Re: [CentOS] SSH attacks from china

[luc...@lastdot.org]

On Wed, Jul 29, 2009 at 9:10 PM, Sorin Srbu wrote:
>>-Original Message-
>>From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
>>Behalf Of luc...@lastdot.org
>>Sent: Sunday, July 26, 2009 11:27 PM
>>To: CentOS mailing list
>>Subject: Re: [CentOS] SSH attacks from china
>>
>>Vietnam and Indonezia are also suspects in my list.
>>The biggest problem with this approach is that even tho I could ban
>>whole Asia and Russia, a significant part of the attacks do not
>>originate from there, but from countries like USA, UK, etc, controlled
>>by hackers (also) from the aforementioned areas...
>>The latest case of password breaking I had to deal with was from an
>>USA IP address.. they managed to insert an iframe in all index.html
>>and index.php files on the respective FTP account. The iframe however
>>was pointing to a .ru website hosted in France.. Isn't globalization
>>fun?!
>>Anyway, just banning ranges of IP addresses may not enough, so to rely
>>on this _only_ would be careless.
>
> Exactly, that was what I trying to get at!
>
> So you're not going to ban all ip addresses from the US I take it, since
> most spam, crapware, attacks and whatnot originate from there, as you point
> out? ;-)

I might just do that, but of course, for a certain range of ports.
Actually a better idea would be to just allow connections on the most
sensitive services only from our country since we do no business with
people abroad. It would be interesting to see which method is more
performant, iptables+ipset or iptables-geoip.

> --
> /Sorin
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] BIND vulnerability

[luc...@lastdot.org]

On Wed, Jul 29, 2009 at 6:36 PM, Karanbir Singh wrote:
> On 07/29/2009 06:29 PM, luc...@lastdot.org wrote:
>>> Those looking for patched bind for Centos 4.x may use packages I have
>>> built with CVE-2009-0696 patch.
>>> http://fs12.vsb.cz/hrb33/el4/hrb/testing/i386/repoview/letter_b.group.html
>>> http://fs12.vsb.cz/hrb33/el4/hrb/testing/x86_64/repoview/letter_b.group.html
>
> there are packages linked to people.redhat.com that point at the ones in
> QA at Red Hat at the moment, I would recommend you use those

Ok, thanks, but
where exactly am I to see something useful on people.redhat.com? I can
only see an image.

>
> --
> Karanbir Singh : http://www.karan.org/  : 2522...@icq
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] BIND vulnerability

[luc...@lastdot.org]

On Wed, Jul 29, 2009 at 5:59 PM, David Hrbáč wrote:
> RedShift napsal(a):
>> According to a commenter, this should provide a temporary countermeasure:
>>
>> iptables -A INPUT -p udp --dport 53 -j DROP -m u32 --u32 '30>>27&0xF=5'
>>
>> Haven't tested it, would like to know the results...
>>
>
> Well, good point, but Centos does not ship libipt_u32.so. Even more
> Centos 4.x is now undergoing rebuild process, so no updates even
> security updates are being released. Which is something I can accept.
>
> Those looking for patched bind for Centos 4.x may use packages I have
> built with CVE-2009-0696 patch.
> http://fs12.vsb.cz/hrb33/el4/hrb/testing/i386/repoview/letter_b.group.html
> http://fs12.vsb.cz/hrb33/el4/hrb/testing/x86_64/repoview/letter_b.group.html

Well done, David but there's a little problem with those rpms:
Preparing...### [100%]
package bind-libs-9.2.4-30.el4_7.2 (which is newer than
bind-libs-9.2.4-30.el4.hrb.2.1) is already installed
package bind-utils-9.2.4-30.el4_7.2 (which is newer than
bind-utils-9.2.4-30.el4.hrb.2.1) is already installed
package bind-9.2.4-30.el4_7.2 (which is newer than
bind-9.2.4-30.el4.hrb.2.1) is already installed
package bind-chroot-9.2.4-30.el4_7.2 (which is newer than
bind-chroot-9.2.4-30.el4.hrb.2.1) is already installed
Maybe you can bump the version a bit.

>
> Regards,
> David Hrbáč
>
>
>
>
>
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Compile linux kernel problem

[luc...@lastdot.org]

On Mon, Jul 27, 2009 at 10:35 AM, Hanmo wrote:
> Hello   everyone,
>
> I compiled the linux kernel  2.6.18.8 in CentOS 5.3,  but when make install,
> the system says:
>
> WARNING: No module sata_nv found for kernel 2.6.18.8, continuing anyway
> WARNING: No module sata_nv found for kernel 2.6.18.8, continuing anyway
>
> Just if I installed RHEL 5 version's nforce driver, it still shows these
> warning message.  When reboot,  it cannot load the system.  The linux kernel
> package is downloaded from kernel.org directory.
>
> I tried and google it,  but I could not find the answer,  does anyone can help
> me?
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Please visit this page:
http://wiki.centos.org/HowTos#head-c4dbf9ecb355694c78175c7eaad46a2472a3849b
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSH attacks from china

[luc...@lastdot.org]

On Sun, Jul 26, 2009 at 4:31 PM, Kai Schaetzl wrote:
> Sorin Srbu wrote on Sat, 25 Jul 2009 19:40:28 +0200:
>
>> What if you have legit users from China and Korea trying to connect to your
>> server(s)?
>
> What if he does not? See, you always use the solution that fits you and your
> setup/environment/needs.
>
> Kai

Indeed!

Vietnam and Indonezia are also suspects in my list.
The biggest problem with this approach is that even tho I could ban
whole Asia and Russia, a significant part of the attacks do not
originate from there, but from countries like USA, UK, etc, controlled
by hackers (also) from the aforementioned areas...
The latest case of password breaking I had to deal with was from an
USA IP address.. they managed to insert an iframe in all index.html
and index.php files on the respective FTP account. The iframe however
was pointing to a .ru website hosted in France.. Isn't globalization
fun?!
Anyway, just banning ranges of IP addresses may not enough, so to rely
on this _only_ would be careless.

>
> --
> Kai Schätzl, Berlin, Germany
> Get your web at Conactive Internet Services: http://www.conactive.com
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSH attacks from china

[luc...@lastdot.org]

On Sun, Jul 26, 2009 at 3:02 PM, Robert wrote:
>
> you say you banned them in the gateway for ssh and ftp...
>
> what type of gateway?
>
> would you share the place you got the info from and/or the ip blocks please?
>
> thanks
>
>  - rh
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

I used iptables+ipset (the gateway runs linux 2.6) and the list of IPs
is from here:

http://ip.ludost.net/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSH attacks from china

[luc...@lastdot.org]

On Sat, Jul 25, 2009 at 6:40 PM, Sorin Srbu wrote:
>>-Original Message-
>>From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
>>Behalf Of luc...@lastdot.org
>>Sent: Friday, July 24, 2009 1:09 PM
>>To: CentOS mailing list
>>Subject: Re: [CentOS] SSH attacks from china
>>
>>I banned all China and Korea in my gateway :) (not for all ports, only
>>for ssh & ftp).
>
> That's the simple solution, and one that has been argued (on the 'net
> generally) to be a very blunt tool at that.
>
> What if you have legit users from China and Korea trying to connect to your
> server(s)?
> --
> /Sorin

You can imagine I'd not banned CN if i knew I had legit users there.
So far no complaints from my clients.. and besides, I only blocked ssh
and ftp ports.. The chinese can still send me mail and browse my
websites. ..Thinking if i should ban them from pop3 and imap as well.

>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] rpm

[luc...@lastdot.org]

On Fri, Jul 24, 2009 at 2:52 PM, David Leon wrote:
> Hi folks
>
> I'm trying to install amavisd-new on Centos 5.3. There is a lot of
> failed dependencies errors when I try to install it. My question is,
> there is a way to automatically get all the rpm dependencies I need
> and get them saved somewhere in my hard drive for future
> installations? I'm behind a squid proxy.
>
> Thanks in advance.
>
> David
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Yep, add Dag's repo. Latest amavisd-new is there, with all the dependencies:
http://dag.wieers.com/rpm/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSH attacks from china

[luc...@lastdot.org]

On Fri, Jul 24, 2009 at 12:04 PM, Andreas Rehmer wrote:
> Hi
>
> i am using the following way to dissallow ssh connects without having the
> Problem of specific IPs or something else.
>
> Before you get access to the machine you must visit a webpage protected by
> httpauth. This start a small script that put the Remote Adress into a
> list. Only if your ip is on the list and not older than 5 min. you gain
> access via ssh.
>
> For this i used only iptables the Skript and apache.
> The only Problem is when the httpd hangs on.
>
> If you want more Information write me.
>
> Reg. Rehmer
>
> reh...@teltarif.de
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

I banned all China and Korea in my gateway :) (not for all ports, only
for ssh & ftp).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Limit RAM used by a perl script

[luc...@lastdot.org]

On Mon, Jul 20, 2009 at 4:28 PM, Sean Carolan wrote:
> I have a perl script which runs from a cron job.  How would you limit
> the amount of RAM that this script is allowed to consume?  Is there a
> ulimit setting that will accomplish this?  If so does ulimit have to
> be run each time the script is run, or is there a way to set it
> permanently?
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

If you run it as a regular user, then maybe you can check out
/etc/security/limits.conf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cloud Computing

[luc...@lastdot.org]

On Fri, Jul 17, 2009 at 9:36 PM, Matt wrote:
> Is anyone creating a cloud based on Centos yet?
>
> Ubuntu seems to be quite active there:
>
> http://www.ubuntu.com/products/whatisubuntu/serveredition/cloud/uec
>
>
> Matt
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Centos will/is be fully supported by cloudmin (made by the same guys
who made webmin).
http://www.virtualmin.com/cloudmin-offer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Initial backup prior to daily rsync backups

[luc...@lastdot.org]

On Thu, Jul 16, 2009 at 4:01 PM, David Fix wrote:
> Simple...  :)  Just rsync to the external drive, then rsync from the drive
> to your local server.  :)
>
> --
> David Fix
> Senior Systems Administrator
> Mr. X Inc.
> 35 McCaul Street, Ste. #100
> Toronto, ON  M5T 1V7
> T:  (416) 595-6222, x 241
> F:  (416) 595-9122
> E:  dav...@mrxfx.com
>
>
> - Original Message -
> From: "Jeff Gregor" 
> To: centos@centos.org
> Sent: Thursday, July 16, 2009 10:52:46 AM GMT -05:00 US/Canada Eastern
> Subject: [CentOS] Initial backup prior to daily rsync backups
>
> I have a few CentOS 5.3 servers out at remote sites that connect over a
> satellite link (a painfully slow satellite link). There's a time period
> in the wee hours of the morning when the satellite provider doesn't
> stiff me for bandwidth, and when the link is generally idle, where I
> want to use rsync to back up files to my local server. I've got rsync
> working in in combination with cron and ssh, and that process works fine.
>
> The problem is getting the initial copy of the files over to the local
> server so that rsync can just deal with files changed during the day
> (there tend to not be too many changes -- mostly office-type documents,
> few pictures, that sort of thing, so limited bandwidth is not a
> problem). If I run rsync now, however, it is trying to copy over all the
> files since none exist on the local servers, and by my calculations
> copying that 160gb worth of data should be done some time in
> mid-February, 2010.
>
> I can make the 4-hour round trip out to the remote site with a USB hard
> drive and copy the files that way, but my concern is how to get the file
> structure, timestamps, permissions, etc copied exactly from the remote
> server > USB drive > local server so that rsync can run most efficiently
> (and not have to do a compare on every single file the first time it runs.)
>
> So the question is, how do I copy the files from the remote server back
> to my local server in a way that will allow rsync, once the copy is
> complete, to start dealing just with the daily changes in the most
> efficient way possible?
>
> Thanks!
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

You might want to read http://rdiff-backup.nongnu.org/docs.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NIC traffic monitoring, recording and reporting software?

[luc...@lastdot.org]

On Wed, Jul 15, 2009 at 5:53 PM, nate wrote:
> Les Mikesell wrote:
>
>> There are several tools that will collect interface traffic data via
>> SNMP and record it so you can graph, show high/low/average values over a
>> time span, etc.  Cacti (in the epel repo) is probably the easiest to set
>> up, OpenNMS (http://www.opennms.org) probably the most complete.  These
>> could also get their data from a port on a managed switch or router if
>> that makes it easier to show the connections you need to split out.
>
> One thing to note for billing, often times bandwidth is billed on
> a 95th percentile level, and cacti is not good for that if you want
> accuracy.
>
> We use RTG(in my research last year it seemed RTG was the most
> frequently mentioned tool that was best for this purpose) to measure
> our main pipes for billing comparison purposes, matches much closer
> to what the ISPs say, and cacti is quite a bit off. I wouldn't rely
> on RTG for normal network monitoring(UI isn't that good etc), but
> for links where billing information is important at least for 95th
> percentile, don't rely on cacti alone.
>
> Note RTG is not the same as MRTG, though I think I recall seeing RTG
> was inspired by MRTG.
>
> Not sure how OpenNMS handles that sort of thing.
>
> Not to knock cacti, I use it extensively, currently have a server
> collecting more than 20 million points of data a day.
>
> nate
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

+1 for RTG
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] sFTP (client) RPM for CentOS 5.3 (32 bit) and/or putty-tools

[luc...@lastdot.org]

On Sun, Jul 12, 2009 at 11:03 PM, Lanny Marcus wrote:
> I installed gFTP but apparently it does not handle the sFTP protocol.

Yes, it does, it's called SSH2 in gftp, but it's actually calling for
the sftp subsystem.

> I also installed the FireFTP Add On for the Firefox browser, but when
> I tried to connect to the server, it says that I need putty-tools. I
> have the rpmforge and epel  repositories configured but yum did not
> find putty-tools. Is there an RPM for a client program for gFTP or
> putty-tools? If so, in which repository?    TIA!
>
> 1443 packages excluded due to repository priority protections
> Setting up Install Process
> Parsing package install arguments
> No package putty-tools available.
> Nothing to do
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vsftpd not able to log in

[luc...@lastdot.org]

On Fri, Jul 10, 2009 at 3:17 PM, Eugene Vilensky wrote:
> Hi folks,
> I can't seem to log into my system via
> vsftpd.  All other services using PAM are fine...Am I missing something simple?
> ftp> user
> (username) user
> 331 Please specify the password.
> Password:
> 530 Login incorrect.
>
>
> # getenforce
> Permissive
> here is the event in /var/log/audit/audit.log:
> type=USER_AUTH msg=audit(1247235151.569:9781): user pid=21052 uid=0 auid=0
> subj=root:system_r:ftpd_t:s0 msg='PAM: authentication acct="user" :
> exe="/usr/sbin/vsftpd" (hostname=hostname, addr=1.2.3.4, terminal=ftp
> res=failed)'
>  cat /etc/pam.d/vsftpd
> #%PAM-1.0
> session    optional     pam_keyinit.so    force revoke
> auth       required pam_listfile.so item=user sense=deny
> file=/etc/vsftpd/ftpusers onerr=succeed
> auth       required pam_shells.so
> auth       include system-auth
> account    include system-auth
> session    include system-auth
> session    required     pam_loginuid.so
> # grep local /etc/vsftpd/vsftpd.conf
> local_enable=YES
> local_umask=022
> chroot_local_user=YES
> # getsebool -a | grep ftp
> allow_ftpd_anon_write --> off
> allow_ftpd_full_access --> off
> allow_ftpd_use_cifs --> off
> allow_ftpd_use_nfs --> off
> allow_tftp_anon_write --> off
> ftp_home_dir --> on
> ftpd_disable_trans --> off
> ftpd_is_daemon --> on
> httpd_enable_ftp_server --> off
> tftpd_disable_trans --> off
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

Is the user's shell listed in /etc/shells?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Add instantly active local user accounts *with* password using useradd -p option ?

[luc...@lastdot.org]

On Thu, Jul 9, 2009 at 7:32 AM, Niki Kovacs wrote:
> Hi,
>
> I need to setup a load of user accounts on a series of machines, for
> testing purposes. I'm using a script to do this, but the only problem I
> have so far: I have to activate them all manually by doing passwd user1,
> passwd user2, passwd user3, etcetera. The useradd man page mentions a -p
> option to define a password, but I can't seem to get this to work.
> Here's what I'd like to be able to do:
>
> # useradd -c "Gaston Lagaffe" -p abc123 -m glagaffe
>
> And put that line in a script, so the account is *instantly* activated.
> I tried it, but to no avail. Looks like there's some burning loop I have
> to jump through first :o)
>
> No security considerations here for the moment, since it's for testing.
>
> Any idea how this works?
>
> Niki
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

You can't set passwd like that. Rather try making a script which you
can feed the user pass and other info. You can set password from shell
like this:

echo 123abc|passwd --stdin username
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] hardware requirements for Centos 2

[luc...@lastdot.org]

On Mon, Jul 6, 2009 at 8:01 PM,  wrote:
> The RAM is a little on the low side, 512M is the recommended to run a
> GUI at the moment I think but 128M is all that's required for Command
> line, and GUI would probably run but might be a little slow to respond.
> But otherwise this machine should do run Centos 5 fine. The CPU and HD
> are more then adequate
>
> Ubuntu is the anther distro to play with if you want to play with a
> non-RPM based distro. With all the distro's I've played with Centos 5
> and the current Ubuntu 9 (http://www.ubuntu.com/ ) are about the easiest
> to get up and running.
>
> Both of these distro's have a nice constant stream of free software
> updates/upgrades being feed into them so having an network connection
> available helps.
>
>
>
> -Original Message-
> From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
> Behalf Of Dmitry
> Sent: Monday, July 06, 2009 11:45 AM
> To: CentOS mailing list
> Subject: [CentOS] hardware requirements for Centos 2
>
> Hi.
>
> Could you please give me advice about issue described below.
>
> My friends have to use a PC with old hardware for a few months. They've
> got 128MB of RAM, 20 GB hard drive; Pentium 3 processor.
>
> At the moment they have windows xp running on it, but it's very slow.
>
> What are the system requirements for CentOS 2 or any other version of
> this OS that may be suitable?
>
> Can you recommend any other Linux distro that would be easy to install
> and to use?
>
> Thanks in advance for any input.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

I can smell a flame startin'
Under no circumstances should you install Ubuntu on that PC, it'll
work slower than a snail.
I used to have a similar PC (also with 128 ram), and the fastest
distros that run on it were Slackware and VectorLinux (without heavy
DE's like KDE or Xfce). Even so, 128 ram was painful, 256 was quite
almost enjoyable so I realy recommend to make an effort to buy some
more ram.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Trouble running 'alsamixer' as normal user on headless box with minimal system

[luc...@lastdot.org]

On Mon, Jul 6, 2009 at 3:41 PM, Niki Kovacs wrote:
> luc...@lastdot.org a écrit :
>
>> Yeah, unfortunatelly I don't know either. Never used systems for such
>> thing, it's probably a udev issue. Easy solution is to chown user
>> /dev/dsp and then add this command to rc.local.
>
> OK, I followed your quick & dirty hack. I have to be root to set the
> volume level, but I can read OGG streams with ogg123 as user OK. I still
> get the series of strange error messages on startup, but at least, it
> works.
>
> Thanks !
>
> Niki
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Great. Sorry I couldn't come with a more elegant solution.
Maybe some of the more hardcore users on this list can advise better.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Trouble running 'alsamixer' as normal user on headless box with minimal system

[luc...@lastdot.org]

On Mon, Jul 6, 2009 at 2:42 PM, Niki Kovacs wrote:
> luc...@lastdot.org a écrit :
>>
>> ls -al /dev/{dsp,audio} ?
>
> On my laptop:
>
> [kikino...@lifebook ~]$ ls -al /dev/{dsp,audio}
> crw--- 1 kikinovak root 14, 4 jui  6 07:32 /dev/audio
> crw--- 1 kikinovak root 14, 3 jui  6 07:32 /dev/dsp
>
> And on the jukebox:
>
> [kikino...@jukebox ~]$ ls -al /dev/{dsp,audio}
> crw--- 1 root root 14, 4 jui  6 15:23 /dev/audio
> crw--- 1 root root 14, 3 jui  6 15:23 /dev/dsp
>
> Uh oh. So here's the core of the problem.
>
> Now as far as I understand, it's useless to change the owner of these
> with a simple chown, as the device nodes get dynamically created by udev
> (correct me if I'm wrong). I *think* I have to edit some udev rule file
> to change this, but this is as far as my knowledge goes.
>
> (This is strange... I can't remember doing anything like this to the
> device files... how comes the ownership is different on a standard
> desktop system?)
>
> Niki
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Yeah, unfortunatelly I don't know either. Never used systems for such
thing, it's probably a udev issue. Easy solution is to chown user
/dev/dsp and then add this command to rc.local.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Trouble running 'alsamixer' as normal user on headless box with minimal system

[luc...@lastdot.org]

On Mon, Jul 6, 2009 at 2:24 PM, Niki Kovacs wrote:
> Hi,
>
> I just transformed an old Pentium III 500 into a headless jukebox. It's
> installed in the basement, near the stereo. There's only a base CentOS
> system on it (GNOME unchecked, package customization checked and then
> everything unchecked). From there on, I just installed the ALSA utils,
> and vorbis-tools. The machine is only supposed to do one thing (and to
> do it well, UNIX philosophy :oD): fetch an audio stream (produced by
> MPD/Icecast upstairs on a big PC) and then output it from the soundcard
> to the AUX IN from the stereo.
>
> I have a partial - and near-total - success, in that everything runs
> fine... as root user. Whenever I try to run alsamixer as a normal user
> on that box, I get the following error message:
>
> [kikino...@jukebox ~]$ alsamixer
>
> alsamixer: function snd_ctl_open failed for default: No such file or
> directory
>
> Something similar happens with ogg123, which runs fine as root, but
> produces the following error message as plain user:
>
> [kikino...@jukebox ~]$ ogg123 http://babasse:8000/jukebox.ogg
> ALSA lib confmisc.c:768:(parse_card) cannot find card '0'
> ALSA lib conf.c:3513:(_snd_config_evaluate) function
> snd_func_card_driver returned error: Aucun fichier ou répertoire de ce type
> ALSA lib confmisc.c:392:(snd_func_concat) error evaluating strings
> ALSA lib conf.c:3513:(_snd_config_evaluate) function snd_func_concat
> returned error: Aucun fichier ou répertoire de ce type
> ALSA lib confmisc.c:1251:(snd_func_refer) error evaluating name
> ALSA lib conf.c:3513:(_snd_config_evaluate) function snd_func_refer
> returned error: Aucun fichier ou répertoire de ce type
> ALSA lib conf.c:3985:(snd_config_expand) Evaluate error: Aucun fichier
> ou répertoire de ce type
> ALSA lib pcm.c:2184:(snd_pcm_open_noupdate) Unknown PCM default
> === Impossible de charger le pilote par défaut, et aucun autre pilote
> n'est indiqué dans le fichier de configuration. Terminaison.
>
>
> Now I guess there must be something missing, because on my other
> machines (with a full-blown desktop installed), alsamixer runs fine as
> normal user.
>
> Any idea what could be wrong here?
>
> Cheers from the hot south of France,
>
> Niki
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

ls -al /dev/{dsp,audio} ?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [Fwd: Re: Getting started with NFS]

[luc...@lastdot.org]

On Sat, Jul 4, 2009 at 9:47 PM, Niki Kovacs wrote:
> Thanks everybody for the detailed hints and answers, on the list as well
> as offlist.
>
> I got myself a second "sandbox" PC today, and I just installed two
> vanilla CentOS 5.3 systems on them. It'll be much easier to figure out
> the innards of NFS without the constantly nagging fear of breaking
> something on my production PCs. I'll eventually keep posting follow-ups
> to my investigations.
>
> cheers,
>
> Niki
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

This is a circumstance where virtualization would help.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ffmpeg and zoneminder install problems

[luc...@lastdot.org]

On Fri, Jul 3, 2009 at 9:41 PM, Gregory P. Ennis wrote:
> On Fri, 2009-07-03 at 15:15 -0500, Gregory P. Ennis wrote:
>> On Fri, 2009-07-03 at 20:44 +0100, luc...@lastdot.org wrote:
>> > On Fri, Jul 3, 2009 at 7:23 PM, Gregory P. Ennis wrote:
>> > > CentOs zoneminder users,
>> > >
>> > > I have been trying to install zoneminder on Centos 5.3
>> > > (2.6.18-128.1.16.el5xen) and have hit a brick wall with ffmpeg
>> > > which zoneminder has as a dependancy.
>> > >
>> > > There were no rpm's in centos or rpmforge so I have followed the
>> > > instructions on the zoneminder website for a CentOs install.
>> >
>> > ffmpeg is in rpmforge, look more carefully.
>> > rpm -Uhv 
>> > http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
>> > yum install ffmpeg
>> >
>> > rpm -qi ffmpeg:
>> >
>> > Name        : ffmpeg
>> > Version     : 0.4.9
>> > Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
>> >
>> > >
>> > > I have posted a note on the zoneminder list, but have not been able to
>> > > get any takers to assist me.  I am not a C programer so I have a lack of
>> > > understanding as to how to proceed.
>> > >
>> > > I have followed the steps outlined on zoneminder site as to how to
>> > > install on Centos 5.3
>> > >
>> > > http://www.zoneminder.com/wiki/index.php/CentOS
>> > >
>> > > The sequence step I have not been able to pass beyond with these
>> > > instructions is the following :
>> > >
>> > > svn checkout -r 11879 svn://svn.mplayerhq.hu/ffmpeg/trunk ffmpeg
>> > > cd ffmpeg/
>> > > ./configure
>> > > make
>> > >
>> > > When I execute the make command I get the following that results in an 
>> > > Error message.
>> > >
>> > > I noticed that some of you have been able to use zoneminder on Centos
>> > > 5.3, Can you help me get zoneminder installed.
>> > >
>> > > Thank you much,
>> > >
>> > > Greg Ennis
>> > > P.S.  here is the output of make
>> > >
>> > >
>>
>> Lucian,
>>
>> Thanks for your help.  What I should have said was that zoneminder does
>> not appear to be in the repositories.  Unfortunately, I obviously did
>> not look for ffmpeg.
>>
>> In trying to bypass my problem, I went to the ffmpeg website and
>> downloaded their source code and was able to get it installed.  However,
>> I still can not get zoneminder to install.  I wonder if zoneminder is
>> expecting something that would have been provided by the rpm install
>> instead of what I did?
>>
>> Greg
>> ___
>
> Lucian,
>
> I performed the rpm install of ffmpeg after moving the directories and
> files related to the previous ffmpeg install and everything went fine.
>
> When I tried to complie Zoneminder 1.23 or 1.24 I get the following
> error:
>
> zm_mpeg.cpp:325: error: ‘img_convert’ was not declared in this scope
> make[2]: *** [zm_mpeg.o] Error 1
> make[2]: Leaving directory `/root/software/zm/ZoneMinder-1.24.2/src'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/root/software/zm/ZoneMinder-1.24.2'
> make: *** [all] Error 2
>
> any ideas?
>
> Greg
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Whenever you need to install software, first search for rpm versions
of it. A lot of good stuff is in Dag's repository.
This time rpm.pbone.net told me there are rpms of zoneminder in
Karan's repository.

Go to http://centos.karan.org/el5/extras/testing/i386/RPMS/ and search
for zoneminder (or go to the x86_64 repo if you're on x86_64 os).

Good luck!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] software raid1 syncing

[luc...@lastdot.org]

On Fri, Jul 3, 2009 at 9:15 PM, Steven Vishoot wrote:
>
> hello all,
>
> I have a setup that is raid 1 and put the mirrored drive back in and now it 
> is still showing as degraded saying: raid1: raid set md6 active with 1 out of 
> 2 mirrors with this message on all the raids.i know i am wrong by saying this 
> but i thought putting in the driving and rebooting would start the re syncing 
> itself. what do i have to do to add this back in, i am so confused with this 
> process.
>
> centos 4.x
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Well, just putting a new disk drive in the place of the bad one
doesn't cut it. You have to recreate partition table and then add the
partitions to the drive.
e.g.
sda = the old disk in the raid that has not failed
sdb = the newly added disk
dd if=/dev/sda of=/dev/sdb bs=512 count=1

That'll replicate the partition table and mbr to the new disk.

Then starting addinf the new partitions to the linux raid:
mdadm -a /dev/sdb1 /dev/md0 and so on, depending what your setup is.
Do a:
cat /proc/mdstat and see what partitions are added to which raid.
Alternatively to a google search for howtos (e.g.
http://www.gagme.com/greg/linux/raid-lvm.php ) and learn how to manage
linux raid so you dont fsck up your system.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ffmpeg and zoneminder install problems

[luc...@lastdot.org]

On Fri, Jul 3, 2009 at 7:23 PM, Gregory P. Ennis wrote:
> CentOs zoneminder users,
>
> I have been trying to install zoneminder on Centos 5.3
> (2.6.18-128.1.16.el5xen) and have hit a brick wall with ffmpeg
> which zoneminder has as a dependancy.
>
> There were no rpm's in centos or rpmforge so I have followed the
> instructions on the zoneminder website for a CentOs install.

ffmpeg is in rpmforge, look more carefully.
rpm -Uhv 
http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
yum install ffmpeg

rpm -qi ffmpeg:

Name: ffmpeg
Version : 0.4.9
Vendor: Dag Apt Repository, http://dag.wieers.com/apt/

>
> I have posted a note on the zoneminder list, but have not been able to
> get any takers to assist me.  I am not a C programer so I have a lack of
> understanding as to how to proceed.
>
> I have followed the steps outlined on zoneminder site as to how to
> install on Centos 5.3
>
> http://www.zoneminder.com/wiki/index.php/CentOS
>
> The sequence step I have not been able to pass beyond with these
> instructions is the following :
>
> svn checkout -r 11879 svn://svn.mplayerhq.hu/ffmpeg/trunk ffmpeg
> cd ffmpeg/
> ./configure
> make
>
> When I execute the make command I get the following that results in an Error 
> message.
>
> I noticed that some of you have been able to use zoneminder on Centos
> 5.3, Can you help me get zoneminder installed.
>
> Thank you much,
>
> Greg Ennis
> P.S.  here is the output of make
>
>
> [r...@sevi ffmpeg]# make
> "/root/software/ffmpeg"/version.sh "/root/software/ffmpeg"
> gcc -fPIC -fomit-frame-pointer -g -Wdeclaration-after-statement -Wall
> -Wno-switch -Wdisabled-optimization -Wpointer-arith -Wredundant-decls
> -Wno-pointer-sign -Wcast-qual -Wwrite-strings -O3
> -I"/root/software/ffmpeg" -I"/root/software/ffmpeg"
> -I"/root/software/ffmpeg"/libavutil -I"/root/software/ffmpeg"/libavcodec
> -I"/root/software/ffmpeg"/libavformat
> -I"/root/software/ffmpeg"/libswscale
> -I"/root/software/ffmpeg"/libavdevice -D_FILE_OFFSET_BITS=64
> -D_LARGEFILE_SOURCE -D_ISOC9X_SOURCE -DHAVE_AV_CONFIG_H -MM vhook/fish.c
> vhook/null.c vhook/watermark.c vhook/drawtext.c vhook/imlib2.c
> vhook/ppm.c version.h | sed 's,^\([a-z]\),vhook/\1,' > .vhookdep
> vhook/drawtext.c:61:10: error: #include expects "FILENAME" or
> 
> vhook/drawtext.c:62:10: error: #include expects "FILENAME" or
> 
> gcc -MM -fomit-frame-pointer -g -Wdeclaration-after-statement -Wall
> -Wno-switch -Wdisabled-optimization -Wpointer-arith -Wredundant-decls
> -Wno-pointer-sign -Wcast-qual -Wwrite-strings -O3
> -I"/root/software/ffmpeg" -I"/root/software/ffmpeg"
> -I"/root/software/ffmpeg"/libavutil -I"/root/software/ffmpeg"/libavcodec
> -I"/root/software/ffmpeg"/libavformat
> -I"/root/software/ffmpeg"/libswscale
> -I"/root/software/ffmpeg"/libavdevice -D_FILE_OFFSET_BITS=64
> -D_LARGEFILE_SOURCE -D_ISOC9X_SOURCE -DHAVE_AV_CONFIG_H ffmpeg.c
> ffserver.c cmdutils.c 1>.depend
> make -C libavutil all
> make[1]: Entering directory `/root/software/ffmpeg/libavutil'
> gcc -DHAVE_AV_CONFIG_H -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE
> -D_ISOC9X_SOURCE -I"/root/software/ffmpeg" -I"/root/software/ffmpeg"
> -I"/root/software/ffmpeg"/libavutil -fomit-frame-pointer -g
> -Wdeclaration-after-statement -Wall -Wno-switch -Wdisabled-optimization
> -Wpointer-arith -Wredundant-decls -Wno-pointer-sign -Wcast-qual
> -Wwrite-strings -O3 -c -o adler32.o adler32.c
> gcc -DHAVE_AV_CONFIG_H -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE
> -D_ISOC9X_SOURCE -I"/root/software/ffmpeg" -I"/root/software/ffmpeg"
> -I"/root/software/ffmpeg"/libavutil -fomit-frame-pointer -g
> -Wdeclaration-after-statement -Wall -Wno-switch -Wdisabled-optimization
> -Wpointer-arith -Wredundant-decls -Wno-pointer-sign -Wcast-qual
> -Wwrite-strings -O3 -c -o aes.o aes.c
> aes.c: In function ‘subshift’:
> aes.c:56: warning: initialization from incompatible pointer type
> aes.c:57: warning: initialization from incompatible pointer type
> aes.c: In function ‘crypt’:
> aes.c:84: warning: passing argument 2 of ‘mix’ from incompatible pointer
> type
> aes.c:85: warning: passing argument 1 of ‘addkey’ from incompatible
> pointer type
> aes.c:85: warning: passing argument 2 of ‘addkey’ from incompatible
> pointer type
> aes.c:85: warning: passing argument 3 of ‘addkey’ from incompatible
> pointer type
> aes.c:87: warning: passing argument 1 of ‘subshift’ from incompatible
> pointer type
> aes.c: In function ‘av_aes_crypt’:
> aes.c:92: warning: passing argument 1 of ‘addkey’ from incompatible
> pointer type
> aes.c:92: warning: passing argument 2 of ‘addkey’ from incompatible
> pointer type
> aes.c:92: warning: passing argument 3 of ‘addkey’ from incompatible
> pointer type
> aes.c:94: warning: passing argument 4 of ‘crypt’ from incompatible
> pointer type
> aes.c:96: warning: passing argument 1 of ‘addkey’ from incompatible
> pointer type
> aes.c:96: warning: passing argument 2 of ‘addkey’ from incompatible
> pointer type
> aes.c:96: warning: p

Re: [CentOS] Configure a local DNS caching nameserver: partial success

[luc...@lastdot.org]

On Thu, Jul 2, 2009 at 11:35 AM, Niki Kovacs wrote:
> Tom Brown a écrit :
>
>> what does you named.conf look like? i am guessing you have it set to
>> only listen on localhost
>>
>> make sure you have a line similar to
>>
>> listen-on port 53 { 192.168.10.1; };
>>
>> and bounce named
>
> I just got it to work. In fact, I deleted the stock caching-nameserver
> package and followed this excellent tutorial:
>
> http://www.madboa.com/geek/soho-bind/
>
> Works great!
>
> Cheers,
>
> Niki
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Here's my working /etc/named.caching-nameserver.conf:
http://pastie.org/531889

Replace 192.168.1.0/24 with your own network.

Cheers
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

[luc...@lastdot.org]

On Thu, Jul 2, 2009 at 10:05 AM, Lorenzo
Quatrini wrote:
> John R Pierce ha scritto:
>
>>
>> now, these commands are NOT persistent, and, AFAIK, RHEL has no
>> provision for `ip route` or rule commands, so I end up sticking this
>> stuff in /etc/rc.d/rc.local or something.
>>
>
> I was facing the same problem some time ago... what is the right place to put
> "ip route" commands and configuration files?
> Does someone have a better place other than rc.local?
> If I put them in rc.local, is there a way to issue a command like "service
> network restart"?
>
> TIA
>
> Lorenzo Quatrini
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Yeah, in /etc/sysconfig/network-scripts/
e.g.
/etc/sysconfig/network-scripts/route-eth0

I got something like: aaa.bbb.ccc.0/24 dev eth0 in there
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Dag's comment at linuxtag

[luc...@lastdot.org]

On Wed, Jul 1, 2009 at 12:10 AM, Ned Slider wrote:
> R P Herrold wrote:
>> On Tue, 30 Jun 2009, Ned Slider wrote:
>>
>>> Rather than dumping *even more work* on the core CentOS project (who are
>>> already clearly struggling to provide even the core distro
>>> at present), ...
>>
>> It may be clear to Ned, but is not the case.
>>
>
> Then we disagree. Others can look and judge for themselves :)
>
>> I wish people not in the know would not purport to
>> characterize CentOS internals, but speculation is a human
>> trait, I guess
>>
>
> Bingo! That's the whole point Russ - members of the Community don't know
> what's going on with *their* Community Enterprise OS because there is no
> dissemination of information.
>
> What I *do* "know" is that 5.3 took ~10 weeks to release, and before
> that 4.7 took ~7 weeks. We are already 6 weeks into the 4.8 release
> cycle with no news of how it's progressing or when a release is to be
> expected. Prior to this, update sets typically took ~4 weeks to release.
>
> Struggling? Maybe/maybe not. Struggling within a reasonable time frame -
> depends on your definition of reasonable and time frame I guess. Perhaps
> this is where we disagree above.
>
> Anyway, as I said previously, I would rather see the CentOS Project
> concentrate on the core product and do a really good job on that (i.e, a
> move closer to the old 4 week release lag than the current 10 week
> release lag), and I would much rather see this than effort diluted by
> taking on a contrib repo.

Agree

>
>> I would note that from the earliest days of RPMForge, Dag
>> offered, and indeed granted comit rights to me, which I have
>> not used.  I find it easier to use the bug tracker, and to
>> send emails to him ... lazy of me, I know, but again human
>> nature in play
>>
>> Additionally I regularly pull, fork, and fix 'broken' RF
>> packages [for self, or in consulting engagements], and drop
>> the SRPM's in my personal archive to satisfy GPL source
>> availability obligations.  I've seem parts of my packagings
>> end up elsewhere which is fine
>>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web photo gallery options

[luc...@lastdot.org]

On Tue, Jun 30, 2009 at 6:02 PM, John R Pierce wrote:
> Sorin Srbu wrote:
>> Checked the site ou linked too, but I don't get it. Would my pics be hosted
>> on my own server or on jalbum.net á la Picasa? I can't tell from the tour on
>> the jalbum web site.
>>
>
> you run jalbum on the workstation that you use to process your photos
> (could even be a mac or windows desktop, it really doesn't matter), and
> it creates all the scaled images and thumbnails and html pages, and
> uploads them to your webserver.   the overhead mentioned by others only
> happens *once* when you initially process or add to the album.   your
> webserver only has to handle plain html, no php or other scripting
> languags, no databases.
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Hm, maybe I should check jalbum again; what I said is from last year's
memories.. maybe they improved.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web photo gallery options

[luc...@lastdot.org]

On Tue, Jun 30, 2009 at 8:03 AM, Sorin Srbu wrote:
>>-Original Message-
>>From: Ray Leventhal [mailto:cen...@swhi.net]
>>Sent: Monday, June 29, 2009 4:32 PM
>>To: CentOS mailing list
>>Cc: sorin.s...@orgfarm.uu.se
>>Subject: Re: [CentOS] Web photo gallery options
>>
>>Sorry for the late post on this thread, but there's free client called
>>'Jalbum' [1] that may well do the trick for you.  Many skins, some
>>simple, some not..an integrated ftp client for uploading to your web
>>server, and nothing else but your photos needed.  There's also a
>>pre-built rpm which I've used without issue on CentOS 4.7 and higher
>>(client machines).  I'm hosting more than a few of these albums on my
>>CentOS 5.3 server.
>
> No problem. I'm still interested in what options I have for photo albums.
>
> Checked the site ou linked too, but I don't get it. Would my pics be hosted
> on my own server or on jalbum.net á la Picasa? I can't tell from the tour on
> the jalbum web site.
> --
> /Sorin
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

jalbum is a hog with large collections.. performance must be 5-6x less
than that of picasa on my computer (amd athlon x2, 1 gb ram, sata
drive, centos 5 32bit, around 8000 hires pictures)..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT: Linux WYSIWYG HTML Editors

[luc...@lastdot.org]

On Mon, Jun 29, 2009 at 12:06 AM, Lanny Marcus wrote:
> On Sun, Jun 28, 2009 at 5:06 PM, Rob Townley wrote:
>> On Sun, Jun 28, 2009 at 4:48 PM, Ned Slider wrote:
>>> Lanny Marcus wrote:
 I have KomPozer installed, but after using M$ FrontPage for years,
 KomPozer looks like it is going to have a learning curve and I want to
 get away from FrontPage and Windows.  I know Mark (MHR) uses
 SeaMonkey. Wondering if there is anything else I can use on Linux that
 is easier on a FrontPage user. I found this article:
  when I
 googled. Recommendations?  TIA!
> 
>>
>> It always seemed to me that the only logical reason for FrontPage to
>> purposely mess up the tag order was in the hopes that someday M$ would
>> be the only ones capable of detangling it.  Without FrontPage
>> generating such messy html, i think you will find hand editing
>> html/xhtml/xml to be not so difficult.  O'Reilly's Head First HTML css
>> and xhtml is a good book. http://www.headfirstlabs.com/books/hfhtml/
>>
>> eclipse and some plugins as documened here:
>> http://web-design.lovetoknow.com/Eclipse_HTML_Editor
>
> In addition to the bad HTML code produced by FrontPage, the Server
> Extensions for Linux were EOL a long time ago. I want to get away from
> FrontPage and Windoze.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Afaik, OpenOffice can output HTML files. Therefore one can build a
document with text, tables, images etc and then export it as HTML.
Sure, it will prolly look like crap when compared to (let's say) what
Dreamweaver can do, but still, it helps those who have no clue about
web design and only need a rudimentary homepage.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT: Linux WYSIWYG HTML Editors

[luc...@lastdot.org]

On Sun, Jun 28, 2009 at 10:45 PM, Lanny Marcus wrote:
> On Sun, Jun 28, 2009 at 4:30 PM, Barry Brimer wrote:
>>> I have KomPozer installed, but after using M$ FrontPage for years,
>>> KomPozer looks like it is going to have a learning curve and I want to
>>> get away from FrontPage and Windows.  I know Mark (MHR) uses
>>> SeaMonkey. Wondering if there is anything else I can use on Linux that
>>> is easier on a FrontPage user. I found this article:
>>>  when I
>>> googled. Recommendations?  TIA!
>>
>> bluefish 
>
> I will check into bluefish. Thank you.  And, when I googled for
> "SeaMonkey+RPM" a couple of minutes ago,  I found this thread.
> 
> Apparently, I brought this up last September on the list and that's
> when I installed KomPozer.  From the contents of that thread, probably
> kompozer or bluefish are the way to go on Linux and *not* SeaMonkey.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

The binary from http://getseamonkey.com/ will run just fine on Centos 5.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 64-bit CentOS - your experience

[luc...@lastdot.org]

On Thu, Jun 25, 2009 at 6:39 PM, Alan Sparks wrote:
> przemol...@poczta.fm wrote:
>> Hello,
>>
>> one of our developers is developing his Web applications (PHP-based+MySql) 
>> on 64-bit Fedora. He would like to use the same, 64-bit environment on 
>> CentOS. I am not against 64-bits (we use it for many, many years using 
>> Solaris) but what concerns me is the stability of 64-bit Linux. Can you 
>> share your experience regarding stability of 32-bit and 64-bit CentOS ? Does 
>> anybody use 64-bit CentOS in production (web applications) environment ?
>>
>> Regards
>> przemol
>>
>>
> We had just started retooling Web servers to 64bit (overcoming some
> 32bit limitations in 3rd-party stuff).  We had run 64bit on almost
> everything else before (few thousand production systems).  There was no
> issue of stability in 64-vs-32 bit.  For the Web servers, we found it
> might actually be more stable in the environment compared to 32bit, due
> to differences in memory management in the 64bit environment.  Of
> course, you should test in your circumstance - but I (and others here)
> have positive experiences.
> -Alan
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

I installed all my newer servers (those capable of 64bit that is) with
Centos 5 x86_64, including xen domains. Works like a charm!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Web photo gallery options

[luc...@lastdot.org]

On Wed, Jun 24, 2009 at 10:36 AM, Anne Wilson wrote:
> On Wednesday 24 June 2009 09:57:14 Sorin Srbu wrote:
>> Hi all,
>>
>> I'm looking for a web photo gallery for my personal web server at home.
>> Till now I've done the galleries manually from Adobe Photoshop Elements,
>> but I feel that is a dead end, kinda', besides the fact that the galleries
>> created are rather static. I'd like an easier way to do this, eg uploading
>> images in folders directly to the gallery and it will take care of what
>> needs to be done automagically, like resizing etc.
>>
>> So far I've come across a project called Gallery2, that seems to do what I
>> want. Downside is that no rpm-packages are available with yum with this
>> one.
>>
>> What web photo gallery software do you guys use?
>>
>> My requirements are only that the software should be simple to install,
>> maintain and add more photos. I'm not a pro (a newbie more like it...) when
>> it comes to mysql and php, so this needs to be easy to do as well, from the
>> gallery standpoint.
>>
> In the past I have made galleries with konqueror - not on centos, but with
> kde3, so I'm guessing that it works on centos.  I'm not at a centos desktop at
> the moment, so I can't check, but it should be a menu entry in konqueror.
>
> It is, however, creating a static gallery.  It wouldn't be so easy for others
> to add photos, so may not meet your needs.
>
> Anne
> --
> New to KDE4? - get help from http://userbase.kde.org
> Just found a cool new feature?  Add it to UserBase
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

Picasa3 can sync local albums to its web service. I'm quite happy with
it (although I'd prefer some open source replacement.. but there's
none as of yet), give it a try.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Yum Repo that has xcache

[luc...@lastdot.org]

On Fri, Jun 19, 2009 at 4:55 PM,  wrote:
> James Matthews wrote:
>> Hi,
>>
>> I am wondering where I can get a repo that has xcache. (Or if anyone has
>> any tips on a PHP optimizer)
>
> How about
> http://www.jasonlitka.com/yum-repository/
> Looks to have XCache 1.2.2
>
>
> --
> Andrew
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

That repo is unmaintained. Don't use it.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to set ntpd listen only 127.0.0.1 ?

[luc...@lastdot.org]

2009/6/12 MontyRee :
> Hello, all.
>
> I would like to use ntpd for time sync not rdate or ntpdate.
>
> but after installation the ntpd, I found that listened at all interfaces
> like below.
>
> udp0  0 192.168.111.2:123
> 0.0.0.0:*   11528/ntpd
> udp0  0 xxx.xxx.62.20:123
> 0.0.0.0:*   11528/ntpd
> udp0  0 127.0.0.1:123   0.0.0.0:* &
> nbsp; 11528/ntpd
> udp0  0 0.0.0.0:123
> 0.0.0.0:*   11528/ntpd
>
>
> Is there any way or option that only listen 127.0.0.1 for security reason?
>
>
> Thanks in advacne.
>
> 
> 대딩들의 인맥관리! 윈도우 라이브 메신저로 해결하자! 채팅은 기본! 25GB 자료실은 덤! 대딩들의 아지트 윈메 클럽!
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

You could also ditch the ntp daemon (uncheck it in ntsysv) in favour
of running `ntpdate some.time.server` every now and then from cron.
e.g.
@hourly /usr/sbin/ntpdate ro.pool.ntpdate.org

Sure, it might not be as elegant and practical, but it works.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] GIMP 2.3.15 for EL5, no newer libs required

[luc...@lastdot.org]

On Tue, Jun 9, 2009 at 10:44 AM, Radu-Cristian
FOTESCU wrote:
>
> Folks,
>
> I've build a tiny repo to provide GIMP 2.3.15 (and 2.3.14 as a possible 
> fallback) for EL5.
>
> GIMP 2.3.15 is the last version of GIMP that builds with no errors with the 
> GTK+ version that ships with EL.
>
> 2.3.15 is "almost GIMP 2.4", as 2.3.19 was the last development release prior 
> to 2.4.0. To the extent of my knowledge, Akkana Peck wrote the first edition 
> of her book on GIMP 2.4 using a development edition 2.3.something, where 
> "something" was not newer than 13. I therefore hope that most of the features 
> and improvements brought by 2.4 over 2.2 are already present in 2.3.15 (or 
> 2.3.14).
>
> These builds are obviously not as stable as 2.2.13, nor are they patched 
> against bugs or newer vulnerabilities. I have adapted (from Mandriva's 2.3.14 
> as of 2007.1) the patches for CVE-2006-4519, CVE-2007-2949 and CVE-2007-3741.
>
> To get these builds (RPMs and SRPMs), use the repo file:
> http://odiecolon.lastdot.org/el5/odiecolon.repo
>
> The site is not browsable, because I can't make it so (Lucian, any help?). 
> Still, the repo should work (it worked for me).

Should be browsable now.

>
> A *few* more details here:
> http://beranger.org/v3/wordpress/?p=3325
>
> Please test and report if it works for you or not -- I only use a limited set 
> of features from what GIMP can do.
>
> Note that I have not tested any plugins, and I don't even know if xsane-gimp 
> still works with this build.
>
> Disclaimer: You should never use this on a production system, or else all the 
> kittens within a range of 2 miles might die.
>
> Thank you,
> R-C
>
>
>
>      __
> Looking for the perfect gift? Give the gift of Flickr!
>
> http://www.flickr.com/gift/
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OT: looking for a rsync equivalent for Windows platforms

[luc...@lastdot.org]

On Sat, Jun 6, 2009 at 9:39 AM, Rudi Ahlers wrote:
> Hi all,
>
> Does anyone know of a good & free rsync type program for Windows
> platforms? Like most of us, I need to work on both Windows & Linux
> environments, and would like to sync some data (music, videos, photos,
> documents, thunderbird profiles, FF bookmarks, etc) between a USB HDD,
> my Linux (CentOS + KDE) PC, and Windows Laptop at the office.
>
> I found a program called Toucan (which also has a portable version)
> but it doesn't seem to work as well as rsync. When I tell it to "sync
> (copy)" or "sync (mirror)" file between the USB HDD, or even my Linux
> PC via the LAN, it copies every single file, every time. So it's not
> very efficient. Their forums doesn't have much help on this matter,
> and I just know from experience that help here is much better ;)
>
> --
> Kind Regards
> Rudi Ahlers
> CEO, SoftDux Hosting
> Web: http://www.SoftDux.com
> Office: 087 805 9573
> Cell: 082 554 7532
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Seems like Delacopy might be a better solution for you
(http://www.aboutmyip.com/AboutMyXApp/DeltaCopy.jsp). I have no
experience with it, but the feature list looks promising.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server Build Example

[luc...@lastdot.org]

On Fri, Jun 5, 2009 at 11:30 PM, nate wrote:
> gene.po...@macys.com wrote:
>> I'm coming from the Fedora arena and I want to build, what I would call, a
>> production server.  I'm to the point where I don't want to upgrade every
>> 6-months.  I'm running Oracle DB 11g, a Tomcat/JBoss hybrid application
>> server, and several other server type functions.
>>
>> Is there an example of building a server that boots into init3?
>
> If you don't install or configure X11 then it boots to init3 by
> default.
>
> In kickstart the config option is 'skipx'.
>
> As others have mentioned fedora and centos admin is very similar.
>
> My personal preference of course is RHEL 5 for Oracle, your already
> paying quite a bit for Oracle my view is might as well pay a little
> bit more for a supported OS(and yes I know that CentOS is a clone
> of RHEL..).
>
> Unless of course Oracle changed their support policies I haven't
> used it since I was at my previous company about a year ago. They
> didn't support CentOS at the time.
>
> nate
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

I'm no Oracle user/expert, but isn't Oracle DB 11g free (as in beer)?
So my take is he's not paying anything.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Double packages

[luc...@lastdot.org]

On Wed, May 20, 2009 at 4:54 PM,   wrote:
> Add the .x64_86 extension to the package you want to install
>
>
>
> yum install nvurses-devel.x86_64
>
>
>
> 
>
> From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
> Of Eduardo Silvestre
> Sent: Wednesday, May 20, 2009 8:33 AM
> To: CentOS mailing list
> Subject: [CentOS] Double packages
>
>
>
> Hello,
>
>  i'm trying install some packages with x64_86 architecture and got same
> packages doubling (32 and 64 bits).
> How can i force yum just install packages x64_86 based?
>
> [r...@www pfqueue-0.5.6]# yum install ncurses-devel
> Loading "fastestmirror" plugin
> Loading mirror speeds from cached hostfile
>  * base: mirrors.nfsi.pt
>  * updates: mirrors.nfsi.pt
>  * addons: mirrors.nfsi.pt
>  * extras: mirrors.nfsi.pt
> Setting up Install Process
> Parsing package install arguments
> Resolving Dependencies
> --> Running transaction check
> ---> Package ncurses-devel.x86_64 0:5.5-24.20060715 set to be updated
> ---> Package ncurses-devel.i386 0:5.5-24.20060715 set to be updated
> --> Finished Dependency Resolution
>
> Dependencies Resolved
>
> =
>  Package Arch   Version  Repository    Size
> =
> Installing:
>  ncurses-devel   x86_64 5.5-24.20060715  base  1.7 M
>  ncurses-devel   i386   5.5-24.20060715  base  1.6 M
>
> Transaction Summary
> =
> Install  2 Package(s)
> Update   0 Package(s)
> Remove   0 Package(s)
>
> Total download size: 3.3 M
>
> Regards,
> ---
> Eduardo Silvestre
> nfsi telecom, lda.
>
> eduardo.silves...@nfsi.pt
> Tel. (+351) 21 949 2300 - Fax (+351) 21 949 2301
> http://www.nfsi.pt/
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

I had same issue.
I added exclude=*.i386 *.i686 to yum.conf and that solved the problem.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Hardening

[luc...@lastdot.org]

On Sat, May 2, 2009 at 11:28 AM, Michael A. Peters  wrote:
> Jim Perrin wrote:
>> On Fri, May 1, 2009 at 12:22 PM, Stephen John Smoogen  
>> wrote:
>>> On Fri, May 1, 2009 at 10:19 AM, Jason Todd Slack-Moehrle
>>>  wrote:
 Hi All,

 What tips does everyone have on hardening a CenOS Server that is
 running web, e-mail, ssh, ftp, mysql, coldfusion and will be
 processing payments from www?
>>> NSA hardening guidelines would be a good start. The CIS hardening
>>> guidelines would be also good. After that you want to look at specific
>>> hardening guidelines for apache
>>
>> The NSA guide is a very good start, and
>> http://people.redhat.com/sgrubb/files/hardening-rhel5.pdf compliments
>> it rather well.
>> You might also want to have a look at the DoD STIG guidelines, though
>> reading them will make your eyes bleed.
>>
>
> For php, you really want to run php built with the suhosin patch and run
> the suhosin module as well.
>
> I'm not sure, but I seem to recall there being a suhosin patched php
> either in testing or centos plus.
>
> Assuming you run php.
>
> I can't really comment on the others.
>
> One of the nice things about suhosin is it does transparent encryption
> of cookies / sessions (you can tweak it) making things like session
> theft a lot more difficult.
>
> I believe suhosin patch/module is standard in bsd ports, I'm not sure
> why it isn't standard in RHEL (maybe because it can cause issues with
> some php accelerators ??)

I think there are issues with suhosin vs zend optimizer (other
encoders/loaders/decoders may have issues as well). I tested php
suhosin enabled + APC accelerator and haven't had a problem,
eaccelerator also will probably work just fine with it.
There's a rpm for suhosin compatible with the php version in rhel5/centos5 at:
http://repo.redhat-club.org/redhat/5/i386/

> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PHP 5.2

[luc...@lastdot.org]

On Thu, Apr 23, 2009 at 6:19 PM, dnk  wrote:
> - Original Message -
> From: "Karanbir Singh" 
> To: "CentOS mailing list" 
> Sent: Thursday, October 30, 2008 11:20:26 AM GMT +00:00 GMT Britain,
> Ireland, Portugal
> Subject: Re: [CentOS] PHP 5.2
>
> Eduardo Silvestre wrote:
>
> Hello guys,
>
> i need to know where i can find php version 5.2?
>
>
> At the moment, php-5.2 for CentOS-5 is in the c5-testing repo, soon to
> be moved into the c5-webstack repo.
>
> That is sweet news!
> Great idea on the webstack repo as many web apps need the more updated
> versions of that kind of software.
> d
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>

As announced before on the list, those who need newer PHP can use
these RPMs from Oracle:

http://oss.oracle.com/projects/php/

I was also set to make some RPMs for PHP, but my work could be just
wasted time should the webstack repo become public anytime soon... So,
any ETA about this?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] xen and hwclock

[luc...@lastdot.org]

On Thu, Apr 23, 2009 at 8:05 PM, Richard Foltyn
 wrote:
> Ugo Bellavance wrote:
>
>> Maybe the clock is sync'd with the host?
>
> Correct, and it's even done automatically.
>
> Just run NTP on the dom0 and all domUs will have the correct time.
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Indeed.
I usually replace /sbin/hwlcock with an empty shell script on domUs.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Feature list between 5.2 and 5.3

[luc...@lastdot.org]

On Thu, Apr 16, 2009 at 2:01 PM, Drew Weaver  wrote:
> does anyone know if (and where) a feature list of the changes between CentOS
> 5.2 and 5.3 can be found?
>
>
>
> All of the documentation that I could find on centos.org is related to 5.2
> and 5.1
>
>
>
> thanks,
>
> -Drew
>

Have you tried http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.3 ?

>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Sharing RAM between VM

[luc...@lastdot.org]

On Tue, Apr 14, 2009 at 3:05 PM, Larry  wrote:
> Hi, all!
> I have a server with 4 virtual machines ( using xen). Is there a way to
> make them share RAM? I found out something about balloons, but it didn't
> distribute RAM dynamically. So I decided that xen can't achieve that.
> I tried luci and ricci and now all my VMs are in a cluster. But I don't
> think this actually helped.
> Can you suggest a software and/or manual or a question which I should
> ask google for completing this task?
>
> All doms/nodes are with Centos 5.3(final).
>
> Thanks!
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

AFAIK, openvz can do that. Of course, openvz has its own problems, but
that's another matter.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.3 Update Success

[luc...@lastdot.org]

On 04/02/2009 06:05 PM, Tim Nelson wrote:
> Greetings CentOS Team-
>
> Since the list tends to be filled with "things don't work" and "why did you 
> do it this way" and "complaint X", I thought I'd make a small deviation...
>
> I have a production system running on a Dell Poweredge 2650 server. I simply 
> ran 'yum update' and rebooted with no problems. Everything continues to work 
> as rock solid as before.
>
> So, I just wanted to say 'Thank You' to all those who put in such hard work 
> into the CentOS project. The time between releases was not a problem here. If 
> it was, I guess I'd just ask for a refund. :-)
>
> --Tim
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

Had the same success with a dozen of xen domUs and a couple of dedicated 
servers (both i386 & x86_64), although I made sure I updated glibc and 
yum first, just to stay in the safe side. :)

Great job, Centos team.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] A set of PHP 5.2.9 RPM packages built for Enterprise Linux 4.7 and 5.3

[luc...@lastdot.org]

On 04/02/2009 03:29 AM, Michael A. Peters wrote:
> Michael Liang wrote:
>> Hello,
>>
>>  I think the links should be useful for someone who looking for PHP
>> 5.2 RPM using at CentOS. Have fun!
>>
>>  http://oss.oracle.com/projects/php/
>>
>> Overview
>>
>> This project supplies PHP 5.2.9 RPM packages built for Oracle
>> Enterprise Linux 4.7 and 5.3 on x86 and x86_64. They will also install
>> on Red Hat Enterprise Linux.
>
> Are they suhosin patched?

Not according to the spec file. Choon.net's mail header patch may be 
useful as well.

> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] AHCI support in CentOS 5.2?

[luc...@lastdot.org]

On 02/08/2009 10:57 AM, Marko Vojinovic wrote:
> My friend has an external sata hard disk, and likes the hot-plug feature.
> However, that works only if the appropriate sata setting in the motherboard
> bios is set to AHCI (IDE compatibility and RAID are two other options, but
> hot-plugging doesn't work with them). The machine has WinXP atm, while Linux
> is about to be installed in the following couple of days.
>
> Now, on wikipedia I read that AHCI is supported starting from kernel 2.6.19
> and later, while current CentOS 5.2 has 2.6.18. Is it possible to make AHCI
> work under 2.6.18 or should I install Fedora instead?

AFAIK, Centos5 (RHEL5) has support for this in kernel.

$grep SATA /boot/config-2.6.18-92.el5
CONFIG_SATA_AHCI=m

>
> Fedora will become obsolete in a year or so, and I will not be around to
> reinstall it again for him, so I would prefer a long-term solution (CentOS).
> But  I need to be sure that it can be made to do all that fancy
> hot-plug-auto-mount-sata-ahci stuff without too much hassle.
>
> Oh, btw, I am talking about hot-plugging using the sata cable --- usb
> connection of course already works, but this is a hard disk and speed
> increase is highly nontrivial when using sata connection compared to usb.
>
> Any suggestions?
>
> Thanks! :-)
> Marko
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos