Re: [gentoo-user] print to PDF within Firefox

2006-08-02 Thread Hans-Werner Hilse
Hi,

On Wed, 2 Aug 2006 09:54:42 -0300
Cláudio Henrique [EMAIL PROTECTED] wrote:

 I can't remember wich, but an old version of firefox allowed me to
 print to PDF. how do I do this in this new one (1.5)?

Firefox was probably compiled with XPrint support. The USE flag
xprint should do this. At least I think that XPrint configured a PDF
Printer by default. Another option would be to use CUPS and configure a
PDF printer there. It wouldn't matter in that case if Firefox has
Xprint support, but that would probably make switching printers easier,
too.

-hwh

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] memory leak with gtk+-2.8.20-r1

2006-08-02 Thread Hans-Werner Hilse
Hi,

On Wed, 02 Aug 2006 13:49:04 +0200 gwe [EMAIL PROTECTED] wrote:

 I'm sorry
 I post only the end of log file of valgrind (the entire file is very big
 ~22500 lines).
 This is the result of execute the source code :
 ==13767== LEAK SUMMARY:
 ==13767==definitely lost: 36 bytes in 1 blocks.
 ==13767==indirectly lost: 120 bytes in 10 blocks.
 ==13767==  possibly lost: 40,264 bytes in 47 blocks.
 ==13767==still reachable: 118,673 bytes in 1,963 blocks.
 ==13767== suppressed: 0 bytes in 0 blocks.

OK, but memory usage doesn't add up while the program is running,
right? I think it may be just the missing call to gtk_exit(EXIT_SUCCESS)
instead of return EXITSUCCESS. At least gtk_exit() is supposed to do
final cleanup work.

But I think this is rather OT for this list. If you don't get more
answers here, you may seek help at the GTK project...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] memory leak with gtk+-2.8.20-r1

2006-08-02 Thread Hans-Werner Hilse
Hi,

On Wed, 02 Aug 2006 18:14:02 +0200
gwe [EMAIL PROTECTED] wrote:

  Ah yes, I wasn't aware that there was a function for this.  You should 
  definitely use this in place of the delete statement because it will do 
  deeper cleaning.
 
 the GTK Api said gtk_exit is deprecated and should not be used.  
 In fact, i'm very astonished because it's not the first software with GTK
 I  wrote but it's the first time that I have this problem.  
 It's so recent

OK, I didn't counter-check it and was probably reading some outdated
documentation. I was just searching for some kind of cleanup function
and thought I found it. So it's probably in fact a gtk memory leak. Are
you by chance running non-x86? That might explain why it passed some
tests though buggy on that arch...

OK, I'm out of suggestions :-) Maybe a manual delete would help, but I
somehow doubt that (cleanup is probably done by gtk_main_quit() now?)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Lots of missing gentoo-user mail

2006-07-27 Thread Hans-Werner Hilse
Hi,

On Thu, 27 Jul 2006 07:40:03 +0200 Ralph Slooten [EMAIL PROTECTED]
wrote:

 What I am trying to work out if if it's just me having an issue with
 gmail (which I will confront the gmail team there about), or if the
 gentoo-user mailing server is skipping addresses or having issues
 sending. Tracing mail logs over a few days to check threads can be a
 painfully annoying job ;-)
 
 I am subscribed to other lists too which I seem to be having
 absolutely no problems with, although they are somewhat less active
 than the gentoo-user one.
 
 Are any of you (gmail or not) having the same problem? What is the
 correct way to go about locating and confronting this issue?

I'm seeing the same. The amount of missing mails doesn't qualify for
lots, but I'm missing some. I first noticed about 3 weeks ago, and I
thought I have seen a few notices by others on this list that they miss
this or that mail, too. Infrastructure problems, I think, but on
gentoo's end.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] OT: Bugzilla as support system w/ maillist integration

2006-07-27 Thread Hans-Werner Hilse
Hi,

On Thu, 27 Jul 2006 15:09:36 +0200 Enrico Weigelt [EMAIL PROTECTED]
wrote:

 What do you think about this idea ?

If you're really talking about gentoo-user, then I think your idea is
way, way, way too complex. Basically, I think, this ML just works.
Heck, it hasn't even a FAQ posted regularly but works anyway.

And how are you expecting people to subscribe and unsubscribe to single
threads? People are even too stupid to realize how to unsubscribe from
the ML as it is!

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] apache/php: chroot?

2006-07-25 Thread Hans-Werner Hilse
Hi,

On Mon, 24 Jul 2006 21:42:46 +0200 Alex [EMAIL PROTECTED] wrote:

  Now my question is: does apache/php support chrooting too?
  And are there some other services, which can be chrooted
  like bind?
 
 should work without any problems, like the most of the other
 standard internet services.
 try and have a look ;-)

This won't work. Apache doesn't have inbuilt chroot facilities, AFAIK.
Like most of the other standard internet services. You would have to
setup a chroot env (all dependant libraries and stuff) for that. But
there's nothing similar to a chroot automatic in apache. BTW, such a
thing would probably break all CGIs.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Portage Storage using SVN

2006-07-23 Thread Hans-Werner Hilse
Hi,

On Sun, 23 Jul 2006 02:42:43 -0600
Trenton Adams [EMAIL PROTECTED] wrote:

 I proposed this awhile back, and got shot down.  At the time, the
 arguments for using SVN for portage storage were pretty shallow, and
 someone was able to easily shoot them down.  I believe I have come up
 with better reasoning for using SVN.  Someone may still shoot them
 down, but hey, it's worth a try.

#1:
You're aware that there's a CVS for portage, aren't you? I'm still not
quite sure if you are suggesting using SVN for the portage mirrors and
if you are suggesting that users also have a full SVN history on the
clients, too?

 PROBLEM 1
 [...]
 PROBLEM 2
 [...]
 PROBLEM 3
 [...]

Well, are those really problems at all? I mean, isn't it easy to
overcome them? Is it worth dedicating time and work into that svn thing?

 POTENTIAL ISSUES
 Now, I'm not entirely sure of the performance implications of
 subversion for this purpose.  So, that would definitely have to either
 be tested, or someone would have to talk with the subversion folks to
 know if it would be a problem for thousands of users to access
 subversion in readonly mode.

Well, of course! There's definately a reason to use rsync.

 It would certainly be annoying for a
 developer to go svn commit, and have to wait for half an hour
 because everyone else is updating their local copies.  But, that could
 be solved by mirrors only getting updated once every day, at 12
 midnight.

Oh, yeah. Your midnight, my midnight? It would definately be annoying
to make a small glitch and have to wait 24hrs until the fix for that
gets promoted. The problem you mentioned that at some points there
are slightly errorneous ebuilds in portage or minor inconsistencies can
only be fixed by promoting updates fast.

The solution you propose costs a lot of CPU power, even more storage on
the mirrors and lacks some positive aspects that the current solution
has. Take a look at e.g. the major BSDs ports and package systems. They
certainly have similar problems.

OK, looking at the BSDs, I like the feature that there are branches
with the aim to build a package tree that is as consistent as possible.
That would be a plus. But that would imply a lot of work and a change
in ebuild maintainance. I don't see this coming soon for Gentoo.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Network is not starting

2006-07-23 Thread Hans-Werner Hilse
Hi,

On Sun, 23 Jul 2006 10:02:49 +0300
Adrian Vraciu [EMAIL PROTECTED] wrote:

 # ifconfig -a
 No usable address families found.
 socket: No such file or directory

You seem to have no IP protocol support compiled into your kernel. Or
is there a module reg. IP support that you need to modprobe first?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] MythTV vs. Gentoo VDR

2006-07-22 Thread Hans-Werner Hilse
Hi,

On Sat, 22 Jul 2006 15:19:31 +1200
Nick Rout [EMAIL PROTECTED] wrote:

 Yes but what has that to do with gentoo? Its not a gentoo project!
 I was confused by the OP referring to gentoo vdr

Me too. I know there's a Gentoo project for the VDR application. But
basically I think the OP was reffering to a software rather than a
project and wants a comparision.

I'm running VDR, but not the Gentoo ebuild but rather compiled directly
from source (all dependencies done by Gentoo, though).

 differences AFAIK:
 
 1. VDR is for DVB only 

Yes. But there are plugins to make it work with analog tv, too. See all
those plugins in media-plugins/vdr-*, I think at least the analogtv and
pvr* plugins are made for this.

 2. VDR is very Euro-centric - thats not a criticism, just worth knowing
 as european tv has many differences to, eg, USA tv in terms of
 technical format.

That's true. And I think there are still some minor glitches w/ regard
to PAL/NTSC (PAL is default).

 3. There is far more documentation around for MythTV, I struggle to
 find good docs for VDR.

http://www.linuxtv.org/vdrwiki/index.php/Main_Page
is probably the most comprehensive documentation in english language.


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] changing user id

2006-07-21 Thread Hans-Werner Hilse
Hi,

On Fri, 21 Jul 2006 12:02:49 +0200 Arnau Bria [EMAIL PROTECTED]
wrote:

 I'd like to change cyrus id from currently to 120.

Why's that? You will at least bork the existing files to a degree that
they can't be automatically uninstalled by emerge anymore.

 I tried usermod, but cyrus files didn't change its owner.

No, usermod  Co only modify the authentication db, i.e. /etc/passwd.

 could someone explain which is the way of changing user id and that
 user doesn't lose its files? 

A subsequent run of 

find / -user olduid -exec chown cyrus '{}' \;

(as root, of course) should suffice. I don't see a way to do this
atomically with the UID change.

Note that your backups will probably still carry the old UID, keep that
in mind for the case you need to restore them.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] remote login help

2006-07-20 Thread Hans-Werner Hilse
Hi,

On Thu, 20 Jul 2006 00:21:56 +0100 krgn [EMAIL PROTECTED] wrote:

 I am using ddclient to get to my router (which works) but can login
 to my machine behind the router (ssh for now, ftp and http later).

Is that router a machine running linux or is it one of those little
consumer appliances?

Did you configure it to pass incoming connections on SSH port to the
target computer in DMZ?

Do you have netfilter running on the target machine? Is it configured
to allow incoming SSH connections? Can you give us the configuration?
Did you monitor traffic on that machine, e.g. with tcpdump?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] eBook reader

2006-07-20 Thread Hans-Werner Hilse
Hi,

On Thu, 20 Jul 2006 01:25:09 -0500 Anthony E. Caudel
[EMAIL PROTECTED] wrote:

 I'm looking for a good eBook reader (software).  No packages in
 portage that I could find.  I found etr but no ebuild and its not
 great.

What are you missing (except the ebuild)? What functionality are you
searching for? Are you searching for text-based viewers only?
Basically: What's your usage scenario?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] eBook reader

2006-07-20 Thread Hans-Werner Hilse
Hi,

On Thu, 20 Jul 2006 08:20:10 -0500
Anthony E. Caudel [EMAIL PROTECTED] wrote:

 Basically looking for text readers, although PDF, HTML and others would
 be nice.  Need for it to be able to automatically save position, change
 fonts, fg/bg colors, etc.

OK, I don't know of such multi-purpose apps, not exactly meeting my
style :-) But anyway, you may want to have a short look at multivalent.
It's not in portage either, but it only consists of one .jar - it's a
java application. It's here: http://multivalent.sf.net

 If I can't find one, this may be the ideal time to learn how to do ebuilds.

That's an easy one. Although there's a handbook, I'd suggest starting
with looking at small, not too complex existing ebuilds. Create
yourself a portage overlay directory and configure it in /etc/make.conf
(see example file). Make a directory there, e.g. app-text/etr and
create the ebuild in there. When you've done the ebuild, you have to
create a digest using ebuild etr-1.2.3.ebuild digest. Then you can
install it using emerge etr.

But beware, wxWindows on Gentoo is not for the faint at heart due to
it's many versions...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] xorg-x11, $VIDEO_CARDS binary packages

2006-07-20 Thread Hans-Werner Hilse
Hi,

On Thu, 20 Jul 2006 15:40:39 -0300
Daniel da Veiga [EMAIL PROTECTED] wrote:

 Maybe I'm wrong, but binary packages are BINARY (-k), so, you can't
 change their USE, because they're already compiled, they'll use the
 flags that were used by the time the package was created. If you
 install it creating binaries (FEATURES=buildpkg emerge xorg-x1) now
 with another USE or emerge it and create the binaries after it
 (quickpkg), then you may get what you want when you try and reinstall
 it.
 
 Someone will correct me if I'm wrong, I'm using logic here, not
 exactly empiric knowledge ;)

But it's right :-). Even if xorg-x11 may be a meta package, it's a
package, after all. And thus it's set of USE flags (and those
additional configuration vars that are listed in verbose output of
emerge) was *fixed* when the binary was created. That makes perfectly
sense -- if you want it to get rebuild, don't use -k. And it's a meta
package, it does download nothing at all. So having a binary of it
doesn't make much sense if there's a very heterogenous number of
clients that make use of the binaries. For restoring the machine that
built the binaries, however, it makes perfectly sense (as long as
hardware doesn't change).

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Postfix + Auth with SASL

2006-07-19 Thread Hans-Werner Hilse
Hi,

On Wed, 19 Jul 2006 12:07:33 -0300
Leandro Melo de Sales [EMAIL PROTECTED] wrote:

 Hi! I'm trying to setup postfix with authentication. I have
 PAM/NSSwitch configured to use LDAP backend. I also installed
 cyrus-sasl, but when I test authentication I got some errors. What I'm
 doing wrong? Some relevant information:
 
 /etc/sasl2/smtpd.conf
 
 pwcheck_method:pam

Shouldn't that be /usr/lib/sasl/smtpd.conf by default? Public available
documentation suggest so. I must admit that I don't run cyrus sasl on
Gentoo, currently. And the documentation suggests PAM instead of
pam.

Note that authentication using PAM is only used for plain text
authentication (i.e. not for CRAM-MD5 or DIGEST-MD5). So I have these
additional lines in my config:

mech_list: plain login

but I don't really know if it does anything at all (I'm hesitating to
deactivate it and risk inavailability of service...)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: chkrootkit LKM trojan ?

2006-07-17 Thread Hans-Werner Hilse
Hi,

On Mon, 17 Jul 2006 19:36:30 +0100
Dave S [EMAIL PROTECTED] wrote:

 How accurate is chkproc? 
  If you run chkproc on a server that runs lots of short time processes it 
 could report some false positives. chkproc compares the ps output with 
 the /proc contents. If processes are created/killed during this operation 
 chkproc could point out these PIDs as suspicious.
 
 That fits in with the fact that chkrootkit  rkhunter now report clean ( 
 also 
 fits in with someone tinkering from the inside !)

The problem I see here is that you can't expect chkrootkit to find
something when scanning from a clean base (Live-CD) when the only hint
you had was an alert from chkproc. You probably would have gotten the
alert from chkrootkit in the first place. chkproc inspects the
currently running system (and the /proc for the currently running
kernel). I.e. if it has no signature for the rootkit itself, it can't
find it again from that clean kernel.

Do you have the possibility to monitor internet connections on an
intermediary gateway? I think monitoring it for a few days would give
you a better hint if there might be something active.

And there are other things to think about. Do you have a webserver
running? CGI scripts? PHP applications? Do you have other network
reachable services? Were you running a firewall?

The past kernel bugs had very early exploit scripts. It is really a
no-brainer to insert a rootkit if something lets you, say, write a
script to /tmp and call it by exploitable buffer overflows, badly
written CGI...

And remember that there's (nearly) no possibility for a positive proof
of the non-existence of a root kit.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Lirc problems

2006-07-13 Thread Hans-Werner Hilse
Hi,

On Wed, 12 Jul 2006 19:14:00 -0400 [EMAIL PROTECTED] wrote:

 I made a serial reciever I found at Lirc.org a very few components.
 I emerge lirc with LIRC_OPT=serial.  When it goes and compiles the
 lirc_serial module it fails.  Can any one help
 kernel Gentoo-2.6.12-R9
 lirc 0.8

What's the error message? Your kernel version is a bit outdated. I'd
start with a new one after all. LIRC 0.8 is newer than your kernel
version and thus may have a different interface.

 I also have a keyspan media remote it is seen by kernel is there a
 way to get it to work. Lirc doesn't support it.

What's the kernel message or which device list are you referring to by
claiming it being seen by the kernel?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: d

2006-07-12 Thread Hans-Werner Hilse
Hi,

On Wed, 12 Jul 2006 03:07:44 -0500 Roy Wright [EMAIL PROTECTED] wrote:

 Beagle is a mono application.  Mono is the open source implementation
 of C# which is a derivative of java aimed specifically at windoze by M
 $.

wrong. C# is a dialect one can use to create .NET programs. .NET is a
bit similar to the Java concept. But there are numerous other languages
one can use to create .NET assemblies.

Mono is an attempt to create a .NET environment for the FOSS world.

http://en.wikipedia.org/wiki/Mono_development_platform


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Things that can be improved

2006-07-11 Thread Hans-Werner Hilse
Hi,

On Tue, 11 Jul 2006 21:07:42 +0200
Gerhard Hoogterp [EMAIL PROTECTED] wrote:

 Show me what is added or removed. And since it can only do that by comparing 
 the new file to a clean, untouched, original file I innocently suggested to 
 have such a file, make changes there and leave it up to the admin to check if 
 settings are added or removed and deal with these changes in the active 
 config file.. And in that case don't bother showing the diff.. just tell me 
 which files have changed and *offer* to show the changes. 
 But don't touch my active configes.. not automatically, not ever..

Hm, OK, *now* I understand your point. You want to track your own, hand
made changes that don't have anything to do with new versions of
default config files except from that you want to show those changes
when making your decisions, correct? So basically, you want a
three-pane (even better, though I can't image it visually: a
tri-angular) view: Old default config, your modified version and new
default config, i.e. kind of a diff3 approach. I agree, that would be
interesting. Maybe this could easily be archieved with unionfs, having
changed files in an overlayed file system. Another option would be to
use a full fledged concurrent version system in /etc. Probably RCS
might even be sufficient.

In fact, if there are still binary packages for the old version of the
package that brought in the new config file version, it would even be
possible to extract the old default config and use that.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] What does perl USE flag do?

2006-07-10 Thread Hans-Werner Hilse
Hi,

On Mon, 10 Jul 2006 16:38:39 +0200 Alexander Skwar
[EMAIL PROTECTED] wrote:

 The perl USE flag is new. What does it do?

I just replied on the german ML to this question, but since it was
re-asked here:

The perl USE flag pulls in dev-lang/perl as a dependency. It is now a
default USE flag on most profiles.

I guess it's due to other flavours than Gentoo/Linux may have already a
working perl in their base system (e.g. the BSDs, Darwin, whatever) and
are assumed that there shouldn't be another one pulled in.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] tun/tap - ifconfig tun0 - device not found

2006-07-08 Thread Hans-Werner Hilse
Hi,

On Fri, 7 Jul 2006 19:04:41 -0300
Claudinei Matos [EMAIL PROTECTED] wrote:

 I'm trying to use tun/tap to assign some ip to my server (since I'll need it
 to my LVS solution) and I think it's a trivial task to put tun to work, but
 I'm trying in 3 different machines (with 2  different kernels) and in both
 they when I try to ifconfig tun0 I get the follow message:
 tun0: error fetching interface information: Device not found
 
 Well, I'd try to look if is something wrong with my kernel configuration but
 is everything ok since it just need tun/tap support to be compiled (I did
 tried both module and built-in).
 
 /dev/net/tun is a valid character device with 10, 200 (major/minor)

...and, is at first all you get by enabling TUN support in the kernel.
See /usr/src/linux/Documentation/networking/tuntap.txt for more
information about the ioctl() you have to issue in order to register a
tun network device (TUNSETIFF). The docs have a code example, too.

Oh, and I think OpenVPN has inbuilt functionality to create or remove
tun network devices (independent from OpenVPNs other functionality).

I've not completely understood what your usage scenario was, but maybe
a dummy network device is enough?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] OT: A/V muxing application ?

2006-07-08 Thread Hans-Werner Hilse
Hi,

On Sat, 8 Jul 2006 10:48:28 +0100
Neil Bothwick [EMAIL PROTECTED] wrote:

 On Sat, 08 Jul 2006 08:47:53 +0200 (CEST), Meino Christian Cramer wrote:
 
   I would like to mux them again...which application can do
   that job for me (formats: *.m2c/*.ac3 ) ???
 
 mplex should do this, it's part of mjpegtools.

...and the tcmplex-panteltje fork, that's what I'm using. (IIRC it
supports more audio streams)

 Do you know of a decent graphical program for editing DVB files. All I
 really need is to be able to cut out commercials etc. A command line
 program would do, but graphical would be easier.

That would be the ProjectX mentioned by Meino Christian. Works well for
me. lve (Linux Video Editor) can do this, too, but I found the
interface quite non-intuitive and dropped it after all in favor of
ProjectX.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] mencoder: error encoding, following howto

2006-06-21 Thread Hans-Werner Hilse
Hi,

On Wed, 21 Jun 2006 10:01:51 -0400 fire-eyes [EMAIL PROTECTED]
wrote:

 I opt to go for the supposedly higher quality x264, so I do two
 passes:
 
 1:
 
 mencoder -v ../vob/title1.vob -alang en -vf 
 crop=720:352:0:62,scale=752:320 -ovc x264 -x264encopts 
 subq=4:bframes=4:b_pyramid:weight_b:pass=1:psnr:bitrate=4452:threads=2:turbo=1
 -oac copy -ofps 24000/1001 -vobsubout subtitles -vobsuboutindex 0
 -slang en -o pass1.avi

Hm, threading, eh? Ever tried disabling it?

 2 (which whines about not finding the log file, so I have to rename 
 divx2pass.log.temp to divx2pass.log manually -- donchya love having
 to figure things out):

The question is rather why mencoder doesn't name it like this. The
mencoder man page clearly tells that it should. It supposedly wasn't
existing at that point, right?

 mencoder -v ../vob/title1.vob -alang en -vf 
 crop=720:352:0:62,spp,scale,hqdn3d=2:1:2 -ovc x264 -x264encopts 
 subq=5:4x4mv:8x8dct:frameref=3:me=2:bframes=4:b_pyramid:pass=2:psnr:bitrate=4450:threads=3
 -oac faac -faacopts object=0:tns:quality=100 -ofps 24000/1001 -o
 pass2.avi

Oh, 3 threads now. Again: Did you try using only one thread? Are all
those additional libraries you might have compiled into mplayer
thread-safe? BTW: Is there a reason why in pass one you're using a
cropped, scaled version of the movie and in pass two a _not_ scaled
version? This will probably result in different blocks and will
probably have (minor) bad influence on b/w calculation...

 However there is a problem with pass 2. I have tried this on two
 seperate systems, and the exact same thing happens:
 [...]
 Segmentation fault

Segfaults are not that uncommon if you have problems with interfering
threads. If you have a little time, you may also want to do an emerge
-e mplayer to sort out problems that are due to compiler change and
similar. BTW: Are you overriding the mplayer ebuild's own CFLAG
settings?

 Ah, so this is working _real_ well... Any ideas out there? Because I
 can't get past this point.

Well, hard to imagine what you've already tried, but try the things
mentioned above.


HTH,

-hwh

PS:
 (Insert my typical whine about video on linux being a pain here)
(Insert my typical whine about whining about video on linux here :-)
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] initramfs, network diskless boot, init process, problems with switchroot (pivot_root)

2006-06-21 Thread Hans-Werner Hilse
Hi,

On Wed, 21 Jun 2006 13:50:12 -0700
Richard Fish [EMAIL PROTECTED] wrote:

 pivot_root is specifically *not* allowed from an initramfs
 environment.  What you want to do is simply mount the new root
 filesystem, chroot into it, and execute init.  Something like:
 
 cd /new_root ; exec ./bin/chroot . ./sbin/init $@ dev/console
 dev/console 21
 
 If you are *extremely* tricky, and use a symlinked /lib directory, you
 can actually delete everything from the initramfs before doing the
 chroot/init calls.  Let me know if you need some more details on this.

Hm, I'm pretty sure that it is well possible to pivot_root from an
initramfs. Isn't that the whole point of pivot_root? But you may be
right that it is not possible for NFS mounts, I never tried that before.

In fact, the approach you took is weak. /sbin/init wouldn't run as PID
1 in this case which is bad for the situation that the calling script
(which _has_ PID 1) dies. The kernel would recognize this and reboot
(and/or panic, not sure). To avoid this, one has to exec the init from
the script.

So basically it boils down to this /init in the initramfs:

#!/bin/sh
PATH=/bin:/sbin
modprobe supermightyrootfsprovidingmodule  \
  mount -t blahfs /dev/whereitis /mnt/stagetwo  \
  cd /mnt/stagetwo  \
  pivot_root . /mnt/initramfs || reboot -f
exec /sbin/init

Note that I assume /mnt/stagetwo exists in initramfs (as well as
modprobe, mount, pivot_root and reboot) and /mnt/initramfs exists in
the to-be-mounted fs. Note that the last point may prevent
pivot_root'ing in a scenario where an NFS root fs is desired (because
I'm not sure if it can have mounts in it, but that would be needed for
proc, sys and dev, too, so it _may_ work here, too). The call
to /sbin/init happens in the new fs because pivot_root manipulates the
namespace of the calling process. Exec'ing is important so
that /sbin/init gets PID 1 and we don't have a process which depends on
the initramfs anymore, so we can unmount it at a later point.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] initramfs, network diskless boot, init process, problems with switchroot (pivot_root)

2006-06-21 Thread Hans-Werner Hilse
Hi,

On Wed, 21 Jun 2006 15:51:51 -0700
Richard Fish [EMAIL PROTECTED] wrote:

 My final comments on that bug are based on the attached email that I
 received from Andrew Morton that made it clear that Al Viro was
 opposed to pivot_root being used from an initramfs.  (BTW, viro's
 comments are not very polite, but you have to expect such directness
 from kernel hackers!)
 
 Note, be sure we are talking about an initramfs here, not an initrd.
 From an initrd it is still possible and supported to use pivot_root.

OK, I have to apologize. I totally missed that you were exec'ing
chroot. OK, I definately stand currected. But I was pretty sure I once
did this from initramfs. But that was admittedly back in the 2.6.10
days, I think. Of course in this case /sbin/init also gets PID 1.

-hwh
(happy to not have been the one complaining to the kernel devs :-) and
also forgetting to send attachments. I need a plugin that saves me from
doing this, e.g. searching for the word attachment and complaining if
there isn't one...)
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessing mailserver with ssh

2006-06-18 Thread Hans-Werner Hilse
Hi,

On Sun, 18 Jun 2006 09:20:53 + Mick [EMAIL PROTECTED] wrote:

 On 17/06/06, Hans-Werner Hilse [EMAIL PROTECTED] wrote:
  On Sat, 17 Jun 2006 23:09:57 +0200 Jarry [EMAIL PROTECTED] wrote:
   But what if mail-server uses secure connection (SSL) and secure
   authentication? Could I use ssh-client in such a case? Telnet
   would not help...
 
  The OpenSSL executable has this facility built-in. See man
  openssl-s_client (it has a basic server, too).
 
 Hmm . . .
 =
 $ openssl s_client -host pop.gmai.com -port 110  CONNECTED(0003)
 16228:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
 protocol:s23_clnt.c:601:
 =
 
 I guess it may only be good for checking the verification/exchange of SSL 
 certs?

Nope. It acts like a telnet client after establishing an SSL connection:
---snip
[EMAIL PROTECTED] ~ $ openssl s_client -connect pop.gmail.com:pop3s
CONNECTED(0003)
[lots of info snipped]
+OK Gpop ready for requests from 123.45.67.89 n23pf2387435nfc
---snip

For your test case: POP3 is usually on port 110, POP3S is usually on
port 995. If the SSL connection isn't set up on connection level at
start, but on an application configured stage afterwards, however,
s_client wouldn't work. An example would be STARTTLS on IMAP (not
IMAPS) and SMTP.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessing mailserver with ssh

2006-06-17 Thread Hans-Werner Hilse
Hi,

On Sat, 17 Jun 2006 23:09:57 +0200
Jarry [EMAIL PROTECTED] wrote:

 On 17/06/06, Raymond Lewis Rebbeck [EMAIL PROTECTED] wrote:
 
  You cannot use an ssh client in this manner.
 
 But what if mail-server uses secure connection (SSL) and secure
 authentication? Could I use ssh-client in such a case? Telnet
 would not help...

The OpenSSL executable has this facility built-in. See man
openssl-s_client (it has a basic server, too).

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: no suEXEC logging on errors

2006-06-08 Thread Hans-Werner Hilse
Hi,

On Thu, 08 Jun 2006 03:37:01 -0500 [EMAIL PROTECTED] wrote:
 Justin R Findlay [EMAIL PROTECTED] writes:
  On Thu, Jun 08, 2006 at 01:51:09AM -0500, [EMAIL PROTECTED] wrote:
  
  A few people have mentioned not having used Suexec making me
  wonder if there is some other way to allow myuser to run cgi?
 
  I usually run apache as apache:web with the user creating the web
  stuff in the web group.
 
 I'm not sure of your meaning here.  So that gets around needing suexec
 to fire cgi programs under /home/myuser/public_html?

For that, there's not even need to put the user in the web group. Just
make the files the web server should present world readable (CGI: and
world executable). Suexec runs the scripts with a user account. That
approach is needed in order to keep (multiple) users on the machine
from peeking and poking at each others scripts and data storages. If
there's just one user on that machine or security from each other is
not an issue, suexec is not needed.

What you're experiencing seems to be just a missing ScriptAlias. RTFM
about calling CGIs...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] gcc-4.1.1

2006-06-08 Thread Hans-Werner Hilse
Hi,

On Thu, 8 Jun 2006 05:34:49 -0700 Bob Young [EMAIL PROTECTED]
wrote:

 No, sorry that's just wrong. gcc is slotted, if the above were true
 there would be no need for gcc-config in order to select a default
 compiler.

Did you follow the documentation pointer given in the mail you are
replying to before making such statements? In fact, you're wrong here.

 When a new compiler is emerged, it does *not* automatically
 become the default system compiler, it must be selected, and that can
 only happen after it has successfully been emerged. The first time a
 new gcc compiler is emerged, it is indeed built with the previous
 version of the compiler that is currently istalled as the system
 default.

You haven't understood a word from the posting you're replying to.

 It does have to be emerged twice in order for it to be built with
 itself, anybody who thinks otherwise doesn't understand the basic
 principles of compiling and linking.

Try to understand what you are replying to. GCC's internal build logic
does the staging. That's got nothing to do with what your system calls
when you issue gcc, and only at that point the slotting of GCC
versions comes into play.

  Because for basically every program on your system, they are
  *dynamically linked* against glibc.
 
 Are you absolutely 100% sure that every single system utility and
 application is *dynamically* linked, and that no apps or utilities
 anywhere in the system specifies *static* linking?

What would that change? We're talking about GCC, not glibc.

  There are a few statically linked programs that will include glibc
  internally.  These are used only for system recovery
  purposes...there is no need to worry about them at all.
 
 Really, so people who intentionally and specifically want to upgrade
 absolutely *everything* should not worry about what gets left out
 because Richard says it's unimportant?

If the build logic of those programs uses glibc statically, the
specific ebuilds for such programs have to get updated in order to
incorporate fixes that are needed in statically compiled libraries.

Following *your* logic, one would have to do emerge -e world after the
slightest update just for the case that the updated package is compiled
statically into something.

 The issue is about upgrading gcc and even the gcc upgrade howto
 recommends an emerge -e world. It's clear that gcc it self at least
 has to be emerged twice in order to build the new gcc *with* the new
 gcc.

Repeating this doesn't make it more true than being plain wrong.

  There is no value to having glibc or libstdc++-v3 in the first line.
  There is no value at all to doing that twice.
 
 Twice is the only way to build the new gcc *with* the new gcc. I
 should have added the gcc-config select command in between, but I
 thought that was pretty clearly necessary.

He was talking about glibc at that point. I don't see no value either.

  Also, libstdc++-v3 is only needed by a few binary-only programs on
  Gentoo.  Moreover, it is simply a build of gcc-3.3.6, which as I
  already said uses itself to build itself,  so I cannot see any
  point in ever re-merging libstdc++-v3 due to a gcc upgrade
 
 The same holds true for libstdc++-v3 orginally it was built with the
 default system compiler, it makes sense to have it rebuilt with the
 new compiler.

Not sure here, but it may well be possible that the ebuild in question
builds a gcc 3.3 for bootstrapping this, too.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: no suEXEC logging on errors

2006-06-08 Thread Hans-Werner Hilse
Hi,

On Thu, 08 Jun 2006 13:32:17 -0500
[EMAIL PROTECTED] wrote:

 Hans-Werner Hilse [EMAIL PROTECTED] writes:
 
  What you're experiencing seems to be just a missing ScriptAlias. RTFM
  about calling CGIs...
 
 What I've found is that if I set ScriptAlias to
 /var/www/localhost/cgi-bin/ then it all works there but not at:
 USER/public_html.  There a cgi is just displayed like a file.
 
 If I do not define ScriptAlias at all then cgi works under
 $public_html but cgi under $htdocs is just displayed as a file.

Sorry, my fault. A ScriptAlias alone isn't likely to work, if I read
this correctly:
http://httpd.apache.org/docs/2.0/howto/cgi.html
Read starting at CGI outside of ScriptAlias directories, it
explicitly mentions the UserDir setting. And there are docs linked for
using .htaccess files for configuring this.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Reconstructing a Gentoo Installer Computer

2006-05-31 Thread Hans-Werner Hilse
Hi,

On Wed, 31 May 2006 08:29:49 -0400 Timothy A. Holmes
[EMAIL PROTECTED] wrote:

 Raymond - the dev-lang/php use flag is there to pull in the PHP stuff
 as BASE requires it.

What makes you think there's
a) a slash-notation in USE flags
b) this specific USE flag?
dev-lang/php really looks like a package specification, not a USE flag.

And: What is BASE?

 The -mmx and several of the others are there to keep conky from
 pulling in a bunch of stuff as well that it does not need

When mmx isn't set by default there's no good reason to disable it,
right?

Make sure that you have understood what USE flags really do. As you're
talking about a IDS, my suggestion would even be to start with all USE
flags unset by default, i.e. your USE variable in /etc/make.conf should
start with -* then. You'll probably want to add some of these to the
default flags, too: nptl nptlonly ssl zlib jpeg png alsa ncurses pic
nls pam. You can then specify further package specific refinements
in /etc/portage/package.use. For an explanation what is happening at
all, see man portage and man make.conf.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] march athlon-xp to athlon64

2006-05-31 Thread Hans-Werner Hilse
Hi,

On Thu, 1 Jun 2006 00:51:47 +0930
Raymond Lewis Rebbeck [EMAIL PROTECTED] wrote:

 On Thursday, 1 June 2006 0:38, Hemmann, Volker Armin wrote:
Also -ftracer is not in the safe cflags list, personally I would not
use it but if you believe it benefits you then go ahead.
  
   Another handy tip. Can't remember why I had it (did the research when
   I reinstalled it 32bit). I'll remove it too.
 
  ftracer is harmless.
  From man gcc:
-ftracer
 Perform tail duplication to enlarge superblock size.  This
  trans- formation simplifies the control flow of the function allowing other
  optimizations to do better job.
 
 If it was harmless and beneficial it'd already be included in an -O? level.

Probably. And it seems to be only of interest when using
-fsched2-use-superblocks or -fsched2-use-traces. The man page entry for
the further (included in the latter) option says: This option is
experimental, as not all machine descriptions used by GCC model the CPU
closely enough to avoid unreliable results from the algorithm.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] xrdb woes

2006-05-31 Thread Hans-Werner Hilse
Hi,

first: I saw your answer to your own question, but I rather answer
this :-) (Besides: 2 hours is not quite the amount of time I would
expect a competent answer to a very individual problem...)

On Wed, 31 May 2006 11:01:58 + (UTC)
James [EMAIL PROTECTED] wrote:

 While the 'peripherals' icon is flashing the login hangs. I ssh into 
 the machine remotely, and kill off the xrdb process:
 'xrdb -quiet -merge /tmp/kde-james/kcminit6pdVqc.tmp'
 [...]
 Any ideas on how to track this down  ths problem are appreciated.
 xrdb is not even installed.

When xrdb is _not_ installed, what exact program are you killing? So I
guess it just must be installed somewhere... Try to find out its PID
(via ps) and check what /proc/PID/exe points to (it's a symlink).

Then try running the command with the just found out executable from an
X terminal (maybe you would have to make a backup copy of the temp file
mentioned in the command string you've posted and use that later in the
terminal window) and see what happens. You'll probably want to omit the
-quiet flag...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] how to trigger complete rebuild after changing CFLAGS oder USEFLAGS

2006-05-31 Thread Hans-Werner Hilse
Hi,

On Wed, 31 May 2006 13:57:10 -0600
Justin R Findlay [EMAIL PROTECTED] wrote:

 On Wed, May 31, 2006 at 09:10:48PM +0200, Enrico Weigelt wrote:
  What does 
  emerge system
  exactly do ?
 
 system is an alias for a bunch of core packages.  I forgot where it's
 defined.

That's the profile. This is cascading. The start point
is /etc/make.profile (check what the symlink points to) and downwards
the path (in fact, according to the parent files, i.e. base is the
most upward level atm.) to $PORTDIR/profiles in the packages files.
Note that the rest is up to the dependencies. The profile is in fact a
bunch of default settings, default masks and a default system package
list.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] march athlon-xp to athlon64

2006-05-31 Thread Hans-Werner Hilse
Hi,

On Wed, 31 May 2006 18:38:05 +0200
Hemmann, Volker Armin [EMAIL PROTECTED] wrote:

 On Wednesday 31 May 2006 18:29, Hans-Werner Hilse wrote:
  On Thu, 1 Jun 2006 00:51:47 +0930
  Raymond Lewis Rebbeck [EMAIL PROTECTED] wrote:
   If it was harmless and beneficial it'd already be included in an -O?
   level.
 
  Probably. And it seems to be only of interest when using
  -fsched2-use-superblocks or -fsched2-use-traces. The man page entry for
  the further (included in the latter) option says: This option is
  experimental, as not all machine descriptions used by GCC model the CPU
  closely enough to avoid unreliable results from the algorithm.
 [man page excerpt]
 where does it say 'experimental'?

You're right. At least for gcc 4.1.1 it doesn't say this anymore. For
gcc 3.4.6, though, it does. Probably that's the explanation for this
all. Nervertheless, it's not set by default for optimization options.
That indicates it's still considered somewhat beta or provides
another optimization strategy than the existing -O? options (and does
not have some -O? option of its own, yet).

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] SSHD running under Linux, SSH running under Windoz

2006-05-29 Thread Hans-Werner Hilse
Hi,

On Mon, 29 May 2006 11:19:30 +0200 Bo Ørsted Andresen
[EMAIL PROTECTED] wrote:

 Monday 29 May 2006 11:08 skrev Norman Rieß:
  With Cygwin (http://www.cygwin.com/), you can install a X11-Server
  on you Windowsmachine. Then switch on the X11 forwarding of your
  ssh client.
 
 Be aware that you don't actually need to run the X server on the
 Windows computer. You just need the libs that are required by those X
 applications that you intend to run..

N'ah, you've misread it. Since the OP wants to run the ssh client on
the Windows machine, a X server is needed. XWin from cygwin is a good
suggestion. I also like WeirdX
(http://www.jcraft.com/weirdx/index.html), a Java-based implementation
that might be simpler to setup if cygwin is too big. It has a few
interesting things, among them EsounD support. It's X11R6.3, though.

-hwh

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Upgrading to gcc 4.1: emerge -e world required?

2006-05-26 Thread Hans-Werner Hilse
Hi,

On Fri, 26 May 2006 16:01:14 +0200 Alexander Skwar
[EMAIL PROTECTED] wrote:

 Of course. You don't need to have gcc installed to be able to
 run a *compiled* program.

but one might want to have the libstdc++ and libgcj installed that
came with the compiler for the case that C++/Java programs should
continue to run. So quickpkging the old GCC is probably not a bad
idea until revdep-rebuild took care of those apps and libs.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: DNSDOMAIN in /etc/conf.d/domainname has no effect?

2006-05-26 Thread Hans-Werner Hilse
Hi,

On Fri, 26 May 2006 19:40:02 +0200
Alexander Skwar [EMAIL PROTECTED] wrote:

 Zac Slade wrote:
  On Friday 26 May 2006 08:25, Alexander Skwar wrote:
 
  But I wonder what this DNSDOMAIN setting in /etc/conf.d/domainname is
  supposed to do. Because of
  It sets the domain in /etc/resolv.conf
 
 No, it doesn't.

Well, it does (in /etc/init.d/domainname). But this is obviously
overwritten in your case by dhcp settings.

You're right with that OVERRIDE=1 doesn't fix this. Another start
of /etc/init.d/domainname should. The OVERRIDE flag just decides
whether the new domain setting goes to the start or the bottom
(OVERRIDE=1) of /etc/resolv.conf (that has influence, because
resolv.conf(5) says: the last instance wins). So what's probably
missing is another call to /etc/init.d/domainname after DHCP has set up
the interface.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] 1366x768 HDTV

2006-05-15 Thread Hans-Werner Hilse
Hi,

On Mon, 15 May 2006 02:05:28 + (UTC) James
[EMAIL PROTECTED] wrote:

 I'm trying to get the SVGA input on a HDTV to work with my gentoo
 system. The monitor manual says it works with 1366x768. The video
 card in the machine is: VGA compatible controller: nVidia Corporation
 NV34 [GeForce FX 5200] 
 
 Any wikis or docs or example xorg.conf file laying around I can use
 as a guide?

Did you ever try Google? Anyway, googl'ing for modeline 1366x768
brings up lots of hits for me. Insert some modeline that doesn't exceed
the allowed clock rates for your monitor (you didn't mention them) into
your xorg.conf, and that's it.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] ReiserFS extended attributes?

2006-05-15 Thread Hans-Werner Hilse
Hi,

On Mon, 15 May 2006 21:22:50 +0200 (CEST)
Sascha Lucas [EMAIL PROTECTED] wrote:

  I can't be of much further help, but my immediate question after
  reading this was: what does /proc/mounts contain after doing this?
 
 something different then mount shows:
 
 # mount | grep home
 /dev/hda3 on /home type reiserfs (rw,noatime,user_xattr)
 
 # grep home /proc/mounts
 /dev/hda3 /home reiserfs rw,noatime 0 0

I think it just doesn't get respected. But it doesn't throw an error,
so I guess the kernel doesn't error out but doesn't change anything,
either. /proc/mtab is maintained by the kernel, /etc/mtab is maintained
by mount itself. But seeing the other part of this thread, this all
seems to be intended behaviour for reiserfs.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Shutdown pauses partway with Give root password

2006-05-09 Thread Hans-Werner Hilse
Hi,

On Tue, 09 May 2006 07:20:57 -0700 glen martin [EMAIL PROTECTED]
wrote:

 Resending ... anyone have a clue as to why the Give root password for
 maintenance ... prompt would come up occasionally at shutdown time?

That's sulogin. Did you mess up your /etc/inittab (like uncommenting
that line referring to sulogin)?

But I rather guess its an unclean umount and sulogin is spawned
from /etc/init.d/halt.sh (l.189). Maybe you can cat your /proc/mounts
next time you're in that single-user mode? It might make things more
clear...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] why firefox is so slow?

2006-05-05 Thread Hans-Werner Hilse
Hi,

On Fri, 05 May 2006 08:22:29 +0200 Alexander Skwar
[EMAIL PROTECTED] wrote:

 [EMAIL PROTECTED] wrote:
  On Monday 01 May 2006 11:03 pm, Alexander Skwar wrote:
  [EMAIL PROTECTED] wrote:
   Outlook and Outlook Express are the two worst mail clients in the
   universe.
 
  They are not. Lotus Notes beats them to that.
  
  Ouch.  You sure you want to be handing out a judgement of that
  magnitude like that?
 
 Yes, I am sure. Well, my statement is at least true reg. Notes 5.
 I do not know Notes 6 or newer. They might have changed Notes and
 made it better.

Ahem, not really better. Well, a bit. But judging Notes for its eMail
qualities is like judging MS Word for its abilities as a programmer's
editor. Notes _has_ its worth, too, and has some very interesting
features, namely the configurable database replication to the client.
Especially the offline capabilities are pretty good.

-hwh
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] OOM-Killer upon compilation/emerge on AMD64 (was: Re: why firefox is so slow?)

2006-05-05 Thread Hans-Werner Hilse
Hi,

On Fri, 5 May 2006 17:28:06 +0200 Hemmann, Volker Armin
[EMAIL PROTECTED] wrote:

 This is an example:
 
 [ 1151.984763] oom-killer: gfp_mask=0x80d2, order=0

Huh? If I understand Linux' memory management correctly that says that
the OOM condition was triggered by trying to reserve 1 page (order=0)
of high memory (gfp_mask|0x0002). But: You don't have highmem (of
course, because you're running on 64bit).

 [ 1151.984770] DMA per-cpu:

what about DMA32? Is this an older kernel?

 [ 1151.984809] HighMem free:0kB min:128kB low:160kB high:192kB active:0kB 
 inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no

doesn't make me wonder on 64bit...

 [ 1151.984829] Swap cache: add 71, delete 71, find 0/0, race 0+0
 [ 1151.984831] Free swap  = 995736kB
 [ 1151.984833] Total swap = 996020kB
 [ 1151.984834] Free swap:   995736kB

Errr, that basically says nearly full swap space is available, isn't it?

I think you probably have some IO related driver that for whatever
reason decides to claim highmem. This triggers the OOM (there's no
highmem), and cc1plus just happens to be the most interesting task to
kill for the kernel:
- just started,
- much memory recovered

Further analysis would probably require patching the mm/oom_kill.c and
inserting a few debug statements -- if the problem is still there for
newest kernels (there's been some changes esp. reg. AMD64 in 2.6.14,
IIRC).


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: [OT] kill a child and suicide

2006-05-04 Thread Hans-Werner Hilse
Hi,

On Thu, 4 May 2006 18:55:28 +0300
Moshe Kaminsky [EMAIL PROTECTED] wrote:

 Funny, I just tried the same, and it worked. It also didn't print any 
 after (appropriately, since the sig handler includes 'exit'), and I 
 didn't find any sleep process. Maybe it was from some different 
 experiment?

I don't think so. You probably sent the signal to the child process
(CTRL-C, perhaps?) and the script at once, not to the parent only.

proper way would be to try it like this:

./test.sh 
# wait some short time
kill -TERM $!

After that I see that the child process is still running.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] kill a child and suicide

2006-05-03 Thread Hans-Werner Hilse
Hi,

On Wed, 3 May 2006 20:38:49 +0100 (WEST)
Jorge Almeida [EMAIL PROTECTED] wrote:

 On Wed, 3 May 2006, Boyd Stephen Smith Jr. wrote:
 
  Putting something in the background doesn't change what it's std(in|out|
  err) are attached to.  They will still go to the [pt]ty like normal.  If
 Right, my mistake. Still, the parent script will exit sucessfuly, and
 then how can the backgrounded process be controlled, other than by
 killing it with kill -TERM or something like that?

Signals are the only way (or you have a parent died logic inside the
child process). And this will always open a racing condition when
relying on shell scripting, like I showed in my earlier answer. But for
multilog this won't matter as stdin/stdout is dup'ed to the child. It
does matter, though, for security holes.

  you *want* then redirected somewhere else, you are free to do so with
  standard redirection operations before the ampersand.
 I don't want redirection. Multilog will grasp stdout, but only of the
 parent process (I think); once the latter exits, I don't think the other
 process will be accessible.

It doesn't exit. It's just a shell built-in wait (no, in fact, it is
a glibc built-in wait). The file handles are kind of dup'ed, so
multilog should work just fine.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Web mail

2006-05-03 Thread Hans-Werner Hilse
Hi,

On Wed, 03 May 2006 08:59:23 -0500
Michael Sullivan [EMAIL PROTECTED] wrote:

 I know about event-driven programming (I wrote in VB for years before I
 achieved the enlightenment of Linux), but I didn't know that it was
 possible with PHP.  I use event-driven techniques in Gambas and qt.  I
 always thought squirrelmail code was like that for security purposes...

I never heard of it as event driven programming, but I think what it
should refer to is the MVC pattern. The events for web applications
are of such a homogenuous nature that it has no worth to think of it as
event driven. One needs a good understanding of MVC and the
Doc/Controller model (and serialization of state data) for building
fine complex webapps whose overall logic should keep being
understandable.

On the opposite, if you've just a plain simple page to display, MVC is
definitely way too heavy.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] kill a child and suicide

2006-05-02 Thread Hans-Werner Hilse
Hi,

On Tue, 2 May 2006 17:42:26 +0100 (WEST)
Jorge Almeida [EMAIL PROTECTED] wrote:

 On Tue, 2 May 2006, Zac Slade wrote:
 
  You can find the PID of the last backgrouned process using the bash variable
  $!
 
 The child is not backgrounded!
  So something like:
  subprocess 
  $pid=$!
 
  Using trap along with maybe setting alarms should get you what you want.
 
 Based on the suggestions of Uwe and Vladimir, I tried
   trap 'pkill -TERM -P $$; kill -s TERM $$' TERM
   do something
   . /path/to/child.sh
   do something else
 Doesn't work, yet. Note that child.sh is a shell script that may execute
 some other command (like rsync), so the . by itself may not be enough.

This can't work because of this (man bash):
--snip
If bash is waiting for a command to complete and receives a signal for
which a trap has been set, the trap will  not  be  executed until the
command completes.
--snip

What instead works (just tested):
--snip
#!/bin/sh
COMMAND=sleep 120

# First we background:
$COMMAND 
# Save the PID
CHILDPID=$!
# Trap the signal:
trap kill -TERM $CHILDPID TERM
# And wait for the Child to finish:
wait $CHILDPID
# reset signal handling:
trap - TERM
--snip

Note that the code could hit a racing condition and should therefore
not carelessly run by root on a machine with untrusted users. This is:
The process may have finished before setting the signal handler.
Other processes *might* reuse the PID afterwards and might get
sig-TERM-ed until resetting the signal handler again. Probably a minor,
depending on the script's usage.


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] How to get rid of gentoo-sources

2006-05-02 Thread Hans-Werner Hilse
Hi,

On Tue, 2 May 2006 21:09:44 +0200
Leopold Gouverneur [EMAIL PROTECTED] wrote:

 How can I prevent emerge from merging gentoo-sources (I now use sources
 from ftp.kernel.org).I tried --unmerge whithout success.

Something will always try to pull it in. But you can tell portage that
it's there:

$ cat /etc/portage/profile/package.provided 
sys-kernel/development-sources-2.6.15.4
sys-kernel/gentoo-sources-2.6.15.4

(dunno why I've inserted both, one should be sufficient, and yes, it
already got a bit outdated)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] My box freezee sometimes

2006-04-28 Thread Hans-Werner Hilse
Hi,

On Fri, 28 Apr 2006 11:24:19 -0300 Fernando Antunes
[EMAIL PROTECTED] wrote:

 I've already run memtest86, no problem report.

positive testing of a hypothesis is not a proof of correctness.
Negative testing is a proof of its falseness.

That said, you can only validate the hypothesis of not working RAM by
actually finding errors with memtest, but never prove that it is OK.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Fwd: FontForge needs conversion from ISO-8859-1 to UCS2 - iconv (glibc-2.3.5-r2) does not support it on amd64

2006-04-26 Thread Hans-Werner Hilse
Hi,

On Wed, 26 Apr 2006 11:43:09 -0400 Michael [Plouj] Ploujnikov
[EMAIL PROTECTED] wrote:

 Although FF seems to work now if compiled --without-iconv, I would
 like to know why this conversion is not working on my system.
 
 Here is what happens if I type:
 [...]

Hm. Works for me. And this hasn't to do with locales (at least, it
shouldn't).

What are the USE flags for your glibc? Is nls enabled?


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Fwd: FontForge needs conversion from ISO-8859-1 to UCS2 - iconv (glibc-2.3.5-r2) does not support it on amd64

2006-04-26 Thread Hans-Werner Hilse
Hi,

On Wed, 26 Apr 2006 12:42:09 -0400 Michael [Plouj] Ploujnikov
[EMAIL PROTECTED] wrote:

 Did you say that those conversions work for you on amd64?

Ah, I'm seeing it now in the subject. No, I was quietly assuming you're
talking about x86. I don't have an amd64 machine at hand, so I can't
help here...

glibc's USE flags seem to be all right for me. Maybe other people can
test it on amd64.

What I noticed when strace'ing iconv, though, was that it accesses some
files in /usr/lib/gconv. Does this directory exist on amd64? You might
want to run strace iconv ..., too, maybe the error is displayed there.


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Fwd: FontForge needs conversion from ISO-8859-1 to UCS2 - iconv (glibc-2.3.5-r2) does not support it on amd64

2006-04-26 Thread Hans-Werner Hilse
Hi,

On Wed, 26 Apr 2006 14:09:18 -0400
Michael [Plouj] Ploujnikov [EMAIL PROTECTED] wrote:

 Here is the strace output: http://plouj.sh.nu/straceiconv

from that output:
---snip
open(/usr/lib32/gconv/UNICODE.so, O_RDONLY) = 4
read(4, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \5\0\000..., 640) = 
640
close(4)= 0
open(/usr/lib32/gconv/ISO8859-1.so, O_RDONLY) = 4
read(4, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\4\0..., 640) = 640
close(4)= 0
---snip

So it opens a file, reads 640 bytes and closes it. Note the /lib32.
Now this is my output, 32bit platform:

---snip
open(/usr/lib/gconv/ISO8859-1.so, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\4\0..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=9720, ...}) = 0
mmap2(NULL, 12316, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 
0xb7de4000
mmap2(0xb7de6000, 8192, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7de6000
---snip

So after reading the first 512 bytes, it mmap's a code section and a
data section into address space. Dynamic loading, I'd say (without
further debugging). So this seems to fail for you and I think the
lib32 indicates that the 64bit glibc errorneously tries to load the
wrong modules for iconv.

Maybe you can temporarily move the lib32/gconv dir and soft link the
lib64/gconf in place of it to verify my assumption (it should work
then, but this is obviously not a solution as it will break 32bit
environment). You might want to file a bug into gentoo's bugzilla
(after searching for an existing one, of course).

 By looking at /usr/lib{64,32}/gconv/gconv-modules (wich are identical)
 it looks like there really isn't any conversion specified from
 ISO-8859-1 to any other code.

Strange. Mine has:
---snip
module  ISO-8859-1//INTERNALISO8859-1   1
---snip

(whatever that means)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Initramfs question

2006-04-25 Thread Hans-Werner Hilse
Hi,

short note at the start: Don't hijack other threads (like you did
here), don't answer a mailing list mail but write a new one to the
list, when you want to start a new thread.

On Tue, 25 Apr 2006 11:32:52 -0400 K. Mike Bradley [EMAIL PROTECTED]
wrote:

 Can anyone tell me why the latest Gentoo uses initramfs but it is
 loaded by GRUB using initrd?
 
 I though the initramfs was to be compressed into the kernel image?

It can be, but it hasn't to. The kernel checks a few magic bytes in
order to check whether ram disk data placed by the bootloader into
memory is actually an initramfs or a full blown initrd (which can
contain any filesystem). Initramfs is the suggested replace mechanism
and is basically a compressed cpio archive. The method how it gets into
memory when booting hasn't changed, or better: is still compatible.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: IrDA crashes every time

2006-04-24 Thread Hans-Werner Hilse
Hi,

On Sun, 23 Apr 2006 13:47:24 +0200 Mick [EMAIL PROTECTED]
wrote:

 Well, I've tried passing all sort of different parameters to the
 module but it comes back with errors:
 [...]

Well, there are two things left I would try:
#1: I remember some kind of findchip utility (try that name) that
comes with irda-utils. It can print suggested settings.
#2: Try IrPort drivers (unfortunately you'll be restricted to SIR, max.
#115kBit)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: IrDA crashes every time

2006-04-24 Thread Hans-Werner Hilse
Hi again,

On Mon, 24 Apr 2006 15:09:43 +0100 Mick [EMAIL PROTECTED]
wrote:

 I've got partial success!  I can modprobe smsc-ircc2 which seems to
 successfully install the module:
 =
 # modprobe -v smsc-ircc2 ircc_sir=0x3e8 ircc_irq=3
 insmod /lib/modules/2.6.15-gentoo-r1/kernel/drivers/net/irda/smsc-ircc2.ko
 ircc_sir=0x3e8 ircc_irq=3

So it doesn't report an error here, correct?

 But only after I have run setserial:
 =
 # setserial /dev/ttyS2 uart none
 =
 
 The log shows:
 [...]

OK, this probably means that you have the default serial driver
installed and it claims the device. The setserial is needed in order to
release the port again. You might want to try to have the default
serial driver not touch the IrDA port at all -- the simplest thing
would be to try running without serial plug support for the start.

 Then I start /etc/init.d/irda:
 =
 Apr 24 15:03:37 lappy irattach: tcgetattr: Input/output error
 Apr 24 15:03:37 lappy irattach: Stopping device /dev/ttyS2
 Apr 24 15:03:37 lappy irattach: ioctl(SIOCGIFFLAGS): No such device
 Apr 24 15:03:37 lappy irattach: exiting ...
 =

This seems to indicate that you're trying to use /dev/ttyS2. But as
you're not using the serial port IrDA driver but an extended FIR driver
the device is probably irda0 (and it doesn't have a path, as it's a
network device). Try ifconfig -a, it should be listed. I don't have
IrDA on my current machine, so I can't tell what exact configuration
setting must be changed from /dev/ttyS2 to irda0. Start with this,
first.

 Should I perhaps run all this is a different order?

As I said, try modprobing after the setserial call or even omit
serial support in the kernel.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: IrDA crashes every time

2006-04-24 Thread Hans-Werner Hilse
Hi,

On Mon, 24 Apr 2006 17:50:37 +0100
Mick [EMAIL PROTECTED] wrote:

 Yes, no error.  The module is installed fine as long as I have run
 setserial first.

Hm, that's how it should be with fast infrared drivers. All OK, then, I
guess.

  You might want to try to have the default
  serial driver not touch the IrDA port at all -- the simplest thing
  would be to try running without serial plug support for the start.
 
 I am sure that if I could first improve my understanding with regards
 to how serial ports are being used, I would be able to find the
 solution much easier ;-)
 
 I have enabled serial drivers in the kernel because I intend to
 configure the winmodem for dialup connections, as well as being able
 to connect my Psion PDA on the serial port.

You need serial drivers (what I called serial plug support before)
for the latter. The winmodem will probably use its own driver that
provides a serial device which is functionally equal to the ones from
the serial driver - but does not depend on the serial driver. But for
actually using the real serial ports on the back of your PC you'll
have to use the standard serial drivers. So no need for recompiling
here, the setserial uart none should suffice. An option that's left
would be compiling both IrDA drivers and serial device drivers as
modules and probing IrDA first and serial second.

 How does it exactly work?  What is the serial plug support?  Are you
 referring to the kernel modules for serial ports?

Yes, I was.

  This seems to indicate that you're trying to use /dev/ttyS2. But as
  you're not using the serial port IrDA driver but an extended FIR driver
  the device is probably irda0 (and it doesn't have a path, as it's a
  network device). Try ifconfig -a, it should be listed. I don't have
  IrDA on my current machine, so I can't tell what exact configuration
  setting must be changed from /dev/ttyS2 to irda0. Start with this,
  first.
 
 Actually, ifconfig gives me not ida0, but irlan0:
 [...]

Hm, that's not how it should be. There should definately be the irda0,
too. That's the device the smsc FIR driver should provide. I just had a
look at the sources of the driver you're using (smsc-ircc2) and it
indicates that the error message No transceiver found. Defaulting to
Fast pin select may be an effect of a wrong ircc_fir setting. But I
can't help much further, here. The only suggestion left, obviously not
the best one, is to keep away from FIR and use SIR instead. As you'll
be using the standard serial device driver anyway, you can then
compile the IrTTY device driver instead of smsc-ircc2.

 I will be rolling up a new kernel soon so I can try leaving out the
 serial support drivers.  As I said above I desperately need to
 understand how the serial port functionality works in linux.  If this
 is getting too much OT for the list please email me directly so that
 we don't consume bandwidth.  :-)

I don't suggest leaving out the serial drivers, as you'll need them for
the Psion connection. And reg. list traffic: You'll need this audience
if further problems arise as I'm at the end of my wisdom right here ;-)


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Do NOT install evolution

2006-04-22 Thread Hans-Werner Hilse
Hi Alexander,

On Sat, 22 Apr 2006 13:15:31 +0200 Alexander Skwar
[EMAIL PROTECTED] wrote:

 Is there a way to make emerge/Portage pretend that
 mail-client/evolution is already installed WITHOUT actually
 installing it? I do NOT want to deinstall gnome-base/gnome and I also
 don't really want to put gnome-base/gnome in a local overlay.

/etc/portage/profile/package.provided, I think (add line
»mail-client/evolution-V« where V is the pretended version). See »man 5
portage«.

-hwh

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: IrDA crashes every time

2006-04-22 Thread Hans-Werner Hilse
Hi,

On Sun, 23 Apr 2006 02:17:20 +0200
Mick [EMAIL PROTECTED] wrote:

 Apr 23 01:01:01 lappy smsc_ircc_present: can't get sir_base of 0x3e8

Try checking and changing BIOS settings for IRDA IO port, IRQ settings
and DMA and - maybe - PlugPlay. Then you might want to use the
IO/IRQ/DMA parameters as options to the module (use modinfo -p to find
out about those options). Just a guess, though.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Looking for best tutorial on creating initramfs

2006-04-20 Thread Hans-Werner Hilse
Hi,

On Thu, 20 Apr 2006 08:05:50 -0500 Johnson, Maurice E CTR NSWCDL-K74
[EMAIL PROTECTED] wrote:

 Need to find a better tutorial on initramfs. One that doesn't rely on
 tools that automate the process.

In fact, an initramfs doesn't differ much from other root fs'es.
Physically, it is a gzipped cpio archive. The kernel will compile it
into the kernel itself if you tell it so (kernel configuration:
configure a patch for initramfs data). If you want to create it
manually and load it like a ram disk (i.e. use the boot loader to pass
the initramfs to the kernel) you can rely on a script that is in
your kernels ./scripts/ directory and an executable that gets compiled
in ./usr/ like this:

gen_initramfs_list.sh /path/to/initramfs/data | gen_init_cpio /dev/stdin | gzip 
-9  initramfs.gz

Inside the initramfs you can create a userland. Kernel's entry point
will be /init, which is supposed to be executable.

You'll want to read

/usr/src/linux/Documentation/early-userspace/README

for the basics and then read

/usr/src/linux/Documentation/initrd.txt
(be careful to ignore the first part which is only initrd specific).

You can put anything you want into your initramfs. If it's just some
simple script that should be run, you're probably done with a
statically compiled busybox executable and /init being a shell
script. At the end of the script, you'll want to pivot_root into the
real root filesystem and maybe delete initramfs data afterwards.

I've never found really good documentation, but everything just works
as expected. There's really nothing special with initramfs.

Feel free to ask more questions here.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] tv tunner

2006-04-19 Thread Hans-Werner Hilse
Hi,

On Wed, 19 Apr 2006 16:37:37 +0300
Catalin Trifu [EMAIL PROTECTED] wrote:

I would like to get a TV Tunner installed on my gentoo linux box.
Could you please share some of your experience with setting up
 a TV Tunner and which cards/software you used.

I'm currently running a DVB setup with a modified (stripped down to run
completely out of RAM-Disk) gentoo. I'm not sure if you had DVB in
mind, though. I can definitely recommend this in combination with VDR
(others prefer MythTV, which is probably better for analogue TV) - it
currently provides me a TV set top box on a Pentium 200 MMX. It's a
full featured card, i.e. the hardware decodes the MPEG2 video and audio
streams. You can use a so called »budget card« that doesn't have this
decoder (and no TV out) and use your CPU for decoding (not an option
for the Pentium 200, which I like for its quietness). You should have
at least ~400 MHz and there won't be much left of your CPU cycles when
watching TV with this. With modern CPUs you don't have to care that
much. The standard linux kernel brings all needed DVB drivers for most
cards.

For VDR, there are plugins that allow streaming over some network (from
my experiences, 10MBit is needed). For me, that means I can watch TV
on my work computer, too, streamed from my VDR set top box.

So my suggestion is clearly DVB (if you're from Germany, too: probably
only useful for DVB-T and DVB-S, due to limited channels for most DVB-C
networks) and VDR.

If you rely on analogue TV, I don't have any experience to share :-(

-hwh

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] udev/initramfs problem

2006-04-18 Thread Hans-Werner Hilse
Hi,

On Tue, 18 Apr 2006 09:44:09 -0500 Johnson, Maurice E CTR NSWCDL-K74
[EMAIL PROTECTED] wrote:

 We rescently upgraded to the 2.6.15-r1 kernel and life is great on the
 systems that use the adaptec scsi controllers. However, LSI Logic does
 not appear to be seen by udev or, more likely, initramfs facilities.
 Consequently, no root device is found.

Hm? The initramfs is in charge to load proper modules, if needed. But
there shouldn't be a root device if there's an initramfs. Are you
talking about the staged root which is going to be pivot'ed when the
initramfs is done?

 I am missing something but don't know what. Below is the output of [...]

How has the cited output been made? From initramfs system?

My questions would be:
- is the driver for the LSI controller compiled into the kernel?
- if it isn't, is the module contained in the initramfs? Is it a module
  for the right kernel?
- and how is the module to be loaded by the initramfs?
- is there a static or a dynamic /dev in the initramfs?
- if dynamic, how is it managed?
- what are the commands the initramfs uses to stage into real root?


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] udev/initramfs problem

2006-04-18 Thread Hans-Werner Hilse
Hi,

On Tue, 18 Apr 2006 11:25:52 -0500
Johnson, Maurice E CTR NSWCDL-K74 [EMAIL PROTECTED] wrote:

 # genkernel -- menuconfig --install all

Hm, I don't really know genkernel. Does it create the initramfs?

 When in the ash shell environment, I notice that there are few static
 nodes  in /dev. ( i.e. console, pty etc.) In this environment, I am
 able to load the modules manually, but still no device is visible in /dev.

Then there's either no daemon that creates the devices (udev) or it
isn't somehow configured correctly.

 I note that the MPT driver structure has changed as well for this
 kernel - which, I have built both modularly and strait into the kernel.

Somehow I doubt that. Usually you have it either the one way or the
other. But as you said you could load them, I guess they're modules.
You might want to try to recompile a kernel with all drivers compiled
in.

 I have been doing a great deeal of reading and have found that klibc
 may be an issue, however, building older (2.6.12-r4) kernels works
 without error. Also noted here is that 2.6.12-r4 still has devfs
 features available.

That would explain it. udev would be needed in the initramfs to create
devices upon module loading.

   The module is contained within the initramfs and loads (manually)

So there's no hotplugging or similar. Try to compile the drivers
directly into the kernel.

 - and how is the module to be loaded by the initramfs?
   My presumption is that the rules within 50-udev.rules provide for this.
 - is there a static or a dynamic /dev in the initramfs?
My best discription here is dynamic with a few static nodes present.

Ah, this _is_ in the initramfs? Is there a udevd spawned in initramfs?

 I beleive that it is at the PCI level where this failure occures,
 because, if the PCI interface ti the controler were properly handled,
 then the scsi bus it provides would be available.

Is dmesg available in initramfs? It may contain hints upon module
loading. But at that time those hints should be print out to console,
anyway. You're shure that those are the correct drivers, aren't you?


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] error after update

2006-04-12 Thread Hans-Werner Hilse
Hi,

On Wed, 12 Apr 2006 23:03:39 +0800 (CST) wcw84 [EMAIL PROTECTED] wrote:

 config_eth0=( 222.20.45.71 netmask 255.255.255.0 broadcast 222.20.45 255 )

There's a dot missing right before the last 255.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] gpm (X11): touchpad OR usb-mouse?

2006-04-11 Thread Hans-Werner Hilse
Hi,

On Tue, 11 Apr 2006 21:55:46 +0200
Jarry [EMAIL PROTECTED] wrote:

 Is it possible to configure gpm so, that if usb-mouse is
 attached, then only mouse can be used as pointing device?

You may try to use udev for that. It can call scripts when devices are
plugged in and out or just present at boot (using coldplug for older
udev versions). You can let the script switch configuration files and
send gpm a signal that lets it read its configuration again. The key is
that you should not use /dev/input/mice as the device but have two
separate gpm configurations with /dev/input/mouseN (you can also use
udev to give more persistent names).

Sorry, I can't go much into practical details, I've no use for this,
personally :-)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] emerge without download

2006-04-06 Thread Hans-Werner Hilse
Hi,

On Thu, 6 Apr 2006 09:22:11 -0700 (PDT) go moko [EMAIL PROTECTED]
wrote:

Moreover, why 'emerge package digest' try to
download the file instead of creating the
corresponding digest file?
   
   The command you wanted was 'ebuild'...
  
  Or 'emerge --digest package' if you have a recent
  enough portage.
 
 Yeah, excuse, it was 'ebuild package digest' which
 try to download the file.
 Just a typo...

Yep, it needs to download the sources in order to calculate the digest
for them, too. That's how portage checks for forged tarballs on the
mirrors.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] ssh2 and xover LAN

2006-04-03 Thread Hans-Werner Hilse
Hi,

On Mon, 3 Apr 2006 08:44:02 -0700 (PDT) maxim wexler
[EMAIL PROTECTED] wrote:

 For some reason scp concatenates the source with the
 destination into one non-existing path.

Then why on earth don't you quote actually _useful_ data for us to help
you, i.e. the command you issued when you get that error?

May it even be possible that you don't use openssh's scp (I didn't
manage to reproduce such debug output you've cited)? You've neither
specified your client and server software... Trying to help you under
these circumstances is rather pointless.


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] another iptables question...

2006-03-28 Thread Hans-Werner Hilse
Hi,

On Tue, 28 Mar 2006 19:44:07 +0530 Hiren Dave [EMAIL PROTECTED]
wrote:

 I did this:
 [...]
 #iptables -A OUTPUT -m owner --uid-owner 0 -j ACCEPT
 #iptables -A OUTPUT -j DROP
 [...]
 Still other users including root can ping other PCs. Why is this not
 working?

please post the output of iptables -vnL. We're talking about users on
that PC, not those using it as a gateway/router/bridge/whatever,
correct?

 Also I have some diffulties understanding Connection Tracking(NEW,
 ESTABLISHED, RELATED, INVALID) concept.

Those are protocol dependant. I really think that those are well
described even in iptables man page. Basically, you'll want sth like
this:
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
and maybe the same for FORWARD. Of course, for FORWARD, you'll want to
match NEW,ESTABLISHED,RELATED for outgoing connections (well, or even
don't impose any restrictions for outgoing connections).

 Any practical guide available on internet for iptables???

Lots. That practical depends on the problem faced which you didn't
describe at all. So del.icio.us would be my first hint, Google follows:

http://del.icio.us/tag/netfilter
http://www.google.com/search?q=netfilter

(note that the concept is usually referred to as netfilter)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Sharing linux's internet connection with an iMac?

2006-03-27 Thread Hans-Werner Hilse
Hi,

On Mon, 27 Mar 2006 01:29:54 -0600 Boyd Stephen Smith Jr.
[EMAIL PROTECTED] wrote:

 Yes.  Set up a bridge device on the laptop between the wifi interface
 and the iMac interface; assuming your setup is as simple as I think,
 that should be all you need to do.

Most likely it wouldn't work because of the wlan link layer. Most WiFi
cards don't go well with bridging... So routing is the option which is
left.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Sharing linux's internet connection with an iMac?

2006-03-27 Thread Hans-Werner Hilse
Hi,

On Mon, 27 Mar 2006 18:23:24 +0200 Matthias Bethke
[EMAIL PROTECTED] wrote:

 on Monday, 2006-03-27 at 13:36:38, you wrote:
  Most likely it wouldn't work because of the wlan link layer. Most
  WiFi cards don't go well with bridging... So routing is the option
  which is left.
 
 The 802.11 link layer is almost exactly the same as in Ethernet so
 that should be a driver issue. Particularly the LLC part is completely
 compatible...I never actually tried the bridging though.

I should have been more verbose. 802.11 may be almost the same
regarding the logical link layer, but not the Media Access Control
layer. In fact, 802.11 has the DS bits in its headers and potentially
up to four relevant addresses for routing the packet (Receiver,
Transmitter, Source, Destination for our scenario). Bridging can in
fact work if the WiFi node in question can make use of these features.
However, most STA's cannot due to restrictions in their firmware. IIRC,
that's basically the difference between STA/AP firmware versions. By
definition, this is an AP function (see 802.11 standard, 1999, pg.
37ff.), WDS (Wireless Distribution Service). As it isn't relevant for
hardware design, I tend to agree that it is a driver problem,
although not quite like usual driver problems...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] OT: awk scripting

2006-03-24 Thread Hans-Werner Hilse
Hi,

On Fri, 24 Mar 2006 14:34:22 +0100 (CET) Sascha Lucas
[EMAIL PROTECTED] wrote:

 I want the awk analogon for cut -f2-, which prints fields #2 to #n.
 Is this possible?
 
 awk '{print $2???}'

I'd do the following:

awk '{$1=;print $0}'

(awk recalculates $0 when $n is modified)
This still leaves you with one OFS starting the line (between $1 and
$2), you can get rid of this using

awk '{$1=;print substr($0,lenght(OFS))}'


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] OT: awk scripting

2006-03-24 Thread Hans-Werner Hilse
Hi,

On Fri, 24 Mar 2006 16:15:09 +0100 (CET) Sascha Lucas
[EMAIL PROTECTED] wrote:

 On Fri, 24 Mar 2006, Hans-Werner Hilse wrote:
  awk '{$1=;print $0}'
 
  (awk recalculates $0 when $n is modified)
  This still leaves you with one OFS starting the line (between $1 and
  $2), you can get rid of this using
 
  awk '{$1=;print substr($0,lenght(OFS))}'
 
 thanks. the function lenght seems not defined. but substr($0,2) works.

That was a typo. Should of course be length.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] OT: awk scripting

2006-03-24 Thread Hans-Werner Hilse
Hi,

On Fri, 24 Mar 2006 08:49:22 -0600 Boyd Stephen Smith Jr.
[EMAIL PROTECTED] wrote:

 On Friday 24 March 2006 07:34, Sascha Lucas 
 [EMAIL PROTECTED] wrote about '[gentoo-user] OT:
 awk scripting':
  I want the awk analogon for cut -f2-, which prints fields #2 to
  #n. Is this possible?
 
 I think:
 awk '{shift; shift; print $0}'

Sad, but true: There's no shift in awk.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] sudo echo

2006-03-23 Thread Hans-Werner Hilse
Hi,

On Thu, 23 Mar 2006 16:03:08 -0500
JimD [EMAIL PROTECTED] wrote:

 I have been using Linux for a number of years and the one trick I
 have never read how to do is something like:
 
 sudo echo app-portage/porthole ~*  /etc/portage/package.keywords

That's because your _current_ shell interprets the . What you want
can be done with

sudo sh -c 'echo app-portage/porthole ~*  /etc/portage/package.keywords'

 Another one I always wanted to know if it is possible is:
 
 sudo  /var/log/foo.log

I guess you want to use

... | sudo sh -c 'cat  /var/log/foo.log'

You can create a short script that does both (nice idea, I currently wrote
them for me, too...):

---:suappend:---
#!/bin/sh
exec sudo sh -c cat  \$1\
---snip---

and you can do:

echo blah | suappend /var/log/blah.log

etc.pp.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] NIC works fine with Gentoo Live CD, not so good without.

2006-03-20 Thread Hans-Werner Hilse
Hi,

On Mon, 20 Mar 2006 15:49:23 -0500
Jeff [EMAIL PROTECTED] wrote:

 And the driver:
 
 8139too 28992 0
 
 Now then... as of 2 days ago, I've been noticing that my ethernet has
 been acting really whacky, with random ping times and flaky web surfing.

Did you try playing with 8139too's kernel setup, esp. regarding MMIO
vs. PIO?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Disk Partitioning

2006-03-16 Thread Hans-Werner Hilse
Hi,

On Thu, 16 Mar 2006 10:50:10 + Paul Stear [EMAIL PROTECTED]
wrote:

 My problem now is that when I plug the disk in (it's am external USB
 disk) I get 2 icons on my kde desktop both saying 200G Media one
 is /dev/sda and the other /dev/sda1 but of course I only have 1 200G
 disk.

Probably there are still the filesystem magic bytes written in the boot
sector (first 512 bytes). I think overwriting them should do the trick,
but I'd like a second opinion on this, before I advice you to do
dd if=/dev/zero of=/dev/sda bs=512 count=1 (but if there isn't any
data on that drive, then go and try this...)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Port Tracer Program Needed

2006-03-14 Thread Hans-Werner Hilse
Hi,

On Tue, 14 Mar 2006 10:03:24 -0500 Timothy A. Holmes
[EMAIL PROTECTED] wrote:

 I am getting ready to start a project here in the building to map the
 physical infrastructure of our network (its been assembled kinda willy
 nilly over the last 8 years or so).  I am looking for a program to run
 on my laptop that I can plug into a wall plate and it will cause the
 port activity lights on the switch to blink distinctly so that I can
 begin tracing plugs to ports.  Due to budgetary constraints, open
 source / freeware is very very preferable.

Not sure about distinctly (that will certainly depend on the switch's
electronic and programmatic design), but - tada - you can usually cause
the traffic light on the switch to blink with network traffic ;-)

So broadcasting some UDP packages out into the wild should be
sufficient. Use e.g. netcat. OTOH, you might want to play with ethtool
and switch connection rates for short intervals. Usually switches have
a light indicator for the speed, too, so that should be easier to
distinct on a busy switch. Toggle this in a shell loop with a few
sleeps inserted...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] wget won't concatenate(?)

2006-03-13 Thread Hans-Werner Hilse
Hi,

On Mon, 13 Mar 2006 09:38:06 -0800 (PST) maxim wexler
[EMAIL PROTECTED] wrote:

 I tried wget'ing this on dialup: 
 ftp://distro.ibiblio.org/pub/linux/distributions/gentoo/releases/x86/2006.0/livecd/livecd-i686-installer-2006.0.iso
 
 Then, because I needed to use the phone, after
 downloading 150Megs or so, I ctrl-C'd outta there
 thinking I could pick up where I left off. Wrong!
 
 wget wants to start from the beginning. I gave it the
 -nc option and it reports 'already there, not
 retrieving'. 

Did you actually bother to read what -nc does? In fact I think you
were searching -c option...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Passing env variable to ssh?

2006-03-13 Thread Hans-Werner Hilse
Hi,

On Mon, 13 Mar 2006 20:14:33 + (WET)
Jorge Almeida [EMAIL PROTECTED] wrote:

 I want something like this:
 myvar=whatever ssh [EMAIL PROTECTED] ./bin/mycommand $myvar
 [...]
 This does not work, because remotebox doesn't know about $myvar. Of
 course, if I could pass a variable to remotebox, the line might be just
 command=~/bin/mycommand public-key
 and the ssh command would be
 myvar=whatever ssh [EMAIL PROTECTED] ./bin/mycommand
 (the program itself would use the value of $myvar)

Hm, I think you're making it unnecessary complex. What's wrong with
just piping it on stdin? I.e.:

local$ echo whatever | ssh [EMAIL PROTECTED] ./bin/mycommand
and in ./bin/mycommand:
---
#!/bin/sh
read myvar
# do whatever
---

Or do you in fact use a pseudo tty on remote side for interactive mode
(which would make this a little more difficult)?

If you want to keep your way of doing it, I just have a few hints, but
didn't test anything, just looked them up out of curiosity:
- read man sshd_config, item AcceptEnv, PermitUserEnvironment
- read man sshd, section LOGIN PROCESS

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Apache (paths not showing in url)

2006-03-12 Thread Hans-Werner Hilse
Hi,

On Sun, 12 Mar 2006 07:20:38 -0500
Tito Valentin [EMAIL PROTECTED] wrote:

 Does anyone know why when I go to my website and click on the links 
 within my site the url still stays the same?  For example:  if I go to 
 www.my_web_site.com and click on the link messages within my site, the 
 url is still www.my_web_site.com rather than 
 www.my_web_site.com/phpbb/messages

that happens if frames are being used. Do you use frames? It's most
probably NOT due to apache. I've seen this with some free domain
providers, they only open your page in a static frameset (that cares
for displaying some ads, too).

What's showing if you chose show page source in your browser? A
frameset or your page?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: how to track this down (emerge of amaya)

2006-03-11 Thread Hans-Werner Hilse
Hi,

On Fri, 10 Mar 2006 12:01:04 -0600
Harry Putnam [EMAIL PROTECTED] wrote:

 What did you do about Mesa? Just leave it out.  I see the Mesa libs
 are masked even though I'm running ~x86 enabled in /etc/make.conf

Oooh, yeah, i actually left out that part. First, I emerged wxGTK with
opengl USE-flag set (among X and unicode).

I think compiling amaya went fine then until the final linking run. It
even compiled wxGTK and I had some strong feeling that there was an
error. I fixed the gcc linking run by removing references to the
amaya-wxGTK and substituted dynamic linking to the wxGTK installed via
portage. Too bad I didn't remember to turn screen's logging on when I
did that...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] how to track this down (emerge of amaya)

2006-03-10 Thread Hans-Werner Hilse
Hi,

On Thu, 09 Mar 2006 17:49:28 -0600 Harry Putnam [EMAIL PROTECTED]
wrote:

 Attempting to emerge www-client/amaya
 The tail end of emerge shows:
 
 i686-pc-linux-gnu-g++: ../redland/raptor/.libs/libraptor.a: No such
 file or directory make[1]: *** [../bin/amaya] Error 1
 make[1]: Leaving directory
 `/var/tmp/portage/amaya-8.7/work/Amaya/LINUX-ELF/amaya' make: ***
 [amaya_prog] Error 2
 
 !!! ERROR: www-client/amaya-8.7 failed.
 
 media-libs/raptor is installed.
 
 How to track this down?

The ebuild needs a fix, or even better: upstream needs to be fixed.
It's mentioned in bugzilla already (gentoo bugzilla, that is).

I helped myself by compiling manually. The same problem occurs, but you
can simply change the directory to Amaya/WX/redland/raptor, type
make, return to Amaya/WX/amaya and continue building with another
make. This would also give you a more current version of amaya, the
one in portage is a little bit older.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Terminal formatting and colors escape sequences

2006-03-02 Thread Hans-Werner Hilse
Hi,

On Thu, 2 Mar 2006 14:49:49 +0100 Bo Andresen [EMAIL PROTECTED]
wrote:

 I wish to be able to run a program (eix-sync/diff-eix) in cron that
 prints colors (with use of --force-color) and then send that colored
 output as a mail. In order to get colors in a mail a have to use
 html. If there exist a program that is capable of converting escape
 sequences used for formatting and coloring an xterm to html I would
 love to know about it. 

I'd say, the Perl module HTML::FromANSI should do what you want
(available from cpan). It brings a script, ansi2html, that provides
access from the command line. Note that you might have to play with the
TERM environment variable.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Help with backup script

2006-03-02 Thread Hans-Werner Hilse
Hi,

On Thu, 2 Mar 2006 14:58:33 + Paul [EMAIL PROTECTED] wrote:

 On Thursday 02 Mar 2006 14:37, John Jolet wrote:
  On Mar 2, 2006, at 8:23 AM, Paul wrote:
   On Thursday 02 Mar 2006 12:49, John Jolet wrote:
   snip
  
  
 Thanks for all your help  --  I now have it working, it appears that
 the line didn't like the space between DISK and 2. I created another
 share (with no spaces and it worked)

I didn't notice this thread and the last answers earlier, therefore I
didn't react, but of course, spaces on command line must be escaped if
not meant to separate arguments. i.e., both of the following should
have worked, too:

 mount -t smbfs //lkg5f.homenet.com/DISK\ 2 /mnt/someplace
 mount -t smbfs //lkg5f.homenet.com/DISK 2 /mnt/someplace

(of course, you can use ' - single apostrophe - instead of  here.)


-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Writing to a 256MB Rom

2006-03-01 Thread Hans-Werner Hilse
Hi,

On Wed, 1 Mar 2006 16:16:33 -0500
Ryan Holt [EMAIL PROTECTED] wrote:

 Is there any difference between ROM and NVRam?

Yes, of course. RAM is random-access-memory and in the case of DRAMs
pretty volatile when not powered :-)

If you have 256MB of NVRam to install an OS on it, the relevant
question is: Is this accessible via some controller or emulation as a
block device? That question can only be answered if you get more
specific regarding that NVRAM...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] XFig Export

2006-02-28 Thread Hans-Werner Hilse
Hi,

On Tue, 28 Feb 2006 00:25:25 -0500 Justin Hart [EMAIL PROTECTED]
wrote:

 I'm using xfig for figures for a paper that I am writing.  When I hit
 the export menu option, it crashes.  Inconvenient, since I need to get
 this into a format acceptable to latex (is there a package for .fig
 files?)

AFAIK, Xfig calls transfig for this. Maybe you could try to run it
manually?

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] accelerate emerge

2006-02-27 Thread Hans-Werner Hilse
Hi,

On Mon, 27 Feb 2006 17:05:39 +0100 Alexander Skwar
[EMAIL PROTECTED] wrote:

 Why should prozilla or some other tool make the
 download be faster? When I download something with
 wget, or watch emerge invoking wget, it's always
 maxing out the saturation of the line.

On my 1Gig line on my workstation at work it's usually _not_ saturizing
the line. But I decided that it's not very polite to use a parallel
fetching tool under these circumstances...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] traffic shaping

2006-02-23 Thread Hans-Werner Hilse
Hi,

On Wed, 22 Feb 2006 19:16:35 +0200
Uwe Thiem [EMAIL PROTECTED] wrote:

 It happens as soon as I enter any one of the following lines:
 
 tc filter add dev eth2 parent 1: prio 2 handle 1 fw flowid 1:20
 [...]
 I then get the error message:
 RTNETLINK answers: Invalid argument
 We have an error talking to the kernel
 
 Prior experience suggests that a module is missing or not loaded. The 
 question 
 is: Which one? Or am I completely wrong in my assumption?

Did you compile QoS and/or fair queuing support into the kernel
(i.e., not the traffic shaping device which is in the device
section)? It should then load modules automatically (well, if
configured in the kernel, that is).

Hm, and you _did_ set up the qdiscs and classes first? OTOH, and I
don't know for sure if that's needed before configuring the filters.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] /usr as noexec? (was GB for / partition flamewar)

2006-02-18 Thread Hans-Werner Hilse
Hi,

On Sat, 18 Feb 2006 18:51:21 +0100
Maarten [EMAIL PROTECTED] wrote:

 Back to the thread... I started wondering about something. I thought a
 100% full root filesystem was deadly, but never thought about /tmp.
 So I'd like to ask, what is more deadly for a system, a full root FS, a
 full /tmp or a full /var ?  Why ?
 And as a bonus question: which one is worse during boot, and which one
 is worse on a fully booted and running system ?

/tmp shouldn't matter. full/read-only /var will disturb the gentoo rc
scripts. When running, programs/daemons may act funny when they can't
cope with the situation of full disks (e.g., PHP can't create session
files anymore). You can't expect logging to work, too.

Full/unwritable /etc may disturb some maintenance scripts, mount can't
update /etc/mtab.

Generally, nothing will prevent the kernel from booting and running any
exec that's still readable. So even with full disks, e.g.
init=/bin/bash in kernel command line will give a root shell and let
you fix things (after remounting the relevant partitions read-write).

So on a running system, /var and /tmp are the important trees that are
expected to be writable. This should be the same for the gentoo rc
scripts, but not the kernel bootup.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: X without console log window?

2006-02-16 Thread Hans-Werner Hilse
Hi,

On Wed, 15 Feb 2006 20:20:49 +
Mick [EMAIL PROTECTED] wrote:

  I don't have currently syslog-ng running, but I think I remember that
  similar configuration was in /etc/syslog-ng/syslog-ng.conf (maybe
  commented out?)
 
 Yes, it was commented out as the default setting is to send everything to
 tty12:
 
 # By default messages are logged to tty12...
 #destination console_all { file(/dev/tty12); };
 # ...if you intend to use /dev/console for programs like xconsole
 # you can comment out the destination line above that references /dev/tty12
 # and uncomment the line below.
 destination console_all { file(/dev/console); };
 
 So, now I've uncommented it but every single message is shown not only in
 xconsole (which is fine), but in tty1 as well.  The latter makes the boot
 up messages look very messy indeed.

What a confusion. I use debian here which seems to be configured
differently. But read below...

 I don't know if I am asking too much here, but is there a way to:
 1. Continue with all messages shown in tty12 as per default syslog-ng
 configuration.
 2. Also show all/some messages to xconsole.
 3. Do not pipe everything to console during/after boot - the default
 messages there are adequate for my liking.
 
 Perhaps I am a bit confused: what is the relationship between /dev/console
 and xconsole?

Ah, the xconsole program man page explains it: By default, xconsole
reads from /dev/console. I didn't knew that.

What you want to archieve is more like the solution debian uses. I'll
post it here but I haven't tried it out so I cannot promise that it
works:

syslog-ng.conf:
---snip---
destination xconsole { pipe(/dev/xconsole); };
destination terminal { file(/dev/tty12); };
log { source(src); destination(xconsole); }
log { source(src); destination(terminal); }
---snip---

/etc/X11/xdm/Xsetup_0:
---snip---
xconsole -geometry 480x130-0-0 -daemon -notify -verbose -fn fixed -exitOnFail 
-file /dev/xconsole
---snip---

That should do what you want to archieve.
Nice alternative to xconsole is root-tail...

-hwh

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] is iptables needed on a Bridge

2006-02-14 Thread Hans-Werner Hilse
Hi,

On Tue, 14 Feb 2006 05:43:33 -0600
Boyd Stephen Smith Jr. [EMAIL PROTECTED] wrote:

 On Tuesday 14 February 2006 03:31, Ow Mun Heng [EMAIL PROTECTED] wrote 
 about 'Re: [gentoo-user] is iptables needed on a Bridge':
  [...]

 If you /do/ want to do packet filtering on br0, I belive you can with 
 iptables.  A rule with in the filter table on the FORWARDING chain with -i 
 br0 -o br0 should match.  You could also do some logging this way.

Nah, bridging is ethernet layer, not IP layer. So it will work using
ebtables, not iptables.

OTOH, when building a bridge, it usually doesn't make much sense to set
up lots of rules for security's sake, but rather in order to reduce
chattiness between the bridged networks (one may want to filter
broadcasts and other noisy stuff).

  I also wanted to know if there's a need for iptables, mainly for
  security. But since there isnt' an ip addressed to br0, I would presume
  that it is safe, but I thought I'll check here 1st.
 
 I really can't answer the safety issue.  From my understanding packets 
 coming in br0 and be delivered locally, even when br0 doesn't have an IP 
 address (and similarly with sending packets out br0) so I don't think not 
 having an IP address really buys you any safety.

It certainly does, but OTOH, the OP wrote he'll set up a third ethernet
adapter for connecting to the bridging machine, so iptables may make
sense on that interface.

The FORWARD chain of iptables is only for forwarding IP packets (heh,
it's obvious, isn't it? :-), i.e. when building a router. Well, I think
it should be possible to redirect bridged packets to the local host in
order to let them go through routing, but this seems to be a little
cludgy, because the same thing probably can be archieved by using
proxy_arp in the first place, which would save us from using
promiscuous mode...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] X without console log window?

2006-02-13 Thread Hans-Werner Hilse
Hi,

On Mon, 13 Feb 2006 11:24:25 -
Michael Kintzios [EMAIL PROTECTED] wrote:

   On Fri, 10 Feb 2006 19:08:25 -0200
   Urs Schuetz [EMAIL PROTECTED] wrote:
   
Everytime when I startup my computer, in X apears a minimized
Console Log window icon.
[...]
 
 What's the purpose of this window?  What is it meant to log - as far as
 I can tell it just stays empty . . .

That depends. It usually just outputs what is piped into /dev/xconsole.
If nothing is piped in there, it won't display anything. But in most
cases the syslog daemon is configured to output some message classes,
if not all, to this device as well (additional to outputting to the log
file and /dev/console). So it depends on syslog configuration whether
syslog messages show up here. Other programs w/ the corresponding
rights on /dev/xconsole can pipe their stuff there, too, of course.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] X without console log window?

2006-02-13 Thread Hans-Werner Hilse
Hi,

On Mon, 13 Feb 2006 14:23:20 -
Michael Kintzios [EMAIL PROTECTED] wrote:

  That depends. It usually just outputs what is piped into 
  /dev/xconsole.
  [...]
 
 Would you mind showing a default/typical/custom (whatever) config file
 so that I can compare with mine?

No problem. But it's from a debian system... From /etc/syslog.conf:
---snip---
# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
# you must invoke `xconsole' with the `-file' option:
# 
#$ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
#  busy site..
#
daemon.*;mail.*;\
news.crit;news.err;news.notice;\
*.=debug;*.=info;\
*.=notice;*.=warn   |/dev/xconsole
---snip---

I don't have currently syslog-ng running, but I think I remember that
similar configuration was in /etc/syslog-ng/syslog-ng.conf (maybe
commented out?)

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] X without console log window?

2006-02-11 Thread Hans-Werner Hilse
Hi,

On Fri, 10 Feb 2006 19:08:25 -0200
Urs Schuetz [EMAIL PROTECTED] wrote:

 Everytime when I startup my computer, in X apears a minimized
 Console Log window icon.
 [...]
 I could not find the script ou option which starts this window.
 Where can I disable it? I don't even know what's the name of the
 executable for this window.

it's xconsole, AFAIK usually started by the default Xsession script
coming with xdm. configuration is in /etc/X11/xdm.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Getting udev to create tun devices

2006-02-07 Thread Hans-Werner Hilse
Hi,

On Tue, 7 Feb 2006 19:48:49 +0700
Robin Atwood [EMAIL PROTECTED] wrote:

 I need a device /dev/net/tun to use with hercules. tun is defined in the 
 kernel and the traditional mknode method works fine but I loose it after a 
 reboot.

That's pretty normal. I think the application using the tun device is
supposed to create them by issueing a few (?) syscalls. FYI, openvpn
can do this and can create persistent tun-Sockets. you may want to
emerge openvpn and enter the following in /etc/conf.d/local.start:
---snip
openvpn --mktun --dev tun0
---snip
Udev should then take care of creating the device.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] USE flags - Why use ntpl/ntplonly in make.conf?

2006-02-03 Thread Hans-Werner Hilse
Hi,

On Thu, 02 Feb 2006 15:40:39 -0500
fire-eyes [EMAIL PROTECTED] wrote:

 Myself I tried ntpl (and also ntplonly at someones suggestion). It is
 supposed to offer better thread support, especially if you have an SMP
 or dual core system. I have an SMP system.

It's just more lightweight by using (more) kernel mechanisms. It
leverages the binding between threads and processes. This of course
means that one can only profit if one uses multithreading apps.

 Maybe it was just for me, but this turned into a total disaster. I later
 found that it was due to setting ntplonly, which apparently disables
 old, non-ntpl support entirely. Which is very very bad for apps that
 don't yet support ntpl, or something like that.

Well, it's bad for apps that weren't compiled with nptl support.
Usually, there's not much that keeps an app utilizing the old
linuxthreads from using NPTL instead. But due to this being part of
glibc, it obviously doesn't work for programs linked statically or
against an older glibc.

 My suggestion is to talk to gentoo devs, and decide for yourself if you
 think it's worth it. And by all means stay away from ntplonly.

I'm doing fine with nptlonly for some years now. (not *that* many
years, of course :-)

 Today my system is ntpl (without ntplonly), on an SMP system, and I
 don't notice any improvement at ALL. Which is VERY annoying considering
 the complete insanity I went through for about a week.

Well, maybe you aren't using multithreaded apps? Or the threading
overhead is neglegible? For me it makes a huge difference on my
pentium-200mmx (yes...) running VDR (my mediacenter-box), which is
heavily threaded. All other apps I'm using don't use threads (in fact,
some do but arre using more high-level threading implementations aside
from linuxthreads and NPTL). Lots of apps I'm using are still just
forking processes and talking via IPC.

 Yes, I know only some apps support ntpl, but the impression given to me
 was that it would speed up the whole system. Which is certainly not true.

OK, but that was a too high expectation. It's never been advertised as
high-performance general tool. And since you knew there are only some
apps making profit of threads, you should have known that the effect
was likely to be small.

I can recommend NPTL for situations where threading really matters. And
it only speeds threading, so whether using it or not is a matter of
analyzing your application landscape...

BTW, I don't suggest switching to NPTL either. If one starts a new
Gentoo installation, I think it would be a good idea to use NPTL right
from the start (and even try nptlonly). Switching from linuxthreads to
nptlonly brings some risks mentioned above. So a emerge -e world may
be a good idea in the case one goes down that road.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Improving SpamAssassin's accuracy...

2006-01-15 Thread Hans-Werner Hilse
Hi,

On Sun, 15 Jan 2006 03:08:38 +
Stroller [EMAIL PROTECTED] wrote:

 I emerged SpamAssasin on a mailserver the other day, added the  
 appropriate line to /etc/postfix/master.cf  and it all seems to be  
 working ok. But it doesn't seem to be very accurate in the default  
 configuration - I have a mailbox with about 4,000 messages,  
 approximately 98% of which are spam and it gets only about 1/3 of  
 them. The statement in `perldoc Mail::SpamAssassin::Conf`that 5.0 is  
 the default setting, is quite aggressive does not seem true here.

I'd strongly suggest using the Bayesian filters, per-user, that is. For
a mail setup at my company for about 20 people with high mail traffic
I'm running a nightly cron job to archieve that.

Basically it works like this:
- All incoming mail is scanned by Spamassassin, Bayes enabled
- Users have virtual homedirs for Spamassassin
- A nightly cron job learns all mail in users' INBOX.Spam.LearnSpam and
  INBOX.Spam.LearnHam folders (it's a simple shell script)

That way all users can put mails they'd like to be learned as being
spam in the respective IMAP folder and have them automatically learned
overnight. Simple setup, highly effective, simple for my users.

In order to give more hints to setup this, it would be helpful to know
which mail storage is being used (IMAP? What server? What storage?).

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Improving SpamAssassin's accuracy...

2006-01-15 Thread Hans-Werner Hilse
Hi,

On Sun, 15 Jan 2006 14:07:51 +
Stroller [EMAIL PROTECTED] wrote:

 On 15 Jan 2006, at 12:56, Hans-Werner Hilse wrote:
 
  I'd strongly suggest using the Bayesian filters, per-user, that is...
  [...]
 
 What improvement rate are you seeing for this, please?

About 99% of _Spam_ mails are positively recognized. Up to now I've
never encountered a false positive.

 My concern with these particular users, who are not particularly  
 email-savvy, is that they ain't going to train the filters. I just  
 don't see it happening. And if I teach them to train the filters by  
 dragging  dropping into the learn folder then I anticipate perhaps  
 just one of them complaining but why can't I just right-click it and  
 `mark as junk' in Outlook?.

True. My answer is: because then you'll get all the spam in your
webmail when being on business trip :-) Basically, I teach them to use
server-side mail filtering with the same reasoning.

But it makes me think: Does Outlook set some kind of flag to the mail?
Does it note anything in the headers?

 I'd really prefer all spam-filtering to be invisible to the user. I  
 don't demand a high success rate: Bayesian filtering should get 99.5%  
 or above, I think, but I'd be happy with 95%.

In fact, lots of my users are happy with about that rate and without
learning of Spam. Bayesian filters are activated for all of them, but
they are only trained by autolearning.

 SpamAssassin is currently getting about 33%, which is next to useless.

agreed, and I bet you can improve that. You can also decide to have all
users share your Bayesian database. So you don't have to teach them to
learn Spam.

 IMAP server is Dovecot storing messages in maildirs in users' home  
 directories - this makes it convenient for your suggestion, but I  
 just don't really want to go there.

You can, as described, reduce the concept at many points...

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] SIOCADDRT: No such device

2005-12-21 Thread Hans-Werner Hilse
Hi,

On Wed, 21 Dec 2005 21:50:05 +0200
Ryan Viljoen [EMAIL PROTECTED] wrote:

 -  *   Adding routes
 -  * default ...
 -  * via ...
 - gw: Unknown host
 -  * 192.168.4.1 ...

Your /etc/conf.d/net is broken in this regard. Read the example
(net.example) for correct syntax. It's probably using /sbin/ip, thus
different syntax from /sbin/route.

 Okay I tried the following:
 
 - ziig conf.d # route add 192.168.4.1
 - SIOCADDRT: No such device

Well, you should tell where you want your route going to...

 This however did not give an error:
 
 - ziig conf.d # route add 192.168.4.1 gw 192.168.4.1

But should not be needed as 192.168.0.0/255.255.255.0 should
automatically route through dev eth0 after ifconfig.

Hint: What you maybe want to issue is route add default gw
192.168.4.1 or ip route add default via 192.168.4.1? This should
route all non-local traffic through that machine.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] data base program

2005-12-20 Thread Hans-Werner Hilse
Hi,

On Tue, 20 Dec 2005 13:45:19 +0100
capsel [EMAIL PROTECTED] wrote:

 OpenBase is part of OpenOffice... and is really slow on my laptop.

OK, please don't try to enforce your own name... it's OpenOffice Base,
not OpenBase, as you've been told...

 Do you know any replacement of OpenOffice for my laptop ? :)

koffice, probably. Or a combination of gnumeric/abiword, possibly.

 BTW. Is there a tool to convert mysql (and possible other) databases
 to and from ms-access *.mdb's  ?

There's an ODBC connector for MySQL, yes. You can use mysql tables in
MS Access this way.

-hwh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Fetchmail

2005-12-13 Thread Hans-Werner Hilse
Hi,

 I run fetchmail to poll 3 servers every minute... and while this has
 worked fine for weeks, last night it froze at 2am and stopped polling.
 When I killed the fetchmail process and ran fetchmail again this
 afternoon, things jumped to life again and appear back to normal... but
 I wished I didn't have to make the manual intervention.  Fetchmail is
 version 6.2.5.2+RPA+NTLM+SDPS+SSL+INET6+NLS from portage and has the
 following in ~/.fetchmailrc
 [...]
 --
 Can anyone tell me why this happened?

Hard to say. There's no evidence in the cited log. I think you may want to
increase verbosity of the logs... Hm, and next time don't just kill the
running instance but check what it's actually doing using strace and
ltrace (or even a debugger, but this won't help much if debug symbols are
stripped...). You've compiled in a lot of auth mechs, so it may well be
due to a related library (hence I suggested ltrace, too).

-hwh

-- 
gentoo-user@gentoo.org mailing list



<    1   2   3   4   5   >