Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Other Astaro Products > Astaro Command Center (ACC)

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #11 (permalink)  
Old 03-06-2007, 12:50 AM
Wizard
 
Join Date: Oct 2003
Location: San Diego, CA
Posts: 1,025
Default

We just heard back from Astaro Support. They said that QA is looking at it right now and should know more in the next day or two.
Reply With Quote
  #12 (permalink)  
Old 03-06-2007, 01:28 AM
LewisR's Avatar
Senior Member
 
Join Date: Feb 2006
Location: Dix Hills, NY, USA
Posts: 116
Wink

I'm simply amazed at long it has taken people to get on board with this stuff and I'm almost as guilty as everyone else, except there's not much a consultant can when he's waiting for the software from "up above" to float on down.

Last Friday, as an example, Novell *finally* released their GroupWise DST Adjustor [sic] 2007 tool. Last Friday? I can understand not releasing anything until after the last time shift, but come on!

Considering the number of log files ASL creates, can you just imagine the mess if we don't have our clocks in sync?

Cheers, and thanks for the update from Astaro!
__________________
Lewis
-----
Lewis G Rosenthal, CNA, CLP, CLE
Rosenthal & Rosenthal, LLC
www.2rosenthals.com
Reply With Quote
  #13 (permalink)  
Old 03-06-2007, 01:30 AM
Moderator
 
Join Date: Apr 2001
Location: Brantford, Ontario, Canada
Posts: 808
Default

Here is some steps you can do, without needing to apply an unsupported rpm to your install.. this just replaces the TZ data files.

https://secure-support.novell.com/Ka...AL_Public.html
__________________
7 x ASG 220, 4 x ASG 120, 2 x 25 IP, Home Unlimited Power User.
Reply With Quote
  #14 (permalink)  
Old 03-06-2007, 01:57 AM
LewisR's Avatar
Senior Member
 
Join Date: Feb 2006
Location: Dix Hills, NY, USA
Posts: 116
Lightbulb

That's start, however, it's the first caveat which bothers me:
  • These "manual" changes WILL be lost if updates are applied to the system that do not contain the corrected timezone information. The timezone information is included in the timezone package. Applying older versions of this or related packages should be followed by re-applying these "manual" changes.
As we have really little or not control over the automatic update process, and whereas I realize that my install is wholly unsupported and could result in my system crashing, burning, or my house dropping into a fiery pit, I still think that applying the latest TZ update I could find (which fit easily) is a neater solution. I can always roll back manually later on (rpm -U --force) if necessary.

Disclaimer: I'm a Novell consultant, and certified by Novell in NetWare and Linux. I own stock in the Company. However, they're not infallable...
__________________
Lewis
-----
Lewis G Rosenthal, CNA, CLP, CLE
Rosenthal & Rosenthal, LLC
www.2rosenthals.com
Reply With Quote
  #15 (permalink)  
Old 03-06-2007, 01:58 PM
Junior Member
 
Join Date: Sep 2004
Location: Fargo, North Dakota - USA
Posts: 9
Default

I opened up a support issue on this last week with Astaro. Given their occasional habit of putting out patches that break stuff, this is really late in the game to have not yet released a patch.

I was told that it requires a whole new glibc as follows:

=== BEGIN QUOTE ===
Unfortunately this is not a simple RPM package update. The package in question is linked to by glibc, which absolutely everything else in the system is linked to/compiled against. QA is not sure how simply patching the package will affect glibc and the entire system. They may need to upgrade to a newer version of glibc, which means they need to recompile the entire OS and make sure it doesn’t break anything.
=== END QUOTE ===


What's up with that?!?! I've patched a bunch of other old servers manually by just dropping new files into /usr/share/zoneinfo. How come Astaro has to completely upgrade glibc?

Furthermore, if they don't really need to upgrade the glibc, why do they have people in charge of patches that actually think glibc needs to be upgraded?

I'm pretty happy with my v6.303 but I swear sometimes I wonder if I should have just spent the extra $$$ and went with a solution from a company that doesn't seem so darn cavalier about mission critical stuff. Yes, I know that DST2007 is unlikely to crash my firewall if it's not patched. But it still looks pretty poor for Astaro to have not released anything for what (I believe) is their largest installed userbase (v6.X).
Reply With Quote
  #16 (permalink)  
Old 03-06-2007, 03:02 PM
LewisR's Avatar
Senior Member
 
Join Date: Feb 2006
Location: Dix Hills, NY, USA
Posts: 116
Default

While Astaro's answer may be technically accurate, many glibc packages have been DST2007-ready for some time, with the builds modified to *only* address the timezone info (see http://tinyurl.com/27avqs - related to Sarge, but common for a number of distros - and http://tinyurl.com/2jsum3 - which has some specifics related to SuSE).

It has been my experience that if rpm doesn't complain about a glibc dependency, then the timezone package should work without a problem.

A listing of files in the timezone package I installed, for example, shows three executables:

/usr/bin/tzselect
/usr/sbin/zdump
/usr/sbin/zic

and the rest of the files are simple timezone data (which I will not list here, for brevity).

tzselect works (though it is not needed, as the system hasn't been moved); its dependency on glibc is no different than the build of glibc on the box right now.

zdump works, as does zic.

FWIW, glibc on this 6.303 box is glibc-2.3.3-98.38.1. Now, it is my understanding that for the DST2007-compatible timezone package(s), a minimum of glibc-2.2.4-32.2 is required, so I simply don't see where we lack a dependency.
__________________
Lewis
-----
Lewis G Rosenthal, CNA, CLP, CLE
Rosenthal & Rosenthal, LLC
www.2rosenthals.com
Reply With Quote
  #17 (permalink)  
Old 03-06-2007, 07:02 PM
Wizard
 
Join Date: Oct 2003
Location: San Diego, CA
Posts: 1,025
Default

I fail to see why glibc needs to be updated at all to update the timezones on V6. There is a timezone package installed on the system which clearly contains all the timezone data (as also noted at the URL Lewis mentioned earlier: http://tinyurl.com/2jsum3)

Looking at my /etc/localtime, it points to /usr/share/zoneinfo/US/Pacific which is part of the timezone package.
Reply With Quote
  #18 (permalink)  
Old 03-07-2007, 02:47 AM
Moderator
 
Join Date: Jul 2001
Location: southern California
Posts: 5,116
Default

FWIW, RedHat says glibc also needs to be updated on RHEL3...

I don't remember the details, but they're on RedHat's site.

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.3x, Dell PE1550 Dual PIII 1GHz, 1GB RAM, 2 NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #19 (permalink)  
Old 03-07-2007, 05:15 AM
LewisR's Avatar
Senior Member
 
Join Date: Feb 2006
Location: Dix Hills, NY, USA
Posts: 116
Default

Yes, the need to update glibc on RHEL3 is due to the fact that the shipped version of glibc is older than the minimum required by the latest TZ updates (per my earlier note). From the Red Hat kb:
A caveat of only updating tzdata is there but there is no built in mechanism to update /etc/localtime to the latest timezone unless the system is already running glibc-common version 2.3.2-95.40 or greater. If the system is not on these versions, there are additional options. Any of these can be used to update the localtime information:
Update both glibc-common and tzdata at the same time in the same up2date run or with the rpm command. This will lay down a new binary from glibc-common called tzdata-update which resides in /usr/sbin. The tzdata package is a requirement of glibc-common, so it will be installed first and will lay down the new tzdata files...
So, it would appear that Red Hat is of the opinion that they require a newer glibc than that which I previously believed would be good for the majority of distros. That said, their note doesn't contradict mine; the reason for the glibc update is to resolve a dependency of the updated tzdata (timezone, for us) package.

FWIW, the entire note on RHEL3 may be found here: http://tinyurl.com/2t4agr.

(And I just realized that I have a WBEL3 box to update as well as - gulp! - a Red Hat 5.2 box...that last one will be fun, I'm sure.)
__________________
Lewis
-----
Lewis G Rosenthal, CNA, CLP, CLE
Rosenthal & Rosenthal, LLC
www.2rosenthals.com
Reply With Quote
  #20 (permalink)  
Old 03-11-2007, 03:31 PM
Junior Member
 
Join Date: Mar 2007
Posts: 2
Default

FWIW: we have a 525F here running 6.303 that didn't get patched in time. It experienced a kernel panic somewhere around 2:00am this morning, requiring a hard reset from the back of the box and a REALLY long disk scan.

Considering how late Astaro released 6.304, it would have been a nice of them to also send out an email to customers making sure they understood the import of this one (and knew it existed)... It seems to me that a time change shouldn't be able to take down mission critical equipment like this.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 06:42 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.