Several Delightfully Challenging Problems (Switching from Fedora to CentOS)
Linux - SoftwareThis forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Several Delightfully Challenging Problems (Switching from Fedora to CentOS)
Running as of three days now:
OS: CentOS 6.3
Kernel: 2.6.32-279.2.1.el6.i686
Video Card: GeForce 6200 PCI 256MB DDR2
I've used Fedora since Core 1. But it is, as often described, the "bleeding edge" for Red Hat. I decided I needed an OS more suitable for production work rather than spending more and more time tweaking and solving Fedora problems that came with new releases and packages with alarming regularity. CentOS seemed to offer the stability I wanted.
After installing CentOS 6.3, I was most delighted to find that the latest version of CentOS came with a version of Gnome 2.x rather than the totally ruined 3.x that ships with Fedora. However, there are several items missing from the beloved menus of Gnome 2.x, and I believe I need them.
(1) System ---> Administration: "Network" missing
This items opens a window called "Network Configuration," which had five tabs: Devices, Hardware, IPsec, DNS, and Hosts. I used to use "Devices" to configure eth0, but I also filled in the data needed in "DNS" and "Hosts." Just now I was able to configure eth0 using System ---> Preferences ---> Network Connections (an item that always was there but not needed). However, I was unable to configure DNS and Hosts.
(2) System ---> Administration: "Server Settings" missing
On mouse over, it used to show two tabs: "HTTP" and NFS". This is where I configured NFS for access between my two networked comupters--localhost1 (the new CentOS) and localhost2 (Fedora 12). That's where I specified the local IP address and which directories could be mounted and with either read or read/write permission.
(3) System ---> Administration: "SELinux Management" missing
I presume SELinux is running by default. Without this menu item, I don't even know how to disable it.
Questions:
(1) How can I restore those three menu a items and get their functionality?
(2) nfs currently is working one way, but not the other. localhost1 (CentOS) can mount a directory of localhost2 (Fedora), but not vice verse ("no route to host"). I suspect it's because I couldn't make the configurations on the CentOS machine using the two missing menu items, "1" and "2" above. For my "production" work, I desparately need to have nfs working both ways.
(3) For almost a year under Fedora 15 I was using dual monitors. That is so great for the number of windows I have to have open for my work! Then with a new update, it wouldn't work any more. I don't know whether it is a kernel problem. an X problem, and a nouveau problem. I was hoping with my move to CentOS it would be working again. But, alas, it is not. How can we trace down the problem?
Any help any of you might be able to give me would be greatly appreciated. Thanks so much.
These are all additional gnome utilities that are not apart of the base gnome package. First, I HIGHLY ENCOURAGE YOU TO LEARN HOW TO DO THIS VIA THE COMMAND LINE! Never become dependent on a GUI to manage an Linux system. But for ease of use, I agree that these are much quicker to use.
Do a yum list all | grep -i "gnome"
You will get ALOT of packages listed, but they are mostly self explanatory, so when you do this you see you have a "NetworkManager-gnome" package, you can do a yum info "NetworkManager-gnome" to get its description but this is the package that provides access to the network manager. Take a look over your list and install what you need.
If you have any questions about a specific package we should be able to help.
Additionally, if you have any questions about how to do this via the CLI let us know.
Just searched with "gnome." "NetworkManager-gnome" is already installed, and nothing else in the list seemed to be what we were looking for. So that is not what provides the two missing GUIs. Yes, two: since my first post in this thread, I did find the package that restores "SELinux Management" to the menus. But "Network" and "Server Settings" as described in (1) and (2) are still missing.
2. You might be unlucky with NFS GUI; a bit of googling found a few sites that say the RHEL5 tool was discontinued, and the definitive guide here http://www.linuxtopia.org/online_boo...er-export.html basically says use the cli ..
Mind you, as Kustom42 says, its worth knowing how to do it from the cli in case the GUI breaks (or isn't available haha).
Also, most commercial use servers don't have a GUI/desktop installed at all, its pure cli only... that's probably why they dropped it.
Thanks, chrism01, those links to the Red Hat manual were most helpful. Now concerning your two points:
1. Yes, the two pages cited from the Red Hat manual seem to answer my question about getting "Network" back. Using the descriptions on the two pages, I think I have everything configured correctly with the new interface to NetworkManager. Maybe I do, that is. There might still be something I'm missing, because nfs is still not working both ways.
2. Yes, this page was also very helpful. Before you posted this, my /etc/exports file was empty. Using the material on this page, I used gedit (as root) to create the following contents for /etc/exports:
# This file created by KJM 8-7-2012 for CentOS 6.3
/ 192.168.1.200(rw,sync,no_root_squash)
Here are the contents of several other (probably) related files:
(a) From localhost1 (new CentOS) I can mount a directory of localhost2 (Fedora)
(b) From localhost2 (Fedora) I CANNOT mount a directory of localhost1 (new CentOS)
system-config-network: Yes, I believe this was the name of the package for "Network" in the Administration menu. Trying a yum install shows that it is no longer available. What version are you running? According to the links in the post by chrism01, Red Hat stopped providing it with CentOS 6.
system-config-selinux: The new name is "policycoreutils-gui.i686 : SELinux configuration GUI." Someone should be given a prize for this "brilliant" change of name: it's SO much more descriptive. Yes, I found this and installed it. Now "SELinux Management" is back in the Adminstration menu.
Checking the menu editor was a good idea. Never thought of it. However, there were no GUIs unchecked for Administration.
Looks like your firewall on Centos is blocking nfs port 2049.
You need to backup & amend the file /etc/sysconfig/iptables-config to match that of the Fedora box, specifically to get these lines on iptables cmd
Code:
# from Fedora box output
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2049
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:2049
I adjusted the firewall settings on the CentOS computer to match those on the Fedora computer. Then the mount worked!! This is embarrassing because I had already tried that. However, it must have been before adding the line to /etc/exports (post #6).
Hpwever, once the mount worked, I then experimented with a number of combinations of firewall settings on the CentOS computer. I would very much appreciate some help in understanding the result of the following steps. Using the "Firewall Configuration" GUI:
(1) Under "Trusted Services," checking NFS4 put the line,
Quote:
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2049
in the output to iptables -nvL.
(2) Under "Other ports" I could alternatively add two entries for 2049 tcp and 2049 udp which then put both lines,
Quote:
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2049
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:2049
in the output to iptables -nvL.
(3) HOWEVER, neither setting, nor even BOTH settings enable the Fedora computer to mount a directory on the CentOS computer!
(4) The only setting that allowed the mount to work was to check, under "Trusted Interfaces," eth0. Then the mount would work even if neither (1) nor (2) were done--that is, even if neither of these two lines were in the output to the iptables command.
With the "ACCEPT" lines present in the output to iptables, why won't the mount work? Does it seem correct that the mount will work only if eth0 is a trusted interface?
However, there is a difference between a 'Service' eg NFS, MySQL, etc and an 'Interface' ie NIC/Ethernet Card.
In the iptables file, you can (optionally) specify port numbers (which relate to services see /etc/services for 'IANA Well Known Services' ) and optionally(!) specify which interface to use.
The latter is mostly used on servers with multiple NICs, but you can specify it for each line even on a single NIC system.
Definitely get used to using the cmd line to edit stuff.
I know a GUI 'seems' simpler, but in fact it hides a lot of stuff, thus making the decisions/results seem arbitrary and unrelated.
Also, most GUIs do not implement the entire range of available settings for the underlying SW, otherwise it would have loads of tabs/boxes.
Sometimes you have to use the cli to get the job done.
(Systems tend to be much more similar/std at the cli; the GUIs can be radically different, thus confusing)
Feel free to post your iptables file contents if you want to ask related qns.
Thanks, Chris. Some of your comments were, so far at least, above me. Before retirement, I had worked as a programmer and then taught programming. So I do feel at home with computers. However, one of my reasons for switching from Fedora (the "bleeding edge") to CentOS (one of the most stable OSs) was that, now that I'm retired, I want to spend the great bulk of my time in production work on the computer. In my retirement, this consists of research and writing (on Bible/theology) and maintaining six Web sites. Although it might be interesting to learn more of the skills of a sysadmin, that is really not my retirement goal.
So that's why I much prefer GUIs. I can do work on a terminal, but learning what files do what, where they are, and what commands and syntax they require is something I would like to keep to a minimum.
My for one or two questions (hopefully, you're still reading!). First, here's my iptables file you requested.
Quote:
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 631 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 631 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 631 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
Now the questions.
(1) By checking eth0 as a "Trusted Interface" in the Firewall Configuration GUI on both computers, NFS works in both directions. This could be taken as "problem solved." However, since eth0 is the door to the computer from the outside, is there a security risk? I have only a two-computer home network, but eth0 is also the door for all things from the Internet.
(2) Why doesn't NFS work when eth0 is not checked but the two 2049 lines appear in the table? (In yesterdays's post, I described the two ways to get them there using the firewall GUI.)
However, since eth0 is the door to the computer from the outside, is there a security risk? I have only a two-computer home network, but eth0 is also the door for all things from the Internet.
in which case you do NOT want to accept new incoming cxns at all on eth0, just related ones to those having gone out (kernel keeps track for you).
You might want to have a read of this http://www.thegeekstuff.com/2011/03/...utbound-rules/
The main thing is to draw a basic network diagram and name the interfaces and then think about what I said.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.