0001244: CentOS / RHEL 6 support - PacketFence

(0002131)
obilodeau (reporter)
2011-08-12 14:54

CentOS 6 support is in progress and, for now, we aim to have a CentOS 6 ready 3.0 release.

Can you be more specific about what breaks on other distro? I would argue that iptables is probably one of the pieces that we use that is guaranteed to be cross-distro. Have you pulled IPTables::ChainMgr from cpan?

Also, may I recommend filing a separate issue for the iptables distro specific problems?

(0002133)
fgaudreault (viewer)
2011-08-15 08:33

See :
http://sourceforge.net/mailarchive/message.php?msg_id=27939321 [^]

(0002134)
maikel (reporter)
2011-08-15 10:34

Will check that against Centos 6.0.
For centos 6 i tried the yum repo for 2.2.1

I will check the current Centos 6 repo for PF 3.0.0 Beta2

(0002149)
obilodeau (reporter)
2011-08-23 13:54

Found some problems related to jpgraph today. I will be bumping jpgraph to 3.0.7 right now in trunk to fix them.

(0002150)
obilodeau (reporter)
2011-08-23 14:34

jpgraph inclusion done

(0002165)
maikel (reporter)
2011-08-26 07:49

currently on a clean centos6 install:
Error: Package: packetfence-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: php-pear-Log
Error: Package: packetfence-freeradius2-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: freeradius2
Error: Package: 1:snort-2.8.6-1.i386 (PacketFence-Devel)
           Requires: libpcap.so.0.9.4
Error: Package: perl-Net-Appliance-Session-1.36-1.el6.rf.noarch (rpmforge)
           Requires: perl(IO::Pty)
Error: Package: packetfence-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: perl-Net-Write
Error: Package: packetfence-freeradius2-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: freeradius2-perl

[PacketFence-Devel]
name=PacketFence Development Repository
baseurl=http://inverse.ca/downloads/PacketFence/RHEL6/devel/$basearch [^]
gpgcheck=0
enabled=0

(0002166)
fgaudreault (viewer)
2011-08-26 08:09

Thanks for the report! In fact, some packages and spec modifications will need to be done to fully support CentOS 6, but that will keep track of it.

Couple comments :
- the freeradius under RHEL6 is packaged as freeradius, not freeradius2. So our configuration package will bail. We will need to fix the spec for RHEL6
- We will copy over the snort from snort.org to our repo, the newer version is now working fine on RHEL6
- perl-Net-Write should be available in the repo, but since the repository is still not created for yum to understand, install the package manually : http://www.packetfence.org/downloads/PacketFence/RHEL6/devel/i386/RPMS/perl-Net-Write-1.05-1.noarch.rpm [^]
- php-pear-Log is available in EPEL, so install the EPEL repo
- Now the net-appliance-session, I am not sure why you have an issue with perl IO. I checked in the spec file in rpmforge svn, and there is no required package.

(0002167)
maikel (reporter)
2011-08-26 08:58

Indeed,

think in the admin manual epel needs to be added for RHEL6 and centos6

this line should become:
rpm --import http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt [^]

as -import doesnt work

So just the spec and snort are needed to successfully start to use RHEL6

(0002168)
maikel (reporter)
2011-08-26 09:09

On centos6

Snort works with this rpm:
snort-2.9.1-1.F13.i386.rpm
daq-0.6.1-1.i386.rpm

All now is needed is the changed spec file, rest can be done in the admin manual i think

(0002169)
maikel (reporter)
2011-08-26 10:22

Error: Package: packetfence-3.0.0-0.20110825.el5.noarch (/packetfence-3.0.0-0.20110825.el5.noarch)
Requires: perl(IPTables::libiptc) = 0.14
You could try using --skip-broken to work around the problem

(0002170)
maikel (reporter)
2011-08-26 11:48

Also worthy to notice:
; This directive determines whether or not PHP will recognize code between
; <? and ?> tags as PHP source which should be processed as such. It's been
; recommended for several years that you not use the short tag "short cut" and
; instead to use the full <?php and ?> tag combination. With the wide spread use
; of XML and use of these tags by other languages, the server can become easily
; confused and end up parsing the wrong code in the wrong context. But because
; this short cut has been a feature for such a long time, it's currently still
; supported for backwards compatibility, but we recommend you don't use them.
; Default Value: On
; Development Value: Off
; Production Value: Off
; http://www.php.net/manual/en/ini.core.php#ini.short-open-tag [^]
short_open_tag = On

Per default on Centos this is set for Off

(0002171)
fgaudreault (viewer)
2011-08-26 11:50

Yes the PHP issue was already stated here :
http://sourceforge.net/mailarchive/message.php?msg_id=27939321 [^]

(0002198)
obilodeau (reporter)
2011-09-12 16:03

Please re-try CentOS6/RHEL6 support after tonight's build.

- We now routinely build for RHEL6
- Fixed several PHP issues (short tags, timezone)
- gettext dependency
- groupinstall on freeradius2 instead of freeradius. Same issue for packetfence-freeradius2 fixed too.
- IPTables::libiptc dependency correct for RHEL6

Documentation was *not* updated.

(0002226)
obilodeau (reporter)
2011-09-19 16:27

0001257 no longer a blocker for RHEL6 support

(0002227)
maikel (reporter)
2011-09-20 08:27
edited on: 2011-09-20 08:40

On a clean centos 6 repo, it now all works

Good to add to the Centos 6 document the adding of EPEL is needed

rpm -Uvh http://download.fedora.redhat.com/pub/epel/6/i386/epel-release-6-5.noarch.rpm [^]

(0002228)
fgaudreault (viewer)
2011-09-20 08:57

It was already in the admin guide.

(0002247)
obilodeau (reporter)
2011-09-21 22:15

fix released in 3.0

Issue History
Date Modified	Username	Field	Change
2011-08-12 14:48	maikel	New Issue
2011-08-12 14:54	obilodeau	Note Added: 0002131
2011-08-15 08:33	fgaudreault	Note Added: 0002133
2011-08-15 08:34	fgaudreault	Priority	normal => low
2011-08-15 08:34	fgaudreault	Severity	major => tweak
2011-08-15 10:34	maikel	Note Added: 0002134
2011-08-23 13:54	obilodeau	Note Added: 0002149
2011-08-23 14:34	obilodeau	Note Added: 0002150
2011-08-23 14:34	obilodeau	Assigned To	=> obilodeau
2011-08-23 14:34	obilodeau	Priority	low => high
2011-08-23 14:34	obilodeau	Status	new => assigned
2011-08-23 14:34	obilodeau	Category	upgrade => packaging
2011-08-23 14:34	obilodeau	Target Version	=> +1
2011-08-23 14:34	obilodeau	Summary	Centos6 support => CentOS / RHEL 6 support
2011-08-26 07:49	maikel	Note Added: 0002165
2011-08-26 08:09	fgaudreault	Note Added: 0002166
2011-08-26 08:58	maikel	Note Added: 0002167
2011-08-26 09:09	maikel	Note Added: 0002168
2011-08-26 10:22	maikel	Note Added: 0002169
2011-08-26 11:48	maikel	Note Added: 0002170
2011-08-26 11:50	fgaudreault	Note Added: 0002171
2011-09-12 16:03	obilodeau	Note Added: 0002198
2011-09-12 16:03	obilodeau	Assigned To	obilodeau => fgaudreault
2011-09-19 13:59	obilodeau	Relationship added	parent of 0001257
2011-09-19 13:59	obilodeau	Relationship added	parent of 0001258
2011-09-19 16:27	obilodeau	Relationship deleted	parent of 0001257
2011-09-19 16:27	obilodeau	Note Added: 0002226
2011-09-20 08:27	maikel	Note Added: 0002227
2011-09-20 08:40	maikel	Note Edited: 0002227
2011-09-20 08:57	fgaudreault	Note Added: 0002228
2011-09-21 15:03	obilodeau	Status	assigned => resolved
2011-09-21 15:03	obilodeau	Fixed in Version	=> trunk
2011-09-21 15:03	obilodeau	Resolution	open => fixed
2011-09-21 22:07	obilodeau	Fixed in Version	trunk => 3.0.0
2011-09-21 22:15	obilodeau	Note Added: 0002247
2011-09-21 22:16	obilodeau	Status	resolved => closed
2011-10-24 20:24	obilodeau	Target Version	+1 => 3.0.0

Notes
(0002131) obilodeau (reporter) 2011-08-12 14:54	CentOS 6 support is in progress and, for now, we aim to have a CentOS 6 ready 3.0 release. Can you be more specific about what breaks on other distro? I would argue that iptables is probably one of the pieces that we use that is guaranteed to be cross-distro. Have you pulled IPTables::ChainMgr from cpan? Also, may I recommend filing a separate issue for the iptables distro specific problems?

(0002133) fgaudreault (viewer) 2011-08-15 08:33	See : http://sourceforge.net/mailarchive/message.php?msg_id=27939321 [^]

(0002134) maikel (reporter) 2011-08-15 10:34	Will check that against Centos 6.0. For centos 6 i tried the yum repo for 2.2.1 I will check the current Centos 6 repo for PF 3.0.0 Beta2

(0002149) obilodeau (reporter) 2011-08-23 13:54	Found some problems related to jpgraph today. I will be bumping jpgraph to 3.0.7 right now in trunk to fix them.

(0002150) obilodeau (reporter) 2011-08-23 14:34	jpgraph inclusion done

(0002165) maikel (reporter) 2011-08-26 07:49	currently on a clean centos6 install: Error: Package: packetfence-3.0.0-0.20110812.el5.noarch (PacketFence-Devel) Requires: php-pear-Log Error: Package: packetfence-freeradius2-3.0.0-0.20110812.el5.noarch (PacketFence-Devel) Requires: freeradius2 Error: Package: 1:snort-2.8.6-1.i386 (PacketFence-Devel) Requires: libpcap.so.0.9.4 Error: Package: perl-Net-Appliance-Session-1.36-1.el6.rf.noarch (rpmforge) Requires: perl(IO::Pty) Error: Package: packetfence-3.0.0-0.20110812.el5.noarch (PacketFence-Devel) Requires: perl-Net-Write Error: Package: packetfence-freeradius2-3.0.0-0.20110812.el5.noarch (PacketFence-Devel) Requires: freeradius2-perl [PacketFence-Devel] name=PacketFence Development Repository baseurl=http://inverse.ca/downloads/PacketFence/RHEL6/devel/$basearch [^] gpgcheck=0 enabled=0

(0002166) fgaudreault (viewer) 2011-08-26 08:09	Thanks for the report! In fact, some packages and spec modifications will need to be done to fully support CentOS 6, but that will keep track of it. Couple comments : - the freeradius under RHEL6 is packaged as freeradius, not freeradius2. So our configuration package will bail. We will need to fix the spec for RHEL6 - We will copy over the snort from snort.org to our repo, the newer version is now working fine on RHEL6 - perl-Net-Write should be available in the repo, but since the repository is still not created for yum to understand, install the package manually : http://www.packetfence.org/downloads/PacketFence/RHEL6/devel/i386/RPMS/perl-Net-Write-1.05-1.noarch.rpm [^] - php-pear-Log is available in EPEL, so install the EPEL repo - Now the net-appliance-session, I am not sure why you have an issue with perl IO. I checked in the spec file in rpmforge svn, and there is no required package.

(0002167) maikel (reporter) 2011-08-26 08:58	Indeed, think in the admin manual epel needs to be added for RHEL6 and centos6 this line should become: rpm --import http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt [^] as -import doesnt work So just the spec and snort are needed to successfully start to use RHEL6

(0002168) maikel (reporter) 2011-08-26 09:09	On centos6 Snort works with this rpm: snort-2.9.1-1.F13.i386.rpm daq-0.6.1-1.i386.rpm All now is needed is the changed spec file, rest can be done in the admin manual i think

(0002169) maikel (reporter) 2011-08-26 10:22	Error: Package: packetfence-3.0.0-0.20110825.el5.noarch (/packetfence-3.0.0-0.20110825.el5.noarch) Requires: perl(IPTables::libiptc) = 0.14 You could try using --skip-broken to work around the problem

(0002170) maikel (reporter) 2011-08-26 11:48	Also worthy to notice: ; This directive determines whether or not PHP will recognize code between ; <? and ?> tags as PHP source which should be processed as such. It's been ; recommended for several years that you not use the short tag "short cut" and ; instead to use the full <?php and ?> tag combination. With the wide spread use ; of XML and use of these tags by other languages, the server can become easily ; confused and end up parsing the wrong code in the wrong context. But because ; this short cut has been a feature for such a long time, it's currently still ; supported for backwards compatibility, but we recommend you don't use them. ; Default Value: On ; Development Value: Off ; Production Value: Off ; http://www.php.net/manual/en/ini.core.php#ini.short-open-tag [^] short_open_tag = On Per default on Centos this is set for Off

(0002171) fgaudreault (viewer) 2011-08-26 11:50	Yes the PHP issue was already stated here : http://sourceforge.net/mailarchive/message.php?msg_id=27939321 [^]

(0002198) obilodeau (reporter) 2011-09-12 16:03	Please re-try CentOS6/RHEL6 support after tonight's build. - We now routinely build for RHEL6 - Fixed several PHP issues (short tags, timezone) - gettext dependency - groupinstall on freeradius2 instead of freeradius. Same issue for packetfence-freeradius2 fixed too. - IPTables::libiptc dependency correct for RHEL6 Documentation was not updated.

(0002226) obilodeau (reporter) 2011-09-19 16:27	0001257 no longer a blocker for RHEL6 support

(0002227) maikel (reporter) 2011-09-20 08:27 edited on: 2011-09-20 08:40	On a clean centos 6 repo, it now all works Good to add to the Centos 6 document the adding of EPEL is needed rpm -Uvh http://download.fedora.redhat.com/pub/epel/6/i386/epel-release-6-5.noarch.rpm [^]

(0002228) fgaudreault (viewer) 2011-09-20 08:57	It was already in the admin guide.

(0002247) obilodeau (reporter) 2011-09-21 22:15	fix released in 3.0