Re: Runaway BIND

2007-02-14 Thread Rich Johnson


On Feb 13, 2007, at 11:14 PM, Andy Smith wrote:


On Tue, Feb 13, 2007 at 10:17:49AM -0500, Rich Johnson wrote:
What is surprising is that such an event brought down _another_  
machine.


Would it be fair to say that excessive loggers are ill-behaved?


It sounds like your bind was misconfigured and didn't know what the
IPs of the root servers were.
Always a possibility--though it would mean that it has been  
misconfigured for 6-1/2 years since the initial installation (potato,  
or maybe the woody upgrade) and the problem never before  
encountered.  The list of root servers in /etc/bind/db.root is  
provided by bind/bind9 package.   The only changes to the package  
distribution are the list of forwarders in named.conf.options and the  
zones in named.conf.local.



That is a critical situation so I
don't blame it for logging like mad.  Some monitoring to check your
logs and disk space would be advised.
I have no objection to bind logging its concerns.  But it's the like  
mad bit I find troublesome.15+MB of log per hour repeatedly  
recording the same problem, however critical,  strikes me as  
excessive.  At this rate the recording eventually causes more damage  
than the problem itself.  My server withstood 10hrs (from Sat PM-Sun  
AM) before being overwhelmed.




Try logcheck and, well, I'm not sure what.  I use nagios but that's
a bit much for a single machine home user.  There must be something
though.  Maybe one of those desktop widgets that display graphs of
disk space?
Hmm...any of these capable of shutting down the system as it enters a  
red zone (e.g. /var free space  10M) and before it becomes  
unbootable?   I find unexpected automatic shutdown preferable to  
recovery.


Thx,
--rich





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Runaway BIND

2007-02-13 Thread Rich Johnson


On Feb 13, 2007, at 3:12 AM, Matus UHLAR - fantomas wrote:


On 12.02.07 09:55, Rich Johnson wrote:
well, i suggest you
- upgrade to bind9 (preferrably 9.3)
- check your named.root zone, if it exists and if you have it  
configured.


Done!  Let's hope it helps.  I run dist-upgrade (testing) regularly.   
Perhaps at some point it should specify bind9?


I think I've identified the triggering event.  It appears that it was  
my gateway router (a DSL modem) losing power.  Under such conditions  
the failure to reach the root servers is not surprising.


What is surprising is that such an event brought down _another_ machine.

Would it be fair to say that excessive loggers are ill-behaved? 
  



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Runaway BIND

2007-02-12 Thread Rich Johnson

OUCH!

I just recovered from bind (8.4.7-1)  flooding /var/log/syslog with  
several hundred megabytes of messages along the lines of:


 grep no addrs found for root syslog | head
Feb 10 19:54:59 creaky named[7652]: sysquery: no addrs found for root  
NS (B.GTLD-SERVERS.net)
Feb 10 19:54:59 creaky named[7652]: sysquery: no addrs found for root  
NS (C.GTLD-SERVERS.net)
Feb 10 19:54:59 creaky named[7652]: sysquery: no addrs found for root  
NS (D.GTLD-SERVERS.net)


When bind goes nuts it repeated cycles through the entire set of root  
servers at both ROOT-SERVERS.NET and GTLD-SERVERS.net at the rate of  
~550 logs/sec.  A typical burst runs for ~75 seconds or so and emits  
~42000 messages.  In my case the bursts started at 19:54:59 EST   
(UTC-5) and affected both master and slave servers.  That and the  
maturity of bind leads me to suspect some external trigger.


Upon reboot, init would not tolerate a full /var.  I was able to  
recover with no data loss by:

1.  rebooting into /bin/sh
2.  manually running fsck
3.  moving the morbidly obese syslog to another partition for analysis
4.  normal reboot.

The named.conf option set is rather daunting.  Can anyone suggest  
some options to throttle back the verbosity?


Thx,
--rich






--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: is it possible to create a black box with debian?

2006-09-19 Thread Rich Johnson


On Sep 16, 2006, at 1:55 PM, Default User wrote:


This is just a general opinion based upon general, not specific,
experience.  I can't really comment in detail because I don't know  
what
exactly you are trying to accomplish. As a general rule I believe  
that
to the extent that anyone has local, physical access or even  
proximity

to your system, you are in potential danger.  If you really want a
lecture on the subject, may I suggest that you post to
http://www.openbsd.org.  The subject has been discussed there
exhaustively, as they will tell you in no uncertain terms.




Yikes! that should be . . . post to misc@openbsd.org.

Yes, that what happens when you drink and send email at the same time.
:-O


LOL, would that be E.U.I. or E.W.I.  ?

--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Why all the futzing with boot loaders

2006-08-24 Thread Rich Johnson


On Aug 24, 2006, at 1:35 AM, Jason Martens wrote:
[...snip...]

My second question:
 - After the LILO ''upgrade'', attempts to install lilo have my  
system unbootable, can anyone tell me how I bolixed things up and  
walk me through a recovery process?  (step 1: how to obtain an  
bootable floppy with ext3, LILO and command line support)


The easiest way to fix this in my experience is to boot from the  
debian installer. Something like this should work:

boot installer

Check:   Booted expert26 from the sarge installer.


mount your root partition to /target
Check:  Had to track this one down.  The installer doesn't support  
mounting anything without first partitioning the disk(s).   
Furthermore, there is no /dev/hda, so instead:

 - Detect hardware
 - Execute a shell
 -  ~ # mkdir /target
 -  ~ # mount /dev/ide/host0/bus0/target0/lun0/part1 /target

mount any additional partitions in their correct places in /target
Check:  though in hindsight, the easiest path might be to do a mount  
-a after chroot target. (assuming root disk isn't corrupted!)



chroot /target

Check:  I had forgotten about this


mount -t proc proc /proc

Check:  This sounds too much like a magical incantation)


apt-get install grub
Check:  from /var/cache though if necessary, I could've configured  
the network.



grub-install /dev/hdx

Check!



If you got this far, you should be able to then reboot into your  
system.  Not exactly easy, but it works.
Its not so bad.  The only annoyance was (re)discovering the root  
filesystem--though I can envision a script to perform that task:   
(scan for root(s); prompt for selection if necessary; mount ;  
chroot ; mount -a)



Thank you, thank you.  This process is a nice addition to the  
toolkit.  A ''recovery''  script to perform the task would make a  
nice addition to the installer disk.


--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Why all the futzing with boot loaders

2006-08-23 Thread Rich Johnson

I was perfectly happy running LILO with potato and woody.
Then sarge installs with the GRUB bootloader.  All right, I can deal.
Now apt-get dist-upgrade _removes_  a working GRUB and installs a non- 
working LILO; it doesn't update the MBR.


My first question:
 - Can anyone tell me why  there's all this thrashing about?
My second question:
 - After the LILO ''upgrade'', attempts to install lilo have my  
system unbootable, can anyone tell me how I bolixed things up and  
walk me through a recovery process?  (step 1: how to obtain an  
bootable floppy with ext3, LILO and command line support)


The BIOS messages are:
[]
Searching for Boot Record from IDE-0..OK
No boot signature in partition
Boot Failure from Previous Device..


The last commands (and responses)  were:
cmd:$ sudo lilo -M /dev/hda1
Fatal: /dev/hda1 is not a master device with a primary parition table
[EMAIL PROTECTED]:~$ sudo lilo -M /dev/hda1 mbr
Fatal: /dev/hda1 is not a master device with a primary parition table
cmd:$ sudo lilo -M /dev/hda mbr
Backup copy of /dev/hda in /boot/boot.0300
The Master Boot Record of  /dev/hda  has been updated.
cmd:$ sudo lilo -v -v
LILO version 22.6.1, Copyright (C) 1992-1998 Werner Almesberger
Development beyond version 21 Copyright (C) 1999-2004 John Coffman
Released 17-Nov-2004, and compiled at 10:36:02 on Nov 29 2005
Debian GNU/Linux

raid_setup returns offset =   ndisk = 0
BIOS   VolumeID   Device
Reading boot sector from /dev/hda1
pf_hard_disk_scan: ndevs=1
  0300  35FCF572  /dev/hda
device codes (user assigned pf) = 0
device codes (user assigned) = 0
device codes (BIOS assigned) = 0
device codes (canonical) = 1
Warning: boot record relocation beyond BPB is necessary: /dev/hda1
Warning: Unable to determine video adapter in use in the present system.
Using BITMAP secondary loader
Calling map_insert_data
Secondary loader: 19 sectors (0x3600 dataend).
bios_boot = 0x80  bios_map = 0x80  map==boot = 0  map S/N: 35FCF572
Mapping bitmap file /boot/debianlilo.bmp
Calling map_insert_file
Bitmap: 301 sectors.
BIOS data check will include auto-suppress check

Boot image: /boot/vmlinuz-2.6.16-2-686
Setup length is 15 sectors.
Mapped 2237 sectors.
Mapping RAM disk /boot/initrd.img-2.6.16-2-686
RAM disk: 8490 sectors.
Added Lin_2.6.16img0 *

Boot image: /boot/vmlinuz-2.6.8-2-386
Setup length is 10 sectors.
Mapped 2146 sectors.
Mapping RAM disk /boot/initrd.img-2.6.8-2-386
RAM disk: 8432 sectors.
Added Lin_2.6.8img1

Boot image: /boot/vmlinuz-2.6.8-3-686
Setup length is 10 sectors.
Mapped 2291 sectors.
Mapping RAM disk /boot/initrd.img-2.6.8-3-686
RAM disk: 9112 sectors.
Added Lin_2.6.8img2

BIOS   VolumeID   Device
  8035FCF5720300
Writing boot sector.
/boot/boot.0301 exists - no boot sector backup copy made.
Map file size: 339456 bytes.
RAID device mask 0x
Boot sector relocation performed
cmd:$ init 6



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Why all the futzing with boot loaders

2006-08-23 Thread Rich Johnson
On Aug 23, 2006, at 2:54 PM, Rich Johnson wrote:[...snip...]My second question: - After the LILO ''upgrade'', attempts to install lilo have my system unbootable, can anyone tell me how I bolixed things up and walk me through a recovery process?  (step 1: how to obtain an bootable floppy with ext3, LILO and command line support)...or how to boot the installer CD to a command line to reset the MBR

Re: Pumping Gas in Oregon (WAS: Re: Osama Bin Laden Take Over List!)

2006-08-22 Thread Rich Johnson


On Aug 22, 2006, at 8:32 AM, Steve Lamb wrote:


Paul Johnson wrote:
No.  On the other hand, hard to argue with gas being cheaper in  
Oregon when

you can see the difference in an hour round trip to Vancouver...


Which doesn't mean the reason you gave is the reason for the  
difference.
As has been pointed out if the reason you gave were true then  
market forces
would drive the rest of the nation to same model of service.  Since  
that isn't
the case there must be some other reason which cannot be easily  
replicated in

the other 48 states.

Personally I'd look at the difference in tax rates of the other  
states
versus Oregon.  Oregon not taxing at the same rate could easily  
account for

the difference in price.



Here we go again!  With all the usual suspects...(including all the  
Johnsons!)



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




specifying umask for daemons

2006-07-22 Thread Rich Johnson

Hi folks--

Is there a recommended best practice for specifying the umask for  
daemons when running _stable_?

Or how is the umask established for a system user with no login shell?

For example.  Even though the default umask is 022, I wish to run  
motion(1) as a daemon with umask 002 so it'll create dirs and files  
with group write privileges.


The daemon is currently started via /etc/init.d/motion with a command  
like:


  start-stop-daemon --chuid motion --start --make-pidfile --pidfile / 
var/run/motion.pid --background  --exec /usr/bin/motion


and all files are created with the default umask (022).   Operational  
constraints are that it must work for an ext2/ext3 mounted  
'''noacl'', and must run on a _stable_ distribution--i.e. (dpkg  
version 1.10.28).


Neither
 - (umask 002 ; start-stop-daemon ...)
 - start-stop-daemon  --exec (umask 002; /usr/bin/motion)

will work.  Is there any option other than hacking a ''umask'' option  
into the daemon?





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Going back to stable

2006-07-15 Thread Rich Johnson


On Jul 15, 2006, at 5:53 AM, Dave Ewart wrote:


On Saturday, 15.07.2006 at 01:00 -0400, Roberto C. Sanchez wrote:


That is not exactly supported.  Especially since there are *huge*
differences between stable and unstable.  Gnome has been upgraded  
twice,
XFree86 was replaced by X.org.  Those two alone would be enough to  
scare

me off.  Your best bet is to reinstall.  If you kept /home on a
sepearate partition from the beginning, this should be relatively
trivial to accomplish without losing many settings.


I'd second this advice.  Re-install, don't even *try* to downgrade...


I agree as well.

Though it has been possible in the past, at the current time that  
''not exactly supported'' is at best a rather gracious euphemism.
I tried to go from testing-stable the other day with disastrous  
results.   Things really got wedged when apt-get/dpkg objected to  
removing some files shared by debian-utils and some other package  
whose name escapes me.


I gave up and reinstalled from scratch. 
  



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Going back to stable

2006-07-15 Thread Rich Johnson


On Jul 15, 2006, at 2:59 PM, Arafangion wrote:


H S Rai wrote:
What is the way to go back to stable version, if mess has been  
created

using apt-get for unstable and experimental vesrsion?


With assistance from dpkg --get-selections  selections  vim
selections  dpkg --set-selections  selections; I would reinstall
debian entirely.


Does this work across dists where the package set changes?

For example testing - xorg but stable - xfree86. 
 



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Daylight Savings Time Extended

2006-07-14 Thread Rich Johnson


On Jul 14, 2006, at 12:19 PM, Paul Johnson wrote:


[...snip...]
I'd agree with what you said if you s/American/Californian.  This  
country

isn't big enough for California and the rest of us...

--
Paul Johnson
Email and IM (XMPP  Google Talk): [EMAIL PROTECTED]
Jabber: Because it's time to move forward  http://ursine.ca/ 
Ursine:Jabber


...ursine.ca(?)given your Canadian addresses, I don't understand  
your high dudgeon on this matter.  Couldn't you just move to SK and  
be done with it?



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mip-o-suction (horrible performance)

2006-07-10 Thread Rich Johnson

On Jul 9, 2006, at 4:38 AM, Ron Johnson wrote:



Better support for h/w.  (For example, you may want to install a
SATA card in your machine.  I don't know how well 2.4 supports SATA.)

The 2.6 kernel is where all new features like more efficient ext3
are released.

Even if 2.4 does everything you need/want, still, upgrade to 2.4.32
and go to .33 when it is released soon.



Yeah, I know all that.

No amount of fiddling with hdparm helped when running 2.4 so I think  
the problem lies elsewhere.
On 2.4 Memtest runs a complete cycle in ~2400 secs.  No errors other  
than the initial probes are reported.


Anyway, the problem goes away with a 2.6 kernel.  This is with no  
changes to BIOS or any of the package configurations.  This gives  
_me_ an acceptable solutionfor now.


... there are those nagging doubts.  Surely I'm not the only one  
who's seen such behavior.   From a community perspective it's  
troubling to see a basic, no-frills, stable installation on a name- 
brand machine produce such horrible results.  It's shaken my  
confidence that the problem will not reappear at the most inopportune  
time.


--rich







--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mip-o-suction (horrible performance)

2006-07-10 Thread Rich Johnson


On Jul 10, 2006, at 1:16 PM, Ron Johnson wrote:


[...snip...]
Anyway, the problem goes away with a 2.6 kernel.  This is with no
 changes to BIOS or any of the package configurations.  This
gives _me_ an acceptable solutionfor now.


What do you mean for now?


I mean, until I either understand what's going on, or make my peace  
with it.  It also raised a red-flag about performance under load.  I  
just don't like ignoring red flags.





... there are those nagging doubts.  Surely I'm not the only one
 who's seen such behavior.   From a community perspective it's
troubling to see a basic, no-frills, stable installation on a
name-brand machine produce such horrible results.


Maybe NCR changed at some point, but I do know that they were always
hot for *highly* customized systems.  Added value, it's called.


The mfgr is NEC, not NCR.



The fact that the 2.6 kernel fixes it strongly suggests to me that
the PG350 *is* such an oddball, where a work-around was only put
into 2.6.
...or its could be symptomatic of a race condition, which (under  
light loads) fails in 2.4 but succeeds in  2.6.  Under heavier loads,  
who knows? All-in-all I much prefer affirmative identification of  
problems.


And THAT's why I inquried about diagnostics in my first post.  I'd  
like to verify that the problem doesn't recur.





   It's shaken
my confidence that the problem will not reappear at the most
inopportune time.


Oh, puh-leeze.  Mobo, chipset and card makers all do some pretty
weird shit, and it's not easy for Linux to handle every combination
of custom chipsets.


I would hope it does at least as good a job as Windoze on the same  
machine.


Hmm..is there a utility to report the chipset/driver config, as  
resolved by the kernel?  Is there a way to get a report of the  
scheduler's activity?



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Mip-o-suction (horrible performance)

2006-07-08 Thread Rich Johnson

Folks--

I have just converted an old NEC PG350 (500MHz) w 256MB and 20G(WDC  
WD200BB) disk from WIn'98 to Debian Sarge and ran into a problem I've  
never before encountered with Debian:


Performance that is HORRIBLE beyond belief!

For example:
 -  ~16 minutes to boot (A 10 yr old 130Mhz PowerPC is faster) to  
GDM login screen.

 -   2 min. just for for ''calculating module dependencies''
 -  3 min. just for hotplug
 - ~10min. from user login to a settled Gnome desktop.

What gives?   I've never seen such bad performance.
What diagnostics/benchmarks should I be looking at?

Judging from the lackadaisical disk LED activity, I doubt it's the disk.

Thx,
--rich



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mip-o-suction (horrible performance)

2006-07-08 Thread Rich Johnson


On Jul 8, 2006, at 3:34 PM, Ron Johnson wrote:



What gives?   I've never seen such bad performance.
What diagnostics/benchmarks should I be looking at?

Judging from the lackadaisical disk LED activity, I doubt it's the  
disk.


Have you enabled bootlogd?


No.  It's installed, but disabled in /etc/default/bootlogd.

How should that matter?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]





Re: Mip-o-suction (horrible performance)

2006-07-08 Thread Rich Johnson


On Jul 8, 2006, at 6:22 PM, Andrew Sackville-West wrote:



it will give you detailed logs of the boot process so you can review
it and see what's happen instead of trying to read it as it zips (in
your case, crawls?) by.


Got it.  I can also cut and paste to show that I'm not dreaming.  For  
instance, note what happens 17:31 - 17:34 below:


Sat Jul  8 13:30:50 2006: bootlogd.
Sat Jul  8 13:30:50 2006: Setting parameters of disc: (none).
Sat Jul  8 13:30:50 2006: Activating swap.
Sat Jul  8 13:30:50 2006: Checking root file system...
Sat Jul  8 13:30:50 2006: fsck 1.37 (21-Mar-2005)
Sat Jul  8 13:30:50 2006: /: clean, 109091/663872 files,  
485986/1327362 blocks

Sat Jul  8 17:31:01 2006: System time was Sat Jul  8 21:31:01 UTC 2006.
Sat Jul  8 17:31:01 2006: Setting the System Clock using the Hardware  
Clock as reference...
Sat Jul  8 17:31:03 2006: System Clock set. System local time is now  
Sat Jul  8 17:31:03 EDT 2006.

Sat Jul  8 17:31:03 2006: Cleaning up ifupdown...done.
Sat Jul  8 17:31:04 2006: Calculating module dependencies... done.
Sat Jul  8 17:33:38 2006: Loading modules: ide-cd ide-detect ide-disk  
psmouse modprobe: Can't locate module psmouse

Sat Jul  8 17:33:54 2006:
Sat Jul  8 17:34:08 2006: Checking all file systems...
Sat Jul  8 17:34:09 2006: fsck 1.37 (21-Mar-2005)
Sat Jul  8 17:34:09 2006: /home: clean, 130/1700608 files,  
61702/3399747 blocks

Sat Jul  8 17:34:09 2006: Setting kernel variables ...
[...snip...]


BTW, I'm running 2.4.27-2-386 and hdparm reports:

/dev/hda:
multcount= 16 (on)
IO_support   =  0 (default 16-bit)
unmaskirq=  0 (off)
using_dma=  1 (on)
keepsettings =  0 (off)
readonly =  0 (off)
readahead=  8 (on)
geometry = 2434/255/63, sectors = 39102336, start = 0





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mip-o-suction (horrible performance)

2006-07-08 Thread Rich Johnson


On Jul 8, 2006, at 7:46 PM, Ron Johnson wrote:



BTW, I'm running 2.4.27-2-386


That's 2 years old.  Any particular reason you aren't running 2.6?

(No, it's unstable is *not* a valid reason.)



Tthis is a brand new installfirst walk, then run.  Alas, the  
system only crawls :-


The only philosophical basis is that 2.4 it is what the installer  
installs...and that dist-upgrade doesn't see fit to upgrade it.


The secondary reason is that the machine is destined for a rural area  
with 9.6k dial-up access--maybe 14k on a good day.  Those comm rates  
make ''stable'' a highly desireable feature.




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mip-o-suction (horrible performance)

2006-07-08 Thread Rich Johnson


On Jul 8, 2006, at 7:46 PM, Ron Johnson wrote:




  and hdparm reports:

/dev/hda:
multcount= 16 (on)
IO_support   =  0 (default 16-bit)
unmaskirq=  0 (off)
using_dma=  1 (on)
keepsettings =  0 (off)
readonly =  0 (off)
readahead=  8 (on)
geometry = 2434/255/63, sectors = 39102336, start = 0


That might be part of your trouble.

/dev/hda:
 multcount=  0 (off)
 IO_support   =  1 (32-bit)   
 unmaskirq=  1 (on)   
 using_dma=  1 (on)
 keepsettings =  0 (off)
 readonly =  0 (off)
 readahead= 256 (on)
 geometry = 30401/255/63, sectors = 488397168, start = 0



Hmmm...I'm in serious need of some education here.  (my main  
experience is with PowerPC)
 Are these settings part of the BIOS?  hdparm manipulations don't  
seem to be persistent across reboots.


I also notice that there's a big discrepancy in the readahead.  What  
are the tradeoffs of bumping this number? It just preloads the disk  
controller's cache, right?


--rich




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Update all the packages that depend on a particular package

2006-07-07 Thread Rich Johnson


On Jul 6, 2006, at 1:18 PM, Kamaraju Kusumanchi wrote:


On Thursday 06 July 2006 13:10, Alec Berryman wrote:

Kamaraju Kusumanchi on 2006-07-06 13:07:41 -0400:
Now whenever I am upgrading privoxy, I would like apt-get (or  
aptitude or

whatever other software) to check if there any newer versions of the
dependencies and update those as well. Is this possible? If so, How?


'apt-get upgrade' and 'apt-get dist-upgrade' do that automatically.


Nope. apt-get upgrade or dist-upgrade wants to upgrade a slew of other
packages besides what I want. I dont want to upgrade the entire  
system. I

just want to upgrade privoxy and its dependencies.




The ''upgraded'' dependency is not necessarily compatible with all of  
its dependents.  You might need to upgrade one or more of the _other_  
dependent packages as well.  This can be a real pain to sort out.   
(just think how many packages depend on libc6!)


--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-06-02 Thread Rich Johnson


On Jun 2, 2006, at 4:14 PM, Steve Lamb wrote:


Curt Howland wrote:
It hasn't been a republic since at least the time of a large  
number of

people being forced at gun point to become citizens against their
will, 1865.


Most would also cite when the states lost their representatives  
in the
Federal government.  17th Ammendment, 1913.  The idea prior to then  
was that

the Representatives were in Congress to represent the people while the
 were there to represent the States interests.  Now that the Senetors
are directly elected by the people they are nothing more than  
another form of
representation for the people.  It's kind of why states rights have  
been

trampled on ever since.


HEY! The States ratified it--37-1-10.  Only Utah (with 0.4% of  
population) objected.  States containing 99.6% of the people either  
affirmed or accepted the amendment.


AL, FL, MS, SC, GA, VA, MD, KY, DE and RI are the abstaining states.   
They make an interesting set.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-06-01 Thread Rich Johnson


On May 31, 2006, at 9:39 PM, Roberto C. Sanchez wrote:


Pascal Hakim wrote:


Australian governor-generals are chosen by the prime minister...
(including John Kerr), and can be dismissed by the prime minister.  
Yes,

we technically have a race condition at the top of our government.

(But finally! An off-topic debian-user politics thread on  
*Australia*)




That is hilarious.  I have never heard of a political situation
described as a race condition.  So, what is the political  
equivalent of

a stack smash or a buffer overflow?


The budget?  ...waitthat's underflow.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-06-01 Thread Rich Johnson


On May 31, 2006, at 9:39 PM, Roberto C. Sanchez wrote:


Pascal Hakim wrote:


Australian governor-generals are chosen by the prime minister...
(including John Kerr), and can be dismissed by the prime minister.  
Yes,

we technically have a race condition at the top of our government.

(But finally! An off-topic debian-user politics thread on  
*Australia*)




That is hilarious.  I have never heard of a political situation
described as a race condition.  So, what is the political  
equivalent of

a stack smash or a buffer overflow?


OH!, I missed the obvious---BALLOT STUFFING!

Hey, you asked :-)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-06-01 Thread Rich Johnson
On Jun 1, 2006, at 10:43 AM, Roberto C. Sanchez wrote:At least one already.  And she wasn't even elected for the two terms she was in office, so she can still serve two more terms. Edith Wilson is dead!

Re: Parallelizing fetchmail

2006-05-24 Thread Rich Johnson


On May 23, 2006, at 11:27 AM, Casey T. Deccio wrote:


The queue is a regular MTA mail queue for a system, not a user  
mailbox
or maildir.  So there are in fact two mail queues, one for  
MailScanner,

and one for the MTA:

1. The message is received by the incoming MTA and queued in the
incoming queue.
2. MailScanner retrieves the message from the incoming queue, scans  
it,

and sends it to the outgoing MTA queue.
3. The outgoing instance of the MTA retrieves the message from the
outgoing queue and delivers it accordingly.


That's what I thought.  However, there still seems to be a piece or  
two missing.


In short,  which component provides the queue management?  Which  
component performs the  tasks of fetchmail-input_queue and  
output_queue-procmail?


Normally this would be performed by an MTA.  But I read Daniele's  
original post as a desire to avoid using a heavyweight MTA such as  
exim or sendmail.   MailScanner appears to be an elegant solution,  
but raises some  questions:

 - Can procmail be configured to read and write MailScanner's queues?
 - Are  separate lightweight processes required? If so, where would  
one find them?  Perhaps a qmail component?
 - Just how MTA dependent is the queue format?  Has a standard  
format been established?   If so, where is it articulated?

 - Is the use of a full-featured MTA unavoidable?

And finally,
 - What's the set of packages that contain all the necessary  
components?  fetchmail + procmail + MailScanner + ???



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Parallelizing fetchmail

2006-05-23 Thread Rich Johnson
On May 22, 2006, at 12:30 PM, Casey T. Deccio wrote: Sorry if this sounds like "install ...", but I've found MailScanner to be helpful for accomplishing this.  From 'man MailScanner': [...snip...]It sounds pretty good to me.  It replaces all those fetchmail/spamc daemons in my strawman.But I'm confused about the _queue_ directory specified in the man pages.  What's its format?  Will a maildir suffice?

Re: Parallelizing fetchmail

2006-05-21 Thread Rich Johnson


On May 21, 2006, at 12:52 PM, Daniele Cortesi wrote:


Hello *,
 I recently uninstalled exim on my home pc, replacing it with esmtp
for outbound mail and fetchmail-procmail for inbound traffic.

Procmail checks every message for spam and viruses, introducing some
seconds of latency, mainly because of DNSRBL checks of spamc.

The disadvantage of this is that fetchmail launches only one procmail
for each message and waits for it termination. This leads to a very  
long

delay when downloading many messages.

I can parallely check more than one message with spamd (making it  
create

more childs) but I cannot find a configuration that will speed up with
more spamd-child. The bottleneck is always fetchmail that process  
every

message one by one.

Have you got any ideas about how to insert a queue in the chain?

I can replace procmail with maildrop or similar if necessary. Please
avoid solutions like re-install exim or install insert your
favourite mta here.


How much of a delay are you experiencing?
Are these messages all coming through one popbox?

Others may have better info, but I don't think you can run fetchmail  
in parallel--at least not more than one process per user.

From man fetchmail

  Only one daemon process is permitted per user; in daemon   
mode,  fetch-mail makes a per-user lockfile to guarantee this.


I do have two ideas though (N.B. may substitute IMAP for POP):
A:  Set up multiple virtual users fetchm_1,..., fetchm_n all  
fetching from the same popbox and run a daemon for each of them.  I'd  
be careful though--having multiple processes writing to the same mbox  
files is probably asking for trouble.


B:  Use intermediate popboxes as queues--essentially establishing a  
multi-stage dataflow:
 1.  fetchmail/procmail to distribute incoming messages to  
multiple local popboxes (mailq_1, ..., mailq_n)
 2.  n fetchmail/spamc daemons running on each popbox to filter  
spam (mailq_i - mailq_nospam_i )  These will run in parallel.
 3.  1 fetchmail/procmail daemon to collect and redistribute the  
messages.
 This approach will require a pop server on your local machine  
as well as virtual users for each of the mail_q daemons.


I kinda like (B) because:
 - The queues are explicit.
 - Distribution can be configured as either a dumb dealer, or a  
subject /priority sorter.

 - The spam filtering can be scaled, or off-loaded to another machine.
 - Distribution and collection processes are disjoint.  They _could_  
be performed by a single fetchmail daemon.


Of course these are just theoretical ruminationsdo you feel lucky?

--rich






--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mail Issues (pt 2 )

2006-05-12 Thread Rich Johnson


On May 12, 2006, at 11:03 AM, Richard wrote:


Thought I would re-explain myself

Regarding Mail,
What I wanted to do, if possible,
is to have the mail fetch from pop3 accounts (several)  
( thousands ) avg 2800 per day
and have spam filters applied and rules applied, and move into  
folder, as pure text messages,

with header intact.

[...snip...]

If I understand correctly:
A straightforward fetchmail - exim4/spamassassin configuration  
using  Maildir format should handle this without difficulty.  I  
handle ~1K messages per day with just such a setup.   I handle the  
sorting with .forward rules, though I suppose you could also use  
exim4 pipe/process filters or an external ''delivery agent'' for more  
sophisticated filtering. (I hope I have the terminology right)


I'd first setup and test exim4 and spamassassin, then configure  
fetchmail to feed exim4 from the popboxes.


What you're doing differently is that you're _keeping_ the messages  
(255K of them) whereas I purge any mailboxes with 10K messages.  If  
you choose to use Maildir, I'd advise that you configure your system  
to limit the number of messages maintained in a particular  
directory.  I think funny things can happen on ext2 filesystems when  
directory nodes contain 2^15 entries.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Mail Issues (pt 2 )

2006-05-12 Thread Rich Johnson
On May 12, 2006, at 12:53 PM, Ron Johnson wrote:What you're doing differently is that you're _keeping_ the messages   (255K of them) whereas I purge any mailboxes with 10K messages.  If   you choose to use Maildir, I'd advise that you configure your system   to limit the number of messages maintained in a particular   directory.  I think funny things can happen on ext2 filesystems when   directory nodes contain 2^15 entries.  Really?  I've got a directory with 700,000 files in it, and while first-access takes a minute to pull into cache, after that it  works fine.  $ dir /data/01 total 12148 drwxr-xr-x   6 root root       4096 Oct 16  2005 ./ drwxr-xr-x   4 root root       4096 Oct 16  2005 ../ drwxr-xr-x   7 root root       4096 Oct  4  2005 051003.2352/ drwxr-xr-x   2 root root      49152 Oct 15  2005 lost+found/ drwxrwxr-x   6 me   people     4096 Jun 14  2005 share/ drwxrwx--x 259 me   me     12345344 Apr 30 15:07 temp/ Hmmm, maybe my info's "old news", or maybe it just applies to # of sub-directories.  In any case it's still a caveat that I'd want to see definitively debunked before running the risk of problems on a deployed system.It's be great news if there is no practical limit to files/dir.  That 12MB temp/ does give me pause though. 

Re: OT: Politics [Was:Social Contract]

2006-05-08 Thread Rich Johnson


On May 6, 2006, at 5:11 PM, Roberto C. Sanchez wrote:


Paul, why do you persist?  Infrastructure != education.  Those are two
completely different things.  Without roads, emergency services could
not get to you.  Without traffic lights and other signage, the roads
(which are needed for things like emergency services) would be a  
public

menace.

[...snip...]
Ah, but education _is_ part of the intellectual and cultural  
infrastructure we all share.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-08 Thread Rich Johnson


On May 6, 2006, at 4:27 PM, Paul Johnson wrote:


On Saturday 06 May 2006 06:55, Andrei Popescu wrote:


Why so complicated? Just give people the option to *choose* between
public or private SS programs. The same for schooling. If I send my
children to a private school I wouldn't have to pay the tax and even
get back what I already payed since I started working. That would  
make

public schools compete against private schools.


Let's do the same for city streets, the courts, civic buildings,  
sewer pipes,
and traffic lights while we're at it.  God knows I rarely to never  
use any of

that crap...

LOL, ...The sewers have the literal purpose that your neighbors can  
avoid using your crap.





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-08 Thread Rich Johnson


On May 8, 2006, at 2:22 PM, Steve Lamb wrote:


Matthias Julius wrote:

To cite the U.S. Constitution
(from http://www.usconstitution.net/const.html):
,
| Section 8 - Powers of Congress
|
| The Congress shall have Power To lay and collect Taxes, Duties,
| Imposts and Excises, to pay the Debts and provide for the common
| Defence and general Welfare of the United States; but all Duties,
| Imposts and Excises shall be uniform throughout the United States;
`


Thanks for that cite, goes to show another area the Feds are  
messing up.
Uniform taxation... yeah, and what's this with the progressive tax  
scale?  Not

very uniform to me.

[...snip...]
You might want to read the 16th Amendment. (http:// 
www.usconstitution.net/const.html#Am16)..

,
| Amendment XVI
|
| The Congress shall have power to lay and collect taxes on incomes,  
from whatever source derived, without
| apportionment among the several States, and without regard to any  
census or enumeration.

`
...as well as the various court rulings and Congressional Research  
Service reports.  You might find the analysis posted at http:// 
www.thepriceofliberty.org/04/04/16/greenslade.htm interesting.


FWIW, ''uniform'' doesn't mean ''flat''.  It just means geographic  
uniformity for the rules of taxation--i.e. not favoring one state  
over another.  If you're so inclined,  you could try to argue _de  
facto_ non-uniformity--e.g. CT with a higher median income pays  
higher federal incomde taxes.  Good luck on that one, though!



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-04 Thread Rich Johnson


On May 4, 2006, at 11:31 AM, Matthias Julius wrote:


Isn't better to support a child to live with his/her parents in a
stable home environment instead of foster care?


Usually, but not always.  You might be dealing with an abusive  
''stable''  home environment.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-04 Thread Rich Johnson


On May 4, 2006, at 7:03 PM, Curt Howland wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thursday 04 May 2006 17:55, Rich Johnson was heard to say:

So move to VT and live closer to your dream.  You can even join the
ranks of those railing against the flatlanders as you're out
looking for dinner.  But beware, you'll always be a come here,
never a been here.


What? That makes no sense what so ever, unless you are trapped into
the survivalist cave-dweller image fed to you by Hollywood in the
early 1980's.


You're talking to one with deep VT roots here--though raised in NY  
hard by the VT border.   Folks do put food on the table using  
guns.The take on the land I hold there  runs ~4-5 bucks/sq mi/ 
yr.  Those ''nuisance'' laws come in handy for off-season pest  
removal.  Tasty too!


Only troopers carry handguns.

Alas, I'm in Boston most of the time now.  It's a different world.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-03 Thread Rich Johnson


On May 2, 2006, at 11:23 PM, Curt Howland wrote:


On Tuesday 02 May 2006 22:40, Paul Johnson [EMAIL PROTECTED] was heard
to say:

Portland, Oregon is a great argument against privatization of
critical infrastructure.  For the longest time, it was the poster
child of privatization, with Portland General Electric as the
local, private, power utility and residential power monopoly...


Excuse me, but how can privatization and monopoly be used to refer
to the same action? A legally mandated monopoly is
hardly privatization, it remains a legal arm of the government.



Well, they're pretty much orthogonal terms.  Monopoly describes the  
market structure whereas privatization describes a change in the  
ownership structure.  Changing ownership doesn't necessarily change  
the market structure.


The purchasing company has willingly signed a contract to provide a  
specific service to the City of Portland.  It would only be a legal  
arm of the gov't if the gov't has seats on the company's  governance  
board (e.g. BPA, TVA, Postal Service, and Port Authority of NYNJ)



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-02 Thread Rich Johnson


On May 2, 2006, at 1:01 AM, Matthew R. Dempsky wrote:


On Mon, May 01, 2006 at 04:14:08PM -0400, Rich Johnson wrote:

O.K.  But, your assertion was that Clinton used the military _more_
than the previous _five_ presidents put together.


Oh man, you caught him!  Having only the _same_ number of  
deployments as
the previous _four_ presidents *completely* changes the argument,  
right?


What a jerk for making such a bogus claim as that!


Let's just say that I think his assertion works about as well as  
Microstofelean arguments for Windoze security.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-02 Thread Rich Johnson


On May 2, 2006, at 2:35 AM, Mike McCarty wrote:


Several years ago (like 1988 or so) the US gov't published
per capita spending in the public schools by State, along
with graduation rates. Interestingly enough, there was a
significant correlation between per capita spending and
graduation rates. I did the regression analysis myself (my
graduate work is in Mathematical Probability and Statistics
at the University of Texas at Dallas). Unfortunately for the
spend more, get better results crowd, the correlation was
negative. OTOH, there is such a thing as practical significance
which is different from statistical significance. The correlation
was so slight as to be not practially different from zero,
though statistically significant.


The MA stats (by district) can be found at: http:// 
finance1.doe.mass.edu/statistics.  The page also provides teacher  
salaries and special ed. expenses.  I don't know where one would find  
similar stats for administrative, transportation, and facilities  
expenses.


A current story on HI (at http://starbulletin.com/2006/04/05/news/ 
story10.html) schools reports:
quoteSpending on teacher salaries was $5,139 per pupil, up from  
$4,833 the year before. But Hawaii's rank remained the same at 21st  
in the nation.  /quote


IOW, ~52% of schooling costs goes towards teacher's salaries.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-02 Thread Rich Johnson


Oh, so the objection is to _dissident_ poltical teaching.  Heaven  
forbid
that high school students should be challenged to think and  
decide for

themselves.
Uh, no, try again.  The problem in this case there was  
political speech at

all during a GEOGRAPHY lesson.


In this case it was a 10th or 11th grade class--(hopefully 11th, the  
student was reported to be 16 yrs old).  That would place the class  
squarely in the History/Geography/Political Geography portion of the  
curriculum.


Do any schools have _separate_ History  and Geography classes?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-02 Thread Rich Johnson


On May 2, 2006, at 7:22 AM, Matthias Julius wrote:


Roberto C. Sanchez [EMAIL PROTECTED] writes:

[...snip...]

If people are concerned about their ability to pay for education
individually, they can form co-ops.  Basically, you are subsidizing
other people's kids going to school.  Even if it doesn't bother  
you, it

bothers me.


While co-ops might help somewhat I don't think they are the solution.
What does it help when a bunch of poor guys form a co-op?  They still
would not have funds to send their kids to a private school.  Maybe
they could hire a teacher.  What do you think where the quality of
that education goes?


Do either of you two have any real-world  experience with co-ops? 
 



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-02 Thread Rich Johnson


On May 2, 2006, at 8:21 AM, Steve Lamb wrote:


Rich Johnson wrote:

Do any schools have _separate_ History  and Geography classes?


In my day, yes.


You could take History and Geography at the same time?

My history  politics curriculum was:

9th grade (14yr old students) - ''Geography'' - actually Africa,  
Asia, India as well as Native American.
10th grade (15yr old students) - World History -- really the  
history of Western Empires and their wars; from Athens - Berlin.   
Nothing after 1945 though.
11th grade (16 yr old students) - American History -- emphasis on  
NY's role, as well as political movements like Manifest Destiny,  
Abolition, and Universal Suffrage. Nothing after 1945 was covered in  
class.


 - Statewide proficiency exam given at the end of the year

12th grade (17 yr old students) - Government (formerly  
Civics)...finally some discussion of contempory events.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-02 Thread Rich Johnson


On May 2, 2006, at 11:36 AM, Roberto C. Sanchez wrote:


Rich Johnson wrote:


On May 2, 2006, at 7:22 AM, Matthias Julius wrote:


Roberto C. Sanchez [EMAIL PROTECTED] writes:

[...snip...]


If people are concerned about their ability to pay for education
individually, they can form co-ops.  Basically, you are subsidizing
other people's kids going to school.  Even if it doesn't bother   
you, it

bothers me.



While co-ops might help somewhat I don't think they are the  
solution.
What does it help when a bunch of poor guys form a co-op?  They  
still

would not have funds to send their kids to a private school.  Maybe
they could hire a teacher.  What do you think where the quality of
that education goes?



Do either of you two have any real-world  experience with co-ops?



Yes.  I have health insurance and insurance on my automobile and my
home.  Those are all essentially co-ops.


Really? Most insurance providers are for-profit ventures --for  
investor's profit, that is.


FWIW, I  belong to a small insurance co-op.  ~$300/yr per $100K  
insured wood-frame building.  That's ~ 20% cheaper than what I could  
find for a brick building in a region without co-operative insurance  
companies.  AND I get a refund of ~10% in years when losses are low.


What's the biggest patronage refund you've received from your  
insurance provider?


I'd love to find a good co-operative insurance company  for auto and  
health insurance as well, but it's just not available.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson


On May 1, 2006, at 12:18 AM, Roberto C. Sanchez wrote:


Cybe R. Wizard wrote:


The backlash of 9-11 was like Christmas to the conservative
military-industrial complex and their puppet congress-critters.   
All the
things they have wanted over the years like more defense spending,  
less

rights for citizens and the ability to run stormtrooper like raids on
citizens and eavesdrop on attorney/client converasations came true  
the

morning after.
I call it the American public running scared.

Cybe R. Wizard


You must admit, though, that defense was cut *way back* during the
Clinton administration.  Not only that, but he deployed the military
more in 8 years than something like the previous five or 10 presidents
put together.

WHAT?!

Do you mean more military actions, or more soldiers?

5 presidents goes back to Nixon and covers bombings of Cambodia,  
Loas, and Libya, as well as various proxy wars and at least one  
invasion.
10 presidents goes back to FDR, and involves a few _very_ big  
deployments.


What's the tally behind your assertion?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson


On Apr 30, 2006, at 3:26 PM, Steve Lamb wrote:


Rich Johnson wrote:

ROFLMAO!  You're calling for the elimination of History, Citizenship,
Government, and  even the ''Pledge of Allegiance''.


No, there's a difference between teaching those subjects and  
going off on

a political tirade during a Geography lesson:
http://www.michellemalkin.com/archives/004689.htm


Oh, so the objection is to _dissident_ poltical teaching.  Heaven  
forbid that high school students should be challenged to think and  
decide for themselves.


FWIW, this particular teacher was disciplined, or punished if you  
prefer.  I find it hard to believe that such stuff is a _prevalent_  
problem in US high schools--even though it does make for good  
incendiary copy.




There's also examples of teachers failing to teach that Bush II  
is the
43rd (or 42nd, depending on how you count Cleveland) president.   
IIRC there
was also a principle who came down hard on teachers who put Bush's  
picture up
on the wall as the 43rd President and called it political even  
though, in

spite of their personal beliefs, it is factual.


What're the original sources for these stories?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson


On Apr 30, 2006, at 8:37 PM, Curt Howland wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sunday 30 April 2006 15:26, Rich Johnson was heard to say:

On Apr 30, 2006, at 2:31 PM, Curt Howland wrote:

[...snip...]
Your premise is false. The middle class and poor were doing
very well indeed without coercive public schooling.
[...snip...]


That's a bit of an oxymoron.


Not in the terms of the discussion.


The poor were hardly doing well if they were poor.   _How_ well
were they doing (in your book, that is)?


The discussion is in terms of education. Literacy.

The literacy rate of 90%+ prior to compulsory schooling includes poor.
Just as the literacy rate of 50%- at this time includes poor.
[...snip...]


Where do these numbers come from?

AFAICT, the 50% number is ~rate of functional literacy of those  
_without_ a HS diploma or GED.
I have no idea what the source of your  90% number is.  I was under  
the impression that in 1840 the overall US literacy rate was about  
40%.  .


The CIA reports US literacy rate is 99% (//www.cia.gov/cia/ 
publications/factbook/geos/us.html), and if thats what my government  
says, it must be so, right?



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson


On May 1, 2006, at 10:14 AM, Roberto C. Sanchez wrote:


Quoting Rich Johnson [EMAIL PROTECTED]:



On May 1, 2006, at 12:18 AM, Roberto C. Sanchez wrote:


Cybe R. Wizard wrote:


The backlash of 9-11 was like Christmas to the conservative
military-industrial complex and their puppet congress-critters.   
All the
things they have wanted over the years like more defense  
spending, less
rights for citizens and the ability to run stormtrooper like  
raids on
citizens and eavesdrop on attorney/client converasations came  
true the

morning after.
I call it the American public running scared.

Cybe R. Wizard


You must admit, though, that defense was cut *way back* during the
Clinton administration.  Not only that, but he deployed the military
more in 8 years than something like the previous five or 10  
presidents

put together.

WHAT?!

Do you mean more military actions, or more soldiers?

5 presidents goes back to Nixon and covers bombings of Cambodia,  
Loas,

and Libya, as well as various proxy wars and at least one invasion.
10 presidents goes back to FDR, and involves a few _very_ big  
deployments.


What's the tally behind your assertion?


http://www.cdi.org/issues/USForces/deployments.html

1975 - 1993: 44 deployments (4 presidents; Ford to Bush)
1993 - 2001: 44 deployments (1 president; Clinton)

Now, on exact number of troops I am not certain.  Obviously Desert
Shield/Desert Storm were huge.  Not only that, but more military
operations under Clinton were complete debacles because the troops had
no sense of purpose.  For exmaple, Mogadishu (let's be opportunistic
about grabbing these warlords when we were only there to ensure
equitable distribution of food) and Bosnia (let's not permit the
fighers and bombers to fire unless fired upon, even if they see
civilians being exterminated).
O.K.  But, your assertion was that Clinton used the military _more_  
than the previous _five_ presidents put together.


Also, the count seems to tally the 8 (or so) humanitarian operations  
during the Clinton presidency as equivalent to hostile actions  
initiated under previous presidents.






Now, no president has been perfect.  But you must also consider that
Clinton's 44 deployments were with a military that was something like
1/2 the size of the pre-Gulf War military.  So, as a *percentage*,
Clinton used the military *way* more than any other president, except
maybe going back to maybe to WW2.

Another source: http://www.heritage.org/Research/MissileDefense/ 
BG1394es.cfm


They count 10 army operations from 60-91 and 26 from 92-98.  Their
criteria was outside of normal training and alliance commitments


Gotta love that.  Having 12 or so soldiers in East Timor for a month  
or so is equivalent to a 10 year, 543,000 (max) involvement in  
Vietnam.  Size does matter!  Note that it's also limited to limited  
to _Army_, this renders Marine, Navy and Air Force operations invisible.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson


On May 1, 2006, at 12:49 PM, Curt Howland wrote:



The CIA reports US literacy rate is 99% (//www.cia.gov/cia/
publications/factbook/geos/us.html), and if thats what my
government says, it must be so, right?


Your government has said a lot of things that have been demonstrated
false. I suggest you find another source to back them up.


You sir, are satire impaired!



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson

On May 1, 2006, at 4:59 PM, Steve Lamb wrote:


Steve Lamb wrote:

Rich Johnson wrote:
on when I was in high school 10 years ago.  Difference here was  
that a student

had the cajones to record him and expose him.


Man, wish it were 10 years ago.  More like 16.  *gasp*


I didn't write that.

I was in HS 30+ years ago.--just missed the draft; or more properly,  
it just missed me!.  I also knew folks who didn't come home from  
Vietnam alive.  Fortunately my cousin did.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-05-01 Thread Rich Johnson


On May 1, 2006, at 8:54 PM, Paul Johnson wrote:


On Monday 01 May 2006 14:29, Steve Lamb wrote:

Matthias Julius wrote:

So there are people without children who pay for public education.
This means the average parent who has kids in a public school is
paying less than what he would have to if he had to pay it all by
himself.


Yes, because the childless person just doesn't need that money  
at all.
Nope.  They exist solely to subsidize the lifestyle choices of  
those with

children.


You directly benefit (even without kids) by being surrounded by  
(relatively)
educated people.  Just like freeways:  While bicycles may be  
allowed on most
of them, odds are bicyclists are paying for miles of urban freeway  
that is
closed to bicycles.  Is it fair that people who get around by  
bicycle on
roads that, in many states they have a constitutional right to ride  
on, have

to pay for freeways that you have to earn the priveledge of a driver's
license to use?  Yes, because odds are they indirectly benefit by  
the freeway
being there by the availability of goods that would otherwise be  
stuck at the
rail depot, seaport, or entirely different city without urban  
freeways.


Er...they also VOTE!

I, for one, definitely prefer an educated electorate to an ignorant  
one.  It's kinda' important, even though all indications are that  
emotional  arguments usually win.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-04-30 Thread Rich Johnson


On Apr 29, 2006, at 11:21 PM, Christopher Nelson wrote:


I admit, I made a misjudging--for the *same amount* I'll pay in
education taxes over my life.  But there's another point.  I'm paying
those taxes my entire working life, which I sure hope is longer  
than 12

years that my children will go through public school!



It's 13yrs, including K.  Don't forget to multiply by the number of  
children and add in the transportation costs when you do your  
figuring.  You might also want to add the cost of insuring your  
children's education should your working life be suddenly terminated,  
whether by accident or employers choice.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: OT: Politics [Was:Social Contract]

2006-04-30 Thread Rich Johnson


On Apr 29, 2006, at 10:09 PM, Steve Lamb wrote:


Christopher Nelson wrote:

That's your right, but unless you can *gaurantee* that I can, for no
cost, send my children to a 100% secular school with decent teaching,
there is no way I can support abolishing public schools.  And if  
you can

gaurantee that, where does the line between public and private come?


Uh, why such a high bar?  It's like you're getting public  
schooling for
free.  They cost in taxes.  You, supposedly, pay taxes.  Some of  
the worst
public schools are also some of the most highly funded public  
schools.  IE,

the most costly.


I'm always suspicious of the some of... arguments.  They're by  
definition anecdotal and reek of sampling bias.


The Charter School movement is now 10+ years old.  How do these  
privatized schools compare?  What are their performance metrics?



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-19 Thread Rich Johnson


On Apr 18, 2006, at 5:27 PM, David E. Fox wrote:


On Tue, 18 Apr 2006 14:04:34 -0700
Andrew Sackville-West [EMAIL PROTECTED] wrote:



I think the consensus was that some MUA's show it and some don't but
that mostly it was caused by pgp signing. That is a pgp-signed  
message


I surmised that after reading the thread - but ISTR being able to see
the signature line fine on those that had GPG signed messages - maybe
on another list (therefore using different list management software) -
it would display the signature block and then any extra signature  
lines

just fine.

I also noticed the signature missing on messages that are in part  
or in

whole HTML. In those cases there's a Text pane and a Attachment(s)
pane, but no signature displays on either one.



And that is correct MUA behavior, even if it is not the intended  
_system_ behavior.


The unsubscribe signature/footer is either part of the message, or it  
is not.  It is _not_ part of the message when it is sent to the  
list.  The system _intent_ is that the footer be appended and  
distributed as part of the message.


If you look at the raw source of a problem message, regardless of  
MUA,  you'll find that you're looking at a multipart mime message with

 - 1.  a text part, and
 - 2.  one or more attachments (such as a GPG/PGP signature), and
 - 3.  an epilogue containing the unsubscribe message (and, I'll  
wager it contains nothing else).


RFC2046 (see http://www.ietf.org/rfc/rfc2046.txt) is pretty clear on  
what constitutes the message, and what does not--check out the  
example at the bottom of page 20.


Given that the epilogue is in none of the message parts, it is _not_  
part of the message.  Since it is not part of the message, conforming  
MUAs do not display it as part of the message--what other behavior  
would you expect?


IOW, the list _system_ distributes multipart mime messages that are  
ill-formed for the intent of including the unsubscribe footer.  Period.
Any fault lies with whatever component appends the footer to the  
message--it has fumbled the execution of its intent.  Period.


The MUA is irrelevant, though there are anecdotes of non-conforming  
MUAs which may mask the fault--if so, that is a double bug.

Fingering GPG/PGP as the cause demonstrates the result of sampling bias.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: unsubcribe footer missing [was ATTN: Barbara Oncay]

2006-04-19 Thread Rich Johnson


On Apr 19, 2006, at 8:16 AM, Stephen wrote:

On Tue, Apr 18, 2006 at 11:53:49PM -0500 or thereabouts, Matthew R.  
Dempsky wrote:

On Tue, Apr 18, 2006 at 09:13:04PM -0400, Stephen wrote:
Interesting. I've seen the unsubscribe footer on pgp signed  
messages,

reading with mutt, on this list -- this thread in fact.


Would you mind pointing one out?  I just took a look and the only
unsubscribe sigs I saw in signed messages were cases where the poster
failed to prune his quoting appropriately.


Sure;

Message-ID: [EMAIL PROTECTED]


(Also, your Mail-Followup-To included an address @gmailcom instead of
@gmail.com---is this intentional?)


No it wasn't, thank-you for pointing this out to me.



Huh?

It looks to me like the footer was quoted from a _single_ part--i.e.  
unsigned--message;  it is not appended to the signed message.


--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-19 Thread Rich Johnson


On Apr 19, 2006, at 2:51 PM, David E. Fox wrote:


[...snip...]
But *if* doing that makes the signature footer always visible, why  
not?

Obviously one has to way the disadvantage of added bloat (adding
signatures this way is going to make for slightly bigger mails) vs.
having a defense (there's the signature) against people who just
can't figure out how to unsubscribe and send invective the way Ms.
Oncay did. Still, I'm skeptical as to whether Ms. Oncay saw or didn't
see one.


Remember, Ms B.O. was complaining about list traffic _in general_.
Whether she saw the footer with the snippy comment or not is beside  
the point.  The footer was certainly there on _at least one_  of the  
other messages.


This bloat issue is interesting.  Since all messages would have  
identical footers, it's a shame that they all couldn't just reference  
the same one.  That would lessen bloat and bandwidth.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-18 Thread Rich Johnson

On Apr 16, 2006, at 12:18 PM, Ken Irving wrote:


On Sun, Apr 16, 2006 at 11:39:25AM -0400, Rich Johnson wrote:



On Sat, Apr 15, 2006 at 09:17:33AM -0800, Ken Irving wrote:

On Sat, Apr 15, 2006 at 12:28:25AM -0400, Gene Heskett wrote:


And, how much screwing around would it be to make the  
listserver actualy

wrap it with the proper mimetype declaration?

...

It's probably not so simple, though...


...but then, maybe it is.  It looks like all the necessary info is
present in the Content-Type header field.

If its value starts with multipart then extract its boundary marker
declaration and process accordingly.
Otherwise append the trailer as before
One could also defensively add a clause for Content-Type matches
text.


I posted a small procmail recipe to do this under debian bug 345283,
where this problem had been discussed recently.


Cool.  They only anticipated this discussion by about 4 months(!).
Oh, well.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-16 Thread Rich Johnson


On Apr 15, 2006, at 1:21 PM, Ken Irving wrote:


On Sat, Apr 15, 2006 at 09:17:33AM -0800, Ken Irving wrote:

On Fri, Apr 14, 2006 at 10:33:58PM -0800, Ken Irving wrote:

On Sat, Apr 15, 2006 at 12:28:25AM -0400, Gene Heskett wrote:


And, how much screwing around would it be to make the listserver  
actualy

wrap it with the proper mimetype declaration?


The SmartList (used for the debian lists) FAQ ends with:

8.13: Why are MIME and HTML emails a problem for SmartList?
...
Body footer:
Similar to the previous case, but here the text is  
injected after
the final MIME separator, and so again doesn't belong to  
any of

the MIME message parts.

A proper MIME-aware text insertion recipe would have to know
how to modify ALL of the text message segments without  
touching

any message segments which contain non-message text data,
e.g. attachments.

So it looks like it means fixing something, somewhere.


SmartList is built around procmail, and formail is used to mung  
headers
and such.  I think in general the desire is to keep the email body  
intact,
as received, so little, if any, body munging is done, other than  
simply

appending the debian unsub tagline.   I can imagine some procmail

 
   perl

that would identify a multipart message from the headers, grab the
boundary string, and then open the body, seek to the terminating  
boundary
delimiter, and insert another section to include the offending  
tagline.  Any
existing epilogue part included in the message would be  
retained.   I think
just the boundary lines would be needed (and associated blank  
lines), as

content type and encoding would default to plain text.

It's probably not so simple, though...


...but then, maybe it is.  It looks like all the necessary info is  
present in the Content-Type header field.


If its value starts with multipart then extract its boundary marker  
declaration and process accordingly.

Otherwise append the trailer as before
One could also defensively add a clause for Content-Type matches  
text. 
 



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-15 Thread Rich Johnson


On Apr 14, 2006, at 8:54 PM, Ken Irving wrote:


On Fri, Apr 14, 2006 at 07:33:58PM -0400, Rich Johnson wrote:


On Apr 14, 2006, at 6:22 PM, Ken Irving wrote:

[...snip...]


...for rfc2046 messages.  My understanding is that all MUAs should
show the trailer when handling unencapsulated rfc822 messages.


IANAL, nor particularly versed in RFCs, but it looks to me like RFC
2046 and neighbors (in several parts) lay out the recommendations for
MIME messages.  The debian unsubscribe sig does appear on non-MIME
messages (non-rfc2046?) on my MUA (mutt), but are correctly not shown
in MIME encoded ones since they fall into the epilogue section.  I
can't find anything relevant on unencapsulated rfc822; can you
provide any references?


Sorry for the confusion.  In retrospect, I probably should have  
referred to ''rfc822 messages with unencapsulated bodies''.


I was referring to rfc822's specification for encapsulating the  
message header data, but not its body.
Rfc2046 provides additional specification for encapsulating the  
message body.From a class perspective rfc2046 messages can be  
viewed as a subclass/specialization of rfc822 messages.


For example--this message.  It conforms to rfc822, but not rfc2046,  
because the body is not encapsulated.


N.B.  If I had added _any_ attachment, my MUA would've sent a rfc2046  
message instead.


P.S.  by now I sure hope that Barbara Oncay is no longer subscribed :-)






--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-14 Thread Rich Johnson


On Apr 14, 2006, at 3:26 PM, Steve Lamb wrote:


Doofus wrote:

Since one of the points of this thread seems to be to highlight the
incidences of people blithely advising do as it says at the  
bottom of
the post to other people who evidently can't see anything at the  
bottom
of the post, then to argue oh yes it is there as long as you know  
which

spells and incantations to cast in order to see it seems to me to be
unfairly bogging down  the novice with unhelpful pedantics.  
Especially
when the kind of person incapable of unsubscribing from a mailing  
list
is unlikely to even know what you're talking about when you tell  
them to

view the raw message.


Point is that there is a different condition between it being  
there and
the client failing to show it.  How?  Because if it wasn't there  
*NO* client
would show it.  Just because one, or a few, clients don't show it  
doesn't mean

all don't show it.  It's called being precise in reporting problems.

--
 Steve C. Lamb | I'm your priest, I'm your shrink,  
I'm your
   PGP Key: 8B6E99C5   | main connection to the switchboard  
of souls.
--- 
+-
 I'm using a different reader altogether and I sometimes see the  
unsubscribe annotation and sometimes I don't.
The difference correlates perfectly with whether the message is  
multipart mime(rfc1341), or not.--it does not appear whenever the  
sender mails a multi-part message.  For example you _WON'T_ see it  
with Steve's messages as illustrated above; you _WILL_ see it with  
this message (I hope).


Taking a brief look at the specs, but not enough to grok them:
I suspect that the problem is that the notice is tacked on _after_   
the attachments---essentially turning the notice into an epilog''  
i without a content-type/i rather than either:

(a) placing it within the first text part; or
(b) attaching it as a well-formed part.

Since it's an ill-formed part, it's properly ignored.

Bottom line: I suspect the problem lies with the mechanism used to  
append the message.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-14 Thread Rich Johnson


On Apr 14, 2006, at 6:22 PM, Ken Irving wrote:


On Fri, Apr 14, 2006 at 04:04:53PM -0400, Rich Johnson wrote:


[...snip...]
Taking a brief look at the specs, but not enough to grok them:
I suspect that the problem is that the notice is tacked on _after_
the attachments---essentially turning the notice into an epilog''
i without a content-type/i rather than either:
(a) placing it within the first text part; or
(b) attaching it as a well-formed part.

Since it's an ill-formed part, it's properly ignored.


Good analysis!  rfc2046 seems to supersede 1341, but says the
same thing wrt epilog(ue) parts, including:

   The boundary delimiter line following the last body part ...
   indicates that no further body parts will follow. ...

Presumably clients that do show the unsub sig are not RFC compliant,
and the ones that are failing to show it are compliant.


[...snip...]


...for rfc2046 messages.  My understanding is that all MUAs should  
show the trailer when handling unencapsulated rfc822 messages.





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: ATTN: Barbara Oncay

2006-04-14 Thread Rich Johnson


On Apr 14, 2006, at 5:55 PM, Andrew Sackville-West wrote:


On Fri, Apr 14, 2006 at 04:04:53PM -0400, Rich Johnson wrote:


On Apr 14, 2006, at 3:26 PM, Steve Lamb wrote:


Doofus wrote:

Since one of the points of this thread seems to be to highlight the
incidences of people blithely advising do as it says at the
bottom of
the post to other people who evidently can't see anything at the
bottom



Especially
when the kind of person incapable of unsubscribing from a mailing
list
is unlikely to even know what you're talking about when you tell
them to
view the raw message.


Taking a brief look at the specs, but not enough to grok them:
I suspect that the problem is that the notice is tacked on _after_
the attachments---essentially turning the notice into an epilog''
i without a content-type/i rather than either:
(a) placing it within the first text part; or
(b) attaching it as a well-formed part.

Since it's an ill-formed part, it's properly ignored.

Bottom line: I suspect the problem lies with the mechanism used to
append the message.




The above sums it up nicely, IMHO. To wit:

We get a lot of annoying mail from people who can't figure out how to
unsubscribe from the list. Although there is clear information
appended to every message describing how to unsubscribe, that
information is not reliably displayed in every message due to a
variety of factors. Perhaps a better method of providing the
unsubscribe instructions would be in order. I suggest a fully formed
text attachment entitled: Debian-user Subscription Instructions or
something to that effect. And as a matter of being a friendly list, we
should make better efforts to provide clear unsubscribe instructions
in recognition of the fact that some people just won't see them
otherwise.


...taking care that unencapsulated body text (old-school rfc822  
messages) is encapsulated...right?



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Definitely inappropriate emails (was Re: How to pick up on anything)

2006-04-03 Thread Rich Johnson


On Apr 1, 2006, at 3:37 PM, Ron Johnson wrote:


On Sat, 2006-04-01 at 12:20 -0800, Hex Star wrote:
Ok fine...but FYI there's conflicting posts on this list...some  
people

are saying off topic posts are welcome and fine on this list...yet
others say it's not OK and to stop...so confusing...:-(


The controlling factor here is 100KB.

...which takes about 1 min to download on a noisy POTS line; and yes  
they do still exist.  It's the only ''universal'' service.

1 minute bandwidth per spam is w-a-a-a-y too much.

Recommended netiquette would be to keep the humorous OT comments  
short; 1K.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




...the public key is not available

2006-03-31 Thread Rich Johnson

Hi folks--

When I run apt-get update, I get

 W: GPG error: http://ftp.us.debian.org testing Release: The  
following signatures couldn't be verified because the public key is  
not available: NO_PUBKEY 010908312D230C5F

W: You may want to run apt-get update to correct these problems

on one machine, but not the other.

The machine which fails leaves a *testing_Release.gpg file in /var/ 
lib/apt/lists.partial.
AFAICT, this file is identical to the *testing_Release.gpg file that  
the other machine successfully downloads.  Both machines have the  
same architecture and download identical *testing_Release files.


Does anyone have any insight as to what might be happening here?

Thnx,
--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Am I being attacked? Domain name and DNS server problem

2006-03-18 Thread Rich Johnson


On Mar 18, 2006, at 4:55 PM, Robert MannI wrote:


This is most likely the wrong list, but I can't find a linux security
list and this is a little bit urgent! Maybe someone off this list can
give me some pointers.

Probably.


My client has a domain. When I ping the domain, it resolves to the IP
address of the dedicated server he is hosting on.

But then, when I try to resolve the ip address back to a domain,  
using either

host xx.xx.xx.xx on mac os x, or
/usr/bin/resolveip xx.xx.xx.xx on linux,
the ip address is resolved to a domain name that is a little bit  
suspicious.

[...snip...]

ANY pointers would be helpful. We're a little bit desperate as support
of our hosting companies wasn't very helpful, so I thought I'd ask
here, since, IMO, this smells a little bit.

Check out www.dnsstuff.com for a web i/f to some dns diagnostics.
dig is also quite useful on both MacOS and linux.

My only other comment would be:  How _sure_ are you that it's a  
dedicated server?
Have you visited it?  What you're describing sure looks like a  
virtual host config.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Virtual Hosts/Domains

2006-03-08 Thread Rich Johnson
Folks up for a discussion of a ''canonical'' implementation of  
virtual hosts and/or domains?

(Assuming this is a proper forum, of course)

I've been a frequent visitor to these fora (and others) as I've  
wrestled with supporting virtual domains for exim, squirrelmail,  
apache2, mailman, and so on.From my experiences i have the  
impression that there exists a ''debian way''' (debian space?) of  
addressing the problem and regularizing some of the solutions.  Are  
folks up for hashing out some ideas?


A strawman:
Assume a package ''vdomain'' for establishing and managing the  
framework such as:
 - domain roots (e.g. VDR=/var/vdomains/domain.tld) for domain  
specific data
 - virtual domain configuration for a machine (/etc/vdomains)  
mapping services to virtual hosts.

 - domain specific configurations kept int $VDR/etc
 - init.d and cron.d hooks for virtual domain services (mailman,  
ftp, etc.)

 - hooks to bring virtual hosts and/or services up and/or down,

Assume related services/packages, such as
 - vdomain-chroot - establishing chroot jails for real-user  
domainmasters/webmasters/postmasters; according to the services of  
the domain.
 - vdomain-apache2 - utilities for hooking virtual hosts into both  
bind/DNS and /etc/apache, along with template host.conf files.
 - vdomain-exim - providing routers; transports; alias mgmt and/or  
aliases and/or mail storage for virtual users within the ''vdomain''  
structures

 - vdomain-imap; vdomain-squirrelmail   ditto

  maybe even:
 - vdomain-net - additional utilities for virtual domain with 1 IP  
address (www.vdom.tld != smtp.vdom.tld != ns.vdom.tld)

- vdomain-webmin?

FWIW,  a ready-to-wear ''virtual-webmail'' package could be assembled  
from the set {vdomain, vdomain-apache2, vdomain-exim4, and vdomain- 
squirrelmail}


Does such a framework sound promising or wacko?
Other comments/suggestions?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: SSH attack

2005-11-15 Thread Rich Johnson


On Oct 3, 2005, at 1:57 AM, Jared Hall wrote:


It looks like I am being rooted right now.  How do I toss this guy off
of my system.  [...snip...] I
can't shut down ssh because that's my only connection to the system.


[a bit late to the party, but...]

Yes you can.  You can repel an active SSH attack using:
 sudo /etc/init.d/ssh stop

to shut down sshd and prevent _new_ sessions.  Existing sessions,  
including the one you're using, will remain active as you examine the  
situation.  When you're  satisfied you can restart the sshd.


BUT BEWARE!  If you start killing sessions make sure you don't kill  
yourself.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: debian op ppc6500/300 -- translation

2005-07-13 Thread Rich Johnson


On Jul 9, 2005, at 2:49 PM, Hendrik Boom wrote:


Approximate translation below!
 -- hendrik

On Sat, Jul 09, 2005 at 06:32:45PM +0200, sam heijens wrote:


welke versie van debian werkt op een (apple) ppc 6500/300,
ik vond op een lijst dat dit een 'old world mac' is en dat deze  
normaal
debian zou moeten kunnen draaien. Wat is de maximale versie die ik  
kan

draaien hierop?



What version of Debian runs on an (Apple) ppc 6500/300,
I discovered on a list that this is an 'old-world mac' and that this
should be able to run Debian normally.  What is tha maximum version
that will run on it?



Why, the most recent one, of course :-).  I run sarge on an OldWorld  
8500 just fine.  It also runs just fine on my Performa 6116 (pre-PPC).


Installation questions should be posted to the debian-powerpc list.

--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: An advantage of Debian (from securitypipeline.com)

2004-11-15 Thread Rich Johnson
On Saturday, November 13, 2004, at 11:28 AM, Carl Fink wrote:
According to one firm, Linux is less secure than Windows, but the
criticism doesn't appear to apply to Debian.
http://www.securitypipeline.com/52601025

I saw this too.  I make no claim to being a 'competent system 
administrator' for my systems.   I currently have 900 or so packages 
installed and can't keep up with all of them.

Is there any sort of security-survey package to scan configs and 
versions to report vulnerabilties?

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Login Shell/Profile: Stop the Madness

2004-06-17 Thread Rich Johnson
On Thursday, June 17, 2004, at 01:14 AM, Michael B Allen wrote:
So all we have to do is detect when a user is logging in and exec their
default shell with the login option. Debian does that when you ssh in
or login on the console but not when you login with X.
Say WHAT!
I didn't catch it before, but isn't this a violation of abstraction?
The mechanism used for collecting credentials should have absolutely no 
effect on the login environment.  It shouldn't matter whether you login 
via the console, xdm, gdm, swipe a ID card, touch a fingerprint reader, 
or wave a magic wand.

A user, if s/he desires, should be able to login via xdm and be 
presented with a console.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



PCI-modem setup problems

2004-06-08 Thread Rich Johnson
Hi folks--
I'm trying to add a modem to a Dell Precision 410 running  debian 
testing on top of Linux 2.2.6

One think I can't figure out is its device--/dev/ttyS??.
lspci -vv reports:
:00:10.0 Serial controller: 5610 56K FaxModem 56K FaxModem Model 
5610 (rev 01) (prog-if 02 [16550])
Subsystem: 5610 56K FaxModem: Unknown device baba
Control: I/O+ Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- 
ParErr- Stepping- SERR+ FastB2B-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium 
TAbort- TAbort- MAbort- SERR- PERR-
Interrupt: pin A routed to IRQ 19
Region 0: I/O ports at dcd8
Capabilities: [dc] Power Management version 2
Flags: PMEClk- DSI- D1- D2+ AuxCurrent=0mA 
PME(D0+,D1-,D2+,D3hot+,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=2 PME-

How do I verify that I gen'd the kernel with the appropriate driver?  
Did I miss a module?  Should I worry about that Unknown device baba?

and setserial /dev/ttyS0 reports
/dev/ttyS0, UART: unknown, Port: 0x03f8, IRQ: 4
Did I miss a driver here?
Thanks,
--rich
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



phpgroupware doesn't install

2004-02-29 Thread Rich Johnson
I just tried installing phpgroupware for the first time.  apt-get/dpkg 
asked all the questions and apparently exited without setting things up.

No phpgroupware was added to the MySQL databases.
No references to /etc/phpgroupware/apache.conf were added to 
/etc/apache/httpd.conf

What gives?  Where did the process go off the rails?  I couldn't find 
anything in the mailing archives.

Thanks,
--rich
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Secure CVS (cvs ssh chroot jail)

2004-02-18 Thread Rich Johnson
I'd like to set up a secure CVS server hopefully for support for 
virtual users.  So far all I've been able to find are the CVS/SSH 
Howtos which require a fair bit of manual configuration.

Are there no .debs for a secure CVS?  Anyone working on one?

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ooh! debian jewelry

2003-12-15 Thread Rich Johnson
On Thursday, December 11, 2003, at 12:43 AM, ScruLoose wrote:

On Wed, Dec 10, 2003 at 05:37:01PM -0700, Monique Y. Herman wrote:
I just found this ... and want it ... bad.

Thought some of you might find it of interest:

http://www.linuxjewellery.com/catalogue/DBV/
That's pretty sweet.
Geek chic to a whole new level!
...for a chic geek!

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian on a mac?

2003-10-16 Thread Rich Johnson
On Wednesday, October 15, 2003, at 10:41 PM, Ron Johnson wrote:

Apple hasn't made a 68K Mac since, oh, 1995.

The thing now is the differences between G3, G4  G5, and that
early G3 Macs still used the NuBus, and thus won't run Linux.
A bit off topic, but...
Not quite.  The last NuBus Macs were the 8100 series (Cold Fusion) with 
a 601 processor.  These were followed by the 8500 series(Nitro) with a 
603 processor and PCI.  All G3, G4  G5 Macs use PCI.   If you're 
interested, you can find the gory details at http:www.everymac.com.

BTW, I'm happily running debian on two macs, an 8500 (PCI) and a 
6400(NuBus).  Nothing like running a server on a box with a $30 street 
value.  My major cost is the electricity :-)

--rich

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: fetchmail

2003-10-14 Thread Rich Johnson
On Tuesday, October 14, 2003, at 03:18 AM, Joyce, Matthew wrote:

I'm using Fetchmail and have a fetchmailrc in etc.
Fetchmail starts and syslog show my messages being gathered.
the problem is the messages do not end up in my home Maildir 
(courier-imap),
they end up in spool somewhere.

Any ideas ?

I've clearly missed something important.

 I have a few virtual domains and needed to specify the domain to the 
user statement--i.e.
   user 'rjohnson' there ...  is '[EMAIL PROTECTED]' 
here

Fetchmail just hands the messages to your local MTA--exim being the 
debian default.  Your mailer's log should tell you what's happening.  
Wherever the fetched mail goes, local mail should go to the same place.

--rich

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Help with virtual redirect for apache, apache-ssl, squirrelmail

2003-09-01 Thread Rich Johnson
On Sunday, August 31, 2003, at 05:17 PM, [EMAIL PROTECTED] 
wrote:

I apt-getted apache, apache-ssl, and squirrelmail, all working fine 
for my
domain.
I now need help setting up a virtual redirect so users going to
http://mail.ehrlichtronics.com will be redirected to
https://mail.ehrlichtronics.com/squirrelmail
What do I need to change in apache.conf of squirrelmail and/or
apache[-ssl] to allow this to work?
Thanks in advance.

I'm not sure of the details of your configuration,  But I've found 
using virtual hosts to be pretty straight forward.  I'm set up so that 
webmail and www are the same machine and have had no problems.  
Check out Section 3: Virtual Hosts in your apache config file.

installation specific details shown below include:
domain:  dogstar-interactive.com
ip-address: 64.205.252.227
mailhost: webmail
squirrel mail directory: /usr/share/squirrelmail
1.  load  mod_dir enabled for directory indices and libphp4 for 
squirrelmail
LoadModule dir_module /usr/lib/apache/1.3/mod_dir.so
LoadModule php4_module /usr/lib/apache/1.3/libphp4.so

2.  enable virtual hosting.
NameVirtualHost 64.205.252.227
3.  set up a virtual host for squirrelmail  (interpret index.php as 
directory)
VirtualHost 64.205.252.227
  ServerAdmin [EMAIL PROTECTED]
  DocumentRoot /usr/share/squirrelmail/
  ErrorLog /var/log/apache/webmail.dogstar-interactive.com-error.log
  CustomLog /var/log/apache/webmail.dogstar-interactive.com-access.log 
common
  ServerName webmail.dogstar-interactive.com
IfModule mod_dir.c
DirectoryIndex index.php
/IfModule
/VirtualHost

4.  restart apache.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



what's this log entry indicate?

2003-08-19 Thread Rich Johnson
Folks--

Recently I've been noticing apache log entries like the following:

218.94.83.20 - - [14/Aug/2003:22:47:01 -0400] GET 
http://www.intel.com/ HTTP/1.1 200 1357

What's going on here?  That's a pretty strange file path for my server. 
 It looks like an attempt to use my server as an HTTP relay.  Despite 
the 200 response I don't think it worked--my index page (/) happens 
to be 1357 bytes long.

Also, does anyone have poiners for setting up apache to return either 
403 or 404 for such malformed page paths.

Thanks,
--rich
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] SCO is going all out now

2003-07-22 Thread Rich Johnson
On Tuesday, July 22, 2003, at 12:32 AM, Brian McGroarty wrote:

SCO has made no claims against the 2.2 kernels.

If worst comes to worst and SCO finally show some incriminating code
in 2.4, stepping back to 2.2 until the relevant bits are purged from
2.4 is all anyone should need to do to cover their assets in countries
where this becomes an issue.
InformationWeek ( in  
http://www.informationweek.com/story/ 
showArticle.jhtml?articleID=12801004)
reports:
SCO Group claims that Unix has been used to accelerate the  
development of Linux
in two key ways--line-by-line copying of Unix System V source  
code into the Linux
kernel and copying derivative Unix code that enables  
multiprocessing capabilities.

I have no multiple processor machines.  Why on earth would I be pay a  
penny to license multiprocessing capabilities which I can't use?

I guess I'll be going back to 2.2 until this nonsense blows  
oversigh.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Need help with KDE/KDM

2003-06-23 Thread Rich Johnson
I can't log on through kdm_greet.   All I see is a momentary  loss of 
video signal then the login screen comes back.

Has anyone else seen this?  Where should I look for diagnostic info?

Some other, possibly relevant informaion is:

The system is a brand new, from scratch stable/woody installation.

syslog, kdm.log, and XFree86.0.log don't show any errors indicating the 
failure.

/var/log/auth.log shows:
   Jun 23 10:03:35 darkstar PAM_unix[5999]: (kdm) session opened for 
user rich by (uid=0)
   Jun 23 10:03:35 darkstar PAM_unix[5999]: (kdm) session closed for 
user rich

startx from the command line will yield an X session.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Need help with KDE/KDM

2003-06-23 Thread Rich Johnson
On Monday, June 23, 2003, at 02:24 PM, David Z Maze wrote:

Rich Johnson [EMAIL PROTECTED] writes:

I can't log on through kdm_greet.   All I see is a momentary  loss of
video signal then the login screen comes back.
That symptom sounds very much like you're successfully logging in,
whatever your X session is runs to completion, and you automatically
log out.  Do you have a .xsession file, and if so, does it wait for
some long-running process (typically a window manager or session
manager) to finish?  What kdm session are you using?
Thanks. This I can believe.  But then  why would startx behave 
differently?  Wouldn't it still yield the default single console window 
you get when you run startx without a .xinitrc?

I've tried all three session types (default, kde3, failsafe) and 
there's no change in behavior.
I've tried both modifying .xsession and .xinitrc files, and there's no 
change in behavior.
(.xsession and .xinit are identical)
I get the same behavior whether I login as root or a normal user.  In 
neither case does it appear to run .xsession

For reference, I'm using a stubby little .xinitrc/.xsession:
#! /bin/sh
echo `date`: start X session  /tmp/xtrace
xconsole -geometry 528x70+0+0  
kde3
echo `date`: end X session  /tmp/xtrace
I assume that .xsession is not running because /tmp/xtrace is left 
untouched.

--rich



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



using Drac (or equiv) with Courier-IMAP, Exim

2003-06-12 Thread Rich Johnson
Hi folks--

Does anyone have experience using drac with courier-imap and exim?

Or, is there some other recommended solution to allow relaying from 
imap clients.

I'm not thrilled with the prospect of patching and recompiling 
courier-imap.  I'd much rather rely on the prepackaged .debs.  (Debian 
has me completely spoiled).

Thanks,
--rich
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



How to isolate bad blocks/sectors?

2003-04-06 Thread Rich Johnson


The following is _reliably_ reported to the syslog every time  I run 
parted /dev/hdg print

Apr  6 11:44:36 creaky kernel: hdg: read_intr: status=0x59 { DriveReady 
SeekComplete DataRequest Error }
Apr  6 11:44:36 creaky kernel: hdg: read_intr: error=0x40 { 
UncorrectableError }, LBAsect=16778710, sector=16778710
Apr  6 11:44:36 creaky kernel: end_request: I/O error, dev 22:00 (hdg), 
sector 16778710

parted goes on to report:

Disk geometry for /dev/hdg: 0.000-42934.992 megabytes
Disk label type: mac
MinorStart   End Filesystem  Name  Flags
1  0.000  0.031  Apple
2  0.031  0.057  Macintosh
3  0.058  0.093  Macintosh
4  0.094  0.191  Macintosh
5  0.191  0.441  Macintosh
6  0.441  0.691  Patch Partition
7  0.691   4096.691  hfs MC_Kits
8   4096.691   8192.691  hfs Linux_Kits
9   8192.691  12288.691  hfs Delivery
10 12288.691  16384.691  hfs Development
11 16384.691  29384.691  ext2linux_dev_1
12 29384.691  42934.987  ext2linux_dev_2
Information: Don't forget to update /etc/fstab, if necessary.
My questions are:
- Where on the disk does this bad sector lie?  partition table proper? 
 file system tables?  data region?
- How can I isolate this bad sector?

Getting a disk error when reading the partition table makes me more than 
a little nervous.

FWIW: the following commands yield the syslog errors:
-
parted /dev/hdg9 print
Apr  6 12:13:42 creaky kernel: hdg: read_intr: status=0x59 { DriveReady 
SeekComplete DataRequest Error }
Apr  6 12:13:42 creaky kernel: hdg: read_intr: error=0x40 { 
UncorrectableError }, LBAsect=16778710, sector=78
Apr  6 12:13:42 creaky kernel: end_request: I/O error, dev 22:09 (hdg), 
sector 78
-
parted /dev/hdg11 print

Apr  6 12:16:55 creaky kernel: invalidate: busy buffer
-
parted /dev/hdg12 print
Apr  6 12:18:58 creaky kernel: invalidate: busy buffer
Apr  6 12:18:58 creaky last message repeated 21 times
Apr  6 12:18:58 creaky kernel: attempt to access beyond end of device
Apr  6 12:18:58 creaky kernel: 22:0c: rw=0, want=13875504, limit=13875503
-
Thanks,
--rich
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



decrufting system files (e.g. GNOME files)

2003-03-02 Thread Rich Johnson
Hi folks--
  I'm trying to clean out extraneous and old files from the system 
directories.  I have some scripts to short out which files are known to 
the current Debian configuration and which are not.  Many of the are 
not files came from earlier versions of currently installed packages. 
For exmample:
  /etc/CORBA/servers/gdict.gnorba
  /etc/CORBA/servers/stripchart-applet.gnorba

were delivered with gnome-utils 1.4.1.2-4 but are not part of my 
currently installed current gnome-utils 2.2.0.3-1.

As a rule, can old such old conffiles be removed without causing too 
much trouble?  I have ~450 of these cluttering /etc.

Thanks
--rich


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Disaster recovery

2003-02-28 Thread Rich Johnson
I kept digging; here's a script reporting  modified .conf files.

dpkg-query -W --showformat='${conffiles}\n' | gawk '{print $2 $1}' 
 | md5sum -c

It's only a partial solution, but it helps and resolves (2) below.

Rich Johnson wrote:
Yeah, this works, but it's not quite what I want.  I'd like the deltas 
between the default installation and my installation.  Although disaster 
recovery is my primary objective, the list of deltas can also be used 
for other things, including:
 - problem resolution - i.e. what's non-standard about a particular system.
 - review and justification of each delta.
 - security - compare two config deltas for unexpected changes.
 - clean up.

Since apt-get/dpkg
(a) knows about the .conf files
(b) knows the default .conf.
(c) upgrade detects deltas and queries what to do about the situation
I thought there might be some way to report the set of deltas.
The files in /etc fall into for categories
1.  default .conf files from installed .debs.
2.  non-default .conf files from installed .debs
3.  old .conf files from removed .debs; failed installations, etc.
4.  other files; typically user installed.
. . .

--rich

Alvin Oga wrote:

hi ya

On Thu, 27 Feb 2003, Rich Johnson wrote:


Hi folks--


...
 

Is there a way to list the _non-default_, or modified, .conf files 
required to transferd/or restore a configuration?
Files like:
- krb5.conf;
- httpd.conf
- timezone
- cron.d files
- bind files

I already maintain the list of packages (dpkg --get-selections) but 
that   only yields a default configuration.


i put all conf files in /etc  not in /var/*  etc.etc..

and backup of the server's conf ( /etc ) fits on a floppy

c ya
alvin





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Repartitioning/Reinstalling

2002-04-25 Thread Rich Johnson

 In any case, I am done with my rants. If you want to repartition without
 reinstalling post a message here. By the way, don't ever forget the
 backups, and experiment with doing a selective restore, if not a full
 one, before you embark on making major changes to your system.

 Good luck!

Well, there are a couple of things here.  Of course they're all over  the map.
1.   I didn't say I _wanted_ to re-install, although I did say I was _planning_
to reinstall.  And yes, I have gone a long way playing games with fdisk, fstab
and tar.
2.  This machine is dual-boot Old World Mac.  The time is approaching when I'm
going to punt the Mac partitions.  I'm not ready to bite that bullet just yet,
but I'd like to be prepared.  This machine has a lot of cruft on it.  Mac OS7
through 9.x; LinuxPPC at one time, and now Debian.  I have the feeling it would
be easier to re-install than to tease out the cruft.
3.  Disaster recovery is not always fix and restore backup.  Over the years
I've seen it result in:
replacing disks - which usually have a different size.
replaceing memory  - with the opportunity to add more and resize swap.
replacing the entire machine - which may involve an architecture change.
4.  fdisk and its ilk make me nervous.  I do not like using them without being
prepared to re-install everything.
5.  Replication - Some of my clients require a roll-out plan--or how to generate
a viable server from raw hardware.  It's probably another thread but, Debian has
a compelling story:
a.  almost rock solid - certainly more solid than any public M$ offerings.
b.  runs on any hardware - no need to manage/locate vendor specific drivers
and disks.
c.  standard set of boot disks for a particular architecture.
d.  add packages - but I'm a bit fuzzy on how to specify and automate thi
step.
e.  painless upgrade path.


--rich





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: SCSI Tape Device

2002-04-23 Thread Rich Johnson
curtis wrote:

 Has anyone had a similar problem.

 While I was under 2.2 kernel my scsi tape drive worked fine.  After
 upgrading to 2.4, however, I can't seem to get it to install or detect
  my scsi drive no matter what. Any ideas?

 Curtis

 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

What's your SCSI I/F  H/W?

It's a shot in the dark, but...
When I upgraded to 2.4.17 tar started hanging my system.  It turned out that
SCSI disconnects aren't supported for the external SCSI on the Mac 8500.  Things
worked fine when backing up the internal disks, but the system hung when backing
up the outboard disks.  A workaround was to reconfigure--I put all disks on the
internal SCSI and isolatied the tape drive on the external SCSI.

--rich


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Repartitioning/Reinstalling

2002-04-23 Thread Rich Johnson
Folks--

Its time to repartition my disks.  The plan is to:
1.  Put all the user data I want to keep onto tape
2.  Install debian from scratch (including repartition)
3.  Restore .deb package database
4.  Re-fetch current .debs
5.  Restore user data and configuration data.

My questions are:
Is this feasable?
How do I do Steps 34?
Which /var/lib or /var/cache files do I need to save for the new
installation?
Which commands do I need to read-up on to effect the re-installation of
the .debs?

Thanks,
--rich



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



libmng dependency tangle

2002-02-17 Thread Rich Johnson
I tried installing mozilla with disastrous results.  It refused to
install because of the libmng dependency shown below.   Now KDE refuses
to start up due to

Why won't apt-get/dpkg acknowlege the already installedpackage libmng1
(v 1.0.3-3)?

Why won't dpkg --purge libmng remove an uninstalled package?   I can
only purge items which are in use!!?

Is the rationale for this non-intuitive behavior published anywhere?
 And most importantly, how do I get out of this mess?

Thanks
--rich
--

 Script started on Sun Feb 17 15:51:54 2002
creaky:~# apt-get install mozilla
You might want to run `apt-get -f install' to correct these:
Sorry, but the following packages have unmet dependencies:
  ksysctrl: Depends: libmng (= 0.9.3-0) but it is not going to be
installed
  ktimemon: Depends: libmng (= 0.9.3-0) but it is not going to be
installed
  libqt2.2: Depends: libmng (= 0.9.3-0) but it is not going to be
installed
  mozilla: Depends: libelfg0 but it is not going to be installed
   Depends: libnspr4 (= M18-3) but it is not going to be
installed
E: Unmet dependencies. Try 'apt-get -f install' with no packages (or
specify a solution).

creaky:~# apt-get --f install

Correcting dependencies... Done
The following extra packages will be installed:
  libmng
The following NEW packages will be installed:
  libmng
0 packages upgraded, 1 newly installed, 0 to remove and 1  not upgraded.

16 packages not fully installed or removed.
Need to get 0B/118kB of archives. After unpacking 418kB will be used.
Do you want to continue? [Y/n] y


(Reading database ... 22636 files and directories currently installed.)
Unpacking libmng (from .../libmng_0.9.3-0.potato.3_powerpc.deb) ...
dpkg: error processing
/var/cache/apt/archives/libmng_0.9.3-0.potato.3_powerpc.deb (--unpack):
 trying to overwrite `/usr/lib/libmng.la', which is also in package
libmng1
Errors were encountered while processing:
 /var/cache/apt/archives/libmng_0.9.3-0.potato.3_powerpc.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
creaky:~#
Script done on Sun Feb 17 15:52:54 2002




Re: libmng dependency tangle

2002-02-17 Thread Rich Johnson
Martin Wuertele wrote:

 Hi Rich!

 On Sun, 17 Feb 2002, Rich Johnson wrote:

  (Reading database ... 22636 files and directories currently installed.)
  Unpacking libmng (from .../libmng_0.9.3-0.potato.3_powerpc.deb) ...
  dpkg: error processing
  /var/cache/apt/archives/libmng_0.9.3-0.potato.3_powerpc.deb (--unpack):
   trying to overwrite `/usr/lib/libmng.la', which is also in package
  libmng1
  Errors were encountered while processing:
   /var/cache/apt/archives/libmng_0.9.3-0.potato.3_powerpc.deb
  E: Sub-process /usr/bin/dpkg returned an error code (1)

 as you see there is a problem overwriting /usr/lib/libmng.la.

 if you're shure you don't break anything you might try

 dpkg -i --force-overwrite 
 /var/cache/apt/archives/libmng_0.9.3-0.potato.3_powerpc.deb

 or, if you want to be on the save side, get the sources for ksysctrl,
 ktimemon, libqt2.2 and compile them or get newer versions compiled agains
 libmng 1.0.3-1

Ah, I'm beginning to understand how this stuff works.  Since my target is to 
run on
woody and I needed sid for a working xserver/kde kit (for an old-world 
powermac), I
think I'll go down the recompilation route.

Thanks!




Re: Need help setting up Xserver

2002-02-13 Thread Rich Johnson
Elizabeth Barham wrote:

 Rich Johnson [EMAIL PROTECTED] writes:

  Hey folks--
 
  I need some help setting up an Xserver on an older Mac.
  The machine is a stock PowerMac 8500 with 172MB memory and has  a clean
  woody install.
 
  Does anyone have an XFree86Config for this such a machine?
  There's likely to be other stuff which needs tweaking as well.
 
  Thanks--
  --rich

 Hi Rich,

 I run a powermac clone, the Motorola StarMax 3000/160. I installed
 potato but the kernel is 2.4.17 with mac_hid. Here is some of
 my XF86Config:

snip
Thanks  E.!  It had enough hints to get me to the grey screen with a working
cursor.
The biggest hints were:
device driver fbdev
   mouse protocol IMPS/2
  setting color depth (16bpp for my VRAM)

But, I'm not out of the woods yet.  startx reports a number of errors:

Things seem to run fine until FBDev(0):  Backing store disabled.
Then
1)  there are 64
ioctl  FBIOPUTCMAP:  Function not implemented
   messages
2) FBDev(0): DPMS enabled
3)  the dreaded
  PEXExtensionInit: Couldn't open default PEX font file Roman_M
4)  several messages related to mouse startup
5)  final message is
Couldn't load XKB keymap, falling back to pre-XKB keymap

Anyone have any ideas on how to resolve these?

I should note that gdm had some installation problems.  I got a  dpkg error
but a subsequent dpkg --config -a appeared to complete successfully.

Thanks again,
--rich





Re: Need help setting up Xserver

2002-02-13 Thread Rich Johnson
Günter Knab wrote:

 On Tue, Feb 12, 2002 at 06:06:39PM -0500, Rich Johnson wrote:
  I need some help setting up an Xserver on an older Mac.
 *snipped**

 May be 'xf86config' works for you if your hardware is in the database.


There were no obvious choices for keyboard (ADB, macintosh-extended); mouse( 
ADB,

single button with 3-button emulation); or monitor (MicroElectronics P766DU).
That's 3 strikes, so

All is not lost, E. Barham sent me snippets of her config, so I've gotten to the
next step.






Need help setting up Xserver

2002-02-12 Thread Rich Johnson
Hey folks--

I need some help setting up an Xserver on an older Mac.
The machine is a stock PowerMac 8500 with 172MB memory and has  a clean
woody install.

Does anyone have an XFree86Config for this such a machine?
There's likely to be other stuff which needs tweaking as well.

Thanks--
--rich




Re: Where'd as go?

2002-02-09 Thread Rich Johnson
Colin Watson wrote:

 On Fri, Feb 08, 2002 at 01:34:15PM -0500, Rich Johnson wrote:
  I've got a new powerpc woody system up and running, but I cant compile
  because
  ...cannot exec 'as':  No such file or directory.
 
  Contents-powerpc tells me the assember should be part of
  devel/binutils.  I've installed binutils-2.11.92.0.12.3-6 but still no
  as.

 I've checked binutils_2.11.92.0.12.3-6_powerpc.deb, and it does indeed
 contain /usr/bin/as. This wouldn't be something screwing up $PATH,
 perhaps?

I must be missing something here:

-  $PATH looks fine
-  /usr/bin/as does not exist.
-  dpkg -S /usr/bin/asreports:  dpkg: /usr/bin/as not found
-  dpkg -L binutils   lists no executables, only doc, man and locale
entries--see below.
-  I've installed/uninstalled, purged, removed and manually deleted and
refetched the binutils...deb--all with the same result.

Any help would be appreciated.


dpkg -L binutils reports:
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/binutils
/usr/share/doc/binutils/gas
/usr/share/doc/binutils/gas/NEWS.gz
/usr/share/doc/binutils/gas/ChangeLog.gz
/usr/share/doc/binutils/gprof
/usr/share/doc/binutils/gprof/TODO
/usr/share/doc/binutils/gprof/ChangeLog.linux
/usr/share/doc/binutils/gprof/TEST
/usr/share/doc/binutils/gprof/bbconv.pl
/usr/share/doc/binutils/gprof/ChangeLog.gz
/usr/share/doc/binutils/ld
/usr/share/doc/binutils/ld/NEWS.gz
/usr/share/doc/binutils/ld/TODO
/usr/share/doc/binutils/ld/ChangeLog.linux
/usr/share/doc/binutils/ld/ChangeLog.gz
/usr/share/doc/binutils/bfd
/usr/share/doc/binutils/bfd/PORTING
/usr/share/doc/binutils/bfd/TODO
/usr/share/doc/binutils/bfd/ChangeLog.gz
/usr/share/doc/binutils/bfd/ChangeLog.linux.gz
/usr/share/doc/binutils/NEWS.gz
/usr/share/doc/binutils/ChangeLog.linux
/usr/share/doc/binutils/copyright
/usr/share/doc/binutils/ChangeLog.gz
/usr/share/doc/binutils/test-summary.gz
/usr/share/doc/binutils/changelog.Debian.gz
/usr/share/info
/usr/share/man
/usr/share/man/man1
/usr/share/man/man1/ar.1.gz
/usr/share/man/man1/dlltool.1.gz
/usr/share/man/man1/nlmconv.1.gz
/usr/share/man/man1/nm.1.gz
/usr/share/man/man1/objcopy.1.gz
/usr/share/man/man1/objdump.1.gz
/usr/share/man/man1/ranlib.1.gz
/usr/share/man/man1/readelf.1.gz
/usr/share/man/man1/size.1.gz
/usr/share/man/man1/strings.1.gz
/usr/share/man/man1/strip.1.gz
/usr/share/man/man1/windres.1.gz
/usr/share/man/man1/c++filt.1.gz
/usr/share/man/man1/as.1.gz
/usr/share/man/man1/ld.1.gz
/usr/share/man/man1/gasp.1.gz
/usr/share/man/man1/addr2line.1.gz
/usr/share/man/man1/gprof.1.gz
/usr/share/locale
/usr/share/locale/fr
/usr/share/locale/fr/LC_MESSAGES
/usr/share/locale/fr/LC_MESSAGES/bfd.mo
/usr/share/locale/fr/LC_MESSAGES/opcodes.mo
/usr/share/locale/fr/LC_MESSAGES/binutils.mo





Re: Where'd as go?

2002-02-09 Thread Rich Johnson
Colin Watson wrote:

 On Sat, Feb 09, 2002 at 12:43:30PM -0500, Rich Johnson wrote:
  Colin Watson wrote:
   I've checked binutils_2.11.92.0.12.3-6_powerpc.deb, and it does indeed
   contain /usr/bin/as. This wouldn't be something screwing up $PATH,
   perhaps?
 
  I must be missing something here:
 
  -  $PATH looks fine
  -  /usr/bin/as does not exist.

 That's really very odd. Could you have a look at the output of 'dpkg -c
 /var/cache/apt/archives/binutils_2.11.92.0.12.3-6_powerpc.deb' and see
 if it includes /usr/bin/as? If so, dpkg is screwing up - I'm not quite
 sure how yet though.


AHA!  dpkg -c reports:

tar: Skipping to next header
tar: Archive contains obsolete base-64 headers
...and so on.

Thanks for the pointer.  Apparently the .deb was corrupted somewhere along the
line.It's certainly confusing (any maybe a bug?) that dpkg -L doesn't report
problems with the .deb.

I downloaded another copy--one which passes the 'dpkg -c' test and installed
properly.

Thanks again,
--rich

let the coding begin.



Where'd as go?

2002-02-08 Thread Rich Johnson
I've got a new powerpc woody system up and running, but I cant compile
because
...cannot exec 'as':  No such file or directory.

Contents-powerpc tells me the assember should be part of
devel/binutils.  I've installed binutils-2.11.92.0.12.3-6 but still no
as.
So, is this a bug?  or did I fumble the installation?

Or is there an alternate assembler I should be using?

Thanks,
--rich



boostrapping woody on PowerMac

2002-01-30 Thread Rich Johnson
Hey folks--

Well, I've been trying to bootstrap woody on an Powermac 8500.
I've managed to make it through most of the connection / malformed
release / and corrupted package minefield.
The packages are all downloaded, validated and extracted, but...how do I
get around the
Failure trying to run : chroot /target dpkg error when installing the
base system?

I'm using boot-floppies 3.0.18.

--rich