Tag Info

New answers tagged

1

Well, you should tell us about your goal AND attempted solution. Without goal, we can't give you alternative solution. Looking from the comment, looks like you want to whitelist some client to relay via your server. Postfix itself has ACL-relay mechanism via smtpd_*_restriction. To know what enabled ACL in postfix, you can run command postconf | grep ...


0

Most servers I have run across aren't actually running nscd. ps ax | grep nscd Or chkconfig --list nscd If both of those show that it isn't running it is safe to do a yum remove nscd (and nss_ldap) and then rpm -Uv glibc-* I'm just a mirror, I did not create the RPMs. Edit: I just looked and Oracle Linux has indeed updated their repo today. Better off ...


0

Sasha has it almost right, and since I can't comment I'll post this as a standalone answer. Ignoring dependency errors is a Very Bad Idea™. It's also unnecessary in this case since there's an updated version of nscd to go along with glibc. The patched glibc packages are indeed available from Oracle, and I've confirmed that installing them patches the GHOST ...


1

If you do not have RHEL subscription, Oracle was kind enough to release updated packages for your old RH4 box. For both (i386 and X86_64) systems do: mkdir glibc2015 cd glibc2015 For i386 system do (Note, I had to replace http with h**p to avoid spam filters here.) : wget ...


-1

Rick, Thanks for your post. Very useful. But I am getting an error about failed dependencies, although I seem to have the correct version installed. Can you perhaps make the nscd version that corresponds with these in your mirror too? It would be GREATLY appreciated. Thanks! error: Failed dependencies: glibc = 2.3.4-2.57 is needed by ...


0

I have mirrored RPMs at http://users.axess.com/rickm/glibc for el4. Note: I am just mirroring them for someone in Brazil. The full source and spec file is available if you don't trust them. Tested so Far on Centos 4.6 and 4.9 Rebooted cleanly and reported as not vulnerable.


0

I have found in the past there have been viable options for building RHEL4 packages using the source found in Oracle Linux releases. https://oss.oracle.com/el4/SRPMS-updates/?C=M;O=D Just in case you can't make RHN work. You may have to wait a little while (couple of days) for a new src.rpm to show up.


3

RHEL 4 is in what Red Hat calls Extended Life Phase. ...For versions of products in the Extended Life Phase, Red Hat will provide limited ongoing technical support. No security fixes, bug fixes, hardware enablement or root-cause analysis will be available during this phase, and support will be provided on existing installations only. You can ...


0

There is a patch, the RPM should be glibc-2.3.4-2.57.el4.2.i686.rpm. See: https://rhn.redhat.com/errata/RHSA-2015-0101.html


3

With a vanilla configuration, this isn't supported as you would violate ARP rules on routers doing so. However, most Operating Systems have a mechanism of teaming/bonding two physical ports together to act as one logical port. Since you tagged linux, below is a link to setup NIC bonding on RHEL. It basically creates a virtual interface that is shared ...


0

Seems like the issue has nothing to do with memory, but with process limits. The user I'm running the process as had a really low process limit set to 1024. ulimit -u 1024 and the thread count of all the proceses run by this user is close to that: ps -eLf | grep 'myuser' | wc -l 1022


1

Have a look into the jvm min max memory, do you use any web server? Look into the number of treads, memory settings for it- for Tomcat most of them are @server.xml. Look into Java Mission Control http://www.oracle.com/technetwork/java/javaseproducts/mission-control/java-mission-control-1998576.html to get extra insight. Linux usually keeps more memory to be ...


0

I found that I can do this in an ugly way by making a new mount map entry like auto.folder2 and specifying the nisObject entry cn in auto.master like /test/mymount and then any nisObjects inside the nisMap auto.folder2 will end up at /test/mymount/subdir...


0

Per Andy(who didn't provide an answer I can mark correct), I ended up using Powershell to do this: powershell Import-Module ActiveDirectory New-ADObject -Name auto.folder2 -Path 'CN=autofs,DC=example' -Type nisMap -OtherAttributes @{'nisMapName'='auto.folder2'} New-ADObject -Name /testldap/folder2 -Path 'CN=auto.master,CN=autofs,DC=example' -Type nisObject ...


0

In practical terms I don't see any difference. I like lvm because of the flexibility too, and both scenarios looks good for me.


0

According to Redhat the disk label should be changed to MSDOS: GPT must be switched to MSDOS. This will cause a loss of all current data on disks as well as limiting the device size to 2 TB 1. At the partitioning screen, press Ctrl + Alt + F2 to get to a shell prompt. 2. Overwrite the GPT partition label with an MSDOS label. [root@host ~]# parted ...


1

This is bad information. If you're using a supported OS with an HP ProLiant DL360e server, you should probably use the HP Dynamic Smart Array driver disk - EL7 instructions here. Intelligent Provisioning is not necessary to bootstrap an HP box. It's handy for pre-OS firmware updates and array configuration, but I don't even use it for the OS-related ...


0

If you going to use kvm to made a large, virtualized, multi tenanted environment, I would recommend you to allocate more space for tmp, because when you run snapshot VM it will locate temporary files on that directory. And also why you don't using RAID?


1

The manual has the following to say:: servers/server-name/tmp This directory holds temporary directories and files that are created while a server instance is running. For example, a JMS paging directory is automatically created here unless another location is specified. Files in this directory must be left alone while the server is running, ...


2

Boot with a maintenance CD that supports LVM, for example SystemRescueCD. Open a root shell. Reduce the size of /home: lvreduce --resizefs --size -150G /dev/mapper/vg_testsyst-lv_home The --resizefs option is essential, to reduce the size of the file system before you reduce the size of the volume that holds it. I believe that that option should work ...


0

So I followed Michael Hampton hint, I created a vm using KVM and I added the following iptables rules iptables -t nat -I PREROUTING -p tcp -d 1.2.3.4 --dport 3389 -j DNAT --to-destination 192.168.122.1:3389 iptables -t nat -I PREROUTING -p udp -d 1.2.3.4 --dport 3389 -j DNAT --to-destination 192.168.122.1:3389 iptables -I FORWARD -m state -d 192.168.122.1 ...


0

Maybe not directly related but I could solve my issue using USB-Passthrough on my CD/DVD/BluRay-Player connected via the USB port. The biggest issue there was that "virsh/virt-manager" by default defines USB1.0 ("-device piix3-usb-uhci,...") for Pass-Through instead of USB2.0 ("-device usb-ehci,..."). See as well: ...


0

Debian maintainers explained their choice in this bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726256 To excerpt: Michael Biebl writes: Changing the timezone information via timedated (org.freedesktop.timedate1 or timedatectl) will replace /etc/localtime with a symlink to the timezone file in /usr/share/zoneinfo. That means ...


0

I eventually resolved this problem by following the advice given by Michael above. Zeroing out the first few megabytes of the drive and then re-installing the operating system did the trick. I suppose there was some sort of MBR or partition table corruption at play. If you are stuck at a grub screen after a fresh CentOS installation, try following these ...


0

Thanks - ugly hack for sure, but it gets the job done. Here's a pathed example (combining the above comments) to add 'nrpe' to the 'nagios' group. I used a package require as the user here is RPM provided rather than by puppet. exec {"nrpe nagios membership": unless => "/bin/getent group nagios|/bin/cut -d: -f4|/bin/grep -q nrpe", command ...


1

Since Mark's answer was posted, we (RH) have started updating the distribution bundle more proactively, and introduced an improved system for managing the trust store. There were updates to RHEL 6's ca-certificates in October and December of 2013, and in July and August of 2014, and further updates will be made when appropriate. See man update-ca-trust for ...


3

Since Dan Pritts' comment, Red Hat has been updating the certificate bundles for supported RHEL releases more often; you can see this quite easily in the package changelog. RHEL 6's certificates were updated twice in 2013 and twice in 2014. All RHEL and related / clone / derived distros provide a bundle file at /etc/pki/tls/certs/ca-bundle.crt , and the ...


0

httpd-2.4 rpms for CentOS 6 can be found at http://mirror.centos.org/centos/6/SCL/ . These are from the Software Collections that are built to run alongside the base packages. Unfortunately, this collection is only for X86_64. The repos in /etc/yum.repos.d do not contain a definition to reach this collection so you will have to create one. Into a file named ...


0

For future readers, for me, just setting the bool to allow httpd to make DB connections was sufficient; i.e.: setsebool -P httpd_can_network_connect_db 1 You can check/verify that the setting is set by: getsebool httpd_can_network_connect_db which should return '... => on' After that, if you tail -f /var/log/audit/audit.log and re-attempt your ...


0

I had the same problem doing the same command: No such object (32) matched DN: dc=example,dc=com I checked the LDIF file and all my OUs from LDAP and I was trying to add an entry to an OU that does not exist. I solved changing the OU on ldif file for one that exist. And all worked fine.


11

I would approach this project with a CentOS 6 installation. There are a few considerations: Within the lifecycle of the upstream Red Hat product, EL6 has just reached the maturity and stability that I require for my production environments. It's still a distribution that has access to a good package set, deep mindshare and wide usage. Plus, you always have ...


18

I would always recommend that new projects start out with the latest available OS version, unless there's some overriding need to not do so. The big stumbling block you may run into is that EL7 cut out a lot of drivers for older hardware, and since you propose to use some rather old hardware here, you may find that you can't install the operating system. In ...


5

Would assume your jenkins is "disabled" by setting it's shell to /bin/false. Try to set the shell to /bin/bash (f.e.) chsh -s /bin/bash jenkins then your su should work. Or use su -s /bin/bash jenkins


1

The trick involves enabling localhost/localnet route processing for your outbound interface with: sysctl -w net.ipv4.conf.all.route_localnet=1 Then this works: iptables -t nat -A OUTPUT -m addrtype --src-type LOCAL --dst-type LOCAL -p tcp --dport 8888 -j DNAT --to-destination 10.0.3.10 iptables -t nat -A POSTROUTING -m addrtype --src-type LOCAL ...


3

These look like copy-on-write (COW) kernel threads possible related to a filesystem snapshotting solution. Do you have something like R1Soft Hot-Copy or LVM snapshots active? Any other backup software? Please provide a pastebin of a full process listing.


0

Does it connect directly if you use ssh -o GSSAPIAuthentication=no user@host? If so, the system may be hanging at some point deciding on a GSSAPI method. For me, only one host did this, so I just disabled GSSAPI in ~/.ssh/config for that host: Host badHostName GSSAPIAuthentication no I learned this from ...


1

This may actually be OEL 6, not RHEL 6. However, the solution is close to what you attempted - you simply need to obtain the OEL 6 RPM-GPG-KEY file from Oracle, not the OEL 5 key. I haven't tried this myself as I don't have OEL systems, but I think you can do this with wget http://public-yum.oracle.com/RPM-GPG-KEY-oracle-el6, then rpm --import ...


2

Token IPv6 addresses is a thing in Linux, man ip-token. Essentially, ip token set ::123/64 dev eth0 There isn't really configuration supporting this in EL scripts, so I just dump it in a /sbin/ifup-local script. Auto configuration addresses are not necessarily based on your MAC address. sysctl -w net.ipv6.conf.default.use_tempaddr=1 should turn on ...



Top 50 recent answers are included