Fedora 9, IPSec, and 2.6.26 kernels...
by Michael H. Warfield
Hey all,
I just ran into this massive problem this weekend. Several of
my Fedora 9 systems are linked by IPSec (OpenSWAN) tunnels across three
remote sites. I recently updated the kernels on them (about a half a
dozen systems) to 2.6.26-45 and each and every system with IPsec
destabilized. They would run for anywhere from a few minutes to a few
hours and then lock dead up. No network. Outside pings on IPv4 and
IPv6 all return "no route to host". If they had X-Windows running,
no response to keyboard. Mouse MIGHT work but would also shortly lock
up. USB locked pretty solid. No ability to log in. No user space
activity. Enabled Magic SysRq key and each machine could be rebooted
via Alt-SysRq S-U-B, so interrupts are functioning and the kernel is
responding to the keyboard on that level even if it's a USB keyboard.
Could not switch from X-Windows to a virtual console and cntrl-alt-del
had no effect. Set sysctl kernel.panic = 5 with no effect so there
doesn't seem to be a kernel panic involved that I can't see on the consoles.
Backed up to the last 2.6.25 kernel and they are all stable again.
All have now been running, once again, for over 24 hours. I don't know
the status of any intervening 2.6.26 kernels. The machines that
destabilized had not been rebooted on a 2.6.26 kernel before. Other
systems with F9 2.6.26-45 kernels w/o IPSec seem stable. Restarting
OpenSWAN a few times seems to be a pretty reliable way to lock the
system up with or without X Windows present.
Anyone else seeing this? Anyone with an idea what might be
going wrong?
I have not, as yet, tried as non-Fedora kernel. Some of my other
systems are running OpenVZ kernels (some with IPsec), currently sitting
at 2.6.24, and are stable. I'll be trying the OpenVZ 2.6.26 kernel as
soon as it's released later this week.
BTW... OpenSWAN 2.6.14, in Fedora 9, is pretty well busted for
X.509 certificates (problems in connection identification for X.509).
Been debugging this with the OpenSWAN dudes for the last week or so and
finally got that resolved when I ran into this. OpenSWAN 2.6.18 should
resolve the X.509 certificate issues and some rekeying issues.
Mike
--
Michael H. Warfield (AI4NB) | (770) 985-6132 | mhw(a)WittsEnd.com
/\/\|=mhw=|\/\/ | (678) 463-0932 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
15 years, 8 months
F9 KDE4 running ssh-add at login
by John Horne
Hello,
I am running Fedora 9, with KDE4, and am trying to get ssh-add to prompt
me for my passphrase when KDE starts up. Actually it does prompt me, but
the problem seems to be that it never remembers the passphrase. I always
have to manually run 'ssh-add' from the command-line, and then enter the
passphrase.
I see that others have had a similar problem (and not just Fedora
users), but none of the solutions work. I have tried adding a soft link
to 'ssh-add' in the ~/.kde/Autostart directory; I currently have a very
small shell script that calls '/usr/bin/ssh-add' in the Autostart
directory; I have also tried these solutions in the ~/.kde/env
directory; and finally I have tried using ksshaskpass, which also did
not work, but as far as I can tell this only works for KDE3 at the
moment.
Putting in some simple echo commands (redirected to a file), I can see
that the script in Autostart is being run, and that ssh-agent is
running.
Anyone got a solution for this?
Thanks,
John.
--
---------------------------------------------------------------
John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287
E-mail: John.Horne(a)plymouth.ac.uk Fax: +44 (0)1752 587001
15 years, 8 months
Chroot for FC9 - firefox opens a window instead of new session
by B Wooster
On a x86_64 Linux machine, I made another x86_64 chroot environment
for FC9, and installed a 32-bit firefox in the chroot. The main host
has as 64-bit firefox, old one - 1.5.x something (BonEcho).
When I enter the chroot, and log in as root, I can start the 32-bit
firefox. This opens up a new session and all is fine.
When I enter the chroot, and log in as the same user as that in the
parent host, then I'm unable to start a new firefox - it always starts
up a window to the original firefox.
And I can't even start a new instance - it always seem to start the
the firefox from the original host - which is extremely confusing. I
tried the --no-remote option to Firefox 3.0.3, that firefox
immediately exits in the chroot.
The chroot environment shares /tmp and hence all of X display with the
main host. Is there a way to trick firefox into not locating the
firefox running outside the chroot? I suspect it is the sharing of the
tmp folder that allows firefox to get at this info., But I need to
share the /tmp to make X11 work well in the chroot.
Any tips/suggestions appreciated.
15 years, 8 months
consolekit broken?
by Dr. Michael J. Chudobiak
Anyone know what could cause this?
[root@xena ~]# ck-list-sessions
** (ck-list-sessions:4001): WARNING **: Failed to get list of seats:
Failed to execute program /lib64/dbus-1/dbus-daemon-launch-helper: Success
- Miek
15 years, 8 months
Fedora 9 update causes NetworkManager not to work wireless
by Luis Orlindo Tedeschi
I am having problems with NetworkManager and wireless network. When I
installed Fedora 9 NetworkManager was working fine and able to connect
to wireless networks. However, after I did the first update suggested by
the OS, NetworkManager stopped being able to recognize wireless
networks. I formatted and installed Fedora 9 twice to confirm the
problem. I could not however identify which update is causing this
problem. Anybody having the same problem? Thanks.
15 years, 8 months
Question
by Nicolangelo Iannella
Has fc10 been released? I have just received notification through the
package manger that 802 updates are available and all have the labels
fc10 ... is this a beta?
best regards,
15 years, 8 months
F10beta : cannot install on AMD 780G motherboard
by Steve Repo
Hello,
I have a Biostar 780G M2+ motherboard connectgion to a 19" LCD via DVI.
F10beta boots and finishes initial checks successfully. It then
switches to a blank (black) GUI and then after about 20 seconds or so
I see
Fatal IO error 11 (Resource Temporary Unavailable) and proceeds for a reboot.
I'm using the onboard graphics. Anyone installed F10beta successfully
on a 780G motherboard?
Is there anyway i can do a text only install?
Thanks,
Steve
15 years, 8 months
Login sound -- library mode
by Nifty Fedora Mitch
Does anyone know how to silence F8 login sounds
short of turning down login sounds and other audio....
Tossing /usr/share/sounds/login.wav to the side
seems to be sloppy.
It is the classic boot in a library or lecture hall
problem but I do not see any easy 'designed' way
to get there from here.
I would like all sounds do be well dialed back in
such situations not just the login....
--
T o m M i t c h e l l
Found me a new hat, now what?
15 years, 8 months
Re: How is KDE4 supposed to be used ?
by Dave Feustel
On Sat, Oct 04, 2008 at 08:26:35PM +0000, Kevin Kofler wrote:
> Dave Feustel <dfeustel <at> mindspring.com> writes:
> > Put icons for launching xterm and konqueror on the upper or lower panel.
>
> Simply drag and drop the menu entry from the Kickoff or classic menu to the
> panel.
Neither xterm nor konqueror is in the menu list as far as I can tell.
> Kevin Kofler
>
I tried drag n drop but it does not work for me.
I have used kde3 for quite a while with no problems, but I am not familiar with
Kickoff or "classic menu" in kde4. I tried to find something about Kickoff but
had no success. Is there a url where I can learn about how to use them?
I am not used to being such a putz.
15 years, 8 months
Installing on a degraded RAID-1 array.
by James Allsopp
Hi,
I've just bought a 1tb drive but can't afford another at the moment. I'd
like to install FC9 as a degraded software array but can't in the
installer. Is there a way around this?
Jim
15 years, 8 months