Re: [CentOS] [Q} how can O.S. predicate a disk going to failure??

2009-08-04 Thread David . Mackintosh
On Tue, Aug 04, 2009 at 01:38:27PM +0200, Mogens Kjaer wrote:
> > 3. do I need replace this disk now?
> 
> That would be a good idea, the disk could fail in
> 5 minutes or in 5 month, you can't tell.

Or, indeed, 5 years.  I have a number of "throwaway" workstations at
one customer site -- throwaway in that if the disk or system fails,
we just rebuild it, and away it goes.  Several have been telling me
about SMART warnings for YEARS.  My experience seems to echo the
Google study from a few years back, where SMART wasn't an accurate
predictor of disk failure -- some drives SMART then fail, some SMART
for years, and some just fail.

So the answer is "it depends".  If getting a replacement is likely
to be tricky (ie more than a two or three hour wait), or if the data
being stored is highly valuable, then AT LEAST get a spare on site
and sit it next to or on the system in question.  If the data is
extremely highly valuable, do the swap now.

But if you don't care about the data, and/or can tollerate some
downtime, don't worry about it.

Backups *are* good, right?  :)

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpIecNhEzKT6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] md0 mounted rw on boot

2009-07-07 Thread David . Mackintosh
Hi folks,

I updates one of my long-running CentOS 4.x systems today, and afterwards it 
wouldn't boot properly.
My issue was that it would start, then announce:

Checking root filesystem
/dev/md0 is mounted.  e2fsck cannot continue.

After much twiddling around, I discovered that if I booted from the
first kernel I had, it would boot properly.

Now this is a hand-rolled RAID, not an anaconda-generated one.  And I
seem to recall generating an initrd myself in order for the boot
process to work.  Does this mean that I have to generate a new initrd
every time I want to boot to a new kernel?

For the record, this kernel failed:

title CentOS (2.6.9-78.0.22.EL)
root (hd0,0)
kernel /boot/vmlinuz-2.6.9-78.0.22.EL ro quiet root=/dev/md0
initrd /boot/initrd-2.6.9-78.0.22.EL.img

...while this one succeeded:

title CentOS-4 i386 (2.6.9-34.EL)
root (hd0,0)
kernel /boot/vmlinuz-2.6.9-34.EL ro root=/dev/md0
initrd /boot/initrd-2.6.9-34.EL.img

And there are several other kernels on the system, but I honestly
don't know which ones have been run successfully.

Does anyone know what I did wrong?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgp17LDY8zjBa.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Send syslog to a remote server

2009-05-24 Thread David . Mackintosh
One thing which I have not seen discussed yet -- the syslog.conf
seems to work much better when you use tabs, not spaces, in it.

So in your case it would be

*.info;mail.none;authpriv.none;cron.none[tab][tab][t...@192.168.1.5

Don't know if rsyslog.conf has the same requirement.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpDnXp7orddY.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] One for the Cisco experts...

2009-04-22 Thread David . Mackintosh
On Tue, Apr 21, 2009 at 10:25:59PM +0100, Daniel Bird wrote:

> Take a look at Netdisco. I seem to remember it's a little tricky to set
> up on CentOS but I wouldn't live without it now.

"A little tricky"?

Last time I looked at it, I described the installation process as
only slightly less complicated than building a Saturn-V rocket out of
1960's era TV parts.  

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpK2e8wQ2RML.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] One for the Cisco experts...

2009-04-21 Thread David . Mackintosh
On Tue, Apr 21, 2009 at 01:22:07PM -0500, Sean Carolan wrote:

> SNMPv2-SMI::mib-2.17.4.3.1.2.0.176.208.225.191.82 = INTEGER: 389
> 
> Does this mean that the machine is plugged into port 389?  I didn't
> think there were 389 ports on the switch.

It'd be a very large switch.

No, it just means it's reachable through interface number 389.  There
is a table somewhere which associates interfance names with
descriptions or even better, the labels which you have hopefully
applied to each interface.  (Brief pause while I dig around in my
wiki and various script directories.)  If you are digging around in
your cisco, I'd try starting with something like .1.3.6.1.2.1.2.2.1.2
which on mine returns information like:

nmpwalk -c public -On -v 1 172.30.0.254 1.3.6.1.2.1.2.2 | grep Giga | head
.1.3.6.1.2.1.2.2.1.2.10101 = STRING: GigabitEthernet1/0/1
.1.3.6.1.2.1.2.2.1.2.10102 = STRING: GigabitEthernet1/0/2
[...]

In your case I'd look at .1.3.6.1.2.1.2.2.1.2.389 to see what the
interface was.

Also possibly useful:

- http://wiki.xdroop.com/space/snmp/Switch+Port+Vlans
- http://wiki.xdroop.com/space/snmp/Switch+Port+Labels

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgp5XqRqJDhfO.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] One for the Cisco experts...

2009-04-21 Thread David . Mackintosh
On Tue, Apr 21, 2009 at 11:44:47AM -0500, Sean Carolan wrote:
 
> How can I find out which port on the switch a particular server is
> connected to?  I was hoping that this is somehow possible using the
> mac address and the data gathered from snmpwalk/snmpget requests but
> I'm not having much luck.  How would you tackle this problem?

My notes: http://wiki.xdroop.com/space/snmp/Switching+Tables

Basically there are at least two places in snmp where this might be
stored.  The most obvious is the classic MIB-II Bridge.  The wrinkle
with this MIB is that some switches maintain separate tables for each
VLAN, which means in order to query the switch properly, you have to
query the MIB for each VLAN.

Newer switches populate the Q-Bridge-MIB instead of or as well as the
MIB-II Bridge.  This table contains the VLAN that the target MAC is
reachable through, which is useful since you don't have to know it
ahead of time.

We have a six- or seven- year old cisco 3750 which is running an IOS
which doesn't have the newer MIB; for this switch, we must explicitly
query the MIB-II Bridge for each VLAN.  I would hope that newer
relesaes of IOS wouldn't have this limitation.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpyay4QHD1bu.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] need trouble ticket system

2009-03-29 Thread David . Mackintosh
On Sun, Mar 29, 2009 at 03:07:11PM +0200, Rainer Duffner wrote:
 
> as suggest, RT is a good choice.
> But it requires some thinking and planning in advance, and a good  
> knowledge of PERL-intrinsics on RHEL/CentOS, as it requires around 200  
> different PERL-module dependencies.

See also the RTwiki: http://wiki.bestpractical.com/view/RPMInstall

It describes how a CentOS-4 user can use a yum repository to deal
with the dependancy hell.  I heartilly endorce this approach, as I
lost two days trying to satisfy the dependancy hell manually.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpDrk1Eo34M6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for some advice to monitor network usage in office

2009-03-25 Thread David . Mackintosh
On Wed, Mar 25, 2009 at 10:52:23AM +0200, Spook ZA wrote:
> Hi Rudy
> 
> 2009/3/25 Rudi Ahlers :

> > I've been asked by a college to setup a monitor to monitor a Windows
> > network, but on internet usage. They want to have detailed usage, i.e.
> > on a per IP / PC basis, and if possible to get stats for every
> > protocol, and see over a period of time what goes on.
> > Rudi Ahlers
> 
> If your firewall / border gateway is running linux, have a look at:
> 
>  http://www.networkuptime.com/tools/netflow/
> 
> You need an exporter that will export linux netflow records and
> software that will collect and present the resultant data.

This is almost, but not quite, what I do.  Specifically, I use fprobe
to generate flows, and then nfsen/nfdump to generate the pretty
pictures that management seems to enjoy so much.  nfsen can be
configured to generate some of the information that you want, but you
can write your own perl scripts to parse the raw nfdump files and
extract whatever information you want.

Links:

  fprobe: http://sourceforge.net/project/showfiles.php?group_id=63535
  nfdump: http://nfdump.sourceforge.net/
  nfsen:  http://nfsen.sourceforge.net/

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpJUWl3T98VS.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] new user - with questions

2009-02-20 Thread David . Mackintosh
On Fri, Feb 20, 2009 at 10:32:42PM -0500, Michael Klinosky wrote:
 
> Is CentOS basically like Fedora? (Well, except for the updates every 6
> months!) As in 'look & feel', underlying operations, etc. (Btw, I know 
> about removing upstream branding.)

Very basically.  CentOS/RHEL 5 is loosely based on Fedora Core 6,
just as CentOS/RHEL4 is loosely based on FC3.

I say loosely because RHEL 6 wasn't based on FC9, and if I am
understanding things correctly, won't be based on FC10 either.

> Any caveats? Meaning, does it use the same repositories that Fedora
> does? Are there any major or significant differences?

CentOS/RHEL is built for stability, meaning what they ship is what you
get.  You will see bug and security fixes for the applications merged
in, but (broadly generally speaking) no new features.

The exception to this is device drivers and support; new devices are added
to the kernel stream and to the xorg X display engine during each minor
release (ie 5.1 to 5.2).

As far as repositories go, there are several RHEL/CentOS friendly repositories
such as RPMforge.  RedHat has one of their own too.  Do some research before
connecting, they are not always compatible with each other.  My preference
is for RPMforge, but that's purely based on the fact that I've found enough
things in RPMforge that I want.  

Beyond that, you can *usually* make your own installable RPMs from
SRPMs for things that worked with FC6, and you can even resort to
building from source code although that gets you away from nice RPM
management.  Remember, the further you stray from the stock distribution,
the more you get into "you get to keep all the pieces when it breaks"
level support.

> I should just go for the most recent package (5.2) - yes? About how old 
> are the apps? (A few months?)

If you were happy with FC6, then yes you want CentOS 5.x.  The apps
are all not-quite-as-old-as FC6 versions were, but bugfix and
security patches are merged in.  CentOS 4.x has FC3-vintage
applications.  

The best practice is to do a minimal install from CD or DVD, then
immediately do a 'yum update', then 'yum install' the extra pieces
you need.  (Why?  Because if there is a pending update to something
you are wanting to use, there's no point installing it from DVD since
you will end up downloading it anyways.) 

> How are application updates handled? 5.2 has firefox-3.0-0.beta5.6.el5. 
> I saw (on the Firefox website) that 3.0.6 is out. Will an app update get 
> that version, or something just a bit older? (btw, I know about 
> backporting.)

Nope, CentOS 5 will probably have Firefox 3.0-0 for its lifetime.  If you
want something newer, you can probably retro-fit it yourself.  If you need
something newer, the stability of CentOS is probably not what you really
want.  Applications will not be generally refreshed until RHEL/CentOS 6.

> Does centos use Plymouth? I have a somewhat recent computer (about 3 
> years old) that has an intel chipset (which Plymouth can't handle yet, 
> and so it needs xdriver=vesa during install).

I don't know.  If FC6 could handle it, CentOS 5 can probably handle it.
Always use the latest DVD/CD image to do your initial install from, that
gives you the best chance of hardware compatibility.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpEg7t5Te2Ee.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpmforge

2009-02-09 Thread David . Mackintosh
On Mon, Feb 09, 2009 at 10:50:37AM -0800, Scott Silva wrote:
> > I didn't mean to stir up a ruckus
> 
> Ruckus stirs itself on most mailing lists!
> 
> Overworked sysadmins just need to go get a cup of coffee and count to 10
> before they hit "reply", or at least before they hit "send".

cen...@centos -- now 35% less bitter!

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpaj9h3lA6dd.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where is PD???

2009-02-05 Thread David . Mackintosh
On Fri, Feb 06, 2009 at 12:52:00AM +0800, mcclnx mcc wrote:
>  Checking for ksh...
>  Unable to find PD KSH version.
> 
> 1. where is PD?

not "PD", you want pdksh -- the Public Domain version of ksh, the
original of which was originally not free.  

In CentOS 4.x, this was in an RPM called pdksh.  The CentOS 5 release
seems to include a "ksh" rpm:

$ rpm -qa | grep ksh
ksh-20060214-1.7
$ which ksh
/usr/bin/ksh

Convincing your Oracle installer thing to accept this is something
you'll have to take up with Oracle.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpMq42IncOT7.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Automounter issue

2009-02-03 Thread David . Mackintosh
Ahh, here we go:

https://bugzilla.redhat.com/show_bug.cgi?id=371341 “upgrade to 5.1
breaks autofs for automounted home directories” – see especially
comment #13 which describes the symptom, and #25 which explains what
the fix is hidden in the records as.  Fix appears to be to use kernel
kernel-2.6.18-53.1.4 or higher.  

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpqPMKRmWaTC.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Automounter issue

2009-02-02 Thread David . Mackintosh
Picking up a couple of outstanding questions:

On Mon, Feb 02, 2009 at 05:53:59PM +, James Pearson wrote:
 
> What sort of map is being used for this mount point? i.e. what is the 
> contents of your /etc/auto.master ?

# ypcat -k auto.master | grep tools
/tools auto.tools   
-hard,bg,nfsvers=3,tcp,intr,rsize=32786,wsize=32768,nosuid

There's nothing in the messages file; I am now sending *.debug to my
syslog host to see if anything interesting shows up.

Nate asked how many clients are mounting; around 300 systems have the
automounter map, but only 30-50 nodes can be expected to be actually
using it.  

Closer inspection reveals that the two systems which are having the
problem the most are both v5u1.  I'm starting to suspect that the
root cause is an automounter issue in 5u1.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpblOJlcpxBc.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Automounter issue

2009-02-01 Thread David . Mackintosh
Anyone seen this before?

I have a number of file systems nfs mounted onto clients running
various versions of CentOS (and Upstream), although mostly they are
v5.x flavors. =20

The server is a Network Appliance filer.

When the build process for this team runs, it sometimes dies because
it can't find files in the automounter tree; if the engineer checks,
he sometimes sees a problem, and sometimes doesn't; for example:

[pdbu...@build-c5u1: ~] ll /tools/vault/kernels
ls: /tools/vault/kernels: No such file or directory
[pdbu...@build-c5u1: ~] ll /tools/vault/kernels
total 152K
drwxr-xr-x  4 pdbuild everyone 4.0K Aug  7  2007 2.4.21-40.EL.CUSTOM.01smp/
drwxr-xr-x  7 pdbuild everyone 4.0K Jun 26  2007 2.6.16.33-1-xen/
drwxr-xr-x  7 pdbuild everyone 4.0K Aug  7  2007 2.6.16.33-xen/
drwxr-xr-x  4 pdbuild everyone 4.0K Jan  3  2008 2.6.18-53.1.4.el5/
drwxr-xr-x  4 pdbuild everyone 4.0K Feb 11  2008 2.6.18-53.1.6.el5/
drwxr-xr-x  4 pdbuild everyone 4.0K Nov 15  2007 2.6.18-53.el5/
drwxr-xr-x  4 pdbuild everyone 4.0K Sep 24  2007 2.6.18-8.el5/
drwxr-xr-x  7 pdbuild everyone 4.0K Oct 16  2007 2.6.18-xen/
[pdbu...@build-c5u1: ~] df  /tools/vault/kernels
FilesystemSize  Used Avail Use% Mounted on
nas02:/vol/tools/vault
  779G  655G  124G  85% /tools/vault

Now I've seen this before where some processes don't wait for the automount=
er
to do its thing before continuing; they just report "fail" and move on
to the failure handling.

I'm guessing that I need some magic on the automounter configuration to
change this behavior, can anyone point me in the right direction?

Thanks for your time.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpMuLO35bnIm.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Guidelines for CentOS Mailing List posts

2009-01-11 Thread David . Mackintosh
On Sun, Jan 11, 2009 at 05:35:38PM +, Vandaman wrote:
 
> What is your contribution to the topic? Or are you one of those who 
> has been top-posting and posting in html?

Hmmm... I appear to be:

 - posting in non-HTML text
 - bottom posting
 - trimming

I presume that if you are truely interested in my transgressions, ten
minutes with google will provide you with ample evidence for a
summary execution.

I merely found it ironic that you concluded a nag about people's
behavior on a mailing list by saying it wasn't the time to be
complaining about people's behavior on a mailing list.

True, it would have been MORE ironic if your rant had been in HTML,
but I guess that's too much to hope for.

Would you like the joke explained to you in more detail?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgp1yhfcFLAXs.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Guidelines for CentOS Mailing List posts

2009-01-10 Thread David . Mackintosh
On Sat, Jan 10, 2009 at 11:14:22AM +, Vandaman wrote:

> Its not the time to be nannying people
> over how to behave on mailing list.



-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 d...@xdroop.com  | http://www.xdroop.com


pgpuU4MWwR2B8.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT - Please don't feed the Troll(s)

2008-10-30 Thread David Mackintosh
On Wed, Oct 29, 2008 at 02:10:23PM -0400, William L. Maltby wrote:
> I fully understand the emotional need to respond to one who throws
> around terms like "Communist", "Tyrannical", etc. even if ostensibly

[...]

> My feeling was the OP is either an ignorant, unappreciative,
> self-centered, and emotionally immature person that expects all projects

You tripped the irony detector.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpAooRMhr8IO.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: is parted reliable?

2008-10-14 Thread David Mackintosh
On Tue, Oct 14, 2008 at 11:13:18PM +0100, Karanbir Singh wrote:
 
> And Just to remind everyone that no, this is still not a general 
> conversation about stuff list.

How off-topic is it to ask precisely what is on-topic for this list
if questions and discussions of the included components belong on the
support mechanisms for those individual parts, and the rest (ie anaconda
and friends) probably belongs in the upstream vendor's forums?

What does that leave?  The color of the logo?

(I like the blue.)

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpCpqHcm20c6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] enterprise backup solution (probably amanda?)

2008-08-01 Thread David Mackintosh
On Wed, Jul 30, 2008 at 07:10:40AM -0700, Shawn Everett wrote:
> I think backups are important and always on topic. 
> 
> You could always use Veritas Netbackup.  That's what one of my clients uses 
> with great success.  It backups up Windows, Linux and does full, 
> incremental, restores etc etc all from a nice Java GUI.
> 
> It's $$$ but you can't get more Enterprise than that. ;)

Agreed on Veritas NetBackup.  An oddly constructed tool, but one
we've come to depend on.

We also have customers who use Bakbone NetVault.  It's broken in
different ways than the Veritas NetBackup is.  :)

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgptgo5Lvrq6R.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] syslog question

2008-07-29 Thread David Mackintosh
On Tue, Jul 29, 2008 at 02:46:39PM -0400, James Pifer wrote:
> Yeah, that was pretty easy. Any way to get it to save logs from
> different hosts to specific files?

I use syslog-ng for that, I think from rpmforge.

http://wiki.xdroop.com/space/Sun/Syslog-ng

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpIZg9NHVcf6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] syslog question

2008-07-29 Thread David Mackintosh
On Tue, Jul 29, 2008 at 02:32:19PM -0400, James Pifer wrote:
 
> Any suggestions or guidance?

By default, your syslog does not accept syslog entries from remote
systems.  

Edit /etc/sysconfig/syslog, and add a '-r' parameter to the
SYSLOGD_OPTIONS option, and restart syslog.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgprV1aNCrgeR.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Ideas for stopping ssh brute force attacks

2008-07-23 Thread David Mackintosh
On Mon, Jul 21, 2008 at 04:43:11PM -0400, Bo Lynch wrote:
> just wanted to get some feedback from the community. Over the last few
> days I have noticed my web server and email box have attempted to ssh'd to
> using weird names like admin,appuser,nobody,etc None of these are
> valid users. I know that I can block sshd all together with iptables but
> that will not work for us. I did a little research on google and found
> programs like sshguard and sshdfilter. Just wanted to know if anyone had
> any experience with anything like these programs or have any other advice.
> I really appreciate it.

If you have a web server on the same system, you can use php and tcp
wrappers to restrict ssh inbound traffic to known systems, plus give
you a back-door key to permit yourself access from arbitrary systems
on the internet.  

http://wiki.xdroop.com/space/Linux/Limited+SSH+Access

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpzQxjyCaIJ4.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] screen detatch

2008-07-22 Thread David Mackintosh
On Tue, Jul 22, 2008 at 06:07:44PM +0100, Luciano Rocha wrote:
> > The man page for screen says that I can create a detatched screen 
> > running with a set command in it by doing this:
> > 
> > $ screen -dm $command
> 
> screen -dm isn't the same as screen -d -m. Try the latter.

Figured it out.

While the first line of my shell script is

#!/bin/tcsh

...I am in fact a bash user.  One of the things my script is
ultimately trying to do is to start multiple things from within
the screen session by use of teh screen command itself; because
of the shell swap, $STY doesn't seem to be getting set.  If I
change the first line of my script to be #!/bin/bash, it works
as expected.

Thanks for looking.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpEHEG9qGTg7.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] screen detatch

2008-07-22 Thread David Mackintosh
The man page for screen says that I can create a detatched screen 
running with a set command in it by doing this:

$ screen -dm $command

However, it doesn't work.  Screen exits without creating the detached
screen.  

If I say 

$ screen $command

...I get dropped into a screen session running $command as I would 
expect.

What's the magic invocation I'm missing?

Also, the next step will be for root to launch said screen session as
someone else during boot time; am I asking for trouble by trying it?

# su - user -c screen -dmS $Label $command

Thanks for any insights or pointers to web resources I can use to
learn from.  
-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpJY2UMGn4HZ.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preferred software RAID 10?

2008-07-17 Thread David Mackintosh
On Fri, Jul 18, 2008 at 12:31:19AM +0200, Kai Schaetzl wrote:
> Rudi Ahlers wrote on Thu, 17 Jul 2008 23:10:48 +0200:
> 
> > > /boot shouldn't be mirrored, as the BIOS won't know how to boot it. 
> > > leave /dev/sdb1 the same size as /dev/sda1 and call it /boot2 and try 
> > > to remember to copy /boot to /boot2 each time you update the kernel.
> > I understand this, but how do you boot from /boot2 on the second HDD if 
> > the 1st have failed?
> 
> You don't (*). I don't understand John's advice here. There is no problem 
> md mirroring /boot. You just need to install grub a second time on the 
> other disk. For that you have to boot from it. (I think I also did it 
> successfully without booting from the other disk in the past, but last 
> time I tried it it didn't want to work like I remembered it should.)

I think you mean "if you want to boot from it, you have to install
grub on it".  I've done this.  It means if the first disk fails, you
can then physically remove the failed disk, put the survivor in as
the first disk, then boot from that.

To install grub to the second disk:

# grub
> device (hd0) /dev/sdb
> root (hd0,0)
> setup (hd0)
(blah blah blah)
Running "install /boot/grub/stage1 (hd0) (hd0)1+16 p (hd0,0)/boot/grub/stage2
/boot/grub/grub.conf"… succeeded
Done.
> quit

(or /dev/hdb, or whatever is appropriate).

To get back to the OP: I've done a RAID-10 under CentOS, and the
problem I encountered was that the kernel wasn't smart enough to
assemble the RAID without a properly populated /etc/mdadm.conf file.

See the details at 
http://wiki.xdroop.com/space/Linux/Software+Raid+compound+devices

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpwtlkQSuz5j.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] screen command

2008-07-13 Thread David Mackintosh
On Sun, Jul 13, 2008 at 01:46:20AM -0400, Ed Donahue wrote:
> Anyone know which rpm give you the screen command?
> 
> Or tell me how to figure this out on my own :-)

# yum install screen

It will tell you what it wants to download and install before it does it.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpjWCcD3bXSc.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] what does "not found" mean in a DHCPRELEASE context?

2008-07-10 Thread David Mackintosh
I have a CentOS 4.6 server running dhcpd. One of my client devices (a
Panasonic KX-HCM280A camera) is trying to get a lease from that
server. I can see the device accept a lease (it is a reservation),
however it always releases the reservation after about 25 seconds: 

Jul 10 10:30:49 stargate dhcpd: DHCPDISCOVER from 00:80:f0:56:46:30 via eth0
Jul 10 10:30:49 stargate dhcpd: DHCPOFFER on 172.31.14.13 to 00:80:f0:56:46:30 
via eth0
Jul 10 10:30:49 stargate dhcpd: DHCPREQUEST for 172.31.14.13 (172.31.0.1) from 
00:80:f0:56:46:30 via eth0
Jul 10 10:30:49 stargate dhcpd: DHCPACK on 172.31.14.13 to 00:80:f0:56:46:30 
via eth0
Jul 10 10:31:16 stargate dhcpd: DHCPRELEASE of 172.31.14.13 from 
00:80:f0:56:46:30 via eth0 (not found)

If I remove the reservation and reset the camera, it does the same
thing with a dynamic lease; however in that case the message is 

Jul 3 09:48:05 stargate dhcpd: DHCPDISCOVER from 00:80:f0:56:46:30 via eth0
Jul 3 09:48:06 stargate dhcpd: DHCPOFFER on 172.31.9.91 to 00:80:f0:56:46:30 
via eth0
Jul 3 09:48:06 stargate dhcpd: DHCPREQUEST for 172.31.9.91 (172.31.0.1) from 
00:80:f0:56:46:30 via eth0
Jul 3 09:48:06 stargate dhcpd: DHCPACK on 172.31.9.91 to 00:80:f0:56:46:30 via 
eth0
Jul 3 09:48:19 stargate dhcpd: DHCPRELEASE of 172.31.9.91 from 
00:80:f0:56:46:30 via eth0 (found)

...ie "(found)" instead of "(not found)".

I should mention that I have several other cameras of the same type
which are working, so this is most assuredly a problem with the
camera itself, but I was still wondering: 

Does anyone know what dhcpd (or the device) is trying to tell me with this 
message?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpGrWkTDOinP.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] settings up cheap a NAS / SAN server, is it possible?

2008-06-30 Thread David Mackintosh
On Mon, Jun 30, 2008 at 02:08:33PM -0500, Les Mikesell wrote:
> Have you updated to Centos 5.2 yet?  And if so, did it improve NFS 
> performance?

Sorry, these computers are in production now so I can't fiddle with them.

Besides, this would be a "long" upgrade -- they are both CentOS 4.x systems.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpByjAutaftd.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] settings up cheap a NAS / SAN server, is it possible?

2008-06-30 Thread David Mackintosh
On Sun, Jun 29, 2008 at 09:08:15AM +0200, Rudi Ahlers wrote:
> Hi all
> 
> I want to look at setting up a simple / cheap SAN / NAS server using 
> normal PIV motherboard, 2GB (or even more) RAM, Core 2 Duo CPU (probably 
> a Intel 6700 / 6750 / 6800) & some SATA HDD's (4 or 6x 320GB - 750GB). 
> My budget is limited, so I can't afford a pre-built NAS device.
 
My own experience: I have done two NAS systems using CentOS.  One is
a HP DL585G1 with four 300GB drives using a hardware RAID-5.  The
second is a Dell PowerEdge 2600 with four 300GB drives (software
raid-10) and two 32GB drives (software raid-1).  

One has a multi-core Opteron processor, the other has a high-end
Xeon processor with HT disabled.  Both have 2GB of RAM.

Both are used by high-demand compute processes as NFS servers.

Despite a lot of fidding, configuring, testing and tuning, neither
result is very good when it comes to NFS performance.  We've gone
so far as to run everything as noatime (ie local mount, nfs export,
and nfs client mount) hoping for better performance.

In comparing the systems we tried the hardware-RAID5 first on the 
assumption that HW-Raid5 is faster than SW-Raid, for a higher yield
than Raid-10.  However we don't think that the elevator used in the
kernel makes intelligent stepping decisions on the HW-Raid5 because
it doesn't see the "real" geometry of the disks involved, only the
aparrent geometry of the RAID5 disk.

The Software-Raid10 is better in some ways because the kernel sees
the real disk geometries.  Performance is about on par with the 
other computer, even though the other computer has the better CPU.

Due to the hardware involved I couldn't try Solaris 10, but we have
had experiences in the past where the NFS server on Solaris was
significantly better than the NFS server in CentOS/RedHat, both in
terms of throughput and perceved latency under load.

If I was doing it again, I'd push harder for a budget for a NetApp
filer.  For what we are attempting to do, you get what you pay for.

If I was doing it again with the budget restrictions, I'd probably 
try Solaris with software raid.  I would then try the *BSD family,
but only after Solaris because I have extensive Solaris experience.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgppfXMXeUUwf.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: DMA mode

2008-06-05 Thread David Mackintosh
On Tue, Jun 03, 2008 at 10:17:14AM +0200, Tom G. Christensen wrote:
 
> Google suggests booting with ide0=noprobe ide1=noprobe to make sure the 
> ata-piix driver is used.
> If you don't want to reinstall then make sure initrd contains the 
> ata-piix driver and that references to /dev/hd* are replaced with 
> /dev/sd* in fstab etc.

Hi Tom,

I can also confirm that this works, thank you for the assistance.

Can I ask what you used as your google query?  I think I missed
something obvious.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpHiRzfw0I3O.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DMA mode

2008-06-02 Thread David Mackintosh
On Mon, Jun 02, 2008 at 06:27:55PM +0300, Linux wrote:
 
> For my cruiosity, what is your current kernel version?

# uname -a
Linux stargate3 2.6.9-67.0.15.EL #1 Thu May 8 10:39:19 EDT 2008 i686 i686 i386 
GNU/Linux

yum check-update doesn't show any available kernels, so I presume I'm current.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpm6Lk5tqZ8l.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] DMA mode

2008-06-02 Thread David Mackintosh
Hi folks,

I have an HP Proliant 140DL G2 server with what appears to be an IDE
drive in non-DMA mode.  Performance on the server is extremely bad
when large amounts of disk activity is taking place.

I think the problem is that my drive is not in DMA mode:

# hdparm /dev/hda

/dev/hda:
 multcount= 16 (on)
 IO_support   =  0 (default 16-bit)
 unmaskirq=  0 (off)
 using_dma=  0 (off)
 keepsettings =  0 (off)
 readonly =  0 (off)
 readahead= 256 (on)
 geometry = 16383/255/63, sectors = 80026361856, start = 0

...but I can't set it on:

# hdparm -d1 /dev/hda

/dev/hda:
 setting using_dma to 1 (on)
 HDIO_SET_DMA failed: Operation not permitted
 using_dma=  0 (off)

...which I think is because the IDE controller isn't really
recognized, or is pretending to be a SATA controller:

# lspci -v | less
00:1f.2 IDE interface: Intel Corporation 82801EB (ICH5) SATA Controller (rev 
02) (prog-if 8a [Master SecP PriP])
Subsystem: Hewlett-Packard Company: Unknown device 3208
Flags: bus master, 66Mhz, medium devsel, latency 0, IRQ 193
I/O ports at 
I/O ports at 
I/O ports at 
I/O ports at 
I/O ports at 1470 [size=16]

All the google hits I've seen so far imply I have to build a kernel module
but I'd rather not get into the business of rolling my own kernel if I
don't have to.

I spun through the HP support page for this box/OS combo, and I don't see
any SATA/IDE/ATA drivers, only SCSI/SAS drivers.

So before I continue on, can I get a sanity check here -- am I barking
up the right tree?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpZROvMMSUZy.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Top Posting

2008-05-15 Thread David Mackintosh
On Thu, May 15, 2008 at 11:04:08AM -0700, MHR wrote:
> This is way OT, which we know (the Subject: line...) - can we dismiss
> it as "beaten to death one more time" and go on?  :-)

You must be new to the Internet.  There's no such thing as too much
beating for any horse, dead or not.

:)

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgp8b56YqbSPB.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Archive-to-DVD

2008-05-07 Thread David Mackintosh
> [encijan ~]$ rpm -qf /usr/bin/dirsplit
> genisoimage-1.1.6-6.fc8
> Then use growisofs.
> I can send you dirsplit-0.3.1-1.bob.src.rpm if you wish.

Yes please, that would be useful.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpNRUgefVh2F.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Irritant

2008-05-07 Thread David Mackintosh
On Wed, May 07, 2008 at 02:28:55PM -0400, Sam Drinkard wrote:
> Hi again,
> 
>I've got a nagging irritant with either putty or the man pages, or 
> perhaps my setup.  If I use putty to log into my server and request any 
> man page, it returns the page, but really important stuff like keywords 
> are blank.  Is this perhaps caused by the wrong terminal setting in 
> putty or is there something with Centos man pages that cause this to happen?

Try this: 
  in Putty, go to Window -> Translation 
  for "Received data assumed to be in which character set:" select UTF-8

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpuMU7BSaNcq.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Archive-to-DVD

2008-05-02 Thread David Mackintosh
Hi folks,

Here's the situation.  I have a group of engineers who love to save
things to disk.  Now that the filer is getting full, they are
interested in archiving some of those things to DVD.

The tress containing the things they want to archive are specified
like so: 

/path/path/path/A/04??
/path/path/path/B/04??
/path/path/path/A/05??
/path/path/path/B/05??
/path/path/path/A/06??
/path/path/path/B/06??

...and there are things in A and B which do not match the specifications.

The total amount of data in this specificaiton is around 30GB, and this is not
distributed equally through the specification.

What I'm hoping for is a program that I can feed in directory
specifications like the above, and it will produce for me DVD images
(.iso files) containing these trees in such a format that when the
engineers want file $X, I can give them the DVD (or the whole stack,
if required) and say "there you go" without having to go through a
restore process.

I don't want something which creates it's own archive format which
spans the DVDs (ie split-tar or ufsdump).

I would settle for a program that produces a list of files such that I
can create DVD images on my own.

Does anyone have any ideas how I might go about doing this, before I
roll my own solution?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpFizkyYNGtv.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Securing SSH

2008-03-25 Thread David Mackintosh
On Tue, Mar 25, 2008 at 11:28:45AM -0700, Tim Alberts wrote:
> >http://wiki.xdroop.com/space/Linux/Limited+SSH+Access
> >  
> That sounds great for getting around a remote dynamic IP address, but 
> some more authentication/security on that web page is necessary, 
> otherwise, anyone who finds that web page is given access?

Strictly speaking, yes; however in practice, the number of bots (or,
indeed, external users who are not me) who the magic web page to hit
(my actual page is not named as the example on the web page is!)
before attacking the ssh connection is zero; therefore since the goal
was to prevent stupid robots from brute-forcing my ssh and filling my
logs, it isn't necessary.  

I mean, strictly speaking you'd next have to insist on a proper SSL
connection to the web server, otherwise you are at risk of someone
sniffing the username and password used in the .htaccess process. 
And then after that, you'd have to insist on some kind of security on
the remote system to ensure that your passwords are not being
captured.  Etc, etc.  

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpheBd6M3mv6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Securing SSH

2008-03-25 Thread David Mackintosh
On Tue, Mar 25, 2008 at 09:48:17AM -0700, Tim Alberts wrote:
> So I setup ssh on a server so I could do some work from home and I think 
> the second I opened it every sorry monkey from around the world has been 
> trying every account name imaginable to get into the system.
> 
> What's a good way to deal with this?

This is what I do.

http://wiki.xdroop.com/space/Linux/Limited+SSH+Access

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpDF8dtEQcUQ.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Xen or VMWARE on CentOS 5

2008-02-27 Thread David Mackintosh
On Wed, Feb 27, 2008 at 08:03:09AM -0600, Les Mikesell wrote:
> Ern jura wrote:
> >Does anyone out there have a comprehensive tutorial on installing VMware 
> >and
> >successfully managing virtual machines with either xen or vmware?
> 
> VMware is pretty simple: download the server rpm, install it, run the 
> vmware-config.pl setup script to set the options and install your (free) 
> license key.  Then run vmware locally or from some other machine to 
> access the console where you can create and start the virtual machines. 
>  Once created, you can treat the virtual machines like they were 
> separate physical boxes except that they contend for host resources (and 
> once they are up on the network I prefer to connect directly to them 
> with ssh, X, freenx, or vnc instead of using the VMware console.  You'll 
> want plenty of RAM on the host machine and if you run several VM's they 
> will perform better if you can spread them over different disk drives.
> 
> With VMware you can copy your disk images over to a Windows or Mac host 
> and run them with no changes (Mac version isn't free, though).

This is pretty much what I do.  I also keep stock "reference" images
for each OS I support and copy from the reference image every time I
need to deploy a new VM.

I like the idea of Xen, but the documentation is a little thin
especially when it comes to installing useful things like Windows
VMs; I don't have the time to solve the problem properly, and I hope
that in a year or two I can change this.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpkaLlpmZKGz.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Making FORWARD_IPV4=YES permanent / DHCP multiple routers

2008-02-12 Thread David Mackintosh
On Tue, Feb 12, 2008 at 10:26:54AM -0800, Tim Alberts wrote:
> So how do I do this?

edit /etc/sysctl.conf

> option routers 10.0.0.1 10.0.0.2;

Not as far as I know.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpsnnQPVQsjZ.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] One approach to dealing with SSH brute force attacks.

2008-01-30 Thread David Mackintosh
On Wed, Jan 30, 2008 at 12:17:22PM -0500, Ed Donahue wrote:
> I use this one, works great and easy to setup
> http://rfxnetworks.com/bfd.php

This is how I deal with them: deny by default unless you know the
"secret handshake".

http://wiki.xdroop.com/space/Linux/Limited+SSH+Access
 
-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgp7wY7wnhgql.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: Sendmail: timeout waiting for input from local during Draining Input

2007-12-07 Thread David Mackintosh
On Fri, Dec 07, 2007 at 11:54:26AM -0500, David Mackintosh wrote:
> I've recently replaced a RedHat EL 3.x system with a CentOS 5 system
> (fully yum'd as of Tuesday).  This was a full-pave install, although
> we did copy the sendmail.mc from the original system.  
> 
> Now I get a lot of this in my logs:
> 
> Dec  7 11:47:38 mail sendmail[20117]: lB7Gl6w0020116: timeout waiting for 
> input from local during Draining Input
> 
> The only thing even remotely credible is a Sendmail Known Bugs page
> which suggests it is a chatty local delivery agent, but since this is
> happening with outbound messages I don't think I believe this.
> 
> Does anyone have any ideas what Sendmail is trying to tell me here?

Further to this, I have discovered that what Sendmail is trying to
tell me is "procmail and dovecot are not playing nicely together".

What is happening is that I have a large amount of mail coming and
going, and when procmail tries to deliver to a mailbox (in mbox
format, in /var/spool/mail/$user, currently 12MB in size but can grow
MUCH larger) that dovecot is actively using, procmail blocks -- and
so do all the other procmail processes waiting to deliver to this
mailbox.  Sendmail gets annoyed waiting for these blocked procmail
processes, and so fills my logs with the error message above.

If I do a "service dovecot stop", then the queued procmail processes all
drain their messages into the affected mailbox, and the problem goes away
for a little while after dovecot is restarted.

Naturally, the hack of stopping dovecot every so often isn't really
a solution.

So the question is: how do I get dovecot and procmail to play nice?
Is the solution to change to a maildir type inbox spool?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpVQWm0HCUMe.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Sendmail: timeout waiting for input from local during Draining Input

2007-12-07 Thread David Mackintosh
Hi folks,

I've recently replaced a RedHat EL 3.x system with a CentOS 5 system
(fully yum'd as of Tuesday).  This was a full-pave install, although
we did copy the sendmail.mc from the original system.  

Now I get a lot of this in my logs:

Dec  7 11:47:38 mail sendmail[20117]: lB7Gl6w0020116: timeout waiting for input 
from local during Draining Input

The only thing even remotely credible is a Sendmail Known Bugs page
which suggests it is a chatty local delivery agent, but since this is
happening with outbound messages I don't think I believe this.

Does anyone have any ideas what Sendmail is trying to tell me here?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpHPwFiWOwwr.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Anyone using sendmail?

2007-12-05 Thread David Mackintosh
On Tue, Dec 04, 2007 at 07:10:00PM -0800, Kenneth Porter wrote:
> >What do you want to do?  If you have a mailbox system that does not
> >depend on unix users existing (the Cyrus IMAPd is such a critter,
> >complex though it is) then Sendmail can deliver to those mailboxes.
> 
> It's my understanding that sendmail doesn't deliver to mailboxes, but 
> depends on a local mailer (the "mail delivery agent", or MDA, and typically 
> procmail) to perform that function.

Strictly speaking you are correct, in the Cyrus case it is lmptd doing the
actual delivery.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpOccDDhEhSe.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Anyone using sendmail?

2007-12-04 Thread David Mackintosh
On Wed, Dec 05, 2007 at 09:09:40AM +0700, Fajar Priyanto wrote:
> Hi all,
> Does sendmail support virtual-non-unix-users setup?
> Any URL about it?
> I tried to ask in #sendmail channel, but nobody answered.
> I google around, but, all url only talks about virtual domain and mapping to 
> unix users.

What do you want to do?  If you have a mailbox system that does not
depend on unix users existing (the Cyrus IMAPd is such a critter,
complex though it is) then Sendmail can deliver to those mailboxes.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpnrvtsgXJOg.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Bugzilla Install problems - need last mile help

2007-11-23 Thread David Mackintosh
On Fri, Nov 23, 2007 at 08:59:43AM -0500, Scott Ehrlich wrote:
> Creating database bugs...
> The 'bugs' database could not be created. The error returned was:
> 
> Access denied for user ''@'localhost' to database 'bugs'

I've seen this problem before, but I can't find my notes on it.

Try creating a user "[EMAIL PROTECTED]" instead just creating a user
"bugs" -- to mysql, they are different.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpHWTYOGSu36.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] fetchmail log messages I don't understand

2007-10-24 Thread David Mackintosh
On Wed, Oct 24, 2007 at 11:46:34AM -0500, Chuck Campbell wrote:
> I see these messages every time fetchmail pops my mail.  I don't understand
> what certificates it is talking about, or how to straighten this out.
> 
> fetchmail: Server CommonName mismatch: localhost != mail.mydomain.com
> fetchmail: Server certificate verification error: self signed certificate
> fetchmail: Server certificate verification error: certificate has expired
> 
> What do I need to read up on to understand this and find a fix?

I get messages like this with my fetchmail -- the cause has been either
the mail provider on the remote end is using a default, self-signed and 
unmaintained
certificate (ie when you install Sendmail, you get some self-signed certs
generated that are useless beyond the scope of your own private use); in
other cases I have been referring to the computer by a name which differs from
that which the certificate was created with.

In this case I suspect a combination of the two.  It looks like the
service provider got a default cert set up with the system referring to
itself as 'localhost', which is naturally different form the name
'mail.mydomain.com' which is how you are referring to it.

In practice this is probably nothing to worry unduly about unless you
are paying extra for verified TLS-secured mail transmission.  The expired,
mismatched-name cert will be used to encrypt the mail transmission just as
well as a "proper" cert will.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpXOkaa7pFHh.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Large scale Postfix/Cyrus email system for 100, 000+ users

2007-10-24 Thread David Mackintosh
On Wed, Oct 24, 2007 at 10:38:41AM -0700, Craig White wrote:
> On Wed, 2007-10-24 at 21:21 +0800, Christopher Chan wrote:
> > > I thought the usual ways of doing this were to either use a 
> > > high-performance NFS server (netapp filer...) and maildir format so you 
> > > can run imap from any client facing server, or to keep the delivery host 
> > > information in an LDAP attribute that you find when validating the 
> > > address.
> > This is the 'I have the money' way of doing this ;-)
> 
> last I checked, openldap, postfix and cyrus-imapd were free. What is the
> money reference?

Last I checked, cyrus-imapd could not provide reliable service when the 
datastore
was on NFS.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpjRNEwkeH7o.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Asus P5B-VM DO board?

2007-10-12 Thread David Mackintosh
On Fri, Oct 12, 2007 at 06:38:51PM +0200, Frank Büttner wrote:
> David Mackintosh schrieb:
> > Anyone had any success with or hints for a system based on the Asus
> > P5B-VM DO board, or the Intel Q965 (with its associated Intel GMA
> > 3000 VGA chip) in general?  
> Have you try it with CentOS 5?

No, unfortunately this is an engineering environment where 4.x is required
for compatibility with their toolset.  I'm sure 5.x is in their future
in the next year, but for today we need 4.x.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpSEv8DLjMf2.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Asus P5B-VM DO board?

2007-10-12 Thread David Mackintosh
Anyone had any success with or hints for a system based on the Asus
P5B-VM DO board, or the Intel Q965 (with its associated Intel GMA
3000 VGA chip) in general?  

I had to put pci=nommconf in order to get the installer (CentOS 4.5)
and the installed system to boot, but I can't get the graphics to work.

Following the instructions at the Intel website
http://www.intellinuxgraphics.org/install.html ends with a compilation error:

# cd drm/linux-core/
# make
make -C /lib/modules/2.6.9-55.0.9.ELsmp/source  SUBDIRS=`pwd` DRMSRCDIR=`pwd` 
modules
make[1]: Entering directory `/usr/src/kernels/2.6.9-55.0.9.EL-smp-x86_64'
  CC [M]  /root/intel/drm/linux-core/drm_agpsupport.o
In file included from /root/intel/drm/linux-core/drmP.h:168,
 from /root/intel/drm/linux-core/drm_agpsupport.c:34:
/root/intel/drm/linux-core/drm_compat.h:114: warning: static declaration of 
'kcalloc' follows non-static declaration
include/linux/slab.h:103: warning: previous declaration of 'kcalloc' was here
/root/intel/drm/linux-core/drm_agpsupport.c: In function `drm_agp_populate':
/root/intel/drm/linux-core/drm_agpsupport.c:531: warning: implicit declaration 
of function `phys_to_gart'
/root/intel/drm/linux-core/drm_agpsupport.c: In function `drm_agp_init_ttm':
/root/intel/drm/linux-core/drm_agpsupport.c:643: error: structure has no member 
named `bridge'
make[2]: *** [/root/intel/drm/linux-core/drm_agpsupport.o] Error 1
make[1]: *** [_module_/root/intel/drm/linux-core] Error 2
make[1]: Leaving directory `/usr/src/kernels/2.6.9-55.0.9.EL-smp-x86_64'
make: *** [modules] Error 2

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpFE5ujcPudS.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PHP5/CentosPlus big mess.

2007-10-02 Thread David Mackintosh
On Fri, Sep 28, 2007 at 11:15:44AM -0400, David Mackintosh wrote:
> Ok, so if you tuned in last time, I couldn't make the installation/upgrade of
> PHP5 from the Centos4 CentOS Plus repository work.  Not one to be easilly
> dissuaded, I shapened my shovel and dug myself a hole.

[...]

> Now, my users are complaining about errors like: 
> 
> [28-Sep-2007 10:32:29] PHP Warning:  PHP Startup: Unable to load dynamic 
> library '/usr/lib/php/modules/fileinfo.so' - 
> /usr/lib/php/modules/fileinfo.so: cannot open shared object file: No such 
> file or directory in Unknown on line 0
> [28-Sep-2007 10:32:29] PHP Warning:  PHP Startup: Unable to load dynamic 
> library '/usr/lib/php/modules/apc.so' - /usr/lib/php/modules/apc.so: cannot 
> open shared object file: No such file or directory in Unknown on line 0
> [...repeat for each file in /usr/lib/php/modules/...]
> 
> However, those "files" are there:
> 
> # ls -l /usr/lib/php/modules/fileinfo.so /usr/lib/php/modules/apc.so
> -rwxr-xr-x  1 root root 75652 Nov 24  2006 /usr/lib/php/modules/apc.so
> -rwxr-xr-x  1 root root 10580 Nov 24  2006 /usr/lib/php/modules/fileinfo.so
> 
> I don't know anything about how to get php to show these errors, since
> the simple phpinfo.php file works (but admittedly it doesn't really do 
> anything).
> 
> Can anyone point me in the right direction, or perhaps offer me other
> directions in which to dig?

For those who end up here as the result of an internet search: my
problem in this case was that I installed i386 rpms on a x86_64
system, which explains why php couldn't load the modules even though
they were there.  

Two long hours with yum and rpm, removing and re-installing various
parts, and I have a happy user community.

So honestly this problem was of my own making.  Nothing to see here.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpKgQX0GvcxW.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PHP5/CentosPlus big mess.

2007-09-28 Thread David Mackintosh
On Fri, Sep 28, 2007 at 12:48:23PM -0400, Ignacio Vazquez-Abrams wrote:
> On Fri, 2007-09-28 at 12:24 -0400, David Mackintosh wrote:
> > Ahh, I didn't know you could ldd modules.  But I still cannot see a problem:
> 
> Did you run it on a system exhibiting the problem?

Yes, I did.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpkS45O10VLk.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PHP5/CentosPlus big mess.

2007-09-28 Thread David Mackintosh
On Fri, Sep 28, 2007 at 12:18:11PM -0400, Ignacio Vazquez-Abrams wrote:
> On Fri, 2007-09-28 at 11:47 -0400, David Mackintosh wrote:
> > On Fri, Sep 28, 2007 at 11:29:34AM -0400, Ignacio Vazquez-Abrams wrote:
> >  
> > > ldd is your friend.
> > 
> > My apologies, as this must be obvious, but I am asking ldd the wrong 
> > question:
> 
> 
> But what about the modules?

Ahh, I didn't know you could ldd modules.  But I still cannot see a problem:

# ldd /usr/lib/php/modules/fileinfo.so
linux-gate.so.1 =>  (0xe000)
libmagic.so.1 => /usr/lib/libmagic.so.1 (0xf7fb8000)
libc.so.6 => /lib/tls/libc.so.6 (0xf7e8c000)
libz.so.1 => /usr/lib/libz.so.1 (0xf7e7c000)
    /lib/ld-linux.so.2 (0x56555000)
#

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpTW1ZpNwz2j.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PHP5/CentosPlus big mess.

2007-09-28 Thread David Mackintosh
On Fri, Sep 28, 2007 at 08:39:25AM -0700, Akemi Yagi wrote:
> On 9/28/07, David Mackintosh <[EMAIL PROTECTED]> wrote:
> 
> > Can anyone point me in the right direction, or perhaps offer me other
> > directions in which to dig?
> 
> Would this wiki help?
> 
> http://wiki.centos.org/Repositories/CentOSPlus/CentOSWebStack

Sadly, that wiki entry started teh process of digging the hole -- it
was from there I got the exclude= lines which I couldn't de-activate.
 
-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpQhfdu8dia6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PHP5/CentosPlus big mess.

2007-09-28 Thread David Mackintosh
On Fri, Sep 28, 2007 at 11:29:34AM -0400, Ignacio Vazquez-Abrams wrote:
 
> ldd is your friend.

My apologies, as this must be obvious, but I am asking ldd the wrong question:

# ldd /usr/bin/php  | grep mo
# 

...ie I can't see ldd telling me about missing module files.  ldd's
output implies that the dynamically linked libraries for the php
binary are fine; there is nothing missing.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgphQ1xLU79vG.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] PHP5/CentosPlus big mess.

2007-09-28 Thread David Mackintosh
Ok, so if you tuned in last time, I couldn't make the installation/upgrade of
PHP5 from the Centos4 CentOS Plus repository work.  Not one to be easilly
dissuaded, I shapened my shovel and dug myself a hole.

So using the exclude= lines in the repository config file backfired big time:
even if I excluded the exclude= lines, yum continued to exclude the files
on those lines, and only deigned to update three php files.  Thus, my user
complained that the mysql pieces were not there.

So what I did was install CentOS 4 fresh into a VM, update it, then I just 
did a:

# yum --enablerepo centosplus --exclude php-pecl-ssh2 --exclude 
php-eaccelerator --exclude php-pear-Image-GraphViz --exclude php-pear-PHPUnit2 
install php php*

(see the explanations for the --excludes on 
http://wiki.xdroop.com/space/CentOS/4/Updating+to+PHP+5)

Please with my illusion of progress, I then copied the RPMs from the local
cache to my target machine, and installed them with

# rpm -Uvh --nodeps --replacefiles *rpm

The --nodeps was because some other package not otherwise updated
depended on the previous version of php-pear, and the --replacefiles
was because rpm was complaining that some file owned by mysql-4
conflicted with the mysql-5 package even though it was going to be
"upgraded".  

Now, my users are complaining about errors like: 

[28-Sep-2007 10:32:29] PHP Warning:  PHP Startup: Unable to load dynamic 
library '/usr/lib/php/modules/fileinfo.so' - /usr/lib/php/modules/fileinfo.so: 
cannot open shared object file: No such file or directory in Unknown on line 0
[28-Sep-2007 10:32:29] PHP Warning:  PHP Startup: Unable to load dynamic 
library '/usr/lib/php/modules/apc.so' - /usr/lib/php/modules/apc.so: cannot 
open shared object file: No such file or directory in Unknown on line 0
[...repeat for each file in /usr/lib/php/modules/...]

However, those "files" are there:

# ls -l /usr/lib/php/modules/fileinfo.so /usr/lib/php/modules/apc.so
-rwxr-xr-x  1 root root 75652 Nov 24  2006 /usr/lib/php/modules/apc.so
-rwxr-xr-x  1 root root 10580 Nov 24  2006 /usr/lib/php/modules/fileinfo.so

I don't know anything about how to get php to show these errors, since
the simple phpinfo.php file works (but admittedly it doesn't really do 
anything).

Can anyone point me in the right direction, or perhaps offer me other
directions in which to dig?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpWNmKygoCaa.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] remote tar via ssh

2007-09-26 Thread David Mackintosh
On Wed, Sep 26, 2007 at 12:22:27PM -0700, ann kok wrote:
> can you tell me what is the exactly command?
> 
> machineA# ssh [EMAIL PROTECTED]:tar cvf / ; tar xvf *

machineA# cd $WHERE-MACHINE-B-FILES-WILL-LIVE
machineA# ssh [EMAIL PROTECTED] "cd / ; tar cfp - . " | tar xfp -

Beware of following network mounted filesystems or otherwise recursing.

Note that $WHERE-MACHINE-B-FILES-WILL-LIVE on machineA cannot be /
since it will likely interfere with the currently running OS.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpfFRodY1cna.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mdadm problem.

2007-09-26 Thread David Mackintosh
On Tue, Sep 25, 2007 at 08:16:20PM +0200, Alain Spineux wrote:

> ??? you made a copy of /mnt/md1 into /mnt/md1/mnt/md1 ???
> use
> # tar cfpl - --one-file-system .  | 
> instead

I think you mean 

# tar cfp --one-file-system - . | ...

...but in any case -l is a soon-to-be-depreciated way of writing 
--one-file-system.  

:)

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgphMk9cDMnL5.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: mdadm problem.

2007-09-25 Thread David Mackintosh
On Tue, Sep 25, 2007 at 09:56:34AM -0700, Scott Silva wrote:

> The partitions need to be type fd (raid autodetect) to work properly on 
> boot. It is much easier to set this up in the initial install.

/me slaps head
 
That's even in my notes, but I skipped it because I thought "I don't have
to mess around with fdisk any more because I can use the sfdisk trick!"

My own fault for going too fast.

Thanks

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpggfMC6WhcO.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] mdadm problem.

2007-09-25 Thread David Mackintosh
So I'm trying to RAID-1 this system which has two identical disks
installed in it, and it isn't working for some reason.

I started by doing a CentOS-4 install on /dev/sda1 as root, and with
/dev/sda2 as my swap.

I finish the install, yum update, and then I want to make the mirrors.

I copy the partition table from one disk to the other:

# sfdisk -d /dev/sda | sfdisk /dev/sdb

I create my metadevices:

# mdadm -Cv -l1 -n2 /dev/md1 /dev/sdb1 missing
# mdadm -Cv -l1 -n2 /dev/md2 /dev/sdb2 missing

I create my filesystems:

# mkfs.ext3 /dev/md1
# mkswap /dev/md2

I change the /etc/fstab to use /dev/md1 for / and /dev/md2 for swap.

I change the /etc/grub.conf to use /dev/md1 for the root= parameter on my 
kernel.

I build myself a new initrd for the kernel I want to boot.

I copy the contents of / over to the one-armed mirror:

# cd /
# mnt /dev/md1 /mnt/md1
# tar cfpl - . | ( cd /mnt/md1 ; tar xfp -)
# umount /mnt/md1
# sync

I run grub just in case:

# grub
> device (hd0) /dev/sda
> root (hd0,0)
> setup (hd0)

I reboot, expecting that the system will find /dev/md1 and use it as
its root... but it doesn't.  Digging around in hobbled mode (changing
the root= parameter in grub to /dev/sda1 instead of /dev/md1) shows
that /dev/md1 doesn't get assembled, therefore it doesn't get mounted.

Can anyone tell me what I've done wrong?

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpJPbmSHZizV.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Plus PHP5 upgrade.

2007-09-24 Thread David Mackintosh
On Mon, Sep 24, 2007 at 01:25:21PM -0400, David Mackintosh wrote:
> I have some users who have a 64-bit CentOS 4.x install (current),
> which was installed with @Everything and then some annoying packages
> strategically removed (mrtg, pegasus*, mailman...) and they have
> decided they have a need for php5.  
 
So I browsed back through the previous day's CentOS list traffic, and
I find an email that sounds suspiciously close to my problem, with
advice to check out

  http://wiki.centos.org/Repositories/CentOSPlus/CentOSWebStack

So I have followed those recommendations about the
yum-priorities-plugin and now I'm in a deeper hole than I was when I
started: 

--> Finished Dependency Resolution
Error: Missing Dependency: php = 4.3.9-3.22.9 is needed by package php-pear
Error: Missing Dependency: perl(:MODULE_COMPAT_5.8.8) is needed by package 
perl-DBD-Pg
Error: Missing Dependency: perl(:MODULE_COMPAT_5.8.8) is needed by package 
perl-DBD-MySQL

If anyone has any advice about either situation I'd appreciate it but
I may have to resort to uninstalling everything and starting again.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpkPy6pp2EES.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS Plus PHP5 upgrade.

2007-09-24 Thread David Mackintosh
Hi Folks,

I have some users who have a 64-bit CentOS 4.x install (current),
which was installed with @Everything and then some annoying packages
strategically removed (mrtg, pegasus*, mailman...) and they have
decided they have a need for php5.  

I find on the web this instruction for doing this:

 http://www.centos.org/centos/4/centosplus/Readme.txt

So I try to do this, and I get:

# rpm -e php-domxml
# yum --enablerepo=centosplus upgrade php*
[...]
--> Processing Dependency: php = 4.3.9-3.22.9 for package: php-pear
--> Finished Dependency Resolution
Error: Missing Dependency: php = 4.3.9-3.22.9 is needed by package php-pear

So I try to remove this blocking package:

# rpm -e php-pear
error: Failed dependencies:
php-pear is needed by (installed) php-4.3.9-3.22.9.x86_64

I try to get cute:

# rpm -e --force php-pear
rpm: only installation, upgrading, rmsource and rmspec may be forced

(Heh.)

So I can't be the first person to go down this road.  Can anyone provide a
hint as to how to get out of the hole I've dug for myself?

Thanks for your time.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpbuB07G0ghG.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RAID storage - SATA, SCSI, or Fibre Channel?

2007-08-21 Thread David Mackintosh
On Mon, Aug 20, 2007 at 04:23:49PM -0400, Scott Ehrlich wrote:
> I have a Dell PowerEdge 2950 and am looking to add more storage.   I know a 
> lot of factors can go into the type of answer given, but for present and 
> future technology planning, should I look for a rack of SATA, SCSI, or 
> fibre channel drives?Maybe I'm dating myself with fibre channel, and 
> possibly SCSI?
> 
> I may be looking to add a few TB now, and possibly more later.

If you can afford the bucks, get yourself a storage appliance like
the Network Appliance filer.  They can do nfs much better than a
generic Linux system.  NetApps will give you the ability to do nfs
and iSCSI-over-ethernet out of the box, and can do CIFS (ie windows
SMB sharing) for an additional cost.  Depending on the unit you pick
they scale much more easilly and much further than a linux system
can, and come with practically set-and-forget reliability and
support.  

We've done NetApps for years, from the 700 series, 900 series, and
are deploying a baby 270 with 3TB (a single shelf!) that has the
potential to grow to 14TB.

That said, you _pay_ for all that ability.  If cost is a factor
(and it rarely isn't) then this is probably more than you will
want to spend.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpL1nypIXZ1P.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Diskless client from system-config-netboot doesn't boot.

2007-08-21 Thread David Mackintosh
On Mon, Aug 20, 2007 at 10:14:51AM -0400, R P Herrold wrote:
> On Mon, 20 Aug 2007, Sophana wrote:
> 
> >David Mackintosh a écrit :
> 
> >>I've followed a set of instructions I found on
> >>http://www.linuxtopia.org/online_books/centos_linux_guides/centos_enterprise_linux_sysadmin_guide/ch-diskless.htmli
> >>which describes using system-config-netboot to set up PXE booting.
> 
> >I just can say that I had the same problem with centos 4.5.
> >Seems that centos is a little buggy on this.
> 
> and which bug is that again in the centos bug tracker?

I personally didn't enter a bug, as my research on the subject showed
a lot of discussion in the Fedora distro as to what this tool was
really supposed to be doing.  It isn't included in the upstream v5
release, but is due to get re-included at a later time once things
are sorted out.

I think this is rather like the Xen offering -- the bare bones of a
good/useful idea that needs more work before it's ready for general
use.  I'm sure it will be usable in the future, just not today.

I have access to, but have not tried, the upstream product.  If I get
a chance I will and if it functions differently than the CentOS
offering I will enter a bug; any other problems are more likely
upstream problems.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpvJirQ0rc9h.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Diskless client from system-config-netboot doesn't boot.

2007-08-03 Thread David Mackintosh
Hi folks,

I've followed a set of instructions I found on
http://www.linuxtopia.org/online_books/centos_linux_guides/centos_enterprise_linux_sysadmin_guide/ch-diskless.htmli
which describes using system-config-netboot to set up PXE booting.  

I used a CentOS-4.3 install (custom, all options de-selected, then
anaconda-busybox installed after the fact) as a reference/base. I
followed the instructions, extrapolating a bit as the window defining
the diskless client has more options than those presented in the
example.

When I boot the PXE client, it does the pivot root operation, and
finally concludes with: 

SELinux: Disabled at runtime 
SELinux: Unregistering netfilter hooks

...at which point it hangs for ever.

I have tried performing a yum -y update on my reference system, then
recreating the root mount point, but it fails the same way.  

I should probably mention that both the reference and diskless client
are identical hardware, and that the hardware has successfully PXE
booted a diskless OS (a RedHat 8.0 as it happens) in the past.  

The lack of any information on the web implies that I'm doing
something trivially incorrect, can anyone tell me what it is?  

Thanks for any hints or pointers you can provide.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpvIFGr5JRt6.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Virtualization question

2007-07-07 Thread David Mackintosh
On Sat, Jul 07, 2007 at 08:55:34AM -0400, William Warren wrote:
> I want to use Centos5 as my host os and virtualize a windows server on 
> it.  My question is..do i have to be at the machine to setup the windows 
> server inside the virtual server since windows 2k3 is gui based or can i 
> do this remotely somehow?

If you install VMware Server, you can install remotely since all
console access to the VMs is done through the Console application. 
This is how I did my Windows XP installation.

I can't speak to Xen.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpEYoKmwzKWp.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Justin Morgan is out of the office.

2007-06-19 Thread David Mackintosh
On Tue, Jun 19, 2007 at 12:48:26AM +0200, Ralph Angenendt wrote:
> Scott Silva wrote:
> > Justin Morgan spake the following on 10/16/2006 11:01 AM:
> > > I will be out of the office starting  17/10/2006 and will not return until
> > > 30/10/2006.
> > > 
> > > I will respond to your message when I return.
> > Justin Morgan is probably going to be killed from the list also!
> 
> How about people who respond to out-of-office-mails?
> 
> 

..or people who prolong these off topic threads by saying "please
don't prolong these off topic threads by replying to them"?

Oh wait, that was me.

-- 
 /\oo/\
/ /()\ \ David Mackintosh | 
 [EMAIL PROTECTED]  | http://www.xdroop.com


pgpxPPms2zLi7.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos