half 100baseT/Full 
    1000baseT/Full 
    Advertised auto-negotiation: Yes
    Speed: 100Mb/s
    Duplex: Full
    Port: Twisted Pair
    PHYAD: 0
    Transceiver: internal
    Auto-negotiation: on
    Supports Wake-on: pumbg
    Wake-on: g
    Current message level: 0x0033 (51)
    Link detected: yes

I tried:
# ethtool -s eth0 speed 1000 duplex full autoneg off advertise 0x020
but auto-negotiation stays on and I only get 100Mbps...

I tried:
# ethtool -s eth0 duplex full autoneg off advertise 0x020
auto-negotiation is off but nothing change...

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] is there a way to make the kernel see a new ethernet device without rebooting?

2011-09-27 Thread Jon Detert
I have a VMWare ESX server with virtual machines running CentOS.  I want to add 
an ethernet interface to one of the CentOS virtual machines.  VMWare allowed me 
to add a virtual NIC to the CentOS virtual machine while it was running.  
However, the CentOS o.s. cannot see the new NIC.  Is there a command I can run 
to make the kernel aware of the new ethernet device?  I don't want to reboot 
the CentOS o.s. if I don't have to

Thanks,

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Rsync CR repo for CentOS 6? was [CentOS-announce] CentOS-6.0 Continuous Release i386 and x86_64

2011-09-27 Thread Karanbir Singh
On 09/27/2011 07:26 AM, Mathieu Baudier wrote:
> Is it possible to synchronize locally the CR repo?
> 
> We usually synchronize all repositories in our internal network via
> the third-party mirrors, but since the CR repo won't be available
> there, it would be nice to be able to rsync directly from centos.org
> (and it would remove some load on it)

its available in the regular mirrors, so you should still be able to use
rsync against someone close to you.

its not that the content isnt available on external mirrors, its more a
case of the default config for the repo only uses content on .centos.org
( since its a lot faster to sync and keep in a stable manner ).

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RTL8111/8168B always 100mbps

2011-09-27 Thread Dennis Jacobfeuerborn
On 09/27/2011 05:15 AM, Muhammad Panji wrote:
> Dear All,
> I have an onboard Realtek RTL8111/8168B NIC. from lspci -vv :
>
> 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
> RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02)
>
> It is detected, but why the speed is always 100Mbps, already change
> cable but still no luck. I use ethtool and from the output it seems
> that system know that this NIC support gigabit speed :
>
>
>  Supported link modes:   10baseT/Half 10baseT/Full
>  100baseT/Half 100baseT/Full
>  1000baseT/Full
>  Supports auto-negotiation: Yes
>  Advertised link modes:  10baseT/Half 10baseT/Full
>  100baseT/Half 100baseT/Full
>  1000baseT/Full
>
> have change the driver r8169 with r8168 and follow the guide on CentOS
> wiki http://wiki.centos.org/AdditionalResources/HardwareList/RealTekRTL8111b
> but still it only get 100Mbps speed.
>
> I user kernel 2.6.18-274.3.1.el5 and 2.6.18-274.3.1.el5-PAE. on
> another machine with the same specs I use kernel  2.6.18-238.9.1.el5
> and the gigabit speed works.
>
> Any idea why this happened and how to solve it? Thank you.
> Regards,

If your system is using the r8169 driver for this device then you'll 
probably need a different driver to get it working? I've got this in my 
Fedora 15 system and I needed to manually install the r8168 driver to make 
things work.

Check this out for the details:
http://wiki.linuxmce.org/index.php/Realtek_8168

Regards,
   Dennis
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Expunge Old Email

2011-09-27 Thread John Hinton
For those of you running mailservers on CentOS 6, what are the 
suggestions for programs to expunge old email? For instance, deleting 
email from a Spam folder that is 2 weeks old or older.

I see that Dovecot does have a solution, but was wondering about what 
others have landed on.

My systems are basically Postfix, Dovecot using Maildir.

Thanks,
John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hard I/O lockup with EL6

2011-09-27 Thread Emmanuel Noobadmin
On 9/27/11, Benjamin Smith  wrote:
> I wish you the best of luck!

Fortunately (or unfortunately depending on how one looks at it), mine
appears to be just bad sectors developing on one of the  "newest"
drive I added to the machine as part of a mdadm RAID 1 array.

After I rebooted the server and after some period of non-activity
apart from the raid resync, I came back to see the console scrolling
with error messages and an email warning in my inbox that a device has
failed.

smartctl quick test aborted with a read error but WD's diag reports no
problem on a quick test so I'm putting it through the full media scan
to be sure.

Hopefully it is indeed just bad sectors but I'm skeptical at this
point because in the original situation, there was no warning email
from mdadm and there was nothing logged when I checked.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hacking Issue

2011-09-27 Thread Micky L Martin
On Mon, Sep 26, 2011 at 10:10 AM,  wrote:

> Theo Band wrote:
> > On 09/26/2011 01:02 PM, Jennifer Botten wrote:
> >>
> >> I am having an issue with someone accessing our server via a SIP/VOIP
> >> connection. I have changed my iptables rules to drop all UDP traffic
> >> from and too this IP address, but this traffic seems to still run
> >> through my server. These are the iptables rules that I current have on
> >> the server.
> >>
> >> -A INPUT -i eth0 -s 209.61.231.42 -p udp -j DROP
> >>
> >> -A INPUT -i eth0 -d 209.61.231.42 -p udp -j DROP
> >>
> >>
> > If your SIP server needs to be accessed from any IP address, consider to
> > use fail2ban. Easy to setup and it will block access to your SIP server
> > after so many false attempts.
> > I started using fail2ban to prevent the logs (Asterisk) from cluttering
> > failed logons.
>
> Let me chime in: *yes* to fail2ban. We use it here at work, and it works,
> and is very good. Not too hard to configure for basic usage, either, but
> very extensible.
>
> mark
>
>

I use CSF and LFD. Like every other firewall, the backend is always iptables
but CSF is so powerful and has a lot of irreplaceable power and
functionality.
It can be a bit of difficult to configure it for the first time but when you
do, you will never look back ;)

-Micky.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread Минтаиров Михаил
I can't remember a reason, but at one moment I stop to use  "openvpn --mktun 
--dev [dev name]" command. May be it's becouse openvpn create tap0 by it self. 
So try to comment this lines:

 for t in $tap; do
 openvpn --mktun --dev $t
 done

then restart a network, after then start openvpn and after it start bridge 
script


> openvpn configure file
>
> *port 1194
> proto udp
> dev tap0
> ca ca.crt
> cert VPN_Server.crt
> key VPN_Server.key  # This file should be kept secret
> dh dh1024.pem
> server-bridge 192.168.119.1 255.255.255.0 192.168.119.221 192.168.119.225
> keepalive 10 120
> comp-lzo
> user nobody
> group nobody
> persist-key
> persist-tun
> status openvpn-status.log
> log-append  /var/log/openvpn.log
> verb 3
> mute 20
> *
>
> the script for bring up the bridge
> *# Define Bridge Interface
> br="br0"
>
> # Define list of TAP interfaces to be bridged,
> # for example tap="tap0 tap1 tap2".
> tap="tap0"
>
> # Define physical ethernet interface to be bridged
> # with TAP interface(s) above.
> eth="eth1"
> eth_ip="192.168.119.1"
> eth_netmask="255.255.255.0"
> eth_broadcast="192.168.119.255"
>
> for t in $tap; do
> openvpn --mktun --dev $t
> done
>
> brctl addbr $br
> brctl addif $br $eth
>
> for t in $tap; do
> brctl addif $br $t
> done
>
> for t in $tap; do
> ifconfig $t 0.0.0.0 promisc up
> done
>
> ifconfig $eth 0.0.0.0 promisc up
>
> ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast*
>
> On Tue, Sep 27, 2011 at 5:20 PM, Минтаиров Михаил wrote:
>
>>  Hm... It's very hard to guess without config files. Can you post your
>>  server and client openvpn configs... and also can your show  a br0 creation
>>  commands?
>>
>>  27.09.2011, 12:01, "唐建伟" :
>>>  Hi
>>>
>>>  no, i don't think so. anyway, i can and only can the vpn server from the
>>>  remote hosts.
>>>
>>>  Best Regards
>>>  Tang Jianwei
>>>
>>>  On Tue, Sep 27, 2011 at 3:59 PM, Минтаиров Михаил >> wrote:
   So, something stop packets from remote hosts. May be firewall on remote
   PC...? and can you run tcpdump on same remote host, to check that it's
>>  tap0
   device.

   27.09.2011, 11:06, "唐建伟" :
>   Hi
>
>   the routing table in the remote hosts are OK. "tcpdump -n -i [device
   name]"
>   cannot capture any packages from remote. no mater br0 nor tap0.
>
>   Best Regards
>   Tang Jianwei
>
>   On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил <
>>  mikxal...@yandex.ru
>  wrote:
>>    27.09.2011, 09:52, "唐建伟" :
>>>    Hi all,
>>>
>>>    I just intalled openvpn + bridge in CentOS 6, but i get strange
   problems:
>>>    the remote PCs cannot get the local PCs'  MACs and also, the local
>>  PCs
>>>    cannot get the remote PCs' MACs
>>>
>>>    but when i run "brctl showmacs br0"  it will list all the MACs and
   also "
>>>    brctl show" will show that all the correct adapters are in br0
>>>
>>>    SELinux disabled
>>>
>>>    any ideas?
>>    First of all you should check routing table of remote hosts. If
    everything
>>    is correct, try to monitor br0, and other devises(ethX) by "tcpdump
>>  -n
   -i
>>    [device name]".
>>    ___
>>    CentOS mailing list
>>    CentOS@centos.org
>>    http://lists.centos.org/mailman/listinfo/centos
>   --
>   Tang Jianwei
>   System Administrator
>   ___
>   CentOS mailing list
>   CentOS@centos.org
>   http://lists.centos.org/mailman/listinfo/centos
   ___
   CentOS mailing list
   CentOS@centos.org
   http://lists.centos.org/mailman/listinfo/centos
>>>  --
>>>  Tang Jianwei
>>>  System Administrator
>>>  ___
>>>  CentOS mailing list
>>>  CentOS@centos.org
>>>  http://lists.centos.org/mailman/listinfo/centos
>>  ___
>>  CentOS mailing list
>>  CentOS@centos.org
>>  http://lists.centos.org/mailman/listinfo/centos
> --
> Tang Jianwei
> System Administrator
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread 唐建伟
openvpn configure file

*port 1194
proto udp
dev tap0
ca ca.crt
cert VPN_Server.crt
key VPN_Server.key  # This file should be kept secret
dh dh1024.pem
server-bridge 192.168.119.1 255.255.255.0 192.168.119.221 192.168.119.225
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append  /var/log/openvpn.log
verb 3
mute 20
*

the script for bring up the bridge
*# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth1"
eth_ip="192.168.119.1"
eth_netmask="255.255.255.0"
eth_broadcast="192.168.119.255"

for t in $tap; do
openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
brctl addif $br $t
done

for t in $tap; do
ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast*


On Tue, Sep 27, 2011 at 5:20 PM, Минтаиров Михаил wrote:

> Hm... It's very hard to guess without config files. Can you post your
> server and client openvpn configs... and also can your show  a br0 creation
> commands?
>
> 27.09.2011, 12:01, "唐建伟" :
> > Hi
> >
> > no, i don't think so. anyway, i can and only can the vpn server from the
> > remote hosts.
> >
> > Best Regards
> > Tang Jianwei
> >
> > On Tue, Sep 27, 2011 at 3:59 PM, Минтаиров Михаил  >wrote:
> >
> >>  So, something stop packets from remote hosts. May be firewall on remote
> >>  PC...? and can you run tcpdump on same remote host, to check that it's
> tap0
> >>  device.
> >>
> >>  27.09.2011, 11:06, "唐建伟" :
> >>>  Hi
> >>>
> >>>  the routing table in the remote hosts are OK. "tcpdump -n -i [device
> >>  name]"
> >>>  cannot capture any packages from remote. no mater br0 nor tap0.
> >>>
> >>>  Best Regards
> >>>  Tang Jianwei
> >>>
> >>>  On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил <
> mikxal...@yandex.ru
> >>> wrote:
>    27.09.2011, 09:52, "唐建伟" :
> >   Hi all,
> >
> >   I just intalled openvpn + bridge in CentOS 6, but i get strange
> >>  problems:
> >   the remote PCs cannot get the local PCs'  MACs and also, the local
> PCs
> >   cannot get the remote PCs' MACs
> >
> >   but when i run "brctl showmacs br0"  it will list all the MACs and
> >>  also "
> >   brctl show" will show that all the correct adapters are in br0
> >
> >   SELinux disabled
> >
> >   any ideas?
>    First of all you should check routing table of remote hosts. If
> >>   everything
>    is correct, try to monitor br0, and other devises(ethX) by "tcpdump
> -n
> >>  -i
>    [device name]".
>    ___
>    CentOS mailing list
>    CentOS@centos.org
>    http://lists.centos.org/mailman/listinfo/centos
> >>>  --
> >>>  Tang Jianwei
> >>>  System Administrator
> >>>  ___
> >>>  CentOS mailing list
> >>>  CentOS@centos.org
> >>>  http://lists.centos.org/mailman/listinfo/centos
> >>  ___
> >>  CentOS mailing list
> >>  CentOS@centos.org
> >>  http://lists.centos.org/mailman/listinfo/centos
> > --
> > Tang Jianwei
> > System Administrator
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Tang Jianwei
System Administrator
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread Минтаиров Михаил
Hm... It's very hard to guess without config files. Can you post your server 
and client openvpn configs... and also can your show  a br0 creation commands?

27.09.2011, 12:01, "唐建伟" :
> Hi
>
> no, i don't think so. anyway, i can and only can the vpn server from the
> remote hosts.
>
> Best Regards
> Tang Jianwei
>
> On Tue, Sep 27, 2011 at 3:59 PM, Минтаиров Михаил wrote:
>
>>  So, something stop packets from remote hosts. May be firewall on remote
>>  PC...? and can you run tcpdump on same remote host, to check that it's tap0
>>  device.
>>
>>  27.09.2011, 11:06, "唐建伟" :
>>>  Hi
>>>
>>>  the routing table in the remote hosts are OK. "tcpdump -n -i [device
>>  name]"
>>>  cannot capture any packages from remote. no mater br0 nor tap0.
>>>
>>>  Best Regards
>>>  Tang Jianwei
>>>
>>>  On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил >> wrote:
   27.09.2011, 09:52, "唐建伟" :
>   Hi all,
>
>   I just intalled openvpn + bridge in CentOS 6, but i get strange
>>  problems:
>   the remote PCs cannot get the local PCs'  MACs and also, the local PCs
>   cannot get the remote PCs' MACs
>
>   but when i run "brctl showmacs br0"  it will list all the MACs and
>>  also "
>   brctl show" will show that all the correct adapters are in br0
>
>   SELinux disabled
>
>   any ideas?
   First of all you should check routing table of remote hosts. If
>>   everything
   is correct, try to monitor br0, and other devises(ethX) by "tcpdump -n
>>  -i
   [device name]".
   ___
   CentOS mailing list
   CentOS@centos.org
   http://lists.centos.org/mailman/listinfo/centos
>>>  --
>>>  Tang Jianwei
>>>  System Administrator
>>>  ___
>>>  CentOS mailing list
>>>  CentOS@centos.org
>>>  http://lists.centos.org/mailman/listinfo/centos
>>  ___
>>  CentOS mailing list
>>  CentOS@centos.org
>>  http://lists.centos.org/mailman/listinfo/centos
> --
> Tang Jianwei
> System Administrator
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Video capture on CentOS (6)

2011-09-27 Thread hadi motamedi
On 9/27/11, Mathieu Baudier  wrote:
>> Could anybody recommend a not-too-expensive video capture cards (PCI,
>> USB, fireWire, ...) which would be well supported (drivers easily
>> available in base, ElRepo, or not too complicated to build).
>
> Answering my own question for future reference: the GRABBY video
> capture card by TERRATEC worked out of the box on CentOS 6.
>
> It is very small, connects via USB and offers S-Video input + standard
> audio R/L and video input.
> It cost around 40 EUR in a consumer shop (Saturn) in the "digitalize
> your old VHS video etc." section.
>
> lsusb output:
> Bus 001 Device 005: ID 0ccd:0096 TerraTec Electronic GmbH
>
> Input can be visualized using VLC (from RPMForge) and Video4Linux 2
> capture device.
>
> Cheers,
>
> Mathieu
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
Sorry to forget to mention : "I meant usb webcam"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Video capture on CentOS (6)

2011-09-27 Thread hadi motamedi
On 9/27/11, Mathieu Baudier  wrote:
>> Could anybody recommend a not-too-expensive video capture cards (PCI,
>> USB, fireWire, ...) which would be well supported (drivers easily
>> available in base, ElRepo, or not too complicated to build).
>
> Answering my own question for future reference: the GRABBY video
> capture card by TERRATEC worked out of the box on CentOS 6.
>
> It is very small, connects via USB and offers S-Video input + standard
> audio R/L and video input.
> It cost around 40 EUR in a consumer shop (Saturn) in the "digitalize
> your old VHS video etc." section.
>
> lsusb output:
> Bus 001 Device 005: ID 0ccd:0096 TerraTec Electronic GmbH
>
> Input can be visualized using VLC (from RPMForge) and Video4Linux 2
> capture device.
>
> Cheers,
>
> Mathieu
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
Sorry. Which application you are running on your centos to be able to
connect a general purpose webcam to your centos machine to capture
live video (like MATLAB Simulink video and image acquisition toolbox
for windows)?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread 唐建伟
Hi

no, i don't think so. anyway, i can and only can the vpn server from the
remote hosts.

Best Regards
Tang Jianwei

On Tue, Sep 27, 2011 at 3:59 PM, Минтаиров Михаил wrote:

>
> So, something stop packets from remote hosts. May be firewall on remote
> PC...? and can you run tcpdump on same remote host, to check that it's tap0
> device.
>
> 27.09.2011, 11:06, "唐建伟" :
> > Hi
> >
> > the routing table in the remote hosts are OK. "tcpdump -n -i [device
> name]"
> > cannot capture any packages from remote. no mater br0 nor tap0.
> >
> > Best Regards
> > Tang Jianwei
> >
> > On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил  >wrote:
> >
> >>  27.09.2011, 09:52, "唐建伟" :
> >>>  Hi all,
> >>>
> >>>  I just intalled openvpn + bridge in CentOS 6, but i get strange
> problems:
> >>>
> >>>  the remote PCs cannot get the local PCs'  MACs and also, the local PCs
> >>>  cannot get the remote PCs' MACs
> >>>
> >>>  but when i run "brctl showmacs br0"  it will list all the MACs and
> also "
> >>>  brctl show" will show that all the correct adapters are in br0
> >>>
> >>>  SELinux disabled
> >>>
> >>>  any ideas?
> >>  First of all you should check routing table of remote hosts. If
>  everything
> >>  is correct, try to monitor br0, and other devises(ethX) by "tcpdump -n
> -i
> >>  [device name]".
> >>  ___
> >>  CentOS mailing list
> >>  CentOS@centos.org
> >>  http://lists.centos.org/mailman/listinfo/centos
> > --
> > Tang Jianwei
> > System Administrator
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Tang Jianwei
System Administrator
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread Минтаиров Михаил

So, something stop packets from remote hosts. May be firewall on remote PC...? 
and can you run tcpdump on same remote host, to check that it's tap0 device.

27.09.2011, 11:06, "唐建伟" :
> Hi
>
> the routing table in the remote hosts are OK. "tcpdump -n -i [device name]"
> cannot capture any packages from remote. no mater br0 nor tap0.
>
> Best Regards
> Tang Jianwei
>
> On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил wrote:
>
>>  27.09.2011, 09:52, "唐建伟" :
>>>  Hi all,
>>>
>>>  I just intalled openvpn + bridge in CentOS 6, but i get strange problems:
>>>
>>>  the remote PCs cannot get the local PCs'  MACs and also, the local PCs
>>>  cannot get the remote PCs' MACs
>>>
>>>  but when i run "brctl showmacs br0"  it will list all the MACs and also "
>>>  brctl show" will show that all the correct adapters are in br0
>>>
>>>  SELinux disabled
>>>
>>>  any ideas?
>>  First of all you should check routing table of remote hosts. If  everything
>>  is correct, try to monitor br0, and other devises(ethX) by "tcpdump -n -i
>>  [device name]".
>>  ___
>>  CentOS mailing list
>>  CentOS@centos.org
>>  http://lists.centos.org/mailman/listinfo/centos
> --
> Tang Jianwei
> System Administrator
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] openvpn + bridge utils in CentOS 6

2011-09-27 Thread 唐建伟
Hi

the routing table in the remote hosts are OK. "tcpdump -n -i [device name]"
cannot capture any packages from remote. no mater br0 nor tap0.

Best Regards
Tang Jianwei

On Tue, Sep 27, 2011 at 2:44 PM, Минтаиров Михаил wrote:

>
>
> 27.09.2011, 09:52, "唐建伟" :
> > Hi all,
> >
> > I just intalled openvpn + bridge in CentOS 6, but i get strange problems:
> >
> > the remote PCs cannot get the local PCs'  MACs and also, the local PCs
> > cannot get the remote PCs' MACs
> >
> > but when i run "brctl showmacs br0"  it will list all the MACs and also "
> > brctl show" will show that all the correct adapters are in br0
> >
> > SELinux disabled
> >
> > any ideas?
> >
>
> First of all you should check routing table of remote hosts. If  everything
> is correct, try to monitor br0, and other devises(ethX) by "tcpdump -n -i
> [device name]".
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Tang Jianwei
System Administrator
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos