CentOS

Today I tried to put in production an update of Samba 3 (3.5.4) to allow Windope 7 clients to join the domain.

After having performed what's on the samba wiki page about this topic [here], I could join the machine to the domain but I was not able to login !? :(

In the log :

[2010/08/20 16:55:20.682477,  0] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client RO-BACKUP machine account RO-BACKUP$
[2010/08/20 16:55:30.993850,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2010/08/20 16:55:30.993958,  0] lib/util_sock.c:1432(get_peer_addr_internal)
  getpeername failed. Error was Transport endpoint is not connected
  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer.

The problem was easy to solve but not easy to find : the two machines had not the same time (30 secs delay !)

Fixing the time sync fixed the problem (and I'm not using kerberos and AD)

After having setup squid and dansguardian (using clamd) on Centos 5, I wasn't able to use it :(

I had always the following error, even if the dansguardian user was the same as clamd (clamav) :

2010.7.9 12:22:41 - 10.0.200.6 http://www.eicar.org/anti_virus_test_file.htm
 *INFECTED* *DENIED* /tmp/tfIlR1j6: lstat() failed: Permission denied. 
ERROR GET 15590 0 Content scanning 1 403 text/html  

I just realize after having searched too long that SELinux (I know life is too short for it) was the culprit.
It was my mistake as I completely forgot that this machine had selinux enabled :-S

So in /var/log/audit/audit.log I had :

type=AVC msg=audit(1278673113.470:3489): avc:  denied  { getattr } for
pid=32164 comm="clamd" path="/tmp/tfCSCirx" dev=dm-3 ino=17 
scontext=user_u:system_r:clamd_t:s0 
tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
type=SYSCALL msg=audit(1278673113.470:3489): arch=c000003e 
syscall=6 success=no exit=-13 a0=8cce370 a1=421f2dc0 a2=421f2dc0 
a3=8 items=0 ppid=1 pid=32164 auid=1004 uid=102 gid=114 euid=102 
suid=102 fsuid=102 egid=114 sgid=114 fsgid=114 tty=(none) ses=437 
comm="clamd" exe="/usr/sbin/clamd" subj=user_u:system_r:clamd_t:s0 
key=(null)

Note to myself: Never forget to check in audit.log !

To create the selinux policies, I used the following commands, which are quiet easy:

audit2allow -a -m dansguardian > dansguardian.te
checkmodule -M -m dansguardian.te 
checkmodule -M -m dansguardian.te -o dansguardian.mod
semodule_package -o dansguardian.pp -m dansguardian.mod
semodule -i dansguardian.pp 

Et voilà ! Dansguardian is running and I didn't disable selinux :-)

banquise (yet another package manager) is now released ! :)

The website is online : www.banquise.be

This is a server/client application both written in python. The server is written with django.

As requested by Pieter, here are the spec files I used to create the openERP rpms for fedora and centos.

As some packages have different names or different user management commands, I need two different spec files for same pakages in each distro.

(only the client can be the same)

I wait for your feedback

I created rpms for CentOS and Fedora of openERP 5.0.7

I didn't test them yet but you can try them and send me your feedback to improve them.

Hello,

If you want to test the latest version of openERP (5.0.6) on Fedora 12 or CentOS 5, you can try the package available on inuits repo (some other packages for other projects will be available too) :-)

Those packages are still in development, don't hesitate to send me feedback.

How to setup the repository :

edit /etc/yum.repos.d/inuits.repo with (for Fedora):

 [inuits]
 name=RPM Inuits repository Fedora $releasever
 baseurl=http://repo.inuits.be/fedora/$releasever/os/
 enabled=1
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-inuits

Don't forget to import the GPG key (you can find it here

 rpm --import RPM-GPG-KEY-inuits

I saw that there are a fresh new version of IMSpector : 0.8 from 22 December 2008.
(and a new website too ;-) )

So I've created new rpm packages for CentOS 4.6 (i386) and Fedora 10 (x86_64).

Here they are:

I was trying to install Centos on a MacPro... these are some nice funny error message I received to encourage me to not give up ;-)