Installing SL6 behind a proxy

2011-09-08 Thread mad
Hi!

I install SL6 via Cobbler (PXE) within a company network. While
installing anaconda tries to reach Scientific Linux ftp server.

The outgoing network traffic uses a proxy. The connection fails and
every try does take time.

Can I switch off these network connections completely?

Thanks in advance for any help

Regards
mad


Re: SL6.1 memory usage

2011-09-08 Thread Stijn De Weirdt

issue resolved (somewhat)


dmesg|Memory

shows 1GB reserved (of which 850MB memmap = 1.3% of total memory)
it also shows 650MB absent, apparently this is due to holes in the 
memory mapping, which is something hardware specific (it's an AMD Dell 
C6145, so it's amd specific or Dell/Bios specific)


anyway, thanks for the feedback

stijn


% slabtop -s c --once |head -10
Active / Total Objects (% used) : 185625 / 205302 (90.4%)
Active / Total Slabs (% used) : 16756 / 16757 (100.0%)
Active / Total Caches (% used) : 101 / 182 (55.5%)
Active / Total Size (% used) : 856865.31K / 859451.65K (99.7%)
Minimum / Average / Maximum Object : 0.02K / 4.19K / 4096.00K

OBJS ACTIVE USE OBJ SIZE SLABS OBJ/SLAB CACHE SIZE NAME
384 384 100% 2048.00K 384 1 786432K size-2097152
26276 26250 99% 1.00K 6569 4 26276K ext4_inode_cache
181 181 100% 32.12K 181 1 11584K kmem_cache

very different indeed.




(btw size-2097152 sounds like one of the default name used by hugectl
(or hugeadm) from the hugetlbfs tools). is that mounted in your case?
and are there any hugepages reserved? )


Not that I'd know of. But wasn't there a new feature called
transparent hugepage support in 6.1?

thp shows in /proc/meminfo as AnonHugePages

]# grep Huge /proc/meminfo
AnonHugePages: 18432 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 2048 kB

you show check those there too to see where the come from


stijn



Cheers,
Stephan



stijn

On 09/05/2011 05:10 PM, Stephan Wiesand wrote:

Hi Stijn,

On Sep 5, 2011, at 16:24, Stijn De Weirdt wrote:


hi all,

we are having an issue with some SL61 nodes. after a reboot, free
reports 1.4GB of memory in use, of which 24+163=187MB buffers+cache.

i'm unable to identify what is holding the memory, and i'd like to
know if others see this too and how i could proceed to find the
culprit.


yes, we see this as well. On a 48 GB system without users or special
processes:

# free -m
total used free shared buffers cached
Mem: 48388 1374 47013 0 30 186
-/+ buffers/cache: 1157 47231

In /proc/meminfo, I find that the difference to what I'd consider
reasonable (and see on a 48GB SL5 system) is due to slabs.

A slabtop -s c reveals that it's a size-2097152 pool accounting
for this. Do you see this as well?

Cheers,
Stephan



(it is a 32core/64GB machine; kernel commandline has
crashkernel=128M@16M (but no difference then eg crashkernel=auto
and kdump is off))

many thanks,


stijn

free
# free -m
total used free shared buffers cached
Mem: 64554 1604 62949 0 24 166
-/+ buffers/cache: 1413 63140
Swap: 16394 0 16394


mem sorted top

top - 16:13:52 up 13 min, 1 user, load average: 0.00, 0.01, 0.01
Tasks: 694 total, 1 running, 693 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si,
0.0%st
Mem: 66103768k total, 1643336k used, 64460432k free, 25164k buffers
Swap: 16787916k total, 0k used, 16787916k free, 170552k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2788 root 20 0 37988 25m 2876 S 0.0 0.0 0:00.06 pbs_mom
2653 root 20 0 159m 12m 1472 S 0.0 0.0 0:00.19 ncm-cdispd
2643 root 20 0 138m 5604 840 S 0.0 0.0 0:00.00 cdp-listend
3276 root 20 0 120m 4156 3232 S 0.0 0.0 0:00.07 sshd
2620 root 20 0 745m 3788 1764 S 0.0 0.0 0:00.12 automount
3102 nslcd 20 0 427m 2936 488 S 0.0 0.0 0:00.00 nslcd
3301 root 20 0 103m 1688 1336 S 0.0 0.0 0:00.05 bash
3623 root 20 0 13528 1604 844 R 0.3 0.0 0:00.14 top
1 root 20 0 21416 1544 1240 S 0.0 0.0 0:06.23 init
2482 root 20 0 194m 1484 1108 S 0.0 0.0 0:00.14 qlgc_dsc
2325 root 20 0 242m 1412 928 S 0.0 0.0 0:00.04 rsyslogd
2459 rpcuser 20 0 23112 1168 884 S 0.0 0.0 0:00.00 rpc.statd
2606 root 18 -2 10956 1144 412 S 0.0 0.0 0:00.03 udevd
3164 nscd 20 0 583m 1132 788 S 0.0 0.0 0:00.02 nscd
2697 root 20 0 62040 1064 464 S 0.0 0.0 0:00.00 sshd
943 root 16 -4 10960 1052 316 S 0.0 0.0 0:00.12 udevd
2607 root 18 -2 10956 1052 320 S 0.0 0.0 0:00.00 udevd
2723 root 20 0 112m 1012 380 S 0.0 0.0 0:00.00 crond
2707 root 20 0 22488 992 752 S 0.0 0.0 0:00.03 xinetd
2439 rpc 20 0 18940 908 672 S 0.0 0.0 0:00.04 rpcbind
2568 dbus 20 0 23448 876 604 S 0.0 0.0 0:00.01 dbus-daemon
2972 nagios 20 0 37096 796 452 S 0.0 0.0 0:00.00 nrpe









Re: {OT} Saga with certificates continues : Hackers steal SSL certificates for CIA, MI6, Mossad

2011-09-08 Thread Connie Sieh

On Wed, 7 Sep 2011, Connie Sieh wrote:


On Wed, 7 Sep 2011, Dr Andrew C Aitchison wrote:


 This message is in MIME format.  The first part should be readable text,
 while the remaining parts are likely unreadable without MIME-aware tools.

--1870876696-1143114093-1315381521=:22438
Content-Type: TEXT/PLAIN; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Tue, 6 Sep 2011, Pat Riehecky wrote:


On 09/06/2011 07:19 AM, Frank Lanitz wrote:

Am 06.09.2011 06:38, schrieb Franchisseur Robert:

-- Le (On) 2011-09-06 +0200 =E0 (at) 00:53:39 Andreas Petzold =E9crivit=

=20

(wrote): --
=20

On Tuesday, September 06, 2011 00:26:22 Valerii D. wrote:

snip
=20
Yes. And the distribution is still the browser 3. 6. 2 without securi=

ty

updates. And with a certificate from DigiNotar.

TUV released the errata a week ago, so we can expect to see patched rp=

ms=20

from
SL soon. In the meantime you can just delete the Diginotar CA from FF.


You can't ! It seems it was deleted but if you re-open :

Edit --  Preferences --  Advanced --  Encryption --  View=

=20

certificats --  Authorities

it is still there !
=20
=20

Don't delete them, just mark them as not trustworthy. This will help.
=20
=20
Cheers,
Frank
=20
P.S. Aren't the certifactes distributes within the ca-package which have
at least been updated for 6.x?


Hello,

It looks like the errata pushed out on 9/1 and 9/2 should take care of th=

is=20

automatically.

http://listserv.fnal.gov/scripts/wa.exe?A2=3Dind1109L=3Dscientific-linux=

-errataP=3D337

http://listserv.fnal.gov/scripts/wa.exe?A2=3Dind1109L=3Dscientific-linux=

-errataP=3D1002

RedHat have released firefox-3.6.22 and xulrunner-1.9.2.22
=09https://rhn.redhat.com/errata/RHSA-2011-1268.html
and thunderbird 1.5.0.12-43-el4 / 2.0.0.24-25.el5 / 3.1.14-1.el6_1
=09https://rhn.redhat.com/errata/RHSA-2011-1267.html

thus the firefox and thunderbird errata pushed last week are not=20
considered sufficient by TUV.


Expect updated ones shortly.

-Connie Sieh



--=20
Dr. Andrew C. Aitchison=09=09Computer Officer, DPMMS, Cambridge
a.c.aitchi...@dpmms.cam.ac.uk=09http://www.dpmms.cam.ac.uk/~werdna
--1870876696-1143114093-1315381521=:22438--





Updated firefox and thunderbird rpms are now available in the security 
errata area.


-Connie Sieh


Graphical login + ldap (+ NFS?) problems :)

2011-09-08 Thread Christopher Tooley
Hello All,

I think I asked this a while back but perhaps I wasn't very clear on what has 
been happening.

I have the option to do LDAP with a centralized server, and I would like to do 
so.
I use NFS mounted home directories (NFSv3).

I have installed SL6.1 and it works great.

I know I have successfully set up LDAP *and* NFS, because I can log in remotely 
with SSH as well as on a terminal.  However, when I try to log in with GDM or 
XDM, it will accept my password, black out the screen, and then return to 
either GDM or XDM.  I *can*, however, log in with a local account.

Is there something special about GDM or XDM with regards to LDAP or NFS that I 
am unaware of?  Shouldn't it just be using the same authorization as SSH or a 
terminal login?

Thanks,
Christopher Tooley
ctoo...@uvic.ca
Systems, HEP/Astronomy UVic


Re: Graphical login + ldap (+ NFS?) problems :)

2011-09-08 Thread JR van Rensburg
You need to set the GDM/KDM to login using LDAP authentication instead
of local.

Install the ldap admin modules and use them to set it up.
(Sorry, can't be more specific, it's a long time since I did it on
RH/Fedora)

On Thu, 2011-09-08 at 09:20 -0700, Christopher Tooley wrote:
 I have the option to do LDAP with a centralized server, and I would
 like to do so.
 I use NFS mounted home directories (NFSv3).
 
 I have installed SL6.1 and it works great.
 
 I know I have successfully set up LDAP *and* NFS, because I can log in
 remotely with SSH as well as on a terminal.  However, when I try to
 log in with GDM or XDM, it will accept my password, black out the
 screen, and then return to either GDM or XDM.  I *can*, however, log
 in with a local account.
 
 


RE: Standard Mpeg-1 Video player

2011-09-08 Thread Jordan Dean
 On 09/06/2011 03:14 PM, Jordan Dean wrote:
 Has anyone found a player / codec that is in the standard SL 
 repositories that will playback mpeg 1 encoded video.  (Totem does 
 not have the codec in the two sets of gstreamer plugins that are
provided).
 Thanks,
 Jordan Dean
 Can you provide a link to an example mpeg-1 encoded file to test?
 
   On SL5.6 we use VLC.
 
   yum --enablerepo=dag install vlc
 
 -- 
 Best regards,
   Robert FRANCHISSEUR


Is Dag's repo considered a standard SL repo?

Christopher Tooley
ctoo...@uvic.ca
Systems, HEP/Astronomy UVic


For my purposes, the only thing that would be considered standard would be
specifically from the SL repos, we would also use the same thing on our TUV
machines.

It appears however that this is not possible due to concerns about mpeg-1
licenses / licensing.  We'll just figure out what we want to do instead, I
was hoping that I was just missing something.

-Jordan


RE: Standard Mpeg-1 Video player

2011-09-08 Thread JR van Rensburg
On Thu, 2011-09-08 at 16:11 -0500, Jordan Dean wrote:
 For my purposes, the only thing that would be considered standard
 would be
 specifically from the SL repos, we would also use the same thing on
 our TUV
 machines.
 
 It appears however that this is not possible due to concerns about
 mpeg-1
 licenses / licensing.  We'll just figure out what we want to do
 instead, I
 was hoping that I was just missing something.

If it's a licensing issue, then you need to have a look at the
fluendo.com page and get the licensed version.
They do a codec only pack as well as the full package.