Re: [SLUG] Anyone else having problems with Ubuntu's latest openvpn?
On Thu, May 15, 2008, Sonia Hamilton wrote: > Out of interest, what source are you using for your security advisories? Same as John, I subscribe at http://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce and to similar lists for other distros when I'm using them. http://lwn.net/ has regular roundups of all distribution security updates too but I've generally updated by the time I see them. -Mary -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] help! resetting nm-applet on Hardy Herron to make wireless work again
> Out of interest, what is the canonical (vs Canonical) way of giving NM a > kick when you've changed something, apart from logging out/in? In the olde > days when manually editing /etc/network/interfaces I used to do > /etc/init.d/network restart or ifdown eth0; ifup eth0, but NM often > appears to ignore those. Just click on the NM menu item again (ie. you can select 'Wired Connection' even if it's already selected to kick off a reset). > And where does NM actually store it's configuration? Sometimes I'd like to > see what NM thinks all it's settings are. I've looked through files > mentioned in dpkg -L, no dice. Started to look through the source code, > got sidetracked. They're user settings stored in GConf. The whole idea about NM is that it will autoconfigure as much as it can, but is otherwise a 'user policy daemon'. The UI and NM daemon talk to each other about status and settings, but most of the settings are defined by the user via the UI, and stored by the user. - Jeff -- OSCON 2008: Portland OR, USA http://conferences.oreilly.com/oscon/ "They cosset us with trappings to shut us up. That way when we say 'sharecropper!' you can point to my free suit and say 'Shut up pop star.'" - Courtney Love -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Anyone else having problems with Ubuntu's latest openvpn?
On Thu, May 15, 2008 at 09:35:31 +1000, Sonia Hamilton wrote: Hi Sonia, > Out of interest, what source are you using for your security advisories? I get mine from [EMAIL PROTECTED] Cheers, John -- PdS> You obviously haven't used terminfo. All the problems of termcap, a few extras and a layer of nastinesss. It's a wonderful tool. -- Steve O'Hara-Smith -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] help! resetting nm-applet on Hardy Herron to make wireless work again
On Wed, 2008-05-14 at 22:39 +1000, Jeremy Visser wrote: > If it still doesn't work, go edit /etc/network/interfaces (I hope your > distro has its config there), and delete every single line _except_ for > the ones containing "auto lo" and "iface lo inet loopback". Log out and > log in to see if it worked. Out of interest, what is the canonical (vs Canonical) way of giving NM a kick when you've changed something, apart from logging out/in? In the olde days when manually editing /etc/network/interfaces I used to do /etc/init.d/network restart or ifdown eth0; ifup eth0, but NM often appears to ignore those. And where does NM actually store it's configuration? Sometimes I'd like to see what NM thinks all it's settings are. I've looked through files mentioned in dpkg -L, no dice. Started to look through the source code, got sidetracked. Sonia. -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Anyone else having problems with Ubuntu's latest openvpn?
On Thu, 2008-05-15 at 07:39 +1000, Mary Gardiner wrote: > I haven't tried OpenVPN yet, but a new security advisory came out this > morning saying "A regression was introduced in OpenVPN when using TLS Out of interest, what source are you using for your security advisories? -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Anyone else having problems with Ubuntu's latest openvpn?
On Thu, May 15, 2008 at 07:39:01 +1000, Mary Gardiner wrote: > I haven't tried OpenVPN yet, but a new security advisory came out this > morning saying "A regression was introduced in OpenVPN when using TLS Thanks Mary, I've just seen that too. I'll give it a go later. Cheers, John -- I find this highly amusing, as I am yet to find any difference between `supported' and `unsupported' when it comes to Sybase products. -- Matt McLeod -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Anyone else having problems with Ubuntu's latest openvpn?
I haven't tried OpenVPN yet, but a new security advisory came out this morning saying "A regression was introduced in OpenVPN when using TLS and multi-client/server which caused OpenVPN to not start when using valid SSL certificates... It was also found that openssl-vulnkey from openssl-blacklist would fail when stderr was not available. This caused OpenVPN to fail to start when used with applications such as NetworkManager." So sounds like they're on top of at least some bugs now and you should upgrade: https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-May/000710.html -Mary -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Get involved at the first OLPC Australia TechFest!
Hi all, thought this would be of interest :) --- The first OLPC Australia TechFest will be held on June 1st in Sydney. It will include demonstrations, workshops about the OLPC hardware and software, developer tutorials and more! Everyone is welcome, though the event is mainly designed to help potential technical contributors get involved. The TechFest will be led by Pia Waugh (OLPC Australia), Joel Stanley (OLPC “XO” laptop guru) and Martin Langhoff (OLPC “XS” server project lead). Thanks very much to Joel and Martin for providing their insights into the project and volunteering their time for us! Please find the RSVP and full agenda on the web page: http://www.olpc.org.au/2008/05/14/get-involved-at-the-first-olpc-australia-techfest/#more-14 Cheers, Pia -- OLPC Australia http://olpc.org.au/ Linux Australia http://linux.org.au/ Open Source Industry Australia http://osia.net.au/ Software Freedom Day http://softwarefreedomday.org/ -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] search engine for company network (OT)
Sebastian Spiess wrote: hi all, I know this is not a 100% linux related question but it's open source baby :-) On our company network we have a daily growing number of documents in lots of folders and stuff. Most of it is organised in project folders and has reoccurring folder structures and file names. We are working hard on giving it more and clearer structure but sometimes it is still hard to find some files. I want to suggest to install a search engine which will index our existing files so that employees can crawl quickly though projects history. I've heard of the various desktop search engines like beagle, tracker and google desktop but are there open source engines which can be run on a server so that many can connect to it and search? Sadly we are relying on MS office (2001), AutoCAD (R16 to 2008) and other proprietary software in our daily work so those kind of files would need to be indexed. Does anyone has a idea, something I could investigate further? a software name? cheers, seb Hi Sebastian, I have a brief look thru the replies so far and no one has mentioned IBM Omni Find Yahoo Edition (http://omnifind.ibm.yahoo.net/index.php) probably 'cause its not Opensource :) however it is free and looks to remain free for some time. I think it might be right up your alley! I was in the same position as you some time ago, small company with lots and lots of docs ranging from pdfs in a technical library to CAD files of differing formats to word, open office documents, pictures etc in project folders. We have a fairly stringent file system management plan in place but when you not quite sure what your looking for, a decent indexed search goes a long long way, especially when looking for that darn part number buried deep in a CAD drawing which you did 5 years ago :). Note it picks up .dwg files (even non Autocad ones :) ) and a whole range of other file types. It has a limit of 200 000 files and a maximum of 5 collections but this should cover most small business. Some of the others I tried/looked at: *Regain* - http://regain.sourceforge.net/ - actually the best after IBM OmniFind! *Terrier* - http://ir.dcs.gla.ac.uk/terrier/ *Egothor* - http://www.egothor.org/ *Lucene* - http://lucene.apache.org/java/docs/index.html - The IBM Ominfind uses this also! Below is a quick note from my work diary when i was researching and trying solutions: "This was by the far the easiest, most advanced (in terms of development) and provided the best results from all of the softwares that I tested and looked at. The only issue when installing was a missing Java RHEL compatibility package, once this was yummed on my test server the install went very smoothly. The software has a web interface for configuring and searching and uses a port off its own java applet server, Jetty, I think. The download package includes its own Java runtime environments which alleviates the pain of trying to get the right version, for that matter, a working version of Java. The crawling process is pretty resource hungry but seems very quick for what it is doing, the results are even more surprising, lots of results and fairly relevant ones at that, out of all the software that I tried this picked up the most file types and search the most files. Sometimes the crawler does not index every file but that is something I am working on. I currently have it indexing over 200,000 files and it only results in an index size of 4-5gb, thats without caching the files…. The catch with this software? well it is not entirely Opensource, it uses the Lucene package but also incorporates some fairly heavy stuff from Yahoo and IBM, they have stated also they do not plan to make this particular version a paided one. They have a entrprise version for more than 500,000 files. The seem to be trying to get a foot in the searching world by providing a free version to entice people/companies in. Probably not such a bad idea, g$$gle really needs some proper competition" Feel free to contact me if you think I can help out - I would be happy to try! I can even send you a de-sensitized screenie of a typical search on our server! -- Best Regards, Gerard "In God we trust, all others bring data" -- Framed plaque from the '60s, hanging in the Mission Evaluation Room at Johnson Space Center, downstairs from Mission Control. -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] help! resetting nm-applet on Hardy Herron to make wireless work again
On Wed, May 14, 2008 at 10:39 PM, Jeremy Visser <[EMAIL PROTECTED]> wrote: > On Sun, 2008-05-11 at 17:13 +1000, Amos Shapira wrote: > > "Manual Configuration" only gives me the usual "Enable Roaming" option > > for both wireless and wired networks, which doesn't seem to make a > > difference? > > The roaming mode is meant to be checked. If Network Manager doesn't pick > the change up straight away, don't go unchecking it. Just log off and > log on again. Already tried this, including a complete reboot. > If it still doesn't work, go edit /etc/network/interfaces (I hope your > distro has its config there), and delete every single line _except_ for > the ones containing "auto lo" and "iface lo inet loopback". Log out and > log in to see if it worked. That's EXACTLY what I did after being advised the same thing on another mailing list and now everything works. I didn't even have to restart NM or anything - it just noticed the change in the file. The strange thing is that I can't tell who the hell added the lines which I removed. I'm sure I didn't. Could it be an older version of NM (this system upgraded from Gutsy, and worked for two-three weeks under Hardy). Another question: All these troubles began when I tried to convince NM to talk to an Access Point for which I had the pass key only as a hex string and I just didn't accept it. Is there some special trick to make it accept hex strings (as opposed to "text" passwords which are then hashed with the ESSID or something)? Thanks, --Amos -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Anyone else having problems with Ubuntu's latest openvpn?
G'day sluggers, I updated openvpn on a Ubuntu Feisty server today and discovered that the openvpn server wouldn't allow incoming connections (tried with two different clients). This message appears in syslog when a client tries to connect. May 14 16:45:46 dropbear openvpn[17945]: 59.167.42.155:33826 ERROR: '/etc/openvpn/easy-rsa/keys/server.key' is a known vulnerable key. See 'man openssl-vulnkey' for details. However, when I run openssl-vulnkey on that key file, it says that the key is not blacklisted. The key was not generated on a Debian or Ubuntu system, nor was it generated with a faulty version of openssl. Has anyone else encountered a similar problem? Any ideas why openvpn doesn't like my key even though it's own vulnerability checker says it's OK? Thanks, John -- If it wasn't for CodeRed, my web server would have no-one to talk to. -- Graham Reed -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] help! resetting nm-applet on Hardy Herron to make wireless work again
On Sun, 2008-05-11 at 17:13 +1000, Amos Shapira wrote: > "Manual Configuration" only gives me the usual "Enable Roaming" option > for both wireless and wired networks, which doesn't seem to make a > difference? The roaming mode is meant to be checked. If Network Manager doesn't pick the change up straight away, don't go unchecking it. Just log off and log on again. If it still doesn't work, go edit /etc/network/interfaces (I hope your distro has its config there), and delete every single line _except_ for the ones containing "auto lo" and "iface lo inet loopback". Log out and log in to see if it worked. -- Jeremy Visser http://jeremy.visser.name/ () ascii ribbon campaign — against HTML e-mail /\ http://asciiribbon.org/ signature.asc Description: This is a digitally signed message part -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Re: search engine for company network (OT)
rich wrote: Hello all, Richard here - been lurking for a while, first post. Seb, If you only have a few users to deal with then I concur with the Rev, Google Desktop is a great solution; it's simple and it will meet your users needs. There are alternatives, I actually use one called Copernic Desktop myself (although mostly for mail) - it works for me. If you are looking for something for more than a handful of users, then I'd seriously consider spending $$ on a Google mini appliance. They are about $6k for two years, which includes maintenance and support (and you get to keep the box at the end). We've used these search applicances at my company. The PTB liked them so much that we bought one of the Enterprise versions. You're compeltely right about Google's algorithms being so far above anything else possible. They're not open source, but at least open-friendly. --Jeremy -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html