Re: [gentoo-user] IP aliasing problem

2010-10-07 Thread Stroller

On 6 Oct 2010, at 23:17, Grant wrote:

>>> ...I have 5 usable IPs from my host and I've defined 2 of them in 
>>> /etc/conf.d/net like this:
>>> 
>>> config_eth0=(
>>>"1.2.3.1 netmask 255.255.255.0"
>>>"1.2.3.2 netmask 255.255.255.0"
>>> )
>>> 
>>> My apache2 config is not working as expected and I think its due to a
>>> networking problem because eth0:1 reports no RX or TX stats:
>>> 
>>> # ifconfig
>>> eth0  Link encap:Ethernet  HWaddr [removed]
>>>  inet addr:1.2.3.1  Bcast:[removed]  Mask:255.255.255.0
>>>  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>>>  RX packets:46047 errors:0 dropped:0 overruns:0 frame:0
>>>  TX packets:65703 errors:0 dropped:0 overruns:0 carrier:0
>>>  collisions:0 txqueuelen:1000
>>>  RX bytes:6131194 (5.8 MiB)  TX bytes:82568335 (78.7 MiB)
>>>  Interrupt:40
>>> 
>>> eth0:1Link encap:Ethernet  HWaddr [removed]
>>>  inet addr:1.2.3.2  Bcast:[removed]  Mask:255.255.255.0
>>>  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>>>  Interrupt:40
>> 
> ...
> Thank you for taking the time to write Stroller.  This has really got
> my head spinning.  First of all, you're right about the netmask.  It
> is 255.255.255.248.  I didn't have a good understanding of what a
> netmask is so I thought it would be smart to change it for a public
> message.
> 
> The server is remote and hosted so I don't have any control over the
> router or network.  I've gone back and forth with the host but they
> insist that everything is fine on their end.
> 
> I'm confused because I have in apache2 config:
> 
> 
> ...
> SSLCertificateFile /etc/apache2/ssl/www.example1.com.crt
> SSLCertificateKeyFile /etc/apache2/ssl/www.example1.com.key
> ...

Suggest you first establish you can ping *both* IPs.

Stroller.




Re: [gentoo-user] Re: firefox-bin optimizations?

2010-10-07 Thread William Kenworthy
In /etc/fstab I have (this is a diskless atom based PXE system):

shm /dev/shmtmpfs   nodev,nosuid,noexec 
0 0

tmpfs   /tmptmpfs   
size=1250M,mode=1777,noatime,auto   0 0
tmpfs   /var/lock   tmpfs   size=10m,noatime,auto   
0 0
tmpfs   /var/runtmpfs   size=10m,noatime,auto   
0 0
tmpfs   /var/cache/hald tmpfs   size=10m,noatime,auto   
0 0


and in /etc/conf.d/local.start:
mkdir /tmp/portage
mkdir /tmp/portage/tmp
mkdir /tmp/portage/distfiles

and it /etc/make.conf

DISTDIR="/tmp/portage/distfiles"
PORTAGE_TMPDIR='/tmp/portage/tmp'
PORTDIR='/tmp/portage/'
PORTDIR_OVERLAY="/usr/local/portage"
PORTAGE_BINHOST="http://tinderbox.dev.gentoo.org/default-linux/amd64/";
PKGDIR="/tmp/portage/packages/"


It works fine except for gcc where with 3G of ram, everything in tmpfs
and swap over nfs works randomly due to running out of ram.

BillK




On Thu, 2010-10-07 at 00:55 -0400, Walter Dnes wrote:
> On Tue, Oct 05, 2010 at 11:27:54PM -0400, Walter Dnes wrote
> 
> >   Looks like I can tweak stuff in the ebuild via "mozconfig_annotate"
> > lines, and then...
> > 
> > ebuild firefox-3.6.9.ebuild manifest
> > emerge firefox
> 
>   Something isn't working.  I put in
> mozconfig_annotate '' --disable-pango
> mozconfig_annotate '' --disable-oji --disable-mathml
> 
> into the ebuild (a copy in my local overlay) and ebuild-manifested it.
> Portage said it was building from the overlay, but "about:buildconfig"
> shows them as being enabled.  I have been able to
> --disable-necko-wifi (WTF is *THAT* in a browser, fercryingoutloud?).
> 
>   Any ideas?  A long time ago, in a place far away, I used to build
> Mozilla 0.9x "the hard way", because the downloadable binary was
> painfully slow on my machine.  And later on Phoenix 0.9x (remember
> that?).  I've forgotten most of what I learned, but I can follow the
> instructions at https://developer.mozilla.org/En/Simple_Firefox_build
> I have a couple of questions before proceeding...
> 1) what do I have to set to force all files to be installed in /opt or
> in /usr/local ?
> 2) I've got 8 gigs of ram.  How do I force the compiler to use /dev/shm
> as the scratch directory ?
> 

-- 
William Kenworthy 
Home in Perth!




Re: [gentoo-user] Re: firefox-bin optimizations?

2010-10-07 Thread William Kenworthy
To clarify, building everything except gcc works fine - its gcc itself
thats problematic

BillK



On Thu, 2010-10-07 at 15:52 +0800, William Kenworthy wrote:
> In /etc/fstab I have (this is a diskless atom based PXE system):
> 
> shm /dev/shmtmpfs   nodev,nosuid,noexec   
>   0 0
> 
> tmpfs   /tmptmpfs   
> size=1250M,mode=1777,noatime,auto   0 0
> tmpfs   /var/lock   tmpfs   size=10m,noatime,auto 
>   0 0
> tmpfs   /var/runtmpfs   size=10m,noatime,auto 
>   0 0
> tmpfs   /var/cache/hald tmpfs   size=10m,noatime,auto 
>   0 0
> 
> 
> and in /etc/conf.d/local.start:
> mkdir /tmp/portage
> mkdir /tmp/portage/tmp
> mkdir /tmp/portage/distfiles
> 
> and it /etc/make.conf
> 
> DISTDIR="/tmp/portage/distfiles"
> PORTAGE_TMPDIR='/tmp/portage/tmp'
> PORTDIR='/tmp/portage/'
> PORTDIR_OVERLAY="/usr/local/portage"
> PORTAGE_BINHOST="http://tinderbox.dev.gentoo.org/default-linux/amd64/";
> PKGDIR="/tmp/portage/packages/"
> 
> 
> It works fine except for gcc where with 3G of ram, everything in tmpfs
> and swap over nfs works randomly due to running out of ram.
> 
> BillK
> 
> 
> 
> 
> On Thu, 2010-10-07 at 00:55 -0400, Walter Dnes wrote:
> > On Tue, Oct 05, 2010 at 11:27:54PM -0400, Walter Dnes wrote
> > 
> > >   Looks like I can tweak stuff in the ebuild via "mozconfig_annotate"
> > > lines, and then...
> > > 
> > > ebuild firefox-3.6.9.ebuild manifest
> > > emerge firefox
> > 
> >   Something isn't working.  I put in
> > mozconfig_annotate '' --disable-pango
> > mozconfig_annotate '' --disable-oji --disable-mathml
> > 
> > into the ebuild (a copy in my local overlay) and ebuild-manifested it.
> > Portage said it was building from the overlay, but "about:buildconfig"
> > shows them as being enabled.  I have been able to
> > --disable-necko-wifi (WTF is *THAT* in a browser, fercryingoutloud?).
> > 
> >   Any ideas?  A long time ago, in a place far away, I used to build
> > Mozilla 0.9x "the hard way", because the downloadable binary was
> > painfully slow on my machine.  And later on Phoenix 0.9x (remember
> > that?).  I've forgotten most of what I learned, but I can follow the
> > instructions at https://developer.mozilla.org/En/Simple_Firefox_build
> > I have a couple of questions before proceeding...
> > 1) what do I have to set to force all files to be installed in /opt or
> > in /usr/local ?
> > 2) I've got 8 gigs of ram.  How do I force the compiler to use /dev/shm
> > as the scratch directory ?
> > 
> 

-- 
William Kenworthy 
Home in Perth!




Re: [gentoo-user] dev-util/autotoolset

2010-10-07 Thread dhk
On 10/05/2010 10:01 AM, BRM wrote:
> - Original Message 
> 
>> From: Alan McKinnon 
>> To: gentoo-user@lists.gentoo.org
>> Cc: dhk 
>> Sent: Tue, October 5, 2010 7:34:02 AM
>> Subject: Re: [gentoo-user] dev-util/autotoolset
>>
>> Apparently, though unproven, at 12:33 on Tuesday 05 October 2010, dhk did 
>> opine thusly:
>>
>>> On 10/05/2010 05:28 AM, Alan McKinnon  wrote:
 Apparently, though unproven, at 10:25 on Tuesday 05 October  2010, dhk did

 opine thusly:
> What  should I do about dev-util/autotoolset?  I use it every day for a
>>>  >> project, but today it looks like I'm being told to remove it.   What is
> the alternative?
>
> In  my package.keywords file I have "dev-util/autotoolset ~amd64"
>  unmasked since I use autotools for a project.
>
>  After the output of "emerge -uDNp world" this morning the following
>>>  >> message is displayed.
>
> !!! The  following installed packages are masked:
> -  dev-util/autotoolset-0.11.4-r1 (masked by: package.mask)
>  /usr/portage/profiles/package.mask:
> # Diego E. Pettenò  (04 Oct  2010)
> #  on behalf of QA team
> #
>>>  >> # Ironically, it is misusing autotools (bug #255831). It was
>>>  >> # added in 2004 and never version bumped since; autotools
>>>  >> # have since evolved a fair amount, while this is based
>>>  >> # still on automake 1.6. Avoid keeping it around.
>  #
> # Removal on 2010-12-03
>
>  For more information, see the MASKED PACKAGES section in the emerge
>>>  >> man page or refer to the Gentoo Handbook.
>
>>>  >> As stated above, what should I "Avoid keeping it around?"  Is  it
> autotoolset, automake 1.6, ...?  Also, what's getting  removed on
> 2010-12-03?  If autotoolset is removed, what  should be used to build
> projects?

  The text applies to autotoolset and the reason it is being removed. It  
> is
 autotoolset that is not being kept around anymore.

 It's actually quite obvious once you calm down, get over your  fright, and
 read the message.

 You do not  need autotoolset to build projects. You need autotools which
 is not  the same thing.

> Even though I have autotoolset  installed, search shows it as being
> masked.
>
> # emerge --search autotoolset
>  Searching...
> [ Results for search key : autotoolset ]
>>>  >> [ Applications found : 1 ]
>
> *   dev-util/autotoolset [ Masked ]
>
>Latest version available: 0.11.4-r1
>Latest version installed: 0.11.4-r1
>   Size  of files: 1,133 kB
>   Homepage:   http://autotoolset.sourceforge.net/
>Description:   colection of small tools to simplify project
>>>  >> 
> development with autotools
>
>>>  >>   License:   GPL-2
>>>  >> 
> What to do now?

 Why are  you worried? You use autotools not autotoolset. Let the thing be
  removed, After 6 years of no updates you shouldn't be using it anyway.
>>>
>>> So are you saying if I remove autotoolset that I'll still have  autoconf,
>>> automake, and the rest; and everything will work the  same?  I thought
>>> all the autotools were in autotoolset.  I  guess I don't know the
>>> difference between autotools and autotoolset and  what they are made up of.
>>
>>
>> autotools != autotoolset
>>
>> The  description from eix that you yourself posted tells you as much.
>>
>> Run  "equery files autotoolset" and see what is in the package. Decide for 
>> yourself if you want to keep it and if so move the ebuild to your local 
>> overlay where you can maintain it for yourself.
> 
> Reading over the website it seems almost as if it is a fork of GNU autotools.
> 
> http://autotoolset.sourceforge.net/
> 
> But to the original question - if they do not remain installed then you can 
> always install them individually as well.
> 
> Ben
> 
> 
> 

I thought all the auto tools were in the autotoolset, that's not the
case.  It looks like the only tool I use in autotoolset is acmkdir.  If
I remove autotoolset, how can I get acmkdir back?  Even though it's not
necessary, it's a nice tool for starting a project.

Thanks,

dhk




Re: [gentoo-user] seq24 fails to comoile

2010-10-07 Thread Arttu V.
On 10/7/10, meino.cra...@gmx.de  wrote:
> I made the changes you suggested and now got an different error ... it
> still does not compile.

It's most likely the same error. AFAICT the cause of the error is
missing in your first email. Using -j12 was probably just hiding it so
far above your snippet that it was overlooked.

As for seq24 -- there has been a bug open for a few months:

http://bugs.gentoo.org/show_bug.cgi?id=326795

I added a link to a possible upstream one-line patch in a comment in
the bug (didn't try compiling it myself).

-- 
Arttu V. -- Running Gentoo is like running with scissors



Re: [gentoo-user] Re: Firefox and Thunderbird spell-checker is offering too many languages

2010-10-07 Thread David Relson
On Thu, 07 Oct 2010 06:55:18 +0300
Nikos Chantziaras wrote:

> On 10/06/2010 09:58 PM, Dale wrote:
> > Nikos Chantziaras wrote:
> >> The list of spell-check languages offered by Firefox and
> >> Thunderbird looks like this:
> >>
> >> English (AU)
> >> English (CA)
> >> English (GB)
> >> English (GB-oed)
> >> English (NZ)
> >> English (US)
> >> English (ZA)
> >> German (DE)
> >> Greek (GR)
> >>
> >> All this English stuff needs to do away, I only want English (US).
> >> Is there a way to do that?
> >>
> >>
> >
> > I have this set in my make.conf.
> >
> > LINGUAS="en_US en"
> > LANG="en_US"
> > LC_ALL="en_US.utf8"
> >
> > Do you have something close to this as well? I can't think of
> > anything else at the moment. Maybe someone else will post a
> > different idea.
> 
> No, that's not it.  I have LINGUAS="en_US en" in my make.conf too.  I 
> found out that Firefox now uses hunspell for spell checking.  Maybe
> that has something to do with it.  So I guess the question now should
> be how to tell hunspell to only offer the US-English dictionary.
> 

run "eix -e hunspell" to show the languages supported/activated for
hunspell



Re: [gentoo-user] Re: firefox-bin optimizations?

2010-10-07 Thread Arttu V.
On 10/7/10, Walter Dnes  wrote:
> On Tue, Oct 05, 2010 at 11:27:54PM -0400, Walter Dnes wrote
>
>>   Looks like I can tweak stuff in the ebuild via "mozconfig_annotate"
>> lines, and then...
>>
>> ebuild firefox-3.6.9.ebuild manifest
>> emerge firefox
>
>   Something isn't working.  I put in
> mozconfig_annotate '' --disable-pango
> mozconfig_annotate '' --disable-oji --disable-mathml
>
> into the ebuild (a copy in my local overlay) and ebuild-manifested it.
> Portage said it was building from the overlay, but "about:buildconfig"
> shows them as being enabled.  I have been able to
> --disable-necko-wifi (WTF is *THAT* in a browser, fercryingoutloud?).
>
>   Any ideas?

I think the eclass(es) might be messing up the config, e.g., by
force-feeding pango and some other settings.

Could you try also copying the mozcoreconf-2.eclass to your local
overlay's eclass/ subdir, and edit it there to suite your taste?

-- 
Arttu V. -- Running Gentoo is like running with scissors



Re: [gentoo-user] seq24 fails to comoile

2010-10-07 Thread Stroller

On 7 Oct 2010, at 06:40, meino.cra...@gmx.de wrote:
>> ...
>>> MAKEOPTS="-j 12"
>> 
>> Agh No!!!  That's probably your problem right there.
>> The recommendation in the manual is N+1, where N == number of cores.  Do
>> you have 11 or more cores?  I find that even that isn't always safe.  I
>> set...
>> 
>> MAKEOPTS="-j 1"
>> ...
> 
> I made the changes you suggested and now got an different error ... it
> still does not compile. 

Did you reduce it to (the number of cores in your system + 1) or to "-j 1"?

If the former, try the latter.

Stroller.




Re: [gentoo-user] Re: Normal disk speed?

2010-10-07 Thread Daniel Troeder
On 10/07/2010 12:59 AM, Adam Carter wrote:
> WOW! Those differences are crazy!
> 
> 
> Please - I know benchmarking takes a lot of time - but could you check
> something: the behavior those fs have at what time they flush data from
> cache to disk is very different. Have you made sure that you measured
> the time it really needs? I mean the difference between:
> 
> $ sync; time cp source dest
> and
> $ sync; time (cp source dest; sync)
> 
> Only the last measures somewhat correctly.
> 
> 
> I had noticed that there was, say, 5 seconds of disk activity after the
> cp command complete which I assumed was buffers getting flushed, but 5
> seconds didnt seem that significant overall. I will run the tests as you
> suggest and post back. Do you think btrfs (with or without compression)
> would be faster than reiser? If so I will try that as well.
On my system it is twice as fast as reiser3 for _lots_ (200.000) of
small files with compression on (didn't test is without compression). I
didn't test if with big files.

But your results may vary anyway. For example btrfs is very
cpu-intensive (even more with compression). If you've got a slow cpu
(like in embedded devices), jfs might perform better.

BTW: _all_ my partitions are encrypted and on LVM, so your use case is
probably very different :)

Bye,
Daniel

-- 
PGP key @ http://pgpkeys.pca.dfn.de/pks/lookup?search=0xBB9D4887&op=get
# gpg --recv-keys --keyserver hkp://subkeys.pgp.net 0xBB9D4887



signature.asc
Description: OpenPGP digital signature


[gentoo-user] Sniffing / analysis of application / wifi packets on my LAN

2010-10-07 Thread Stroller
Hi there,

I'm interested in the activity of an application which is running on my LAN, 
and was wondering if anyone could offer some quick pointers on the best tools 
for this these days. I've played with this some years ago, but only very 
superficially - I think I used wireshark back then.

Ideally what I want to do is capture a big dump of the traffic over a couple of 
minutes (so it shouldn't be that much, right?) into a file and then analyse it 
afterwards based on destination IP, content &c. A couple of minutes should 
allow completion of at least 2 or 3 separate interactions with the server.

The network is mine, as is the device from which I'm capturing the data. I have 
a Belkin F5D7010 wifi card, which I think is based on a RaLink rt2x00 (rt2400 / 
rt2500) chipset, and I have my network's WPA key, so I think I can just set the 
wifi card in passive mode for sniffing. I'm pretty sure I experimented with 
this card in passive mode before, some years ago. Alternatively, I think I can 
plug the wifi access-point into my PC, bridge it to a second wired NIC and 
sniff what's going across the bridge (but I don't think this should be 
necessary).

What I'm expecting to see is some image, audio & html files &/or xml data 
transferred, and ideally I'd like to be able to extract it all and view it in 
its original format. 

There's likely to be some inevitable other activity on the wLAN whilst this is 
happening - I'll try to minimise this, but I think the tools should be able 
filter out any crap I'm not interested in, right?

I'd prefer as much as possible to use CLI tools for capturing / analysing the 
data.

Thanks in advance for any quick pointers you can offer,

Stroller.




Re: [gentoo-user] dev-util/autotoolset

2010-10-07 Thread Willie Wong
On Thu, Oct 07, 2010 at 04:01:14AM -0400, dhk wrote:
> 
> I thought all the auto tools were in the autotoolset, that's not the
> case.  It looks like the only tool I use in autotoolset is acmkdir.  If
> I remove autotoolset, how can I get acmkdir back?  Even though it's not
> necessary, it's a nice tool for starting a project.

I have somewhat of a suspicious that `acmkdir' may be just a shell
script? (Never used it, so I don't know.) If so then you can just find
it on your system and copy it to /usr/local/bin or something like that
(it possibly copies the templates from somewhere else, so you will
need to find those also). 

Note that it may make use of deprecated autotool commands, and if not
updated, may break in the future. 

HTH, 

W

-- 
Willie W. Wong ww...@math.princeton.edu
Data aequatione quotcunque fluentes quantitae involvente fluxiones invenire 
 et vice versa   ~~~  I. Newton



Re: [gentoo-user] seq24 fails to comoile

2010-10-07 Thread meino . cramer
Stroller  [10-10-07 11:53]:
> 
> On 7 Oct 2010, at 06:40, meino.cra...@gmx.de wrote:
> >> ...
> >>> MAKEOPTS="-j 12"
> >> 
> >> Agh No!!!  That's probably your problem right there.
> >> The recommendation in the manual is N+1, where N == number of cores.  Do
> >> you have 11 or more cores?  I find that even that isn't always safe.  I
> >> set...
> >> 
> >> MAKEOPTS="-j 1"
> >> ...
> > 
> > I made the changes you suggested and now got an different error ... it
> > still does not compile. 
> 
> Did you reduce it to (the number of cores in your system + 1) or to "-j 1"?
> 
> If the former, try the latter.
> 
> Stroller.
>> 

Yes, I reduces -j  to n=1 (why exist this option, if it does not
work?)

mcc




Re: [gentoo-user] dev-util/autotoolset

2010-10-07 Thread dhk
On 10/07/2010 05:41 AM, Willie Wong wrote:
> On Thu, Oct 07, 2010 at 04:01:14AM -0400, dhk wrote:
>>
>> I thought all the auto tools were in the autotoolset, that's not the
>> case.  It looks like the only tool I use in autotoolset is acmkdir.  If
>> I remove autotoolset, how can I get acmkdir back?  Even though it's not
>> necessary, it's a nice tool for starting a project.
> 
> I have somewhat of a suspicious that `acmkdir' may be just a shell
> script? (Never used it, so I don't know.) If so then you can just find
> it on your system and copy it to /usr/local/bin or something like that
> (it possibly copies the templates from somewhere else, so you will
> need to find those also). 
> 
> Note that it may make use of deprecated autotool commands, and if not
> updated, may break in the future. 
> 
> HTH, 
> 
> W
> 

Yes, it is a shell script.  It makes the necessary files and directories
to get start a project.  After running it with a name for your project
directory you get something like the following in that directory.

AUTHORS configCOPYING  m4   README src
autom4te.cache  configure doc  Makefile.am  README.in  THANKS
ChangeLog   configure.ac  INSTALL  NEWS reconf



Re: [gentoo-user] seq24 fails to comoile

2010-10-07 Thread Alan McKinnon
Apparently, though unproven, at 12:01 on Thursday 07 October 2010, 
meino.cra...@gmx.de did opine thusly:

> Stroller  [10-10-07 11:53]:
> > On 7 Oct 2010, at 06:40, meino.cra...@gmx.de wrote:
> > >> ...
> > >> 
> > >>> MAKEOPTS="-j 12"
> > >> 
> > >> Agh No!!!  That's probably your problem right there.
> > >> The recommendation in the manual is N+1, where N == number of cores. 
> > >> Do you have 11 or more cores?  I find that even that isn't always
> > >> safe.  I set...
> > >> 
> > >> MAKEOPTS="-j 1"
> > >> ...
> > > 
> > > I made the changes you suggested and now got an different error ... it
> > > still does not compile.
> > 
> > Did you reduce it to (the number of cores in your system + 1) or to "-j
> > 1"?
> > 
> > If the former, try the latter.
> > 
> > Stroller.
> 
> Yes, I reduces -j  to n=1 (why exist this option, if it does not
> work?)


You misunderstand. The option works just fine and does (correctly) what it is 
supposed to do.

Not all software's build systems out there plays nicely with parallel 
compiles. ooO for instance is really finicky about it.

You can't blame portage for stupid coding errors that other people make, or 
stupid configurations that you make.

 



-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Sniffing / analysis of application / wifi packets on my LAN

2010-10-07 Thread Jake Moe
 On 10/07/10 19:37, Stroller wrote:
> Hi there,
>
> I'm interested in the activity of an application which is running on my LAN, 
> and was wondering if anyone could offer some quick pointers on the best tools 
> for this these days. I've played with this some years ago, but only very 
> superficially - I think I used wireshark back then.
>
> Ideally what I want to do is capture a big dump of the traffic over a couple 
> of minutes (so it shouldn't be that much, right?) into a file and then 
> analyse it afterwards based on destination IP, content &c. A couple of 
> minutes should allow completion of at least 2 or 3 separate interactions with 
> the server.
>
> The network is mine, as is the device from which I'm capturing the data. I 
> have a Belkin F5D7010 wifi card, which I think is based on a RaLink rt2x00 
> (rt2400 / rt2500) chipset, and I have my network's WPA key, so I think I can 
> just set the wifi card in passive mode for sniffing. I'm pretty sure I 
> experimented with this card in passive mode before, some years ago. 
> Alternatively, I think I can plug the wifi access-point into my PC, bridge it 
> to a second wired NIC and sniff what's going across the bridge (but I don't 
> think this should be necessary).
>
> What I'm expecting to see is some image, audio & html files &/or xml data 
> transferred, and ideally I'd like to be able to extract it all and view it in 
> its original format. 
>
> There's likely to be some inevitable other activity on the wLAN whilst this 
> is happening - I'll try to minimise this, but I think the tools should be 
> able filter out any crap I'm not interested in, right?
>
> I'd prefer as much as possible to use CLI tools for capturing / analysing the 
> data.
>
> Thanks in advance for any quick pointers you can offer,
>
> Stroller.
>
>
As far as I'm aware, Wireshark is the standard for packet capture and
analysis.  It supports both capture and display filters, so you can
limit it to just what you're interested in.  If the client and server
are both on your LAN, then you should probably go ahead and capture
everything, and then use a display filter to limit it to just the hosts
you need.  That way, if for some reason you find you need to see what
else is going on on the network at a given time, the captured data is
still there, you just broaden the display filter.

As far as CLI tools go, sorry, I'm not sure what's available.  Never had
a need to look into those.  But Wireshark uses libpcap, and digging a
bit shows tcpdump, which is a CLI tool that uses libpcap to capture
data, so it may give you the same functionality.  I've never used it
though, so I can't help further.

Jake Moe



Re: [gentoo-user] Sniffing / analysis of application / wifi packets on my LAN

2010-10-07 Thread William Kenworthy
Wireshark - always use the latest ~x86.  Can capture and save with a lot
of options.

to just do a quick capture, try 
"tcpdump -i eth- -w file.pcap" writes a pcap format file (can be read by
wireshark etc)
"tcpdump -r file.pcap" to see whats in it
"tcpdump -A - -r file.pcap" to extract text like html

If you already have wireshark, "tshark" can do similar operation to
tcpdump.

BillK



On Thu, 2010-10-07 at 10:37 +0100, Stroller wrote:
> Hi there,
> 
> I'm interested in the activity of an application which is running on my LAN, 
> and was wondering if anyone could offer some quick pointers on the best tools 
> for this these days. I've played with this some years ago, but only very 
> superficially - I think I used wireshark back then.
> 
> Ideally what I want to do is capture a big dump of the traffic over a couple 
> of minutes (so it shouldn't be that much, right?) into a file and then 
> analyse it afterwards based on destination IP, content &c. A couple of 
> minutes should allow completion of at least 2 or 3 separate interactions with 
> the server.
> 
> The network is mine, as is the device from which I'm capturing the data. I 
> have a Belkin F5D7010 wifi card, which I think is based on a RaLink rt2x00 
> (rt2400 / rt2500) chipset, and I have my network's WPA key, so I think I can 
> just set the wifi card in passive mode for sniffing. I'm pretty sure I 
> experimented with this card in passive mode before, some years ago. 
> Alternatively, I think I can plug the wifi access-point into my PC, bridge it 
> to a second wired NIC and sniff what's going across the bridge (but I don't 
> think this should be necessary).
> 
> What I'm expecting to see is some image, audio & html files &/or xml data 
> transferred, and ideally I'd like to be able to extract it all and view it in 
> its original format. 
> 
> There's likely to be some inevitable other activity on the wLAN whilst this 
> is happening - I'll try to minimise this, but I think the tools should be 
> able filter out any crap I'm not interested in, right?
> 
> I'd prefer as much as possible to use CLI tools for capturing / analysing the 
> data.
> 
> Thanks in advance for any quick pointers you can offer,
> 
> Stroller.
> 
> 

-- 
William Kenworthy 
Home in Perth!




Re: [gentoo-user] Re: Firefox and Thunderbird spell-checker is offering too many languages

2010-10-07 Thread Peter Humphrey
On Thursday 07 October 2010 09:50:57 David Relson wrote:

> run "eix -e hunspell" to show the languages supported/activated for
> hunspell

I was interested in this too.

$ eix -e hunspell
[I] app-text/hunspell (1.2...@03/08/10): Hunspell spell checker - an 
improved replacement for myspell in OOo.

No mention of dictionaries.

-- 
Rgds
Peter.  Linux Counter 5290, 1994-04-23.



Re: [gentoo-user] Sniffing / analysis of application / wifi packets on my LAN

2010-10-07 Thread Mick
On 7 October 2010 10:37, Stroller  wrote:
> Hi there,
>
> I'm interested in the activity of an application which is running on my LAN, 
> and was wondering if anyone could offer some quick pointers on the best tools 
> for this these days. I've played with this some years ago, but only very 
> superficially - I think I used wireshark back then.
>
> Ideally what I want to do is capture a big dump of the traffic over a couple 
> of minutes (so it shouldn't be that much, right?) into a file and then 
> analyse it afterwards based on destination IP, content &c. A couple of 
> minutes should allow completion of at least 2 or 3 separate interactions with 
> the server.
>
> The network is mine, as is the device from which I'm capturing the data. I 
> have a Belkin F5D7010 wifi card, which I think is based on a RaLink rt2x00 
> (rt2400 / rt2500) chipset, and I have my network's WPA key, so I think I can 
> just set the wifi card in passive mode for sniffing. I'm pretty sure I 
> experimented with this card in passive mode before, some years ago. 
> Alternatively, I think I can plug the wifi access-point into my PC, bridge it 
> to a second wired NIC and sniff what's going across the bridge (but I don't 
> think this should be necessary).
>
> What I'm expecting to see is some image, audio & html files &/or xml data 
> transferred, and ideally I'd like to be able to extract it all and view it in 
> its original format.
>
> There's likely to be some inevitable other activity on the wLAN whilst this 
> is happening - I'll try to minimise this, but I think the tools should be 
> able filter out any crap I'm not interested in, right?
>
> I'd prefer as much as possible to use CLI tools for capturing / analysing the 
> data.

By passive I assume you mean promiscuous?

Since you prefer CLI you can use tcpdump and tcpflow.  tcpdump will
place your card in promiscuous mode - if you only want to see what's
addressed to your machine use the -p switch.  To avoid truncating the
packets increase the size of the packets captured e.g. -s 65535 and
also add some detail -XX to see the payload.  Altogether something
like this should work:

tcpdump -i wlan0 -e -l -U -vvv -s 65535 -w tcpdump_cap.txt -XX
(switch -w for -r to read what you've captured).

You can use the -T  option to only capture/read a particular
protocol.  I rarely specify this.

tcpflow -i wlan0 -c -p -s -v

With tcpflow you can specify the protocol (e.g. proto arp) to capture
only particular packets as well.

Hope this helps.
-- 
Regards,
Mick



Re: [gentoo-user] Re: Firefox and Thunderbird spell-checker is offering too many languages

2010-10-07 Thread Dale

Peter Humphrey wrote:

On Thursday 07 October 2010 09:50:57 David Relson wrote:

   

run "eix -e hunspell" to show the languages supported/activated for
hunspell
 

I was interested in this too.

$ eix -e hunspell
[I] app-text/hunspell (1.2...@03/08/10): Hunspell spell checker - an
improved replacement for myspell in OOo.

No mention of dictionaries.

   

This is what emerge -vp shows here for hunspell:

r...@smoker / # emerge -vp hunspell

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R   ] app-text/hunspell-1.2.11  USE="ncurses nls readline" 
LINGUAS="en -af -bg -ca -cs -cy -da -de -el -eo -es -et -fo -fr -ga -gl 
-he -hr -hu -id -it -ku -lt -lv -mk -ms -nb -nl -nn -pl -pt -ro -ru -sk 
-sl -sv -sw -tn -uk -zu" 0 kB


Total: 1 package (1 reinstall), Size of downloads: 0 kB
r...@smoker / #


The LINGUAS= setting should be what tells it what language to build.  
You sure you don't have a typo in make.conf or something?


Dale

:-)  :-)



[gentoo-user] Re: text in xterm

2010-10-07 Thread Grant Edwards
On 2010-10-07, Adam Carter  wrote:
> On Thu, Oct 7, 2010 at 5:57 AM, James  wrote:
>
>> Folks,
>>
>> I have an interesting problem -- not sure what's causing it.
>>
>> Using xfce4 + compiz -- nothing too fancy. When I open an xterm and
>> start typing, I start getting 'artifacts' (specifically green lines
>> between the various letters I'm trying) in my xterm.
>
> What video hardware and driver are you using?

I used to see (different) rendering artifacts when using the ATI fglrx
"blob" driver and aterm -- but not other drivers nor other programs. I
switched to the radeon driver, and haven't had any issues since.
Actually, the last time I tried the fglrx driver, I think the problem
had gone away.

-- 
Grant Edwards   grant.b.edwardsYow! ... I want to perform
  at   cranial activities with
  gmail.comTuesday Weld!!




Re: [gentoo-user] IP aliasing problem

2010-10-07 Thread Grant
 ...I have 5 usable IPs from my host and I've defined 2 of them in 
 /etc/conf.d/net like this:

 config_eth0=(
        "1.2.3.1 netmask 255.255.255.0"
        "1.2.3.2 netmask 255.255.255.0"
 )

 My apache2 config is not working as expected and I think its due to a
 networking problem because eth0:1 reports no RX or TX stats:

 # ifconfig
 eth0      Link encap:Ethernet  HWaddr [removed]
          inet addr:1.2.3.1  Bcast:[removed]  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:46047 errors:0 dropped:0 overruns:0 frame:0
          TX packets:65703 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:6131194 (5.8 MiB)  TX bytes:82568335 (78.7 MiB)
          Interrupt:40

 eth0:1    Link encap:Ethernet  HWaddr [removed]
          inet addr:1.2.3.2  Bcast:[removed]  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:40
>>>
>> ...
>> Thank you for taking the time to write Stroller.  This has really got
>> my head spinning.  First of all, you're right about the netmask.  It
>> is 255.255.255.248.  I didn't have a good understanding of what a
>> netmask is so I thought it would be smart to change it for a public
>> message.
>>
>> The server is remote and hosted so I don't have any control over the
>> router or network.  I've gone back and forth with the host but they
>> insist that everything is fine on their end.
>>
>> I'm confused because I have in apache2 config:
>>
>> 
>> ...
>> SSLCertificateFile /etc/apache2/ssl/www.example1.com.crt
>> SSLCertificateKeyFile /etc/apache2/ssl/www.example1.com.key
>> ...
>
> Suggest you first establish you can ping *both* IPs.

Thanks Stroller.  It's working now.  I needed to define apache2's
ServerName differently for each VirtualHost.  Strangely though, I
still don't get stats for RX/TX from ifconfig:

eth0  Link encap:Ethernet  HWaddr [removed]
  inet addr:1.2.3.1  Bcast:[removed]  Mask:255.255.255.248
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:923677 errors:0 dropped:0 overruns:0 frame:0
  TX packets:1444212 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:124904402 (119.1 MiB)  TX bytes:1880087116 (1.7 GiB)
  Interrupt:40

eth0:1Link encap:Ethernet  HWaddr [removed]
  inet addr:1.2.3.2  Bcast:[removed]  Mask:255.255.255.248
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  Interrupt:40

- Grant



[gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Momesso Andrea


Hi list,

I need to set up a cron job to transfer a file every day from server A  
to server B.


I'd like to do that via ssh and with no user assistance, completely automated.

Setting up a public key, would do the job, but then, all the  
connections between the servers would be passwordless, so if server A  
gets compromised, also server B is screwed.


Is there a way to allow only one single command from a single cronjob  
to operate passwordless, while keeping all the other connections  
secured by a password?


Thank you in advance for your help.

TopperH
http://topperh.ath.cx


This message was sent using IMP, the Internet Messaging Program.





Re: [gentoo-user] Sniffing / analysis of application / wifi packets on my LAN

2010-10-07 Thread Stroller

On 7 Oct 2010, at 12:28, Jake Moe wrote:
> ...
> As far as I'm aware, Wireshark is the standard for packet capture and
> analysis. ...
> 
> As far as CLI tools go, sorry, I'm not sure what's available.  Never had
> a need to look into those.

So Wireshark is a GUI tool?

I thought I'd used it in CLI mode (USE="-gtk"???), but it was a long time ago, 
so maybe I'm mistaken.

Many thanks also to William & Mick. Yes, I did mean "promiscuous mode", sorry. 
I'm sure I'll have more comments once I've had a chance to have a crack at it. 
I'm planning on using a laptop with a cardbus wifi card, and I realised it had 
last been used and updated 2 years ago, so I'm (still) in the middle of 
reinstalling at the moment.

Stroller.




[gentoo-user] Beyond-Gentoo question

2010-10-07 Thread meino . cramer
Hi,

for a long time I have compiled makehuman from the svn tree. This
works with no problems with my 32bit Gentoo linux.
When changed to 64bit Gentoo Linux it does not work any longer.
The compilation itssself is clean, buth the executable does not 
work as exspected...

>From the developpers forum I know that makehuman is 64bit aware 
and runs (for others, not for me).
They also said, that it may have be something to do with the SDL
lib.

I searched for differences of the installation of SDL between the two
systems but I did not found anything -- at least nothing which would
alarm me.

When makehuman is started it prints on the console:

No antialiasing available, turning off antialiasing.
No 24 bit z buffer available, switching to 16 bit.
No 16 bit z buffer available, exiting.


I have no problems with other SDL-related executables. Blender (for
example) is heavily using OpenGL and DRI and wirks fine under 64bit
Gentoo linux.

The output of glxinfo was sent to the developers of makehuman and they
did not find anything suspicious.

May be someone here on this mailing list is able to point me into the
right direction to fix this ?

Thank you very much in advance!
Best regards,
mcc








Re: [gentoo-user] IP aliasing problem

2010-10-07 Thread BRM
> ServerName differently for  each VirtualHost.  Strangely though, I

> still don't get stats for RX/TX  from ifconfig:
> 
> eth0  Link encap:Ethernet  HWaddr  [removed]
>   inet addr:1.2.3.1   Bcast:[removed]  Mask:255.255.255.248
>UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>RX packets:923677 errors:0 dropped:0 overruns:0  frame:0
>   TX packets:1444212 errors:0  dropped:0 overruns:0 carrier:0
>collisions:0 txqueuelen:1000
>   RX  bytes:124904402 (119.1 MiB)  TX bytes:1880087116 (1.7 GiB)
>Interrupt:40
> 
> eth0:1Link  encap:Ethernet  HWaddr [removed]
>   inet  addr:1.2.3.2  Bcast:[removed]  Mask:255.255.255.248
>UP BROADCAST RUNNING MULTICAST  MTU:1500   Metric:1
>   Interrupt:40

Remember eth0:1 is an alias for eth0.

Your above info is slightly wrong in that eth0 should be listed as eth0:0; 
where 
instead ifconfig is showing eth0 generic information and eth0:0 information 
combined.
That's probably the source of your confusion.

Don't know how to remedy it though.

HTH,

Ben




Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Stroller

On 7 Oct 2010, at 17:45, Momesso Andrea wrote:
> I need to set up a cron job to transfer a file every day from server A to 
> server B.
> 
> I'd like to do that via ssh and with no user assistance, completely automated.
> 
> Setting up a public key, would do the job, but then, all the connections 
> between the servers would be passwordless, so if server A gets compromised, 
> also server B is screwed.
> 
> Is there a way to allow only one single command from a single cronjob to 
> operate passwordless, while keeping all the other connections secured by a 
> password?

You could create a user on server B called backup, a user with very limited 
permissions and no shell (/bin/false). Thus server A can transfer files to 
serverb:~backup but if the key is compromised then little else can be done.

Not sure if the user could somehow be run in a chrooted ssh, for better 
security? I'm not sure what files a new user "backup" would have read-access to 
by default? If the key is obtained from server A then the attacker could copy 
files from server B (back to wherever they like), and it might be possible to 
obtain information about what services are run on that system or otherwise 
learn vulnerabilities from what could be read. 

Stroller.




Re: [gentoo-user] Re: Firefox and Thunderbird spell-checker is offering too many languages

2010-10-07 Thread Peter Humphrey
On Thursday 07 October 2010 14:32:12 Dale wrote:
> Peter Humphrey wrote:
> > On Thursday 07 October 2010 09:50:57 David Relson wrote:
> >> run "eix -e hunspell" to show the languages supported/activated
> >> for hunspell
> > 
> > I was interested in this too.
> > 
> > $ eix -e hunspell
> > [I] app-text/hunspell (1.2...@03/08/10): Hunspell spell checker -
> > an improved replacement for myspell in OOo.
> > 
> > No mention of dictionaries.
> 
> This is what emerge -vp shows here for hunspell:
> 
> r...@smoker / # emerge -vp hunspell
> 
> These are the packages that would be merged, in order:
> 
> Calculating dependencies... done!
> [ebuild   R   ] app-text/hunspell-1.2.11  USE="ncurses nls readline"
> LINGUAS="en -af -bg -ca -cs -cy -da -de -el -eo -es -et -fo -fr -ga
> -gl -he -hr -hu -id -it -ku -lt -lv -mk -ms -nb -nl -nn -pl -pt -ro
> -ru -sk -sl -sv -sw -tn -uk -zu" 0 kB

Yes, but that's not what he said.

I get the same as you from the emerge command. It still doesn't help 
distinguish between the several varieties of English though, which was 
the question.

-- 
Rgds
Peter.  Linux Counter 5290, 1994-04-23.



Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Willie Wong
On Thu, Oct 07, 2010 at 06:45:49PM +0200, Momesso Andrea wrote:
> I need to set up a cron job to transfer a file every day from server A  
> to server B.
> 
> I'd like to do that via ssh and with no user assistance, completely 
> automated.
> 
> Setting up a public key, would do the job, but then, all the  
> connections between the servers would be passwordless, so if server A  
> gets compromised, also server B is screwed.
> 
> Is there a way to allow only one single command from a single cronjob  
> to operate passwordless, while keeping all the other connections  
> secured by a password?

In the authorized_keys file, you need to include a specification of
"command=". Which means that on log-in with the
public key, the sshd will execute that command, and any other commands
sent from the machine which originated the connection will not
execute. 

So I'd imagine you can untar with the command at the target, and
instead of scp, use something like

  tar  | ssh -i  u...@host

(of course, this still opens up the possibility that a partition gets
filled on your target machine by someone copying random string to it,
but you'd have to live with that). 

(Also, note, I haven't actually tried this method of copying files
myself, so while I'd imagine it'd work, you may need to play around
with it for a bit. What I've done before was to have a shell script
set to run, triggered by a public key login like this.)

See 'man sshd' for more detail.  

HTH, 

W

-- 
Willie W. Wong ww...@math.princeton.edu
Data aequatione quotcunque fluentes quantitae involvente fluxiones invenire 
 et vice versa   ~~~  I. Newton



Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Willie Wong
On Thu, Oct 07, 2010 at 02:14:47PM -0400, Willie Wong wrote:
> On Thu, Oct 07, 2010 at 06:45:49PM +0200, Momesso Andrea wrote:
> > I need to set up a cron job to transfer a file every day from server A  
> > to server B.
> > 
> > I'd like to do that via ssh and with no user assistance, completely 
> > automated.
> > 
> > Setting up a public key, would do the job, but then, all the  
> > connections between the servers would be passwordless, so if server A  
> > gets compromised, also server B is screwed.
> > 
> > Is there a way to allow only one single command from a single cronjob  
> > to operate passwordless, while keeping all the other connections  
> > secured by a password?
> 
> In the authorized_keys file, you need to include a specification of
> "command=". Which means that on log-in with the
> public key, the sshd will execute that command, and any other commands
> sent from the machine which originated the connection will not
> execute. 
> 
> So I'd imagine you can untar with the command at the target, and
> instead of scp, use something like
> 
>   tar  | ssh -i  u...@host
> 

These two links may also be helpful:

http://www.debian-administration.org/articles/438
http://sial.org/howto/rsync/

W
-- 
Willie W. Wong ww...@math.princeton.edu
Data aequatione quotcunque fluentes quantitae involvente fluxiones invenire 
 et vice versa   ~~~  I. Newton



Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Andrea Conti
On 07/10/2010 18:45, Momesso Andrea wrote:

> Setting up a public key, would do the job, but then, all the connections
> between the servers would be passwordless, so if server A gets
> compromised, also server B is screwed.

Well, not really... public key authentication works on a per-user basis,
so all you get is that some user with a specific key can log in as some
other user of B without typing a password.

Of course, if you authorize a given key for logging in as r...@b, then
what you said is true. But that is a problem with the specific setup.

> Is there a way to allow only one single command from a single cronjob to
> operate passwordless, while keeping all the other connections secured by
> a password?

You can't do that on a per-command basis. You'd be trying to control the
authentication method accepted by sshd on B according to which command
is run on A -- something sshd on B knows nothing about.

I would try the following way:

- Set up an unprivileged user on B -- let's call it foo -- which can
only write to its own home directory, /home/foo.

- add the public key you will be using (*) to f...@b's authorized_keys
file. You should set the key's options to
'pattern="",no-pty,command="/usr/bin/scp -t -- /home/foo"'
(man sshd for details).

- chattr +i /home/foo/.ssh/authorized_keys, so that the file can only be
changed by a superuser (you can't just chown the file to root as sshd is
quite anal about the permissions of the authorized_keys file)

Now your cron job on A can do "scp  f...@b:/home/foo" without the
need for entering a password; you just have to set up another cron job
on B that picks up the file from /home/foo and puts it where it should
go with the correct permissions, possibly after doing a sanity check on
its contents.

If you use something else than scp, (e.g. rsync) you should also adjust
the command option in the key options above.
Note that the option refers to what is run on B, not on A. Also, it is
*not* an authorization directive à la /etc/sudoers (i.e., it does not
specify what commands the user is allowed to run): it simply overwrites
whichever command is requested by the client side of the ssh connection,
so that, for example, the client cannot request a shell or do "cat
".

(*) You can either use the key of the user running the cron job on A, or
generate a separate key which is only used for the copy operation. In
this case, you will need to tell scp the location of the private key
file with the -i option.

HTH,
andrea



[gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Dale

Hi,

I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need 
qt3support anymore?  I'm talking about the USE flag qt3support.  I run 
into blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I 
can get rid of this USE flag now.  I only have KDE4 installed.  No more 
KDE3 left that I know of.


Thanks.

Dale

:-)  :-)



Re: [gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Alan McKinnon
Apparently, though unproven, at 21:40 on Thursday 07 October 2010, Dale did 
opine thusly:

> Hi,
> 
> I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need
> qt3support anymore?  I'm talking about the USE flag qt3support.  I run
> into blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I
> can get rid of this USE flag now.  I only have KDE4 installed.  No more
> KDE3 left that I know of.


By and large you can't do without it. It supplies a Qt3 interface from Qt4 so 
that Qt3 apps can run on Qt4.

Note that it has nothing to do with KDE per se and everything to do with Qt. 
You likely have quite a few Qt apps that are not from KDE (skype comes to mind 
but I forget which Qt it uses nowadays).

Try remove it by all means. If the ebuilds don't whinge it's worth a try. What 
have you got to lose? Compile Qt (about an hour), revdep-rebuild (another hour 
maybe) and some testing. BOINC will lose out on some cycles but there's enough 
users out there to take up your slack :-)



-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] IP aliasing problem

2010-10-07 Thread Stroller

On 7 Oct 2010, at 18:51, BRM wrote:

>> ServerName differently for  each VirtualHost.  Strangely though, I
>> still don't get stats for RX/TX  from ifconfig:
>> 
>> eth0  Link encap:Ethernet  HWaddr  [removed]
>>  inet addr:1.2.3.1   Bcast:[removed]  Mask:255.255.255.248
>>   UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>>   RX packets:923677 errors:0 dropped:0 overruns:0  frame:0
>>  TX packets:1444212 errors:0  dropped:0 overruns:0 carrier:0
>>   collisions:0 txqueuelen:1000
>>  RX  bytes:124904402 (119.1 MiB)  TX bytes:1880087116 (1.7 GiB)
>>   Interrupt:40
>> 
>> eth0:1Link  encap:Ethernet  HWaddr [removed]
>>  inet  addr:1.2.3.2  Bcast:[removed]  Mask:255.255.255.248
>>   UP BROADCAST RUNNING MULTICAST  MTU:1500   Metric:1
>>  Interrupt:40
> 
> Remember eth0:1 is an alias for eth0.
> 
> Your above info is slightly wrong in that eth0 should be listed as eth0:0; 
> where 
> instead ifconfig is showing eth0 generic information and eth0:0 information 
> combined.
> That's probably the source of your confusion.

On a system running 2.4.25 here I have:

$ ifconfig 
eth0  Link encap:Ethernet  HWaddr 00:02:A5:1B:01:59  
  inet addr:213.x.y.91  Bcast:213.x.y.95  Mask:255.255.255.248
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:211366804 errors:0 dropped:0 overruns:0 frame:0
  TX packets:306200382 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:1542358934 (1470.9 Mb)  TX bytes:1547826181 (1476.1 Mb)
  Interrupt:20 Base address:0xd000 

eth0:1Link encap:Ethernet  HWaddr 00:02:A5:1B:01:59  
  inet addr:192.168.1.43  Bcast:192.168.255.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:211366804 errors:0 dropped:0 overruns:0 frame:0
  TX packets:306200384 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:1542358934 (1470.9 Mb)  TX bytes:1547826521 (1476.1 Mb)
  Interrupt:20 Base address:0xd000 

loLink encap:Local Loopback  
...


The same TX & RX are shown for both interfaces.

I don't know whether the tools have changed much since those I'm using on this 
box, but the difference *might* be that Grant's IPs are on the same subnet. I 
*think* it's possible for the route (as in: `man route`) to configure packets 
that come in on 1.2.3.2 to be replied to via 1.2.3.1.

You might set up a spare test box to see how current ifconfig displays packets, 
comparing aliased addresses on the same and separate subnets.

Stroller.





Re: [gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Alan McKinnon
Apparently, though unproven, at 21:40 on Thursday 07 October 2010, Dale did 
opine thusly:

> Hi,
> 
> I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need
> qt3support anymore?  I'm talking about the USE flag qt3support.  I run
> into blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I
> can get rid of this USE flag now.  I only have KDE4 installed.  No more
> KDE3 left that I know of.
> 
> Thanks.
> 
> Dale
> 
> :-)  :-)

Oh, one more thing. qt3support adds such a miniscule amount of code and build 
time that it probably isn't worth worrying about.

Now when akonadi hits kdepim and is asserted to work - well that's somethign 
you will need to pay attention to and spend time on. I don't think qt3support 
is in that class to be honest ... :-)




-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Paul Hartman
On Thu, Oct 7, 2010 at 2:40 PM, Dale  wrote:
> Hi,
>
> I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need
> qt3support anymore?  I'm talking about the USE flag qt3support.  I run into
> blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I can get
> rid of this USE flag now.  I only have KDE4 installed.  No more KDE3 left
> that I know of.

Going along with what Alan said. qt3support does not use Qt 3 at all.
It just puts something like a Qt 3-compatible API into Qt 4, to make
porting Qt 3 to Qt 4 apps easier. It is largely insignifcant to you
(since it's not pulling in qt3 packages).

If you have any packages that require this USE flag, their ebuild will
require this USE flag. So disable it, emerge --deep --newuse world and
see if it complains. If it does, re-enable and continue life with
qt3support as if nothing ever happened. :)



[gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Nikos Chantziaras

On 10/07/2010 10:40 PM, Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I need
qt3support anymore? I'm talking about the USE flag qt3support. I run
into blocks sometimes and I know KDE3 needed qt3. I'm just curious if I
can get rid of this USE flag now. I only have KDE4 installed. No more
KDE3 left that I know of.


You need it only if an application needs it.  So you will know if you 
need or not without having to ask us, because if you emerge an app that 
needs it, you'll get a blocker.





[gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Nikos Chantziaras

On 10/07/2010 10:51 PM, Alan McKinnon wrote:

Apparently, though unproven, at 21:40 on Thursday 07 October 2010, Dale did
opine thusly:


Hi,

I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need
qt3support anymore?  I'm talking about the USE flag qt3support.  I run
into blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I
can get rid of this USE flag now.  I only have KDE4 installed.  No more
KDE3 left that I know of.



By and large you can't do without it. It supplies a Qt3 interface from Qt4 so
that Qt3 apps can run on Qt4.


Nope, Qt3 apps can not run on Qt4.  qt3support is for Qt4 apps, not Qt3 
apps.





[gentoo-user] Can't find /dev/md3 on new install

2010-10-07 Thread Mike Diehl
Hi all,

I'm building a new server, only this time, I'm using RAID1 for the boot, swap, 
and root partitions. (sda and sdb)

I've gottent the install complete, but when I reboot, fsck.ext3 says that 
can't find /dev/md3, which is my root partition.

I "borrowed" a .config file from another server where RAID1 is working, so I 
know I've got RAID in the kernel.  I did the prescribed mknod in /dev/ to 
create the md device nodes.

I also did the mdadm --scan --verbose > /etc/mdadm.conf.

What could I be missing?

-- 

Take care and have fun,
Mike Diehl.



Re: [gentoo-user] Can't find /dev/md3 on new install

2010-10-07 Thread Volker Armin Hemmann
On Thursday 07 October 2010, Mike Diehl wrote:
> Hi all,
> 
> I'm building a new server, only this time, I'm using RAID1 for the boot,
> swap, and root partitions. (sda and sdb)
> 
> I've gottent the install complete, but when I reboot, fsck.ext3 says that
> can't find /dev/md3, which is my root partition.
> 
> I "borrowed" a .config file from another server where RAID1 is working, so
> I know I've got RAID in the kernel.  I did the prescribed mknod in /dev/
> to create the md device nodes.
> 
> I also did the mdadm --scan --verbose > /etc/mdadm.conf.
> 
> What could I be missing?

mdadm changed default superblock version. No autoassembly anymore. You need an 
initrd (grrr).



Re: [gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Alan McKinnon
Apparently, though unproven, at 22:03 on Thursday 07 October 2010, Nikos 
Chantziaras did opine thusly:

> On 10/07/2010 10:51 PM, Alan McKinnon wrote:
> > Apparently, though unproven, at 21:40 on Thursday 07 October 2010, Dale
> > did
> > 
> > opine thusly:
> >> Hi,
> >> 
> >> I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need
> >> qt3support anymore?  I'm talking about the USE flag qt3support.  I run
> >> into blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I
> >> can get rid of this USE flag now.  I only have KDE4 installed.  No more
> >> KDE3 left that I know of.
> > 
> > By and large you can't do without it. It supplies a Qt3 interface from
> > Qt4 so that Qt3 apps can run on Qt4.
> 
> Nope, Qt3 apps can not run on Qt4.  qt3support is for Qt4 apps, not Qt3
> apps.


Argggh, yes, of course.

Thinko happened here. Or maybe a sleepo (what you get with too little sleep).


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Can't find /dev/md3 on new install

2010-10-07 Thread Florian Philipp
Am 07.10.2010 22:06, schrieb Mike Diehl:
> Hi all,
> 
> I'm building a new server, only this time, I'm using RAID1 for the boot, 
> swap, 
> and root partitions. (sda and sdb)
> 
> I've gottent the install complete, but when I reboot, fsck.ext3 says that 
> can't find /dev/md3, which is my root partition.
> 
> I "borrowed" a .config file from another server where RAID1 is working, so I 
> know I've got RAID in the kernel.  I did the prescribed mknod in /dev/ to 
> create the md device nodes.
> 
> I also did the mdadm --scan --verbose > /etc/mdadm.conf.
> 
> What could I be missing?
> 

You can try to explicitly specify the RAID to the kernel instead of
relying on autodetection. Add the following line to your kernel
parameter list:
raid=noautodetect md=3,/dev/sda1,/dev/sdb1 root=/dev/md3

the first parameter on md= is the number of the md node. So if you want
it as /dev/md3, you specify the 3. The RAID level is automatically detected.

Other then that: Make sure the mdm subsystem is really compiled into the
kernel and not a module.

Hope this helps,
Florian Philipp



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] Can't find /dev/md3 on new install

2010-10-07 Thread Mike Diehl
On Thursday 07 October 2010 2:17:11 pm Volker Armin Hemmann wrote:
> On Thursday 07 October 2010, Mike Diehl wrote:
> > Hi all,
> > 
> > I'm building a new server, only this time, I'm using RAID1 for the boot,
> > swap, and root partitions. (sda and sdb)
> > 
> > I've gottent the install complete, but when I reboot, fsck.ext3 says that
> > can't find /dev/md3, which is my root partition.
> > 
> > I "borrowed" a .config file from another server where RAID1 is working,
> > so I know I've got RAID in the kernel.  I did the prescribed mknod in
> > /dev/ to create the md device nodes.
> > 
> > I also did the mdadm --scan --verbose > /etc/mdadm.conf.
> > 
> > What could I be missing?
> 
> mdadm changed default superblock version. No autoassembly anymore. You need
> an initrd (grrr).

I changed the partition type to 0xfd and used meta version .90.  This should 
have been good enough to avoid needing an initrd... Right?

I HATE initrd's

-- 

Take care and have fun,
Mike Diehl.



[gentoo-user] Uploading Files to Windows CE

2010-10-07 Thread dhk
Does anyone know how to upload files from a Gentoo box to Windows CE?
The CE device has a cradle with a usb connection which appears as
character device in /dev/ttyUSB0 .  The Windows cetools / cecopy does it
if you want to use Windows.  However, I would like to do it from Gentoo
if possible.  Any ideas?

Thanks,

dhk



Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Momesso Andrea


Quoting Andrea Conti :


On 07/10/2010 18:45, Momesso Andrea wrote:


Setting up a public key, would do the job, but then, all the connections
between the servers would be passwordless, so if server A gets
compromised, also server B is screwed.


Well, not really... public key authentication works on a per-user basis,
so all you get is that some user with a specific key can log in as some
other user of B without typing a password.

Of course, if you authorize a given key for logging in as r...@b, then
what you said is true. But that is a problem with the specific setup.


Is there a way to allow only one single command from a single cronjob to
operate passwordless, while keeping all the other connections secured by
a password?


You can't do that on a per-command basis. You'd be trying to control the
authentication method accepted by sshd on B according to which command
is run on A -- something sshd on B knows nothing about.

I would try the following way:

- Set up an unprivileged user on B -- let's call it foo -- which can
only write to its own home directory, /home/foo.

- add the public key you will be using (*) to f...@b's authorized_keys
file. You should set the key's options to
'pattern="",no-pty,command="/usr/bin/scp -t -- /home/foo"'
(man sshd for details).

- chattr +i /home/foo/.ssh/authorized_keys, so that the file can only be
changed by a superuser (you can't just chown the file to root as sshd is
quite anal about the permissions of the authorized_keys file)

Now your cron job on A can do "scp  f...@b:/home/foo" without the
need for entering a password; you just have to set up another cron job
on B that picks up the file from /home/foo and puts it where it should
go with the correct permissions, possibly after doing a sanity check on
its contents.

If you use something else than scp, (e.g. rsync) you should also adjust
the command option in the key options above.
Note that the option refers to what is run on B, not on A. Also, it is
*not* an authorization directive à la /etc/sudoers (i.e., it does not
specify what commands the user is allowed to run): it simply overwrites
whichever command is requested by the client side of the ssh connection,
so that, for example, the client cannot request a shell or do "cat
".

(*) You can either use the key of the user running the cron job on A, or
generate a separate key which is only used for the copy operation. In
this case, you will need to tell scp the location of the private key
file with the -i option.

HTH,
andrea




Thank you all for your fast replies, I think I'll use all of your suggestions:

-create an unprivilegied user with no shell access as Stroller and  
Andrea suggested


-I'll setup a passwordless key for this user, only limited to a single  
command, as Willie

suggested

This sounds pretty sane to me.

TopperH
http://topperh.ath.cx


This message was sent using IMP, the Internet Messaging Program.




Re: [gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Peter Humphrey
On Thursday 07 October 2010 20:40:32 Dale wrote:
> Hi,
> 
> I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I
> need qt3support anymore?  I'm talking about the USE flag qt3support.
>  I run into blocks sometimes and I know KDE3 needed qt3.  I'm just
> curious if I can get rid of this USE flag now.  I only have KDE4
> installed.  No more KDE3 left that I know of.

I have KDE-4.5.2 here. I get this:

$ USE=-qt3support emerge -upDvN world

These are the packages that would be merged, in order:

Calculating dependencies ... done!

emerge: there are no ebuilds built with USE flags to satisfy ">=x11-
libs/qt-sql-4.6.3:4[qt3support]".   

!!! One of the following packages is required to complete your request:
- x11-libs/qt-sql-4.6.3-r2 (Change USE: +qt3support)
(dependency required by "kde-base/kfilereplace-4.5.2" [installed])
(dependency required by "kde-base/kdewebdev-meta-4.5.2" [installed])
(dependency required by "@selected")
(dependency required by "@world" [argument])

So it looks as though I at least can't get rid of it.

-- 
Rgds
Peter.  Linux Counter 5290, 1994-04-23.



Re: [gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Dale

Paul Hartman wrote:

On Thu, Oct 7, 2010 at 2:40 PM, Dale  wrote:
   

Hi,

I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I need
qt3support anymore?  I'm talking about the USE flag qt3support.  I run into
blocks sometimes and I know KDE3 needed qt3.  I'm just curious if I can get
rid of this USE flag now.  I only have KDE4 installed.  No more KDE3 left
that I know of.
 

Going along with what Alan said. qt3support does not use Qt 3 at all.
It just puts something like a Qt 3-compatible API into Qt 4, to make
porting Qt 3 to Qt 4 apps easier. It is largely insignifcant to you
(since it's not pulling in qt3 packages).

If you have any packages that require this USE flag, their ebuild will
require this USE flag. So disable it, emerge --deep --newuse world and
see if it complains. If it does, re-enable and continue life with
qt3support as if nothing ever happened. :)

   


Just picking the last message to reply to so this is for everyone who 
has chimed in so far.


I may remove the USE flag and just see what blows up.  I may copy over 
some binaries so that I can just use -k and not have to wait on the 
compiles.  I would think if I remove it that something would pitch all 
holy hell about it if it has to have it.  I'm sure it would be caught at 
some point and I would know it then for sure.


I'm not sure if I have anything on here that must have qt3support.  Is 
there a way to know for sure?  Maybe some obscure command that I am not 
familiar with?


Dale

:-)  :-)



[gentoo-user] gnome brightness

2010-10-07 Thread Stefan G. Weichinger

Using gnome on my gentoo ~amd64 workstation ... 2 tft-screens ...

I would like to be able to control the brightness of the screens via
some applet or so. Yes, I use it on my thinkpad, would it work here as well?

Additional, would it be possible to somehow control the brightness in
relation to the current time?

Daylight -> bright screens

Nighttime -> dimmed 

?

just a thought ...

thx, Stefan




Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread covici
Momesso Andrea  wrote:

> 
> Quoting Andrea Conti :
> 
> > On 07/10/2010 18:45, Momesso Andrea wrote:
> >
> >> Setting up a public key, would do the job, but then, all the connections
> >> between the servers would be passwordless, so if server A gets
> >> compromised, also server B is screwed.
> >
> > Well, not really... public key authentication works on a per-user basis,
> > so all you get is that some user with a specific key can log in as some
> > other user of B without typing a password.
> >
> > Of course, if you authorize a given key for logging in as r...@b, then
> > what you said is true. But that is a problem with the specific setup.
> >
> >> Is there a way to allow only one single command from a single cronjob to
> >> operate passwordless, while keeping all the other connections secured by
> >> a password?
> >
> > You can't do that on a per-command basis. You'd be trying to control the
> > authentication method accepted by sshd on B according to which command
> > is run on A -- something sshd on B knows nothing about.
> >
> > I would try the following way:
> >
> > - Set up an unprivileged user on B -- let's call it foo -- which can
> > only write to its own home directory, /home/foo.
> >
> > - add the public key you will be using (*) to f...@b's authorized_keys
> > file. You should set the key's options to
> > 'pattern="",no-pty,command="/usr/bin/scp -t -- /home/foo"'
> > (man sshd for details).
> >
> > - chattr +i /home/foo/.ssh/authorized_keys, so that the file can only be
> > changed by a superuser (you can't just chown the file to root as sshd is
> > quite anal about the permissions of the authorized_keys file)
> >
> > Now your cron job on A can do "scp  f...@b:/home/foo" without the
> > need for entering a password; you just have to set up another cron job
> > on B that picks up the file from /home/foo and puts it where it should
> > go with the correct permissions, possibly after doing a sanity check on
> > its contents.
> >
> > If you use something else than scp, (e.g. rsync) you should also adjust
> > the command option in the key options above.
> > Note that the option refers to what is run on B, not on A. Also, it is
> > *not* an authorization directive à la /etc/sudoers (i.e., it does not
> > specify what commands the user is allowed to run): it simply overwrites
> > whichever command is requested by the client side of the ssh connection,
> > so that, for example, the client cannot request a shell or do "cat
> > ".
> >
> > (*) You can either use the key of the user running the cron job on A, or
> > generate a separate key which is only used for the copy operation. In
> > this case, you will need to tell scp the location of the private key
> > file with the -i option.
> >
> > HTH,
> > andrea
> >
> >
> 
> Thank you all for your fast replies, I think I'll use all of your suggestions:
> 
> -create an unprivilegied user with no shell access as Stroller and
> Andrea suggested
> 
> -I'll setup a passwordless key for this user, only limited to a single
> command, as Willie
> suggested
> 
> This sounds pretty sane to me.
I think for ssh to work the user needs a valid shell, not nologin, so
you can't do both of those suggestions.]

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

 John Covici
 cov...@ccs.covici.com



Re: [gentoo-user] qt3support USE flag. Is it needed now?

2010-10-07 Thread Dale

Peter Humphrey wrote:

On Thursday 07 October 2010 20:40:32 Dale wrote:
   

Hi,

I have a question.  I'm using KDE4, about to switch to 4.5.2.  Do I
need qt3support anymore?  I'm talking about the USE flag qt3support.
  I run into blocks sometimes and I know KDE3 needed qt3.  I'm just
curious if I can get rid of this USE flag now.  I only have KDE4
installed.  No more KDE3 left that I know of.
 

I have KDE-4.5.2 here. I get this:

$ USE=-qt3support emerge -upDvN world

These are the packages that would be merged, in order:

Calculating dependencies ... done!

emerge: there are no ebuilds built with USE flags to satisfy ">=x11-
libs/qt-sql-4.6.3:4[qt3support]".
!!! One of the following packages is required to complete your request:
- x11-libs/qt-sql-4.6.3-r2 (Change USE: +qt3support)
(dependency required by "kde-base/kfilereplace-4.5.2" [installed])
(dependency required by "kde-base/kdewebdev-meta-4.5.2" [installed])
(dependency required by "@selected")
(dependency required by "@world" [argument])

So it looks as though I at least can't get rid of it.

   


It also looks like I can't get rid of it.  lol  I guess it will have to 
stay, for now anyway.


Thanks.

Dale

:-)  :-)



Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread Willie Wong
On Thu, Oct 07, 2010 at 08:40:31PM +0200, Andrea Conti wrote:
> > Is there a way to allow only one single command from a single cronjob to
> > operate passwordless, while keeping all the other connections secured by
> > a password?
> 
> You can't do that on a per-command basis. You'd be trying to control the
> authentication method accepted by sshd on B according to which command
> is run on A -- something sshd on B knows nothing about.
> 

That's partially false. See my response in this thread. 

W
-- 
Willie W. Wong ww...@math.princeton.edu
Data aequatione quotcunque fluentes quantitae involvente fluxiones invenire 
 et vice versa   ~~~  I. Newton



Re: [gentoo-user] Copying a file via ssh with no password, keeping the system safe

2010-10-07 Thread BRM
- Original Message 

> From: "cov...@ccs.covici.com" 
> To: gentoo-user@lists.gentoo.org
> Sent: Thu, October 7, 2010 6:21:15 PM
> Subject: Re: [gentoo-user] Copying a file via ssh with no password, keeping 
> the 
>system safe
> 
> Momesso Andrea   wrote:
> 
> > 
> > Quoting Andrea Conti :
> > 
> > > On  07/10/2010 18:45, Momesso Andrea wrote:
> > >
> > >> Setting up  a public key, would do the job, but then, all the connections
> > >>  between the servers would be passwordless, so if server A gets
> > >>  compromised, also server B is screwed.
> > >
> > > Well, not  really... public key authentication works on a per-user basis,
> > > so  all you get is that some user with a specific key can log in as some
> >  > other user of B without typing a password.
> > >
> > > Of  course, if you authorize a given key for logging in as r...@b, then
> > >  what you said is true. But that is a problem with the specific setup.
> >  >
> > >> Is there a way to allow only one single command from a  single cronjob to
> > >> operate passwordless, while keeping all the  other connections secured by
> > >> a password?
> > >
> >  > You can't do that on a per-command basis. You'd be trying to control  the
> > > authentication method accepted by sshd on B according to which  command
> > > is run on A -- something sshd on B knows nothing  about.
> > >
> > > I would try the following way:
> >  >
> > > - Set up an unprivileged user on B -- let's call it foo --  which can
> > > only write to its own home directory, /home/foo.
> >  >
> > > - add the public key you will be using (*) to f...@b's  authorized_keys
> > > file. You should set the key's options to
> >  > 'pattern="",no-pty,command="/usr/bin/scp -t --  /home/foo"'
> > > (man sshd for details).
> > >
> > > -  chattr +i /home/foo/.ssh/authorized_keys, so that the file can only be
> >  > changed by a superuser (you can't just chown the file to root as sshd  is
> > > quite anal about the permissions of the authorized_keys  file)
> > >
> > > Now your cron job on A can do "scp   f...@b:/home/foo" without the
> > > need for entering a password; you just  have to set up another cron job
> > > on B that picks up the file from  /home/foo and puts it where it should
> > > go with the correct  permissions, possibly after doing a sanity check on
> > > its  contents.
> > >
> > > If you use something else than scp, (e.g.  rsync) you should also adjust
> > > the command option in the key options  above.
> > > Note that the option refers to what is run on B, not on A.  Also, it is
> > > *not* an authorization directive à la /etc/sudoers  (i.e., it does not
> > > specify what commands the user is allowed to  run): it simply overwrites
> > > whichever command is requested by the  client side of the ssh connection,
> > > so that, for example, the client  cannot request a shell or do "cat
> > > ".
> >  >
> > > (*) You can either use the key of the user running the cron  job on A, or
> > > generate a separate key which is only used for the  copy operation. In
> > > this case, you will need to tell scp the  location of the private key
> > > file with the -i option.
> >  >
> > > HTH,
> > > andrea
> > >
> > >
> > 
> > Thank you all for your fast replies, I think I'll use all of your  
>suggestions:
> > 
> > -create an unprivilegied user with no shell access  as Stroller and
> > Andrea suggested
> > 
> > -I'll setup a  passwordless key for this user, only limited to a single
> > command, as  Willie
> > suggested
> > 
> > This sounds pretty sane to me.
> I  think for ssh to work the user needs a valid shell, not nologin, so
> you can't  do both of those suggestions.]

Wouldn't a shell-less account per just provide the ability to use SFTP/SCP?
Those don't require a shell to operate.

You only need a shell if you are going to actually login as a user and do 
something other than a file transfer.

Also, ssh can be run in multiple modes - some of which do not require a shell; 
for example:

ssh someu...@myhost.com /bin/false

will run the command "/bin/false" without initiating a shell. (man ssh for 
details).

$0.02

Ben




[gentoo-user] Android SDK

2010-10-07 Thread BRM
I noticed there have been a few Android SDK's in portage now for a while - 
originally android-sdk, now android-sdk-update-manager 
(http://packages.gentoo.org/package/dev-util/android-sdk-update-manager).
I know there is a bug on it - http://bugs.gentoo.org/show_bug.cgi?id=320407 - 
but that's the only one I can find.

Anyone have an idea on when some version might go stable?
There's 7 versions in portage and all are testing; the first (version 3) goes 
back to November 2009.

TIA,

Ben




[gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Nikos Chantziaras

On 10/08/2010 01:24 AM, Dale wrote:

Peter Humphrey wrote:

On Thursday 07 October 2010 20:40:32 Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I
need qt3support anymore? I'm talking about the USE flag qt3support.
I run into blocks sometimes and I know KDE3 needed qt3. I'm just
curious if I can get rid of this USE flag now. I only have KDE4
installed. No more KDE3 left that I know of.

I have KDE-4.5.2 here. I get this:

$ USE=-qt3support emerge -upDvN world

These are the packages that would be merged, in order:

Calculating dependencies ... done!

emerge: there are no ebuilds built with USE flags to satisfy ">=x11-
libs/qt-sql-4.6.3:4[qt3support]".
!!! One of the following packages is required to complete your request:
- x11-libs/qt-sql-4.6.3-r2 (Change USE: +qt3support)
(dependency required by "kde-base/kfilereplace-4.5.2" [installed])
(dependency required by "kde-base/kdewebdev-meta-4.5.2" [installed])
(dependency required by "@selected")
(dependency required by "@world" [argument])

So it looks as though I at least can't get rid of it.



It also looks like I can't get rid of it. lol I guess it will have to
stay, for now anyway.


One thing I don't get is why this seems to worry you.  I don't see you 
complaining about packages needing the "libsamplerate" or "opengl" USE 
flags...  :-P





[gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Nikos Chantziaras

On 10/08/2010 01:14 AM, Dale wrote:

Paul Hartman wrote:

On Thu, Oct 7, 2010 at 2:40 PM, Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I need
qt3support anymore? I'm talking about the USE flag qt3support. I run
into
blocks sometimes and I know KDE3 needed qt3. I'm just curious if I
can get
rid of this USE flag now. I only have KDE4 installed. No more KDE3 left
that I know of.

Going along with what Alan said. qt3support does not use Qt 3 at all.
It just puts something like a Qt 3-compatible API into Qt 4, to make
porting Qt 3 to Qt 4 apps easier. It is largely insignifcant to you
(since it's not pulling in qt3 packages).

If you have any packages that require this USE flag, their ebuild will
require this USE flag. So disable it, emerge --deep --newuse world and
see if it complains. If it does, re-enable and continue life with
qt3support as if nothing ever happened. :)



Just picking the last message to reply to so this is for everyone who
has chimed in so far.

I may remove the USE flag and just see what blows up. I may copy over
some binaries so that I can just use -k and not have to wait on the
compiles. I would think if I remove it that something would pitch all
holy hell about it if it has to have it. I'm sure it would be caught at
some point and I would know it then for sure.

I'm not sure if I have anything on here that must have qt3support. Is
there a way to know for sure? Maybe some obscure command that I am not
familiar with?


revdep-rebuild will help.  The qt3support USE flag is nothing magical; 
it simply pulls the "x11-libs/qt-qt3support" as a dependency.  This 
package installs the /usr/lib/qt4/libQt3Support.so.* libraries.  So if 
you have binaries that try to load this lib, revdep-rebuild will find them.


And in general, if *any* binary you try to run aborts with something 
like "libQt3Support.so not found" or similar, then you know it needs 
qt3support.





Re: [gentoo-user] Android SDK

2010-10-07 Thread Alan McKinnon
Apparently, though unproven, at 00:49 on Friday 08 October 2010, BRM did opine 
thusly:

> I noticed there have been a few Android SDK's in portage now for a while -
> originally android-sdk, now android-sdk-update-manager
> (http://packages.gentoo.org/package/dev-util/android-sdk-update-manager).
> I know there is a bug on it - http://bugs.gentoo.org/show_bug.cgi?id=320407
> - but that's the only one I can find.
> 
> Anyone have an idea on when some version might go stable?
> There's 7 versions in portage and all are testing; the first (version 3)
> goes back to November 2009.


You should file a stabilisation request at b.g.o. they are likely not in 
testing because there's something wrong with them, they are probably in 
testing because nobody has bothered bumping them to stable.

However, considering the speed that Google are releasing Android versions, I 
think that the usual gentoo arch/~arch methodology is a bit of a joke in this 
case. If you didn't use the ebuilds, you'd be installing the latest sdk from 
google anyway, right? All the ebuild does is unpack a binary archive into 
/opt, nothing magic there, no real compelling need to wait for a stable 
version. And it doesn't need any ~arch deps either

I say just be done with it, keyword the damn thing and install it.


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Dale

Nikos Chantziaras wrote:

On 10/08/2010 01:24 AM, Dale wrote:

Peter Humphrey wrote:

On Thursday 07 October 2010 20:40:32 Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I
need qt3support anymore? I'm talking about the USE flag qt3support.
I run into blocks sometimes and I know KDE3 needed qt3. I'm just
curious if I can get rid of this USE flag now. I only have KDE4
installed. No more KDE3 left that I know of.

I have KDE-4.5.2 here. I get this:

$ USE=-qt3support emerge -upDvN world

These are the packages that would be merged, in order:

Calculating dependencies ... done!

emerge: there are no ebuilds built with USE flags to satisfy ">=x11-
libs/qt-sql-4.6.3:4[qt3support]".
!!! One of the following packages is required to complete your request:
- x11-libs/qt-sql-4.6.3-r2 (Change USE: +qt3support)
(dependency required by "kde-base/kfilereplace-4.5.2" [installed])
(dependency required by "kde-base/kdewebdev-meta-4.5.2" [installed])
(dependency required by "@selected")
(dependency required by "@world" [argument])

So it looks as though I at least can't get rid of it.



It also looks like I can't get rid of it. lol I guess it will have to
stay, for now anyway.


One thing I don't get is why this seems to worry you.  I don't see you 
complaining about packages needing the "libsamplerate" or "opengl" USE 
flags...  :-P




I don't get blocks from those tho.  That's why it bugs me.  Funny thing 
is, when I ran emerge again, no blocks.  I'm not sure how that worked.  
I guess it wanted me to ask a question on the mailing list.  Everything 
seems to be emerging just fine now.  Then again, it's not finished yet 
so there is still time for trouble.  ;-)


Dale

:-)  :-)



Re: [gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Dale

Nikos Chantziaras wrote:

On 10/08/2010 01:14 AM, Dale wrote:

Paul Hartman wrote:

On Thu, Oct 7, 2010 at 2:40 PM, Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I need
qt3support anymore? I'm talking about the USE flag qt3support. I run
into
blocks sometimes and I know KDE3 needed qt3. I'm just curious if I
can get
rid of this USE flag now. I only have KDE4 installed. No more KDE3 
left

that I know of.

Going along with what Alan said. qt3support does not use Qt 3 at all.
It just puts something like a Qt 3-compatible API into Qt 4, to make
porting Qt 3 to Qt 4 apps easier. It is largely insignifcant to you
(since it's not pulling in qt3 packages).

If you have any packages that require this USE flag, their ebuild will
require this USE flag. So disable it, emerge --deep --newuse world and
see if it complains. If it does, re-enable and continue life with
qt3support as if nothing ever happened. :)



Just picking the last message to reply to so this is for everyone who
has chimed in so far.

I may remove the USE flag and just see what blows up. I may copy over
some binaries so that I can just use -k and not have to wait on the
compiles. I would think if I remove it that something would pitch all
holy hell about it if it has to have it. I'm sure it would be caught at
some point and I would know it then for sure.

I'm not sure if I have anything on here that must have qt3support. Is
there a way to know for sure? Maybe some obscure command that I am not
familiar with?


revdep-rebuild will help.  The qt3support USE flag is nothing magical; 
it simply pulls the "x11-libs/qt-qt3support" as a dependency.  This 
package installs the /usr/lib/qt4/libQt3Support.so.* libraries.  So if 
you have binaries that try to load this lib, revdep-rebuild will find 
them.


And in general, if *any* binary you try to run aborts with something 
like "libQt3Support.so not found" or similar, then you know it needs 
qt3support.





I didn't want to remove it and recompile just to find out KDE won't work 
anymore.  That would be . . . bad.  lol


I need to put me a backup WM on here just in case KDE does go belly up 
at some point.  At least I can run a browser and look for help.


Dale

:-)  :-)



[gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Nikos Chantziaras

On 10/08/2010 02:17 AM, Dale wrote:

Nikos Chantziaras wrote:

On 10/08/2010 01:14 AM, Dale wrote:

Paul Hartman wrote:

On Thu, Oct 7, 2010 at 2:40 PM, Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I need
qt3support anymore? I'm talking about the USE flag qt3support. I run
into
blocks sometimes and I know KDE3 needed qt3. I'm just curious if I
can get
rid of this USE flag now. I only have KDE4 installed. No more KDE3
left
that I know of.

Going along with what Alan said. qt3support does not use Qt 3 at all.
It just puts something like a Qt 3-compatible API into Qt 4, to make
porting Qt 3 to Qt 4 apps easier. It is largely insignifcant to you
(since it's not pulling in qt3 packages).

If you have any packages that require this USE flag, their ebuild will
require this USE flag. So disable it, emerge --deep --newuse world and
see if it complains. If it does, re-enable and continue life with
qt3support as if nothing ever happened. :)



Just picking the last message to reply to so this is for everyone who
has chimed in so far.

I may remove the USE flag and just see what blows up. I may copy over
some binaries so that I can just use -k and not have to wait on the
compiles. I would think if I remove it that something would pitch all
holy hell about it if it has to have it. I'm sure it would be caught at
some point and I would know it then for sure.

I'm not sure if I have anything on here that must have qt3support. Is
there a way to know for sure? Maybe some obscure command that I am not
familiar with?


revdep-rebuild will help. The qt3support USE flag is nothing magical;
it simply pulls the "x11-libs/qt-qt3support" as a dependency. This
package installs the /usr/lib/qt4/libQt3Support.so.* libraries. So if
you have binaries that try to load this lib, revdep-rebuild will find
them.

And in general, if *any* binary you try to run aborts with something
like "libQt3Support.so not found" or similar, then you know it needs
qt3support.




I didn't want to remove it and recompile just to find out KDE won't work
anymore. That would be . . . bad. lol


There's the "rm" command, and then there's "mv".




Re: [gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Dale

Nikos Chantziaras wrote:

On 10/08/2010 02:17 AM, Dale wrote:

Nikos Chantziaras wrote:

On 10/08/2010 01:14 AM, Dale wrote:

Paul Hartman wrote:

On Thu, Oct 7, 2010 at 2:40 PM, Dale wrote:

Hi,

I have a question. I'm using KDE4, about to switch to 4.5.2. Do I 
need

qt3support anymore? I'm talking about the USE flag qt3support. I run
into
blocks sometimes and I know KDE3 needed qt3. I'm just curious if I
can get
rid of this USE flag now. I only have KDE4 installed. No more KDE3
left
that I know of.

Going along with what Alan said. qt3support does not use Qt 3 at all.
It just puts something like a Qt 3-compatible API into Qt 4, to make
porting Qt 3 to Qt 4 apps easier. It is largely insignifcant to you
(since it's not pulling in qt3 packages).

If you have any packages that require this USE flag, their ebuild 
will
require this USE flag. So disable it, emerge --deep --newuse world 
and

see if it complains. If it does, re-enable and continue life with
qt3support as if nothing ever happened. :)



Just picking the last message to reply to so this is for everyone who
has chimed in so far.

I may remove the USE flag and just see what blows up. I may copy over
some binaries so that I can just use -k and not have to wait on the
compiles. I would think if I remove it that something would pitch all
holy hell about it if it has to have it. I'm sure it would be 
caught at

some point and I would know it then for sure.

I'm not sure if I have anything on here that must have qt3support. Is
there a way to know for sure? Maybe some obscure command that I am not
familiar with?


revdep-rebuild will help. The qt3support USE flag is nothing magical;
it simply pulls the "x11-libs/qt-qt3support" as a dependency. This
package installs the /usr/lib/qt4/libQt3Support.so.* libraries. So if
you have binaries that try to load this lib, revdep-rebuild will find
them.

And in general, if *any* binary you try to run aborts with something
like "libQt3Support.so not found" or similar, then you know it needs
qt3support.




I didn't want to remove it and recompile just to find out KDE won't work
anymore. That would be . . . bad. lol


There's the "rm" command, and then there's "mv".



But I would still have to recompile again with the qt3support flag if it 
messed up badly.  On this machine, that takes time.  During that time, I 
may not have KDE at all.  I did that when I made a mistake a while 
back.  About 12 hours with no GUI.  That was with some packages being 
binary and using -k.  If I have to recompile them all, it would take 
longer still.


Not something I want to repeat.

Dale

:-)  :-)



Re: [gentoo-user] Re: qt3support USE flag. Is it needed now?

2010-10-07 Thread Alan McKinnon
Apparently, though unproven, at 01:31 on Friday 08 October 2010, Dale did 
opine thusly:

> But I would still have to recompile again with the qt3support flag if it 
> messed up badly.  On this machine, that takes time.  During that time, I 
> may not have KDE at all.  I did that when I made a mistake a while 
> back.  About 12 hours with no GUI.  That was with some packages being 
> binary and using -k.  If I have to recompile them all, it would take 
> longer still.
> 
> Not something I want to repeat.
> 
> Dale


I fail to see why you are even worried about this flag:

# equery size qt-qt3support

 * x11-libs/qt-qt3support-4.6.3
 Total files : 428
 Total size  : 7.37 MiB


If the presence of that teenyweeny package with the few things that require it 
really is an issue for you, then I can state the following with complete 
confidence:

You should not be using KDE4.


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Sniffing / analysis of application / wifi packets on my LAN

2010-10-07 Thread Adam Carter
>
> > As far as CLI tools go, sorry, I'm not sure what's available.  Never had
> > a need to look into those.
>

tcpdump is the most common CLI tool. Handy if you want to capture to a file
on a unix based firewall or F5 etc so you can then view it in Wireshark on
your workstation.


> So Wireshark is a GUI tool?
>

Yes.

It has crypto decode for SSL if you have the private key, so it might also
be possible to have it decode WPA since you have the key - RTFM to find out
for sure. Depending on how the crypto works you may need to have captured
the beginning of the crypto setup to be able to decode, as that's where the
session key will be exchanged. Cant remember if WPA does that or not.


Re: [gentoo-user] Can't find /dev/md3 on new install

2010-10-07 Thread Volker Armin Hemmann
On Thursday 07 October 2010, Mike Diehl wrote:
> On Thursday 07 October 2010 2:17:11 pm Volker Armin Hemmann wrote:
> > On Thursday 07 October 2010, Mike Diehl wrote:
> > > Hi all,
> > > 
> > > I'm building a new server, only this time, I'm using RAID1 for the
> > > boot, swap, and root partitions. (sda and sdb)
> > > 
> > > I've gottent the install complete, but when I reboot, fsck.ext3 says
> > > that can't find /dev/md3, which is my root partition.
> > > 
> > > I "borrowed" a .config file from another server where RAID1 is working,
> > > so I know I've got RAID in the kernel.  I did the prescribed mknod in
> > > /dev/ to create the md device nodes.
> > > 
> > > I also did the mdadm --scan --verbose > /etc/mdadm.conf.
> > > 
> > > What could I be missing?
> > 
> > mdadm changed default superblock version. No autoassembly anymore. You
> > need an initrd (grrr).
> 
> I changed the partition type to 0xfd and used meta version .90.  This
> should have been good enough to avoid needing an initrd... Right?
> 
> I HATE initrd's

yeah, that should do the trick.