[CentOS] Please shed a light: when sssd will return from offline to online?

[Gelen James]

Hi all,

 I'm new to sssd configs and debugging. Recently we have encountered some 
problems with sssd. Basically 6 out of 50 servers has 'getent passwd' lost all 
userIDs from LDAP backend, while others are OK. 

My sssd is at version 1.8.0-32. the related error messages are attached below. 
The sssd_nss seems got killed by temporarily network connection problems to 
backend openLDAP servers. Wonder why? and can we change the backend retry check 
interval? (see the timestamps for log entries in sssd_nss.log).

[root@testbox sssd]# cat sssd_nss.log 
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector

[root@testbox sssd]# cat sssd_pam.log
(Sat Mar  2 02:30:09 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could 
not reconnect to ldap provider.
(Sat Mar  2 02:30:39 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could 
not reconnect to ldap provider.

[root@testbox sssd]# cat sssd_ldap.log
(Sat Mar  2 02:30:53 2013) [sssd[be[ldap]]] [id_callback] (0x0010): The Monitor 
returned an error [org.freedesktop.DBus.Error.NoReply]

[root@testbox sssd]# cat sssd.log
(Sat Mar  2 02:30:41 2013) [sssd] [mt_svc_exit_handler] (0x0010): Process 
[nss], definitely stopped!
[root@testbox sssd]# 

Please shed a light. Thanks a lot.

--Gelen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] what does the strange sssd log mesages mean?

[Gelen James]

Hi all,

I have a few centos 6 boxes running sssd, they are talking to OpenLDAP server 
still runs on centos 5. Today I enabled sssd debugging and found the following 
lines of messages in logs:

...
(Mon Mar  4 23:11:13 2013) [sssd[be[ldap]]] [get_naming_context] (0x0200): 
Using value from [namingContexts] as naming context.
(Mon Mar  4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] 
(0x0200): No known USN scheme is supported by this server!
(Mon Mar  4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] 
(0x0200): Will use modification timestamp as usn!
...

what does the above messages mean: why it uses modification timestamp as usn?  
does that have some harmful effects, if time drifts /time zone difference 
exists in a network? 

Please shed a light. Thanks. 

--Gelen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] acrobat reader for x86_64?

[Sorin Srbu]

> -Original Message-
> From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
> Behalf Of m.r...@5-cent.us
> Sent: Monday, March 04, 2013 4:29 PM
> To: CentOS mailing list
> Subject: Re: [CentOS] acrobat reader for x86_64?
>
> Adobe *does* have a 64-bit repo. Install it as follows:
>
> rpm -ivh
> http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm

Was just about to mention that. :-)

Adobe Reader is also rather slow and sluggish compared to some of the other 
pdf-readers available. At least in my experience.

-- 
/Sorin
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Software RAID complete drives or individual partitions

[Chris Weisiger]

I have been reading about software raid. I configured my first software raid 
system about a month ago.

I have 4 500 Gig drives configured in RAID 5 configuration with a total of 
1.5TB.

Currently I configured the complete individual drivers as software raid, then 
created a /dev/md0 with the drives

I then created a /file_storage partition on /dev/md0.

I created my /boot / and swap partitions on a non raid drive in my system.

Is the the proper way to configure software raid?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[Gordon Messmer]

On 03/04/2013 05:02 PM, Kai Schaetzl wrote:
> The tcpdump shows a lot of arp requests
> who-has  tell 
> As I understand these are requests for MAC addresses? And tell is the asking
> IP number?

The arp request will have both the source IP address and the Ethernet 
address of the requesting host.  tcpdump will only print the IP unless 
you use the -e flag.

If the layout of your network is such a closely guarded secret that you 
can't share the information that we need to help, you're mostly on your 
own here.

At this point, the problem could be almost anything.  A bad switch port, 
or a bad switch, or a bad cable seem very likely.  Try a new cable to a 
new switch port and reboot the switch if the problem continues.  Try a 
full power down (as in, remove the power cable) for the affected system 
and with the switch.  It sounds like your system is receiving packets 
but unable to send them to other hosts.

 From any other host on the network, you should be able to:
   tcpdump -nn -e ether host 
where  is the Ethernet address of the system with no connectivity. 
  If you try to ping any address at all, the other system should see it 
broadcasting ARP requests for the local destination or the default 
gateway.  If you don't see ARP requests on the other host, then you know 
that the affected system isn't able to sent out traffic.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CUPS halts when no Internet

[Jay Leafey]

On 03/04/2013 07:52 PM, Juan De Mola wrote:

The logs only show LPD backend failed.

I have tested restarting networking, re enabling printers, restartig the
service. The only way to print is sending release commands from the CUPS
web interface.

The telnet login screen also become slow when the Internet goes down.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



Hmmm... this sounds like common issues that crop up when you are having 
DNS resolution issues.  Are the name servers for your network on the 
"other end" of the ADSL connection?  If so, you might be able to resolve 
some of the issues by editing the hosts file to make sure the local 
systems are resolving even when the name servers are unavailable or 
running a local caching nameserver.


Just a thought!
--
Jay Leafey - jay.lea...@mindless.com
Memphis, TN

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] acrobat reader for x86_64?

[Joseph L. Casale]

>Adobe *does* have a 64-bit repo.


As far as I know, that's for Flash. Reader only exists in x86 arch...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CUPS halts when no Internet

[Juan De Mola]

El 04/03/2013 09:41 p.m., SilverTip257 escribió:
> On Sat, Mar 2, 2013 at 11:24 AM, Juan De Mola  wrote:
>
>> Hi.
>>
>> I have CentOS 6 on a HP ProLiant ML110 G7. We have a cobol invoicing
>> system that prints to LPD printers on Windows hosts via CUPS.
>>
>> All works great until the ADSL service goes down. The printers stop
>> working and the service restart gives a connection error.
>>
>> What will be happening here and how I can solve it? Our previous
>> server was on CentOS 5 and worked OK.
>>
> Check CUPS logs.
>
> If you were to locally log onto the box, down, then up the interface does
> it behave the same?
>
>
>> Thanks.
>>
>> --
>> Juan Pablo De Mola Rodríguez
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
The logs only show LPD backend failed.

I have tested restarting networking, re enabling printers, restartig the 
service. The only way to print is sending release commands from the CUPS 
web interface.

The telnet login screen also become slow when the Internet goes down.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CUPS halts when no Internet

[SilverTip257]

On Sat, Mar 2, 2013 at 11:24 AM, Juan De Mola  wrote:

> Hi.
>
> I have CentOS 6 on a HP ProLiant ML110 G7. We have a cobol invoicing
> system that prints to LPD printers on Windows hosts via CUPS.
>
> All works great until the ADSL service goes down. The printers stop
> working and the service restart gives a connection error.
>
> What will be happening here and how I can solve it? Our previous
> server was on CentOS 5 and worked OK.
>

Check CUPS logs.

If you were to locally log onto the box, down, then up the interface does
it behave the same?


>
> Thanks.
>
> --
> Juan Pablo De Mola Rodríguez
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
---~~.~~---
Mike
//  SilverTip257  //
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[Robert]

On Tue, 05 Mar 2013 02:02:54 +0100
Kai Schaetzl  wrote:

> Gordon Messmer wrote on Mon, 04 Mar 2013 15:29:58 -0800:
> 
> This is all fine, it's been this way for years. It looks as it always has. No 
> errors, collisions, whatever anywhere. TX and RX are about the same.
> Just to prove that config is fine I removed the bridge and brought up a 
> normal eth0. It's got the same problem. I've never seen such a problem 
> before.

Things I would look at

1. route to ensure that the routing table is correct.
2. ifcfg- and see it there are any MAC addresses listed if so ensure they 
match the MAC address in ifconfig output.


--  
Regards
Robert

Linux
The adventure of a lifetime.

Linux User #296285
Get Counted
http://linuxcounter.net/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[Kai Schaetzl]

Gordon Messmer wrote on Mon, 04 Mar 2013 15:29:58 -0800:

> Check your bridge details and make sure that the ethernet device is listed:
>  brctl show
> 
> If those look good, send the content of 
> /etc/sysconfig/network-scripts/ifcfg-{br0,eth0} (or whatever eth device 
> is a member of the bridge).

This is all fine, it's been this way for years. It looks as it always has. No 
errors, collisions, whatever anywhere. TX and RX are about the same.
Just to prove that config is fine I removed the bridge and brought up a 
normal eth0. It's got the same problem. I've never seen such a problem 
before.

The tcpdump shows a lot of arp requests
who-has  tell 
As I understand these are requests for MAC addresses? And tell is the asking 
IP number? In that case there is at least *some* outside connectivity. Most 
of the requests are from the local IP and the IP of the VM, but a few are 
from other machines on the network, including the outbound router. The VM 
runs a monitoring system and these are the clients that want to call in.
Also a few UDP requests (port 1900 and NBT), and that's all.
There are also a few responses to the arp requests, but mostly it's requests. 
Makes sense if it doesn't have much in the arp cache. arp -a lists two 
machines with missing MAC data, that's all.

Kai


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] preventing apache from being a mail relay

[Gordon Messmer]

On 03/04/2013 03:04 PM, Les Mikesell wrote:
> I remember having a problem back in the RH (not RHEL) 5 or 6 era where
> I was using ProxyPass or rewriterules with [P} and it somehow enabled
> random proxy requests which I noticed when the logs filled up with
> requests that were intended to run up to run up some other sites ad
> counters.  It is too far back to remember if that was the default from
> the install or was related to what I did to enable the specific proxy
> functions I needed, though.

That would have been in the Apache 1.0 era.  If you enabled 
ProxyRequests and did not limit the Proxy command, you'd have created an 
open proxy.

Poorly written Rewrite rules have been problematic, even fairly recently:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3368

However, none of this affects the default configuration.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[Gordon Messmer]

On 03/04/2013 01:54 PM, James Hogarth wrote:
> If you tcpdump do you see all the packets you'd expect for layer 2
> connectivity (ie ARP requests and responses?)

specifically, use tcpdump on your bridged interface:
tcpdump -nn -i br0

Check your bridge details and make sure that the ethernet device is listed:
brctl show

If those look good, send the content of 
/etc/sysconfig/network-scripts/ifcfg-{br0,eth0} (or whatever eth device 
is a member of the bridge).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[Gordon Messmer]

On 03/04/2013 08:34 AM, m.r...@5-cent.us wrote:
> ,
> and it seems to be a non-standard RAID, with several options, and the
> first uses only two drives.

The storage industry tends to use "RAID 1+0" when they specifically 
refer to the older striped sets of mirrors.  RAID 10, as implemented 
under Linux is also found in some high end RAID controllers.  Among 
other things, it will allow you to have a RAID set with an odd number of 
devices, and ensure that all of the stripes are on two different disks.

The description of Linux RAID10 on the wikipedia "nested raid levels", 
referred to by zGreenfelder, was probably written by someone unfamiliar 
with the topic.  I'm not able substantiate a number of the claims made 
therein.  I wouldn't rely on that information.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] preventing apache from being a mail relay

[Les Mikesell]

On Mon, Mar 4, 2013 at 4:49 PM, Gordon Messmer  wrote:
> On 03/03/2013 02:54 PM, Robert Moskowitz wrote:
>> Once upon a time, it worked this way out of the box.
>
> You can go all the way back to the first release of Fedora or RHEL and
> check the configuration files.  mod_proxy has never been enabled by
> default, and the included example was not an open one:
>
> #
> #ProxyRequests On
> #
> #
> #Order deny,allow
> #Deny from all
> #Allow from .example.com
> #
>
> If you go back as far as Apache 1.0 (late 90s), you'll find a
> configuration file that still does not enable proxy by default, but did
> not include an example of limiting the Proxy command as above.

I remember having a problem back in the RH (not RHEL) 5 or 6 era where
I was using ProxyPass or rewriterules with [P} and it somehow enabled
random proxy requests which I noticed when the logs filled up with
requests that were intended to run up to run up some other sites ad
counters.  It is too far back to remember if that was the default from
the install or was related to what I did to enable the specific proxy
functions I needed, though.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos6 ipsec troubles

[Gordon Messmer]

On 03/04/2013 07:45 AM, Riccardo Veraldi wrote:
> I am not planning to use the awful OpenSwan, I Want to sue the Kame
> implementation which was working fine on CentOS5

No can do.  As Leon pointed out, ipsec-tools was discontinued.  The 
documentation for ipsec-tools was always *awful* and the examples that 
were included in the documentation definitely did not match common 
configurations.  Getting a tunnel up to any other type of OS was a 
nightmare.  Good riddance.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] preventing apache from being a mail relay

[Gordon Messmer]

On 03/03/2013 02:54 PM, Robert Moskowitz wrote:
> Once upon a time, it worked this way out of the box.

You can go all the way back to the first release of Fedora or RHEL and 
check the configuration files.  mod_proxy has never been enabled by 
default, and the included example was not an open one:

#
#ProxyRequests On
#
#
#Order deny,allow
#Deny from all
#Allow from .example.com
#

If you go back as far as Apache 1.0 (late 90s), you'll find a 
configuration file that still does not enable proxy by default, but did 
not include an example of limiting the Proxy command as above.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[James Hogarth]

>
> thanks for the tip, but, unfortunately, this cannot be the case here.
> Networking of the host is also affected, even when Xen is shut off.
> I have no smart switches in this office and I ruled out switches by using
> a direct connection to the laptop.

So it's something unrelated to xen...

Is the host using a static address or dhcp?

If you tcpdump do you see all the packets you'd expect for layer 2
connectivity (ie ARP requests and responses?)

Does ss or ifconfig show any transmit or receive errors? Do packet counts
go up?

Given that ethtool states the link is up I'd statically configure an
address and try to ping the gateway whilst running tcpdump ... Then take
the packet dump (-w filename to save it) and take a look in wire shark ...
You should see 'who has gateway IP' as an ARP request and the response from
the gateway... Along with the ICMP echo-request and echo-reply packets...

>From there you can start diagnosis properly...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[Kai Schaetzl]

thanks for the tip, but, unfortunately, this cannot be the case here.
Networking of the host is also affected, even when Xen is shut off.
I have no smart switches in this office and I ruled out switches by using 
a direct connection to the laptop.

Kai


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] network connectivity lost after reboot/upgrade

[zGreenfelder]

On Mon, Mar 4, 2013 at 1:15 PM, Kai Schaetzl  wrote:
> I upgraded one of my old machines running 5.x to the latest kernel (from
> 308.24.1 to 348.1.1).
> After rebooting network connectivity was gone. I rebooted with the old
> kernel, I also tried the one before it (308.20.1) still no luck. So I
> assume it's got nothing to do with the kernel or even CentOS. But a
> hardware failure seems also unlikely, see below.
>
> ethtool shows the link as up and if I remove the cable as down.
> I attached a laptop via crossover cable, it detects the link, but same
> problem.
> I disabled iptables and set selinux to disabled. No change.
> There's a Xen VM running on that machine and I can ping it from the
> hardware. So, internal networking seems to be ok. I'm using bridged
> networking for Xen connectivity, setup by normal Red Hat means, not via
> Xen. Never had a problem.
> There are no errors in the logs, except for dhcpd telling network is down
> and named is also giving some weird errors. This is my only dhcpd, so I
> would like to have it up ASAP :-(
>
> Is there anything else besides a weird hardware failure that I could
> check? I'm going to get a new card tomorrow and see if that changes the
> situation. This is mobo internal networking based on nforce-MCP61.
>
> Has anyone seen such a hardware failure where the link goes up but no
> packets go over the wire? It seems a bit unlikely that this hardware
> failure (and nothing else) should happen on a reboot after an upgrade.
>


I've seen similarly weird things when running VMs on some smart
switches where (and I'm not a networking guy here, so my terminology
will get fuzzy) something was set to disable ports(port fast, maybe?)
if multiple MACs were seen on the port (on machine other than my
desktop, I can normally get that fixed by having a trunkport and
default VLAN assigned to my port(s)).not sure if that could be
applied to your situation.




-- 
Even the Magic 8 ball has an opinion on email clients: Outlook not so good.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] GUI volume control/mixer in C6??

[Andy]

Fred wrote:
> Just bringing up a Centos-6 (x86_64, FWIW) and I can't find the mixer app...
> 
> on my C5 box(es), double click on the speaker icon in the top panel and I
> get a mixer app appears on the screen.
> 
> My new C6 box doesn't do that. I've installed all the PULSEAUDIO RPMS I can
> find, but still nothing.
> 
> what am I missing here?
> 
> thanks!
> 
> Fred


You could install either gnome-alsamixer or gamix.
Both are available in the Linuxtech repo for Centos 6.

http://pkgrepo.linuxtech.net/el6/release/

These are both traditional ALSA mixers that ignore Pulseaudio and provide you
directly with the hardware audio controls.

If (like myself) you have no use for Pulseaudio then you might consider
uninstalling it, I wrote a HOW-TO about it here:
http://scientificlinuxforum.org/index.php?showtopic=618

Andy

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Google Earth on EL6.x x86_64

[Joe Pruett]

On 03/03/2013 07:35 PM, Fred Smith wrote:
> On Mon, Mar 04, 2013 at 10:56:26AM +0800, Earl Ramirez wrote:
>> On Sun, 2013-03-03 at 21:49 -0500, Fred Smith wrote:
>>> Has anyone gotten 64-bit google earth to run on el6 x86_64?
>>>
>>> It dies almost immediately, complaining for lack of ld-lsb.so.3.
>>> Perusing user forums at google I see a few others with the problem,
>>> but no (working) solutions.
>>>
>>> Thanks in advance!
>>>
>> Fred,
>>
>> You will need to install the following 32 bit packages
>>
>> 1. redhat-lsb.i686
>> 2. mesa-libGL.i686
>> 3. mesa-libGLU.i686
>>
>> I get this to work on my laptop a few days ago.
> thanks Earl, I'll give it a whirl.
>
> I did "ldd /opt/google/earth/free/googleearth-bin" and got back a list
> of a dozen or so "not found" items, would you be willing to check on
> your system and see what you get back? (that might be because it has
> not been thru the preceding shellscript that might set up some ENV
> to point to the right places, I suppose.)
>
you will also need to rename /etc/fonts/conf.d/65-fonts-persian.conf to
something that doesn't end in .conf. there is a bug in google earth that
breaks with large xml font config files that are larger than 8k. you
could probably also remove comments and so forth from the file to make
it smaller if you need to have persian fonts :-).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] network connectivity lost after reboot/upgrade

[Kai Schaetzl]

I upgraded one of my old machines running 5.x to the latest kernel (from 
308.24.1 to 348.1.1).
After rebooting network connectivity was gone. I rebooted with the old 
kernel, I also tried the one before it (308.20.1) still no luck. So I 
assume it's got nothing to do with the kernel or even CentOS. But a 
hardware failure seems also unlikely, see below.

ethtool shows the link as up and if I remove the cable as down.
I attached a laptop via crossover cable, it detects the link, but same 
problem.
I disabled iptables and set selinux to disabled. No change.
There's a Xen VM running on that machine and I can ping it from the 
hardware. So, internal networking seems to be ok. I'm using bridged 
networking for Xen connectivity, setup by normal Red Hat means, not via 
Xen. Never had a problem.
There are no errors in the logs, except for dhcpd telling network is down 
and named is also giving some weird errors. This is my only dhcpd, so I 
would like to have it up ASAP :-(

Is there anything else besides a weird hardware failure that I could 
check? I'm going to get a new card tomorrow and see if that changes the 
situation. This is mobo internal networking based on nforce-MCP61.

Has anyone seen such a hardware failure where the link goes up but no 
packets go over the wire? It seems a bit unlikely that this hardware 
failure (and nothing else) should happen on a reboot after an upgrade.

Thanks.



Kai


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos6 ipsec troubles

[Patrick Lists]

On 03/04/2013 04:45 PM, Riccardo Veraldi wrote:
[snip]
> I am not planning to use the awful OpenSwan, I Want to sue the Kame
> implementation which was working fine on CentOS5

I don't have experience with the Kame implementation. Maybe have a look 
at Libreswan which was forked from Openswan 2.6.38. It has a ton of 
bugfixes and patches over Openswan and there is an EL6 repo which should 
work on CentOS6 too. More info:

http://libreswan.org
https://download.libreswan.org/
https://github.com/libreswan
https://lists.libreswan.org/mailman/listinfo
https://twitter.com/libreswan
#swan IRC channel on FreeNode

AFAIK one the of the main developers and driving forces behind Libreswan 
is employed by Red Hat so it would not surprise me if Libreswan were to 
replace Openswan in EL7.

Regards,
Patrick
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Leon Fauster]

Am 04.03.2013 um 17:13 schrieb Craig White :
> yeah - that probably works too.
> 
> and sorry for the typo… seems that Apple Mail helpfully autocorrects spelling 
> which changed postmap to
> postman so quickly I never noticed. I have literally begged my boss to let me 
> swap out my Macintosh for
> a Linux box to no avail.

you can disable that autocorrection with 

# Disable auto-correct
$ defaults write NSGlobalDomain NSAutomaticSpellingCorrectionEnabled -bool false

and relogin 

:-)

--
LF










___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos6 ipsec troubles

[Leon Fauster]

Am 04.03.2013 um 17:41 schrieb Steve Clark :
> On 03/04/2013 10:45 AM, Riccardo Veraldi wrote:
>> Hello,
>> it looks like the usual way to do ipsec on centos5 won't work anymore on
>> centos6
>> 
>> I installed ipsec-tools but an interface type IPsec is not recognized by
>> the kernel
>> 
>> ifup ipsec0
>> Device does not seem to be present, delaying initialization.
>> 
>> 
>> I am not planning to use the awful OpenSwan, I Want to sue the Kame
>> implementation which was working fine on CentOS5
>> 
>> any hints ?
>> 
>> thank you
>> 
>> Rick
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>> 
> Hmm...
> 
> I have been using ipsec-tools on linux for a long time and was never had it 
> create and ipsec0 device.
> 
> Only when I was using FreeSwan years ago, did I see and ipsec device.



this is specific to rhel5 - they have /etc/sysconfig/network-scripts/ifup-ipsec 
for that. 

in rhel6 this possibility was replaced 

https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Migration_Planning_Guide/sect-Migration_Guide-Package_Changes-Other_Package_Changes.html

--
LF



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Lockups with kernel-2.6.32-358.0.1.el6.i686

[SilverTip257]

On Sun, Mar 3, 2013 at 11:02 PM, Ian Pilcher  wrote:

> I updated my home server with the 6.4 CR packages, and I've experienced
> 3 or 4 hard lockups since.  The server is a fanless VIA C7
> "CentaurHauls" system with a 1GHz CPU underclocked to 800MHz and 1GB of
> RAM.  It has a dual-port Intel 82546GB NIC in its single PCI slot.  (It
> also has an on-board Realtek RTL-8110SC/8169SC NIC that is plugged in,
> but doesn't currently have an IP address configured.)
>
> This server provides a number of services -- DNS, DHCP, routing between
> VLANs, DLNA media server, CUPS, etc.  Most importantly, it runs Asterisk
> and manages all of the phones in the house.
>
> There's absolutely nothing in the logs related to the lockup.  The
> system simply becomes totally unresponsive, to the point that the
> console cursor stops blinking.  A hard reset is required to bring it
> back.
>
>
I'm running 2.6.32-358.0.1 on a KVM virtual machine and not seeing any
issues.
I've not yet ran that kernel on physical hardware yet though.


> kernel-2.6.32-279.22.1.el6.i686 seems to be completely stable.
>
> I don't really expect to be able to figure this out, but I thought I'd
> post here to see if anyone else is experiencing anything like this with
> this kernel.
>
> Thanks!
>
> --
> 
> Ian Pilcher arequip...@gmail.com
> Sometimes there's nothing left to do but crash and burn...or die trying.
> 
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

-- 
---~~.~~---
Mike
//  SilverTip257  //
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Les Mikesell]

On Mon, Mar 4, 2013 at 9:29 AM, Craig White  wrote:
> You should set e-mail address for root in /etc/aliases and then issue command 
> 'postman /etc/aliases' to alert postfix to the changes.
>
> using a '.forward' has been out of vogue for many years

Well, since running sendmail as root and allowing open read access to
home directories for easy cooperation among the machine users became
unusual, anyway.

-- 
  Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT? : Big Yellow Cursor

[SilverTip257]

On Mon, Mar 4, 2013 at 12:11 PM, Beartooth  wrote:

> On Sun, 03 Mar 2013 17:32:25 -0500, Robert wrote:
>
> > On Sun, 3 Mar 2013 20:21:34 + (UTC)
> > Beartooth  wrote:
> >
> >>  Last time I had a machine running CentOS (6.2 iirc) I had managed
> >> to get a big yellow arrow to show the mouse cursor. It was wonderful.
> >>
> >>  Now I have machines running Fedora (17 & 18) and Puppy (5.0) --
> >> and I need cursor symbols that my antiquated eyeballs can spot even
> >> through trifocals. Can anyone tell me a way to get my arrow back??
>

http://gnome-look.org/content/show.php/Green+Light+Color+Pack?content=115551
http://gnome-look.org/content/show.php/BigaThemes?content=155650


>  >
> > If you are using KDE 4.x then goto System Settings -> Workspace
> > Decorations -> Cursor Themes
> >
> > There you can set the size of the cursor.
>
> Unfortunately, I'm using Gnome (not sure which) on one or two,
> and xfce on the rest.
>

If those above do not suit, search on http://gnome-look.org/ and see if you
find a cursor that is better.


>
> --
> Beartooth Sciurivore, Curmudgeon On Line
> Viruses, trojans, and spyware, Oh My!
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
---~~.~~---
Mike
//  SilverTip257  //
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT? : Big Yellow Cursor

[Beartooth]

On Sun, 03 Mar 2013 17:32:25 -0500, Robert wrote:

> On Sun, 3 Mar 2013 20:21:34 + (UTC)
> Beartooth  wrote:
> 
>>  Last time I had a machine running CentOS (6.2 iirc) I had managed
>> to get a big yellow arrow to show the mouse cursor. It was wonderful.
>> 
>>  Now I have machines running Fedora (17 & 18) and Puppy (5.0) --
>> and I need cursor symbols that my antiquated eyeballs can spot even
>> through trifocals. Can anyone tell me a way to get my arrow back??
> 
> If you are using KDE 4.x then goto System Settings -> Workspace
> Decorations -> Cursor Themes
> 
> There you can set the size of the cursor.

Unfortunately, I'm using Gnome (not sure which) on one or two, 
and xfce on the rest.

-- 
Beartooth Sciurivore, Curmudgeon On Line
Viruses, trojans, and spyware, Oh My!

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward (gone OT)

[Les Mikesell]

On Mon, Mar 4, 2013 at 10:32 AM,   wrote:
>
>> On 03/04/2013 11:13 AM, Craig White wrote:
>>> yeah - that probably works too.
>>>
>>> and sorry for the typo… seems that Apple Mail helpfully autocorrects
>>> spelling which changed postmap to postman so quickly I never noticed. I
>>> have literally begged my boss to let me swap out my Macintosh for a
>>> Linux box to no avail.
>>
>> I have been anti-apple since the Lisa. I maintain my curmudgeon position
>> and do not have or use any apple equipment. Other than an apple peeler
>> for making apple slices and applesause.
>>
> Yeah. I don't like would-be monopolies that want to lock you in forever

But starting with OSX, they inherited most of the unix-like goodness
from *bsd, so you aren't really stuck with their toy single-user
interface that they still stick on top.  Ssh in and fire up vi if you
like.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[Markus Falb]

On 04.Mär.2013, at 17:39, m.r...@5-cent.us wrote:

> zGreenfelder wrote:
>> On Mon, Mar 4, 2013 at 11:20 AM, John Plemons  wrote:
>>> Raid 10 is a mirrored stripped set of at least 4 driver. You get the
>>> best of both worlds, data speed and data back up..
>> 
>> yeah, that's the industry standard.   he's asking you to go find and read
>> http://en.wikipedia.org/wiki/Raid10#Near_versus_far.2C_advantages_for_bootable_RAID
>> wherein they mention that linux md devices can do what they call a
>> raid 10 on 2 drives. and then details some of the reasons you might
>> want to do such a thing.
>> 
>> I can't see any reason to go with the sorta raid 10 on only 2 drives.
>> from that article, I'd the only sane choice for raid 10 on 2 drives
>> is the 'far' config on SSD drives.   but that's just my opinion.   I
>> don't think I'd ever pick raid10 on 2.
>> 
>> from the entry:
>> "...copies of a block of data are "near" each other or at the same
>> address on different devices or predictably offset: Each disk access
>> is split into full-speed disk accesses to different drives, yielding
>> read and write performance like RAID 0 but without necessarily
>> guaranteeing that every stripe is on both drives"
>> 
>> which then some (and by murphy's rule will be the most critcal) will
>> go from being raid 10 to raid0.  and likely 0 on the drive that fails.
> 
> AHHH! I didn't read closely enough, and missed that lack of guarantee.
> Thanks, *that's* the kind of discussion I was looking for.

Note that you can do 2 copies to 3 disks, or 3 copies to 4 disks, …
Of course not every stripe is on *every* disk in that case.
If you have 2 copies, one disk may fail fail. If you have 2 copies on 2 disks, 
1 disk may fail. That's how I read it.

-- 
Kind Regards, Markus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[Markus Falb]

On 04.Mär.2013, at 17:20, John Plemons wrote:

> Raid 10 is a mirrored stripped set of at least 4 driver. 

You can of course build a layered raid 0 above some raid1 arrays, but linux md 
raid10 is another beast. Actually you can build a raid10 with only 2 disks. The 
theoretical benefit is that is is striped, so even one single process benefits 
from it. If you use raid 1 a single process does use only 1 disk as far as I 
know.

http://en.wikipedia.org/wiki/RAID#Non-standard_levels

One disadvantage is that you can not grow or expand it easily, which means it 
is inflexible, which is why did not want to use it.
-- 
Kind Regards, Markus
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward (gone OT)

[Robert Moskowitz]

On 03/04/2013 11:32 AM, m.r...@5-cent.us wrote:
> Robert Moskowitz wrote:
>> On 03/04/2013 11:13 AM, Craig White wrote:
>>> yeah - that probably works too.
>>>
>>> and sorry for the typo… seems that Apple Mail helpfully autocorrects
>>> spelling which changed postmap to postman so quickly I never noticed. I
>>> have literally begged my boss to let me swap out my Macintosh for a
>>> Linux box to no avail.
>> I have been anti-apple since the Lisa. I maintain my curmudgeon position
>> and do not have or use any apple equipment. Other than an apple peeler
>> for making apple slices and applesause.
>>
> Yeah. I don't like would-be monopolies that want to lock you in forever
>
> But don't you use one of those apple slicers that slices and cores at the
> same time?

Yep! Only apple machine worth its price!


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[m . roth]

zGreenfelder wrote:
> On Mon, Mar 4, 2013 at 11:20 AM, John Plemons  wrote:
>> Raid 10 is a mirrored stripped set of at least 4 driver. You get the
>> best of both worlds, data speed and data back up..
>
> yeah, that's the industry standard.   he's asking you to go find and read
> http://en.wikipedia.org/wiki/Raid10#Near_versus_far.2C_advantages_for_bootable_RAID
> wherein they mention that linux md devices can do what they call a
> raid 10 on 2 drives. and then details some of the reasons you might
> want to do such a thing.
>
> I can't see any reason to go with the sorta raid 10 on only 2 drives.
>  from that article, I'd the only sane choice for raid 10 on 2 drives
> is the 'far' config on SSD drives.   but that's just my opinion.   I
> don't think I'd ever pick raid10 on 2.
>
> from the entry:
> "...copies of a block of data are "near" each other or at the same
> address on different devices or predictably offset: Each disk access
> is split into full-speed disk accesses to different drives, yielding
> read and write performance like RAID 0 but without necessarily
> guaranteeing that every stripe is on both drives"
>
> which then some (and by murphy's rule will be the most critcal) will
> go from being raid 10 to raid0.  and likely 0 on the drive that fails.

AHHH! I didn't read closely enough, and missed that lack of guarantee.
Thanks, *that's* the kind of discussion I was looking for.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos6 ipsec troubles

[Steve Clark]

On 03/04/2013 10:45 AM, Riccardo Veraldi wrote:
> Hello,
> it looks like the usual way to do ipsec on centos5 won't work anymore on
> centos6
>
> I installed ipsec-tools but an interface type IPsec is not recognized by
> the kernel
>
> ifup ipsec0
> Device does not seem to be present, delaying initialization.
>
>
> I am not planning to use the awful OpenSwan, I Want to sue the Kame
> implementation which was working fine on CentOS5
>
> any hints ?
>
> thank you
>
> Rick
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
Hmm...

I have been using ipsec-tools on linux for a long time and was never had it 
create and ipsec0 device.

Only when I was using FreeSwan years ago, did I see and ipsec device.

-- 
Stephen Clark
*NetWolves*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.cl...@netwolves.com
http://www.netwolves.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[Karanbir Singh]

On 03/04/2013 04:20 PM, John Plemons wrote:
> Raid 10 is a mirrored stripped set of at least 4 driver. You get the 
> best of both worlds, data speed and data back up..

right, thats the industry standard RAID-10

this case is around the non-standard mdraid10, which can do a bunch of
interesting things on 2 ( but really 3 disks ) or more.


-- 
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[zGreenfelder]

On Mon, Mar 4, 2013 at 11:20 AM, John Plemons  wrote:
> Raid 10 is a mirrored stripped set of at least 4 driver. You get the
> best of both worlds, data speed and data back up..
>
> john
>
>


yeah, that's the industry standard.   he's asking you to go find and read
http://en.wikipedia.org/wiki/Raid10#Near_versus_far.2C_advantages_for_bootable_RAID
wherein they mention that linux md devices can do what they call a
raid 10 on 2 drives.
and then details some of the reasons you might want to do such a thing.

I can't see any reason to go with the sorta raid 10 on only 2 drives.
 from that article, I'd the only sane choice for raid 10 on 2 drives
is the 'far' config on SSD drives.   but that's just my opinion.   I
don't think I'd ever pick raid10 on 2.

from the entry:
"...copies of a block of data are "near" each other or at the same
address on different devices or predictably offset: Each disk access
is split into full-speed disk accesses to different drives, yielding
read and write performance like RAID 0 but without necessarily
guaranteeing that every stripe is on both drives"

which then some (and by murphy's rule will be the most critcal) will
go from being raid 10 to raid0.  and likely 0 on the drive that fails.


-- 
Even the Magic 8 ball has an opinion on email clients: Outlook not so good.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[m . roth]

John Plemons wrote:
> On 3/4/2013 11:12 AM, m.r...@5-cent.us wrote:
>> I'm going to rebuild my system at home soon, and was planning to mirror
>> two drives. However, I was just looking up something about RAID, and on
>> wikipedia found some information about the Linux MD driver, and "near"
>> and
>> "far" RAID10.
>>
>> Anyone have some opinions about them?
>>
>>mark "or should that be how many opinions do folks have
>>about them?"
>>
> Raid 10 is a mirrored stripped set of at least 4 driver. You get the
> best of both worlds, data speed and data back up..

I'm well aware of that. However, I'm only buying two drives, and was going
to just mirror them, but if I can get more speed This is what I'm
reading
,
and it seems to be a non-standard RAID, with several options, and the
first uses only two drives.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward (gone OT)

[m . roth]

Robert Moskowitz wrote:
>
> On 03/04/2013 11:13 AM, Craig White wrote:
>> yeah - that probably works too.
>>
>> and sorry for the typo… seems that Apple Mail helpfully autocorrects
>> spelling which changed postmap to postman so quickly I never noticed. I
>> have literally begged my boss to let me swap out my Macintosh for a
>> Linux box to no avail.
>
> I have been anti-apple since the Lisa. I maintain my curmudgeon position
> and do not have or use any apple equipment. Other than an apple peeler
> for making apple slices and applesause.
>
Yeah. I don't like would-be monopolies that want to lock you in forever

But don't you use one of those apple slicers that slices and cores at the
same time?

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RAID MD10

[John Plemons]

Raid 10 is a mirrored stripped set of at least 4 driver. You get the 
best of both worlds, data speed and data back up..

john



On 3/4/2013 11:12 AM, m.r...@5-cent.us wrote:
> I'm going to rebuild my system at home soon, and was planning to mirror
> two drives. However, I was just looking up something about RAID, and on
> wikipedia found some information about the Linux MD driver, and "near" and
> "far" RAID10.
>
> Anyone have some opinions about them?
>
>mark "or should that be how many opinions do folks have
>about them?"
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
>

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Robert Moskowitz]

On 03/04/2013 11:13 AM, Craig White wrote:
> yeah - that probably works too.
>
> and sorry for the typo… seems that Apple Mail helpfully autocorrects spelling 
> which changed postmap to postman so quickly I never noticed. I have literally 
> begged my boss to let me swap out my Macintosh for a Linux box to no avail.

I have been anti-apple since the Lisa. I maintain my curmudgeon position 
and do not have or use any apple equipment. Other than an apple peeler 
for making apple slices and applesause.

>
> Craig
>
> On Mar 4, 2013, at 9:09 AM, zGreenfelder wrote:
>
>> On Mon, Mar 4, 2013 at 11:03 AM, Robert Moskowitz  
>> wrote:
>>> On 03/04/2013 10:29 AM, Craig White wrote:
 You should set e-mail address for root in /etc/aliases and then issue 
 command 'postman /etc/aliases' to alert postfix to the changes.
>>> # postman /etc/aliases
>>> -bash: postman: command not found
>>>
>> you should also jus tbe able to run 'newaliases' (/usr/bin/newaliases)
>> to get the updates set.
>>
>> DESCRIPTION
>>The Postfix sendmail(1) command implements the Postfix to Sendmail 
>> com-
>>patibility interface.  For the  sake  of  compatibility  with  
>> existing
>>applications,  some  Sendmail  command-line  options are recognized 
>> but
>>silently ignored.
>>
>>
>> -- 
>> Even the Magic 8 ball has an opinion on email clients: Outlook not so good.
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Craig White]

yeah - that probably works too.

and sorry for the typo… seems that Apple Mail helpfully autocorrects spelling 
which changed postmap to postman so quickly I never noticed. I have literally 
begged my boss to let me swap out my Macintosh for a Linux box to no avail.

Craig

On Mar 4, 2013, at 9:09 AM, zGreenfelder wrote:

> On Mon, Mar 4, 2013 at 11:03 AM, Robert Moskowitz  
> wrote:
>> 
>> On 03/04/2013 10:29 AM, Craig White wrote:
>>> You should set e-mail address for root in /etc/aliases and then issue 
>>> command 'postman /etc/aliases' to alert postfix to the changes.
>> 
>> # postman /etc/aliases
>> -bash: postman: command not found
>> 
> 
> you should also jus tbe able to run 'newaliases' (/usr/bin/newaliases)
> to get the updates set.
> 
> DESCRIPTION
>   The Postfix sendmail(1) command implements the Postfix to Sendmail com-
>   patibility interface.  For the  sake  of  compatibility  with  existing
>   applications,  some  Sendmail  command-line  options are recognized but
>   silently ignored.
> 
> 
> -- 
> Even the Magic 8 ball has an opinion on email clients: Outlook not so good.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

-- 
Craig White ~ craig.wh...@ttiltd.com
1.800.869.6908 ~~ www.ttiassessments.com 

Using Assessments to Create Agile Organizations Webinar
https://www4.gotomeeting.com/register/480934271

March 21, 2013, 12pm EDT 
Transform your company into a thriving, agile organization that is 
able to respond immediately to changing customer demands.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] RAID MD10

[m . roth]

I'm going to rebuild my system at home soon, and was planning to mirror
two drives. However, I was just looking up something about RAID, and on
wikipedia found some information about the Linux MD driver, and "near" and
"far" RAID10.

Anyone have some opinions about them?

  mark "or should that be how many opinions do folks have
  about them?"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Solved - Re: problems with .forward

[Robert Moskowitz]

On 03/04/2013 11:03 AM, Robert Moskowitz wrote:
> On 03/04/2013 10:29 AM, Craig White wrote:
>> You should set e-mail address for root in /etc/aliases and then issue 
>> command 'postman /etc/aliases' to alert postfix to the changes.
> # postman /etc/aliases
> -bash: postman: command not found

Use newaliases instead.  Well documented all over the place for managing 
aliases with postfix.  My little bit of searching for 'postman' seems to 
point this to being a debian command?  Well it doesn't matter, ans 
newaliases works.

thanks again.
>
> So I will read the postfix docs for how else to do this...
>
>> using a '.forward' has been out of vogue for many years
>>
>> Craig
>>
>> On Mar 4, 2013, at 8:27 AM, Robert Moskowitz wrote:
>>
>>> My old Centos 5.5 servers had a /root/.forward to send things like
>>> logwatch to this email account.  It did not take any special
>>> configuration in sendmail for this to work.
>>>
>>> Now Centos 6.3 is using postfix (as we well know, and generally I am
>>> happy for this) and I have set up the /root/.forward as always, but it
>>> seems like postfix is ignoring it.  I have restarted postfix with no
>>> difference in behaviour.
>>>
>>> /root/.forward contains the single line without ending in  (I have
>>> tested with  at the end as well:
>>>
>>> r...@htt-consult.com
>>>
>>> 'host htt-consult.com' responses with:
>>>
>>> htt-consult.com mail is handled by 10 klovia.htt-consult.com.
>>>
>>> For the testing from my regular account I run:
>>>
>>> mail -s Test root  < /dev/null
>>>
>>> /var/log/maillog shows:
>>>
>>> Mar  4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=
>>> Mar  4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE:
>>> message-id=<20130304151604.91173140...@onlo.htt-consult.com>
>>> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE:
>>> from=, size=471, nrcpt=1 (queue active)
>>> Mar  4 10:16:04 onlo postfix/local[30528]: 911731400CE:
>>> to=, orig_to=, relay=local, delay=0.15,
>>> delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
>>> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed
>>> You have mail in /var/spool/mail/root
>>>
>>> Does anyone else use the .forward file?  This should work.  Of course I
>>> can modify the alias file for postfix, but .forward was always 'easier'
>>> to configure.
>>>
>>> If I have to plow through the postfix docs for this, I will, but I would
>>> think this should work.
>>>
>>> ___
>>> CentOS mailing list
>>> CentOS@centos.org
>>> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[zGreenfelder]

On Mon, Mar 4, 2013 at 11:03 AM, Robert Moskowitz  wrote:
>
> On 03/04/2013 10:29 AM, Craig White wrote:
>> You should set e-mail address for root in /etc/aliases and then issue 
>> command 'postman /etc/aliases' to alert postfix to the changes.
>
> # postman /etc/aliases
> -bash: postman: command not found
>

you should also jus tbe able to run 'newaliases' (/usr/bin/newaliases)
to get the updates set.

DESCRIPTION
   The Postfix sendmail(1) command implements the Postfix to Sendmail com-
   patibility interface.  For the  sake  of  compatibility  with  existing
   applications,  some  Sendmail  command-line  options are recognized but
   silently ignored.


-- 
Even the Magic 8 ball has an opinion on email clients: Outlook not so good.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Robert Moskowitz]

On 03/04/2013 10:29 AM, Craig White wrote:
> You should set e-mail address for root in /etc/aliases and then issue command 
> 'postman /etc/aliases' to alert postfix to the changes.

# postman /etc/aliases
-bash: postman: command not found

So I will read the postfix docs for how else to do this...

>
> using a '.forward' has been out of vogue for many years
>
> Craig
>
> On Mar 4, 2013, at 8:27 AM, Robert Moskowitz wrote:
>
>> My old Centos 5.5 servers had a /root/.forward to send things like
>> logwatch to this email account.  It did not take any special
>> configuration in sendmail for this to work.
>>
>> Now Centos 6.3 is using postfix (as we well know, and generally I am
>> happy for this) and I have set up the /root/.forward as always, but it
>> seems like postfix is ignoring it.  I have restarted postfix with no
>> difference in behaviour.
>>
>> /root/.forward contains the single line without ending in  (I have
>> tested with  at the end as well:
>>
>> r...@htt-consult.com
>>
>> 'host htt-consult.com' responses with:
>>
>> htt-consult.com mail is handled by 10 klovia.htt-consult.com.
>>
>> For the testing from my regular account I run:
>>
>> mail -s Test root  < /dev/null
>>
>> /var/log/maillog shows:
>>
>> Mar  4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=
>> Mar  4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE:
>> message-id=<20130304151604.91173140...@onlo.htt-consult.com>
>> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE:
>> from=, size=471, nrcpt=1 (queue active)
>> Mar  4 10:16:04 onlo postfix/local[30528]: 911731400CE:
>> to=, orig_to=, relay=local, delay=0.15,
>> delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
>> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed
>> You have mail in /var/spool/mail/root
>>
>> Does anyone else use the .forward file?  This should work.  Of course I
>> can modify the alias file for postfix, but .forward was always 'easier'
>> to configure.
>>
>> If I have to plow through the postfix docs for this, I will, but I would
>> think this should work.
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Robert Moskowitz]

On 03/04/2013 10:29 AM, Craig White wrote:
> You should set e-mail address for root in /etc/aliases and then issue command 
> 'postman /etc/aliases' to alert postfix to the changes.
>
> using a '.forward' has been out of vogue for many years

Shows how long I have been coasting along.  I will take the aliases 
path, then.  thanks.

>
> Craig
>
> On Mar 4, 2013, at 8:27 AM, Robert Moskowitz wrote:
>
>> My old Centos 5.5 servers had a /root/.forward to send things like
>> logwatch to this email account.  It did not take any special
>> configuration in sendmail for this to work.
>>
>> Now Centos 6.3 is using postfix (as we well know, and generally I am
>> happy for this) and I have set up the /root/.forward as always, but it
>> seems like postfix is ignoring it.  I have restarted postfix with no
>> difference in behaviour.
>>
>> /root/.forward contains the single line without ending in  (I have
>> tested with  at the end as well:
>>
>> r...@htt-consult.com
>>
>> 'host htt-consult.com' responses with:
>>
>> htt-consult.com mail is handled by 10 klovia.htt-consult.com.
>>
>> For the testing from my regular account I run:
>>
>> mail -s Test root  < /dev/null
>>
>> /var/log/maillog shows:
>>
>> Mar  4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=
>> Mar  4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE:
>> message-id=<20130304151604.91173140...@onlo.htt-consult.com>
>> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE:
>> from=, size=471, nrcpt=1 (queue active)
>> Mar  4 10:16:04 onlo postfix/local[30528]: 911731400CE:
>> to=, orig_to=, relay=local, delay=0.15,
>> delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
>> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed
>> You have mail in /var/spool/mail/root
>>
>> Does anyone else use the .forward file?  This should work.  Of course I
>> can modify the alias file for postfix, but .forward was always 'easier'
>> to configure.
>>
>> If I have to plow through the postfix docs for this, I will, but I would
>> think this should work.
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Centos6 ipsec troubles

[Riccardo Veraldi]

Hello,
it looks like the usual way to do ipsec on centos5 won't work anymore on 
centos6

I installed ipsec-tools but an interface type IPsec is not recognized by 
the kernel

ifup ipsec0
Device does not seem to be present, delaying initialization.


I am not planning to use the awful OpenSwan, I Want to sue the Kame 
implementation which was working fine on CentOS5

any hints ?

thank you

Rick
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] problems with .forward

[Craig White]

You should set e-mail address for root in /etc/aliases and then issue command 
'postman /etc/aliases' to alert postfix to the changes.

using a '.forward' has been out of vogue for many years

Craig

On Mar 4, 2013, at 8:27 AM, Robert Moskowitz wrote:

> My old Centos 5.5 servers had a /root/.forward to send things like 
> logwatch to this email account.  It did not take any special 
> configuration in sendmail for this to work.
> 
> Now Centos 6.3 is using postfix (as we well know, and generally I am 
> happy for this) and I have set up the /root/.forward as always, but it 
> seems like postfix is ignoring it.  I have restarted postfix with no 
> difference in behaviour.
> 
> /root/.forward contains the single line without ending in  (I have 
> tested with  at the end as well:
> 
> r...@htt-consult.com
> 
> 'host htt-consult.com' responses with:
> 
> htt-consult.com mail is handled by 10 klovia.htt-consult.com.
> 
> For the testing from my regular account I run:
> 
> mail -s Test root  < /dev/null
> 
> /var/log/maillog shows:
> 
> Mar  4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=
> Mar  4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE: 
> message-id=<20130304151604.91173140...@onlo.htt-consult.com>
> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: 
> from=, size=471, nrcpt=1 (queue active)
> Mar  4 10:16:04 onlo postfix/local[30528]: 911731400CE: 
> to=, orig_to=, relay=local, delay=0.15, 
> delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
> Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed
> You have mail in /var/spool/mail/root
> 
> Does anyone else use the .forward file?  This should work.  Of course I 
> can modify the alias file for postfix, but .forward was always 'easier' 
> to configure.
> 
> If I have to plow through the postfix docs for this, I will, but I would 
> think this should work.
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

-- 
Craig White ~ craig.wh...@ttiltd.com
1.800.869.6908 ~~ www.ttiassessments.com 

Using Assessments to Create Agile Organizations Webinar
https://www4.gotomeeting.com/register/480934271

March 21, 2013, 12pm EDT 
Transform your company into a thriving, agile organization that is 
able to respond immediately to changing customer demands.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] acrobat reader for x86_64?

[m . roth]

Fred Smith wrote:
> On Mon, Mar 04, 2013 at 08:45:40AM +0100, Sorin Srbu wrote:
>> > Behalf Of Fred Smith
>> >
>> > Adobe doesn't seem to have acroread for x86_64 linux, or at least I
>> > don't see it anywhere.
>> >
>> > Anybody know otherwise?

>> What would be the advantage running having this software in 64b?
>
> the "advantage" would be the diff between having it and not, as opposed
> to having it in 64-bit versus 32-bit.

Adobe *does* have a 64-bit repo. Install it as follows:

rpm -ivh
http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm

and enjoy.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] problems with .forward

[Robert Moskowitz]

My old Centos 5.5 servers had a /root/.forward to send things like 
logwatch to this email account.  It did not take any special 
configuration in sendmail for this to work.

Now Centos 6.3 is using postfix (as we well know, and generally I am 
happy for this) and I have set up the /root/.forward as always, but it 
seems like postfix is ignoring it.  I have restarted postfix with no 
difference in behaviour.

/root/.forward contains the single line without ending in  (I have 
tested with  at the end as well:

r...@htt-consult.com

'host htt-consult.com' responses with:

htt-consult.com mail is handled by 10 klovia.htt-consult.com.

For the testing from my regular account I run:

mail -s Test root  < /dev/null

/var/log/maillog shows:

Mar  4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=
Mar  4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE: 
message-id=<20130304151604.91173140...@onlo.htt-consult.com>
Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: 
from=, size=471, nrcpt=1 (queue active)
Mar  4 10:16:04 onlo postfix/local[30528]: 911731400CE: 
to=, orig_to=, relay=local, delay=0.15, 
delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
Mar  4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed
You have mail in /var/spool/mail/root

Does anyone else use the .forward file?  This should work.  Of course I 
can modify the alias file for postfix, but .forward was always 'easier' 
to configure.

If I have to plow through the postfix docs for this, I will, but I would 
think this should work.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Not installing avahi in a kickstart install

[Kanwar Ranbir Sandhu]

On 2013-03-03 17:46, Robert Moskowitz wrote:
> Looks a bit too much to take on at this point. But I will put a link 
> in
> my notes for future study. Thanks.

Along with disabling the avahi service in my kickstart files, I also 
add "NOZEROCONF=yes" to /etc/sysconfig/network.  That way the service 
does not start and the 169.254.x.x IP doesn't get added to the 
interface.

It's not hard to do after the fact, but putting simple things like that 
in a kickstart file prevents one from doing all the mundane, mind 
numbing sys admin tasks.  :)

HTH,

Ranbir

-- 
Kanwar Ranbir Sandhu
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] acrobat reader for x86_64?

[Fred Smith]

On Mon, Mar 04, 2013 at 08:45:40AM +0100, Sorin Srbu wrote:
> > -Original Message-
> > From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
> > Behalf Of Fred Smith
> > Sent: Saturday, March 02, 2013 5:03 AM
> > To: centos@centos.org
> > Subject: [CentOS] acrobat reader for x86_64?
> > 
> > Adobe doesn't seem to have acroread for x86_64 linux, or at least I
> > don't
> > see it anywhere.
> > 
> > Anybody know otherwise?
> > 
> > Evince and other tools work pretty well, but I have always liked having
> > the "real thing" around for those occasions when they don't.
> 
> What would be the advantage running having this software in 64b?

the "advantage" would be the diff between having it and not, as opposed
to having it in 64-bit versus 32-bit.

Modern 64-bit installs do not install all the 32-bit runtimes needed
to run 32-bit programs, so having to use a 32-bit program can be painful,
give you'd need to install a bazillion other files just to accommodate
that one proggy.


-- 
---
 .Fred Smith   /  
( /__  ,__.   __   __ /  __   : / 
 //  /   /__) /  /  /__) .+'   Home: fre...@fcshome.stoneham.ma.us 
//  (__ (___ (__(_ (___ / :__ 781-438-5471 
 Jude 1:24,25 -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] preventing apache from being a mail relay

[James B. Byrne]

On Sun, March 3, 2013 18:57, Eddie G. O'Connor Jr. wrote:

> If / when I get the guts to build my own Apache web server...I would
> think that the ONLY way to do it would be to document
> EVERYTHINGsort
> of as a "Just-In-Case" policy?or is it only after you've built
> it?...and when you make CHANGES to your serverTHAT'S when you
> document everything?
>

The workflow I have adopted with respect to system administration is
to use a project management application, such as Trac (originally) or
Redmine/ChileProject (currently), and to open an issue for each
activity that I perform on any of my servers.  Therein I record the
motivation for the activity, the desired and intended result, and log
my time.

I also record each problem that is encountered, solutions as they are
found, and insights as they are revealed. I attach configuration
files, copies of related email messages, and make any notes right on
the issue.  As Redmine allows full-text case-insensitive searches I
can usually find in fairly short order the details about anything I
have done that I can at least dimly recall doing.

I add subsequent maintenance events either directly to the original
issue or create a new issue and link that to the original.

While hardly perfect this practice has saved my behind on several
occasions. In fact I would recommend that one document each package
install from the initial selection of the software and go on from
there.  I have had occasion where the question asked of me was "why
was this package selected instead of that package?" Having the answer
to hand along with the evidence has short-circuited the blame-game on
at least one occasion.


-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Tomcat query from complete newbie

[Timothy Murphy]

Les Mikesell wrote:

>> As I understand it, tomcat can either be run "standalone"
>> or "behind apache".
>> I am running httpd on the server, so either method should be available.
>> It seems that the standalone option is simpler,
>> so I would probably prefer that.

> On the tomcat side there really isn't any difference.  The reason you
> would run behind apache would be to permit running all http
> connections over port 80, while letting apache handle some URL's
> internally and proxying other paths to other programs.If port 8080
> is open and you don't need to restrict access to other tomcat apps you
> might as well go direct.

Thanks very much for the responses.

I was rather frustrated when I wrote
as I had visited several - probably a dozen or more -
tutorial sites after googling for "tomcat jsp",
and I was astonished at the quantity of useless
or just incorrect advice I received -
not saying where files should be located,
what port to use, etc.
Fortunately after many misadventures I found

which explained everything clearly.


-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College Dublin


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos