Re: [CentOS] Removing a file that starts with dashes

2014-04-02 Thread benfell
On Wed, Apr 02, 2014 at 09:51:41AM -0500, Frank M. Ramaekers wrote:
 rm: unrecognized option `--backup=numbered'
 Try `rm ./'--backup=numbered'' to remove the file `--backup=numbered'.

This is what's worked for me. I know the double dash is supposed to
stop interpretation of arguments, but it hasn't worked for me.

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgphc9TKNIsHF.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Removing a file that starts with dashes

2014-04-02 Thread benfell
On Wed, Apr 02, 2014 at 04:16:51PM -0500, John R. Dennison wrote:
 
 What shell are you using?  Perhaps that is interfering.
 
Ah. Good point. I've been using zsh for so long I forget it's even an
issue. ;-)

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpOdZFUjGdN0.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Removing a file that starts with dashes

2014-04-02 Thread benfell
On Wed, Apr 02, 2014 at 11:17:02PM +0200, Reindl Harald wrote:
 
 WTF - there is a reason the -f flag exists - RTFM
 
I don't know what manual you're reading. But -f has a specific
function and *this* *isn't* *it*.

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpV5XyoEgnkD.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Removing a file that starts with dashes

2014-04-02 Thread benfell
On Wed, Apr 02, 2014 at 06:04:00PM -0500, Jim Perrin wrote:
 
 Don't feed the trolls, and be careful of the CC. He's not on the
 mailing list proper for a reason.
 
My apologies. I did not realize. But of course you're right.

This issue is all about shell interpretation--before the command
string even gets to the command.

Should I always strip the cc when posting to this list?

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpd9pphFkzaT.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Removing a file that starts with dashes

2014-04-02 Thread benfell
On Wed, Apr 02, 2014 at 07:59:28PM -0500, John R. Dennison wrote:
 On Wed, Apr 02, 2014 at 04:46:51PM -0700, benf...@parts-unknown.org wrote:
  
  This issue is all about shell interpretation--before the command
  string even gets to the command.
 
 Apparently zsh handles this differently from what was stated here
 earlier.  If this is indeed the case this is arguably a zsh bug.
 
I don't know. I couldn't reproduce the behavior today:

[benfell@munich]~% print $SHELL
/bin/zsh
[benfell@munich]~% touch -- --DoingMyselfIn
[benfell@munich]~% ls -al -- --DoingMyselfIn
-rw-rw-r-- 1 benfell benfell 0 Apr  2 18:10 --DoingMyselfIn
[benfell@munich]~% rm -- --DoingMyselfIn
[benfell@munich]~% ls -al -- --DoingMyselfIn
ls: cannot access --DoingMyselfIn: No such file or directory
[benfell@munich]~% 

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpRaowLNoy56.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] system setups, was Re: has anybody gotten horde working?

2014-03-25 Thread benfell
On Tue, Mar 25, 2014 at 04:47:21AM +, Always Learning wrote:
 
 My good experience is, I believe, very likely to be shared by many
 others around the world.
 
I think that much depends on what you're seeking to accomplish.

Most distributions, these days, will do an acceptable job of
configuring a system for an end-user at installation. Those of us
who've been around for a few years remember trying to get USB working,
trying to get sound working, having to configure X by hand, and a lot
of other hellish (but for some, immensely educational) experiences.

If, on the other hand, you're trying to throw up a server, things
start getting more difficult. It isn't enough to say that the MTA
configuration was acceptable out of the box, because if you're
actually running your own domains, that simply doesn't come out of the
box.

But at least with a MTA, you can pretty much configure it and forget
it. Web servers always seem to need a bit of tweaking, just because
this is your face to the world, or an important part of your
infrastructure, and this often means experimenting with new
software--like my ill-fated venture into horde.

And none of these configurations are intuitive. Postfix has way too
many moving parts. I've got moderately decent anti-spam defenses up
now and I'm basically hanging on to this configuration by the skin of
my teeth. My apache configuration relies heavily on Include
statements, repeating configurations for IP addresses and ports, and
on my ability to use one domain as a template for another.

I doubt I have any of this stuff properly optimized for my server--and
mysql is its own special case here, where if you keep following some
guidance, you'll exceed the limits of your machine by a couple orders
of magnitude. But in the meantime, you have to not let a system's poor
performance drive you into making the problem worse.

If you've really ventured through all of this stuff, and into
application layers and only had success, more power to you. I've found
a few of my own limits along the way.

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpGHI6t9wThx.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] has anybody gotten horde working?

2014-03-25 Thread benfell
On Tue, Mar 25, 2014 at 08:21:08AM -0600, Nels Lindquist wrote:
 
 I see later in the thread that you're trying to use the EPEL packages,
 which are based on the Horde 3 framework.  The current stable
 framework is Horde 5, which is significantly advanced from the Horde 3
 framework.

Actually:

php-horde-horde.noarch   5.1.6-1.el6.remi
@remi

I'm still a little confused about these additional repositories, but
this looks like Horde 5 to me.

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpubzrr44eAU.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] has anybody gotten horde working?

2014-03-25 Thread benfell
On Tue, Mar 25, 2014 at 09:56:46AM -0600, Nels Lindquist wrote:
 On 3/24/2014 3:17 PM, benf...@parts-unknown.org wrote:
 
 What are you using as an authentication backend?  Many people with the
 simplest use case for Horde (single domain webmail; one server) set up
 the one required backend in IMP, and then allow Horde to use IMP for
 authentication, which in effect passes authentication for all of Horde
 through to the underlying mail server.
 
I was using the filesystem for the session-handling backend, and
dovecot for authentication. Dovecot was the only authentication
backend I could figure out how to get working.

For me at least, horde's documentation--especially on authentication
backends--doesn't even begin to approach adequacy.

-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgprjIeGhPEwN.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] has anybody gotten horde working?

2014-03-25 Thread benfell
On Tue, Mar 25, 2014 at 03:40:16PM -0500, Les Mikesell wrote:
 
 The remi repository will replace a lot of base packages with newer
 versions if you let it. It may be OK by itself or with EPEL enable but
 likely to conflict with anything else.
 
Jeez. There's more than decent reason to suspect that that might be a
problem...

Thanks!
-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpB0_RXSAgM5.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] has anybody gotten horde working?

2014-03-24 Thread benfell
Hi,

Horde seems to be quite the problem child. It sorta kinda looks like
session handling is entirely broken.

kronolith will let me in, but not for long. Then I get invalid token
and am bounced back to the home screen.

imp won't let me in at all. This behavior is completely broken: I get
a log in screen and a message in /var/log/messages about not being
authorized for IMP (which is apparently right up there in the list of
useless, meaningless error messages).

Looking around on the web, I see a google thread about somebody saying
kronolith shouldn't reset session data, and Jan Schneider, the horde
developer, I think, insisting that it must. He seems to have his own
idea about how things should work--and I'm beginning to wonder if it
actually does.

Has anybody gotten this working?

By the way, this is CentOS 6.5.

Thanks!
-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpNOmBee91tj.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] has anybody gotten horde working?

2014-03-24 Thread benfell
On Mon, Mar 24, 2014 at 10:49:17PM +0100, Reindl Harald wrote:
 
 Jan Schneider is an idiot closing reproduceable bugreports
 years ago and refuse clear and valid changes to avoid them
 
 just drop that crap and use a different solution like Roundcube
 which is not splitted in a ton of unmaintainable subpackages
 
*sigh* Unfortunately, this sounds right. This is only about the
zillionth time I've tried to get horde working--and this is as far as
I've gotten.

Unfortunately, the openpgp plugin for roundcube also seems broken. It
doesn't sign messages even in a format *it* can recognize (and I've
confirmed that nothing else recognizes its signatures either).

Thanks!
-- 
David Benfell benf...@parts-unknown.org
See https://parts-unknown.org/node/2 if you don't understand the
attachment.


pgpAeX9g3VaAy.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] has anybody gotten horde working?

2014-03-24 Thread David Benfell
On 2014-03-24 15:51, Les Mikesell wrote:
 
 If you are starting from scratch building a mail server you might want
 to look at SME server or ClearOS where webmail works out of the box.

Definitely not a start from scratch. But I did find this:

http://senderek.ie/wee/webmail/wee-roundcube.php

It modifies roundcube to implement gnupg. I'm testing it now. And it 
seems to have failed

*sigh*
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] has anybody gotten horde working?

2014-03-24 Thread David Benfell
On 2014-03-24 16:24, Johnny Hughes wrote:
 On 03/24/2014 04:17 PM, benf...@parts-unknown.org wrote:
 Hi,
 
 Horde seems to be quite the problem child. It sorta kinda looks like
 session handling is entirely broken.
 
 kronolith will let me in, but not for long. Then I get invalid token
 and am bounced back to the home screen.
 
 imp won't let me in at all. This behavior is completely broken: I get
 a log in screen and a message in /var/log/messages about not being
 authorized for IMP (which is apparently right up there in the list of
 useless, meaningless error messages).
 
 Looking around on the web, I see a google thread about somebody saying
 kronolith shouldn't reset session data, and Jan Schneider, the horde
 developer, I think, insisting that it must. He seems to have his own
 idea about how things should work--and I'm beginning to wonder if it
 actually does.
 
 Has anybody gotten this working?
 
 By the way, this is CentOS 6.5.
 
 Thanks!
 
 Are you using the version from EPEL?

Yup.
 
 If so, I would report to them that it is not working.

Thanks. I will do so.
 
 Or are you trying the software directly from horde.org?

I've made this mistake before. A few times. The state of the pear 
packages is in continual flux. Often they are broken and, if there is an 
option to install stable versions when newer, broken ones are available, 
I haven't found it.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Pipe into logger duplicates messages in /var/log/messages

2014-03-03 Thread David Benfell
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 03/03/2014 09:34 PM, Alexander wrote:
 I am trying to pipe the output from a process into syslog using the
 logger command. Initially I pipe the output into a separate file,
 but as it happens this filled up the disk when things went wrong.
 So I figured I redirect the output to syslog and let logrotate deal
 with the roll-over and archive of the file.
 
 However the following command :
 
 echo HI  logger -t test

What are the contents of the file HI in the working directory from
which you ran this command?

(I think you mean `echo HI | logger -t test`.)


- -- 
David Benfell
see https://parts-unknown.org/node/2 if you don't understand the
attachment
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCgAGBQJTFWubAAoJEBV64x4SNmArD5kP/0HgMyYUkdrnntdO+zPUf9t6
QrKdGsSPhy2md/AN66B2s2BBk5wYnP3oMPJi+VGDjes8mlLK6hxdfJSVj/hAS+YY
saOxTQwe8AlTP3nbbJbzmdER3qJ/wYn6SDMXedQlErgLZ1sl2ZF7dcKvxXLQqPu0
W/Cn1gCymLino6AgH8inCDaqyAeQHS0QVM0a718ajrafACvbZOutbqbqCiv/syQR
XzX+gCPmy2lGdLfqEFntLau6A/uH0EMVBnB0qhKf2LeUc+t0uemdURguICeKQiR3
tFEbC+yDunZyj2TpJLl0c+yAPQZvmCjULRqRBvyWbN0Ehkz7PXN+dDO+iT2ECtOw
KfHpTMJBwYvkxjFzzAZxQ4QVqcAMqc4XtBRWxeRyqntKwJ2xYCET7cvyUAlt0khO
Qjmz17DDR3AVGHpn2LIxmp2pUx8/thfoNMDR477AL51WKrESibIpPhvX5Tk3LpyY
GJJhtr5cqYJUZLSYnqXgp3U6ZmO4uA3DwuvCp8kY7/YcLTysx8wj4xl488c4fmfc
LTDmBcfL2lAld8BcXHtXkuKFOIkzaBpybDEUnVbigQ5gxkL9bKrK2Ew2W+Wef56D
JHiRfXEG5GoxIrQ42ojXew92fIpt47f71Y7VXhmVYaGrumr1C6CYTh2GhlzpbDQa
fyzHNPPUulsW4qRSmrF5
=cks2
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread David Benfell
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/03/2014 03:36 AM, Adrian Sevcenco wrote:

IMHO underlying problem is not
 that a cipher/process/code was compromised but that the
 supervising _trustworthy_ entity is in fact not trustworthy at
 all!

It will be interesting to see how this plays out. I have enough
experience with government to know that there are indeed people who
really care about what they do and I'm inclined to accept that some of
them at NIST are indeed really, really upset about this.

But if I understood and am remembering correctly, NSA's involvement
was mandated by statute.

Back to a more technical point: If indeed the compromised algorithm is
*not* enabled in openssl (as a build option) by default, how would
apache be able to use it, even in rare instances, unless somebody
actually selected that option?

- -- 
David Benfell
see https://parts-unknown.org/node/2 if you don't understand the
attachment
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.1.0-ecc (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCgAGBQJSxzWNAAoJEKrN0Ha7pkCOTxYP/2KXKJ3QYnC51baCNWqvZxG9
nvWmi3WR0Stm81suJDC46IV5yJMgqGPV1JGaXVAh9YliiRBqCDEEhKk87NYpbMfT
nGUaMARp1EOyW1r2WH7JbwAbX37jNnJg65bvxdS7UqSuwxCjjg29Tnah1ybSCV9k
jEPI8Ssccc9uVglUPzj1LJsIeSq2JysZicZHa3jgxhFC2erfqPmDxVVYYheCD6Mb
kZtVxJ+E5o/y+X0B1kgV2ZXYB0D7VlnOCKl6XxzY7t8qeDh4JMx4bFxXKEBAsUGt
pOX3siD/ferpbt3xkQyz9L8IutZWkTO3wwuJ9faM+fPYTPlqzTtA/xCEbDOz6rgZ
ZUcr2FNi+KLn0Yt4PxYFTseLHV1QMtztsozGweD0+90CDAkgeTphd15VLf+xttlw
JJ4jOP4kyUxq/lAJl16xzoyM9sttZnf1brBOaSqsc2nccX8k6dlbyHsRY/AfLtXb
/7499cGR1XdxVRt7LtvUG4XLLMh3CIGT1kv4txzldXJJhFvETlPpfbtAjumwh6pd
+qQWtewVxH0QVV5LX/lYV7RgquLMhM++nkMcMvB+wvyEUDAalRdeNYZ/zrWNw9cX
OT+OYZGRu5LDRDDjeKzDmyDhAGoLPDIw4qpxoH/6ypPzkm4glOS22gI/f38TtoJD
ojKtZnrYUVe/Po5QyH3c
=1h31
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-02 Thread David Benfell
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/02/2014 01:22 PM, m.r...@5-cent.us wrote:
 Eero Volotinen wrote:
 
 Is there nice way to put back EC encryption on Centos?
 
 RHEL disabled it due patent issues, but is third party
 providing packages to EC enabled packages to centos ?
 
 *Which* elliptic curve? I trust you've been reading the revelations
 from Snowdon about the NSA putting a backdoor in the common ones,
 esp. the POSIX ones.

- From what I've been able to find, this is a bit overstated.

There is *one* random number algorithm (Dual_EC_DRBG) associated with
ECC that is believed to have been compromised. That it appeared
vulnerable has long been known; Bruce Schneier wrote about it in 2007.
It also happens to be inefficient and so is not widely used (but a few
commercial products use it).

http://www.wired.com/politics/security/commentary/securitymatters/2007/11/securitymatters_1115

I was unable to find an associated vulnerability in Linux. I trust the
OpenSSL folks would be on top of this faster than you can blink an eye
if it were a current issue. They have not, from what I've seen,
reacted to the revelations.

http://www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220

- -- 
David Benfell
see https://parts-unknown.org/node/2 if you don't understand the
attachment
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.1.0-ecc (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=//KB
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Story of an email

2013-11-30 Thread David Benfell
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 11/30/2013 04:43 AM, Scott Robbins wrote:
 
 Fetchmail (and getmail) don't make use of smtp.  As their name
 suggests, they get mail, pulling it from a pop or imap server,
 whether on your ISP or local server.  From there, they might send
 it elsewhere, depending upon the setup.

The traditional, and I believe default, fetchmail setup is to hand off
to SMTP for local delivery.

I've always found this problematic and usually overridden it. But as
I'm using getmail these days (fetchmail is just too fussy in general),
I don't have an example configuration to share.

- -- 
David Benfell
see https://parts-unknown.org/node/2 if you don't understand the
attachment
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.1.0-ecc (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=+OrW
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos