Re: Making Debian ignore a drive

2007-04-11 Thread Kenneth E. Lussier
On Tue, 2007-04-10 at 22:18 -0400, Paul Lussier wrote:
> 
> Will you please set you mail client to wrap at 78ish characters?  All
> you e-mail comes through as one long line.
> 

Sorry about that. I was using Comcast's webmail client. I didn't know it
didn't wrap lines

> IPMI can usually be disabled in the BIOS.  If FC5 installs "correctly"
> you might want to see how they're figuring it out, or ask on the FC
> forums/mailinglists, etc.

I don't want to disable IPMI. I need IPMI to continue to work. I just
need the Debian installer to ignore any drive that isn't directly on the
SCSI bus. I'll ask around on the FC lists and see if they can shed some
light on it.

> I think I have some system with IPMI capability at work, I'll try to
> remember to look at this tomorrow.  I know none of them have the USB
> thingy installed by default though.  Btw, what kind of system is this?
> Name brand, like Dell or HP, or something else? Have you asked the
> official hw support channels for help?

The servers are Intel Langley NEBS compliant carrier servers. The HW
vendor is pretty much useless outside of the hardware. I may just have
to continue to re-configure GRUB after the install. It seems like Debian
is being too thorough. It sees hardware that others just ignore. 

Thanks,
Kenny


___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: DNS Recursion

2005-09-15 Thread Kenneth E. Lussier
On Wed, 2005-09-14 at 21:22 -0400, Benjamin Scott wrote:
> 
>If I understand you correctly:

You did.


>"allow-recursion" is not the best choice for this.  In the above, BIND 
> will 
> still attempt to answer queries, it just won't perform recursion to do so. 
> In particular, the cache is still available.  See problem statement, above.

Interesting.. I have apparently mis-understood the allow-recursion
option for many years. 


>That should do it, I believe.
> 

That did it. It does exactly what I want the way I wanted it. 

>References:
> 
> Secure BIND Template
> http://www.cymru.com/Documents/secure-bind-template.html

This is a really good read (so far, I haven't finished it yet) for
anyone that is interested. 

> BIND Administrator Reference Manual
> (included in BIND distribution)

Yeah, read that. Got a headache. :-)

Thanks,
Kenny


signature.asc
Description: This is a digitally signed message part


DNS Recursion

2005-09-14 Thread Kenneth E. Lussier
Hi All,

I'm using BIND8 (8.4.6) as an external name server. I want to also use
it as the name server for my external boxes. However, I can't seem to
get recursion to work correctly. 

If I use `allow-recursion {none; };` then dns lookups for my local zones
works fine, but the external boxes can't use it to look up other
domains. 

If I use `allow-recursion { any; };` then anyone can use it as a DNS
server.

I tried `allow-recursion { x.x.x.x; };` (x.x.x.x = external NAT IP
address), but the query was denied with:
named[2692]: denied recursion for query from [x.x.x.x].24684 for
www.google.com IN

I have also tried setting up acl external {}; with the ip addresses of
the external hosts and using `allow-recursion { external; };`. This is
also denied.

Is recursion an all or nothing option? I thought that it could take acl
options. Any thoughts?

Thanks,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Stupid bash scripting question

2005-08-24 Thread Kenneth E. Lussier
On Wed, 2005-08-24 at 10:32 -0400, Cole Tuininga wrote:
> I've received two different responses to this request - both of which
> seem to work just fine.  My thanks to those who responded.  I'm a little
> curious if one solution has any advantages over the other:
> 
> Solution 1:
> 
> user="username"
> f=`eval "echo ~${user}"`
> 
> 
> Solution 2:
> 
> user="username"
> f=`getent passwd $user|cut -f6 -d:`
> 
> 
> It seems that either will do the job, I'm just wondering (for the
> purpose of my own "betterment" and improved knowledge of shell scripting
> *grin*) about advantages of either approach.  The only one I've come
> with so far is that Solution 2 requires a separate process to run.

The first method is less typing :-)

-- 
Kenneth E. Lussier 
Sentito Networks


signature.asc
Description: This is a digitally signed message part


Laptop Suggestions

2005-08-24 Thread Kenneth E. Lussier
Howdy all,

I'm looking for an extremely Linux-friendly laptop to set up as a
traveling demo system. The laptop has to have a wireless card, as I will
need it to run in ad-hoc mode so that it can act as a wireless AP for
other devices.

The system is going to serve DHCP and tftp to wireless devices and act
as their central point. 

All suggestions are welcome. I'm currently looking at
http://www.emperorlinux.com for pre-installed linux laptops, but if a
thinkpad/dell/gateway/whatever is best, then that's what I'll go with 


TIA,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: system excercising/burn-in tests?

2005-08-17 Thread Kenneth E. Lussier
VA used to have a burn-in suite called Cerbeus (i think), that they used
to test their systems (when they were a hardware company). They had
released it on Sourceforge, I believe.

FYI,
Kenny

On Wed, 2005-08-17 at 11:46 -0400, Paul Lussier wrote:
> Hi all,
> 
> Does anyone here have any experience with creating system burn-in
> suites?  Our vendor does a very rudimentary burn it (if it doesn't
> burst into flames on it's own while sitting in the 100-degree+
> warehouse on a shelf, it must be okay), and is puts the onus on it's
> customers to provide them with a burn-in test to be run (all for
> small, per-system fee, I'm sure :)
> 
> So, now I'm looking to come up with a burn-in suite.  My initial
> thoughts were starting with a knoppix-like CD and hacking that to run
> various utilities, however, I'm not even sure what utilities would be
> good to run.
> 
> We basically want to stress-test all components and busses.
> Especially the drives.  We're not doing performance testing at this
> stage, however...
> 
> Any ideas?
> 
> Thanks,



signature.asc
Description: This is a digitally signed message part


Re: Asterisk question

2005-07-14 Thread Kenneth E. Lussier
On Thu, 2005-07-14 at 14:48 -0400, Ed Robbins wrote:
> 

> > Just tried it, same result. Odd, but I didn't see your registration in my 
> > log.
> > 
> 
> Tells me it's probably in your X-lite setup up.  I'm always finding 
> problems with this when our sales guys try to set it up.

I have found that with X-Lite a minimalistic approach is best:

Enable the Default proxy
Set Display Name
Set Username
Set Password
Set Domain/Realm
Set Sip Proxy

I let Asterisk handle the rest. When I have tried to set it up to do
everything that the Cisco phones do, it never works. 


signature.asc
Description: This is a digitally signed message part


Re: Asterisk question

2005-07-14 Thread Kenneth E. Lussier
On Thu, 2005-07-14 at 18:45 -0400, Travis Roy wrote:
> > what does your sip.conf look like?

> [general]
> 
> port = 5060   ; Port to bind to (SIP is 5060)
> bindaddr = 0.0.0.0; Address to bind to (all addresses on machine)
> disallow=all
> allow=ulaw
> allow=alaw
> context = from-sip-external ; Send unknown SIP callers to this context
> callerid = Unknown
> 
> #include sip_nat.conf
> #include sip_custom.conf
> #include sip_additional.conf

What do the include files have? I don't see an entry here for any sip
users. Looking at the registration attempt, the server is issuing a
challenge and it's rejecting your client response (the 403 message at
the end). So, that means that the server doesn't like your username or
password. 

X-Lite is a little bit of a pain. Make sure that in the proxy settings
you are entering 200 in the username field, not the "Authorization User"
field. Also, IIRC, you need to put the address of the sip proxy in for
both "Domain/Realm" and "Sip Proxy".


signature.asc
Description: This is a digitally signed message part


Re: Asterisk question

2005-07-14 Thread Kenneth E. Lussier
You need to configure your asterisk system to accept a registration
request from the softphone, and you need to configure the softphone to
register to the asterisk box. 

[EMAIL PROTECTED] I believe uses AMP. You need to configure an extension in
AMP (they use the extension as the username). In your softphone you need
to put the extension in as the authname or username (whatever the
softphone calls it) and the secret that you set on the server. You
should also be able to do it directly in the /etc/asterisk/sip.conf file
directly by doing something like:

[200]
type=friend
username=200
secret=somesecret
context=whatever context you want to put the extension in
callerid = Your Name Here <200>
host=dynamic
mailbox=200

FYI,
Kenny

On Thu, 2005-07-14 at 17:35 -0400, Travis Roy wrote:
> So I found [EMAIL PROTECTED] while doing some looking into VoIP stuff.
> 
> I set it up (very easy) but I'm having a problem.
> 
> I load up a softphone on my desktop and try to connect and I get this error:
> 
> Jul 14 12:41:10 NOTICE[1579]: Registration from 'Travis Roy
> ' failed for '69.84.130.55'
> 
> 200 is my extension.
> ___
> gnhlug-discuss mailing list
> gnhlug-discuss@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



signature.asc
Description: This is a digitally signed message part


Re: Fastest Growing Market Segment (was: linux jobs?)

2005-06-29 Thread Kenneth E. Lussier
On Sun, 2005-06-26 at 14:18 -0400, Jon maddog Hall wrote:
> I would like to discuss this with the group:
> 
> [EMAIL PROTECTED] said:
> > The trade rags are all stating that Linux as the fastest growing market
> > segment but
> 
> What I really see is that while Linux is eating into the commercial Unix,
> proprietary system space and staving off Microsoft servers a bit, it still
> is not expanding the over-all market that much, and in particular in the
> "first world" countries.

I think that disruptive technologies beget disruptive businesses. Linux,
being the disruptive technology in this particular case, has spawned
several businesses that are disruptive. For example, I talked to a
company not long ago that has a micro-payments system. They are an all
Linux shop with a product based on Linux. Micro-payments are disruptive
to the business model of the traditional credit card companies. Also,
Linux-based PBX's are disrupting the proprietary PBX vendor model. I see
Linux really digging itself in in the embeded world, too. You can now do
on Linux what you used to only be able to do on a proprietary $5k per
seat embeded development kit. 
  
> What I have seen and heard is that companies, particularly large companies
> that are profitable, are still squeezing their current employees to get more
> and more out of them.  This, combined with a certain amount of offshoring, 
> means
> that although the economy may be recovering in total, the IT industry may not
> experience that growth.

> Also, while Linux is growing, a lot of the systems administrators who used to
> do "Unix" are now doing "Linux" without much extra training or inconvenience.

What I have seen in this area is that employers that are large companies
are moving to Linux by utilizing the skills that their current IT
department already has. If they need to hire someone, they are hiring to
augment the current skill set. So, if they already have an IT department
that is highly skilled in Unix, then they go out looking to hire someone
that is skilled in everything *else* (i.e. Windows desktop support, DBA,
web development, and anything else that they can get). They don't want
to hire different people with different skills when one person with a
lot of skills is cheaper. Most of the sysadmin job postings that I see
aren't really sysadmin jobs, they are "do everything from desktop
support to developing our website to writing some new app for our sales
department". The term sysadmin has become diluted to the point where no
one really knows what a sysadmin is anymore.

> Finally, we are starting to see students from high school and college come out
> and enter into systems administration jobs at lower salaries than some of the
> greybeards (me included).

This is true because companies can pay them less because they have less
experience. "Professional" Linux experience was hard to come by for a
long time because most people weren't using Linux in their companies (at
least their companies either didn't know they were using it, or they
wouldn't admit to using it). So, kids coming out of college or high
school had as much "real-life" experience with Linux as the grey-beards,
but they were half the price. 
  
> I think the real growth opportunity is not in systems administration work, but
> in consultancy with a strong programming background and a specialty in
> integration work.  This eventually may lead to more system admin jobs, but
> over a much longer period of time.

I see systems administrators getting absorbed into development work a
lot these days. Software developers can write code, but they need
someone to build they system that the code is going to run on. I am also
seeing a lot of job listings (ain't Craig's List great? :-) for system
integrators and Linux consultants. Maybe the IT industry is headed
toward an outsourced solution back to the days of TAOS and CT where you
hired a "Sysadmin Company".

> Comments?

No. I don't really have anything to say :-)

C-Ya,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: [Pedantic RANT] Re: [HUMOR] End Times

2005-06-08 Thread Kenneth E. Lussier
Did you use a buzz-word generator for this, or did you just take the
subject lines from the list :-)

On Wed, 2005-06-08 at 12:59 -0400, Michael ODonnell wrote:
> 
> Get real.  Navarro's Muslim never new Nietzsche's
> Nazi-supporter, so Wikipedia's written worship of
> Hitler Youth allow an Air Alestair understatement.
> Anywhere basic archbishop assessment referred
> to articles, emergent DVD enlightenment ends,
> however hopelessly Hopkins insufficiency impressed.
> Otherwise, people just posted Pro publicly and read
> pedantic serious self-preservation.  As usual...
>  
> ___
> gnhlug-discuss mailing list
> gnhlug-discuss@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



signature.asc
Description: This is a digitally signed message part


[OT} IT Contracting Companies

2005-05-05 Thread Kenneth E. Lussier
Does anyone know of companies that specialize in either outsourced IT or
on-site IT contracting? I have found a few via Google, but I'm looking
for basically rent-a-sysadmin type of services. Any thoughts? To bring
it back on topic, Linux knowledge is an absolute must.

TIA,
Kenny 


signature.asc
Description: This is a digitally signed message part


Job Posting

2005-05-04 Thread Kenneth E. Lussier
If there are any contractors out there, you might be interested in this
job posting. I can't say why I know about it, or what company it is.
But, I just thought that I would pass it on.
http://boston.craigslist.org/sad/71457799.html

C-Ya,
Kenny



signature.asc
Description: This is a digitally signed message part


Debian Preseed

2005-04-22 Thread Kenneth E. Lussier
Does anyone have any experience with debian-installer or the preseed
installation method? I'm having some difficulty with the netcfg portion,
specifically. For some reason, if I don't preseed the netcfg questions,
it will try to configure the network via dhcp. When that fails (no dhcp
server in the lab), I can manually configure some network settings (ip
address, netmask, gateway, and dns), but not others (hostname and
domain). Hostname is automatically set to "debian" and the domain
portion is left blank. I'm trying to build a custom distro, and the user
really needs to be able to set their own hostname and domain. Any
pointers would be much appreciated.

TIA,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Debian Preseed

2005-04-22 Thread Kenneth E. Lussier
On Fri, 2005-04-22 at 12:24 -0400, Ed Lawson wrote:
> > Does anyone have any experience with debian-installer
> 
> some.
>
>  >Hostname is automatically set to "debian" and the domain
> > portion is left blank.
> 
> Why can't you simply type in the hostname and domain you want?
> 
> Every Debian install I have done has set the
> default hostname to debian, but you simply delete it and type in
> the name you need.  Same with domain name.
> 
> Are you saying you are unable to change the name?  

I'm never prompted for the hostname or domain. I can set them if I put

d-i netcfg/get_hostname string foo
d-i netcfg/get_domain   string bar.com

in my preseed.txt file, but the the hostname is set to "foo" and the
domain is "bar.com". If I leave the line blank after "string", then I'm
never prompted for them, and I get errors saying that "" is an invalid
hostname/domain. I also tried forcing the installation of etherconf as
part of the install using:

base-config base-config/late_command string apt-get install etherconf

but it installs without going through the configuration settings.
Presumably this is because base-config is still running and has control
over the display. 

> What installer are you using?

I'm using debian-installer and debian-cd to build the images.

Thanks,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: Debian Preseed

2005-04-22 Thread Kenneth E. Lussier
On Fri, 2005-04-22 at 15:56 -0400, Ed Lawson wrote:
> On Fri, 22 Apr 2005 13:33:20 -0400
> "Kenneth E. Lussier" <[EMAIL PROTECTED]> wrote:

> I have never used a preseed.txt file so am ignorant of that.
> However, if I understand you correctly, you can set hostname and
> domain in the pressed.txt file and it works.  If you leave the
> entries in that file with or without variables, then you will not
> be prompted.  So if you want to use your preseed file and be
> prompted, then you need to comment out the two d-i lines
> involved.

Been there, done that :-)
> > > What installer are you using?
> > 
> > I'm using debian-installer and debian-cd to build the images.
> 
> I apologize for not asking with the necessary precision.  Are you
> using the installer which has been developed for Sarge or are you
> using the installer which is used with Woody, the current stable
> release?  If the Sarge installer, I assume you are using the
> 110Meg installer and you have the RC3 version?  I have also
> assumed you are using a CD and not floppies.  Have i assumed
> incorrectly.

You assume correctly. I am using the Sarge/Sid installer RC3.

> My suggestion would be to go to :
> 
> http://www.debian.org/devel/debian-installer/
> 
> and get the network installer (110M) RC3.
> 
> Check the install docs on that page as well.

I think that I have found the problem. The default debconf priority is
critical, so it only shows questions that are considered of the utmost
importance, or that don't have "reasonable defaults" (IP address,
netmask, gateway, and name servers don't have that "reasonable default"
if they aren't set via dhcp. Hostname and domain have reasonable
defaults of debian and example.com). I tried setting it to medium, and I
had the same results. What I failed to notice is that the isolinux.cfg
has DEBCONF_PRIORITY=critical set as a kernel perameter, which overrides
the preseed file. I changed it, and hopefully it will work (new image is
building now...)

Thanks,
Kenny
 


signature.asc
Description: This is a digitally signed message part


ODBC question

2005-04-11 Thread Kenneth E. Lussier
So, I have been tasked with writing some PHP code on a Linux system
running Apache, PHP4, etc. However, the database that "they" want the
interface for is an MS-SQL database. After doing some research, unixODBC
is the way to go. The problem is, the only way that I can find to do
this is to use the ODBC to ODBC bridge from EasySoft, which costs $1000.
Does anyone know how to connect to an MS-SQL server from a Linux box
without spending $1K (or moving the database to MySQL)?


TIA,
Kenny


signature.asc
Description: This is a digitally signed message part


Monitor Question

2005-03-28 Thread Kenneth E. Lussier
Does anyone out there have a Dell E173FP LCD monitor? I just got a 2nd
flat panel, and it is slightly different then my first (Dell E171FP). I
can't seem to get the X settings quite right for it, so my dual monitor
setup is driving me crazy. If it matters, my card is an NVidia GForce
440 MX dual head. I'm running XF86 4.4.0. Any pointers on the settings
for this monitor would be much appriciated.

TIA,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Pieces parts.

2005-03-24 Thread Kenneth E. Lussier
On Thu, 2005-03-24 at 16:52 -0500, Ken D'Ambrosio wrote:
> Hey, everyone.  A friend of mine's looking for a reliable,
> reasonably-priced place (one-line is fine) to buy computer parts (eg.,
> drives, motherboards, etc.).  She's been seeing more and more places
> that are, if not fly-by-night, at least bad on the customer service
> standpoint.  Suggestions?

I use two different places: NewEgg (http://www.newegg.com) and Comlink
(http://www.comlinkma.com) (has an actual building-type place that you
can go to in Burlington). I have bought my fair share (and probably a
few other peoples shares) of equipment from both. I don't think that
either of them is going to go under any time soon, and I have never had
a problem with either of them as far as customer service.

HTH,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: IPSec VPNs?

2005-03-23 Thread Kenneth E. Lussier
On Wed, 2005-03-23 at 14:43 -0500, Paul Lussier wrote:
> Hi all,
> 
> Anyone here have any experience with IPSec VPNs (preferably on
> OpenBSD, but any ISAKMP config likely to be helpful) and connecting to
> a Cisco VPN concentrator?

The old FreeS/WAN interoperability docs might be of some help:
http://www.freeswan.org/freeswan_trees/freeswan-2.06/doc/interop.html#cisco 

You might alos want to look at the "OpenBSD IPSEC with cisco 
HOWTO for isakmpd(8) and cisco IPSEC" at
http://wilbury.sk/~techie/ipsec/ipsec-howto/openbsd-cisco-ipsec-howto.html

HTH,
Kenny

-- 
Kenneth E. Lussier 
Sr. Systems Administrator
Sentito Networks




signature.asc
Description: This is a digitally signed message part


Re: High memory kernel support

2005-03-18 Thread Kenneth E. Lussier
On Fri, 2005-03-18 at 10:15 -0500, Derek Martin wrote:
> On Fri, Mar 18, 2005 at 08:23:47AM -0500, Kenneth E. Lussier wrote:
> > There is also the cryptography support. Gone are the
> > days of having to patch the kernel for IPSec.
> 
> Interesting indeed.  I recently got wireless working on both my
> laptops, though I don't currently have any enryption going on the wifi
> network.  I believe the Linux driver for the Intel 2100 doesn't
> support WPA, meaning the best I could do anyway is WEP, which isn't
> very good.  I was thinking about using IPSec to solve that...

WPA, 802.1x authentication, etc. requires a few things in addition to
the driver. Check out http://hostap.epitest.fi/wpa_supplicant/ for more
info on that. 

> Are you using IPSec now?  I heard that FreeS/Wan forked...  What code
> base are you using?  Pointers would be useful.  =8^)

I haven't done much with IPSec recently (in the last 3 months). However,
when FreeS/WAN shut down due to political reasons, I started looking
into OpenS/WAN http://www.openswan.org/. I was impressed by the rapid
development on the project. It has developed much faster then FS did
because it isn't encumbered by the political and ideological issues that
FS had. There is also a better effort for client interop.

HTH,
Kenny
  
-- 
Kenneth E. Lussier 
Sr. Systems Administrator
Sentito Networks




signature.asc
Description: This is a digitally signed message part


Re: High memory kernel support

2005-03-18 Thread Kenneth E. Lussier
On Thu, 2005-03-17 at 17:05 -0500, Paul Lussier wrote:
> "Kenneth E. Lussier" <[EMAIL PROTECTED]> writes:

> 
> Mmmm, what reasons are there for upgrading to 2.6 at this point.  I've
> thus far treated 2.6 as 'testing/unstable' kernel, and since many of
> it's nicer features (like SATA) are getting backported to the 2.4
> series, I haven't had a reason to venture into 2.6 land yet.

In the driver sense, I originally moved to 2.6 because 2.4 was lacking
drivers for GigE cards such as the Intel 10/100/1000 (which I believe
has since been back ported). Also, the SCSI sub-system has been
re-vamped to make it more secure and robust (and break cd writing in
some cases). There is also the cryptography support. Gone are the
days of having to patch the kernel for IPSec. As well as the usual
refinements and fixes that one would expect to see in the newer
kernels. 

However, there have been some issues. I had some problems with 2.6.8 and
2.6.8.1. But those issues were fixed two days later when 2.6.9 came
out. 

FYI,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: High memory kernel support

2005-03-17 Thread Kenneth E. Lussier
On Thu, 2005-03-17 at 11:40 -0500, Charles Farinella wrote:
> On Thu, 2005-03-17 at 11:03, Kenneth E. Lussier wrote:

> > Compiling in high memory support will only help you if you plan to add
> > more memory. If you have between 1GB and 4GB of RAM, then you want to
> > set this to the 4GB option. 
> 
> Oh good, that will save me some work.  :-)
> 
> > > It has 1GB of physical RAM, and 2GB of swap space.  Slackware 10.0.
> > 
> > What kernel are you running?
> 
> 2.4.26
> 
Well, for many reasons, I would suggest upgrading the kernel to 2.6.
And, of course, add another GB of memory :-)

HTH,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: High memory kernel support

2005-03-17 Thread Kenneth E. Lussier
On Thu, 2005-03-17 at 10:47 -0500, Charles Farinella wrote:
>   I have a server that started throwing the following error the other
> day:
> 
> kernel: __alloc_pages: 0-order allocation failed (gfp=0x1d2/0)
> 
> We run some pretty memory intensive apps, and from looking at various
> logs it appears the machine ran out of memory space and started shutting
> down services.  I was able to stop and restart all of the server daemons
> and free up memory.  Since then everything seems to be fine.
> 
> In researching the cause, I find that my kernel does not have high
> memory support compiled into it (the default).  Now this is all a little
> over my head, so I'm asking here, what do you think, will recompiling
> the kernel to include high memory support resolve this?  The machine had
> been up for 168 days before this happened.

Compiling in high memory support will only help you if you plan to add
more memory. If you have between 1GB and 4GB of RAM, then you want to
set this to the 4GB option. 
 
> It has 1GB of physical RAM, and 2GB of swap space.  Slackware 10.0.

What kernel are you running?


Kenny



signature.asc
Description: This is a digitally signed message part


Palm Memo to Text

2005-03-14 Thread Kenneth E. Lussier
Just wondering what people are using for converting Palm memo's to text
on Linux. What are the favorite apps out there? Is there a palm conduit
for OpenOffice? 

C-Ya,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: WPA RADIUS

2005-02-25 Thread Kenneth E. Lussier
On Fri, 2005-02-25 at 08:37 -0500, Steven C. Peterson wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>  
> I am attempting to set up a radius server to authenticate my wireless
> network (and eventualy a vpn)
> I curently have cistron radius installed on my ClarkConnect box (the
> CC box is also my router and email server on the outside edge of my
> network), the ap is a belkin 802.11g.
> I have been looking for help on configuring this in google and faq but
> i can not get it to work and i am finding settings that do not match.

I've never used Cistron to do this, but I have done it using FreeRadius,
which is loosely based on Cistron. 
 
> my question is does anybody have any experiance setting this kind of
> stuff up and if so whould you mind rendering my assistance

You probably wat to take a look at this doc for the details:
http://tldp.org/HOWTO/html_single/8021X-HOWTO/ . The HOWTO is
specifically for freeradius, but it can probably be easily adapted to
your set up.

FYI,
Kenny




signature.asc
Description: This is a digitally signed message part


Xeon

2005-01-26 Thread Kenneth E. Lussier
All,

This is a fairly dumb question, but can anyone tell me if a Xeon CPU is
32-bit or 64-bit? I am going to be doing some development work on dual
xeon servers, and I don't know if I need the ia64 version of Debian, or
the ia32 version. I know that the Xeon has been classified in some of
the stuff that I read as "ia32e", but that doesn't do me any good as far
as choosing the correct distribution... I suppose this is what I get for
ignoring modern hardware :-)

TIA,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Speakeasy as a DSL provider

2005-01-21 Thread Kenneth E. Lussier
On Thu, 2005-01-20 at 17:55 -0500, Rodent of Unusual Size wrote:
> -BEGIN PGP SIGNED MESSAGE-
> 
> Do I correctly remember someone using Speakeasy as their DSL carrier,
> with more than 2 static IPAs and less than US$95 a month?
> - --
> #ken  P-)}

I had Speakeasy for about 3 years with 2 static IP addreses for
$70/month. I would still have it, but Verizon decided to re-route my
pair and destroyed connection. You can currently get this deal for about
$60/mo: http://www.speakeasy.net/residential/adsl/package?
speed=15256&service=plus . If you need the higher upload speed, you can
go with this package: http://www.speakeasy.net/residential/adsl/package?
speed=15256&service=plus (note: these are the 1.5M download speeds, not
the 6M).

FYI,
Kenny

-- 
Kenneth E. Lussier 
Sr. Systems Administrator
Sentito Networks




signature.asc
Description: This is a digitally signed message part


Request system

2005-01-03 Thread Kenneth E. Lussier
All,

I am looking for a web-based (preferably php) application that people
can go to and select dates to request time off. The app should then send
an e-mail the person's manager for approval, and upon approval, send an
e-mail to payroll (yes, I know that this could be written in a little
less than a day, but I was asked to "find one"). Does anyone have any
suggestions on things that they have used in the past?

TIA,
Kenny  


signature.asc
Description: This is a digitally signed message part


Re: Linux for DEC/Compaq/HP Alpha?

2004-11-24 Thread Kenneth E. Lussier
On Wed, 2004-11-24 at 11:56 -0500, Rodent of Unusual Size wrote:
> -BEGIN PGP SIGNED MESSAGE-
> 
> I have a couple of Alphas I'd like to put Linux on.  However, AFAIK
> Red Hat discontinued their Alpha support around V6.2, and I'm not
> in tune enough with any other distros to know what's there.

Debian ISO's for the Alpha are available on http://www.linuxiso.org.

> Anyone around who's got Linux on an Alpha and can recommend the
> best way to go?

Debian is always the best way to go :-P

C-Ya,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: VoIP software

2004-11-18 Thread Kenneth E. Lussier
On Wed, 2004-11-17 at 19:17 -0500, Bill McGonigle wrote:
> On Nov 17, 2004, at 12:11, Kenneth E. Lussier wrote:
> 
> > You need
> > an FXO card of some sort to plug your phone line into. You can buy a
> > single port FXO card from  Digium  (Wildcard X100P) for $100...
> > Then, you need IP phones. You can get Grandstream Budgetones for about
> > $65, or you can spend $600 on a Cisco :-)
> 
> Is there a card you can use to plug your existing phone 'network' into? 
>   At this point I just want Asterisk for doing voicemail and 
> auto-attendant, so no need for VOIP phones, per se, just two POTS lines 
> in the house.

Yes, you need an FXS card. You can get the TDM400P from Digium 
(http://www.digium.com/index.php?menu=wildcard_tdm400p2). It is a 4-port
card that can have either FXS or FXO modules on it. I know several
people that have the tdm400p with 3 FXS modules and one FXO module. That
allows them to connect the card to the PSTN as well as their existing
phones. 

Another idea that I have seen used in a few places is that rather than
use FXS modules, you can get an IAD that turns your regular analog phone
into an IP phone. You can get a Cisco ATA-186 for about $120 (or other
various brands for a lot less. Search froogle for IAD). Rather then
plugging just one phone into it, you can plug in the base system of an
expandable phone system (i.e. one base, 5 handsets). Since all of the
handsets communicate back to the base, the base is the only one that
needs to be IP. 

HTH,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: VoIP software

2004-11-17 Thread Kenneth E. Lussier
On Wed, 2004-11-17 at 11:35 -0500, Cole Tuininga wrote:

> I've been looking more and more at asterisk.  Not having *any*
> experience with phone related stuff, it's a little intimidating but it
> seems like there's a lot of documentation out there.  One question I'd
> have for you, Ed, is what kind of financial investment did you have to
> put into hardware for this (if you don't mind my asking)?

Financial investment to build an asterisk box for home is very low. You
need a PC running Linux, so that can cost anywhere from $0 (any old PC
laying around) to > $500 (if you really want to go all out!!). You need
an FXO card of some sort to plug your phone line into. You can buy a
single port FXO card from  Digium  (Wildcard X100P) for $100. You don't
have to spend the $100 for the Digium card, though. You can get a modem
using a particular chipset that is compatible with the zaptel drivers
that Asterisk uses for about $10
(http://www.newegg.com/app/viewproductdesc.asp?
description=25-180-004&DEPA=0) That takes care of the server itself.
Then, you need IP phones. You can get Grandstream Budgetones for about
$65, or you can spend $600 on a Cisco :-)

So, the cost can break out like this (assuming 3 phones):

PartLow End HighEnd 
=== ===
PC  $0  $500
FXO Card$10 $100
Phone   $65 $600
Phone   $65 $600
Phone   $65 $600
=== ===
Total   $205$2400

So, it can cost about anywhere from $205 - $2400. Of course, there are
many different ways that your end goal can be achieved, so the pricing
may vary. You can also do without IP phones and use analog phones with
either IP IADs or FXS ports in the asterisk box. 

HTH,
Kenny
 
-- 
Kenneth E. Lussier 
Sr. Systems Administrator
Sentito Networks




signature.asc
Description: This is a digitally signed message part


Re: vacation with sendmail.

2004-11-02 Thread Kenneth E. Lussier
On Tue, 2004-11-02 at 13:07 -0500, Jason wrote:
> All,
> 
> I'm tryingI really am. I am now bouncing between O'reilly Sendmail, RH
> Linux 9 Bible, sendmail.org and various other linux/sendmail websites. I
> JUST want to set a vacation message for a client and I am losing my work day
> over it. So here's the deal.
> 
> O'reilly says (page 241) "simply change to the vacation directory and run
> ./Build". The closest I find to that is
> /usr/share/man/ja/man1/vacation.1.gz. I have unzipped vacation.1.gz and now
> have /usr/share/man/ja/man1/vacation.1.
> 
> What's next?

`man vacation` is next. You apparently just uncompressed a compressed
man page. Vacation is most likely already installed (since you have the
man pages in Japanese). You just need to run vacation to set up the away
message.

FYI,
Kenny

 


signature.asc
Description: This is a digitally signed message part


Re: Seeking suggestions for demo app

2004-10-28 Thread Kenneth E. Lussier
On Thu, 2004-10-28 at 10:42 -0400, Michael ODonnell wrote:

> I'd therefore be grateful for any suggestions
> regarding off-the-shelf FOSS apps that make
> for good general purpose demonstrations of a
> Linux server's capabilities.  Since a lot of our
> customers like Oracle a demo that involved it
> along with FOSS would be of particular interest,
> but all suggestions welcome.

Compiere (http://www.compiere.org) is an open source ERP system that
sits on top of Oracle 9i. 

HTH,
Kenny


signature.asc
Description: This is a digitally signed message part


kernel 2.6.8-9

2004-10-21 Thread Kenneth E. Lussier
Well, I waited a week. Kernel 2.6.9 was released. It works fine. I have
had no networking issues with it what so ever. I had to get a patched
version of the NVidia driver, since their "Official" driver won't
compile due to a change in vmalloc (http://ngc891.blogdns.net/index.php?
2004/09/21/3-patched-nvidia-drivers).

FYI,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: CVS, Mailman, and HTML

2004-10-19 Thread Kenneth E. Lussier
On Mon, 2004-10-18 at 21:11 -0400, Paul Lussier wrote:
> In a message dated: Mon, 18 Oct 2004 08:58:27 EDT
> "Kenneth E. Lussier" said:
> 
> 
> > Has anyone ever archived html e-mail using Mailman??
> 
> Sure, every mailing list out there that uses Mailman for the most part
> uses it's archive feature.  Though, I'm also sure you've noticed that
> these archives are horrendous for searching!

For our purposes, it actually isn't that bad. They are dated, the
subject contains the tree and branch that was changed (and part of the
commit comment), and the sender is the person that committed the change,
which is all that we need. The whole point of this is so that the
engineering team leads have a good history of what has been done, when
it was done, and who did it. Sorting by Subject, Date, or Author
accomplishes this.
  
> We use Mailman extensively for all our lists, but we archive them all to
> an IMAP mailbox.  For every mail list, we specifically shut off the
> Mailman archive option, but subscribe an alias of
> @lists.foo.com where 'lists.foo.com' is handled by the MTA
> which directs all mail of this form to be handled by cyrus rather than
> by Mailman (since they're both on the same box).

Well, this is a good idea, but I have some issues with it. First, it
requires a "group" account for access to the mailbox. Group accounts
lead to problems because people can delete the e-mails, they can move
them to a local folder, etc. I don't think that it is a matter of
malicious intent, but rather, normal behavior. You read an e-mail, you
either file it or delete it. 

Not that this idea doesn't have merit. It was actually my original
course of action. My original plan was to have the cvs diffs sent to the
team leads and have them filtered into public folders. Unfortunately,
that was too much of a single point of failure. That's when the mailing
lists came into play. Everything works as it should, except this one
minor point. OK, so it isn't that minor, but I'm sure it can be fixed!

C-Ya,
Kenny
  


signature.asc
Description: This is a digitally signed message part


Re: CVS, Mailman, and HTML

2004-10-18 Thread Kenneth E. Lussier
On Mon, 2004-10-18 at 09:55 -0400, Bill McGonigle wrote:
> On Oct 18, 2004, at 08:58, Kenneth E. Lussier wrote:
> 
> > Unfortunately, Mailman strips out the html. There is a link on
> > the page to the stripped html, but it opens up as plain text.
> 
> Do you have the 'should Mailman convert text/html parts to plain text?' 
> setting in 'Content Filtering' set to no?  You can also add the mime 
> type on that page to keep.

Did both of these, and still nothing. I even shut off the content
filtering all together. 
> >  The only
> > way to view it correctly is to copy it, save it to a file, and then 
> > open
> > it up again.
> 
> Also make sure the mime-type is being set properly for the attachment.

I have:
Content-Type: multipart/mixed; boundary="===0626539290=="

in the headers, and 

--===0626539290==
Content-Type: text/html

at the beginning of the e-mail. And Mailmain put's in it's own
attachment of:
--===0626539290==
Content-Type: text/plain; charset="us-ascii"

at the end. 

In my content filtering section, I have multipart/mixed,
multipart/alternative, text/plain, text/html in the pass_mime_types box,
and I have nothing in the filter_mime_types box. I even have
filter_action set to "preserver". I'm sure that there is something very
simple that I am doing wrong...

Thanks,
Kenny



signature.asc
Description: This is a digitally signed message part


CVS, Mailman, and HTML

2004-10-18 Thread Kenneth E. Lussier
Hi all,

Yet another weird question from me on behalf of a user.

I found a system (called cvsspam) that will take the loginfo from CVS
and create a diff and e-mail it out. It was then requested that I have
the e-mails sent to a Mailman mailing list so that everything would be
archived nicely. No problems there. The problem is in the archiving.
Every e-mail is formatted in HTML so that the diffs are color coded and
pretty. Unfortunately, Mailman strips out the html. There is a link on
the page to the stripped html, but it opens up as plain text. The only
way to view it correctly is to copy it, save it to a file, and then open
it up again.

Ideally, I would like to have the formatting left in the archives so
that they can just click on a particular e-mail and have it show up as
it was originally meant to. I have checked all of the options, but
nothing seems to allow me to do this. Has anyone ever archived html e-
mail using Mailman??

TIA,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: kernel 2.6.8

2004-10-14 Thread Kenneth E. Lussier
On Wed, 2004-10-13 at 23:06 -0400, Fred wrote:
> When all else fails, try swapping out the network card for a known good
> one.

This is my next step. I just haven't had time. Since the system in
question is my worstation at work, I can't keep rebooting it, so I'm
working on it at a slow pace. 

The card that I have is an Intel e1000 in a fairly new Dell which has
worked perfectly under 2.6.7. And it seems to work fine under 2.6.8.1
when X isn't running. So, I'm leaning toward something being wrong in  X
that the new kernel doesn't like. I might just wait until 2.6.9 :-)

C-Ya,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: kernel 2.6.8

2004-10-13 Thread Kenneth E. Lussier
On Wed, 2004-10-13 at 09:40 -0400, Michael ODonnell wrote:
> 
> >However, I get those errors with a 2.6.7 kernel, too, and everything
> >works fine with 2.6.7. But, just for fun, I shut down X, and the problem
> >seems to go away. Hmm... Strange things are afoot at the Circle K..
> 
> Maybe some forwarding or authentication conflict between X and SSH?

If it were just ssh, then I would think that that might be the problem.
However, it isn't just ssh that is broken. Traceroutes don't work,
telnet, ftp, etc. all are extremely slow or don't work at all. I think
that it might be some sort of routing issue, but I can't think of what X
would have to do with routing. 

C-Ya,
Kenny

-- 
Kenneth E. Lussier 
Sr. Systems Administrator
Sentito Networks




signature.asc
Description: This is a digitally signed message part


Re: kernel 2.6.8

2004-10-13 Thread Kenneth E. Lussier
On Tue, 2004-10-12 at 21:25 -0400, Paul Lussier wrote:
Just to replay all at once... Yes, I have tried running 2.6.8.1 and:

> - Do you have DNS set up correctly?  

Yes.

> - Have you checked your /etc/resolv.conf, /etc/nsswitch.conf?

Yes. I'm getting my address via dhcp, and the dns servers are correct. I
can do nslookups just fine.

> - Have you run with ssh -v to see what was going on?

Yes, actually I used -vvv for more info. The key exchange starts, but
then all traffic just stops. 

> - How about running tcpdump on both ends of the connection to
>   see what was going on?

tcpdump, ethereal, et al. The traffic just stops. Almost like networking
just shuts down. 

> - Do you have iptables running and inadvertantly blocking ports?

Nope, I even tried recompiling without iptables support. 

> - Is there anything showing up in the logs? What's dmesg say?

Everything looks completely normal. The only error that I see in the
logs is:

Oct 13 08:26:33 metatron kernel: atkbd.c: Spurious ACK on
isa0060/serio0. Some program, like XFree86, might be trying access
hardware directly.

Oct 13 08:26:33 metatron kernel: atkbd.c: Spurious ACK on
isa0060/serio0. Some program, like XFree86, might be trying access
hardware directly.

However, I get those errors with a 2.6.7 kernel, too, and everything
works fine with 2.6.7. But, just for fun, I shut down X, and the problem
seems to go away. Hmm... Strange things are afoot at the Circle K..

C-Ya,
Kenny


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


kernel 2.6.8

2004-10-12 Thread Kenneth E. Lussier
All,

Has anyone had trouble with networking after installing a 2.6.8 kernel?
I have had a problem on two different systems where networking slows to
a crawl, dns lookups don't work correctly, and I can only ssh to some
systems. Also, ssh into the box running the new kernel doesn't work.
Anyone have any ideas what is causing this?

TIA,
Kenny


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: CVS Notify

2004-10-04 Thread Kenneth E. Lussier
On Mon, 2004-10-04 at 15:34 -0400, Paul Lussier wrote:
> Do they want a diff per file that was checked in, or a repository level
> diff?  (I don't think cvs does the latter, though I could be wrong, but
> I know subversion does, not that that helps you any :)

They want a per file diff for the file that was committed Vs. the
previously existing file. 

> It's probably just a matter of figuring out what triggers the e-mail
> getting sent, and how that e-mail is created, then adding a few lines to
> that script to call cvs diff on the 2 versions of each file being
> checked in.

Yeah I remember something about the loginfo file calling a script,
but I can't seem to find what I'm looking for. I keep coming across
files that generate a change log, but not a diff. I'm going to play
around with some of this stuff in the cvs/contrib directory and see if
any of them do the trick. If not, I'll just write my own and add it in. 

Thanks,
Kenny



___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


CVS Notify

2004-10-04 Thread Kenneth E. Lussier
All,

I currently have CVS set up so that certain people are notified when
changes are committed. It has been requested that the notification
contain a diff of the committed file vs. the last file. Is this a built
in function of CVS, or do I need to write a script to do this?

TIA,
Kenny


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: VoIP and Asterisk

2004-09-29 Thread Kenneth E. Lussier
On Wed, 2004-09-29 at 17:17 -0400, Bruce Dawson wrote:
> On Wed, 2004-09-29 at 17:05, Kenneth E. Lussier wrote:
> > If you want to keep the 32 analog phones, then there could be a problem,
> > as you would need 32 FXS ports (8 cards x 4 ports each), and I don't
> > know too many systems that have 9 or 10 PCI slots. However, chances are,
> > the phones that you have are not analog phones. They are most likely
> > digital, and would require an ATA.
> 
> Ummm. I thought an ATA was an analog<->digital interface!

Yes, that is what an ATA is. There are a few types. The most common has
FXS on one side and ethernet on the other. Some are digital on one side
and analog on the other (i.e. plug a Meridian or a Polycom into an
analog POTS line). There are various configurations of each. If the
phones are digital phones, as many are, then you would need to convert
them to analog to plug into an FXS card.

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: VoIP and Asterisk

2004-09-29 Thread Kenneth E. Lussier
On Wed, 2004-09-29 at 16:35 -0400, Ray Cote wrote:
> At 9:12 PM -0400 9/27/04, Jon maddog Hall wrote:
> >I have a couple of people who are interested in coming to talk about VoIP and
> >Asterisk.  With a little luck and some frequent flyer miles, we might be able
> >to get Mark Spencer, as well as a few people from other companies.
> 
> As interesting as VOIP is, I'd also like to hear about putting 
> together a small office system with Asterisk.
> 
> I have 8 analog POTS (plain old telephone system) lines coming into 
> the office and 32 internal phone lines. I've been following along 
> with some Asterisk mailing lists and looking at the Digium site, but 
> my casual research hasn't spotted the cards that would let me get 
> this many lines into a standard PC system.

I'm not sure what you mean by "32 internal phone lines". If by that you
mean you have 32 phones in your office, then this is fairly easy. There
are a few ways that you can do it:

The 8 POTS lines that come in from the PSTN would go into 2 TDM400P
cards each with 4 FXO modules. Or, you could get an FXO channel channel
bank (adtran, accessbank, etc.), wire the 8 lines to that then run a T1
line to a T100P card. This would also let you expand to 24 lines if
needed (at which point, it would just be easier to get a PRI).  

The 32 internal phones could be a bit of a problem. If you are planning
on switching to IP phones, then it's no problem. You just plug the
phones and the asterisk box into the network. You could also switch to
"soft-phones" and have people use their PC's as their phones. You can
get IP phones fairly cheap if you just want standard desk phones.

If you want to keep the 32 analog phones, then there could be a problem,
as you would need 32 FXS ports (8 cards x 4 ports each), and I don't
know too many systems that have 9 or 10 PCI slots. However, chances are,
the phones that you have are not analog phones. They are most likely
digital, and would require an ATA.

> I currently have a seven year old phone system I'm interested in 
> replacing and would appreciate hearing how Asterisk and available 
> hardware addresses my (fairly standard and minimal) situation.

Many people have replaced their aged phone systems with Asterisk. Buying
new IP phones can be a fairly expensive up-front cost (or extremely
expensive if you buy Cisco or PingTel phones), but it is still far less
expensive then buying a new phone system. 

FYI,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: Making a Windows disk a file on Linux

2004-09-10 Thread Kenneth E. Lussier
On Thu, 2004-09-09 at 23:12 -0400, Jeff Macdonald wrote:
> Hi,
> I just bought a new Dell Laptop for my wife and I'd like to use her
> old one for Linux. I have a file server running Gentoo that has mp3
> and videos and runs Samba for windows networking. What I'd like to do
> is dd the windows disk and have the target be a file and then mount
> that file as a FAT32 file system. In other words I don't want to
> create a partition for the data. I just want to keep it around for a
> while until I'm sure I don't need it anymore (a few years, just for
> good measure).

Are you just trying to preserve just the data, or are you trying to
preserve the Windows system itself? If you are just trying to preserve
the data, you could use mkisofs and create an iso9660 file system, then
mount it like this: 
mount -t iso9660 -o ro,loop=/dev/loop0 windows.iso /foo

All of the files will be preserved and usable (not writable, though),
but it will no longer be a usable windows system.

Or, you could just tar and bzip the filesystem, then extract it when you
need it. 

HTH,
Kenny
-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part


Re: Verizon offering 3Mbps

2004-09-09 Thread Kenneth E. Lussier
On Thu, 2004-09-09 at 10:37 -0400, Paul Lussier wrote:
> In a message dated: Wed, 08 Sep 2004 23:01:27 EDT
> "Brian Riley (maillist)" said:
> 
> >My download speeds are on the order of cable speeds and upload is slower but
> >At least as good as most DSL.
> 
> What's the latency like on that?  I'm assuming with a 48K mile
> round-trip minimum for every packet, latency must be rather high?

Latency has always been an issue with satellite service. Usually, they
have a high latency, and one of the most notable side effects is the
inability to use a VPN over satellite (just to tie this to another
current thread). Another problem with some satellite ISPs is that they
run NAT/PAT at the network head which interferes with VPNs, online
gaming, etc.

FWIW,
Kenny
-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part


Re: CD Burning with 2.6

2004-09-07 Thread Kenneth E. Lussier
On Tue, 2004-09-07 at 11:47 -0400, [EMAIL PROTECTED] wrote:
> > cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
> 
> Hey, Kenny.  Any chance you're running 2.6.8 or greater?  See
> http://lwn.net/Articles/97552/ for some interesting stuff.  For that matter,
> I seem to recall other changes re: ioctl having taken place recently, but I
> don't remember exactly what.  Regardless, you might want to check and make
> sure that your device actually -does- exist; is it listed in "dmesg"'s
> output?  How about in the /proc/scsi hierarchy?

Actually, I'm running 2.6.7. The device is listed in /proc/scsi/scsi. It
works when I boot the system cleanly. It only disappears after I have
burned one CD. The first CD that I burn comes out fine, but after the
fixating process, the driver goes wonky. 

I had originally compiled everything in as a module, and after the first
CD was burned, the sr_mod module would be stuck in an UNLOADING state,
and it couldn't be inserted or removed. Now, with everything compiled
into the kernel, it appears as if the problem, while still existing, is
a bit different. Oh, and I am doing this as root, so the workaround
doesn't always work :-)

Thanks,
Kenny

-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part


CD Burning with 2.6

2004-09-07 Thread Kenneth E. Lussier
All,

I have been having some trouble with CD burning. I upgraded to the 2.6
kernel hoping that that would fix the problem, but alas, it has only
gotten worse. When I boot my system, everything works fine. I can do a
cdrecord -scanbus and my cd burner shows up on 0,0,0. I can even burn 1
CD. The problem is that either while or just after fixating the disk,
something goes horribly, horribly wrong The CD burner appears to
disappear, and I have to reboot to get it back. Has anyone else seen
anything like this? I have added the output from cdrecord, syslog, and
dmesg below.

TIA,
Kenny



Average write speed   7.8x.
Min drive buffer fill was 99%
Fixating...
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl
cdrecord: No such device or address. Cannot send SCSI cmd via ioctl


and in syslog I get:
Sep  7 09:28:18 Metatron kernel: sr0: CDROM not ready.  Make sure there
is a disc in the drive.
Sep  7 09:28:49 Metatron last message repeated 62 times
Sep  7 09:29:50 Metatron last message repeated 122 times
Sep  7 09:30:40 Metatron last message repeated 101 times
Sep  7 09:31:19 Metatron kernel: hdc: lost interrupt
Sep  7 09:31:19 Metatron kernel: ide-scsi: No active request in
idescsi_eh_reset
Sep  7 09:31:19 Metatron kernel: scsi: Device offlined - not ready after
error recovery: host 0 channel 0 id 8 lun 0
Sep  7 09:31:19 Metatron kernel: SCSI error: host 0 id 8 lun 0 return
code = 600
Sep  7 09:31:19 Metatron kernel: ^ISense class 0, sense error 0,
extended sense 0

and in dmesg:
sr0: CDROM not ready.  Make sure there is a disc in the drive.
hdc: lost interrupt
ide-scsi: No active request in idescsi_eh_reset
scsi: Device offlined - not ready after error recovery: host 0 channel 0
id 8 lun 0
SCSI error: host 0 id 8 lun 0 return code = 600
Sense class 0, sense error 0, extended sense 0


-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part


Re: VPN Server/Client

2004-09-07 Thread Kenneth E. Lussier
On Sun, 2004-09-05 at 14:47 -0400, Thomas Charron wrote:
>   What is the best software / setup to use?  I've ben looking at
> PPTPd, FreeS/WAN, etc..  What has, in peoples experience, been the
> most succesfull?  I know from the Linux <-> Linux side, everything
> should be kosher, but I also need, just as importantly, to VPN from an
> XP and Win2k box, and possibly a NetBSD environment.
> 
>   Comments?  Suggestions?

I would suggest setting up either FreeS/WAN or OpenSWAN (a fork of the
FreeS/WAN project). The Linux <-> Linux side will be easy to set up, and
it will work with the Windoze 2K/XP IPSec client pretty seamlessly. You
will, however, want to make sure that you do not use AH since you plan
to have a NAT'd firewall. Stick to ESP. 

PPTPd (PoPToP) is easier to set up, but 1) you will need to patch the
source if you want encryption (and it's only mppe excryption) and MS
Chapv2 support. Also, the Linux client is pretty flakey.   

C-Ya,
Kenny

-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part


Re: Speakeasy DSL

2004-09-02 Thread Kenneth E. Lussier
On Thu, 2004-09-02 at 12:52 -0400, Drew wrote:
> Someone suggested SpeakEasy was an iffy DSL source... I've had SpeakEasy for
> several years at four different locations now, and the only complaint I have
> is on price.  Where I am now, 1.5Mbps/768Kbps is $80/month (with 8 static
> IP's and NO service restrictions) and I'm told for $100/mo I can get
> 6Mbps/768Kbps service.

I completely agree with this. I had Speakeasy for 3 years and I loved
the service. I was paying $65/mo for 1.5/768 with 1 static IP. They
changed their rates and packages around, but they didn't mess with the
previous offerings. 

I was very upset when I had to give up my Speakeasy DSL last month. The
only reason that I switched was because Verizon modified the bundle and
added 2500ft to the copper route. My signal was destroyed. That was the
only time that I ever had outages. I had great service, good price, and
intelligent people to deal with. I would highly recommend SE to anyone
looking for xDSL.

> Verizon will be cheaper for the speed, but their TOS specifically forbade
> running servers last time I checked.

Yes, they do. And they do not plan on issuing static IP's. EVER. They
also do not have any sort of SLA. They are, afterall, Verizon. I will be
quite interested to see the results of their new FIOS offering, though.
15Mbps synchronous fiber to the home for $60/mo. That could be
tempting :-)

Just my $0.02,
Kenny






signature.asc
Description: This is a digitally signed message part


Re: Going OT [Was: Re: Replacing PBXes with Open Source]

2004-08-26 Thread Kenneth E. Lussier
On Thu, 2004-08-26 at 10:14, [EMAIL PROTECTED] wrote:
> 
> Incidentally, I routinely check SoftPro's website when
> browsing online as an alternative to the Amazon/Borders
> megamerchants.  It's good to support the local
> service-oriented merchants as much as possible so I'd rather
> use them if the price penalty is not too great.  Their
> shipping policy and performance make that an easy pill to
> swallow for me.  ymmv.

I would like to comment on the above, as Bruce mentioned
"service-oriented". I ordered a book online from SoftPro yesterday. I
got an e-mail 15 minutes later telling me that it was out of stock and
the new stock wouldn't be in for two weeks, and asking if I wanted to
cancel my order or wait for the new stock to arrive. I, of course,
replied that I would wait. This morning, I got an e-mail from SoftPro
telling me that a copy of the book that had been put on reserve had come
available since the purchaser would be away for the next three weeks and
couldn't pick it up. My order was shipped at noon. That is what I call
service. I know better then to expect service like that from Amazon/B&N.
Despite the cost being marginally higher, I would prefer to spend a
little more money in a place that gives good service then a little less
money in an impersonal place where there is no sense of customer
service.

Just my $0.02,
Kenny
 

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Replacing PBXes with Open Source

2004-08-26 Thread Kenneth E. Lussier
On Wed, 2004-08-25 at 20:08, Michael ODonnell wrote:
> If I were one of the entrenched players in the telecoms
> space, or if I were a big-brother type, I think I'd be
> angry about VoIP.  From a business angle, I'd see stuff
> like VoIP as a threat to my legislated monopoly. 

Well, there are two sides to this.. The big telcos see it as a threat
and want to stap out new competition like Vonage while at the same time
using the same technologies. The big telcos have to build the new
infrastructure, build the bridge to move people over, and maintain the
old infrastructure at the same time. The new companies only need to roll
out the new infrastructure. 

>  From a
> big brother perspective I'd be unhappy about the enhanced
> privacy as well as the potential for abuse (like CNI
> spoofing) that were previously not so easily available.

Well, there are government regulations that basically prevent privacy.
It doesn't matter if a phone line is VoIP or analog, the feds still have
to be able to tap it. That is one of the reasons that larger companies
have been slow to adopt it. They can't figure out how to make it 1)
secure so that people will use it and 2) insecure so the feds can tap
it. 
 
> In either case, I'd do my level best to prevent or at
> least cripple the widespread availability of PBX- and
> VoIP-enabled gear to the Great Unwashed...

The current strategy seems to be to roll it out before it's ready so
that people will stick with the larger companies. For example, AT&T has
a VoIP offering called CallVantage that is a partial IP solution but
with zero security, and a lot of bugs. But, if they get the early
adopters, then the customer base will follow. It's the old DEC mentality
of "Everyone will just always buy DEC". They seem to forget that in the
end, someone eventually *DID* buy DEC :-)

C-Ya,
Kenny
  

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Replacing PBXes with Open Source

2004-08-25 Thread Kenneth E. Lussier
On Wed, 2004-08-25 at 16:43, Ken D'Ambrosio wrote:
> klussier said:
>  > I agree that VoIP will be huge in emerging economies...
> 
> Not sure... after all, you need the Internet infrastructure -- with a 
> fair bit of bandwidth -- in place to take advantage of it.  

This is sort of true. VoIP can leverage existing infrastructure. If the
end user is using a regular phone line that goes into a class V switch,
the switch can then translate the call to IP, route the call to the
class V switch at the other end over an IP network, which will translate
it back and send it to the analog phone at the other end. If you want to
go VoIP end to end, you need a lot more infrastructure. But if the area
has old, antiquated networks and equipment, it would still be cheaper
and faster to build a VoIP infrastructure in parallel then cut over then
it would be to upgrade/replace their old networks and equipment.
 
> I believe 
> calls are ~80kb/s, including TCP overhead, which is a fair bit more than 
> analog can cope with.  

The bandwidth needed for voice calls depend on the compression that you
use and the signaling type. G.723 can go as low as 5.6kb/s, G.729 is
about 8kb/s, and G.711 is about 64kb/s (which is what standard analog
phones use). 

> On the other hand, my pesky Asterisk hardware 
> STILL hasn't shown up a month after I ordered it, so I can't speak from 
> experience.  (No fault of Digium; I had to go through a third-party 
> vendor for purchasing reasons.)
> 
> One question I have, though: how does H.323 cope with NAT, firewalls, 
> etc., for incoming calls?  Anyone know?

Well, if you choose to use H.323, you will most likely need a
gatekeeper, etc. However, I would recommend using SIP instead. It's a
faster and more flexible protocol. How it handles incoming calls depends
on how they are coming in. Are you planning on having calls come in over
IP via an IP Telephony provider, or are the calls coming in over PSTN
lines? If they are coming in via the `net, then you would probably need
to allow traffic from the outside to port 5060 and do the IAX
registration that way. Check out http://www.voip-info.org/wiki-Asterisk
for all of your asterisk needs. They have a lot of info for connecting
to various providers, as well as everything you needed to know about
Asterisk (but were afraid to ask on the users mailing list ;-)

C-Ya,
Kenny


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Replacing PBXes with Open Source

2004-08-25 Thread Kenneth E. Lussier
On Wed, 2004-08-25 at 13:40, Jon maddog Hall wrote:
> Hi,
> 
> For the past eight years I have been predicting that it would only be a matter
> of time before we started replacing the really expensive proprietary hardware
> and software that goes into making a telephony system.  I have been watching
> while VoIP became better and better, and Gnomemeeting allowed videoconferencing
> using H.323
> 
> Yesterday in the SoftPRO bookstore I saw a book on Asterisk, and for those of
> you who are not familiar with it, it is an Open Source project to replace
> the PBX (think "Centrex") services for a company.

Asterisk is an amazing system. You can use it to implement a complete
PBX with voicemail, (almost) infinite extensions, conferencing,
music-on-hold, etc. for a fraction of the cost of a commercial PBX
(Notel, Lucent). Once you get used to the scripting language style of
configuration files, it is pretty easy to maintain. 

You can get IP phones for less then $100 (you can also spend $600+ on
Cisco 79xx's...), or, you can use software-based phones that run on
Linux (or windows, if you must ;-) that are free (as in beer, some as in
libery). You can also get hardware from Digium (which was started by
Mark Spencer, the creator of Asterisk) that will handle any type of
phone line that you have coming in (POTS FXO/FXS, T1, PRI, etc.), all of
which have Linux drivers. 
   
> This is going to be HUGE.  It will be HUGE in emerging economies, but also
> HUGE in our own economy.   I show you website http://www.asterisk.org/
> 
> This type of work will lower communications costs dramatically.

I agree that VoIP will be huge in emerging economies, since it will be a
much cheaper option to deploy. SIP is easy to control and bill, and
there are feature servers (like Asterisk) that can do all sorts of call
control.  There is interest in the U.S., but the behemoth phone
companies are slow to adopt because of the investment that they already
have in the existing (and out-dated) technologies, and the govt's insane
regulations. 

C-Ya,
Kenny


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: MS Exchange Server competition

2004-08-17 Thread Kenneth E. Lussier
On Mon, 2004-08-16 at 23:13, [EMAIL PROTECTED] wrote:
> On Mon, 16 Aug 2004, at 9:18pm, [EMAIL PROTECTED] wrote:
> > I recently did an investigation for a client of Linux based alternatives
> > to Exchange. I found two that were very good at providing full blown
> > Exchange capabilities and compatibility.
> 
>   Do either support MAPI?  That is, do they provide seamless Microsoft
> Outlook integration?  Not just IMAP mail (which Outlooks has limits with
> anyway), but contacts, calendar -- the whole Outlook store.  Right or wrong,
> that's what a lot of people want.

The answer to that is a definite yes and no. OpenExchange itself does
not do MAPI. You have to install the iSLOX connector on the Windows
client. The connector then converts the MAPI calls to WebDAV/XML and
passes them on to the server, then translates the response. The
connector is a free download, but not F/OSS. 

The interesting thing that I find is that OpenExchange supports LookOut
or "other web clients". So, if you aren't using LookOut, then you use a
web browser. This is a problem for me. The major limitation of web-based
systems is the requirement that you have to be online to use it. Most
web-based systems lack a conduit to download calender info, contacts,
etc. to either a local data store or a hand held.  

> > My primary beef with [SuSE OpenExchange] is the cost. For small shops the
> > cost, while cheaper than Exchange by 1/2 to 1/3 less, is still
> > substantial.
> 
>   That doesn't concern me so much.  The issue I usually face is that people
> want the kind of Outlook integration that Exchange provides, but I would
> like to be using a Linux server.  Since nothing on Linux I know of can meet
> their needs, we go with Windows instead.
> 

I don't find the price to really be a concern. The reason that most
people look for alternatives to MS Exchange is that they are currently
considering MS Exchange. That means that they are already considering
paying a lot of money. So, any savings, no matter how small, is still a
savings.

Also, it is true that Novell/SuSE only want to deal with 500 seats or
more. However, they have a network of resellers for smaller
installations. This, IMNSHO, is a perfectly valid and acceptable
business practice. They only want to deal directly with enterprise
customers. It's expensive to runs a sales force to deal with all sales
levels, and many times, it just isn't cost effective. 

My $0.02,

Kenny


signature.asc
Description: This is a digitally signed message part


Re: Dealing with unwelcome visitors

2004-08-16 Thread Kenneth E. Lussier
On Mon, 2004-08-16 at 10:44, Ted Roche wrote:

> Anyone have a suggestion re:
> 
> 1) are these appropriate actions to take?

They are appropriate actions, but the tedious nature of manually adding
the offending IP addresses seems too much. Check out PortSentry. It will
automatically block people trying to connect to closed ports (see next
comment).

> 2) is there any easier way to do it?

Change the port that SSH runs on. This small layer of obscurity will
eliminate about 90% of script kiddies, since most of the scripts run off
of a basic services type file. This will also cause anyone hitting port
22 to trip portsentry and they will be dropped. Another nice feature is
that if they run a port scan against you, they will get dropped before
they find the port that ssh is running on.

Just my $0.02,

Kenny


signature.asc
Description: This is a digitally signed message part


Re: automated social engineering at it's best (maybe?)

2004-07-28 Thread Kenneth E. Lussier
On Wed, 2004-07-28 at 13:25, Derek Martin wrote:

> >   Good anti-virus software does do a good job of protecting lusers from
> > themselves.  The problems with AV are (1) you have to use it, (2) it is
> > reactive (and thus lusers are vulnerable until the sigs update), (3) lusers
> > don't make sure their sigs get updated.
> 
> Yeah.  Recently I have had some occasion to receive certain content
> from certain less-than-trusted sources, and Antivir Personal at the
> link above has saved my computer's butt from infection more than once.
> It is unfortunate that No Anti-virus software seems to install
> properly configured by default.  [It is even more unfortunate that I
> still occasionally have reason to run Windows.] But anyway...

Another option here is to have an anti-virus system like ClamAV
(http://www.clamav.net/) installed on your mail server. It doesn't
negate the need for an AV on the local machine, but it lessens the
likelyhood of needing to use it.   

FYI,
Kenny


signature.asc
Description: This is a digitally signed message part


RE: Lilo Help

2004-06-22 Thread Kenneth E. Lussier
On Tue, 2004-06-22 at 12:18, Mansur, Warren wrote:

>  
> - Open a terminal
> - Go to the directory that contains your original mounted hard drive
> - executed 'chroot' so that now your hard drive looks like '/' instead

Ah, yes... chroot. I knew I was forgetting something. Thanks, Warren! It
has been so long since I hosed up Lilo 


But, as a side note to anyone that may encounter this, it does not work
from Knoppix. I chrooted /mnt/hda4 (my root drive), and made sure
everything is as it should be. It was. I tried to run lilo, and I got
errors about "open /dev/hda: permission denied". I made sure I was root,
I made sure everything had correct permissions. I was, and everything
did. I tried a few other things, and I got permission denied errors on
/dev/null, too. Apparently, no matter what you do, Knoppix just won't
let you work with files in /dev. I even changed the permissions to a+rwx
on a few things (that it let me do), and I still couldn't run lilo or
write to /dev/null. So, I used a Debian install/rescue disk, did
everything exactly the same, and it worked fine. Things that make you go
WTF?!?!?!?!

Thanks,
Kenny

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Beowulf?

2004-05-20 Thread Kenneth E. Lussier
 Does anyone know what happened to the Beowulf project? beowulf.org has
 been down for a long time, beowulf-underground.org has closed up shop,
 and the community section of www.scyld.com is extremely sparse. 
 
 Can anyone suggest any other good sites for information on building
 beowulf clusters or parallel processing?
 
 TIA,
 Kenny 


signature.asc
Description: This is a digitally signed message part


Re: Samba and XP Question

2004-05-18 Thread Kenneth E. Lussier
On Tue, 2004-05-18 at 10:06, Ed Lawson wrote:
> On Tue, 18 May 2004 09:42:55 -0400
> Mark Komarinski <[EMAIL PROTECTED]> wrote:
> 
> >
> > Yep.  You have to give a username and password at login time.  By
> > default, that is what is sent to Samba.  If it doesn't work, then
> > you're prompted for a password, which is why it doesn't autoconnect.
> 
> Being XP illiterate, I have a follow up question.  How do you configure
> XP to require asking for a password when you first log on to the
> machine?  Or can you?

You have to go into control panel -> user accounts -> "change an
account" -> set a password.

FYI,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Upgrading Multiple Servers?

2004-05-10 Thread Kenneth E. Lussier
On Sun, 2004-05-09 at 21:16, Kurth Bemis wrote:
> We have several servers, (OK lots of servers) that we use for hosting 
> websites, mail servers, firewalls, and billing and provisioning.
> 
> It's a real pain to ssh to each of the boxen and repeat the same process 
> again and again to upgrade apache,php,mod_perl,mod_ssl, system files, etc.
> 
> I'm wondering if anyone knows of a tool that will allow me to create one 
> "master" machine or image that can then be duplicated to the other 
> machines, so that all the machines are exact copies of each other.
> 
> The config and users files are on separate partitions then the binaries 
> so that's not an issue.
> 
> The solution needs to scalable, as we are adding machines every other 
> week it seems.

I can't remember the name of the software, and I'm not even sure that it
is available anymore, but VA Software, back when they were VA Linux had
a deployment system for just this purpose. You built a "Golden System"
and a "Golden Server". The Golden System was built out exactly the way
you wanted it. The golden server ran VA's software, and it monitored the
golden system for changes. On all of the other machines, you installed a
small agent. If the golden system changed, then the golden server would
send out the information to all of the agents and update them. You could
also put a new box on the network and it would install itself from the
golden server. It was meant for rapid deployment in changing
environments. 

Any of the VA Software people out there remember this software?

C-Ya,
Kenny  


signature.asc
Description: This is a digitally signed message part


Re: IRC Server

2004-05-04 Thread Kenneth E. Lussier
On Tue, 2004-05-04 at 11:58, Cole Tuininga wrote:
> 
> I haven't used IRC in quite some time.  Anybody have recommendations for
> IRC server software?  Their needs are fairly simple - they really just
> need a single channel for the most part.  Requiring a password to
> connect to the server would be a plus.
> 
> Any thoughts?

I've been running SILC (Secure Internet Lice Conferencing
http://silcnet.org/ ) for a while now, and it's pretty good. There are
clients for Linux, Windows, and Mac OSX. There is also a GAIM plugin.
It's not IRC, but it accomplishes the same thing, and it works the same.
Just a different protocol.

C-Ya,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: extract all text lines between 2 lines in a file?

2004-04-07 Thread Kenneth E. Lussier
On Wed, 2004-04-07 at 14:31, Tom Buskey wrote:
> I have a file:
> 
Would you care to share the file with us? Or are you just bragging
because you have a file? ;-)

C-Ya,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Floppy

2004-03-15 Thread Kenneth E. Lussier
On Sun, 2004-03-14 at 13:37, D. Mo wrote:
> Hey there.  I'm sure someone out there can help with this.
> 
> Got a friend who is interested in trying out Linux.  Has an old 386 to play
> with which doesn't have a CD drive.  Was wondering if anyone has an old
> version out there on floppies?

Well, if the old system has a network connection, he can download the
Debian floppies and do a network install. The floppies are available
from 
http://www.debian.org/distrib/floppyinst

C-Ya,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: List Archive (Was: Re: p2p, anonymity and security)

2004-03-12 Thread Kenneth E. Lussier
On Fri, 2004-03-12 at 07:19, Travis Roy wrote:
> > Then I suggest you look at the archives of some mailing list software
> > mailing lists...  The idea is often brought up there, for the very
> > same reasons I brought them up here (originally).  Personally, I find
> > the notion that I should be required to provide personally identifying
> > information to the whole world in order to participate in a public
> > forum to be offensive, and contrary to the priciples by which the
> > United States of America was founded.  It does not need to be, and
> > should not be so.  That so few people value their 4th amendment right
> > to privacy is a travesty.
> 
> If that is true, perhaps you shouldn't have your webpage address in 
> your sig:
> 
> [dslv-1-175:~] travis% whois pizzashack.org
> 

I have stayed out of this until now, as I don't really care all that
much about the public or private status of the GNHLUG list. I actually
thought that it was a closed list to keep RMS from posting rants about
how it should be called GNHG/LUG ;-)

However, I think that the posting of the whois information was not only
unnecessary, but completely inappropriate to the discussion. It does,
however, bring up a good point that is currently being debated: How
public should the whois database be? Does anyone really need to know
where Derek lives? Should it be common knowledge that Travis is in
apartment 4T? And, more importantly, why was all of this information
made to be public to begin with? Even the most simple minded can look up
whois data and abuse it.  And anyone with malicious intent can take it
further and use that information for harassment, or more nefarious
things. 

So, mailing lists aside, just how much privacy are we *FORCED* to give
up to participate in this whackey little thing that we called the
internet? And who decides what amount of lost privacy is ok? 

C-Ya,
Kenny





signature.asc
Description: This is a digitally signed message part


Re: Photo Album

2004-03-11 Thread Kenneth E. Lussier
On Thu, 2004-03-11 at 10:46, Cole Tuininga wrote:
> Hi all - I'm looking to replace my current web based photo album
> software as the current one has some security issues.  Anybody have
> suggestions for or against any particular software?

I have used several different photo albumn systems, and they all have
their flaws. I have been using Gallery (http://gallery.sourceforge.net/)
for a while now, and it does all of the things that you need, including
the comments. 

C-Ya,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: Another OSS project ends

2004-03-02 Thread Kenneth E. Lussier
On Tue, 2004-03-02 at 08:43, Dan Jenkins wrote:


> It's already been picked up and the project is now named OpenSWAN with 
> code available here:
> http://www.openswan.org/
> Apparently it had already forked.

FreeS/WAN has been forked many times over the past five years. Usually
it is because of their refusal to accept patches or code of any kind
from anyone in the U.S. KAME and USAGI are both based on FS, but they
used the 1.9 tree as their base, and they excluded the Opertunistic
Encryption. I'll have to take a look at the OpenSwan project to see how
they have progressed. 
 
> Death [of a project] is not final for open source. (Disinterest in a 
> project might kill it, but the source lives on, FWIW.)

This is true. It is, IMNSHO, one of the best aspects of F/OSS. Even if
the license is changed to make it no longer F/OSS, the previous releases
will always remain, and if the project is good enough, then it will be
picked up. 

C-Ya,
Kenny


signature.asc
Description: This is a digitally signed message part


Another OSS project ends

2004-03-02 Thread Kenneth E. Lussier
In case people missed this, the FreeS/WAN project has decided to end
development. They have posted a letter stating their reasons here
http://www.freeswan.org/ending_letter.html . I, for one, am very sad to
see the project end, as it is one of the best IPSec implementations, and
they were quite open about how and why they made the design choices that
they did.   

 


signature.asc
Description: This is a digitally signed message part


Qmail Help

2004-03-01 Thread Kenneth E. Lussier
I am guessing that there are many on the list that are far more
knowledgeable about qmail than I. Qmail does not do deferal notices
like sendmail does. When someone sends an e-mail and it goes through
sendmail, sendmail tries to send it, but it lets you know (by default)
at four hours and five days that it hasn't been delivered yet, and then
after 7 days, it gives up. With Qmail, it sits in the queue for a week
before gicing up. It tells you that it gives up, but byu then, the mail
has been sitting around for a week. I know that you can modify the
queuelifetime, but that just kills the message after a certain amount of
time. What I want it to do is to notify the sender after a few hours and
a few days if it has not been sent. Does anyone know how to do this?

TIA,
Kenny

P.S. Switching to Sendmail is not a viable option at this point. 


signature.asc
Description: This is a digitally signed message part


Re: looking for Word 2000 "Review Toolbar" equivalent in OpenOffice

2004-03-01 Thread Kenneth E. Lussier
On Mon, 2004-03-01 at 16:28, Kevin D. Clark wrote:
> In Word 2000 if I navigate thusly:
> 
>   Edit -> Toolbars -> Reviewing
> 
> I get a toolbar that allows me to see a reviewer's comments on a
> document.
> 
> Is there equivalent functionality in OpenOffice 1.1?  I checked but
> nothing obvious presented itself.

I believe that you have to set the document up to track changes before
it is changed. You can also compare two documents against each other,
one from before the changes and one after. If you go to help -> contents
and type in "review" in the index search, there is more information.

FYI,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: Desktop Linux (fwd)

2004-02-25 Thread Kenneth E. Lussier
On Wed, 2004-02-25 at 11:52, Michael Costolo wrote:
> --- Jon maddog Hall <[EMAIL PROTECTED]> wrote:
> > You are right that Linux will fail on most at-home desktops in 2004-2005
> > because of a lack of "cool" software.
> 
> Would you define "cool" software?  Frankly, I am of the opinion that Linux comes
> with lots of cool software.  Or at least, lots of cool software runs under Linux (my
> apologies for the pedantry).  But being a physicist, I suppose my geek factor is
> pretty high.  What "cool" apps would you say are currently lacking for (non-geek)
> families?  

I would agree with Maddog's assessment on this point. "Cool Software" in
a family setting is usually defined in a few ways:

1) The most popular games that all of little Johny's friends have
2) Children's educational software (although I think that teaching your
4-year old Perl is a good thing ;-)
3) The applications that Mom and Dad use at work.

Also, note that "cool software" does not have to mean that the software
itself does cool things. In a general home setting, "cool software" is
the software/programs/games/apps that everyone you know has. Another
thing to keep in mind is the notion of "supported applications" that are
listed on high-speed internet connection provider web sites. Most of
them will list Internet Explorer and OutlookExpress. The perception to
many people is that their access provider will not support you if you
use anything other than the listed applications

Because of this, the adoption of software that very few people that the
average person knows use (i.e. Linux and Linux-based apps) will be slow.
 
> > It will also fail because the normal "support line" of at-home desktops
> > (the church, the club, the nextdoor neighbor) will not be there in 2004-2005
> > because it is not being used at work in 2002-2003.  
> 
> I am sure that some LUG members and Linux-using nonmembers go to churches, clubs, or
> have neighbors.  A good percentage of the traffic on this list is "how do I" sorts
> of questions.  I have found the Linux community to be exceptionally knowledgeable
> and willingly helpful with respect to day-to-day as well as the more complicated
> problems/issues.  Is this not the "alternate support line" you speak of?  If not,
> why not?  

The average home user wants a technical support number, not a mailing
list. Besides, if their problem is a networking problem, or they can't
get their e-mail to work right, then they have no help. You are right
that most of us know people through outside associations, and we could
help out our neighbor if they needed it. However, if you count the
number of Linux users versus the number of Windows users, then it is
clear that there are more people able to help in the Windows world.

> And does the acceptance of Linux on the desktop at home *really* depend on people
> using Linux at work?  I work with lots of folks who have used, for example,
> Microsoft products at work for years but are absolutely useless when it comes to
> (platform related) problem solving.

Yes, it really does depend on the use of Linux at work. People want to
use what they are familiar with. They use a computer at work far more
then they do at home, so the one at work is where they gain their
experience. At work, the only people who are using Linux are the
"techies" and "the IT guy". Since the average user doesn't think of
themselves as the same type of person as those that they know use Linux,
they are disinclined to  use Linux out of a perceived inferiority. 

> It would seem to me that the infrastructure you speak of needing already exists. 
> Perhaps it is more of an advertising/awareness problem?

There are definitely problems with the marketing of Linux. All of the
ads that I have seen are aimed at corporate infrasturcture (the IBM
ads), not the home user. That is because IBM doesn't want to deal with
the end users. As a matter of fact, there is almost no advertising done
for Linux by anyone that is interested in the desktop market. These are
small companies that don't have an advertising budget thatwill allow
them to reach the masses. 

C-Ya,
Kenny



signature.asc
Description: This is a digitally signed message part


Re: Samba related question.

2004-02-11 Thread Kenneth E. Lussier
On Wed, 2004-02-11 at 11:31, Ed Lawson wrote:

> 
> My question relates to getting the Windows boxes to resolve the linux
> box by name.  He uses the combo DSL modem/router as a DHCP server.
> There is no local DNS server, the router points to the ISP's DNS.  The
> local boxes do not have hosts files for the other machines since DHCP is
> used.

You can still use hosts files, which will superseed the DNS entries (I
think on Windows, the hosts file is in C:\windows/drivers/etc or
something like that).

>  The linux box is getting its network info from the router and can
> access the Internet and any local machine can ping the linux box by
> using the assigned IP, but cannot ping it by name. Apparently the name
> of the linux box show up in the network neighborhood, but clicking on
> the icon results in a message about not finding machine on network.

The Network Neighborhood is using WINS to detect the Linux box. What you
are describing sounds like the Windows box is not authorized to connect
to the samba server. This is usually because Windows is using encrypted
passwords and samba isn't or vice versa. 

>  The
> router shows no name for the linux box in the connections page. To me
> this means the DHCP client is not sending its hostname.

DHCP doesn't assign hostnames, it assigns IP addresses (and other
various info). DNS is used to resolve those IP addresses to names. You
can have a box that has foo for a hostname, 192.168.1.2 for an IP
address, and an entry in DNS that resolves 192.168.1.2 to the name
bar.domain.com. You can ping 192.168.1.2 or bar.domain.com, but the name
foo will show up in network neighborhood and it cannot be ping'd by foo
(if there is a WINS server in the picture, you can make this even more
convoluted). 

He needs to either run a local DNS server with all of the names and IP
addresses in it, or set up hosts files on each of the machines. Or he
could use samba as a WINS server to keep track of everything. He also
needs to either enable plain-text passwords on the Windows side or
enable encryption on the samba side (whichever he isn't doing now), and
make sure that he has accounts on the samba server in the smbpasswd
file. 
 
> I have not encountered this problem before, but not familiar with RH9.
> 
> If the DHCP client sends a hostname, shouldn't that take care of this?
> By that I mean the other clients will get the name of the linux
> box from the DHCP server on the router associated with the IP.
> 
> TIA
> 
> Ed Lawson
> ___
> gnhlug-discuss mailing list
> [EMAIL PROTECTED]
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>
SentitO


signature.asc
Description: This is a digitally signed message part


Re: piercing corporate FW outbound

2004-02-06 Thread Kenneth E. Lussier
On Fri, 2004-02-06 at 15:01, Brian H. Chabot wrote:

> 
> >  and what can I now do to obtain
> > my promised access, short of soiling my network by
> > bringing a Windows box in and running the officially
> > blessed VPN client?
> 
> Do as search for the Linux PPTP HowTo.  You may need to recompile your 
> kernel to support MMPE.

If they have a clue, they are not using PPTP, they are using IPSec (MPPE
is a joke). I don't think that the contivity switch even supports pptp
anymore.


FYI,
Kenny


signature.asc
Description: This is a digitally signed message part


Re: piercing corporate FW outbound

2004-02-06 Thread Kenneth E. Lussier
On Fri, 2004-02-06 at 12:35, Michael ODonnell wrote:

>  and what can I now do to obtain
> my promised access, short of soiling my network by
> bringing a Windows box in and running the officially
> blessed VPN client?

I have heard theories that you could possibly do something like run a
VNC server on your home system that would allow you to connect via
actual https, which would then allow a shell to be opened so that you
ssh into your network from just outside of it. However, proposing such a
convoluted scenario would be against my nature ;-) Either that or just
use netcat ;-)



signature.asc
Description: This is a digitally signed message part


Re: piercing corporate FW outbound

2004-02-06 Thread Kenneth E. Lussier
On Fri, 2004-02-06 at 14:09, Michael ODonnell wrote:

> 
> Interesting.  Has anybody ever seen FreeSwan interoperate
> with the VPN implementation in Nortel Contivity switches?

The Nortel Contivity switch was one of the first commercial VPN's to
support connectivity with FreeS/WAN. However, it requires that the NCS
be set up to allow the tunnel. 

However, there is a Linux client for the NCS, and it actually works
quite well. It was originally written by NewOak (who originally designed
the box), who was bought by Bay, who was bought by Nortel. 

FYI,
Kenny

-- 
Kenneth E. Lussier <[EMAIL PROTECTED]>
SentitO


signature.asc
Description: This is a digitally signed message part


Custom Distro

2003-12-30 Thread Kenneth E. Lussier
Hi All,

I know that this came up a while back, but I couldn't find an answer in
the archives. What I am looking to do is create a custom Debian-based
install. I want users to be able to put the CD in the system, turn it
on, and be prompted for minimal info (i.e. hostname, ip address, root
password, etc.). Then have only the packages on the CD be installed. Has
anyone doen this?

TIA<
Kenny





signature.asc
Description: This is a digitally signed message part


Re: A good LINUX magazine ?

2003-12-24 Thread Kenneth E. Lussier
On Wed, 2003-12-24 at 11:15, Sharpe, Richard wrote:
> Can anyone recommend a good LINUX magazine ?  

Well, Linux Journal (http://www.linuxjournal.com) jumps to mind.

C-Ya,
Kenny

  



signature.asc
Description: This is a digitally signed message part


Re: CUPS help

2003-12-09 Thread Kenneth E. Lussier
On Tue, 2003-12-09 at 10:36, Dan Coutu wrote:

> Well first the direct answer to your last question about username and 
> password in the URL. Do this:
> 
> http://username:[EMAIL PROTECTED]/path/file
> 
> I'd assume that the ipp syntax would be the same.

I thought the same thing. However, it didn't work. CUPS didn't like it. 
 
> Secondly, you may find it easier to setup Samba to deal with the printer 
> installation because it can
> be setup so that when a Windows system adds the shared printer the 
> proper printer drivers can be
> downloaded to the Windows system. Pretty cool trick.

This was my first method of solving the problem. And it worked nicely.
Until I was informed of the actual need ;-) Apparently, what I am doing
is setting up a PDF generator so people can just hit "print" and get an
e-mail with a URL to their PDF file. (I really wish people would define
their needs better before asking for help)

 I found a system that will work nicely called Alambic
(http://alambic.iroise.net/en/index.html). I had to divert from the
systems plans and use a different printer driver then the one they say
to use (AdobePS driver). Once I used a standard Windows printer driver
(HP postscript), I was prompted for the user/passwd. 

Thanks,
Kenny




signature.asc
Description: This is a digitally signed message part


CUPS help

2003-12-09 Thread Kenneth E. Lussier
Hi All,

I have started playing around with CUPS (finally). I have one small
question about (who wouold have guessed it), Windows clinets. I can
point them to http://server:631/printers/foo and everything works fine.
The problem starts when I enable basic authentication on the CUPS
server. I can add authentication to an existing printer on the Windows
side, but I can't install a new printer because access is denied. Does
anyone know how to specify the username and password as part of the
ipp/http URL?

TIA,
Kenny




signature.asc
Description: This is a digitally signed message part


Fwd: Linux Sysadmin

2003-11-05 Thread Kenneth E. Lussier
Hi All,

Sorry for the cross-posting, but I figured that I could reach more
people this way, and fill this position faster. If anyone has any
questions on the job below, please e-mail me directly. Anyone who is
interested, please send salary requirements and resumes to
[EMAIL PROTECTED]

C-Ya,
Kenny

-Forwarded Message-

From: Kenneth E. Lussier <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Linux Sysadmin
Date: 05 Nov 2003 09:05:16 -0500

Location: Westford Ma
Position: Systems Administrator

This position is for a one-person systems administration team in charge
of Linux and Solaris servers, end-user desktop support, remote access,
and some customer support. You will also be in charge of IT decision
making for new PC's, laptops, servers, etc. The right candidate  will be
self-motivated and able to work completely unsupervised.

Required Skills:

Linux (preferably Debian, but any will do)
Old Solaris
High Score in Solitaire
Windows (NT, 2K, XP for desktop suport)
Scripting (bash, sh, Perl, whatever)
Caffeine addiction
VPN's (IPSec, PPTP)
Apache
Light house keeping
Cisco IOS (for firewall and router)



Desired (but not really expected) Skills:

SQL (MySql, PostgreSQL, MSSQL)
PHP
Any programming language
Probably other stuff that I can't think of


Interested parties should send their resume and salary requirements to
[EMAIL PROTECTED]


-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


OT: Video formats

2003-11-03 Thread Kenneth E. Lussier
Hi All,

Sorry for the OT post. Anyway, on to the off-topic at hand:

My digital camera does 1 minute movie clips. However, it writes them as
.MOV files, which I can only seem to view with Quicktime (even though
the manual says that they are "Motion JPEG" files). Does anyone know how
I can convert these files to mpeg, or another more useable format?
Eventually I plan on converting them into some streaming format for use
on the web... Any ideas?

Thanks,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Kenneth E. Lussier
On Fri, 2003-10-31 at 09:19, Joshua S. Freeman wrote:
> would someone kindly let me know what changes I need to make to my host
> file in order to fix this?
> 
> J.

It may not be your DNS servers fault. If your ISP is not forwarding
reverse lookups to your DNS server, but trying to answer them
themselves, then that would be the problem. On your DNS server, you
should have have a reverse file (either a rev.x.x.x or db.x.x.x, or
whatever you file aming scheme is). That should have the numbers that
you have in your IP lock. In your named.conf fle, you should have a
section like this:

zone "x.x.x.in-addr.arpa" {
  notify yes;
  type master;
  file "db.x.x.x";
};

Where x.x.x is is the network numbers that you use. The corresponding
file should have:

1   PTR mail.threeofus.com.
2   PTR server.threeofus.com.

etc. etc. etc.

C-Ya,
enny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Kenneth E. Lussier
On Fri, 2003-10-31 at 08:22, Joshua S. Freeman wrote:
> alright, but why is it also bouncing when sent using my own smtp server
> which, afaik, is not blacklisted anywhere...


> > >- The following addresses had permanent fatal errors -
> > > <[EMAIL PROTECTED]>
> > >
> > >- Transcript of session follows -
> > > ... while talking to relay.verizon.net.:
> > > >>> MAIL From:<[EMAIL PROTECTED]> SIZE=456
> > > <<< 550 You are not allowed to send mail:sc019.verizon.net
> > > 554 <[EMAIL PROTECTED]>... Service unavailable
> > > 

I just did an nslookup on the MX record for your domain, threeofus.com.
I got the IP address of mail.threeofus.com. When I did a lookup on the
IP address, I got an NXDOMAIN error. There is apparently no reversae
lookup for your mail server. Some people configure their mail servers to
only accept mail from servers that can be reversed. I recently had the
same problem at work when our ISP mysteriously pointed reverse lookups
to the wrong place. 

This, plus optonline being a spammers haven may explain everything.

HTH,
Kenny


-- 
------------
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: IMAP debate [was Re: Blackberry-like device, MacOS X, and/or IMAP? ]

2003-10-20 Thread Kenneth E. Lussier
On Sun, 2003-10-19 at 12:27, p.lussier wrote:

> The nice thing about Cyrus, from what I've seen is that it's similar 
> to MH in the sense that each message is a separate file.  You want to 
> delete a message, you delete that file. You need to rename a folder, 
> you mv the directory.

> The other nice thing about it is the database for user 
> authentication.  There's no need to add a system user account for 
> someone who just wants to get e-mail.  UW-IMAP is another UW student 
> project gone awry :)

This is how Maildir works. Another problem that can arise from mbox
format is that if a user collects mail and never deletes anything
(usually people that sit in corner offices), then it is possible that
the mbox file can grow to >2GB. If your file system isn't properly
equiped to handle single files >2GB, then once they hit it, they are
done (and mail bounces because it can't be written to the file). Of
course, those people should be forced to take a course in remedial
e-mail, but try telling them that ;-)

I've been using Courier for about 2 years now, and I love the maildir
format. Courier also allows for "virtual" users, so you don't have to
have system accounts. You can authenticate against an SQL database, an
LDAP directory, etc. 

C-Ya,
Kenny  
-- 
--------
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Blackberry-like device, MacOS X, and/or IMAP?

2003-10-15 Thread Kenneth E. Lussier
On Wed, 2003-10-15 at 10:46, Paul Lussier wrote:
> 
> Hi all,
> 
> Does anyone know of anything like the Blackberry which either supports
> MacOS X (which the Blackberry does not!) OR has an IMAP/SSL capable
> e-mail client?
> 
> The basic requirements are:
> 
>   - A Cell Phone w/ a service provider with good nation-wide coverage
>   - Must support Mac OS X
>   - Must be able to provide access to e-mail

Does it actually have to have an IMAP client? Could you just use an
SSL-enabled web browser on the device to access an SSL web-based mail
client (such as TWIG/TWIGGI, Squirrel mail, etc.)?

C-Ya,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: FTP "securing"

2003-10-09 Thread Kenneth E. Lussier
On Thu, 2003-10-09 at 09:27, Larry Cook wrote:
> Hi Kenny,

> 
> It doesn't look like a solution has presented itself yet.  Maybe you could
> take a step back and look at the requirements and possibly come up with a
> non-FTP solution.
> 
> For starters, I present a few (naive) questions, not because I want an answer,
> but to generate some thought on the real requirements:
> 
> * Why are there seven FTP servers?

Location, location, location. We have servers around the world in
different offices so that people can dowload from a closer mirror.

> * Can anonymous FTP be used?

No. (more on this below)

 
> * Is FTP required, or could HTTP be used?

This is a possibility that I hadn't really considered. But, given all of
the responses indicating that it would be a good alternative, I am going
to look into it.
 
> * Are the patches small enough to be emailed?

No. Most patches are between 20 and 50M

> * Could you email the username/password or URL so it's not on the webpage?
> 
> * Why is this even an issue?  You don't want them to see the 
> username/password, but you give them the convenience to just click a link to 
> get the file.  So securing the file doesn't seem to be the issue, so why not 
> just mirror the patches on the website for HTTP download?

There is more to this problem then I stated originally, but I will come
clean now. The patches are only available to customers who are on
support contracts. The problem that we ran into was that using anonymous
FTP allowed some of the smarter users to bookmark the location, then
download patches after they went off maintenence. This remains somewhat
of a problem, because some of the smarter users have copied down the
username and password as well. I have no problem changing the passwords
weekly, but there is signifigant push-back from the other offices
because it is "too inconvenient". So, I would like a way to lock it down
so that people don't know the username and password for when they go off
maintenence. I have suggested putting the patches on the web server, but
then we get into authentication issues (users are authenticated against
a database that is located in England), as well as other company issues.

Thanks,
Kenny
-- 
------------
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


FTP "securing"

2003-10-08 Thread Kenneth E. Lussier
Hey all,

I know, you can't secure FTP However, I need to figure something
out. We have customers that access our customer support website, and
from there, they download patches. However, when they mouse over the
link, they can see the FTP username and password. Does anyone know of a
way to either obfuscate the username and password so that they can never
see it, or to some way work around this problem? If it were a single FTP
server, then changing the password every day would be easy, but there
are seven FTP servers all over the world to deal with. Anyone have any
thoughts?

TIA,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


apt-get errors

2003-09-29 Thread Kenneth E. Lussier
Hi All,

Has anyone seen this before? I get this error whenever I try to run
apt-get, no matter which action I give it (install, check, -f missing,
etc.). 

brodie2:/home/klussier# apt-get -f install
Reading Package Lists... Error!
E: Dynamic MMap ran out of room
E: Error occured while processing xine-ui (NewVersion1)
E: Problem with MergeList /var/lib/dpkg/status
E: Unable to write mmap - msync (14 Bad address)
E: The package lists or status file could not be parsed or opened.

TIA,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Apache Chain Proxies

2003-09-10 Thread Kenneth E. Lussier
Hi All,

I find myself having to do something with Apache that I have never done,
and my Apache book is at home I have apache set up as a proxy
server. However, I need to set up a chain so that if my proxy server
can't find something, it sends it off to a different proxy server. I
looked at the Apache docs on the web, but I'm not really sure which
proxy directive I need. Any know this off the top of their heads?

TIA,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: OT: Network problem

2003-08-29 Thread Kenneth E. Lussier
On Thu, 2003-08-28 at 18:34, Neal Richardson wrote:

>  
>  My question is this:  Is this normal behavior to have the whole network 
> go down due to a mis wired cable. I can understand the hub not working 
> but to cause the whole thing to crash seams bizarre to me

Well, I have seen stranger things happen. Was there anything connected
to the hub when you plugged it into the switch? If it's just a dumb hub,
and something that was connected to it was misconfigured (i.e. had the
same IP address of the switch or router), then it could take down the
whole network. If it was, in fact, just a bad cable, then depending on
how it was wired, it could take out the network. However, I certainly
wouldn't call it "normal behavior".

C-Ya,
Kenny
 
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Osirusoft blacklists the world

2003-08-28 Thread Kenneth E. Lussier
On Wed, 2003-08-27 at 23:17, Derek Martin wrote:
> On Wed, Aug 27, 2003 at 09:58:44PM -0400, [EMAIL PROTECTED] wrote:
> > > If you still think RBLs are a good idea, here's one example of why they're
> > > not...
> > 
> >   Ahem.  Profesionalls in the field will tell you that using a third-party
> > blacklist -- especially one like SPEWS! -- as a sufficient criteria to block
> > is a really dumb idea.  
> 
> And just as many, if not more,  will tell you it's the best thing
> since sliced bread.

Blacklists are a good thing. But, like anything else, they are not a
solution unto themselves. They need to be part of a process. Blacklists
provide one layer of protection, but they should not be considered a
silver bullet. Some people will say that any layer of protection is
better than nothing. Of course, those people are without e-mail right
now because their blacklist service is offline right now ;-)

It's just like a firewall. Having a firewall doesn't mean that you are
completely safe from the nastyness of the internet. It's part of an
overall strategy. Multiple layers, backup plans, and alternatives. 

C-Ya,
Kenny
-- 
----------------
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Video Conferencing

2003-08-01 Thread Kenneth E. Lussier
On Fri, 2003-08-01 at 14:43, Thomas Charron wrote:
> > On Fri, 2003-08-01 at 10:25, Kevin D. Clark wrote:
> >> I'd recommend checking out the stuff at http://www.openh323.org/ .
> > A-HA! Thanks, Kevin. I was looking at their site, trying to figure out
> > what was what. I'm going to download all of this stuff and see if I can
> > get some of it to work.
> 

>   Set up an H.323 Gatekeeper.  This software serves as kind of the
> directory service for things like address books, etc.  When 'signing
> in', you'd sign in to the gatekeeper.  When you wanted to make a call,
> the client would send a message to the gatekeeper saying 'I wanna call
> Ken', and the gatekeeper would 'set up' the call and provide the data to
> both client so they could connect.

So the gatekeeper is what does all of the connection handling, so to
speak. Is the MCU part of the gatekeeper? This is where the
documentation is lacking. There seem to be quite a few componants, no
real explaination for what they are and what they do. They assume that
if you're reading the doc, then you already know what you're doing. Bad
assumption in my case ;-)
 
>   Mess around with any H.323 compliant clients.  ANY client that is H.323
> compliant, including netmeeting, will be able to use the above installed
> gatekeeper.
> 
>   Now, TECHNICALLY the gatekeeper isnt REQUIRED, however.  I would STONGLY
> advise to use one.  It makes administration and use MUCH easier, and
> would allow controls to be put in place..
> 
>   A REALLY good 'What is H.323' can be found here: 
> http://www.iec.org/online/tutorials/h323/index.html

Thanks for the linkage. I'll start reading

>   Note that H.323 isnt the only game out there.  SIP provides virtually
> the same.  H.323 is much better in a smaller environment, while SIP is
> more, hrm..  'Large User Base' driven.  However, the differences between
> H.323 and SIP are more in how they figure out who to call, request
> calls, setup things, etc..  In the end, call quality and the such is
> much more dependant on the codec and protocol used to carry the call..

I thought that SIP was more used in the VoIP world. H.323 seems to be
more standard in that most of the commercial equipment uses it, and most
of the software packages (netmeeting, gnomemeeting, etc.) use it as
well, allowing one to connect a small web cam up to a larger
teleconferencing system.

Thanks,
Kenny

 
> ___
> gnhlug-discuss mailing list
> [EMAIL PROTECTED]
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: amanda defs for an hp c1533a 4/8gb dds2 dat tape?

2003-08-01 Thread Kenneth E. Lussier
On Fri, 2003-08-01 at 14:54, Rodent of Unusual Size wrote:
> as the subject says, i want to set up amanda to back things up
> to an hp c1533a 4/8gb dat drive (the one in the system i
> bought from jacob towers of the trilug).  has anyone any
> details or particulars for setting this up with amanda?

The Amanda FAQ-O-Matic says:
http://amanda.sourceforge.net/cgi-bin/fom?_highlightWords=c1533a&file=72
 
C-Ya,
Kenny
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Video Conferencing

2003-08-01 Thread Kenneth E. Lussier
On Fri, 2003-08-01 at 10:25, Kevin D. Clark wrote:
> 
> "Kenneth E. Lussier" <[EMAIL PROTECTED]> writes:
> 
> > Has anyone done any video conference work on Linux? My company purchased
> > several Polycom systems for offices all over the world. However, only
> > one of them allows for multiple (4) connections. I was wondering if
> > there is a video conferencing server for Linux that would allow mulitple
> > connections to tie more people together. Unfortunately, I know little to
> > nothing about video conferencing technologies. I have found
> > "Gatekeepers", H.323 proxies, and a few other things, but I don't know
> > what any of them are, and the docs are scarce. Any pointers?
> 
> What you probably want is a H.323 Multiple Call Unit (MCU).
> 
> I'd recommend checking out the stuff at http://www.openh323.org/ .
> 

A-HA! Thanks, Kevin. I was looking at their site, trying to figure out
what was what. I'm going to download all of this stuff and see if I can
get some of it to work.

Thanks,
Kenny

-- 
------------
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Video Conferencing

2003-08-01 Thread Kenneth E. Lussier
Hi All,

Has anyone done any video conference work on Linux? My company purchased
several Polycom systems for offices all over the world. However, only
one of them allows for multiple (4) connections. I was wondering if
there is a video conferencing server for Linux that would allow mulitple
connections to tie more people together. Unfortunately, I know little to
nothing about video conferencing technologies. I have found
"Gatekeepers", H.323 proxies, and a few other things, but I don't know
what any of them are, and the docs are scarce. Any pointers?

TIA,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: OT: Help with computer config

2003-07-08 Thread Kenneth E. Lussier
On Tue, 2003-07-08 at 13:27, [EMAIL PROTECTED] wrote:
> Hello everyone!  My appologies for the OT post, but I am having a small amount
> of trouble with my new Linux box.  I just built the machine ( it is an AMD
> Athlon XP 1700, 1.47ghz).  My problem is, when it boots, it registers the
> following on the main screen:
> 
>  Unknown Processor  ( 1.100 ghz )
> 
> The problem is, it is not recognizing my processor and the 'ghz' is definately
> off.  I have an MSI K7TTurbo - Socket A motherboard.  I am just wondering, since
> it has been so very long since I built a computer, if anyone knows what is wrong
> that the processor is not recognized?   Any ideas are greatly appreciated!!!
> I have Linux installed and running, no problem, but I would really like it to
> see the processor.  

Just off the top of my head, you might want to make sure that you have
the latest BIOS revision. Also, check you BIOS settings and make sure
that you have the right clock multiplier settings. 

C-Ya,
Kenny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: web mail

2003-06-17 Thread Kenneth E. Lussier
On Tue, 2003-06-17 at 14:57, Derek Martin wrote:

> What are people using for webmail these days?  Squirrelmail?
> Something else?  War stories (good or bad)?

I'm using several different web mail systems. For strictly mail and mail
only, I use Twig ( http://twig.screwdriver.net/ ). It has basic mail,
addressbook, stuff like that. I've been using it for about two years
now. For more advanced "groupware" type of stuff, I use Twiggi (
http://sourceforge.net/projects/twiggi/ ), which is based on Twig, but
has more features, such as calendar, group calendars, etc. I have also
used IMP, which is part of the Horde project (http://www.horde.org). IMP
has become increasingly more and more difficult to set up because the
Horde framework that it is built on keeps getting more complex. 

FWIW,
Kenny
 
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: OT: Perl and Javascript

2003-06-10 Thread Kenneth E. Lussier
On Tue, 2003-06-10 at 16:31, [EMAIL PROTECTED] wrote:
> 
> In a message dated: Tue, 10 Jun 2003 16:24:43 EDT
> Morbus Iff said:
> 
> > >Since we seem to have an abundance of Perl experts today, I have a
> > >perplexing problem... I am trying to write a script that logs into a
> > >website. The problem that I am running into is that the website requires
> > >javascript. If the site detects that the "browser" doesn't support
> > >javascript, then it loads the login form as an "unmodifiable form text
> > >field" (as reported by lynx). Does anyone know a way around this?
> >
> >If the login is authenticated with javascript (?!!), then you're screwed. 
> >What web site is it? Your best bet is to find out what the javascript is 
> >exactly doing.
> 
> Which shouldn't be too hard, since you should be able to View->Source
> and see the java script lines to determine what's going on.

I was just looking at the source, and it looks like I have another
problem. The site *ALSO* requires cookies to be enabled (which I can get
around using HTTP::Cookies, I think). The login code on the site doesn't
use javascript, except for the button:









User
Name 


Password




I looked at CPAN, and I installed JavaScript-0.52. But, in all honesty,
I read through the documentaion on CPAN, and I think I'm more lost now
than I was 20 minutes ago!!

C-Ya,
Kenny
-- 
----
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


  1   2   >